diff --git a/.vscode/launch.json b/.vscode/launch.json index 47e07df0..4193ec70 100644 --- a/.vscode/launch.json +++ b/.vscode/launch.json @@ -4,7 +4,16 @@ // For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387 "version": "0.2.0", "configurations": [ - + { + "showGlobalVariables": true, + "name": "Debug: validate", + "type": "go", + "request": "launch", + "mode": "debug", + "program": "main.go", // "program": "${file}", + "args": ["validate", "-i", "examples/cyclonedx/SBOM/protonmail-webclient-v4-0912dff/bom.json"], + "dlvFlags": ["--check-go-version=false"] + }, { "showGlobalVariables": true, "name": "Debug: query: SELECT * FROM metadata.component", diff --git a/.vscode/settings.json b/.vscode/settings.json index 6d6b8b25..e29b82df 100644 --- a/.vscode/settings.json +++ b/.vscode/settings.json @@ -78,6 +78,7 @@ "MLBOM", "multimap", "myservices", + "NATS", "NOASSERTION", "nolint", "nosec", @@ -99,6 +100,7 @@ "PROPKEY", "protonmail", "repackager", + "rvoi", "rwxr", "SAAS", "SAASBOM", diff --git a/README.md b/README.md index 47f75d19..853eb756 100644 --- a/README.md +++ b/README.md @@ -941,6 +941,14 @@ A comma-separated list of JSON map keys. Similar to the [query command's `--sele A comma-separated list of JSON document paths using the same syntax as the [query command's `--from` flag](#query---from-flag). +##### Trim `--normalize` flag + +A flag that normalizes the BOM data after trimming and prior to output. + +This flag has custom code that sorts all components, services, licenses, vulnerabilities, properties, external references, hashes and *most* other BOM data using custom comparators. + +Each comparator uses `required` fields and other identifying fields to create *"composite keys"* for each unique data structure. + #### Trim examples The original BOM used for these examples can be found here: @@ -1133,6 +1141,180 @@ Output BOM results with `properties` removed from all `components`: --- +##### Example: Trim `bom-ref` and normalize output + +```bash +./sbom-utility trim -i test/trim/trim-cdx-1-5-sample-components-normalize.sbom.json --keys="bom-ref" --normalize -q +``` + +**Note** If you do not want to remove any keys and simply normalize output, set keys to an empty string: `--keys=""`. + +Use the trim command to remove all `bom-ref` fields and normalize output: + +```json +{ + "bomFormat": "CycloneDX", + "specVersion": "1.5", + "components": [ + { + "type": "library", + "bom-ref": "pkg:npm/sample@2.0.0", + "purl": "pkg:npm/sample@2.0.0", + "name": "sample", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "properties": [ + { + "name": "moo", + "value": "cow" + }, + { + "name": "foo", + "value": "bar" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/body-parser@1.19.0", + "purl": "pkg:npm/body-parser@1.19.0", + "name": "body-parser", + "version": "1.19.0", + "hashes": [ + { + "alg": "SHA-256", + "content": "ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad" + }, + { + "alg": "SHA-1", + "content": "96b2709e57c9c4e09a6fd66a8fd979844f69f08a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "id": "Apache-2.0" + } + } + ], + "externalReferences": [ + { + "type": "website", + "url": "https://example.com/website" + }, + { + "type": "support", + "url": "https://example.com/support" + } + ] + } + ] +} +``` + +Trimmed, normalized output: + +```json +{ + "bomFormat": "CycloneDX", + "specVersion": "1.5", + "components": [ + { + "type": "library", + "name": "body-parser", + "version": "1.19.0", + "hashes": [ + { + "alg": "SHA-1", + "content": "96b2709e57c9c4e09a6fd66a8fd979844f69f08a" + }, + { + "alg": "SHA-256", + "content": "ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/body-parser@1.19.0", + "externalReferences": [ + { + "type": "support", + "url": "https://example.com/support" + }, + { + "type": "website", + "url": "https://example.com/website" + } + ] + }, + { + "type": "library", + "name": "sample", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "purl": "pkg:npm/sample@2.0.0", + "properties": [ + { + "name": "foo", + "value": "bar" + }, + { + "name": "moo", + "value": "cow" + } + ] + } + ] +} +``` + ### Validate This command will parse standardized SBOMs and validate it against its declared format and version (e.g., SPDX 2.2, CycloneDX 1.4). Custom variants of standard JSON schemas can be used for validation by supplying the `--variant` name as a flag. Explicit JSON schemas can be specified using the `--force` flag. diff --git a/acdx.json b/acdx.json deleted file mode 100644 index 8d5d54ae..00000000 --- a/acdx.json +++ /dev/null @@ -1,29 +0,0 @@ -{ - "version": 1, - "bomFormat": "CycloneDX", - "specVersion": "1.4", - "components": [ - { - "name": "@ace/otc-components-react-3.0.11.tgz", - "version": "3.0.11", - "licenses": [ - { - "license": { - "id": "Requires Review" - } - } - ] - }, - { - "name": "@ace/otc-components-react-3.0.14.tgz", - "version": "3.0.14", - "licenses": [ - { - "license": { - "id": "Requires Review" - } - } - ] - } - ] -} diff --git a/cmd/diff.go b/cmd/diff.go index b460eda2..116f3622 100644 --- a/cmd/diff.go +++ b/cmd/diff.go @@ -151,8 +151,10 @@ func Diff(persistentFlags utils.PersistentCommandFlags, flags utils.DiffCommandF // #nosec G304 (suppress warning) bBaseData, errReadBase := os.ReadFile(inputFilename) if errReadBase != nil { - getLogger().Debugf("%v", bBaseData[:255]) - err = getLogger().Errorf("Failed to ReadFile '%s': %s", inputFilename, err.Error()) + if len(bBaseData) > 255 { + getLogger().Debugf("%v", bBaseData[:255]) + } + err = getLogger().Errorf("Failed to ReadFile '%s': %s", inputFilename, errReadBase.Error()) return } @@ -160,8 +162,10 @@ func Diff(persistentFlags utils.PersistentCommandFlags, flags utils.DiffCommandF // #nosec G304 (suppress warning) bRevisedData, errReadDelta := os.ReadFile(revisedFilename) if errReadDelta != nil { - getLogger().Debugf("%v", bRevisedData[:255]) - err = getLogger().Errorf("Failed to ReadFile '%s': %s", inputFilename, err.Error()) + if len(bRevisedData) > 255 { + getLogger().Debugf("%v", bRevisedData[:255]) + } + err = getLogger().Errorf("Failed to ReadFile '%s': %s", revisedFilename, errReadDelta.Error()) return } @@ -201,6 +205,7 @@ func Diff(persistentFlags utils.PersistentCommandFlags, flags utils.DiffCommandF getLogger().Warningf("Diff output format not supported for `%s` format.", format) } + // Output complete diff in either supported format fmt.Fprintf(output, "%s\n", diffString) } else { @@ -214,7 +219,7 @@ func Diff(persistentFlags utils.PersistentCommandFlags, flags utils.DiffCommandF func compareBinaryData(bBaseData []byte, bRevisedData []byte) (diffResults diff.Diff, err error) { defer func() { if recoveredPanic := recover(); recoveredPanic != nil { - fmt.Println("panic occurred:", recoveredPanic) + getLogger().Infof("ADVICE: Use the Trim command before Diff to remove highly variable data, such as: \"bom-ref\", \"hashes\" and \"properties\".") err = getLogger().Errorf("panic occurred: %v", recoveredPanic) return } diff --git a/cmd/diff_test.go b/cmd/diff_test.go index f4cceb68..9e4e166f 100644 --- a/cmd/diff_test.go +++ b/cmd/diff_test.go @@ -26,154 +26,93 @@ import ( ) const ( - TEST_CDX_1_4_MATURITY_EXAMPLE_1_DELTA = "test/diff/cdx-1-4-mature-example-1-delta.json" - TEST_ARRAY_ORDER_CHANGE_BASE = "test/diff/json-array-order-change-base.json" - TEST_ARRAY_ORDER_CHANGE_DELTA = "test/diff/json-array-order-change-delta.json" + TEST_DIFF_ARRAY_ORDER_CHANGE_BASE = "test/diff/json-array-order-change-base.json" + TEST_DIFF_ARRAY_ORDER_CHANGE_DELTA = "test/diff/json-array-order-change-delta.json" - TEST_ARRAY_ORDER_CHANGE_WITH_DELETE_BASE = "test/diff/json-array-order-change-with-delete-base.json" - TEST_ARRAY_ORDER_CHANGE_WITH_DELETE_DELTA = "test/diff/json-array-order-change-with-delete-delta.json" + TEST_DIFF_ARRAY_ORDER_CHANGE_WITH_DELETE_BASE = "test/diff/json-array-order-change-with-delete-base.json" + TEST_DIFF_ARRAY_ORDER_CHANGE_WITH_DELETE_DELTA = "test/diff/json-array-order-change-with-delete-delta.json" - TEST_ARRAY_ORDER_CHANGE_WITH_ADD_BASE = "test/diff/json-array-order-change-with-add-base.json" - TEST_ARRAY_ORDER_CHANGE_WITH_ADD_DELTA = "test/diff/json-array-order-change-with-add-delta.json" + TEST_DIFF_ARRAY_ORDER_CHANGE_WITH_ADD_BASE = "test/diff/json-array-order-change-with-add-base.json" + TEST_DIFF_ARRAY_ORDER_CHANGE_WITH_ADD_DELTA = "test/diff/json-array-order-change-with-add-delta.json" - TEST_ARRAY_ORDER_CHANGE_WITH_ADD_AND_DELETE_BASE = "test/diff/json-array-order-change-with-add-and-delete-base.json" - TEST_ARRAY_ORDER_CHANGE_WITH_ADD_AND_DELETE_DELTA = "test/diff/json-array-order-change-with-add-and-delete-delta.json" + TEST_DIFF_ARRAY_ORDER_CHANGE_WITH_ADD_AND_DELETE_BASE = "test/diff/json-array-order-change-with-add-and-delete-base.json" + TEST_DIFF_ARRAY_ORDER_CHANGE_WITH_ADD_AND_DELETE_DELTA = "test/diff/json-array-order-change-with-add-and-delete-delta.json" - TEST_ARRAY_ORDER_2_CHANGES_BASE = "test/diff/json-array-order-2-changes-base.json" - TEST_ARRAY_ORDER_2_CHANGES_DELTA = "test/diff/json-array-order-2-changes-delta.json" + TEST_DIFF_ARRAY_ORDER_2_CHANGES_BASE = "test/diff/json-array-order-2-changes-base.json" + TEST_DIFF_ARRAY_ORDER_2_CHANGES_DELTA = "test/diff/json-array-order-2-changes-delta.json" ) +// Test CycloneDX BOM deltas +const ( + TEST_DIFF_CDX_1_4_MATURITY_EXAMPLE_1_DELTA = "test/diff/cdx-1-4-mature-example-1-delta.json" + TEST_DIFF_CDX_1_4_MATURITY_EXAMPLE_2_DELTA = "test/diff/cdx-1-4-mature-example-2-delta.json" + + TEST_DIFF_CDX_1_5_VULNERABILITY_BASE = "test/diff/vulnerability/cdx-1-5-vulnerabilities-base.bom.json" + TEST_DIFF_CDX_1_5_VULNERABILITY_ADD_1 = "test/diff/vulnerability/cdx-1-5-vulnerabilities-delta-add-1.bom.json" + TEST_DIFF_CDX_1_5_VULNERABILITY_REMOVE_1 = "test/diff/vulnerability/cdx-1-5-vulnerabilities-delta-remove-1.bom.json" +) + +// Non-standard test files +const ( + TEST_DIFF_PANIC_BASE = "test/diff/panic/nats1.json" + TEST_DIFF_PANIC_DELTA = "test/diff/panic/nats2.json" +) + +type DiffTestInfo struct { + CommonTestInfo + RevisedFilename string + Colorize bool +} + +func (ti *DiffTestInfo) String() string { + buffer, _ := utils.EncodeAnyToDefaultIndentedJSONStr(ti) + return buffer.String() +} + +func NewDiffTestInfo(inputFile string, revisedFilename string) *DiffTestInfo { + var ti = new(DiffTestInfo) + ti.RevisedFilename = revisedFilename + var pCommon = &ti.CommonTestInfo + // Note: Diff is by default "txt" format + pCommon.InitBasic(inputFile, FORMAT_TEXT, nil) + return ti +} + // Tests basic validation and expected errors -func innerDiffError(t *testing.T, baseFilename string, revisedFilename string, format string, expectedError error) (actualError error) { +func innerDiffTest(t *testing.T, testInfo *DiffTestInfo) (actualError error) { getLogger().Enter() defer getLogger().Exit() - // Copy the test filename to the command line flags where the code looks for it - utils.GlobalFlags.PersistentFlags.OutputFormat = format - utils.GlobalFlags.PersistentFlags.InputFile = baseFilename - utils.GlobalFlags.DiffFlags.RevisedFile = revisedFilename - utils.GlobalFlags.DiffFlags.Colorize = true - - actualError = Diff(utils.GlobalFlags.PersistentFlags, utils.GlobalFlags.DiffFlags) + // Copy test parameters to persistent and command-specific flags + utils.GlobalFlags.PersistentFlags.OutputFile = testInfo.OutputFile + utils.GlobalFlags.PersistentFlags.OutputFormat = testInfo.OutputFormat + utils.GlobalFlags.PersistentFlags.InputFile = testInfo.InputFile + utils.GlobalFlags.DiffFlags.RevisedFile = testInfo.RevisedFilename + utils.GlobalFlags.DiffFlags.Colorize = testInfo.Colorize getLogger().Tracef("baseFilename: `%s`, revisedFilename=`%s`, actualError=`%T`", utils.GlobalFlags.PersistentFlags.InputFile, utils.GlobalFlags.DiffFlags.RevisedFile, actualError) + actualError = Diff(utils.GlobalFlags.PersistentFlags, utils.GlobalFlags.DiffFlags) + // Always compare actual against expected error (even if it is `nil`) - if !ErrorTypesMatch(actualError, expectedError) { + if !ErrorTypesMatch(actualError, testInfo.ResultExpectedError) { switch t := actualError.(type) { default: fmt.Printf("unhandled error type: `%v`\n", t) fmt.Printf(">> value: `%v`\n", t) getLogger().Error(actualError) } - t.Errorf("expected error type: `%T`, actual type: `%T`", expectedError, actualError) + t.Errorf("expected error type: `%T`, actual type: `%T`", testInfo.ResultExpectedError, actualError) } return } -func TestDiffCdx14MatureDeltaDefault(t *testing.T) { - err := innerDiffError(t, - TEST_CDX_1_4_MATURITY_EXAMPLE_1_BASE, - TEST_CDX_1_4_MATURITY_EXAMPLE_1_DELTA, - FORMAT_DEFAULT, - nil) - if err != nil { - t.Error(err) - } -} - -func TestDiffCdx14MatureDeltaText(t *testing.T) { - err := innerDiffError(t, - TEST_CDX_1_4_MATURITY_EXAMPLE_1_BASE, - TEST_CDX_1_4_MATURITY_EXAMPLE_1_DELTA, - FORMAT_TEXT, - nil) - if err != nil { - t.Error(err) - } -} - -func TestDiffCdx14MatureDeltaJson(t *testing.T) { - err := innerDiffError(t, - TEST_CDX_1_4_MATURITY_EXAMPLE_1_BASE, - TEST_CDX_1_4_MATURITY_EXAMPLE_1_DELTA, - FORMAT_JSON, - nil) - if err != nil { - t.Error(err) - } -} - -func TestDiffJsonArrayOrderMove2ObjectsFormatJson(t *testing.T) { - err := innerDiffError(t, - TEST_ARRAY_ORDER_2_CHANGES_BASE, - TEST_ARRAY_ORDER_2_CHANGES_DELTA, - FORMAT_JSON, - nil) - if err != nil { - t.Error(err) - } -} - -func TestDiffJsonArrayOrderMove1ObjectFormatJson(t *testing.T) { - err := innerDiffError(t, - TEST_ARRAY_ORDER_CHANGE_BASE, - TEST_ARRAY_ORDER_CHANGE_DELTA, - FORMAT_JSON, - nil) - if err != nil { - t.Error(err) - } -} - -func TestDiffJsonArrayOrderMove1ObjectFormatText(t *testing.T) { - err := innerDiffError(t, - TEST_ARRAY_ORDER_CHANGE_BASE, - TEST_ARRAY_ORDER_CHANGE_DELTA, - FORMAT_TEXT, - nil) - if err != nil { - t.Error(err) - } -} - -func TestDiffJsonArrayOrderMove1ObjectWithDeleteFormatText(t *testing.T) { - err := innerDiffError(t, - TEST_ARRAY_ORDER_CHANGE_WITH_DELETE_BASE, - TEST_ARRAY_ORDER_CHANGE_WITH_DELETE_DELTA, - FORMAT_TEXT, - nil) - if err != nil { - t.Error(err) - } -} - -func TestDiffJsonArrayOrderMove1ObjectWithAddFormatText(t *testing.T) { - err := innerDiffError(t, - TEST_ARRAY_ORDER_CHANGE_WITH_ADD_BASE, - TEST_ARRAY_ORDER_CHANGE_WITH_ADD_DELTA, - FORMAT_TEXT, - nil) - if err != nil { - t.Error(err) - } -} - -func TestDiffJsonArrayOrderMove1ObjectWithAddAndDeleteFormatText(t *testing.T) { - err := innerDiffError(t, - TEST_ARRAY_ORDER_CHANGE_WITH_ADD_AND_DELETE_BASE, - TEST_ARRAY_ORDER_CHANGE_WITH_ADD_AND_DELETE_DELTA, - FORMAT_TEXT, - nil) - if err != nil { - t.Error(err) - } -} - +// TODO: support testing if "deltas" expressed in JSON diff records +// match expected output records. // func debugDeltas(deltas []diff.Delta, indent string) (err error) { // for _, delta := range deltas { // //fmt.Printf("delta: %v\n", delta) @@ -223,3 +162,119 @@ func TestDiffJsonArrayOrderMove1ObjectWithAddAndDeleteFormatText(t *testing.T) { // func Colorize(color string, text string) (colorizedText string) { // return color + text + Reset // } + +func TestDiffJsonArrayOrderMove2ObjectsFormatJson(t *testing.T) { + ti := NewDiffTestInfo(TEST_DIFF_ARRAY_ORDER_2_CHANGES_BASE, TEST_DIFF_ARRAY_ORDER_2_CHANGES_DELTA) + ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_DIFF_ARRAY_ORDER_2_CHANGES_DELTA) + err := innerDiffTest(t, ti) + if err != nil { + t.Error(err) + } +} + +func TestDiffJsonArrayOrderMove1ObjectFormatJson(t *testing.T) { + ti := NewDiffTestInfo(TEST_DIFF_ARRAY_ORDER_CHANGE_BASE, TEST_DIFF_ARRAY_ORDER_CHANGE_DELTA) + ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_DIFF_ARRAY_ORDER_CHANGE_DELTA) + err := innerDiffTest(t, ti) + if err != nil { + t.Error(err) + } +} + +func TestDiffJsonArrayOrderMove1ObjectFormatText(t *testing.T) { + ti := NewDiffTestInfo(TEST_DIFF_ARRAY_ORDER_CHANGE_BASE, TEST_DIFF_ARRAY_ORDER_CHANGE_DELTA) + ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_DIFF_ARRAY_ORDER_CHANGE_DELTA) + err := innerDiffTest(t, ti) + if err != nil { + t.Error(err) + } +} + +func TestDiffJsonArrayOrderMove1ObjectWithDeleteFormatText(t *testing.T) { + ti := NewDiffTestInfo(TEST_DIFF_ARRAY_ORDER_CHANGE_WITH_DELETE_BASE, TEST_DIFF_ARRAY_ORDER_CHANGE_WITH_DELETE_DELTA) + ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_DIFF_ARRAY_ORDER_CHANGE_WITH_DELETE_DELTA) + err := innerDiffTest(t, ti) + if err != nil { + t.Error(err) + } +} + +func TestDiffJsonArrayOrderMove1ObjectWithAddFormatText(t *testing.T) { + ti := NewDiffTestInfo(TEST_DIFF_ARRAY_ORDER_CHANGE_WITH_ADD_BASE, TEST_DIFF_ARRAY_ORDER_CHANGE_WITH_ADD_DELTA) + ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_DIFF_ARRAY_ORDER_CHANGE_WITH_ADD_DELTA) + err := innerDiffTest(t, ti) + if err != nil { + t.Error(err) + } +} + +func TestDiffJsonArrayOrderMove1ObjectWithAddAndDeleteFormatText(t *testing.T) { + ti := NewDiffTestInfo(TEST_DIFF_ARRAY_ORDER_CHANGE_WITH_ADD_AND_DELETE_BASE, TEST_DIFF_ARRAY_ORDER_CHANGE_WITH_ADD_AND_DELETE_DELTA) + ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_DIFF_ARRAY_ORDER_CHANGE_WITH_ADD_AND_DELETE_DELTA) + err := innerDiffTest(t, ti) + if err != nil { + t.Error(err) + } +} + +// ===================================================== +// CycloneDX BOM variant tests +// ===================================================== + +func TestDiffCdx14MatureDelta1Text(t *testing.T) { + ti := NewDiffTestInfo(TEST_CDX_1_4_MATURITY_EXAMPLE_1_BASE, TEST_DIFF_CDX_1_4_MATURITY_EXAMPLE_1_DELTA) + ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_DIFF_CDX_1_4_MATURITY_EXAMPLE_1_DELTA) + err := innerDiffTest(t, ti) + if err != nil { + t.Error(err) + } +} + +func TestDiffCdx14MatureDelta1Json(t *testing.T) { + ti := NewDiffTestInfo(TEST_CDX_1_4_MATURITY_EXAMPLE_1_BASE, TEST_DIFF_CDX_1_4_MATURITY_EXAMPLE_1_DELTA) + ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_DIFF_CDX_1_4_MATURITY_EXAMPLE_1_DELTA) + ti.OutputFormat = FORMAT_JSON + err := innerDiffTest(t, ti) + if err != nil { + t.Error(err) + } +} + +func TestDiffCdx14MatureDelta2(t *testing.T) { + ti := NewDiffTestInfo(TEST_CDX_1_4_MATURITY_EXAMPLE_1_BASE, TEST_DIFF_CDX_1_4_MATURITY_EXAMPLE_2_DELTA) + ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_DIFF_CDX_1_4_MATURITY_EXAMPLE_2_DELTA) + err := innerDiffTest(t, ti) + if err != nil { + t.Error(err) + } +} + +func TestDiffJsonVulnerabilitiesAdd1(t *testing.T) { + ti := NewDiffTestInfo(TEST_DIFF_CDX_1_5_VULNERABILITY_BASE, TEST_DIFF_CDX_1_5_VULNERABILITY_ADD_1) + ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_DIFF_CDX_1_5_VULNERABILITY_ADD_1) + err := innerDiffTest(t, ti) + if err != nil { + t.Error(err) + } +} + +func TestDiffJsonVulnerabilitiesRemove1(t *testing.T) { + ti := NewDiffTestInfo(TEST_DIFF_CDX_1_5_VULNERABILITY_BASE, TEST_DIFF_CDX_1_5_VULNERABILITY_REMOVE_1) + ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_DIFF_CDX_1_5_VULNERABILITY_REMOVE_1) + err := innerDiffTest(t, ti) + if err != nil { + t.Error(err) + } +} + +// NOTE: In order to debug panic handling... here is a test +// Unfortunately, we cannot run it as part of function test as it "times out" +// TODO: Create smaller test files that cause panic in Diff command's underlying libs. +// func TestDiffJsonPanicNATs(t *testing.T) { +// ti := NewDiffTestInfo(TEST_DIFF_PANIC_BASE, TEST_DIFF_PANIC_DELTA) +// ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_DIFF_PANIC_DELTA) +// err := innerDiffTest(t, ti) +// if err != nil { +// t.Error(err) +// } +// } diff --git a/cmd/document.go b/cmd/document.go index 01de33cc..1f25448b 100644 --- a/cmd/document.go +++ b/cmd/document.go @@ -63,3 +63,38 @@ func LoadInputBOMFileAndDetectSchema() (document *schema.BOM, err error) { getLogger().Infof("Matching BOM schema (for validation): %s", document.SchemaInfo.File) return } + +func LoadBOMFile(inputFile string) (document *schema.BOM, err error) { + getLogger().Enter() + defer getLogger().Exit() + + if inputFile == "" { + return nil, fmt.Errorf("invalid input file (-%s): `%s` ", FLAG_FILENAME_INPUT_SHORT, inputFile) + } + + // Construct a BOM document object around the input file + document = schema.NewBOM(inputFile) + + // Load the raw, candidate BOM (file) as JSON data + getLogger().Infof("Attempting to load and unmarshal data from: `%s`...", document.GetFilenameInterpolated()) + err = document.UnmarshalBOMAsJSONMap() // i.e., utils.Flags.InputFile + if err != nil { + return + } + getLogger().Infof("Successfully unmarshalled data from: `%s`", document.GetFilenameInterpolated()) + + // Search the document keys/values for known BOM formats and schema in the config. file + getLogger().Infof("Determining file's BOM format and version...") + err = SupportedFormatConfig.FindFormatAndSchema(document) + if err != nil { + return + } + + // Display detected format, version with (optional) schema variant (i.e., if requested on command line) + getLogger().Infof("Determined BOM format, version (variant): `%s`, `%s` %s", + document.FormatInfo.CanonicalName, + document.SchemaInfo.Version, + schema.FormatSchemaVariant(document.SchemaInfo.Variant)) + getLogger().Infof("Matching BOM schema (for validation): %s", document.SchemaInfo.File) + return +} diff --git a/cmd/license.go b/cmd/license.go index a817e054..ec949974 100644 --- a/cmd/license.go +++ b/cmd/license.go @@ -263,7 +263,7 @@ func hashComponentLicense(bom *schema.BOM, policyConfig *schema.LicensePolicyCon if cdxComponent.BOMRef != nil { licenseInfo.BOMRef = *cdxComponent.BOMRef } - _, err = bom.HashLicenseInfo(policyConfig, LICENSE_NO_ASSERTION, licenseInfo, whereFilters) + _, err = bom.HashmapLicenseInfo(policyConfig, LICENSE_NO_ASSERTION, licenseInfo, whereFilters) getLogger().Warningf("%s: %s (name:`%s`, version: `%s`, package-url: `%s`)", "No license found for component. bomRef", @@ -322,7 +322,7 @@ func hashServiceLicense(bom *schema.BOM, policyConfig *schema.LicensePolicyConfi if cdxService.BOMRef != nil { licenseInfo.BOMRef = *cdxService.BOMRef } - _, err = bom.HashLicenseInfo(policyConfig, LICENSE_NO_ASSERTION, licenseInfo, whereFilters) + _, err = bom.HashmapLicenseInfo(policyConfig, LICENSE_NO_ASSERTION, licenseInfo, whereFilters) getLogger().Warningf("%s: %s (name: `%s`, version: `%s`)", "No license found for service. bomRef", @@ -362,13 +362,13 @@ func hashLicenseInfoByLicenseType(bom *schema.BOM, policyConfig *schema.LicenseP if pLicense != nil && pLicense.Id != "" { licenseInfo.LicenseChoiceTypeValue = schema.LC_TYPE_ID - _, err = bom.HashLicenseInfo(policyConfig, pLicense.Id, licenseInfo, whereFilters) + _, err = bom.HashmapLicenseInfo(policyConfig, pLicense.Id, licenseInfo, whereFilters) } else if pLicense != nil && pLicense.Name != "" { licenseInfo.LicenseChoiceTypeValue = schema.LC_TYPE_NAME - _, err = bom.HashLicenseInfo(policyConfig, pLicense.Name, licenseInfo, whereFilters) + _, err = bom.HashmapLicenseInfo(policyConfig, pLicense.Name, licenseInfo, whereFilters) } else if licenseChoice.Expression != "" { licenseInfo.LicenseChoiceTypeValue = schema.LC_TYPE_EXPRESSION - _, err = bom.HashLicenseInfo(policyConfig, licenseChoice.Expression, licenseInfo, whereFilters) + _, err = bom.HashmapLicenseInfo(policyConfig, licenseChoice.Expression, licenseInfo, whereFilters) } else { // Note: This code path only executes if hashing is performed // without schema validation (which would find this as an error) diff --git a/cmd/normalize_test.go b/cmd/normalize_test.go new file mode 100644 index 00000000..6066431e --- /dev/null +++ b/cmd/normalize_test.go @@ -0,0 +1,282 @@ +// SPDX-License-Identifier: Apache-2.0 +/* + * Licensed to the Apache Software Foundation (ASF) under one or more + * contributor license agreements. See the NOTICE file distributed with + * this work for additional information regarding copyright ownership. + * The ASF licenses this file to You under the Apache License, Version 2.0 + * (the "License"); you may not use this file except in compliance with + * the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ + +package cmd + +import ( + "bufio" + "bytes" + "io" + "log" + "os" + "testing" + + "github.com/CycloneDX/sbom-utility/utils" +) + +const ( + TEST_CDX_1_5_NORMALIZE_COMPONENTS = "test/normalize/cdx-1-5-components.bom.json" + TEST_CDX_1_5_NORMALIZE_SERVICES = "test/normalize/cdx-1-5-services.bom.json" + TEST_CDX_1_5_NORMALIZE_LICENSES = "test/normalize/cdx-1-5-licenses.bom.json" + TEST_CDX_1_5_NORMALIZE_DEPENDENCIES = "test/normalize/cdx-1-5-dependencies.bom.json" + TEST_CDX_1_5_NORMALIZE_EXTERNAL_REFERENCES = "test/normalize/cdx-1-5-external-references.bom.json" + TEST_CDX_1_5_NORMALIZE_VULNERABILITIES = "test/normalize/cdx-1-5-vulnerabilities.bom.json" + TEST_CDX_1_5_NORMALIZE_VULNERABILITIES_NATS_BOX = "test/normalize/cdx-1-5-vulnerabilities-container-nats-box.bom.json" + TEST_CDX_1_4_NORMALIZE_COMPONENTS_XXL = "test/normalize/cdx-1-4-components-xxl.bom.json" + TEST_CDX_1_2_NORMALIZE_COMPONENTS_PROTON = "test/normalize/cdx-1-2-components-protonmail.bom.json" +) + +type NormalizeTestInfo struct { + CommonTestInfo + Keys []string + FromPaths []string + Normalize bool +} + +func (ti *NormalizeTestInfo) String() string { + buffer, _ := utils.EncodeAnyToDefaultIndentedJSONStr(ti) + return buffer.String() +} + +func NewNormalizeTestInfo(inputFile string, resultExpectedError error) *NormalizeTestInfo { + var ti = new(NormalizeTestInfo) + // Set to test normalization by default + ti.Normalize = true + var pCommon = &ti.CommonTestInfo + pCommon.InitBasic(inputFile, FORMAT_JSON, resultExpectedError) + return ti +} + +func innerTestNormalize(t *testing.T, testInfo *NormalizeTestInfo) (outputBuffer bytes.Buffer, basicTestInfo string, err error) { + getLogger().Tracef("TestInfo: %s", testInfo) + + // Mock stdin if requested + if testInfo.MockStdin == true { + utils.GlobalFlags.PersistentFlags.InputFile = INPUT_TYPE_STDIN + file, err := os.Open(testInfo.InputFile) // For read access. + if err != nil { + log.Fatal(err) + } + + // convert byte slice to io.Reader + savedStdIn := os.Stdin + // !!!Important restore stdin + defer func() { os.Stdin = savedStdIn }() + os.Stdin = file + } + + // invoke resource list command with a byte buffer + outputBuffer, err = innerBufferedTestNormalize(testInfo) + // if the command resulted in a failure + if err != nil { + // if tests asks us to report a FAIL to the test framework + cti := &testInfo.CommonTestInfo + if cti.Autofail { + encodedTestInfo, _ := utils.EncodeAnyToDefaultIndentedJSONStr(testInfo) + t.Errorf("%s: failed: %v\n%s", cti.InputFile, err, encodedTestInfo.String()) + } + return + } + + return +} + +func innerBufferedTestNormalize(testInfo *NormalizeTestInfo) (outputBuffer bytes.Buffer, err error) { + + // The command looks for the input & output filename in global flags struct + utils.GlobalFlags.PersistentFlags.InputFile = testInfo.InputFile + utils.GlobalFlags.PersistentFlags.OutputFile = testInfo.OutputFile + utils.GlobalFlags.PersistentFlags.OutputFormat = testInfo.OutputFormat + utils.GlobalFlags.PersistentFlags.OutputIndent = testInfo.OutputIndent + utils.GlobalFlags.PersistentFlags.OutputNormalize = testInfo.Normalize // NOTE: default=true + utils.GlobalFlags.TrimFlags.Keys = testInfo.Keys + utils.GlobalFlags.TrimFlags.FromPaths = testInfo.FromPaths + var outputWriter io.Writer + var outputFile *os.File + + // TODO: centralize this logic to a function all Commands can use... + // Note: Any "Mocking" of os.Stdin/os.Stdout should be done in functions that call this one + if testInfo.OutputFile == "" { + // Declare an output outputBuffer/outputWriter to use used during tests + bufferedWriter := bufio.NewWriter(&outputBuffer) + outputWriter = bufferedWriter + // MUST ensure all data is written to buffer before further testing + defer bufferedWriter.Flush() + } else { + outputFile, outputWriter, err = createOutputFile(testInfo.OutputFile) + getLogger().Tracef("outputFile: `%v`; writer: `%v`", testInfo.OutputFile, outputWriter) + + // use function closure to assure consistent error output based upon error type + defer func() { + // always close the output file (even if error, as long as file handle returned) + if outputFile != nil { + outputFile.Close() + getLogger().Infof("Closed output file: `%s`", testInfo.OutputFile) + } + }() + + if err != nil { + return + } + } + + // NOTE: We use the Trim() command to test the Normalize() functionality for now + // TODO: Ideally, we want a top-level command "Normalize()" with other flag options + // BUT, also want to allow normalization any time ANY command writes BOM as output + // so the Trim() command is a great first impl. towards those goals. + err = Trim(outputWriter, utils.GlobalFlags.PersistentFlags, utils.GlobalFlags.TrimFlags) + return +} + +func TestNormalizeCdx15Components(t *testing.T) { + ti := NewNormalizeTestInfo(TEST_CDX_1_5_NORMALIZE_COMPONENTS, nil) + ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_CDX_1_5_NORMALIZE_COMPONENTS) + // ti.FromPaths = []string{"components"} + innerTestNormalize(t, ti) + document, err := LoadBOMOutputFile(ti.CommonTestInfo) + if err != nil { + t.Error(err) + } + + // Before looking for license data, fully unmarshal the SBOM into named structures + if err = document.UnmarshalCycloneDXBOM(); err != nil { + return + } +} + +func TestNormalizeCdx15Services(t *testing.T) { + ti := NewNormalizeTestInfo(TEST_CDX_1_5_NORMALIZE_SERVICES, nil) + ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_CDX_1_5_NORMALIZE_SERVICES) + innerTestNormalize(t, ti) +} + +func TestNormalizeCdx15Dependencies(t *testing.T) { + ti := NewNormalizeTestInfo(TEST_CDX_1_5_NORMALIZE_DEPENDENCIES, nil) + ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_CDX_1_5_NORMALIZE_DEPENDENCIES) + innerTestNormalize(t, ti) +} + +func TestNormalizeCdx15ExternalReferences(t *testing.T) { + ti := NewNormalizeTestInfo(TEST_CDX_1_5_NORMALIZE_EXTERNAL_REFERENCES, nil) + ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_CDX_1_5_NORMALIZE_EXTERNAL_REFERENCES) + innerTestNormalize(t, ti) +} + +func TestNormalizeCdx15Vulnerabilities(t *testing.T) { + ti := NewNormalizeTestInfo(TEST_CDX_1_5_NORMALIZE_VULNERABILITIES, nil) + ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_CDX_1_5_NORMALIZE_VULNERABILITIES) + innerTestNormalize(t, ti) +} + +func TestNormalizeCdx15Licenses(t *testing.T) { + ti := NewNormalizeTestInfo(TEST_CDX_1_5_NORMALIZE_LICENSES, nil) + ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_CDX_1_5_NORMALIZE_LICENSES) + innerTestNormalize(t, ti) +} + +// XXL Sort tests +func TestNormalizeCdx12ComponentsProtonMail(t *testing.T) { + ti := NewNormalizeTestInfo(TEST_CDX_1_2_NORMALIZE_COMPONENTS_PROTON, nil) + ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_CDX_1_2_NORMALIZE_COMPONENTS_PROTON) + innerTestNormalize(t, ti) +} + +func TestNormalizeCdx14ComponentsXXL(t *testing.T) { + ti := NewNormalizeTestInfo(TEST_CDX_1_4_NORMALIZE_COMPONENTS_XXL, nil) + ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_CDX_1_4_NORMALIZE_COMPONENTS_XXL) + innerTestNormalize(t, ti) +} + +func TestNormalizeCdx15VulnerabilitiesNatsBox(t *testing.T) { + ti := NewNormalizeTestInfo(TEST_CDX_1_5_NORMALIZE_VULNERABILITIES_NATS_BOX, nil) + ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_CDX_1_5_NORMALIZE_VULNERABILITIES_NATS_BOX) + innerTestNormalize(t, ti) +} + +// EXPERIMENTAL: +// TODO: see if we can create a function to loop through all nested structures and +// report one which ones do NOT have support for the Normalizer interface. +// This could be used to verify always have code to normalize any structure as +// new ones are added release-to-release +// func TestNormalizeReflect(t *testing.T) { +// document, err := LoadBOMFile(TEST_CDX_1_5_NORMALIZE_COMPONENTS) +// if err != nil { +// return +// } + +// if err = document.UnmarshalCycloneDXBOM(); err != nil { +// return +// } + +// // Test reflect.New using an existing instance +// //ptrBom := reflect.New(reflect.TypeOf(*document)) +// //fmt.Printf("New *schema.BOM: %+v\n", ptrBom) + +// // Test reflect.New using an existing (empty) instance +// //bom2Type := reflect.TypeOf(schema.BOM{}) +// //ptrBom2 := reflect.New(bom2Type) +// //fmt.Printf("New *schema.BOM: %+v\n", ptrBom2) + +// // Assure we can +// ptrCdxBom := document.GetCdxBom() +// //fmt.Printf("*schema.CDXBom: %+v\n", ptrCdxBom) + +// ListFields(ptrCdxBom) +// } + +// func ListFields(itfc interface{}) { +// // NOTE: we can immediately use ValueOf() to dereference the interface{} +// // NOTE: Elem() will panic if reflect.ValueOf(itfc).Kind() != reflect.Ptr || reflect.Interface +// rvoItfc := reflect.ValueOf(itfc) + +// // Deref. if needed to get the ACTUAL type we want to list fields for +// if rvoItfc.Kind() == reflect.Pointer || rvoItfc.Kind() == reflect.Interface { +// rvoItfc = reflect.ValueOf(itfc).Elem() +// } + +// // Immediately grab the Type of the dereferenced interface{} +// rvoType := rvoItfc.Type() +// fmt.Printf("Interface: Type: `%v`, Kind: `%v`\n", rvoType.String(), rvoType.Kind()) + +// if rvoType.Kind() == reflect.Struct { +// // Iterate over all fields of the Struct type (if any) +// for i := 0; i < rvoType.NumField(); i++ { +// field := rvoType.Field(i) + +// // Indirect returns the fieldValue that v points to. +// // - If is a nil pointer, Indirect returns a zero Value. +// // - If is not a pointer, Indirect returns (no dereference using Elem() method). +// fieldName := field.Name +// fieldValue := reflect.Indirect(rvoItfc).FieldByName(fieldName) +// fvKind := fieldValue.Kind() +// fvValueOf := reflect.ValueOf(fieldValue) +// // TODO: explore `field.PkgPath` +// fmt.Printf(">> Field(%v): `%s`, Kind: `%s`, Tags: `%s`, Value: `%v`\n", i, fieldName, fvKind.String(), field.Tag, fvValueOf) + +// // TODO: explore use of isItfc := field.CanInterface() +// if fvKind == reflect.Ptr || fvKind == reflect.Interface { +// if !fieldValue.IsNil() { +// // NOTE: temp.Elem() could be reflect.Struct, reflect.Map, reflect.Slice, etc. +// ListFields(fieldValue.Interface()) +// } +// } +// } +// } else { +// fmt.Printf("!!! Unhandled Kind(): `%v`", rvoType.Kind()) +// } +// } diff --git a/cmd/patch.go b/cmd/patch.go index 98284b4f..cbe25d5c 100644 --- a/cmd/patch.go +++ b/cmd/patch.go @@ -188,11 +188,14 @@ func Patch(writer io.Writer, persistentFlags utils.PersistentCommandFlags, patch return } - // After patch records are applied; update the CdxBOM + // After patch records are applied to the JSON map; + // update the corresponding "CdxBom" using the "unmarshal" wrapper. // NOTE: If any JSON keys that are NOT part of the CycloneDX spec. // have been added via a patch "add" operation, they will be removed // during the unmarshal process. - err = document.UnmarshalCycloneDXBOM() + if document.CdxBom, err = schema.UnMarshalDocument(document.JsonMap); err != nil { + return + } // Output the "patched" version of the Input BOM format := persistentFlags.OutputFormat diff --git a/cmd/report.go b/cmd/report.go index 40172fb0..a3718fd1 100644 --- a/cmd/report.go +++ b/cmd/report.go @@ -202,7 +202,6 @@ func prepareReportTitleData(formatData []ColumnFormatData, summarizedReport bool } func prepareReportLineData(structIn interface{}, formatData []ColumnFormatData, summarizedReport bool) (lineData []string, err error) { - var mapStruct map[string]interface{} var data interface{} var dataFound bool @@ -212,7 +211,6 @@ func prepareReportLineData(structIn interface{}, formatData []ColumnFormatData, mapStruct, err = utils.MarshalStructToJsonMap(structIn) for _, columnData := range formatData { - // reset local vars sliceString = nil @@ -274,7 +272,6 @@ func prepareReportLineData(structIn interface{}, formatData []ColumnFormatData, default: err = getLogger().Errorf("Unexpected type for report data: type: `%T`, value: `%v`", data, data) } - } return diff --git a/cmd/resource.go b/cmd/resource.go index 2b845704..a913dad1 100644 --- a/cmd/resource.go +++ b/cmd/resource.go @@ -29,6 +29,7 @@ import ( "github.com/CycloneDX/sbom-utility/common" "github.com/CycloneDX/sbom-utility/schema" "github.com/CycloneDX/sbom-utility/utils" + "github.com/jwangsadinata/go-multimap" "github.com/spf13/cobra" ) @@ -61,6 +62,13 @@ var RESOURCE_LIST_TITLES = []string{ RESOURCE_FILTER_KEY_BOMREF, } +var RESOURCE_LIST_ROW_DATA = []ColumnFormatData{ + {RESOURCE_FILTER_KEY_TYPE, DEFAULT_COLUMN_TRUNCATE_LENGTH, REPORT_SUMMARY_DATA_TRUE, false}, + {RESOURCE_FILTER_KEY_NAME, DEFAULT_COLUMN_TRUNCATE_LENGTH, REPORT_SUMMARY_DATA_TRUE, false}, + {RESOURCE_FILTER_KEY_VERSION, DEFAULT_COLUMN_TRUNCATE_LENGTH, REPORT_SUMMARY_DATA_TRUE, false}, + {RESOURCE_FILTER_KEY_BOMREF, DEFAULT_COLUMN_TRUNCATE_LENGTH, REPORT_SUMMARY_DATA_TRUE, REPORT_REPLACE_LINE_FEEDS_TRUE}, +} + // Flags. Reuse query flag values where possible const ( FLAG_RESOURCE_TYPE = "type" @@ -240,14 +248,14 @@ func loadDocumentResources(document *schema.BOM, resourceType string, whereFilte // Add top-level SBOM component if resourceType == schema.RESOURCE_TYPE_DEFAULT || resourceType == schema.RESOURCE_TYPE_COMPONENT { - err = document.HashComponentResources(whereFilters) + err = document.HashmapComponentResources(whereFilters) if err != nil { return } } if resourceType == schema.RESOURCE_TYPE_DEFAULT || resourceType == schema.RESOURCE_TYPE_SERVICE { - err = document.HashServiceResources(whereFilters) + err = document.HashmapServiceResources(whereFilters) if err != nil { return } @@ -256,9 +264,21 @@ func loadDocumentResources(document *schema.BOM, resourceType string, whereFilte return } +func sortResources(entries []multimap.Entry) { + // Sort by Type then Name + sort.Slice(entries, func(i, j int) bool { + resource1 := (entries[i].Value).(schema.CDXResourceInfo) + resource2 := (entries[j].Value).(schema.CDXResourceInfo) + if resource1.Type != resource2.Type { + return resource1.Type < resource2.Type + } + return resource1.Name < resource2.Name + }) +} + // NOTE: This list is NOT de-duplicated // TODO: Add a --no-title flag to skip title output -func DisplayResourceListText(bom *schema.BOM, writer io.Writer) { +func DisplayResourceListText(bom *schema.BOM, writer io.Writer) (err error) { getLogger().Enter() defer getLogger().Exit() @@ -269,11 +289,11 @@ func DisplayResourceListText(bom *schema.BOM, writer io.Writer) { // min-width, tab-width, padding, pad-char, flags w.Init(writer, 8, 2, 2, ' ', 0) - // create underline row from compulsory titles - underlines := createTitleTextSeparators(RESOURCE_LIST_TITLES) + // create title row and underline row from slices of optional and compulsory titles + titles, underlines := prepareReportTitleData(RESOURCE_LIST_ROW_DATA, true) // Add tabs between column titles for the tabWRiter - fmt.Fprintf(w, "%s\n", strings.Join(RESOURCE_LIST_TITLES, "\t")) + fmt.Fprintf(w, "%s\n", strings.Join(titles, "\t")) fmt.Fprintf(w, "%s\n", strings.Join(underlines, "\t")) // Display a warning "missing" in the actual output and return (short-circuit) @@ -285,30 +305,24 @@ func DisplayResourceListText(bom *schema.BOM, writer io.Writer) { return } - // Sort by Type then Name - sort.Slice(entries, func(i, j int) bool { - resource1 := (entries[i].Value).(schema.CDXResourceInfo) - resource2 := (entries[j].Value).(schema.CDXResourceInfo) - if resource1.Type != resource2.Type { - return resource1.Type < resource2.Type - } - - return resource1.Name < resource2.Name - }) - - var resourceInfo schema.CDXResourceInfo + // Sort resources prior to outputting + sortResources(entries) + // Emit row data + var line []string for _, entry := range entries { - value := entry.Value - resourceInfo = value.(schema.CDXResourceInfo) - - // Format line and write to output - fmt.Fprintf(w, "%s\t%s\t%s\t%s\n", - resourceInfo.Type, - resourceInfo.Name, - resourceInfo.Version, - resourceInfo.BOMRef) + line, err = prepareReportLineData( + entry.Value.(schema.CDXResourceInfo), + RESOURCE_LIST_ROW_DATA, + true, + ) + // Only emit line if no error + if err != nil { + return + } + fmt.Fprintf(w, "%s\n", strings.Join(line, "\t")) } + return } // TODO: Add a --no-title flag to skip title output @@ -320,8 +334,11 @@ func DisplayResourceListCSV(bom *schema.BOM, writer io.Writer) (err error) { w := csv.NewWriter(writer) defer w.Flush() - if err = w.Write(RESOURCE_LIST_TITLES); err != nil { - return getLogger().Errorf("error writing to output (%v): %s", RESOURCE_LIST_TITLES, err) + // Create title row data as []string + titles, _ := prepareReportTitleData(RESOURCE_LIST_ROW_DATA, true) + + if err = w.Write(titles); err != nil { + return getLogger().Errorf("error writing to output (%v): %s", titles, err) } // Display a warning "missing" in the actual output and return (short-circuit) @@ -337,36 +354,24 @@ func DisplayResourceListCSV(bom *schema.BOM, writer io.Writer) (err error) { return fmt.Errorf(currentRow[0]) } - // Sort by Type - sort.Slice(entries, func(i, j int) bool { - resource1 := (entries[i].Value).(schema.CDXResourceInfo) - resource2 := (entries[j].Value).(schema.CDXResourceInfo) - if resource1.Type != resource2.Type { - return resource1.Type < resource2.Type - } - - return resource1.Name < resource2.Name - }) + // Sort resources prior to outputting + sortResources(entries) - var resourceInfo schema.CDXResourceInfo var line []string - for _, entry := range entries { - value := entry.Value - resourceInfo = value.(schema.CDXResourceInfo) - line = nil - line = append(line, - resourceInfo.Type, - resourceInfo.Name, - resourceInfo.Version, - resourceInfo.BOMRef, + line, err = prepareReportLineData( + entry.Value.(schema.CDXResourceInfo), + RESOURCE_LIST_ROW_DATA, + true, ) - + // Only emit line if no error + if err != nil { + return + } if err = w.Write(line); err != nil { err = getLogger().Errorf("csv.Write: %w", err) } } - return } @@ -375,10 +380,14 @@ func DisplayResourceListMarkdown(bom *schema.BOM, writer io.Writer) (err error) getLogger().Enter() defer getLogger().Exit() + // Create title row data as []string + titles, _ := prepareReportTitleData(RESOURCE_LIST_ROW_DATA, true) + // create title row - titleRow := createMarkdownRow(RESOURCE_LIST_TITLES) + titleRow := createMarkdownRow(titles) fmt.Fprintf(writer, "%s\n", titleRow) + // create alignment row alignments := createMarkdownColumnAlignment(RESOURCE_LIST_TITLES) alignmentRow := createMarkdownRow(alignments) fmt.Fprintf(writer, "%s\n", alignmentRow) @@ -392,37 +401,24 @@ func DisplayResourceListMarkdown(bom *schema.BOM, writer io.Writer) (err error) return fmt.Errorf(MSG_OUTPUT_NO_RESOURCES_FOUND) } - // Sort by Type - sort.Slice(entries, func(i, j int) bool { - resource1 := (entries[i].Value).(schema.CDXResourceInfo) - resource2 := (entries[j].Value).(schema.CDXResourceInfo) - if resource1.Type != resource2.Type { - return resource1.Type < resource2.Type - } + // Sort resources prior to outputting + sortResources(entries) - return resource1.Name < resource2.Name - }) - - var resourceInfo schema.CDXResourceInfo + //var resourceInfo schema.CDXResourceInfo var line []string var lineRow string - for _, entry := range entries { - value := entry.Value - resourceInfo = value.(schema.CDXResourceInfo) - // reset current line - line = nil - - line = append(line, - resourceInfo.Type, - resourceInfo.Name, - resourceInfo.Version, - resourceInfo.BOMRef, + line, err = prepareReportLineData( + entry.Value.(schema.CDXResourceInfo), + RESOURCE_LIST_ROW_DATA, + true, ) - + // Only emit line if no error + if err != nil { + return + } lineRow = createMarkdownRow(line) fmt.Fprintf(writer, "%s\n", lineRow) } - return } diff --git a/cmd/resource_test.go b/cmd/resource_test.go index 3412e8af..f8f8efc2 100644 --- a/cmd/resource_test.go +++ b/cmd/resource_test.go @@ -194,18 +194,15 @@ func TestResourceListTextCdx13(t *testing.T) { nil, // no error schema.RESOURCE_TYPE_DEFAULT, ) - innerTestResourceList(t, rti) } func TestResourceListTextCdx14SaaS(t *testing.T) { - rti := NewResourceTestInfoBasic( TEST_RESOURCE_LIST_CDX_1_4_SAAS_1, FORMAT_TEXT, nil, // no error schema.RESOURCE_TYPE_COMPONENT) - innerTestResourceList(t, rti) } diff --git a/cmd/root.go b/cmd/root.go index 7d9321e6..ad124cae 100644 --- a/cmd/root.go +++ b/cmd/root.go @@ -84,21 +84,23 @@ const ( FLAG_LOG_OUTPUT_INDENT = "log-indent" FLAG_FILE_OUTPUT_FORMAT = "format" FLAG_COLORIZE_OUTPUT = "colorize" + FLAG_OUTPUT_NORMALIZE = "normalize" ) const ( - MSG_APP_NAME = "Bill-of-Materials (BOM) utility." - MSG_APP_DESCRIPTION = "This utility serves as centralized command-line interface for various Bill-of-Materials (BOM) helper utilities." - MSG_FLAG_TRACE = "enable trace logging" - MSG_FLAG_DEBUG = "enable debug logging" - MSG_FLAG_INPUT = "input filename (e.g., \"path/sbom.json\")" - MSG_FLAG_OUTPUT = "output filename" - MSG_FLAG_OUTPUT_FORMAT = "format output using the specified type" - MSG_FLAG_LOG_QUIET = "enable quiet logging mode (removes all informational messages from console output); overrides other logging commands" - MSG_FLAG_LOG_INDENT = "enable log indentation of functional callstack" - MSG_FLAG_CONFIG_SCHEMA = "provide custom application schema configuration file (i.e., overrides default `config.json`)" - MSG_FLAG_CONFIG_LICENSE = "provide custom application license policy configuration file (i.e., overrides default `license.json`)" - MSG_FLAG_OUTPUT_INDENT = "number of space characters used to indent JSON formatted output" + MSG_APP_NAME = "Bill-of-Materials (BOM) utility." + MSG_APP_DESCRIPTION = "This utility serves as centralized command-line interface for various Bill-of-Materials (BOM) helper utilities." + MSG_FLAG_TRACE = "enable trace logging" + MSG_FLAG_DEBUG = "enable debug logging" + MSG_FLAG_INPUT = "input filename (e.g., \"path/sbom.json\")" + MSG_FLAG_OUTPUT = "output filename" + MSG_FLAG_OUTPUT_FORMAT = "format output using the specified type" + MSG_FLAG_LOG_QUIET = "enable quiet logging mode (removes all informational messages from console output); overrides other logging commands" + MSG_FLAG_LOG_INDENT = "enable log indentation of functional callstack" + MSG_FLAG_CONFIG_SCHEMA = "provide custom application schema configuration file (i.e., overrides default `config.json`)" + MSG_FLAG_CONFIG_LICENSE = "provide custom application license policy configuration file (i.e., overrides default `license.json`)" + MSG_FLAG_OUTPUT_INDENT = "number of space characters used to indent JSON formatted output" + MSG_FLAG_OUTPUT_NORMALIZE = "Normalize BOM document" ) const ( diff --git a/cmd/root_test.go b/cmd/root_test.go index c3ed580e..e1eafa37 100644 --- a/cmd/root_test.go +++ b/cmd/root_test.go @@ -29,6 +29,7 @@ import ( "testing" "github.com/CycloneDX/sbom-utility/common" + "github.com/CycloneDX/sbom-utility/schema" "github.com/CycloneDX/sbom-utility/utils" ) @@ -351,3 +352,8 @@ func verifyFileLineCountAndIndentation(t *testing.T, buffer bytes.Buffer, cti *C getLogger().Tracef("success: output contained expected indent length: %v, at line: %v", cti.ResultExpectedIndentLength, cti.ResultLineContainsValuesAtLineNum) return } + +func LoadBOMOutputFile(originalTest CommonTestInfo) (bom *schema.BOM, err error) { + filename := originalTest.OutputFile + return LoadBOMFile(filename) +} diff --git a/cmd/stats.go b/cmd/stats.go index a505bdbd..b92c0edb 100644 --- a/cmd/stats.go +++ b/cmd/stats.go @@ -181,17 +181,17 @@ func loadDocumentStatisticalEntities(document *schema.BOM, statsFlags utils.Stat return } - err = document.HashComponentResources(nil) + err = document.HashmapComponentResources(nil) if err != nil { return } - err = document.HashServiceResources(nil) + err = document.HashmapServiceResources(nil) if err != nil { return } - err = document.HashVulnerabilityResources(nil) + err = document.HashmapVulnerabilityResources(nil) if err != nil { return } diff --git a/cmd/stats_test.go b/cmd/stats_test.go index 24b58f74..05dc6d87 100644 --- a/cmd/stats_test.go +++ b/cmd/stats_test.go @@ -54,7 +54,7 @@ func NewStatsTestInfoBasic(inputFile string, listFormat string, resultExpectedEr // ------------------------------------------- // resource list test helper functions // ------------------------------------------- -func innerBufferedTestStatsList(t *testing.T, testInfo *StatsTestInfo) (outputBuffer bytes.Buffer, err error) { +func innerBufferedTestStatsList(testInfo *StatsTestInfo) (outputBuffer bytes.Buffer, err error) { // Declare an output outputBuffer/outputWriter to use used during tests var outputWriter = bufio.NewWriter(&outputBuffer) // ensure all data is written to buffer before further validation @@ -90,7 +90,7 @@ func innerTestStatsList(t *testing.T, testInfo *StatsTestInfo) (outputBuffer byt } // invoke resource list command with a byte buffer - outputBuffer, err = innerBufferedTestStatsList(t, testInfo) + outputBuffer, err = innerBufferedTestStatsList(testInfo) return } diff --git a/cmd/trim.go b/cmd/trim.go index 3dfeae9e..df6d7e2c 100644 --- a/cmd/trim.go +++ b/cmd/trim.go @@ -32,6 +32,7 @@ import ( const ( FLAG_TRIM_FROM_PATHS = "from" FLAG_TRIM_MAP_KEYS = "keys" + FLAG_TRIM_NORMALIZE = "normalize" ) // flag help (translate) @@ -73,6 +74,7 @@ func initCommandTrimFlags(command *cobra.Command) (err error) { command.PersistentFlags().StringVar(&utils.GlobalFlags.PersistentFlags.OutputFormat, FLAG_OUTPUT_FORMAT, FORMAT_JSON, MSG_FLAG_OUTPUT_FORMAT+TRIM_OUTPUT_SUPPORTED_FORMATS) + command.PersistentFlags().BoolVar(&utils.GlobalFlags.PersistentFlags.OutputNormalize, FLAG_OUTPUT_NORMALIZE, false, MSG_FLAG_OUTPUT_NORMALIZE) command.Flags().StringVarP(&utils.GlobalFlags.TrimFlags.RawPaths, FLAG_TRIM_FROM_PATHS, "", "", MSG_FLAG_TRIM_FROM_PATHS) command.Flags().StringVarP(&utils.GlobalFlags.TrimFlags.RawKeys, FLAG_TRIM_MAP_KEYS, "", "", MSG_FLAG_TRIM_KEYS) err = command.MarkFlagRequired(FLAG_TRIM_MAP_KEYS) @@ -159,7 +161,7 @@ func Trim(writer io.Writer, persistentFlags utils.PersistentCommandFlags, trimFl } // validate parameters - if len(trimFlags.Keys) == 0 { + if len(trimFlags.Keys) == 0 && !persistentFlags.OutputNormalize { // TODO create named error type in schema package err = getLogger().Errorf("invalid parameter value: missing `keys` value from command") return @@ -199,6 +201,17 @@ func Trim(writer io.Writer, persistentFlags utils.PersistentCommandFlags, trimFl return } + // Sort slices of BOM if "sort" flag set to true + if persistentFlags.OutputNormalize { + // Sort the slices of structures + if document.GetCdxBom() != nil { + bom := document.GetCdxBom() + if schema.NormalizeSupported(bom) { + document.GetCdxBom().Normalize() + } + } + } + // Output the "trimmed" version of the Input BOM format := persistentFlags.OutputFormat getLogger().Infof("Writing trimmed BOM (`%s` format)...", format) diff --git a/cmd/trim_test.go b/cmd/trim_test.go index d61abea0..98b2430e 100644 --- a/cmd/trim_test.go +++ b/cmd/trim_test.go @@ -39,6 +39,7 @@ const ( TEST_TRIM_CDX_1_5_SAMPLE_SMALL_COMPS_ONLY = "test/trim/trim-cdx-1-5-sample-small-components-only.sbom.json" TEST_TRIM_CDX_1_4_SAMPLE_VEX = "test/trim/trim-cdx-1-4-sample-vex.json" TEST_TRIM_CDX_1_5_SAMPLE_MEDIUM_1 = "test/trim/trim-cdx-1-5-sample-medium-1.sbom.json" + TEST_TRIM_CDX_1_5_COMPONENTS_NORMALIZE = "test/trim/trim-cdx-1-5-sample-components-normalize.sbom.json" ) type TrimTestInfo struct { @@ -400,3 +401,23 @@ func TestTrimCdx14SourceFromVulnerabilities(t *testing.T) { t.Error(err) } } + +// ---------------------------------------- +// Trim "properties" and --normalize +// ---------------------------------------- + +func TestTrimCdx15ComponentsPropertiesAndNormalize(t *testing.T) { + ti := NewTrimTestInfo(TEST_TRIM_CDX_1_5_COMPONENTS_NORMALIZE, nil) + ti.Keys = append(ti.Keys, "properties") + ti.FromPaths = []string{""} + ti.OutputFile = ti.CreateTemporaryTestOutputFilename(TEST_TRIM_CDX_1_5_COMPONENTS_NORMALIZE) + _, _, err := innerTestTrim(t, ti) + if err != nil { + t.Error(err) + } + // Assure JSON map does not contain the trimmed key(s) + err = VerifyTrimOutputFileResult(t, *ti) + if err != nil { + t.Error(err) + } +} diff --git a/cmd/validate.go b/cmd/validate.go index 199b400a..17bb7c7c 100644 --- a/cmd/validate.go +++ b/cmd/validate.go @@ -181,7 +181,7 @@ func validationError(document *schema.BOM, valid bool, err error) { getLogger().Info(message) } -func Validate(writer io.Writer, persistentFlags utils.PersistentCommandFlags, validateFlags utils.ValidateCommandFlags) (valid bool, document *schema.BOM, schemaErrors []gojsonschema.ResultError, err error) { +func Validate(writer io.Writer, persistentFlags utils.PersistentCommandFlags, validateFlags utils.ValidateCommandFlags) (valid bool, bom *schema.BOM, schemaErrors []gojsonschema.ResultError, err error) { getLogger().Enter() defer getLogger().Exit() @@ -189,26 +189,26 @@ func Validate(writer io.Writer, persistentFlags utils.PersistentCommandFlags, va defer func() { if err != nil { // normalize the error output to console - validationError(document, valid, err) + validationError(bom, valid, err) } }() // Attempt to load and unmarshal the input file as a Json document // Note: JSON syntax errors return "encoding/json.SyntaxError" - document, err = LoadInputBOMFileAndDetectSchema() + bom, err = LoadInputBOMFileAndDetectSchema() if err != nil { - return INVALID, document, schemaErrors, err + return INVALID, bom, schemaErrors, err } // if "custom" flag exists, then assure we support the format - if validateFlags.CustomValidation && !document.FormatInfo.IsCycloneDx() { + if validateFlags.CustomValidation && !bom.FormatInfo.IsCycloneDx() { err = schema.NewUnsupportedFormatError( schema.MSG_FORMAT_UNSUPPORTED_COMMAND, - document.GetFilename(), - document.FormatInfo.CanonicalName, + bom.GetFilename(), + bom.FormatInfo.CanonicalName, CMD_VALIDATE, FLAG_VALIDATE_CUSTOM) - return valid, document, schemaErrors, err + return valid, bom, schemaErrors, err } // Create a loader for the BOM (JSON) document @@ -217,7 +217,7 @@ func Validate(writer io.Writer, persistentFlags utils.PersistentCommandFlags, va var errRead error var bSchema, bDocument []byte - if bDocument = document.GetRawBytes(); len(bDocument) > 0 { + if bDocument = bom.GetRawBytes(); len(bDocument) > 0 { bufferTemp := new(bytes.Buffer) // Strip off newlines which the json Decoder dislikes at EOF (as well as extra spaces, etc.) if err := json.Compact(bufferTemp, bDocument); err != nil { @@ -230,10 +230,10 @@ func Validate(writer io.Writer, persistentFlags utils.PersistentCommandFlags, va } if documentLoader == nil { - return INVALID, document, schemaErrors, fmt.Errorf("unable to load document: `%s`", document.GetFilename()) + return INVALID, bom, schemaErrors, fmt.Errorf("unable to load document: `%s`", bom.GetFilename()) } - schemaName := document.SchemaInfo.File + schemaName := bom.SchemaInfo.File // If caller "forced" a specific schema file (version), load it instead of // any SchemaInfo found in config.json @@ -248,13 +248,13 @@ func Validate(writer io.Writer, persistentFlags utils.PersistentCommandFlags, va } else { // Load the matching JSON schema (format, version and variant) from embedded resources // i.e., using the matching schema found in config.json (as SchemaInfo) - getLogger().Infof("Loading schema `%s`...", document.SchemaInfo.File) - bSchema, errRead = resources.BOMSchemaFiles.ReadFile(document.SchemaInfo.File) + getLogger().Infof("Loading schema `%s`...", bom.SchemaInfo.File) + bSchema, errRead = resources.BOMSchemaFiles.ReadFile(bom.SchemaInfo.File) if errRead != nil { // we force result to INVALID as any errors from the library means // we could NOT actually confirm the input documents validity - return INVALID, document, schemaErrors, errRead + return INVALID, bom, schemaErrors, errRead } schemaLoader = gojsonschema.NewBytesLoader(bSchema) @@ -263,7 +263,7 @@ func Validate(writer io.Writer, persistentFlags utils.PersistentCommandFlags, va if schemaLoader == nil { // we force result to INVALID as any errors from the library means // we could NOT actually confirm the input documents validity - return INVALID, document, schemaErrors, fmt.Errorf("unable to read schema: `%s`", schemaName) + return INVALID, bom, schemaErrors, fmt.Errorf("unable to read schema: `%s`", schemaName) } // create a reusable schema object (TODO: validate multiple documents) @@ -286,13 +286,13 @@ func Validate(writer io.Writer, persistentFlags utils.PersistentCommandFlags, va } if errLoad != nil { - return INVALID, document, schemaErrors, fmt.Errorf("unable to load schema: `%s`", schemaName) + return INVALID, bom, schemaErrors, fmt.Errorf("unable to load schema: `%s`", schemaName) } getLogger().Infof("Schema `%s` loaded.", schemaName) // Validate against the schema and save result determination - getLogger().Infof("Validating `%s`...", document.GetFilenameInterpolated()) + getLogger().Infof("Validating `%s`...", bom.GetFilenameInterpolated()) result, errValidate := jsonBOMSchema.Validate(documentLoader) // ALWAYS set the valid return parameter and provide user an informative message @@ -303,14 +303,14 @@ func Validate(writer io.Writer, persistentFlags utils.PersistentCommandFlags, va if errValidate != nil { // we force result to INVALID as any errors from the library means // we could NOT actually confirm the input documents validity - return INVALID, document, schemaErrors, errValidate + return INVALID, bom, schemaErrors, errValidate } // Note: actual schema validation errors appear in the `result` object // Save all schema errors found in the `result` object in an explicit, typed error if schemaErrors = result.Errors(); len(schemaErrors) > 0 { errInvalid := NewInvalidSBOMError( - document, + bom, MSG_SCHEMA_ERRORS, nil, schemaErrors) @@ -333,14 +333,14 @@ func Validate(writer io.Writer, persistentFlags utils.PersistentCommandFlags, va FormatSchemaErrors(writer, schemaErrors, validateFlags, FORMAT_TEXT) } - return INVALID, document, schemaErrors, errInvalid + return INVALID, bom, schemaErrors, errInvalid } // TODO: Perhaps factor in these errors into the JSON output as if they were actual schema errors... // Perform additional validation in document composition/structure // and "custom" required data within specified fields if validateFlags.CustomValidation { - valid, err = validateCustom(document, LicensePolicyConfig) + valid, err = validateCustom(bom, LicensePolicyConfig) } // All validation tests passed; return VALID diff --git a/cmd/vulnerability.go b/cmd/vulnerability.go index 40ac11e9..f1b74781 100644 --- a/cmd/vulnerability.go +++ b/cmd/vulnerability.go @@ -258,7 +258,7 @@ func loadDocumentVulnerabilities(document *schema.BOM, whereFilters []common.Whe // Hash all components found in the (root).components[] (+ "nested" components) pVulnerabilities := document.GetCdxVulnerabilities() if pVulnerabilities != nil && len(*pVulnerabilities) > 0 { - if err = document.HashVulnerabilities(*pVulnerabilities, whereFilters); err != nil { + if err = document.HashmapVulnerabilities(*pVulnerabilities, whereFilters); err != nil { return } } @@ -268,7 +268,7 @@ func loadDocumentVulnerabilities(document *schema.BOM, whereFilters []common.Whe // NOTE: This list is NOT de-duplicated // TODO: Add a --no-title flag to skip title output -func DisplayVulnListText(bom *schema.BOM, writer io.Writer, flags utils.VulnerabilityCommandFlags) { +func DisplayVulnListText(bom *schema.BOM, writer io.Writer, flags utils.VulnerabilityCommandFlags) (err error) { getLogger().Enter() defer getLogger().Exit() @@ -302,13 +302,18 @@ func DisplayVulnListText(bom *schema.BOM, writer io.Writer, flags utils.Vulnerab var line []string for _, entry := range entries { // TODO surface error data to top-level command - line, _ = prepareReportLineData( + line, err = prepareReportLineData( entry.Value.(schema.VulnerabilityInfo), VULNERABILITY_LIST_ROW_DATA, flags.Summary, ) + // Only emit line if no error + if err != nil { + return + } fmt.Fprintf(w, "%s\n", strings.Join(line, "\t")) } + return } // TODO: Add a --no-title flag to skip title output @@ -346,18 +351,19 @@ func DisplayVulnListCSV(bom *schema.BOM, writer io.Writer, flags utils.Vulnerabi // Emit row data var line []string for _, entry := range entries { - // TODO surface error data to top-level command - line, _ = prepareReportLineData( + line, err = prepareReportLineData( entry.Value.(schema.VulnerabilityInfo), VULNERABILITY_LIST_ROW_DATA, flags.Summary, ) - + // Only emit line if no error + if err != nil { + return + } if err = w.Write(line); err != nil { err = getLogger().Errorf("csv.Write: %w", err) } } - return } @@ -373,6 +379,7 @@ func DisplayVulnListMarkdown(bom *schema.BOM, writer io.Writer, flags utils.Vuln titleRow := createMarkdownRow(titles) fmt.Fprintf(writer, "%s\n", titleRow) + // create alignment row alignments := createMarkdownColumnAlignment(titles) alignmentRow := createMarkdownRow(alignments) fmt.Fprintf(writer, "%s\n", alignmentRow) @@ -393,17 +400,18 @@ func DisplayVulnListMarkdown(bom *schema.BOM, writer io.Writer, flags utils.Vuln var line []string var lineRow string for _, entry := range entries { - // TODO surface error data to top-level command - line, _ = prepareReportLineData( + line, err = prepareReportLineData( entry.Value.(schema.VulnerabilityInfo), VULNERABILITY_LIST_ROW_DATA, flags.Summary, ) + // Only emit line if no error + if err != nil { + return + } lineRow = createMarkdownRow(line) fmt.Fprintf(writer, "%s\n", lineRow) - } - return } diff --git a/cmd/vulnerability_test.go b/cmd/vulnerability_test.go index d245d5de..f3cfba72 100644 --- a/cmd/vulnerability_test.go +++ b/cmd/vulnerability_test.go @@ -74,7 +74,7 @@ func NewVulnTestInfoBasic(inputFile string, listFormat string, resultExpectedErr // ------------------------------------------- // Vuln. list test helper functions // ------------------------------------------- -func innerBufferedTestVulnList(t *testing.T, testInfo *VulnTestInfo, whereFilters []common.WhereFilter, flags utils.VulnerabilityCommandFlags) (outputBuffer bytes.Buffer, err error) { +func innerBufferedTestVulnList(testInfo *VulnTestInfo, whereFilters []common.WhereFilter, flags utils.VulnerabilityCommandFlags) (outputBuffer bytes.Buffer, err error) { // Declare an output outputBuffer/outputWriter to use used during tests var outputWriter = bufio.NewWriter(&outputBuffer) // ensure all data is written to buffer before further validation @@ -100,7 +100,7 @@ func innerTestVulnList(t *testing.T, testInfo *VulnTestInfo, flags utils.Vulnera } // invoke list command with a byte buffer - outputBuffer, err = innerBufferedTestVulnList(t, testInfo, whereFilters, flags) + outputBuffer, err = innerBufferedTestVulnList(testInfo, whereFilters, flags) // Run all common tests against "result" values in the CommonTestInfo struct err = innerRunReportResultTests(t, &testInfo.CommonTestInfo, outputBuffer, err) diff --git a/go.mod b/go.mod index cbdaf25a..c8404a2c 100644 --- a/go.mod +++ b/go.mod @@ -16,6 +16,7 @@ require ( require ( github.com/davecgh/go-spew v1.1.1 // indirect + github.com/google/uuid v1.6.0 // indirect github.com/inconshreveable/mousetrap v1.1.0 // indirect github.com/kr/text v0.2.0 // indirect github.com/mattn/go-colorable v0.1.13 // indirect diff --git a/go.sum b/go.sum index 753064a8..887ad518 100644 --- a/go.sum +++ b/go.sum @@ -7,6 +7,8 @@ github.com/fatih/color v1.15.0 h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs= github.com/fatih/color v1.15.0/go.mod h1:0h5ZqXfHYED7Bhv2ZJamyIOUej9KtShiJESRwBDUSsw= github.com/fsnotify/fsnotify v1.4.9 h1:hsms1Qyu0jgnwNXIxa+/V/PDsU6CfLf6CNO8H7IWoS4= github.com/google/go-cmp v0.5.9 h1:O2Tfq5qg4qc4AmwVlvv0oLiVAGB7enBSJ2x2DqQFi38= +github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0= +github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= github.com/hokaccha/go-prettyjson v0.0.0-20211117102719-0474bc63780f h1:7LYC+Yfkj3CTRcShK0KOL/w6iTiKyqqBA9a41Wnggw8= github.com/hokaccha/go-prettyjson v0.0.0-20211117102719-0474bc63780f/go.mod h1:pFlLw2CfqZiIBOx6BuCeRLCrfxBJipTY0nIOF/VbGcI= github.com/iancoleman/orderedmap v0.3.0 h1:5cbR2grmZR/DiVt+VJopEhtVs9YGInGIxAoMJn+Ichc= diff --git a/schema/bom.go b/schema/bom.go index 70ca4504..aeb02217 100644 --- a/schema/bom.go +++ b/schema/bom.go @@ -122,7 +122,6 @@ func (bom *BOM) GetFilename() string { } func (bom *BOM) GetFilenameInterpolated() string { - if bom.filename == INPUT_TYPE_STDIN { return "stdin" } @@ -141,14 +140,14 @@ func (bom *BOM) GetCdxMetadata() (pMetadata *CDXMetadata) { if bom := bom.GetCdxBom(); bom != nil { pMetadata = bom.Metadata } - return pMetadata + return } func (bom *BOM) GetCdxMetadataComponent() (pComponent *CDXComponent) { if metadata := bom.GetCdxMetadata(); metadata != nil { pComponent = metadata.Component } - return pComponent + return } func (bom *BOM) GetCdxMetadataLicenses() (licenses *[]CDXLicenseChoice) { @@ -326,7 +325,7 @@ func (bom *BOM) UnmarshalCycloneDXBOM() (err error) { getLogger().Enter() defer getLogger().Exit() - // Unmarshal as a JSON Map if not done already + // Unmarshal as a JSON Map, if not done already if bom.JsonMap == nil { if err = bom.UnmarshalBOMAsJSONMap(); err != nil { return diff --git a/schema/bom_hash.go b/schema/bom_hash.go index ac07439a..3f15328b 100644 --- a/schema/bom_hash.go +++ b/schema/bom_hash.go @@ -35,7 +35,7 @@ import ( // This hashes all components regardless where in the BOM document structure // they are declared. This includes both the top-level metadata component // (i.e., the subject of the BOM) as well as the components array. -func (bom *BOM) HashComponentResources(whereFilters []common.WhereFilter) (err error) { +func (bom *BOM) HashmapComponentResources(whereFilters []common.WhereFilter) (err error) { getLogger().Enter() defer func() { if panicInfo := recover(); panicInfo != nil { @@ -47,7 +47,7 @@ func (bom *BOM) HashComponentResources(whereFilters []common.WhereFilter) (err e // Hash the top-level component declared in the BOM metadata pMetadataComponent := bom.GetCdxMetadataComponent() if pMetadataComponent != nil { - _, err = bom.HashComponent(*pMetadataComponent, whereFilters, true) + _, err = bom.HashmapComponent(*pMetadataComponent, whereFilters, true) if err != nil { return } @@ -57,7 +57,7 @@ func (bom *BOM) HashComponentResources(whereFilters []common.WhereFilter) (err e pComponents := bom.GetCdxComponents() if pComponents != nil && len(*pComponents) > 0 { //if components := bom.GetCdxComponents(); len(*components) > 0 { - if err = bom.HashComponents(*pComponents, whereFilters, false); err != nil { + if err = bom.HashmapComponents(*pComponents, whereFilters, false); err != nil { return } } @@ -65,11 +65,11 @@ func (bom *BOM) HashComponentResources(whereFilters []common.WhereFilter) (err e } // TODO: use pointer for []CDXComponent -func (bom *BOM) HashComponents(components []CDXComponent, whereFilters []common.WhereFilter, root bool) (err error) { +func (bom *BOM) HashmapComponents(components []CDXComponent, whereFilters []common.WhereFilter, root bool) (err error) { getLogger().Enter() defer getLogger().Exit(err) for _, cdxComponent := range components { - _, err = bom.HashComponent(cdxComponent, whereFilters, root) + _, err = bom.HashmapComponent(cdxComponent, whereFilters, root) if err != nil { return } @@ -80,7 +80,7 @@ func (bom *BOM) HashComponents(components []CDXComponent, whereFilters []common. // Hash a CDX Component and recursively those of any "nested" components // TODO: we should WARN if version is not a valid semver (e.g., examples/cyclonedx/BOM/laravel-7.12.0/bom.1.3.json) // TODO: Use pointer for CDXComponent -func (bom *BOM) HashComponent(cdxComponent CDXComponent, whereFilters []common.WhereFilter, root bool) (hashed bool, err error) { +func (bom *BOM) HashmapComponent(cdxComponent CDXComponent, whereFilters []common.WhereFilter, root bool) (hashed bool, err error) { getLogger().Enter() defer getLogger().Exit(err) var resourceInfo CDXResourceInfo @@ -137,7 +137,7 @@ func (bom *BOM) HashComponent(cdxComponent CDXComponent, whereFilters []common.W // Recursively hash licenses for all child components (i.e., hierarchical composition) pComponent := cdxComponent.Components if pComponent != nil && len(*pComponent) > 0 { - err = bom.HashComponents(*cdxComponent.Components, whereFilters, root) + err = bom.HashmapComponents(*cdxComponent.Components, whereFilters, root) if err != nil { return } @@ -149,13 +149,13 @@ func (bom *BOM) HashComponent(cdxComponent CDXComponent, whereFilters []common.W // Services // ------------------- -func (bom *BOM) HashServiceResources(whereFilters []common.WhereFilter) (err error) { +func (bom *BOM) HashmapServiceResources(whereFilters []common.WhereFilter) (err error) { getLogger().Enter() defer getLogger().Exit(err) pServices := bom.GetCdxServices() if pServices != nil && len(*pServices) > 0 { - if err = bom.HashServices(*pServices, whereFilters); err != nil { + if err = bom.HashmapServices(*pServices, whereFilters); err != nil { return } } @@ -163,12 +163,12 @@ func (bom *BOM) HashServiceResources(whereFilters []common.WhereFilter) (err err } // TODO: use pointer for []CDXService -func (bom *BOM) HashServices(services []CDXService, whereFilters []common.WhereFilter) (err error) { +func (bom *BOM) HashmapServices(services []CDXService, whereFilters []common.WhereFilter) (err error) { getLogger().Enter() defer getLogger().Exit(err) for _, cdxService := range services { - _, err = bom.HashService(cdxService, whereFilters) + _, err = bom.HashmapService(cdxService, whereFilters) if err != nil { return } @@ -178,7 +178,7 @@ func (bom *BOM) HashServices(services []CDXService, whereFilters []common.WhereF // Hash a CDX Component and recursively those of any "nested" components // TODO: use pointer for CDXService -func (bom *BOM) HashService(cdxService CDXService, whereFilters []common.WhereFilter) (hashed bool, err error) { +func (bom *BOM) HashmapService(cdxService CDXService, whereFilters []common.WhereFilter) (hashed bool, err error) { getLogger().Enter() defer getLogger().Exit(err) var resourceInfo CDXResourceInfo @@ -236,7 +236,7 @@ func (bom *BOM) HashService(cdxService CDXService, whereFilters []common.WhereFi // Recursively hash licenses for all child components (i.e., hierarchical composition) pServices := cdxService.Services if pServices != nil && len(*pServices) > 0 { - err = bom.HashServices(*pServices, whereFilters) + err = bom.HashmapServices(*pServices, whereFilters) if err != nil { return } @@ -248,7 +248,7 @@ func (bom *BOM) HashService(cdxService CDXService, whereFilters []common.WhereFi // Licenses // ------------------- -func (bom *BOM) HashLicenseInfo(policyConfig *LicensePolicyConfig, key string, licenseInfo LicenseInfo, whereFilters []common.WhereFilter) (hashed bool, err error) { +func (bom *BOM) HashmapLicenseInfo(policyConfig *LicensePolicyConfig, key string, licenseInfo LicenseInfo, whereFilters []common.WhereFilter) (hashed bool, err error) { if reflect.DeepEqual(licenseInfo, LicenseInfo{}) { getLogger().Warning("empty license object found") @@ -292,14 +292,14 @@ func (bom *BOM) HashLicenseInfo(policyConfig *LicensePolicyConfig, key string, l // Vulnerabilities // ------------------- -func (bom *BOM) HashVulnerabilityResources(whereFilters []common.WhereFilter) (err error) { +func (bom *BOM) HashmapVulnerabilityResources(whereFilters []common.WhereFilter) (err error) { getLogger().Enter() defer getLogger().Exit(err) pVulnerabilities := bom.GetCdxVulnerabilities() if pVulnerabilities != nil && len(*pVulnerabilities) > 0 { - if err = bom.HashVulnerabilities(*pVulnerabilities, whereFilters); err != nil { + if err = bom.HashmapVulnerabilities(*pVulnerabilities, whereFilters); err != nil { return } } @@ -308,12 +308,12 @@ func (bom *BOM) HashVulnerabilityResources(whereFilters []common.WhereFilter) (e // We need to hash our own informational structure around the CDX data in order // to simplify --where queries to command line users -func (bom *BOM) HashVulnerabilities(vulnerabilities []CDXVulnerability, whereFilters []common.WhereFilter) (err error) { +func (bom *BOM) HashmapVulnerabilities(vulnerabilities []CDXVulnerability, whereFilters []common.WhereFilter) (err error) { getLogger().Enter() defer getLogger().Exit(err) for _, cdxVulnerability := range vulnerabilities { - _, err = bom.HashVulnerability(cdxVulnerability, whereFilters) + _, err = bom.HashmapVulnerability(cdxVulnerability, whereFilters) if err != nil { return } @@ -323,7 +323,7 @@ func (bom *BOM) HashVulnerabilities(vulnerabilities []CDXVulnerability, whereFil // Hash a CDX Component and recursively those of any "nested" components // TODO we should WARN if version is not a valid semver (e.g., examples/cyclonedx/BOM/laravel-7.12.0/bom.1.3.json) -func (bom *BOM) HashVulnerability(cdxVulnerability CDXVulnerability, whereFilters []common.WhereFilter) (hashed bool, err error) { +func (bom *BOM) HashmapVulnerability(cdxVulnerability CDXVulnerability, whereFilters []common.WhereFilter) (hashed bool, err error) { getLogger().Enter() defer getLogger().Exit(err) var vulnInfo VulnerabilityInfo diff --git a/schema/bom_hash_test.go b/schema/bom_hash_test.go index 405c1a83..b72dfdf0 100644 --- a/schema/bom_hash_test.go +++ b/schema/bom_hash_test.go @@ -227,7 +227,7 @@ func TestHashCDXComponentEmpty(t *testing.T) { return } - _, err = document.HashComponent(*component, nil, false) + _, err = document.HashmapComponent(*component, nil, false) if err != nil { t.Error(err) return @@ -254,7 +254,7 @@ func TestHashCDXComponentNameOnly(t *testing.T) { return } - _, err = document.HashComponent(*component, nil, false) + _, err = document.HashmapComponent(*component, nil, false) if err != nil { t.Error(err) return @@ -281,7 +281,7 @@ func TestHashCDXComponentFull(t *testing.T) { return } - _, err = document.HashComponent(*component, nil, false) + _, err = document.HashmapComponent(*component, nil, false) if err != nil { t.Error(err) return @@ -309,7 +309,7 @@ func TestHashCDXComponentsSlice(t *testing.T) { } if components != nil { - err = document.HashComponents(*components, nil, false) + err = document.HashmapComponents(*components, nil, false) if err != nil { t.Error(err) return @@ -320,7 +320,7 @@ func TestHashCDXComponentsSlice(t *testing.T) { func TestHashZeroCDXComponentStruct(t *testing.T) { cdxComponent := new(CDXComponent) document := NewBOM("") - hashed, err := document.HashComponent(*cdxComponent, nil, false) + hashed, err := document.HashmapComponent(*cdxComponent, nil, false) if err != nil { t.Error(err) return @@ -355,7 +355,7 @@ func TestHashCDXServicesSlice(t *testing.T) { return } - err = document.HashServices(*services, nil) + err = document.HashmapServices(*services, nil) if err != nil { t.Error(err) return @@ -365,7 +365,7 @@ func TestHashCDXServicesSlice(t *testing.T) { func TestHashZeroCDXServiceStruct(t *testing.T) { cdxService := new(CDXService) document := NewBOM("") - hashed, err := document.HashService(*cdxService, nil) + hashed, err := document.HashmapService(*cdxService, nil) if err != nil { t.Error(err) return @@ -397,7 +397,7 @@ func TestHashCDXVulnerabilitiesSlice(t *testing.T) { return } - err = document.HashVulnerabilities(*vulnerabilities, nil) + err = document.HashmapVulnerabilities(*vulnerabilities, nil) if err != nil { t.Error(err) return @@ -412,7 +412,7 @@ func TestHashCDXVulnerabilitiesSlice(t *testing.T) { func TestHashZeroCDXVulnerabilityStruct(t *testing.T) { cdxVulnerability := new(CDXVulnerability) document := NewBOM("") - hashed, err := document.HashVulnerability(*cdxVulnerability, nil) + hashed, err := document.HashmapVulnerability(*cdxVulnerability, nil) if err != nil { t.Error(err) return @@ -431,7 +431,7 @@ func TestHashZeroCDXVulnerabilityStruct(t *testing.T) { func TestHashZeroCDXLicenseInfoStruct(t *testing.T) { cdxLicenseInfo := new(LicenseInfo) document := NewBOM("") - hashed, err := document.HashLicenseInfo(nil, "foo", *cdxLicenseInfo, nil) + hashed, err := document.HashmapLicenseInfo(nil, "foo", *cdxLicenseInfo, nil) // HashLicenseInfo(bom *schema.BOM, policyConfig *schema.LicensePolicyConfig, key string, licenseInfo schema.LicenseInfo, whereFilters []common.WhereFilter) (hashed bool) if err != nil { t.Error(err) diff --git a/schema/cyclonedx.go b/schema/cyclonedx.go index 8317ab60..5298af41 100644 --- a/schema/cyclonedx.go +++ b/schema/cyclonedx.go @@ -15,7 +15,6 @@ * See the License for the specific language governing permissions and * limitations under the License. */ - package schema const ( @@ -75,49 +74,51 @@ type CDXMetadata struct { // v1.4: added: "releaseNotes", "signature" // v1.4: changed: "version" no longer required // v1.4: deprecated: "modified", "cpe", "swid" -// v1.5: added +// v1.5: added "modelCard", (component)"data" // Note: "bom-ref" is a "refType" which is a constrained `string` // TODO: "mime-type" SHOULD become "media-type" which is more modern/inclusive // TODO: Remove "service" from "Type" enum. as "service" now exists (deprecate in future versions) // NOTE: CDXRefType is a named `string` type as of v1.5 type CDXComponent struct { - Primary bool `json:"-"` // Proprietary: do NOT marshal/unmarshal - Type string `json:"type,omitempty"` // Constraint: enum [see schema] - MimeType string `json:"mime-type,omitempty"` - BOMRef *CDXRefType `json:"bom-ref,omitempty"` - Supplier *CDXOrganizationalEntity `json:"supplier,omitempty"` - Author string `json:"author,omitempty"` - Publisher string `json:"publisher,omitempty"` - Group string `json:"group,omitempty"` - Name string `json:"name,omitempty"` - Version string `json:"version,omitempty"` - Description string `json:"description,omitempty"` - Scope string `json:"scope,omitempty"` // Constraint: "enum": ["required","optional","excluded"] - Hashes *[]CDXHash `json:"hashes,omitempty"` - Licenses *[]CDXLicenseChoice `json:"licenses,omitempty"` - Copyright string `json:"copyright,omitempty"` - Cpe string `json:"cpe,omitempty"` // See: https://nvd.nist.gov/products/cpe - Purl string `json:"purl,omitempty" scvs:"bom:resource:identifiers:purl"` // See: https://github.com/package-url/purl-spec - Swid *CDXSwid `json:"swid,omitempty"` // See: https://www.iso.org/standard/65666.html - Pedigree *CDXPedigree `json:"pedigree,omitempty"` // anon. type - ExternalReferences *[]CDXExternalReference `json:"externalReferences,omitempty"` - Components *[]CDXComponent `json:"components,omitempty"` - Evidence *CDXComponentEvidence `json:"evidence,omitempty"` // v1.3: added - Properties *[]CDXProperty `json:"properties,omitempty"` // v1.3: added - Modified bool `json:"modified,omitempty" cdx:"deprecated"` // v1.4: deprecated - ReleaseNotes *[]CDXReleaseNotes `json:"releaseNotes,omitempty"` // v1.4: added - Signature *JSFSignature `json:"signature,omitempty"` // v1.4: added - ModelCard *CDXModelCard `json:"modelCard,omitempty"` // v1.5: added - Data *[]CDXComponentData `json:"data,omitempty"` // v1.5: added + Primary bool `json:"-"` // Proprietary: do NOT marshal/unmarshal + Type string `json:"type,omitempty"` // Constraint: enum [see schema] + Name string `json:"name,omitempty"` + Version string `json:"version,omitempty"` + Description string `json:"description,omitempty"` + Group string `json:"group,omitempty"` + BOMRef *CDXRefType `json:"bom-ref,omitempty"` + MimeType string `json:"mime-type,omitempty"` + Supplier *CDXOrganizationalEntity `json:"supplier,omitempty"` + Author string `json:"author,omitempty"` + Publisher string `json:"publisher,omitempty"` + Scope string `json:"scope,omitempty"` // Constraint: "enum": ["required","optional","excluded"] + Hashes *[]CDXHash `json:"hashes,omitempty"` + Licenses *[]CDXLicenseChoice `json:"licenses,omitempty"` + Copyright string `json:"copyright,omitempty"` + Cpe string `json:"cpe,omitempty"` // See: https://nvd.nist.gov/products/cpe + Purl string `json:"purl,omitempty" scvs:"bom:resource:identifiers:purl"` // See: https://github.com/package-url/purl-spec + Swid *CDXSwid `json:"swid,omitempty"` // See: https://www.iso.org/standard/65666.html + Pedigree *CDXPedigree `json:"pedigree,omitempty"` // anon. type + ExternalReferences *[]CDXExternalReference `json:"externalReferences,omitempty"` + Components *[]CDXComponent `json:"components,omitempty"` + Evidence *CDXComponentEvidence `json:"evidence,omitempty"` // v1.3: added + Properties *[]CDXProperty `json:"properties,omitempty"` // v1.3: added + Modified bool `json:"modified,omitempty" cdx:"deprecated"` // v1.4: deprecated + ReleaseNotes *[]CDXReleaseNotes `json:"releaseNotes,omitempty"` // v1.4: added + Signature *JSFSignature `json:"signature,omitempty"` // v1.4: added + ModelCard *CDXModelCard `json:"modelCard,omitempty"` // v1.5: added + Data *[]CDXComponentData `json:"data,omitempty"` // v1.5: added + Authors *[]CDXOrganizationalContact `json:"authors,omitempty"` // v1.6: added + Tags *[]string `json:"tags,omitempty" cdx:"+1.6"` // v1.6: added } -// v1.5 added +// v1.5 added object // The general theme or subject matter of the data being specified. // TODO: "contents" is plural, but it is not an array type CDXComponentData struct { - BOMRef *CDXRefType `json:"bom-ref,omitempty"` Type string `json:"type,omitempty"` // Constraint: "enum": ["source-code","configuration","dataset","definition","other"] Name string `json:"name,omitempty"` + BOMRef *CDXRefType `json:"bom-ref,omitempty"` Contents *CDXContent `json:"contents,omitempty"` Classification *CDXDataClassification `json:"classification,omitempty"` SensitiveData []string `json:"sensitiveData,omitempty"` @@ -126,10 +127,10 @@ type CDXComponentData struct { Governance *CDXDataGovernance `json:"governance,omitempty"` } -// v1.5 added +// v1.5 added object type CDXContent struct { - Attachment *CDXAttachment `json:"attachment,omitempty"` Url string `json:"url,omitempty"` + Attachment *CDXAttachment `json:"attachment,omitempty"` Properties *[]CDXProperty `json:"properties,omitempty"` } @@ -140,7 +141,7 @@ type CDXDataGovernance struct { Owners *[]CDXDataGovernanceResponsibleParty `json:"owners,omitempty"` } -// v1.5 added +// v1.5 added structure // Constraints: "oneOf": ["organization", "contact"] type CDXDataGovernanceResponsibleParty struct { Organization *CDXOrganizationalEntity `json:"organization,omitempty"` @@ -161,12 +162,12 @@ type CDXDataGovernanceResponsibleParty struct { // validate a v1.2 SBOM wit the anon. type parses properly // NOTE: CDXRefType is a named `string` type as of v1.5 type CDXService struct { - BOMRef *CDXRefType `json:"bom-ref,omitempty"` Provider *CDXOrganizationalEntity `json:"provider,omitempty"` - Group string `json:"group,omitempty"` Name string `json:"name,omitempty"` Version string `json:"version,omitempty"` Description string `json:"description,omitempty"` + Group string `json:"group,omitempty"` + BOMRef *CDXRefType `json:"bom-ref,omitempty"` Endpoints *[]string `json:"endpoints,omitempty"` Authenticated bool `json:"authenticated,omitempty"` XTrustBoundary bool `json:"x-trust-boundary,omitempty"` @@ -175,9 +176,10 @@ type CDXService struct { Licenses *[]CDXLicenseChoice `json:"licenses,omitempty"` ExternalReferences *[]CDXExternalReference `json:"externalReferences,omitempty"` Services *[]CDXService `json:"services,omitempty"` - Properties *[]CDXProperty `json:"properties,omitempty"` // v1.3: added - ReleaseNotes *[]CDXReleaseNotes `json:"releaseNotes,omitempty"` // v1.4: added - Signature *JSFSignature `json:"signature,omitempty"` // v1.4: added + Properties *[]CDXProperty `json:"properties,omitempty"` // v1.3: added + ReleaseNotes *[]CDXReleaseNotes `json:"releaseNotes,omitempty"` // v1.4: added + Signature *JSFSignature `json:"signature,omitempty"` // v1.4: added + Tags *[]string `json:"tags,omitempty" cdx:"+1.6"` // v1.6: added } // v1.5: added. aggregated related date from v1.2-v1.4 and added additional fields @@ -229,29 +231,33 @@ type CDXLicenseChoice struct { CDXLicenseExpression } -// v1.5: added +// v1.5: added structure +// v1.6: added Acknowledgment // NOTE: CDXRefType is a named `string` type as of v1.5 type CDXLicenseExpression struct { - Expression string `json:"expression,omitempty"` - BOMRef *CDXRefType `json:"bom-ref,omitempty"` + Expression string `json:"expression,omitempty"` + BOMRef *CDXRefType `json:"bom-ref,omitempty"` + Acknowledgement string `json:"acknowledgement,omitempty"` // v1.6: added } // v1.2: was an anon. type // v1.3: created +// v1.6: added Acknowledgment // Note: "id" SHOULD be an SPDX license ID // Note: "oneOf": ["id", "name"] is required // NOTE: CDXRefType is a named `string` type as of v1.5 type CDXLicense struct { - Id string `json:"id,omitempty"` - Name string `json:"name,omitempty"` - Text *CDXAttachment `json:"text,omitempty"` - Url string `json:"url,omitempty"` - BOMRef *CDXRefType `json:"bom-ref,omitempty"` // v1.5: added - Licensing *CDXLicensing `json:"licensing,omitempty"` // v1.5: added - Properties *[]CDXProperty `json:"properties,omitempty"` // v1.5: added + Id string `json:"id,omitempty"` + Name string `json:"name,omitempty"` + Text *CDXAttachment `json:"text,omitempty"` + Url string `json:"url,omitempty"` + BOMRef *CDXRefType `json:"bom-ref,omitempty"` // v1.5: added + Licensing *CDXLicensing `json:"licensing,omitempty"` // v1.5: added + Properties *[]CDXProperty `json:"properties,omitempty"` // v1.5: added + Acknowledgement string `json:"acknowledgement,omitempty"` // v1.6: added } -// v1.5: added +// v1.5: added object type CDXLicensing struct { AltIds *[]string `json:"altIds,omitempty"` Licensor *CDXLicenseLegalParty `json:"licensor,omitempty"` @@ -322,9 +328,9 @@ type CDXIdentifiableAction struct { // v1.3: added "hashes" // v1.4: `Type` field: added value "release-notes" to enum. type CDXExternalReference struct { + Type string `json:"type,omitempty"` Url string `json:"url,omitempty"` Comment string `json:"comment,omitempty"` - Type string `json:"type,omitempty"` Hashes *[]CDXHash `json:"hashes,omitempty"` // v1.3: added } @@ -365,7 +371,10 @@ type CDXComponentEvidence struct { // v1.4: added "signature" // v1.5: added "bom-ref", "vulnerabilities" // Note: "aggregate" is type `aggregateType` which is a constrained string -// TODO: Should not be plural; open issue against v2.0 schema +// TODO: Note: "Assemblies" is really an array of OneOf: "refLinkType" or "bomLinkElementType" +// which BOTH thankfully mapping to "string"; however, this MAY need to become an "interface{}" +// similar to "tools" has become. +// TODO: Should NOT be plural; open issue against v2.0 schema // NOTE: CDXRefType is a named `string` type as of v1.5 type CDXCompositions struct { Aggregate string `json:"aggregate,omitempty"` diff --git a/schema/cyclonedx_formulation.go b/schema/cyclonedx_formulation.go index 0a9236bf..8c1ca57f 100644 --- a/schema/cyclonedx_formulation.go +++ b/schema/cyclonedx_formulation.go @@ -21,53 +21,53 @@ package schema // v1.5: added // NOTE: CDXRefType is a named `string` type as of v1.5 type CDXFormula struct { - BOMRef CDXRefType `json:"bom-ref,omitempty"` // v1.5 - Components []CDXComponent `json:"components,omitempty"` // v1.5 - Services []CDXService `json:"services,omitempty"` // v1.5 - Workflows []CDXWorkflow `json:"workflows,omitempty"` // v1.5 - Properties []CDXProperty `json:"properties,omitempty"` // v1.5 + BOMRef *CDXRefType `json:"bom-ref,omitempty"` // v1.5 + Components *[]CDXComponent `json:"components,omitempty"` // v1.5 + Services *[]CDXService `json:"services,omitempty"` // v1.5 + Workflows *[]CDXWorkflow `json:"workflows,omitempty"` // v1.5 + Properties *[]CDXProperty `json:"properties,omitempty"` // v1.5 } // v1.5: added // NOTE: CDXRefType is a named `string` type as of v1.5 -type CDXWorkflow struct { - BOMRef CDXRefType `json:"bom-ref,omitempty"` // v1.5 - Uid string `json:"uid,omitempty"` // v1.5 - Name string `json:"name,omitempty"` // v1.5 - Description string `json:"description,omitempty"` // v1.5 - ResourceReferences []CDXResourceReferenceChoice `json:"resourceReferences,omitempty"` // v1.5 - Tasks []CDXTask `json:"tasks,omitempty"` // v1.5 - TaskDependencies []CDXDependency `json:"taskDependencies,omitempty"` // v1.5 - TaskTypes []CDXTaskType `json:"taskTypes,omitempty"` // v1.5 - Trigger CDXTrigger `json:"trigger,omitempty"` // v1.5 - Steps []CDXStep `json:"steps,omitempty"` // v1.5 - Inputs []CDXInputType `json:"inputs,omitempty"` // v1.5 - Outputs []CDXOutputType `json:"outputs,omitempty"` // v1.5 - TimeStart string `json:"timeStart,omitempty"` // v1.5 - TimeEnd string `json:"timeEnd,omitempty"` // v1.5 - Workspaces []CDXWorkspace `json:"workspaces,omitempty"` // v1.5 - RuntimeTopology []CDXDependency `json:"runtimeTopology,omitempty"` // v1.5 - Properties []CDXProperty `json:"properties,omitempty"` // v1.5 +type CDXWorkflow struct { // v1.5 + Uid string `json:"uid,omitempty"` // v1.5 + Name string `json:"name,omitempty"` // v1.5 + BOMRef *CDXRefType `json:"bom-ref,omitempty"` + Description string `json:"description,omitempty"` // v1.5 + ResourceReferences *[]CDXResourceReferenceChoice `json:"resourceReferences,omitempty"` // v1.5 + Tasks *[]CDXTask `json:"tasks,omitempty"` // v1.5 + TaskDependencies *[]CDXDependency `json:"taskDependencies,omitempty"` // v1.5 + TaskTypes *[]CDXTaskType `json:"taskTypes,omitempty"` // v1.5 + Trigger CDXTrigger `json:"trigger,omitempty"` // v1.5 + Steps *[]CDXStep `json:"steps,omitempty"` // v1.5 + Inputs *[]CDXInputType `json:"inputs,omitempty"` // v1.5 + Outputs *[]CDXOutputType `json:"outputs,omitempty"` // v1.5 + TimeStart string `json:"timeStart,omitempty"` // v1.5 + TimeEnd string `json:"timeEnd,omitempty"` // v1.5 + Workspaces *[]CDXWorkspace `json:"workspaces,omitempty"` // v1.5 + RuntimeTopology *[]CDXDependency `json:"runtimeTopology,omitempty"` // v1.5 + Properties *[]CDXProperty `json:"properties,omitempty"` // v1.5 } // v1.5: added // NOTE: CDXRefType is a named `string` type as of v1.5 type CDXTask struct { - BOMRef CDXRefType `json:"bom-ref,omitempty"` // v1.5 - Uid string `json:"uid,omitempty"` // v1.5 - Name string `json:"name,omitempty"` // v1.5 - Description string `json:"description,omitempty"` // v1.5 - ResourceReferences []CDXResourceReferenceChoice `json:"resourceReferences,omitempty"` // v1.5 - TaskTypes []CDXTaskType `json:"taskTypes,omitempty"` // v1.5 - Trigger CDXTrigger `json:"trigger,omitempty"` // v1.5 - Steps []CDXStep `json:"steps,omitempty"` // v1.5 - Inputs []CDXInputType `json:"inputs,omitempty"` // v1.5 - Outputs []CDXOutputType `json:"outputs,omitempty"` // v1.5 - TimeStart string `json:"timeStart,omitempty"` // v1.5 - TimeEnd string `json:"timeEnd,omitempty"` // v1.5 - Workspaces []CDXWorkspace `json:"workspaces,omitempty"` // v1.5 - RuntimeTopology []CDXDependency `json:"runtimeTopology,omitempty"` // v1.5 - Properties []CDXProperty `json:"properties,omitempty"` // v1.5 + BOMRef *CDXRefType `json:"bom-ref,omitempty"` // v1.5 + Uid string `json:"uid,omitempty"` // v1.5 + Name string `json:"name,omitempty"` // v1.5 + Description string `json:"description,omitempty"` // v1.5 + ResourceReferences *[]CDXResourceReferenceChoice `json:"resourceReferences,omitempty"` // v1.5 + TaskTypes *[]CDXTaskType `json:"taskTypes,omitempty"` // v1.5 + Trigger CDXTrigger `json:"trigger,omitempty"` // v1.5 + Steps *[]CDXStep `json:"steps,omitempty"` // v1.5 + Inputs *[]CDXInputType `json:"inputs,omitempty"` // v1.5 + Outputs *[]CDXOutputType `json:"outputs,omitempty"` // v1.5 + TimeStart string `json:"timeStart,omitempty"` // v1.5 + TimeEnd string `json:"timeEnd,omitempty"` // v1.5 + Workspaces *[]CDXWorkspace `json:"workspaces,omitempty"` // v1.5 + RuntimeTopology *[]CDXDependency `json:"runtimeTopology,omitempty"` // v1.5 + Properties *[]CDXProperty `json:"properties,omitempty"` // v1.5 } // v1.5: added @@ -76,61 +76,61 @@ type CDXTaskType string // v1.5 // v1.5: added type CDXStep struct { - Name string `json:"name,omitempty"` // v1.5 - Description string `json:"description,omitempty"` // v1.5 - Commands []CDXCommand `json:"commands,omitempty"` // v1.5 - Properties []CDXProperty `json:"properties,omitempty"` // v1.5 + Name string `json:"name,omitempty"` // v1.5 + Description string `json:"description,omitempty"` // v1.5 + Commands *[]CDXCommand `json:"commands,omitempty"` // v1.5 + Properties *[]CDXProperty `json:"properties,omitempty"` // v1.5 } // v1.5: added type CDXCommand struct { - Executed bool `json:"executed,omitempty"` // v1.5 - Properties []CDXProperty `json:"properties,omitempty"` // v1.5 + Executed bool `json:"executed,omitempty"` // v1.5 + Properties *[]CDXProperty `json:"properties,omitempty"` // v1.5 } // v1.5: added // NOTE: CDXRefType is a named `string` type as of v1.5 type CDXWorkspace struct { - BOMRef CDXRefType `json:"bom-ref,omitempty"` // v1.5 - Uid string `json:"uid,omitempty"` // v1.5 - Name string `json:"name,omitempty"` // v1.5 - Aliases []string `json:"aliases,omitempty"` // v1.5 - Description string `json:"description,omitempty"` // v1.5 - ResourceReferences []CDXResourceReferenceChoice `json:"resourceReferences,omitempty"` // v1.5 - AccessMode string `json:"accessMode,omitempty"` // v1.5 - MountPath string `json:"mountPath,omitempty"` // v1.5 - ManagedDataType string `json:"managedDataType,omitempty"` // v1.5 - VolumeRequest string `json:"volumeRequest,omitempty"` // v1.5 - Volume CDXVolume `json:"volume,omitempty"` // v1.5 - Properties []CDXProperty `json:"properties,omitempty"` // v1.5 + BOMRef CDXRefType `json:"bom-ref,omitempty"` // v1.5 + Uid string `json:"uid,omitempty"` // v1.5 + Name string `json:"name,omitempty"` // v1.5 + Aliases *[]string `json:"aliases,omitempty"` // v1.5 + Description string `json:"description,omitempty"` // v1.5 + ResourceReferences *[]CDXResourceReferenceChoice `json:"resourceReferences,omitempty"` // v1.5 + AccessMode string `json:"accessMode,omitempty"` // v1.5 + MountPath string `json:"mountPath,omitempty"` // v1.5 + ManagedDataType string `json:"managedDataType,omitempty"` // v1.5 + VolumeRequest string `json:"volumeRequest,omitempty"` // v1.5 + Volume CDXVolume `json:"volume,omitempty"` // v1.5 + Properties *[]CDXProperty `json:"properties,omitempty"` // v1.5 } // v1.5: added // NOTE: CDXRefType is a named `string` type as of v1.5 type CDXVolume struct { - Uid string `json:"uid,omitempty"` // v1.5 - Name string `json:"name,omitempty"` // v1.5 - Mode string `json:"mode,omitempty"` // v1.5 - Path string `json:"path,omitempty"` // v1.5 - SizeAllocated string `json:"sizeAllocated,omitempty"` // v1.5 - Persistent bool `json:"persistent,omitempty"` // v1.5 - Remote bool `json:"remote,omitempty"` // v1.5 - Properties []CDXProperty `json:"properties,omitempty"` // v1.5 + Uid string `json:"uid,omitempty"` // v1.5 + Name string `json:"name,omitempty"` // v1.5 + Mode string `json:"mode,omitempty"` // v1.5 + Path string `json:"path,omitempty"` // v1.5 + SizeAllocated string `json:"sizeAllocated,omitempty"` // v1.5 + Persistent bool `json:"persistent,omitempty"` // v1.5 + Remote bool `json:"remote,omitempty"` // v1.5 + Properties *[]CDXProperty `json:"properties,omitempty"` // v1.5 } type CDXTrigger struct { - BOMRef CDXRefType `json:"bom-ref,omitempty"` // v1.5 - Uid string `json:"uid,omitempty"` // v1.5 - Name string `json:"name,omitempty"` // v1.5 - Description string `json:"description,omitempty"` // v1.5 - ResourceReferences []CDXResourceReferenceChoice `json:"resourceReferences,omitempty"` // v1.5 - Type string `json:"type,omitempty"` // v1.5 // "enum": ["manual", "api", "webhook","scheduled"] - Event CDXEvent `json:"event,omitempty"` // v1.5 - Condition CDXCondition `json:"condition,omitempty"` // v1.5 - TimeActivated string `json:"timeActivated,omitempty"` // v1.5 - Inputs []CDXInputType `json:"inputs,omitempty"` // v1.5 - Outputs []CDXOutputType `json:"outputs,omitempty"` // v1.5 - Properties []CDXProperty `json:"properties,omitempty"` // v1.5 + BOMRef CDXRefType `json:"bom-ref,omitempty"` // v1.5 + Uid string `json:"uid,omitempty"` // v1.5 + Name string `json:"name,omitempty"` // v1.5 + Description string `json:"description,omitempty"` // v1.5 + ResourceReferences *[]CDXResourceReferenceChoice `json:"resourceReferences,omitempty"` // v1.5 + Type string `json:"type,omitempty"` // v1.5 // "enum": ["manual", "api", "webhook","scheduled"] + Event CDXEvent `json:"event,omitempty"` // v1.5 + Condition CDXCondition `json:"condition,omitempty"` // v1.5 + TimeActivated string `json:"timeActivated,omitempty"` // v1.5 + Inputs *[]CDXInputType `json:"inputs,omitempty"` // v1.5 + Outputs *[]CDXOutputType `json:"outputs,omitempty"` // v1.5 + Properties *[]CDXProperty `json:"properties,omitempty"` // v1.5 } type CDXEvent struct { @@ -140,7 +140,7 @@ type CDXEvent struct { Data CDXAttachment `json:"data,omitempty"` // v1.5 Source CDXResourceReferenceChoice `json:"source,omitempty"` // v1.5 Target CDXResourceReferenceChoice `json:"target,omitempty"` // v1.5 - Properties []CDXProperty `json:"properties,omitempty"` // v1.5 + Properties *[]CDXProperty `json:"properties,omitempty"` // v1.5 } // v1.5: added @@ -150,9 +150,9 @@ type CDXInputType struct { Target CDXResourceReferenceChoice `json:"target,omitempty"` // v1.5 Resource CDXResourceReferenceChoice `json:"resource,omitempty"` // v1.5 Data CDXAttachment `json:"data,omitempty"` // v1.5 - Parameters []CDXParameter `json:"parameters,omitempty"` // v1.5 - EnvironmentVars []interface{} `json:"environmentVars,omitempty"` // v1.5 - Properties []CDXProperty `json:"properties,omitempty"` // v1.5 + Parameters *[]CDXParameter `json:"parameters,omitempty"` // v1.5 + EnvironmentVars *[]interface{} `json:"environmentVars,omitempty"` // v1.5 + Properties *[]CDXProperty `json:"properties,omitempty"` // v1.5 } // v1.5: added @@ -163,8 +163,8 @@ type CDXOutputType struct { Target CDXResourceReferenceChoice `json:"target,omitempty"` // v1.5 Resource CDXResourceReferenceChoice `json:"resource,omitempty"` // v1.5 Data CDXAttachment `json:"data,omitempty"` // v1.5 - EnvironmentVars []interface{} `json:"environmentVars,omitempty"` // v1.5 - Properties []CDXProperty `json:"properties,omitempty"` // v1.5 + EnvironmentVars *[]interface{} `json:"environmentVars,omitempty"` // v1.5 + Properties *[]CDXProperty `json:"properties,omitempty"` // v1.5 } // v1.5: added @@ -177,9 +177,9 @@ type CDXResourceReferenceChoice struct { // v1.5: added type CDXCondition struct { - Description string `json:"description,omitempty"` // v1.5 - Expression string `json:"expression,omitempty"` // v1.5 - Properties []CDXProperty `json:"properties,omitempty"` // v1.5 + Description string `json:"description,omitempty"` // v1.5 + Expression string `json:"expression,omitempty"` // v1.5 + Properties *[]CDXProperty `json:"properties,omitempty"` // v1.5 } // v1.5: added diff --git a/schema/cyclonedx_normalize.go b/schema/cyclonedx_normalize.go new file mode 100644 index 00000000..fcdca9cc --- /dev/null +++ b/schema/cyclonedx_normalize.go @@ -0,0 +1,681 @@ +// SPDX-License-Identifier: Apache-2.0 +/* + * Licensed to the Apache Software Foundation (ASF) under one or more + * contributor license agreements. See the NOTICE file distributed with + * this work for additional information regarding copyright ownership. + * The ASF licenses this file to You under the Apache License, Version 2.0 + * (the "License"); you may not use this file except in compliance with + * the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ +package schema + +import ( + "sort" + + "github.com/google/uuid" +) + +// named BOM slice types +type CDXAnnotationSlice []CDXAnnotation +type CDXComponentDataSlice []CDXComponentData +type CDXComponentSlice []CDXComponent +type CDXCompositionSlice []CDXCompositions +type CDXDependencySlice []CDXDependency +type CDXExternalReferenceSlice []CDXExternalReference +type CDXHashSlice []CDXHash +type CDXLicenseChoiceSlice []CDXLicenseChoice +type CDXLicenseSlice []CDXLicense // TODO: used in CDXComponentEvidence +type CDXOrganizationalContactSlice []CDXOrganizationalContact +type CDXOrganizationalEntitySlice []CDXOrganizationalEntity +type CDXPropertySlice []CDXProperty +type CDXRefLinkTypeSlice []CDXRefLinkType +type CDXReleaseNotesSlice []CDXReleaseNotes +type CDXServiceSlice []CDXService +type CDXVersionRangeSlice []CDXVersionRange + +// ==================================================================== +// Normalizer Interface (and helpers) +// ==================================================================== +type Normalizer interface { + Normalize() +} + +// TODO: Would like to use type reflection to "walk" a CDXBom{} type hierarchy, +// and normalize each element by calling its "Normalizer" interface IFF it is supported. +// For example: +// > if normalizeSupported(bom.Element) { +// > bom.Element.Normalize() +// >} + +// **NOTE** this method is a generic means to test for ANY named interface +func interfaceSupported[T any](i T, itfc interface{}) bool { + if itfc != nil { + _, ok := itfc.(T) + return ok + } + return false +} + +// This is a wrapper to test specifically for the Normalize interface +func NormalizeSupported(itfc interface{}) bool { + return interfaceSupported(Normalizer(nil), itfc) +} + +// ==================================================================== +// Normalization (i.e., "sort by") rules: +// ==================================================================== +// 1. Sort by: Required fields if they exist ("id" values, author order) +// >> WRONG: 1. Sort by: The pseudo-required field "bom-ref" when available (a BOM-unique ID) +// 1. Sort by: Using optional struct-local, or domain identifiers (e.g., SPDXID) or +// 1. Sort by: Using combinations of identifying field values (towards 100% normalization) +// ==================================================================== +// "Punch" list of future items: +// - TODO: track/limit depth of recursion (in "component", "service") +// ==================================================================== + +// ==================================================================== +// Struct Normalizers +// ==================================================================== +func (bom *CDXBom) Normalize() { + // Sort: BOM Metadata + if bom.Metadata != nil { + bom.Metadata.Normalize() + } + // Sort: Components + if bom.Components != nil { + CDXComponentSlice(*bom.Components).Normalize() + } + // Sort: Services + if bom.Services != nil { + CDXServiceSlice(*bom.Services).Normalize() + } + // Sort: Dependencies + if bom.Dependencies != nil { + CDXDependencySlice(*bom.Dependencies).Normalize() + } + // Sort: Vulnerabilities + if bom.Vulnerabilities != nil { + CDXVulnerabilitySlice(*bom.Vulnerabilities).Normalize() + } + // Sort Formulation + if bom.Formulation != nil { + CDXFormulaSlice(*bom.Formulation).Normalize() + } + // Sort: Annotations + if bom.Annotations != nil { + CDXAnnotationSlice(*bom.Annotations).Normalize() + } + // Sort: ExternalReferences + if bom.ExternalReferences != nil { + CDXExternalReferenceSlice(*bom.ExternalReferences).Normalize() + } + // Sort: Properties + if bom.Properties != nil { + CDXPropertySlice(*bom.Properties).Normalize() + } + // TODO: Sort Compositions + // TODO: Sort: Declarations (v1.6) + // TODO: Sort: Definitions (v1.6) +} + +// TODO: Sort Metadata object fields that are slices: +// Tools interface{} `json:"tools,omitempty"` // v1.2: added.v1.5: "tools" is now an interface{} +// Manufacturer *CDXOrganizationalEntity `json:"manufacture,omitempty"` // NOTE: Typo is in spec. +// Supplier *CDXOrganizationalEntity `json:"supplier,omitempty"` +// Lifecycles *[]CDXLifecycle `json:"lifecycles,omitempty"` // v1.5 added +func (pMetadata *CDXMetadata) Normalize() { + if pMetadata != nil { + metadata := *pMetadata + // Sort: Component + if metadata.Component != nil { + metadata.Component.Normalize() + } + // Sort: Licenses + if metadata.Licenses != nil { + CDXLicenseChoiceSlice(*metadata.Licenses).Normalize() + } + // Sort: Properties + if metadata.Properties != nil { + CDXPropertySlice(*metadata.Properties).Normalize() + } + // Sort: Authors + if metadata.Authors != nil { + CDXOrganizationalContactSlice(*metadata.Authors).Normalize() + } + // TODO: Sort: Lifecycles + } +} + +func (component *CDXComponent) Normalize() { + // Sort: Components + // Note: The following method is recursive + if component.Components != nil { + CDXComponentSlice(*component.Components).Normalize() + } + // Sort: Licenses + if component.Licenses != nil { + CDXLicenseChoiceSlice(*component.Licenses).Normalize() + } + // Sort: Hashes + if component.Hashes != nil { + CDXHashSlice(*component.Hashes).Normalize() + } + // Sort: Data + if component.Data != nil { + CDXComponentDataSlice(*component.Data).Normalize() + } + // Sort: ReleaseNotes + if component.ReleaseNotes != nil { + CDXReleaseNotesSlice(*component.ReleaseNotes).Normalize() + } + // Sort: ExternalReferences + if component.ExternalReferences != nil { + CDXExternalReferenceSlice(*component.ExternalReferences).Normalize() + } + // Sort: Properties + if component.Properties != nil { + CDXPropertySlice(*component.Properties).Normalize() + } + // Sort: Authors (v1.6) + if component.Authors != nil { + CDXOrganizationalContactSlice(*component.Authors).Normalize() + } + // Sort: Tags (i.e., an array of "string") (v1.6) + if component.Tags != nil { + sort.Strings(*component.Tags) + } + // TODO: Sort: Evidence + // TODO: Sort: ModelCard + // TODO: Sort: Pedigree (i.e., its Ancestors, Dependents, etc.) + // TODO: Sort: CryptoProperties (v1.6) +} + +func (service *CDXService) Normalize() { + // Sort: Services + // Note: The following method is recursive + if service.Services != nil { + CDXServiceSlice(*service.Services).Normalize() + } + // Sort: Licenses + if service.Licenses != nil { + CDXLicenseChoiceSlice(*service.Licenses).Normalize() + } + // Sort: ReleaseNotes + if service.ReleaseNotes != nil { + CDXReleaseNotesSlice(*service.ReleaseNotes).Normalize() + } + // Sort: ExternalReferences + if service.ExternalReferences != nil { + CDXExternalReferenceSlice(*service.ExternalReferences).Normalize() + } + // Sort: Properties + if service.Properties != nil { + CDXPropertySlice(*service.Properties).Normalize() + } + // Sort: Endpoints (i.e., an array of "string") + if service.Endpoints != nil { + sort.Strings(*service.Endpoints) + } + // Sort: Tags (i.e., an array of "string") (v1.6) + if service.Tags != nil { + sort.Strings(*service.Tags) + } + // TODO: Sort: (Service) Data +} + +func (licenseChoice CDXLicenseChoice) Normalize() { + // Sort: License (slices within) + if licenseChoice.License != nil { + licenseChoice.License.Normalize() + } +} + +func (license CDXLicense) Normalize() { + // TODO: Sort: Licensing *CDXLicensing + // Sort: Properties + if license.Properties != nil { + CDXPropertySlice(*license.Properties).Normalize() + } + if license.Licensing != nil { + license.Licensing.Normalize() + } +} + +func (licensing CDXLicensing) Normalize() { + // Sort: AltIds + if licensing.AltIds != nil { + sort.Strings(*licensing.AltIds) + } + // Sort: LicenseTypes + if licensing.LicenseTypes != nil { + sort.Strings(*licensing.LicenseTypes) + } +} + +func (dependency CDXDependency) Normalize() { + if dependency.DependsOn != nil { + CDXRefLinkTypeSlice(*dependency.DependsOn).Normalize() + } +} + +func (composition *CDXCompositions) Normalize() { + // Sort: Assemblies + if composition.Assemblies != nil { + // Note: "Assembly" is really OneOf: "refLinkType" or "bomLinkElementType" + // BOTH of which map to "string" (thankfully for now) + sort.Strings(*composition.Assemblies) + } + // Sort: Dependencies + if composition.Dependencies != nil { + sort.Strings(*composition.Dependencies) + } + // Sort: Vulnerabilities + if composition.Vulnerabilities != nil { + CDXVulnerabilitySlice(*composition.Vulnerabilities).Normalize() + } +} + +func (entity *CDXOrganizationalEntity) Normalize() { + // Sort: Contact(s) + if entity.Contact != nil { + CDXOrganizationalContactSlice(*entity.Contact).Normalize() + } +} + +// ==================================================================== +// Slice Normalizers +// ==================================================================== + +func (slice CDXComponentSlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorComponent(element1, element2) + }) + + // Normalize() each entry in the Components slice + // Note: this causes recursion as each "Component" type has a "Components" slice. + for _, component := range slice { + component.Normalize() + } +} + +func (slice CDXServiceSlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorService(element1, element2) + }) + + // Normalize() each entry in the Service slice + // Note: this causes recursion as each "Service" type has a "Services" slice. + for _, component := range slice { + component.Normalize() + } +} + +func (slice CDXDependencySlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorDependency(element1, element2) + }) + + // Normalize() each entry in the Dependency slice + for _, dependency := range slice { + dependency.Normalize() + } +} + +// TODO: Sort: the slices within the CDXComponentData (e.g., Contents, +// SensitiveData, Graphics (collection), Governance, etc. ) +func (slice CDXComponentDataSlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorComponentData(element1, element2) + }) +} + +func (slice CDXLicenseChoiceSlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorLicenseChoice(element1, element2) + }) + + // Sort LicenseChoice elements + for _, licenseChoice := range slice { + licenseChoice.Normalize() + } +} + +func (slice CDXOrganizationalContactSlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorOrganizationalContact(element1, element2) + }) +} + +func (slice CDXOrganizationalEntitySlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorOrganizationalEntity(element1, element2) + }) + + // Sort the contents of the CDXOrganizationalEntity (i.e., Contact(s)) + for _, entity := range slice { + entity.Normalize() + } +} + +func (slice CDXAnnotationSlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorAnnotation(element1, element2) + }) +} + +func (slice CDXExternalReferenceSlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorExternalReference(element1, element2) + }) +} + +func (slice CDXPropertySlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorProperty(element1, element2) + }) +} + +func (slice CDXRefLinkTypeSlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorRefLinkType(element1, element2) + }) +} + +func (slice CDXReleaseNotesSlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorReleaseNotes(element1, element2) + }) +} + +func (slice CDXHashSlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorHash(element1, element2) + }) +} + +func (slice CDXCompositionSlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorComposition(element1, element2) + }) + + for _, composition := range slice { + composition.Normalize() + } +} + +func (slice CDXVersionRangeSlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorVersionRange(element1, element2) + }) +} + +// ==================================================================== +// Struct comparators +// ==================================================================== + +// Use required fields: "type", "name" +// Use optional identity fields: "purl", "cpe", "swid.TagId" +// Sort by the optional field "bom-ref" as this is pseudo-required if +// slice elements contain duplicates with both "name" and "type". +func comparatorComponent(element1 CDXComponent, element2 CDXComponent) bool { + // sort by required field(s) + if element1.Type != element2.Type { + return element1.Type < element2.Type + } + if element1.Name != element2.Name { + return element1.Name < element2.Name + } + // Other optional identifiers + if element1.Cpe != element2.Cpe { + return element1.Cpe < element2.Cpe + } + if element1.Purl != element2.Purl { + return element1.Purl < element2.Purl + } + if element1.Swid != nil && element2.Swid != nil { + Swid1 := *element1.Swid + Swid2 := *element2.Swid + return Swid1.TagId < Swid2.TagId + } + // Other "tie breakers" + if element1.Version != element2.Version { + return element1.Version < element2.Version + } + // sort by (sometimes an identifier): "bom-ref" + if element1.BOMRef != nil && element2.BOMRef != nil { + return comparatorBOMRefType(*element1.BOMRef, *element2.BOMRef) + } + // default: preserve existing order + return true +} + +func comparatorService(element1 CDXService, element2 CDXService) bool { + // sort by required field(s): "name" + if element1.Name != element2.Name { + return element1.Name < element2.Name + } + // sort by other "tie breakers" + if element1.Version != element2.Version { + return element1.Version < element2.Version + } + // sort by (sometimes an identifier): "bom-ref" + if element1.BOMRef != nil && element2.BOMRef != nil { + return comparatorBOMRefType(*element1.BOMRef, *element2.BOMRef) + } + // default: preserve existing order + return true +} + +func comparatorDependency(element1 CDXDependency, element2 CDXDependency) bool { + // guard against invalid pointers to (required) elements + if element1.Ref != nil && element2.Ref != nil { + // sort by required field: "ref" + return *element1.Ref < *element2.Ref + } + // default: preserve existing order + return true +} + +// Note: RefLinkType is of type CDXRefType which is of type "string" (for now) +func comparatorRefLinkType(element1 CDXRefLinkType, element2 CDXRefLinkType) bool { + // Note: casting to actual data type + return comparatorRefType(CDXRefType(element1), CDXRefType(element2)) +} + +func comparatorBOMRefType(element1 CDXRefType, element2 CDXRefType) bool { + // NOTE: we do not want to use "bom-def" if it is randomly generated UUID + // Even if it is an ID like a Package URL (pURL), other IDs SHOULD + // be used for "sort" prior to relying upon it in the "bom-ref" field. + if IsValidUUID(element1.String()) || IsValidUUID(element2.String()) { + return true + } + // Note: this is a basic "string" comparison + return element1 < element2 +} + +func IsValidUUID(u string) bool { + _, err := uuid.Parse(u) + return err == nil +} + +func comparatorRefType(element1 CDXRefType, element2 CDXRefType) bool { + // Note: this is a basic "string" comparison + return element1 < element2 +} + +func comparatorComponentData(element1 CDXComponentData, element2 CDXComponentData) bool { + // sort by required fields: "type" + if element1.Type != element2.Type { + return element1.Type < element2.Type + } + // sort using combinations of identifying field values: "name" + return element1.Name < element2.Name +} + +// TODO: use "text", "url" as "tie-breakers" +func comparatorLicenseChoice(element1 CDXLicenseChoice, element2 CDXLicenseChoice) bool { + // Option 1: "CDXLicense" object is provided + // guard against invalid pointers to (required) elements + if element1.License != nil && element2.License != nil { + license1 := *element1.License + license2 := *element2.License + // TODO: test for "id" vs. "name" and assure "id" entries appear first + // "oneOf": ["id", "name"] is required + if license1.Id != license2.Id { + return license1.Id < license2.Id + } + return license1.Name < license2.Name + } + // Option 2: "CDXLicenseExpression" is provided + if element1.Expression != element2.Expression { + return element1.Expression < element2.Expression + } + // sort by (sometimes an identifier): "bom-ref" + if element1.BOMRef != nil && element2.BOMRef != nil { + return comparatorBOMRefType(*element1.BOMRef, *element2.BOMRef) + } + return true +} + +func comparatorHash(element1 CDXHash, element2 CDXHash) bool { + // sort by required fields: "alg", "content" + if element1.Alg != element2.Alg { + return element1.Alg < element2.Alg + } + return element1.Content < element2.Content +} + +func comparatorOrganizationalContact(element1 CDXOrganizationalContact, element2 CDXOrganizationalContact) bool { + // sort by optional field(s): "name", "email", "phone" + if element1.Name != element2.Name { + return element1.Name < element2.Name + } + if element1.Email != element2.Email { + return element1.Email < element2.Email + } + if element1.Phone != element2.Phone { + return element1.Phone < element2.Phone + } + // sort by (sometimes an identifier): "bom-ref" + if element1.BOMRef != nil && element2.BOMRef != nil { + return comparatorBOMRefType(*element1.BOMRef, *element2.BOMRef) + } + return true +} + +func comparatorOrganizationalEntity(element1 CDXOrganizationalEntity, element2 CDXOrganizationalEntity) bool { + // sort by optional field(s): "name" + if element1.Name != element2.Name { + return element1.Name < element2.Name + } + // TODO: "tie-breakers": Url ([]string), Contact ([]string) + // sort by (sometimes an identifier): "bom-ref" + if element1.BOMRef != nil && element2.BOMRef != nil { + return comparatorBOMRefType(*element1.BOMRef, *element2.BOMRef) + } + return true +} + +// TODO sort "subjects", "annotator" +func comparatorAnnotation(element1 CDXAnnotation, element2 CDXAnnotation) bool { + // sort by required fields: "timestamp", "text" + if element1.Timestamp != element2.Timestamp { + return element1.Timestamp < element2.Timestamp + } + return element1.Text < element2.Text +} + +// NOTE: The name is plural to match the current struct name (and perhaps json schema name) +func comparatorReleaseNotes(element1 CDXReleaseNotes, element2 CDXReleaseNotes) bool { + // sort by required fields: "type" + if element1.Type != element2.Type { + return element1.Type < element2.Type + } + // sort by using combinations of identifying field values: "title", "timestamp" + if element1.Title != element2.Title { + return element1.Title < element2.Title + } + return element1.Timestamp < element2.Timestamp +} + +func comparatorExternalReference(element1 CDXExternalReference, element2 CDXExternalReference) bool { + // sort by required fields: "type", "url" + if element1.Type != element2.Type { + return element1.Type < element2.Type + } + return element1.Url < element2.Url +} + +func comparatorProperty(element1 CDXProperty, element2 CDXProperty) bool { + // sort by required fields: "name", "value" + if element1.Name != element2.Name { + return element1.Name < element2.Name + } + return element1.Value < element2.Value +} + +func comparatorComposition(element1 CDXCompositions, element2 CDXCompositions) bool { + // sort by required field "aggregate" + if element1.Aggregate != element2.Aggregate { + return element1.Aggregate < element2.Aggregate + } + // TODO: "tie-breakers": "signature"? + // sort by (sometimes an identifier): "bom-ref" + if element1.BOMRef != nil && element2.BOMRef != nil { + return comparatorBOMRefType(*element1.BOMRef, *element2.BOMRef) + } + // default: preserve existing order + return true +} + +func comparatorVersionRange(element1 CDXVersionRange, element2 CDXVersionRange) bool { + if element1.Version != element2.Version { + return element1.Version < element2.Version + } + if element1.Range != element2.Range { + return element1.Range < element2.Range + } + if element1.Status != element2.Status { + return element1.Status < element2.Status + } + // default: preserve existing order + return true +} diff --git a/schema/cyclonedx_normalize_formulation.go b/schema/cyclonedx_normalize_formulation.go new file mode 100644 index 00000000..e1e028b3 --- /dev/null +++ b/schema/cyclonedx_normalize_formulation.go @@ -0,0 +1,184 @@ +// SPDX-License-Identifier: Apache-2.0 +/* + * Licensed to the Apache Software Foundation (ASF) under one or more + * contributor license agreements. See the NOTICE file distributed with + * this work for additional information regarding copyright ownership. + * The ASF licenses this file to You under the Apache License, Version 2.0 + * (the "License"); you may not use this file except in compliance with + * the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ +package schema + +import "sort" + +// named BOM slice types +type CDXFormulaSlice []CDXFormula +type CDXTaskSlice []CDXTask +type CDXTaskTypeSlice []CDXTaskType +type CDXWorkflowSlice []CDXWorkflow + +// ==================================================================== +// Struct Normalizers +// ==================================================================== + +func (formula *CDXFormula) Normalize() { + // Sort: Components + // Note: The following method is recursive + if formula.Components != nil { + CDXComponentSlice(*formula.Components).Normalize() + } + // Sort: Services + // Note: The following method is recursive + if formula.Services != nil { + CDXServiceSlice(*formula.Services).Normalize() + } + // Sort: Workflows + if formula.Workflows != nil { + CDXWorkflowSlice(*formula.Workflows).Normalize() + } + // Sort: Properties + if formula.Properties != nil { + CDXPropertySlice(*formula.Properties).Normalize() + } +} + +func (workflow *CDXWorkflow) Normalize() { + // Sort: TaskTypes + if workflow.TaskTypes != nil { + CDXTaskTypeSlice(*workflow.TaskTypes).Normalize() + } + // Sort: Tasks + if workflow.Tasks != nil { + CDXTaskSlice(*workflow.Tasks).Normalize() + } + // TODO: Sort: ResourceReferences + // TODO: Sort: Tasks + // TODO: Sort: TaskDependencies + // TODO: Sort: Trigger + // TODO: Sort: Steps + // TODO: Sort: Inputs + // TODO: Sort: Outputs + // TODO: Sort: Workspaces + // TODO: Sort: RuntimeTopology + // Sort: Properties + if workflow.Properties != nil { + CDXPropertySlice(*workflow.Properties).Normalize() + } +} + +func (task *CDXTask) Normalize() { + // Sort: TaskTypes + if task.TaskTypes != nil { + CDXTaskTypeSlice(*task.TaskTypes).Normalize() + } + // TODO: Sort: ResourceReferences + // TODO: Sort: Tasks + // TODO: Sort: TaskDependencies + // TODO: Sort: Trigger + // TODO: Sort: Steps + // TODO: Sort: Inputs + // TODO: Sort: Outputs + // TODO: Sort: Workspaces + // TODO: Sort: RuntimeTopology + // Sort: Properties + if task.Properties != nil { + CDXPropertySlice(*task.Properties).Normalize() + } +} + +// ==================================================================== +// Slice Normalizers +// ==================================================================== + +func (slice CDXFormulaSlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorFormula(element1, element2) + }) + + // TODO: Sort: workflows (tasks), components, services, properties, etc. + // Normalize() each entry in the Dependency slice + for _, formula := range slice { + formula.Normalize() + } +} + +func (slice CDXTaskSlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorTask(element1, element2) + }) + + for _, task := range slice { + task.Normalize() + } +} + +func (slice CDXTaskTypeSlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + // Note: CDXTaskType is a named type for "string" + return slice[i] < slice[j] + }) +} + +func (slice CDXWorkflowSlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorWorkflow(element1, element2) + }) + + for _, workflow := range slice { + workflow.Normalize() + } +} + +// ==================================================================== +// Struct comparators +// ==================================================================== + +// NOTE: sorting structs like this are challenge since there are no required fields +// within the top-level data schema; yet, there are LOTS of slices to sort within. +// TODO: make the "bom-ref" field "required" in v2.0 +func comparatorFormula(element1 CDXFormula, element2 CDXFormula) bool { + // sort by pseudo-required field "bom-ref" + if element1.BOMRef != nil && element2.BOMRef != nil { + return comparatorRefType(*element1.BOMRef, *element2.BOMRef) + } + // default: preserve existing order + return true +} + +func comparatorWorkflow(element1 CDXWorkflow, element2 CDXWorkflow) bool { + // sort by required field "bom-ref" + if element1.BOMRef != nil && element2.BOMRef != nil { + return comparatorRefType(*element1.BOMRef, *element2.BOMRef) + } + if element1.Uid != element2.Uid { + return element1.Uid < element2.Uid + } + // default: preserve existing order + return true +} + +func comparatorTask(element1 CDXTask, element2 CDXTask) bool { + // sort by required field "bom-ref" + if element1.BOMRef != nil && element2.BOMRef != nil { + return comparatorRefType(*element1.BOMRef, *element2.BOMRef) + } + if element1.Uid != element2.Uid { + return element1.Uid < element2.Uid + } + // default: preserve existing order + return true +} diff --git a/schema/cyclonedx_normalize_vulnerability.go b/schema/cyclonedx_normalize_vulnerability.go new file mode 100644 index 00000000..11cdd665 --- /dev/null +++ b/schema/cyclonedx_normalize_vulnerability.go @@ -0,0 +1,256 @@ +// SPDX-License-Identifier: Apache-2.0 +/* + * Licensed to the Apache Software Foundation (ASF) under one or more + * contributor license agreements. See the NOTICE file distributed with + * this work for additional information regarding copyright ownership. + * The ASF licenses this file to You under the Apache License, Version 2.0 + * (the "License"); you may not use this file except in compliance with + * the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ +package schema + +import "sort" + +// named BOM slice types +type CDXAdvisorySlice []CDXAdvisory +type CDXAffectSlice []CDXAffect +type CDXRatingSlice []CDXRating +type CDXSupportingMaterialSlice []CDXSupportingMaterial +type CDXVulnerabilityReferenceSlice []CDXVulnerabilityReference +type CDXVulnerabilitySlice []CDXVulnerability + +// ==================================================================== +// Struct Normalizers +// ==================================================================== + +// type CDXVulnerability struct { +// TODO: Tools interface{} (i.e., need to test for which type it is in order to Normalize) +// +// Analysis *CDXAnalysis `json:"analysis,omitempty"` // v1.4: anon. type +// } +func (vulnerability *CDXVulnerability) Normalize() { + // Sort: References + if vulnerability.References != nil { + CDXVulnerabilityReferenceSlice(*vulnerability.References).Normalize() + } + // Sort: Ratings + if vulnerability.Ratings != nil { + CDXRatingSlice(*vulnerability.Ratings).Normalize() + } + // Sort: Cwes + if vulnerability.Cwes != nil { + sort.Ints(*vulnerability.Cwes) + } + // Sort: Advisories + if vulnerability.Advisories != nil { + CDXAdvisorySlice(*vulnerability.Advisories).Normalize() + } + // Sort: Credits substructure + if vulnerability.Credits != nil { + vulnerability.Credits.Normalize() + } + // TODO: Sort: Tools + // Sort: Analysis + if vulnerability.Analysis != nil { + vulnerability.Analysis.Normalize() + } + // Sort: Affects + if vulnerability.Affects != nil { + CDXAffectSlice(*vulnerability.Affects).Normalize() + } + // Sort: ProofOfConcept + if vulnerability.ProofOfConcept != nil { + vulnerability.ProofOfConcept.Normalize() + } + // Sort: Properties + if vulnerability.Properties != nil { + CDXPropertySlice(*vulnerability.Properties).Normalize() + } +} + +func (credit *CDXCredit) Normalize() { + if credit.Organizations != nil { + CDXOrganizationalEntitySlice(*credit.Organizations).Normalize() + } + if credit.Individuals != nil { + CDXOrganizationalContactSlice(*credit.Individuals).Normalize() + } +} + +func (poc *CDXProofOfConcept) Normalize() { + if poc.SupportingMaterial != nil { + CDXSupportingMaterialSlice(*poc.SupportingMaterial).Normalize() + } +} + +func (analysis *CDXAnalysis) Normalize() { + if analysis.Response != nil { + sort.Strings(*analysis.Response) + } +} + +// ==================================================================== +// Slice Normalizers +// ==================================================================== +func (slice CDXVulnerabilitySlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorVulnerability(element1, element2) + }) + // TODO: sort (nested) children of each vulnerability + for _, vulnerability := range slice { + vulnerability.Normalize() + } +} + +func (slice CDXRatingSlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorRating(element1, element2) + }) +} + +func (slice CDXVulnerabilityReferenceSlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorVulnerabilityReference(element1, element2) + }) +} + +func (slice CDXAdvisorySlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorAdvisory(element1, element2) + }) +} + +func (slice CDXAffectSlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorAffect(element1, element2) + }) +} + +func (slice CDXSupportingMaterialSlice) Normalize() { + sort.Slice(slice, func(i, j int) bool { + element1 := slice[i] + element2 := slice[j] + return comparatorSupportingMaterial(element1, element2) + }) +} + +// ==================================================================== +// Struct comparators +// ==================================================================== + +// NOTE: there are NO required fields in the vulnerability object's data schema +// sort by we will sort using fields that may contain local, identifying values +// TODO sort "advisories", "cwes" and "ratings.source" and "affects.ref" +func comparatorVulnerability(element1 CDXVulnerability, element2 CDXVulnerability) bool { + // optional identifiers: "id" + if element1.Id != element2.Id { + return element1.Id < element2.Id + } + // pseudo-required fields: + if element1.Created != element2.Created { + return element1.Created < element2.Created + } + if element1.Published != element2.Published { + return element1.Published < element2.Published + } + if element1.Updated != element2.Updated { + return element1.Updated < element2.Updated + } + // other optional "tie breakers": + if element1.Source != nil && element2.Source != nil { + return comparatorSource(*element1.Source, *element2.Source) + } + // sort by (sometimes an identifier): "bom-ref" + if element1.BOMRef != nil && element2.BOMRef != nil { + return comparatorRefType(*element1.BOMRef, *element2.BOMRef) + } + // default: preserve existing order + return true +} + +func comparatorAdvisory(element1 CDXAdvisory, element2 CDXAdvisory) bool { + if element1.Title != element2.Title { + return element1.Title < element2.Title + } + if element1.Url != element2.Url { + return element1.Url < element2.Url + } + return true +} + +// TODO: Look into sort by: Versions *[]CDXVersionRange (after normalized) +func comparatorAffect(element1 CDXAffect, element2 CDXAffect) bool { + if element1.Ref != nil && element2.Ref != nil { + return comparatorRefLinkType(*element1.Ref, *element2.Ref) + } + return true +} + +func comparatorRating(element1 CDXRating, element2 CDXRating) bool { + if element1.Severity != element2.Severity { + return element1.Severity < element2.Severity + } + if element1.Score != element2.Score { + return element1.Score < element2.Score + } + if element1.Method != element2.Method { + return element1.Method < element2.Method + } + if element1.Source != nil && element2.Source != nil { + return comparatorSource(*element1.Source, *element2.Source) + } + // default: preserve existing order + return true +} + +func comparatorSource(element1 CDXVulnerabilitySource, element2 CDXVulnerabilitySource) bool { + if element1.Name != element2.Name { + return element1.Name < element2.Name + } + if element1.Url != element2.Url { + return element1.Url < element2.Url + } + return true +} + +func comparatorSupportingMaterial(element1 CDXSupportingMaterial, element2 CDXSupportingMaterial) bool { + if element1.ContentType != element2.ContentType { + return element1.ContentType < element2.ContentType + } + if element1.Encoding != element2.Encoding { + return element1.Encoding < element2.Encoding + } + if element1.Content != element2.Content { + return element1.Content < element2.Content + } + return true +} + +func comparatorVulnerabilityReference(element1 CDXVulnerabilityReference, element2 CDXVulnerabilityReference) bool { + if element1.Id != element2.Id { + return element1.Id < element2.Id + } + // other optional "tie breakers": + if element1.Source != nil && element2.Source != nil { + return comparatorSource(*element1.Source, *element2.Source) + } + return true +} diff --git a/schema/cyclonedx_vulnerability.go b/schema/cyclonedx_vulnerability.go index d6b21543..e64a72f4 100644 --- a/schema/cyclonedx_vulnerability.go +++ b/schema/cyclonedx_vulnerability.go @@ -24,9 +24,9 @@ package schema // Note: "cwes" is a array of "cwe" which is a constrained `int` // NOTE: CDXRefType is a named `string` type as of v1.5 type CDXVulnerability struct { - BOMRef *CDXRefType `json:"bom-ref,omitempty"` // v1.4 Id string `json:"id,omitempty"` // v1.4 Source *CDXVulnerabilitySource `json:"source,omitempty"` // v1.4 + BOMRef *CDXRefType `json:"bom-ref,omitempty"` // v1.4 References *[]CDXVulnerabilityReference `json:"references"` // v1.4: anon. type Ratings *[]CDXRating `json:"ratings,omitempty"` // v1.4 Cwes *[]int `json:"cwes,omitempty"` // v1.4 diff --git a/test/diff/panic/nats1.json b/test/diff/panic/nats1.json new file mode 100644 index 00000000..97476a7a --- /dev/null +++ b/test/diff/panic/nats1.json @@ -0,0 +1,6603 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.5", + "serialNumber": "urn:uuid:6eec6ee9-3a97-4531-acb1-214ac9b87ecf", + "version": 1, + "metadata": { + "timestamp": "2024-03-20T08:14:05+00:00", + "tools": { + "components": [ + { + "group": "aquasecurity", + "name": "trivy", + "type": "application", + "version": "0.49.1" + } + ] + }, + "component": { + "type": "container", + "name": "natsio/nats-box:0.14.1", + "bom-ref": "pkg:oci/nats-box@sha256%3Aa67913df95f1d5b265117e49e4c83228091d13d6783d80215ddcf84aba695ef4?arch=amd64&repository_url=index.docker.io%2Fnatsio%2Fnats-box", + "purl": "pkg:oci/nats-box@sha256%3Aa67913df95f1d5b265117e49e4c83228091d13d6783d80215ddcf84aba695ef4?arch=amd64&repository_url=index.docker.io%2Fnatsio%2Fnats-box", + "properties": [ + { + "name": "aquasecurity:trivy:DiffID", + "value": "sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438,sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581,sha256:f62cd225330b873d42d26843c1c8c83c0d76df75f4f634f2583e44f3d19bf822,sha256:10f907811045b5d89e111819899be9b23c7899d6ca621b88e382d734e8db51af,sha256:6c5c015d50df16c2634e042303b975f72846a0d35146f460c3fdb1627d6a696d,sha256:e84070d74aa1753864c9a59f7d365e39eb3e51d1dac914c32a2b4a4e5d9c3af7,sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef" + }, + { + "name": "aquasecurity:trivy:ImageID", + "value": "sha256:d85f313df734d9e111f2e97ed605cced9ddba62e510ae0ee4e3a06ce21ccd4d1" + }, + { + "name": "aquasecurity:trivy:RepoDigest", + "value": "natsio/nats-box@sha256:a67913df95f1d5b265117e49e4c83228091d13d6783d80215ddcf84aba695ef4" + }, + { + "name": "aquasecurity:trivy:RepoTag", + "value": "natsio/nats-box:0.14.1" + }, + { + "name": "aquasecurity:trivy:SchemaVersion", + "value": "2" + } + ] + } + }, + "components": [ + { + "type": "application", + "name": "usr/local/bin/nats", + "bom-ref": "4ce1b5d8-fb7a-4506-9c92-ff2ca0de8e69", + "properties": [ + { + "name": "aquasecurity:trivy:Class", + "value": "lang-pkgs" + }, + { + "name": "aquasecurity:trivy:Type", + "value": "gobinary" + } + ] + }, + { + "type": "application", + "name": "usr/local/bin/nats-top", + "bom-ref": "def80684-0ff2-4775-b7df-93952a5dd40e", + "properties": [ + { + "name": "aquasecurity:trivy:Class", + "value": "lang-pkgs" + }, + { + "name": "aquasecurity:trivy:Type", + "value": "gobinary" + } + ] + }, + { + "type": "application", + "name": "usr/local/bin/nsc", + "bom-ref": "1041129c-b3a8-4896-9ba4-cf92e58ed5d2", + "properties": [ + { + "name": "aquasecurity:trivy:Class", + "value": "lang-pkgs" + }, + { + "name": "aquasecurity:trivy:Type", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "alpine-baselayout", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.4.3-r1?arch=x86_64&distro=3.18.4", + "version": "3.4.3-r1", + "hashes": [ + { + "alg": "SHA-1", + "content": "cf0bca32762cd5be9974f4c127467b0f93f78f20" + } + ], + "licenses": [ + { + "license": { + "name": "GPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/alpine-baselayout@3.4.3-r1?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:96526aa774ef0126ad0fe9e9a95764c5fc37f409ab9e97021e7b4775d82bf6fa" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "alpine-baselayout@3.4.3-r1" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "alpine-baselayout" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "3.4.3-r1" + } + ] + }, + { + "type": "library", + "name": "alpine-baselayout-data", + "bom-ref": "pkg:apk/alpine/alpine-baselayout-data@3.4.3-r1?arch=x86_64&distro=3.18.4", + "version": "3.4.3-r1", + "hashes": [ + { + "alg": "SHA-1", + "content": "602007ee374ed96f35e9bf39b1487d67c6afe027" + } + ], + "licenses": [ + { + "license": { + "name": "GPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/alpine-baselayout-data@3.4.3-r1?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:96526aa774ef0126ad0fe9e9a95764c5fc37f409ab9e97021e7b4775d82bf6fa" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "alpine-baselayout-data@3.4.3-r1" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "alpine-baselayout" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "3.4.3-r1" + } + ] + }, + { + "type": "library", + "name": "alpine-keys", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=3.18.4", + "version": "2.4-r1", + "hashes": [ + { + "alg": "SHA-1", + "content": "ec3a3d5ef4c7a168d09516097bb3219ca77c1534" + } + ], + "licenses": [ + { + "license": { + "name": "MIT" + } + } + ], + "purl": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:96526aa774ef0126ad0fe9e9a95764c5fc37f409ab9e97021e7b4775d82bf6fa" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "alpine-keys@2.4-r1" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "alpine-keys" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "2.4-r1" + } + ] + }, + { + "type": "library", + "name": "apk-tools", + "bom-ref": "pkg:apk/alpine/apk-tools@2.14.0-r2?arch=x86_64&distro=3.18.4", + "version": "2.14.0-r2", + "hashes": [ + { + "alg": "SHA-1", + "content": "8cde25f239ebf691cd135a3954e5193c1ac2ae13" + } + ], + "licenses": [ + { + "license": { + "name": "GPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/apk-tools@2.14.0-r2?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:96526aa774ef0126ad0fe9e9a95764c5fc37f409ab9e97021e7b4775d82bf6fa" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "apk-tools@2.14.0-r2" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "apk-tools" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "2.14.0-r2" + } + ] + }, + { + "type": "library", + "name": "brotli-libs", + "bom-ref": "pkg:apk/alpine/brotli-libs@1.0.9-r14?arch=x86_64&distro=3.18.4", + "version": "1.0.9-r14", + "hashes": [ + { + "alg": "SHA-1", + "content": "48b2006d35cdde849a18f7cadbfaf17c9273130f" + } + ], + "licenses": [ + { + "license": { + "name": "MIT" + } + } + ], + "purl": "pkg:apk/alpine/brotli-libs@1.0.9-r14?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:f62cd225330b873d42d26843c1c8c83c0d76df75f4f634f2583e44f3d19bf822" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:e4ad2c090cefe878e69e52693cea8bf245be49f6f6cf7e274ab0118ddc57853b" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "brotli-libs@1.0.9-r14" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "brotli" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "1.0.9-r14" + } + ] + }, + { + "type": "library", + "name": "busybox", + "bom-ref": "pkg:apk/alpine/busybox@1.36.1-r4?arch=x86_64&distro=3.18.4", + "version": "1.36.1-r4", + "hashes": [ + { + "alg": "SHA-1", + "content": "f2aefa121ae047b6d66f587964014e782dd761ed" + } + ], + "licenses": [ + { + "license": { + "name": "GPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/busybox@1.36.1-r4?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:f62cd225330b873d42d26843c1c8c83c0d76df75f4f634f2583e44f3d19bf822" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:e4ad2c090cefe878e69e52693cea8bf245be49f6f6cf7e274ab0118ddc57853b" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "busybox@1.36.1-r4" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "busybox" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "1.36.1-r4" + } + ] + }, + { + "type": "library", + "name": "busybox-binsh", + "bom-ref": "pkg:apk/alpine/busybox-binsh@1.36.1-r4?arch=x86_64&distro=3.18.4", + "version": "1.36.1-r4", + "hashes": [ + { + "alg": "SHA-1", + "content": "cad2ac72ebcf9db9137100f2529528b165328fc3" + } + ], + "licenses": [ + { + "license": { + "name": "GPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/busybox-binsh@1.36.1-r4?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:f62cd225330b873d42d26843c1c8c83c0d76df75f4f634f2583e44f3d19bf822" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:e4ad2c090cefe878e69e52693cea8bf245be49f6f6cf7e274ab0118ddc57853b" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "busybox-binsh@1.36.1-r4" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "busybox" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "1.36.1-r4" + } + ] + }, + { + "type": "library", + "name": "ca-certificates", + "bom-ref": "pkg:apk/alpine/ca-certificates@20230506-r0?arch=x86_64&distro=3.18.4", + "version": "20230506-r0", + "hashes": [ + { + "alg": "SHA-1", + "content": "146f0cfbbc3e7648d5f55cb49861565b6b78f83a" + } + ], + "licenses": [ + { + "license": { + "name": "MIT" + } + }, + { + "license": { + "name": "MPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/ca-certificates@20230506-r0?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:f62cd225330b873d42d26843c1c8c83c0d76df75f4f634f2583e44f3d19bf822" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:e4ad2c090cefe878e69e52693cea8bf245be49f6f6cf7e274ab0118ddc57853b" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "ca-certificates@20230506-r0" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "ca-certificates" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "20230506-r0" + } + ] + }, + { + "type": "library", + "name": "ca-certificates-bundle", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20230506-r0?arch=x86_64&distro=3.18.4", + "version": "20230506-r0", + "hashes": [ + { + "alg": "SHA-1", + "content": "47f485d08670a9eb21ebf10e70ae65dc43ab6c3d" + } + ], + "licenses": [ + { + "license": { + "name": "MIT" + } + }, + { + "license": { + "name": "MPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/ca-certificates-bundle@20230506-r0?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:96526aa774ef0126ad0fe9e9a95764c5fc37f409ab9e97021e7b4775d82bf6fa" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "ca-certificates-bundle@20230506-r0" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "ca-certificates" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "20230506-r0" + } + ] + }, + { + "type": "library", + "name": "curl", + "bom-ref": "pkg:apk/alpine/curl@8.4.0-r0?arch=x86_64&distro=3.18.4", + "version": "8.4.0-r0", + "hashes": [ + { + "alg": "SHA-1", + "content": "767892cd1643cd073d6ba6846b7f3452e3851b7b" + } + ], + "licenses": [ + { + "license": { + "name": "curl" + } + } + ], + "purl": "pkg:apk/alpine/curl@8.4.0-r0?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:f62cd225330b873d42d26843c1c8c83c0d76df75f4f634f2583e44f3d19bf822" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:e4ad2c090cefe878e69e52693cea8bf245be49f6f6cf7e274ab0118ddc57853b" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "curl@8.4.0-r0" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "curl" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "8.4.0-r0" + } + ] + }, + { + "type": "library", + "name": "figlet", + "bom-ref": "pkg:apk/alpine/figlet@2.2.5-r3?arch=x86_64&distro=3.18.4", + "version": "2.2.5-r3", + "hashes": [ + { + "alg": "SHA-1", + "content": "fa17a85bc6a99bd8e1723b19d2d10d73cf7999ff" + } + ], + "licenses": [ + { + "license": { + "name": "BSD-3-Clause" + } + } + ], + "purl": "pkg:apk/alpine/figlet@2.2.5-r3?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:f62cd225330b873d42d26843c1c8c83c0d76df75f4f634f2583e44f3d19bf822" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:e4ad2c090cefe878e69e52693cea8bf245be49f6f6cf7e274ab0118ddc57853b" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "figlet@2.2.5-r3" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "figlet" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "2.2.5-r3" + } + ] + }, + { + "type": "library", + "name": "github.com/AlecAivazis/survey/v2", + "bom-ref": "pkg:golang/github.com/alecaivazis/survey/v2@v2.3.6", + "version": "v2.3.6", + "purl": "pkg:golang/github.com/alecaivazis/survey/v2@v2.3.6", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/AlecAivazis/survey/v2", + "bom-ref": "pkg:golang/github.com/alecaivazis/survey/v2@v2.3.7", + "version": "v2.3.7", + "purl": "pkg:golang/github.com/alecaivazis/survey/v2@v2.3.7", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/HdrHistogram/hdrhistogram-go", + "bom-ref": "pkg:golang/github.com/hdrhistogram/hdrhistogram-go@v1.1.2", + "version": "v1.1.2", + "purl": "pkg:golang/github.com/hdrhistogram/hdrhistogram-go@v1.1.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/antonmedv/expr", + "bom-ref": "pkg:golang/github.com/antonmedv/expr@v1.15.2", + "version": "v1.15.2", + "purl": "pkg:golang/github.com/antonmedv/expr@v1.15.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/beorn7/perks", + "bom-ref": "pkg:golang/github.com/beorn7/perks@v1.0.1", + "version": "v1.0.1", + "purl": "pkg:golang/github.com/beorn7/perks@v1.0.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/blang/semver", + "bom-ref": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible", + "version": "v3.5.1+incompatible", + "purl": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/briandowns/spinner", + "bom-ref": "pkg:golang/github.com/briandowns/spinner@v1.23.0", + "version": "v1.23.0", + "purl": "pkg:golang/github.com/briandowns/spinner@v1.23.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/cespare/xxhash/v2", + "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.2.0", + "version": "v2.2.0", + "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.2.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/choria-io/fisk", + "bom-ref": "pkg:golang/github.com/choria-io/fisk@v0.6.0", + "version": "v0.6.0", + "purl": "pkg:golang/github.com/choria-io/fisk@v0.6.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/cpuguy83/go-md2man/v2", + "bom-ref": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.2", + "version": "v2.0.2", + "purl": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/dustin/go-humanize", + "bom-ref": "pkg:golang/github.com/dustin/go-humanize@v1.0.1", + "version": "v1.0.1", + "purl": "pkg:golang/github.com/dustin/go-humanize@v1.0.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/emicklei/dot", + "bom-ref": "pkg:golang/github.com/emicklei/dot@v1.6.0", + "version": "v1.6.0", + "purl": "pkg:golang/github.com/emicklei/dot@v1.6.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/fatih/color", + "bom-ref": "pkg:golang/github.com/fatih/color@v1.15.0", + "version": "v1.15.0", + "purl": "pkg:golang/github.com/fatih/color@v1.15.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/ghodss/yaml", + "bom-ref": "pkg:golang/github.com/ghodss/yaml@v1.0.0", + "version": "v1.0.0", + "purl": "pkg:golang/github.com/ghodss/yaml@v1.0.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/golang/protobuf", + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.3", + "version": "v1.5.3", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.3", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/google/go-cmp", + "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.5.9", + "version": "v0.5.9", + "purl": "pkg:golang/github.com/google/go-cmp@v0.5.9", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/google/go-github/v30", + "bom-ref": "pkg:golang/github.com/google/go-github/v30@v30.1.0", + "version": "v30.1.0", + "purl": "pkg:golang/github.com/google/go-github/v30@v30.1.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/google/go-querystring", + "bom-ref": "pkg:golang/github.com/google/go-querystring@v1.1.0", + "version": "v1.1.0", + "purl": "pkg:golang/github.com/google/go-querystring@v1.1.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/google/shlex", + "bom-ref": "pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510", + "version": "v0.0.0-20191202100458-e7afc7fbc510", + "purl": "pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/gosuri/uilive", + "bom-ref": "pkg:golang/github.com/gosuri/uilive@v0.0.4", + "version": "v0.0.4", + "purl": "pkg:golang/github.com/gosuri/uilive@v0.0.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/gosuri/uiprogress", + "bom-ref": "pkg:golang/github.com/gosuri/uiprogress@v0.0.1", + "version": "v0.0.1", + "purl": "pkg:golang/github.com/gosuri/uiprogress@v0.0.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/guptarohit/asciigraph", + "bom-ref": "pkg:golang/github.com/guptarohit/asciigraph@v0.5.6", + "version": "v0.5.6", + "purl": "pkg:golang/github.com/guptarohit/asciigraph@v0.5.6", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/inconshreveable/go-update", + "bom-ref": "pkg:golang/github.com/inconshreveable/go-update@v0.0.0-20160112193335-8152e7eb6ccf", + "version": "v0.0.0-20160112193335-8152e7eb6ccf", + "purl": "pkg:golang/github.com/inconshreveable/go-update@v0.0.0-20160112193335-8152e7eb6ccf", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/jedib0t/go-pretty/v6", + "bom-ref": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7", + "version": "v6.4.7", + "purl": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/kballard/go-shellquote", + "bom-ref": "pkg:golang/github.com/kballard/go-shellquote@v0.0.0-20180428030007-95032a82bc51", + "version": "v0.0.0-20180428030007-95032a82bc51", + "purl": "pkg:golang/github.com/kballard/go-shellquote@v0.0.0-20180428030007-95032a82bc51", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/klauspost/compress", + "bom-ref": "pkg:golang/github.com/klauspost/compress@v1.16.5", + "version": "v1.16.5", + "purl": "pkg:golang/github.com/klauspost/compress@v1.16.5", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/klauspost/compress", + "bom-ref": "pkg:golang/github.com/klauspost/compress@v1.17.0", + "version": "v1.17.0", + "purl": "pkg:golang/github.com/klauspost/compress@v1.17.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/mattn/go-colorable", + "bom-ref": "pkg:golang/github.com/mattn/go-colorable@v0.1.13", + "version": "v0.1.13", + "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.13", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/mattn/go-isatty", + "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.17", + "version": "v0.0.17", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.17", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/mattn/go-isatty", + "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "version": "v0.0.19", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/mattn/go-runewidth", + "bom-ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.14", + "version": "v0.0.14", + "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.14", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/mattn/go-runewidth", + "bom-ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15", + "version": "v0.0.15", + "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/matttproud/golang_protobuf_extensions", + "bom-ref": "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.4", + "version": "v1.0.4", + "purl": "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/mgutz/ansi", + "bom-ref": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d", + "version": "v0.0.0-20200706080929-d51e80ef957d", + "purl": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/minio/highwayhash", + "bom-ref": "pkg:golang/github.com/minio/highwayhash@v1.0.2", + "version": "v1.0.2", + "purl": "pkg:golang/github.com/minio/highwayhash@v1.0.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/mitchellh/go-homedir", + "bom-ref": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0", + "version": "v1.1.0", + "purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/mitchellh/go-wordwrap", + "bom-ref": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1", + "version": "v1.0.1", + "purl": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/cliprompts/v2", + "bom-ref": "pkg:golang/github.com/nats-io/cliprompts/v2@v2.0.0-20200221130455-2737f3b8cbb9", + "version": "v2.0.0-20200221130455-2737f3b8cbb9", + "purl": "pkg:golang/github.com/nats-io/cliprompts/v2@v2.0.0-20200221130455-2737f3b8cbb9", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/jsm.go", + "bom-ref": "pkg:golang/github.com/nats-io/jsm.go@v0.0.35", + "version": "v0.0.35", + "purl": "pkg:golang/github.com/nats-io/jsm.go@v0.0.35", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/jsm.go", + "bom-ref": "pkg:golang/github.com/nats-io/jsm.go@v0.1.0", + "version": "v0.1.0", + "purl": "pkg:golang/github.com/nats-io/jsm.go@v0.1.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/jwt/v2", + "bom-ref": "pkg:golang/github.com/nats-io/jwt/v2@v2.4.1", + "version": "v2.4.1", + "purl": "pkg:golang/github.com/nats-io/jwt/v2@v2.4.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/jwt/v2", + "bom-ref": "pkg:golang/github.com/nats-io/jwt/v2@v2.5.2", + "version": "v2.5.2", + "purl": "pkg:golang/github.com/nats-io/jwt/v2@v2.5.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nats-server/v2", + "bom-ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.10.0", + "version": "v2.10.0", + "purl": "pkg:golang/github.com/nats-io/nats-server/v2@v2.10.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nats-server/v2", + "bom-ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.9.19", + "version": "v2.9.19", + "purl": "pkg:golang/github.com/nats-io/nats-server/v2@v2.9.19", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nats.go", + "bom-ref": "pkg:golang/github.com/nats-io/nats.go@v1.24.0", + "version": "v1.24.0", + "purl": "pkg:golang/github.com/nats-io/nats.go@v1.24.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nats.go", + "bom-ref": "pkg:golang/github.com/nats-io/nats.go@v1.30.0", + "version": "v1.30.0", + "purl": "pkg:golang/github.com/nats-io/nats.go@v1.30.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nkeys", + "bom-ref": "pkg:golang/github.com/nats-io/nkeys@v0.4.4", + "version": "v0.4.4", + "purl": "pkg:golang/github.com/nats-io/nkeys@v0.4.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nkeys", + "bom-ref": "pkg:golang/github.com/nats-io/nkeys@v0.4.5", + "version": "v0.4.5", + "purl": "pkg:golang/github.com/nats-io/nkeys@v0.4.5", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nuid", + "bom-ref": "pkg:golang/github.com/nats-io/nuid@v1.0.1", + "version": "v1.0.1", + "purl": "pkg:golang/github.com/nats-io/nuid@v1.0.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nsf/termbox-go", + "bom-ref": "pkg:golang/github.com/nsf/termbox-go@v1.1.1", + "version": "v1.1.1", + "purl": "pkg:golang/github.com/nsf/termbox-go@v1.1.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/prometheus/client_golang", + "bom-ref": "pkg:golang/github.com/prometheus/client_golang@v1.16.0", + "version": "v1.16.0", + "purl": "pkg:golang/github.com/prometheus/client_golang@v1.16.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/prometheus/client_model", + "bom-ref": "pkg:golang/github.com/prometheus/client_model@v0.4.0", + "version": "v0.4.0", + "purl": "pkg:golang/github.com/prometheus/client_model@v0.4.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/prometheus/common", + "bom-ref": "pkg:golang/github.com/prometheus/common@v0.44.0", + "version": "v0.44.0", + "purl": "pkg:golang/github.com/prometheus/common@v0.44.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/prometheus/procfs", + "bom-ref": "pkg:golang/github.com/prometheus/procfs@v0.11.1", + "version": "v0.11.1", + "purl": "pkg:golang/github.com/prometheus/procfs@v0.11.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/rhysd/go-github-selfupdate", + "bom-ref": "pkg:golang/github.com/rhysd/go-github-selfupdate@v1.2.3", + "version": "v1.2.3", + "purl": "pkg:golang/github.com/rhysd/go-github-selfupdate@v1.2.3", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/rivo/uniseg", + "bom-ref": "pkg:golang/github.com/rivo/uniseg@v0.2.0", + "version": "v0.2.0", + "purl": "pkg:golang/github.com/rivo/uniseg@v0.2.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/rivo/uniseg", + "bom-ref": "pkg:golang/github.com/rivo/uniseg@v0.4.4", + "version": "v0.4.4", + "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/russross/blackfriday/v2", + "bom-ref": "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0", + "version": "v2.1.0", + "purl": "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/santhosh-tekuri/jsonschema/v5", + "bom-ref": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1", + "version": "v5.3.1", + "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/spf13/cobra", + "bom-ref": "pkg:golang/github.com/spf13/cobra@v1.6.1", + "version": "v1.6.1", + "purl": "pkg:golang/github.com/spf13/cobra@v1.6.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/spf13/pflag", + "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "version": "v1.0.5", + "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/tcnksm/go-gitconfig", + "bom-ref": "pkg:golang/github.com/tcnksm/go-gitconfig@v0.1.2", + "version": "v0.1.2", + "purl": "pkg:golang/github.com/tcnksm/go-gitconfig@v0.1.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/tylertreat/hdrhistogram-writer", + "bom-ref": "pkg:golang/github.com/tylertreat/hdrhistogram-writer@v0.0.0-20210816161836-2e440612a39f", + "version": "v0.0.0-20210816161836-2e440612a39f", + "purl": "pkg:golang/github.com/tylertreat/hdrhistogram-writer@v0.0.0-20210816161836-2e440612a39f", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/ulikunitz/xz", + "bom-ref": "pkg:golang/github.com/ulikunitz/xz@v0.5.11", + "version": "v0.5.11", + "purl": "pkg:golang/github.com/ulikunitz/xz@v0.5.11", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/xlab/tablewriter", + "bom-ref": "pkg:golang/github.com/xlab/tablewriter@v0.0.0-20160610135559-80b567a11ad5", + "version": "v0.0.0-20160610135559-80b567a11ad5", + "purl": "pkg:golang/github.com/xlab/tablewriter@v0.0.0-20160610135559-80b567a11ad5", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/crypto", + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.13.0", + "version": "v0.13.0", + "purl": "pkg:golang/golang.org/x/crypto@v0.13.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/crypto", + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.7.0", + "version": "v0.7.0", + "purl": "pkg:golang/golang.org/x/crypto@v0.7.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/crypto", + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.9.0", + "version": "v0.9.0", + "purl": "pkg:golang/golang.org/x/crypto@v0.9.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/net", + "bom-ref": "pkg:golang/golang.org/x/net@v0.15.0", + "version": "v0.15.0", + "purl": "pkg:golang/golang.org/x/net@v0.15.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/oauth2", + "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.6.0", + "version": "v0.6.0", + "purl": "pkg:golang/golang.org/x/oauth2@v0.6.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/sys", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.12.0", + "version": "v0.12.0", + "purl": "pkg:golang/golang.org/x/sys@v0.12.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/sys", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.6.0", + "version": "v0.6.0", + "purl": "pkg:golang/golang.org/x/sys@v0.6.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/sys", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.8.0", + "version": "v0.8.0", + "purl": "pkg:golang/golang.org/x/sys@v0.8.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/term", + "bom-ref": "pkg:golang/golang.org/x/term@v0.12.0", + "version": "v0.12.0", + "purl": "pkg:golang/golang.org/x/term@v0.12.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/term", + "bom-ref": "pkg:golang/golang.org/x/term@v0.6.0", + "version": "v0.6.0", + "purl": "pkg:golang/golang.org/x/term@v0.6.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/text", + "bom-ref": "pkg:golang/golang.org/x/text@v0.13.0", + "version": "v0.13.0", + "purl": "pkg:golang/golang.org/x/text@v0.13.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/text", + "bom-ref": "pkg:golang/golang.org/x/text@v0.8.0", + "version": "v0.8.0", + "purl": "pkg:golang/golang.org/x/text@v0.8.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/time", + "bom-ref": "pkg:golang/golang.org/x/time@v0.3.0", + "version": "v0.3.0", + "purl": "pkg:golang/golang.org/x/time@v0.3.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "google.golang.org/protobuf", + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.31.0", + "version": "v1.31.0", + "purl": "pkg:golang/google.golang.org/protobuf@v1.31.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "gopkg.in/gizak/termui.v1", + "bom-ref": "pkg:golang/gopkg.in/gizak/termui.v1@v1.0.0-20151021151108-e62b5929642a", + "version": "v1.0.0-20151021151108-e62b5929642a", + "purl": "pkg:golang/gopkg.in/gizak/termui.v1@v1.0.0-20151021151108-e62b5929642a", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "gopkg.in/yaml.v2", + "bom-ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "version": "v2.4.0", + "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "gopkg.in/yaml.v3", + "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "version": "v3.0.1", + "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:1e6df965a8abbe7f1c6eebb308925dfcccfa3a901de58f2a7a67692598061581" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:3e4c9abfa3c7f085462d845d2d9e232c5f8d065a41c420adae60b3406c9e856c" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "jq", + "bom-ref": "pkg:apk/alpine/jq@1.6-r3?arch=x86_64&distro=3.18.4", + "version": "1.6-r3", + "hashes": [ + { + "alg": "SHA-1", + "content": "6beb4d293502d8477f30cb51596397bdcddfd85f" + } + ], + "licenses": [ + { + "license": { + "name": "MIT" + } + } + ], + "purl": "pkg:apk/alpine/jq@1.6-r3?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:f62cd225330b873d42d26843c1c8c83c0d76df75f4f634f2583e44f3d19bf822" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:e4ad2c090cefe878e69e52693cea8bf245be49f6f6cf7e274ab0118ddc57853b" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "jq@1.6-r3" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "jq" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "1.6-r3" + } + ] + }, + { + "type": "library", + "name": "libc-utils", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r5?arch=x86_64&distro=3.18.4", + "version": "0.7.2-r5", + "hashes": [ + { + "alg": "SHA-1", + "content": "2e59dafeb8bca0786540846c686f121ae8348a42" + } + ], + "licenses": [ + { + "license": { + "name": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-3-Clause" + } + } + ], + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r5?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:96526aa774ef0126ad0fe9e9a95764c5fc37f409ab9e97021e7b4775d82bf6fa" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "libc-utils@0.7.2-r5" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "libc-dev" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "0.7.2-r5" + } + ] + }, + { + "type": "library", + "name": "libcrypto3", + "bom-ref": "pkg:apk/alpine/libcrypto3@3.1.3-r0?arch=x86_64&distro=3.18.4", + "version": "3.1.3-r0", + "hashes": [ + { + "alg": "SHA-1", + "content": "fa12c7857510118cad0c71e2695361574e3ddd3b" + } + ], + "licenses": [ + { + "license": { + "name": "Apache-2.0" + } + } + ], + "purl": "pkg:apk/alpine/libcrypto3@3.1.3-r0?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:96526aa774ef0126ad0fe9e9a95764c5fc37f409ab9e97021e7b4775d82bf6fa" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "libcrypto3@3.1.3-r0" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "openssl" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "3.1.3-r0" + } + ] + }, + { + "type": "library", + "name": "libcurl", + "bom-ref": "pkg:apk/alpine/libcurl@8.4.0-r0?arch=x86_64&distro=3.18.4", + "version": "8.4.0-r0", + "hashes": [ + { + "alg": "SHA-1", + "content": "c41a6f900bb095727f706ed53dd52ff34f586cc8" + } + ], + "licenses": [ + { + "license": { + "name": "curl" + } + } + ], + "purl": "pkg:apk/alpine/libcurl@8.4.0-r0?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:f62cd225330b873d42d26843c1c8c83c0d76df75f4f634f2583e44f3d19bf822" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:e4ad2c090cefe878e69e52693cea8bf245be49f6f6cf7e274ab0118ddc57853b" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "libcurl@8.4.0-r0" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "curl" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "8.4.0-r0" + } + ] + }, + { + "type": "library", + "name": "libidn2", + "bom-ref": "pkg:apk/alpine/libidn2@2.3.4-r1?arch=x86_64&distro=3.18.4", + "version": "2.3.4-r1", + "hashes": [ + { + "alg": "SHA-1", + "content": "7bc3cd824a388677844c8e6e75ccf5344cf42f6f" + } + ], + "licenses": [ + { + "license": { + "name": "GPL-2.0" + } + }, + { + "license": { + "name": "LGPL-3.0-or-later" + } + } + ], + "purl": "pkg:apk/alpine/libidn2@2.3.4-r1?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:f62cd225330b873d42d26843c1c8c83c0d76df75f4f634f2583e44f3d19bf822" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:e4ad2c090cefe878e69e52693cea8bf245be49f6f6cf7e274ab0118ddc57853b" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "libidn2@2.3.4-r1" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "libidn2" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "2.3.4-r1" + } + ] + }, + { + "type": "library", + "name": "libssl3", + "bom-ref": "pkg:apk/alpine/libssl3@3.1.3-r0?arch=x86_64&distro=3.18.4", + "version": "3.1.3-r0", + "hashes": [ + { + "alg": "SHA-1", + "content": "ceb37221d0f02272791d42e583b952031bcb7957" + } + ], + "licenses": [ + { + "license": { + "name": "Apache-2.0" + } + } + ], + "purl": "pkg:apk/alpine/libssl3@3.1.3-r0?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:96526aa774ef0126ad0fe9e9a95764c5fc37f409ab9e97021e7b4775d82bf6fa" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "libssl3@3.1.3-r0" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "openssl" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "3.1.3-r0" + } + ] + }, + { + "type": "library", + "name": "libunistring", + "bom-ref": "pkg:apk/alpine/libunistring@1.1-r1?arch=x86_64&distro=3.18.4", + "version": "1.1-r1", + "hashes": [ + { + "alg": "SHA-1", + "content": "14ce8b4b122fdd33acb11cc7f106aa0561c219a1" + } + ], + "licenses": [ + { + "license": { + "name": "GPL-2.0" + } + }, + { + "license": { + "name": "LGPL-3.0-or-later" + } + } + ], + "purl": "pkg:apk/alpine/libunistring@1.1-r1?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:f62cd225330b873d42d26843c1c8c83c0d76df75f4f634f2583e44f3d19bf822" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:e4ad2c090cefe878e69e52693cea8bf245be49f6f6cf7e274ab0118ddc57853b" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "libunistring@1.1-r1" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "libunistring" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "1.1-r1" + } + ] + }, + { + "type": "library", + "name": "musl", + "bom-ref": "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4", + "version": "1.2.4-r2", + "hashes": [ + { + "alg": "SHA-1", + "content": "a1db4862d2b238283ab2e17f703698a7280bee1c" + } + ], + "licenses": [ + { + "license": { + "name": "MIT" + } + } + ], + "purl": "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:f62cd225330b873d42d26843c1c8c83c0d76df75f4f634f2583e44f3d19bf822" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:e4ad2c090cefe878e69e52693cea8bf245be49f6f6cf7e274ab0118ddc57853b" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "musl@1.2.4-r2" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "musl" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "1.2.4-r2" + } + ] + }, + { + "type": "library", + "name": "musl-utils", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.4-r2?arch=x86_64&distro=3.18.4", + "version": "1.2.4-r2", + "hashes": [ + { + "alg": "SHA-1", + "content": "e7d3d748b5d59b030103457f166beb049a1ba5a9" + } + ], + "licenses": [ + { + "license": { + "name": "BSD-2-Clause" + } + }, + { + "license": { + "name": "GPL-2.0" + } + }, + { + "license": { + "name": "MIT" + } + } + ], + "purl": "pkg:apk/alpine/musl-utils@1.2.4-r2?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:f62cd225330b873d42d26843c1c8c83c0d76df75f4f634f2583e44f3d19bf822" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:e4ad2c090cefe878e69e52693cea8bf245be49f6f6cf7e274ab0118ddc57853b" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "musl-utils@1.2.4-r2" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "musl" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "1.2.4-r2" + } + ] + }, + { + "type": "library", + "name": "nghttp2-libs", + "bom-ref": "pkg:apk/alpine/nghttp2-libs@1.57.0-r0?arch=x86_64&distro=3.18.4", + "version": "1.57.0-r0", + "hashes": [ + { + "alg": "SHA-1", + "content": "4bd70e60aa4f7d9ebf66b24725cb65ffbff4e0d3" + } + ], + "licenses": [ + { + "license": { + "name": "MIT" + } + } + ], + "purl": "pkg:apk/alpine/nghttp2-libs@1.57.0-r0?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:f62cd225330b873d42d26843c1c8c83c0d76df75f4f634f2583e44f3d19bf822" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:e4ad2c090cefe878e69e52693cea8bf245be49f6f6cf7e274ab0118ddc57853b" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "nghttp2-libs@1.57.0-r0" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "nghttp2" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "1.57.0-r0" + } + ] + }, + { + "type": "library", + "name": "oniguruma", + "bom-ref": "pkg:apk/alpine/oniguruma@6.9.8-r1?arch=x86_64&distro=3.18.4", + "version": "6.9.8-r1", + "hashes": [ + { + "alg": "SHA-1", + "content": "1dd3c21a688d1215b13d2e6a5749d964b24768a9" + } + ], + "licenses": [ + { + "license": { + "name": "BSD-2-Clause" + } + } + ], + "purl": "pkg:apk/alpine/oniguruma@6.9.8-r1?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:f62cd225330b873d42d26843c1c8c83c0d76df75f4f634f2583e44f3d19bf822" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:e4ad2c090cefe878e69e52693cea8bf245be49f6f6cf7e274ab0118ddc57853b" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "oniguruma@6.9.8-r1" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "oniguruma" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "6.9.8-r1" + } + ] + }, + { + "type": "library", + "name": "scanelf", + "bom-ref": "pkg:apk/alpine/scanelf@1.3.7-r1?arch=x86_64&distro=3.18.4", + "version": "1.3.7-r1", + "hashes": [ + { + "alg": "SHA-1", + "content": "e27abda38faea3635a2db4d50d007751ea280b43" + } + ], + "licenses": [ + { + "license": { + "name": "GPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/scanelf@1.3.7-r1?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:96526aa774ef0126ad0fe9e9a95764c5fc37f409ab9e97021e7b4775d82bf6fa" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "scanelf@1.3.7-r1" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "pax-utils" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "1.3.7-r1" + } + ] + }, + { + "type": "library", + "name": "ssl_client", + "bom-ref": "pkg:apk/alpine/ssl_client@1.36.1-r4?arch=x86_64&distro=3.18.4", + "version": "1.36.1-r4", + "hashes": [ + { + "alg": "SHA-1", + "content": "ac3c1290e79269349690f4e6e065a6ff2a6c7e26" + } + ], + "licenses": [ + { + "license": { + "name": "GPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/ssl_client@1.36.1-r4?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:f62cd225330b873d42d26843c1c8c83c0d76df75f4f634f2583e44f3d19bf822" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:e4ad2c090cefe878e69e52693cea8bf245be49f6f6cf7e274ab0118ddc57853b" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "ssl_client@1.36.1-r4" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "busybox" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "1.36.1-r4" + } + ] + }, + { + "type": "library", + "name": "zlib", + "bom-ref": "pkg:apk/alpine/zlib@1.2.13-r1?arch=x86_64&distro=3.18.4", + "version": "1.2.13-r1", + "hashes": [ + { + "alg": "SHA-1", + "content": "2656e848992b378aa40dca24af8cde9e97161174" + } + ], + "licenses": [ + { + "license": { + "name": "Zlib" + } + } + ], + "purl": "pkg:apk/alpine/zlib@1.2.13-r1?arch=x86_64&distro=3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:96526aa774ef0126ad0fe9e9a95764c5fc37f409ab9e97021e7b4775d82bf6fa" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "zlib@1.2.13-r1" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "zlib" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "1.2.13-r1" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "bom-ref": "cca71fe4-4ff2-41e1-8078-5e584c508a31", + "version": "3.18.4", + "properties": [ + { + "name": "aquasecurity:trivy:Class", + "value": "os-pkgs" + }, + { + "name": "aquasecurity:trivy:Type", + "value": "alpine" + } + ] + } + ], + "dependencies": [ + { + "ref": "1041129c-b3a8-4896-9ba4-cf92e58ed5d2", + "dependsOn": [ + "pkg:golang/github.com/alecaivazis/survey/v2@v2.3.6", + "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible", + "pkg:golang/github.com/briandowns/spinner@v1.23.0", + "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.2", + "pkg:golang/github.com/dustin/go-humanize@v1.0.1", + "pkg:golang/github.com/fatih/color@v1.15.0", + "pkg:golang/github.com/google/go-github/v30@v30.1.0", + "pkg:golang/github.com/google/go-querystring@v1.1.0", + "pkg:golang/github.com/inconshreveable/go-update@v0.0.0-20160112193335-8152e7eb6ccf", + "pkg:golang/github.com/kballard/go-shellquote@v0.0.0-20180428030007-95032a82bc51", + "pkg:golang/github.com/mattn/go-colorable@v0.1.13", + "pkg:golang/github.com/mattn/go-isatty@v0.0.17", + "pkg:golang/github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d", + "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0", + "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1", + "pkg:golang/github.com/nats-io/cliprompts/v2@v2.0.0-20200221130455-2737f3b8cbb9", + "pkg:golang/github.com/nats-io/jsm.go@v0.0.35", + "pkg:golang/github.com/nats-io/jwt/v2@v2.5.2", + "pkg:golang/github.com/nats-io/nats.go@v1.24.0", + "pkg:golang/github.com/nats-io/nkeys@v0.4.4", + "pkg:golang/github.com/nats-io/nuid@v1.0.1", + "pkg:golang/github.com/rhysd/go-github-selfupdate@v1.2.3", + "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0", + "pkg:golang/github.com/spf13/cobra@v1.6.1", + "pkg:golang/github.com/spf13/pflag@v1.0.5", + "pkg:golang/github.com/tcnksm/go-gitconfig@v0.1.2", + "pkg:golang/github.com/ulikunitz/xz@v0.5.11", + "pkg:golang/github.com/xlab/tablewriter@v0.0.0-20160610135559-80b567a11ad5", + "pkg:golang/golang.org/x/crypto@v0.7.0", + "pkg:golang/golang.org/x/oauth2@v0.6.0", + "pkg:golang/golang.org/x/sys@v0.6.0", + "pkg:golang/golang.org/x/term@v0.6.0", + "pkg:golang/golang.org/x/text@v0.8.0", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1" + ] + }, + { + "ref": "4ce1b5d8-fb7a-4506-9c92-ff2ca0de8e69", + "dependsOn": [ + "pkg:golang/github.com/alecaivazis/survey/v2@v2.3.7", + "pkg:golang/github.com/antonmedv/expr@v1.15.2", + "pkg:golang/github.com/beorn7/perks@v1.0.1", + "pkg:golang/github.com/cespare/xxhash/v2@v2.2.0", + "pkg:golang/github.com/choria-io/fisk@v0.6.0", + "pkg:golang/github.com/dustin/go-humanize@v1.0.1", + "pkg:golang/github.com/emicklei/dot@v1.6.0", + "pkg:golang/github.com/fatih/color@v1.15.0", + "pkg:golang/github.com/ghodss/yaml@v1.0.0", + "pkg:golang/github.com/golang/protobuf@v1.5.3", + "pkg:golang/github.com/google/go-cmp@v0.5.9", + "pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510", + "pkg:golang/github.com/gosuri/uilive@v0.0.4", + "pkg:golang/github.com/gosuri/uiprogress@v0.0.1", + "pkg:golang/github.com/guptarohit/asciigraph@v0.5.6", + "pkg:golang/github.com/hdrhistogram/hdrhistogram-go@v1.1.2", + "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7", + "pkg:golang/github.com/kballard/go-shellquote@v0.0.0-20180428030007-95032a82bc51", + "pkg:golang/github.com/klauspost/compress@v1.17.0", + "pkg:golang/github.com/mattn/go-colorable@v0.1.13", + "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "pkg:golang/github.com/mattn/go-runewidth@v0.0.15", + "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.4", + "pkg:golang/github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d", + "pkg:golang/github.com/minio/highwayhash@v1.0.2", + "pkg:golang/github.com/nats-io/jsm.go@v0.1.0", + "pkg:golang/github.com/nats-io/jwt/v2@v2.5.2", + "pkg:golang/github.com/nats-io/nats-server/v2@v2.10.0", + "pkg:golang/github.com/nats-io/nats.go@v1.30.0", + "pkg:golang/github.com/nats-io/nkeys@v0.4.5", + "pkg:golang/github.com/nats-io/nuid@v1.0.1", + "pkg:golang/github.com/prometheus/client_golang@v1.16.0", + "pkg:golang/github.com/prometheus/client_model@v0.4.0", + "pkg:golang/github.com/prometheus/common@v0.44.0", + "pkg:golang/github.com/prometheus/procfs@v0.11.1", + "pkg:golang/github.com/rivo/uniseg@v0.4.4", + "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1", + "pkg:golang/github.com/tylertreat/hdrhistogram-writer@v0.0.0-20210816161836-2e440612a39f", + "pkg:golang/github.com/xlab/tablewriter@v0.0.0-20160610135559-80b567a11ad5", + "pkg:golang/golang.org/x/crypto@v0.13.0", + "pkg:golang/golang.org/x/net@v0.15.0", + "pkg:golang/golang.org/x/sys@v0.12.0", + "pkg:golang/golang.org/x/term@v0.12.0", + "pkg:golang/golang.org/x/text@v0.13.0", + "pkg:golang/golang.org/x/time@v0.3.0", + "pkg:golang/google.golang.org/protobuf@v1.31.0", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1" + ] + }, + { + "ref": "cca71fe4-4ff2-41e1-8078-5e584c508a31", + "dependsOn": [ + "pkg:apk/alpine/alpine-baselayout-data@3.4.3-r1?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/alpine-baselayout@3.4.3-r1?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/apk-tools@2.14.0-r2?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/brotli-libs@1.0.9-r14?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/busybox-binsh@1.36.1-r4?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/busybox@1.36.1-r4?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/ca-certificates-bundle@20230506-r0?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/ca-certificates@20230506-r0?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/curl@8.4.0-r0?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/figlet@2.2.5-r3?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/jq@1.6-r3?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/libc-utils@0.7.2-r5?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/libcrypto3@3.1.3-r0?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/libcurl@8.4.0-r0?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/libidn2@2.3.4-r1?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/libssl3@3.1.3-r0?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/libunistring@1.1-r1?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/musl-utils@1.2.4-r2?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/nghttp2-libs@1.57.0-r0?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/oniguruma@6.9.8-r1?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/scanelf@1.3.7-r1?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/ssl_client@1.36.1-r4?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/zlib@1.2.13-r1?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "def80684-0ff2-4775-b7df-93952a5dd40e", + "dependsOn": [ + "pkg:golang/github.com/klauspost/compress@v1.16.5", + "pkg:golang/github.com/mattn/go-runewidth@v0.0.14", + "pkg:golang/github.com/minio/highwayhash@v1.0.2", + "pkg:golang/github.com/nats-io/jwt/v2@v2.4.1", + "pkg:golang/github.com/nats-io/nats-server/v2@v2.9.19", + "pkg:golang/github.com/nats-io/nkeys@v0.4.4", + "pkg:golang/github.com/nats-io/nuid@v1.0.1", + "pkg:golang/github.com/nsf/termbox-go@v1.1.1", + "pkg:golang/github.com/rivo/uniseg@v0.2.0", + "pkg:golang/golang.org/x/crypto@v0.9.0", + "pkg:golang/golang.org/x/sys@v0.8.0", + "pkg:golang/golang.org/x/time@v0.3.0", + "pkg:golang/gopkg.in/gizak/termui.v1@v1.0.0-20151021151108-e62b5929642a" + ] + }, + { + "ref": "pkg:apk/alpine/alpine-baselayout-data@3.4.3-r1?arch=x86_64&distro=3.18.4", + "dependsOn": [] + }, + { + "ref": "pkg:apk/alpine/alpine-baselayout@3.4.3-r1?arch=x86_64&distro=3.18.4", + "dependsOn": [ + "pkg:apk/alpine/alpine-baselayout-data@3.4.3-r1?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/busybox-binsh@1.36.1-r4?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=3.18.4", + "dependsOn": [] + }, + { + "ref": "pkg:apk/alpine/apk-tools@2.14.0-r2?arch=x86_64&distro=3.18.4", + "dependsOn": [ + "pkg:apk/alpine/ca-certificates-bundle@20230506-r0?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/libcrypto3@3.1.3-r0?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/libssl3@3.1.3-r0?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/zlib@1.2.13-r1?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "pkg:apk/alpine/brotli-libs@1.0.9-r14?arch=x86_64&distro=3.18.4", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "pkg:apk/alpine/busybox-binsh@1.36.1-r4?arch=x86_64&distro=3.18.4", + "dependsOn": [ + "pkg:apk/alpine/busybox@1.36.1-r4?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "pkg:apk/alpine/busybox@1.36.1-r4?arch=x86_64&distro=3.18.4", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "pkg:apk/alpine/ca-certificates-bundle@20230506-r0?arch=x86_64&distro=3.18.4", + "dependsOn": [] + }, + { + "ref": "pkg:apk/alpine/ca-certificates@20230506-r0?arch=x86_64&distro=3.18.4", + "dependsOn": [ + "pkg:apk/alpine/busybox-binsh@1.36.1-r4?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/libcrypto3@3.1.3-r0?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "pkg:apk/alpine/curl@8.4.0-r0?arch=x86_64&distro=3.18.4", + "dependsOn": [ + "pkg:apk/alpine/libcurl@8.4.0-r0?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/zlib@1.2.13-r1?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "pkg:apk/alpine/figlet@2.2.5-r3?arch=x86_64&distro=3.18.4", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "pkg:apk/alpine/jq@1.6-r3?arch=x86_64&distro=3.18.4", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/oniguruma@6.9.8-r1?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "pkg:apk/alpine/libc-utils@0.7.2-r5?arch=x86_64&distro=3.18.4", + "dependsOn": [ + "pkg:apk/alpine/musl-utils@1.2.4-r2?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "pkg:apk/alpine/libcrypto3@3.1.3-r0?arch=x86_64&distro=3.18.4", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "pkg:apk/alpine/libcurl@8.4.0-r0?arch=x86_64&distro=3.18.4", + "dependsOn": [ + "pkg:apk/alpine/brotli-libs@1.0.9-r14?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/ca-certificates@20230506-r0?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/libcrypto3@3.1.3-r0?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/libidn2@2.3.4-r1?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/libssl3@3.1.3-r0?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/nghttp2-libs@1.57.0-r0?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/zlib@1.2.13-r1?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "pkg:apk/alpine/libidn2@2.3.4-r1?arch=x86_64&distro=3.18.4", + "dependsOn": [ + "pkg:apk/alpine/libunistring@1.1-r1?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "pkg:apk/alpine/libssl3@3.1.3-r0?arch=x86_64&distro=3.18.4", + "dependsOn": [ + "pkg:apk/alpine/libcrypto3@3.1.3-r0?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "pkg:apk/alpine/libunistring@1.1-r1?arch=x86_64&distro=3.18.4", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "pkg:apk/alpine/musl-utils@1.2.4-r2?arch=x86_64&distro=3.18.4", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/scanelf@1.3.7-r1?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4", + "dependsOn": [] + }, + { + "ref": "pkg:apk/alpine/nghttp2-libs@1.57.0-r0?arch=x86_64&distro=3.18.4", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "pkg:apk/alpine/oniguruma@6.9.8-r1?arch=x86_64&distro=3.18.4", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "pkg:apk/alpine/scanelf@1.3.7-r1?arch=x86_64&distro=3.18.4", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.36.1-r4?arch=x86_64&distro=3.18.4", + "dependsOn": [ + "pkg:apk/alpine/libcrypto3@3.1.3-r0?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/libssl3@3.1.3-r0?arch=x86_64&distro=3.18.4", + "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "pkg:apk/alpine/zlib@1.2.13-r1?arch=x86_64&distro=3.18.4", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.4-r2?arch=x86_64&distro=3.18.4" + ] + }, + { + "ref": "pkg:golang/github.com/alecaivazis/survey/v2@v2.3.6", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/alecaivazis/survey/v2@v2.3.7", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/antonmedv/expr@v1.15.2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/beorn7/perks@v1.0.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/briandowns/spinner@v1.23.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.2.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/choria-io/fisk@v0.6.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/dustin/go-humanize@v1.0.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/emicklei/dot@v1.6.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/fatih/color@v1.15.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/ghodss/yaml@v1.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/golang/protobuf@v1.5.3", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/google/go-cmp@v0.5.9", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/google/go-github/v30@v30.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/google/go-querystring@v1.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/gosuri/uilive@v0.0.4", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/gosuri/uiprogress@v0.0.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/guptarohit/asciigraph@v0.5.6", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/hdrhistogram/hdrhistogram-go@v1.1.2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/inconshreveable/go-update@v0.0.0-20160112193335-8152e7eb6ccf", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/kballard/go-shellquote@v0.0.0-20180428030007-95032a82bc51", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/klauspost/compress@v1.16.5", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/klauspost/compress@v1.17.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mattn/go-colorable@v0.1.13", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.17", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.14", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.4", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/minio/highwayhash@v1.0.2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/cliprompts/v2@v2.0.0-20200221130455-2737f3b8cbb9", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/jsm.go@v0.0.35", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/jsm.go@v0.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt/v2@v2.4.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt/v2@v2.5.2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.10.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.9.19", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats.go@v1.24.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats.go@v1.30.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/nkeys@v0.4.4", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/nkeys@v0.4.5", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/nuid@v1.0.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nsf/termbox-go@v1.1.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/prometheus/client_golang@v1.16.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/prometheus/client_model@v0.4.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/prometheus/common@v0.44.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/prometheus/procfs@v0.11.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/rhysd/go-github-selfupdate@v1.2.3", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/rivo/uniseg@v0.2.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/rivo/uniseg@v0.4.4", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/spf13/cobra@v1.6.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/tcnksm/go-gitconfig@v0.1.2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/tylertreat/hdrhistogram-writer@v0.0.0-20210816161836-2e440612a39f", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/ulikunitz/xz@v0.5.11", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/xlab/tablewriter@v0.0.0-20160610135559-80b567a11ad5", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/crypto@v0.13.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/crypto@v0.7.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/crypto@v0.9.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/net@v0.15.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/oauth2@v0.6.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/sys@v0.12.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/sys@v0.6.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/sys@v0.8.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/term@v0.12.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/term@v0.6.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/text@v0.13.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/text@v0.8.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/time@v0.3.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/google.golang.org/protobuf@v1.31.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/gopkg.in/gizak/termui.v1@v1.0.0-20151021151108-e62b5929642a", + "dependsOn": [] + }, + { + "ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "dependsOn": [] + }, + { + "ref": "pkg:oci/nats-box@sha256%3Aa67913df95f1d5b265117e49e4c83228091d13d6783d80215ddcf84aba695ef4?arch=amd64&repository_url=index.docker.io%2Fnatsio%2Fnats-box", + "dependsOn": [ + "1041129c-b3a8-4896-9ba4-cf92e58ed5d2", + "4ce1b5d8-fb7a-4506-9c92-ff2ca0de8e69", + "cca71fe4-4ff2-41e1-8078-5e584c508a31", + "def80684-0ff2-4775-b7df-93952a5dd40e" + ] + } + ], + "vulnerabilities": [ + { + "advisories": [ + { + "url": "golang.org/x/net" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2023:6077" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2023-39325" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2023-44487" + }, + { + "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2023-003" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2023-39325" + }, + { + "url": "https://bugzilla.redhat.com/2242803" + }, + { + "url": "https://bugzilla.redhat.com/2243296" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2242803" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2243296" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39325" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2023-6077.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2023:6077" + }, + { + "url": "https://github.com/golang/go/commit/24ae2d927285c697440fdde3ad7f26028354bcf3 [golang- 1.21]" + }, + { + "url": "https://github.com/golang/go/commit/e175f27f58aa7b9cd4d79607ae65d2cd5baaee68 [golang-1.20]" + }, + { + "url": "https://github.com/golang/go/issues/63417" + }, + { + "url": "https://go.dev/cl/534215" + }, + { + "url": "https://go.dev/cl/534235" + }, + { + "url": "https://go.dev/issue/63417" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2023-39325.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2023-5867.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39325" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2023-2102" + }, + { + "url": "https://security.gentoo.org/glsa/202311-09" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20231110-0008" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20231110-0008/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6574-1" + }, + { + "url": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2023-39325" + } + ], + "affects": [ + { + "ref": "pkg:golang/golang.org/x/net@v0.15.0", + "versions": [ + { + "version": "v0.15.0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 770 + ], + "description": "A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function.", + "id": "CVE-2023-39325", + "published": "2023-10-11T22:15:09+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "rocky" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade golang.org/x/net to version 0.17.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2024-03-10T04:15:05+00:00" + }, + { + "advisories": [ + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/13/4" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/13/9" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/18/4" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/18/8" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/19/6" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/20/8" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2023:6746" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2023-44487" + }, + { + "url": "https://access.redhat.com/security/cve/cve-2023-44487" + }, + { + "url": "https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size" + }, + { + "url": "https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2023-44487" + }, + { + "url": "https://aws.amazon.com/security/security-bulletins/AWS-2023-011" + }, + { + "url": "https://aws.amazon.com/security/security-bulletins/AWS-2023-011/" + }, + { + "url": "https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack" + }, + { + "url": "https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/" + }, + { + "url": "https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack" + }, + { + "url": "https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/" + }, + { + "url": "https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty" + }, + { + "url": "https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/" + }, + { + "url": "https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack" + }, + { + "url": "https://blog.vespa.ai/cve-2023-44487" + }, + { + "url": "https://blog.vespa.ai/cve-2023-44487/" + }, + { + "url": "https://bugzilla.proxmox.com/show_bug.cgi?id=4988" + }, + { + "url": "https://bugzilla.redhat.com/2242803" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2242803" + }, + { + "url": "https://bugzilla.suse.com/show_bug.cgi?id=1216123" + }, + { + "url": "https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9" + }, + { + "url": "https://chaos.social/@icing/111210915918780532" + }, + { + "url": "https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps" + }, + { + "url": "https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/" + }, + { + "url": "https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack" + }, + { + "url": "https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487" + }, + { + "url": "https://devblogs.microsoft.com/dotnet/october-2023-updates/" + }, + { + "url": "https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715" + }, + { + "url": "https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2023-6746.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2023:5838" + }, + { + "url": "https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764" + }, + { + "url": "https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088" + }, + { + "url": "https://github.com/Azure/AKS/issues/3947" + }, + { + "url": "https://github.com/Kong/kong/discussions/11741" + }, + { + "url": "https://github.com/advisories/GHSA-qppj-fm5r-hxr3" + }, + { + "url": "https://github.com/advisories/GHSA-vx74-f528-fxqg" + }, + { + "url": "https://github.com/advisories/GHSA-xpw8-rcwv-8f8p" + }, + { + "url": "https://github.com/akka/akka-http/issues/4323" + }, + { + "url": "https://github.com/alibaba/tengine/issues/1872" + }, + { + "url": "https://github.com/apache/apisix/issues/10320" + }, + { + "url": "https://github.com/apache/httpd-site/pull/10" + }, + { + "url": "https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113" + }, + { + "url": "https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2" + }, + { + "url": "https://github.com/apache/trafficserver/pull/10564" + }, + { + "url": "https://github.com/apple/swift-nio-http2" + }, + { + "url": "https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3" + }, + { + "url": "https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487" + }, + { + "url": "https://github.com/bcdannyboy/CVE-2023-44487" + }, + { + "url": "https://github.com/caddyserver/caddy/issues/5877" + }, + { + "url": "https://github.com/caddyserver/caddy/releases/tag/v2.7.5" + }, + { + "url": "https://github.com/dotnet/announcements/issues/277" + }, + { + "url": "https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73" + }, + { + "url": "https://github.com/eclipse/jetty.project/issues/10679" + }, + { + "url": "https://github.com/envoyproxy/envoy/pull/30055" + }, + { + "url": "https://github.com/etcd-io/etcd/issues/16740" + }, + { + "url": "https://github.com/facebook/proxygen/pull/466" + }, + { + "url": "https://github.com/golang/go/issues/63417" + }, + { + "url": "https://github.com/grpc/grpc-go/pull/6703" + }, + { + "url": "https://github.com/grpc/grpc-go/releases" + }, + { + "url": "https://github.com/h2o/h2o/pull/3291" + }, + { + "url": "https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf" + }, + { + "url": "https://github.com/haproxy/haproxy/issues/2312" + }, + { + "url": "https://github.com/hyperium/hyper/issues/3337" + }, + { + "url": "https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244" + }, + { + "url": "https://github.com/junkurihara/rust-rpxy/issues/97" + }, + { + "url": "https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1" + }, + { + "url": "https://github.com/kazu-yamamoto/http2/issues/93" + }, + { + "url": "https://github.com/kubernetes/kubernetes/pull/121120" + }, + { + "url": "https://github.com/line/armeria/pull/5232" + }, + { + "url": "https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632" + }, + { + "url": "https://github.com/micrictor/http2-rst-stream" + }, + { + "url": "https://github.com/microsoft/CBL-Mariner/pull/6381" + }, + { + "url": "https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61" + }, + { + "url": "https://github.com/nghttp2/nghttp2/pull/1961" + }, + { + "url": "https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0" + }, + { + "url": "https://github.com/ninenines/cowboy/issues/1615" + }, + { + "url": "https://github.com/nodejs/node/pull/50121" + }, + { + "url": "https://github.com/openresty/openresty/issues/930" + }, + { + "url": "https://github.com/opensearch-project/data-prepper/issues/3474" + }, + { + "url": "https://github.com/oqtane/oqtane.framework/discussions/3367" + }, + { + "url": "https://github.com/projectcontour/contour/pull/5826" + }, + { + "url": "https://github.com/tempesta-tech/tempesta/issues/1986" + }, + { + "url": "https://github.com/varnishcache/varnish-cache/issues/3996" + }, + { + "url": "https://go.dev/cl/534215" + }, + { + "url": "https://go.dev/cl/534235" + }, + { + "url": "https://go.dev/issue/63417" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ" + }, + { + "url": "https://istio.io/latest/news/security/istio-security-2023-004" + }, + { + "url": "https://istio.io/latest/news/security/istio-security-2023-004/" + }, + { + "url": "https://linkerd.io/2023/10/12/linkerd-cve-2023-44487" + }, + { + "url": "https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2023-44487.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2023-7205.html" + }, + { + "url": "https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4" + }, + { + "url": "https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html" + }, + { + "url": "https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html" + }, + { + "url": "https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html" + }, + { + "url": "https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2" + }, + { + "url": "https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/" + }, + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487" + }, + { + "url": "https://my.f5.com/manage/s/article/K000137106" + }, + { + "url": "https://netty.io/news/2023/10/10/4-1-100-Final.html" + }, + { + "url": "https://news.ycombinator.com/item?id=37830987" + }, + { + "url": "https://news.ycombinator.com/item?id=37830998" + }, + { + "url": "https://news.ycombinator.com/item?id=37831062" + }, + { + "url": "https://news.ycombinator.com/item?id=37837043" + }, + { + "url": "https://nodejs.org/en/blog/vulnerability/october-2023-security-releases" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44487" + }, + { + "url": "https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response" + }, + { + "url": "https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2023-2102" + }, + { + "url": "https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected" + }, + { + "url": "https://security.gentoo.org/glsa/202311-09" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20231016-0001" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20231016-0001/" + }, + { + "url": "https://security.paloaltonetworks.com/CVE-2023-44487" + }, + { + "url": "https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14" + }, + { + "url": "https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.0-M12" + }, + { + "url": "https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.94" + }, + { + "url": "https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.81" + }, + { + "url": "https://ubuntu.com/security/CVE-2023-44487" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6427-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6427-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6438-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6505-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6574-1" + }, + { + "url": "https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records" + }, + { + "url": "https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/" + }, + { + "url": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2023-44487" + }, + { + "url": "https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5521" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5522" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5540" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5549" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5558" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5570" + }, + { + "url": "https://www.eclipse.org/lists/jetty-announce/msg00181.html" + }, + { + "url": "https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487" + }, + { + "url": "https://www.mail-archive.com/haproxy@formilux.org/msg44134.html" + }, + { + "url": "https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487" + }, + { + "url": "https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/" + }, + { + "url": "https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products" + }, + { + "url": "https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2023/10/10/6" + }, + { + "url": "https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack" + }, + { + "url": "https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday" + }, + { + "url": "https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/" + } + ], + "affects": [ + { + "ref": "pkg:golang/golang.org/x/net@v0.15.0", + "versions": [ + { + "version": "v0.15.0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 400 + ], + "description": "The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.", + "id": "CVE-2023-44487", + "published": "2023-10-10T14:15:10+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "high" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "rocky" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + }, + { + "source": { + "name": "ghsa" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" + } + ], + "recommendation": "Upgrade golang.org/x/net to version 0.17.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2024-02-02T15:40:23+00:00" + }, + { + "advisories": [ + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/31/1" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2023-46129" + }, + { + "url": "https://advisories.nats.io/CVE/secnote-2023-02.txt" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2023-46129" + }, + { + "url": "https://github.com/nats-io/nkeys" + }, + { + "url": "https://github.com/nats-io/nkeys/commit/58fb9d69f42ea73fffad1d14e5914dc666f3daa1" + }, + { + "url": "https://github.com/nats-io/nkeys/security/advisories/GHSA-mr45-rx8q-wcm9" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46129" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2023-46129" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.10.0", + "versions": [ + { + "version": "v2.10.0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/nkeys@v0.4.4", + "versions": [ + { + "version": "v0.4.4", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/nkeys@v0.4.5", + "versions": [ + { + "version": "v0.4.5", + "status": "affected" + } + ] + } + ], + "cwes": [ + 321, + 325 + ], + "description": "NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. The cryptographic key handling library, nkeys, recently gained support for encryption, not just for signing/authentication. This is used in nats-server 2.10 (Sep 2023) and newer for authentication callouts. In nkeys versions 0.4.0 through 0.4.5, corresponding with NATS server versions 2.10.0 through 2.10.3, the nkeys library's `xkeys` encryption handling logic mistakenly passed an array by value into an internal function, where the function mutated that buffer to populate the encryption key to use. As a result, all encryption was actually to an all-zeros key. This affects encryption only, not signing. \nFIXME: FILL IN IMPACT ON NATS-SERVER AUTH CALLOUT SECURITY. nkeys Go library 0.4.6, corresponding with NATS Server 2.10.4, has a patch for this issue. No known workarounds are available. For any application handling auth callouts in Go, if using the nkeys library, update the dependency, recompile and deploy that in lockstep.", + "id": "CVE-2023-46129", + "published": "2023-10-31T00:15:09+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.10.4; Upgrade github.com/nats-io/nkeys to version 0.4.6", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-29T03:15:42+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/errata/RHSA-2024:1129" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2023-46218" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2023-46218" + }, + { + "url": "https://bugzilla.redhat.com/2252030" + }, + { + "url": "https://curl.se/docs/CVE-2023-46218.html" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46218" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2024-1129.html" + }, + { + "url": "https://hackerone.com/reports/2212193" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2023-46218.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2024-1129.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46218" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20240125-0007/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6535-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6641-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2023-46218" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5587" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/curl@8.4.0-r0?arch=x86_64\u0026distro=3.18.4", + "versions": [ + { + "version": "8.4.0-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libcurl@8.4.0-r0?arch=x86_64\u0026distro=3.18.4", + "versions": [ + { + "version": "8.4.0-r0", + "status": "affected" + } + ] + } + ], + "description": "This flaw allows a malicious HTTP server to set \"super cookies\" in curl that\nare then passed back to more origins than what is otherwise allowed or\npossible. This allows a site to set cookies that then would get sent to\ndifferent and unrelated sites and domains.\n\nIt could do this by exploiting a mixed case flaw in curl's function that\nverifies a given cookie domain against the Public Suffix List (PSL). For\nexample a cookie could be set with `domain=co.UK` when the URL used a lower\ncase hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain.\n", + "id": "CVE-2023-46218", + "published": "2023-12-07T01:15:07+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" + } + ], + "recommendation": "Upgrade curl to version 8.5.0-r0; Upgrade libcurl to version 8.5.0-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2024-01-25T14:15:26+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2023-46219" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2023-46219" + }, + { + "url": "https://curl.se/docs/CVE-2023-46219.html" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46219" + }, + { + "url": "https://hackerone.com/reports/2236133" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46219" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20240119-0007/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6535-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2023-46219" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5587" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/curl@8.4.0-r0?arch=x86_64\u0026distro=3.18.4", + "versions": [ + { + "version": "8.4.0-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libcurl@8.4.0-r0?arch=x86_64\u0026distro=3.18.4", + "versions": [ + { + "version": "8.4.0-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 311 + ], + "description": "When saving HSTS data to an excessively long file name, curl could end up\nremoving all contents, making subsequent requests using that file unaware of\nthe HSTS status they should otherwise use.\n", + "id": "CVE-2023-46219", + "published": "2023-12-12T02:15:06+00:00", + "ratings": [ + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + }, + { + "source": { + "name": "redhat" + }, + "score": 4.8, + "severity": "low", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" + } + ], + "recommendation": "Upgrade curl to version 8.5.0-r0; Upgrade libcurl to version 8.5.0-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2024-01-19T16:15:09+00:00" + }, + { + "advisories": [ + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/30/1" + }, + { + "url": "https://advisories.nats.io/CVE/secnote-2023-01.txt" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2023-47090" + }, + { + "url": "https://github.com/nats-io/nats-server" + }, + { + "url": "https://github.com/nats-io/nats-server/commit/fa5b7afcb64e7e887e49afdd032358802b5c4478" + }, + { + "url": "https://github.com/nats-io/nats-server/discussions/4535" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/4605" + }, + { + "url": "https://github.com/nats-io/nats-server/releases/tag/v2.10.2" + }, + { + "url": "https://github.com/nats-io/nats-server/releases/tag/v2.9.23" + }, + { + "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-fr2g-9hjm-wr23" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47090" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2023/10/13/2" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.10.0", + "versions": [ + { + "version": "v2.10.0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.9.19", + "versions": [ + { + "version": "v2.9.19", + "status": "affected" + } + ] + } + ], + "cwes": [ + 863 + ], + "description": "NATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. An implicit $G user in an authorization block can sometimes be used for unauthenticated access, even when the intention of the configuration was for each user to have an account. The earliest affected version is 2.2.0.", + "id": "CVE-2023-47090", + "published": "2023-10-30T17:15:52+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "severity": "high" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.9.23, 2.10.2", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-08T00:15:54+00:00" + }, + { + "advisories": [ + { + "url": "http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html" + }, + { + "url": "http://seclists.org/fulldisclosure/2024/Mar/21" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/12/18/3" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/12/19/5" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/12/20/3" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2024:1150" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2023-48795" + }, + { + "url": "https://access.redhat.com/security/cve/cve-2023-48795" + }, + { + "url": "https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack" + }, + { + "url": "https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2023-48795" + }, + { + "url": "https://bugs.gentoo.org/920280" + }, + { + "url": "https://bugzilla.redhat.com/2254210" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254210" + }, + { + "url": "https://bugzilla.suse.com/show_bug.cgi?id=1217950" + }, + { + "url": "https://crates.io/crates/thrussh/versions" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2024-1150.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2024:0628" + }, + { + "url": "https://filezilla-project.org/versions.php" + }, + { + "url": "https://forum.netgate.com/topic/184941/terrapin-ssh-attack" + }, + { + "url": "https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10\u0026id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6" + }, + { + "url": "https://github.com/NixOS/nixpkgs/pull/275249" + }, + { + "url": "https://github.com/PowerShell/Win32-OpenSSH/issues/2189" + }, + { + "url": "https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta" + }, + { + "url": "https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0" + }, + { + "url": "https://github.com/TeraTermProject/teraterm/releases/tag/v5.1" + }, + { + "url": "https://github.com/advisories/GHSA-45x7-px36-x8w8" + }, + { + "url": "https://github.com/apache/mina-sshd/issues/445" + }, + { + "url": "https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab" + }, + { + "url": "https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22" + }, + { + "url": "https://github.com/cyd01/KiTTY/issues/520" + }, + { + "url": "https://github.com/drakkan/sftpgo/releases/tag/v2.5.6" + }, + { + "url": "https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42" + }, + { + "url": "https://github.com/erlang/otp/releases/tag/OTP-26.2.1" + }, + { + "url": "https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d" + }, + { + "url": "https://github.com/hierynomus/sshj/issues/916" + }, + { + "url": "https://github.com/janmojzis/tinyssh/issues/81" + }, + { + "url": "https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5" + }, + { + "url": "https://github.com/libssh2/libssh2/pull/1291" + }, + { + "url": "https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25" + }, + { + "url": "https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3" + }, + { + "url": "https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15" + }, + { + "url": "https://github.com/mwiede/jsch/issues/457" + }, + { + "url": "https://github.com/mwiede/jsch/pull/461" + }, + { + "url": "https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16" + }, + { + "url": "https://github.com/openssh/openssh-portable/commits/master" + }, + { + "url": "https://github.com/paramiko/paramiko/issues/2337" + }, + { + "url": "https://github.com/paramiko/paramiko/issues/2337#issuecomment-1887642773" + }, + { + "url": "https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES" + }, + { + "url": "https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES" + }, + { + "url": "https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES" + }, + { + "url": "https://github.com/proftpd/proftpd/issues/456" + }, + { + "url": "https://github.com/rapier1/hpn-ssh/releases" + }, + { + "url": "https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst" + }, + { + "url": "https://github.com/ronf/asyncssh/security/advisories/GHSA-hfmc-7525-mj55" + }, + { + "url": "https://github.com/ronf/asyncssh/tags" + }, + { + "url": "https://github.com/ssh-mitm/ssh-mitm/issues/165" + }, + { + "url": "https://github.com/warp-tech/russh" + }, + { + "url": "https://github.com/warp-tech/russh/commit/1aa340a7df1d5be1c0f4a9e247aade76dfdd2951" + }, + { + "url": "https://github.com/warp-tech/russh/releases/tag/v0.40.2" + }, + { + "url": "https://github.com/warp-tech/russh/security/advisories/GHSA-45x7-px36-x8w8" + }, + { + "url": "https://gitlab.com/libssh/libssh-mirror/-/tags" + }, + { + "url": "https://go.dev/cl/550715" + }, + { + "url": "https://go.dev/issue/64784" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg" + }, + { + "url": "https://help.panic.com/releasenotes/transmit5" + }, + { + "url": "https://help.panic.com/releasenotes/transmit5/" + }, + { + "url": "https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795" + }, + { + "url": "https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2023-48795.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2024-12233.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/" + }, + { + "url": "https://matt.ucc.asn.au/dropbear/CHANGES" + }, + { + "url": "https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC" + }, + { + "url": "https://news.ycombinator.com/item?id=38684904" + }, + { + "url": "https://news.ycombinator.com/item?id=38685286" + }, + { + "url": "https://news.ycombinator.com/item?id=38732005" + }, + { + "url": "https://nova.app/releases/#v11.8" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-48795" + }, + { + "url": "https://oryx-embedded.com/download/#changelog" + }, + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002" + }, + { + "url": "https://roumenpetrov.info/secsh/#news20231220" + }, + { + "url": "https://security-tracker.debian.org/tracker/CVE-2023-48795" + }, + { + "url": "https://security-tracker.debian.org/tracker/source-package/libssh2" + }, + { + "url": "https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg" + }, + { + "url": "https://security-tracker.debian.org/tracker/source-package/trilead-ssh2" + }, + { + "url": "https://security.gentoo.org/glsa/202312-16" + }, + { + "url": "https://security.gentoo.org/glsa/202312-17" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20240105-0004" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20240105-0004/" + }, + { + "url": "https://support.apple.com/kb/HT214084" + }, + { + "url": "https://terrapin-attack.com/" + }, + { + "url": "https://thorntech.com/cve-2023-48795-and-sftp-gateway" + }, + { + "url": "https://thorntech.com/cve-2023-48795-and-sftp-gateway/" + }, + { + "url": "https://twitter.com/TrueSkrillor/status/1736774389725565005" + }, + { + "url": "https://ubuntu.com/security/CVE-2023-48795" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6560-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6560-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6561-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6585-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6589-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6598-1" + }, + { + "url": "https://winscp.net/eng/docs/history#6.2.2" + }, + { + "url": "https://www.bitvise.com/ssh-client-version-history#933" + }, + { + "url": "https://www.bitvise.com/ssh-server-version-history" + }, + { + "url": "https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html" + }, + { + "url": "https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2023-48795" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5586" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5588" + }, + { + "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc" + }, + { + "url": "https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508" + }, + { + "url": "https://www.netsarang.com/en/xshell-update-history" + }, + { + "url": "https://www.netsarang.com/en/xshell-update-history/" + }, + { + "url": "https://www.openssh.com/openbsd.html" + }, + { + "url": "https://www.openssh.com/txt/release-9.6" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2023/12/18/2" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2023/12/18/3" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2023/12/20/3" + }, + { + "url": "https://www.paramiko.org/changelog.html" + }, + { + "url": "https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed" + }, + { + "url": "https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/" + }, + { + "url": "https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795" + }, + { + "url": "https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/" + }, + { + "url": "https://www.terrapin-attack.com" + }, + { + "url": "https://www.theregister.com/2023/12/20/terrapin_attack_ssh" + }, + { + "url": "https://www.vandyke.com/products/securecrt/history.txt" + } + ], + "affects": [ + { + "ref": "pkg:golang/golang.org/x/crypto@v0.13.0", + "versions": [ + { + "version": "v0.13.0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/golang.org/x/crypto@v0.7.0", + "versions": [ + { + "version": "v0.7.0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/golang.org/x/crypto@v0.9.0", + "versions": [ + { + "version": "v0.9.0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 354 + ], + "description": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.", + "id": "CVE-2023-48795", + "published": "2023-12-18T16:15:10+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "photon" + }, + "severity": "medium" + }, + { + "source": { + "name": "rocky" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + }, + { + "source": { + "name": "ghsa" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" + } + ], + "recommendation": "Upgrade golang.org/x/crypto to version 0.17.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2024-03-13T21:15:54+00:00" + }, + { + "advisories": [ + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/24/1" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2024:0310" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2023-5363" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2023-5363" + }, + { + "url": "https://bugzilla.redhat.com/2243839" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5363" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2024-0310.html" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2023-5363.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2024-12093.html" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5363" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20231027-0010/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20240201-0004/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6450-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2023-5363" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5532" + }, + { + "url": "https://www.openssl.org/news/secadv/20231024.txt" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto3@3.1.3-r0?arch=x86_64\u0026distro=3.18.4", + "versions": [ + { + "version": "3.1.3-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl3@3.1.3-r0?arch=x86_64\u0026distro=3.18.4", + "versions": [ + { + "version": "3.1.3-r0", + "status": "affected" + } + ] + } + ], + "description": "Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths. This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established. Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values. The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality. For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception. However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.", + "id": "CVE-2023-5363", + "published": "2023-10-25T18:17:43+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } + ], + "recommendation": "Upgrade libcrypto3 to version 3.1.4-r0; Upgrade libssl3 to version 3.1.4-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2024-02-01T17:15:08+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/errata/RHSA-2023:7877" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2023-5678" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2023-5678" + }, + { + "url": "https://bugzilla.redhat.com/2224962" + }, + { + "url": "https://bugzilla.redhat.com/2227852" + }, + { + "url": "https://bugzilla.redhat.com/2248616" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678" + }, + { + "url": "https://errata.almalinux.org/8/ALSA-2023-7877.html" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2023-5678.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2024-12056.html" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5678" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20231130-0010/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6622-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6632-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2023-5678" + }, + { + "url": "https://www.openssl.org/news/secadv/20231106.txt" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto3@3.1.3-r0?arch=x86_64\u0026distro=3.18.4", + "versions": [ + { + "version": "3.1.3-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl3@3.1.3-r0?arch=x86_64\u0026distro=3.18.4", + "versions": [ + { + "version": "3.1.3-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 754 + ], + "description": "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays. Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions. An application calling any of those other\nfunctions may similarly be affected. The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.\n\n", + "id": "CVE-2023-5678", + "published": "2023-11-06T16:15:42+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "low" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.3, + "severity": "low", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "photon" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" + } + ], + "recommendation": "Upgrade libcrypto3 to version 3.1.4-r1; Upgrade libssl3 to version 3.1.4-r1", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-30T22:15:09+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2023-6129" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2023-6129" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129" + }, + { + "url": "https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35" + }, + { + "url": "https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04" + }, + { + "url": "https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6129" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20240216-0009/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6622-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2023-6129" + }, + { + "url": "https://www.openssl.org/news/secadv/20240109.txt" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2024/01/09/1" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto3@3.1.3-r0?arch=x86_64\u0026distro=3.18.4", + "versions": [ + { + "version": "3.1.3-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl3@3.1.3-r0?arch=x86_64\u0026distro=3.18.4", + "versions": [ + { + "version": "3.1.3-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 787 + ], + "description": "Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue.", + "id": "CVE-2023-6129", + "published": "2024-01-09T17:15:12+00:00", + "ratings": [ + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.5, + "severity": "low", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" + } + ], + "recommendation": "Upgrade libcrypto3 to version 3.1.4-r3; Upgrade libssl3 to version 3.1.4-r3", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2024-02-16T13:15:09+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2023-6237" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2023-6237" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6237" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6622-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2023-6237" + }, + { + "url": "https://www.openssl.org/news/secadv/20240115.txt" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2024/01/15/2" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto3@3.1.3-r0?arch=x86_64\u0026distro=3.18.4", + "versions": [ + { + "version": "3.1.3-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl3@3.1.3-r0?arch=x86_64\u0026distro=3.18.4", + "versions": [ + { + "version": "3.1.3-r0", + "status": "affected" + } + ] + } + ], + "description": "A flaw was found in OpenSSL. When the EVP_PKEY_public_check() function is called in RSA public keys, a computation is done to confirm that the RSA modulus, n, is composite. For valid RSA keys, n is a product of two or more large primes and this computation completes quickly. However, if n is a large prime, this computation takes a long time. An application that calls EVP_PKEY_public_check() and supplies an RSA key obtained from an untrusted source could be vulnerable to a Denial of Service attack.", + "id": "CVE-2023-6237", + "ratings": [ + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.9, + "severity": "low", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade libcrypto3 to version 3.1.4-r4; Upgrade libssl3 to version 3.1.4-r4", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + } + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2024-0727" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2024-0727" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727" + }, + { + "url": "https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2" + }, + { + "url": "https://github.com/github/advisory-database/pull/3472" + }, + { + "url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2" + }, + { + "url": "https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a" + }, + { + "url": "https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c" + }, + { + "url": "https://github.com/openssl/openssl/pull/23362" + }, + { + "url": "https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d" + }, + { + "url": "https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8" + }, + { + "url": "https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0727" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20240208-0006" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20240208-0006/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6622-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6632-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2024-0727" + }, + { + "url": "https://www.openssl.org/news/secadv/20240125.txt" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto3@3.1.3-r0?arch=x86_64\u0026distro=3.18.4", + "versions": [ + { + "version": "3.1.3-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl3@3.1.3-r0?arch=x86_64\u0026distro=3.18.4", + "versions": [ + { + "version": "3.1.3-r0", + "status": "affected" + } + ] + } + ], + "description": "Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.", + "id": "CVE-2024-0727", + "published": "2024-01-26T09:15:07+00:00", + "ratings": [ + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.5, + "severity": "low", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "photon" + }, + "severity": "medium" + }, + { + "source": { + "name": "ghsa" + }, + "score": 5.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade libcrypto3 to version 3.1.4-r5; Upgrade libssl3 to version 3.1.4-r5", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2024-02-08T10:15:13+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2024-24786" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2024-24786" + }, + { + "url": "https://github.com/protocolbuffers/protobuf-go" + }, + { + "url": "https://github.com/protocolbuffers/protobuf-go/commit/f01a588e5810b90996452eec4a28f22a0afae023" + }, + { + "url": "https://github.com/protocolbuffers/protobuf-go/releases/tag/v1.33.0" + }, + { + "url": "https://go.dev/cl/569356" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24786" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2024-2611" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2024-24786" + } + ], + "affects": [ + { + "ref": "pkg:golang/google.golang.org/protobuf@v1.31.0", + "versions": [ + { + "version": "v1.31.0", + "status": "affected" + } + ] + } + ], + "description": "The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.", + "id": "CVE-2024-24786", + "published": "2024-03-05T23:15:07+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade google.golang.org/protobuf to version 1.33.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2024-03-06T15:18:08+00:00" + } + ] +} diff --git a/test/diff/panic/nats2.json b/test/diff/panic/nats2.json new file mode 100644 index 00000000..85a07c87 --- /dev/null +++ b/test/diff/panic/nats2.json @@ -0,0 +1,12212 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.5", + "serialNumber": "urn:uuid:bc1d1e2d-8e64-4b3a-96b7-651de3b09048", + "version": 1, + "metadata": { + "timestamp": "2024-03-20T14:47:22+00:00", + "tools": { + "components": [ + { + "group": "aquasecurity", + "name": "trivy", + "type": "application", + "version": "0.50.0" + } + ] + }, + "component": { + "type": "container", + "name": "natsio/nats-box", + "bom-ref": "pkg:oci/nats-box@sha256%3Acaf0c9fe15a9a88d001c74fd9d80f7f6fd57474aa243cd63a9a086eda9e202be?arch=amd64&repository_url=index.docker.io%2Fnatsio%2Fnats-box", + "purl": "pkg:oci/nats-box@sha256%3Acaf0c9fe15a9a88d001c74fd9d80f7f6fd57474aa243cd63a9a086eda9e202be?arch=amd64&repository_url=index.docker.io%2Fnatsio%2Fnats-box", + "properties": [ + { + "name": "aquasecurity:trivy:DiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:DiffID", + "value": "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef" + }, + { + "name": "aquasecurity:trivy:DiffID", + "value": "sha256:99fda372d2c549fd72cbf862d913eb50cd5c11bb91bec9fb184949cbfb64458f" + }, + { + "name": "aquasecurity:trivy:DiffID", + "value": "sha256:cb381a32b2296e4eb5af3f84092a2e6685e88adbc54ee0768a1a1010ce6376c7" + }, + { + "name": "aquasecurity:trivy:DiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:DiffID", + "value": "sha256:f71b4f2368074b5ba538e48e56b57707ce43ff5db5b61a62a79b8964cd352ca2" + }, + { + "name": "aquasecurity:trivy:DiffID", + "value": "sha256:fda576d64980d61afb430261e6b3fa3ffea212184de4ee4a7bc03ce5e7625d75" + }, + { + "name": "aquasecurity:trivy:ImageID", + "value": "sha256:ae9af06d3d21fa924dfce9dcaa3d39eb4c5c04b6e03fbc88e4750685e4c74745" + }, + { + "name": "aquasecurity:trivy:RepoDigest", + "value": "natsio/nats-box@sha256:caf0c9fe15a9a88d001c74fd9d80f7f6fd57474aa243cd63a9a086eda9e202be" + }, + { + "name": "aquasecurity:trivy:RepoTag", + "value": "natsio/nats-box:latest" + }, + { + "name": "aquasecurity:trivy:SchemaVersion", + "value": "2" + } + ] + } + }, + "components": [ + { + "type": "application", + "name": "usr/local/bin/nats", + "bom-ref": "d7122973-9d0f-4e27-bc7b-f3930bde6889", + "properties": [ + { + "name": "aquasecurity:trivy:Class", + "value": "lang-pkgs" + }, + { + "name": "aquasecurity:trivy:Type", + "value": "gobinary" + } + ] + }, + { + "type": "application", + "name": "usr/local/bin/nats-top", + "bom-ref": "5e630d92-734e-441e-97bc-292689866d19", + "properties": [ + { + "name": "aquasecurity:trivy:Class", + "value": "lang-pkgs" + }, + { + "name": "aquasecurity:trivy:Type", + "value": "gobinary" + } + ] + }, + { + "type": "application", + "name": "usr/local/bin/nsc", + "bom-ref": "fff3d909-640a-4173-b0c3-b23507dd77d3", + "properties": [ + { + "name": "aquasecurity:trivy:Class", + "value": "lang-pkgs" + }, + { + "name": "aquasecurity:trivy:Type", + "value": "gobinary" + } + ] + }, + { + "type": "application", + "name": "usr/local/bin/stan-bench", + "bom-ref": "37100b09-d58e-456b-bf66-96cb133c434d", + "properties": [ + { + "name": "aquasecurity:trivy:Class", + "value": "lang-pkgs" + }, + { + "name": "aquasecurity:trivy:Type", + "value": "gobinary" + } + ] + }, + { + "type": "application", + "name": "usr/local/bin/stan-pub", + "bom-ref": "5bedfcbd-bcb9-4b36-ac1c-69b77c8b0b45", + "properties": [ + { + "name": "aquasecurity:trivy:Class", + "value": "lang-pkgs" + }, + { + "name": "aquasecurity:trivy:Type", + "value": "gobinary" + } + ] + }, + { + "type": "application", + "name": "usr/local/bin/stan-sub", + "bom-ref": "17d6a00d-ad1c-422f-ab52-07d021d4d62a", + "properties": [ + { + "name": "aquasecurity:trivy:Class", + "value": "lang-pkgs" + }, + { + "name": "aquasecurity:trivy:Type", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "alpine-baselayout", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.2.0-r8?arch=x86_64&distro=3.13.2", + "version": "3.2.0-r8", + "hashes": [ + { + "alg": "SHA-1", + "content": "15d2b578fd7e8841b6f4cc80134ca504c2023317" + } + ], + "licenses": [ + { + "license": { + "name": "GPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/alpine-baselayout@3.2.0-r8?arch=x86_64&distro=3.13.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cb381a32b2296e4eb5af3f84092a2e6685e88adbc54ee0768a1a1010ce6376c7" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:ba3557a56b150f9b813f9d02274d62914fd8fce120dd374d9ee17b87cf1d277d" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "alpine-baselayout@3.2.0-r8" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "alpine-baselayout" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "3.2.0-r8" + } + ] + }, + { + "type": "library", + "name": "alpine-keys", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.2-r0?arch=x86_64&distro=3.13.2", + "version": "2.2-r0", + "hashes": [ + { + "alg": "SHA-1", + "content": "2e1db77e486469f7e25f3eac47ee2742f51f9153" + } + ], + "licenses": [ + { + "license": { + "name": "MIT" + } + } + ], + "purl": "pkg:apk/alpine/alpine-keys@2.2-r0?arch=x86_64&distro=3.13.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cb381a32b2296e4eb5af3f84092a2e6685e88adbc54ee0768a1a1010ce6376c7" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:ba3557a56b150f9b813f9d02274d62914fd8fce120dd374d9ee17b87cf1d277d" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "alpine-keys@2.2-r0" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "alpine-keys" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "2.2-r0" + } + ] + }, + { + "type": "library", + "name": "apk-tools", + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.1-r0?arch=x86_64&distro=3.13.2", + "version": "2.12.1-r0", + "hashes": [ + { + "alg": "SHA-1", + "content": "b719126b7bd2a798662ada563c69d051d665549a" + } + ], + "licenses": [ + { + "license": { + "name": "GPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/apk-tools@2.12.1-r0?arch=x86_64&distro=3.13.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cb381a32b2296e4eb5af3f84092a2e6685e88adbc54ee0768a1a1010ce6376c7" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:ba3557a56b150f9b813f9d02274d62914fd8fce120dd374d9ee17b87cf1d277d" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "apk-tools@2.12.1-r0" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "apk-tools" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "2.12.1-r0" + } + ] + }, + { + "type": "library", + "name": "busybox", + "bom-ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64&distro=3.13.2", + "version": "1.32.1-r3", + "hashes": [ + { + "alg": "SHA-1", + "content": "ea87905ba6c33fbb95c0252a3610001076fbe59e" + } + ], + "licenses": [ + { + "license": { + "name": "GPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64&distro=3.13.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cb381a32b2296e4eb5af3f84092a2e6685e88adbc54ee0768a1a1010ce6376c7" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:ba3557a56b150f9b813f9d02274d62914fd8fce120dd374d9ee17b87cf1d277d" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "busybox@1.32.1-r3" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "busybox" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "1.32.1-r3" + } + ] + }, + { + "type": "library", + "name": "ca-certificates", + "bom-ref": "pkg:apk/alpine/ca-certificates@20191127-r5?arch=x86_64&distro=3.13.2", + "version": "20191127-r5", + "hashes": [ + { + "alg": "SHA-1", + "content": "9a32ec5e560733e17a671fba0128e6a3ebef5ce3" + } + ], + "licenses": [ + { + "license": { + "name": "MIT" + } + }, + { + "license": { + "name": "MPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/ca-certificates@20191127-r5?arch=x86_64&distro=3.13.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:f71b4f2368074b5ba538e48e56b57707ce43ff5db5b61a62a79b8964cd352ca2" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:8591fa42d73dba5b01bf828e8426f087f6ba2be53d81e6b881e6ec7944834df6" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "ca-certificates@20191127-r5" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "ca-certificates" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "20191127-r5" + } + ] + }, + { + "type": "library", + "name": "ca-certificates-bundle", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20191127-r5?arch=x86_64&distro=3.13.2", + "version": "20191127-r5", + "hashes": [ + { + "alg": "SHA-1", + "content": "9d95958d8cdac1af141d414024905c7ce861458d" + } + ], + "licenses": [ + { + "license": { + "name": "MIT" + } + }, + { + "license": { + "name": "MPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/ca-certificates-bundle@20191127-r5?arch=x86_64&distro=3.13.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cb381a32b2296e4eb5af3f84092a2e6685e88adbc54ee0768a1a1010ce6376c7" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:ba3557a56b150f9b813f9d02274d62914fd8fce120dd374d9ee17b87cf1d277d" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "ca-certificates-bundle@20191127-r5" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "ca-certificates" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "20191127-r5" + } + ] + }, + { + "type": "library", + "name": "figlet", + "bom-ref": "pkg:apk/alpine/figlet@2.2.5-r1?arch=x86_64&distro=3.13.2", + "version": "2.2.5-r1", + "hashes": [ + { + "alg": "SHA-1", + "content": "2a09a857775ed6d8dbba1fb9dfcf6879f1cf1b04" + } + ], + "licenses": [ + { + "license": { + "name": "BSD-3-Clause" + } + } + ], + "purl": "pkg:apk/alpine/figlet@2.2.5-r1?arch=x86_64&distro=3.13.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:f71b4f2368074b5ba538e48e56b57707ce43ff5db5b61a62a79b8964cd352ca2" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:8591fa42d73dba5b01bf828e8426f087f6ba2be53d81e6b881e6ec7944834df6" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "figlet@2.2.5-r1" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "figlet" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "2.2.5-r1" + } + ] + }, + { + "type": "library", + "name": "github.com/AlecAivazis/survey/v2", + "bom-ref": "02c6e323-75c9-41ad-a48b-ea236df51a1a", + "version": "v2.2.12", + "purl": "pkg:golang/github.com/alecaivazis/survey/v2@v2.2.12", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/AlecAivazis/survey/v2", + "bom-ref": "f0745570-156e-489b-9743-7a6c34f2b983", + "version": "v2.2.12", + "purl": "pkg:golang/github.com/alecaivazis/survey/v2@v2.2.12", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/HdrHistogram/hdrhistogram-go", + "bom-ref": "pkg:golang/github.com/hdrhistogram/hdrhistogram-go@v0.9.0", + "version": "v0.9.0", + "purl": "pkg:golang/github.com/hdrhistogram/hdrhistogram-go@v0.9.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/alecthomas/template", + "bom-ref": "pkg:golang/github.com/alecthomas/template@v0.0.0-20190718012654-fb15b899a751", + "version": "v0.0.0-20190718012654-fb15b899a751", + "purl": "pkg:golang/github.com/alecthomas/template@v0.0.0-20190718012654-fb15b899a751", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/alecthomas/units", + "bom-ref": "pkg:golang/github.com/alecthomas/units@v0.0.0-20210208195552-ff826a37aa15", + "version": "v0.0.0-20210208195552-ff826a37aa15", + "purl": "pkg:golang/github.com/alecthomas/units@v0.0.0-20210208195552-ff826a37aa15", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/blang/semver", + "bom-ref": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible", + "version": "v3.5.1+incompatible", + "purl": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/briandowns/spinner", + "bom-ref": "pkg:golang/github.com/briandowns/spinner@v1.12.0", + "version": "v1.12.0", + "purl": "pkg:golang/github.com/briandowns/spinner@v1.12.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/cpuguy83/go-md2man/v2", + "bom-ref": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0", + "version": "v2.0.0", + "purl": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/dustin/go-humanize", + "bom-ref": "7dba7372-931a-407d-a918-76bcac292907", + "version": "v1.0.0", + "purl": "pkg:golang/github.com/dustin/go-humanize@v1.0.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/dustin/go-humanize", + "bom-ref": "ae9d8fc6-a066-4e24-bc8c-cdfe17a737c0", + "version": "v1.0.0", + "purl": "pkg:golang/github.com/dustin/go-humanize@v1.0.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/emicklei/dot", + "bom-ref": "pkg:golang/github.com/emicklei/dot@v0.15.0", + "version": "v0.15.0", + "purl": "pkg:golang/github.com/emicklei/dot@v0.15.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/fatih/color", + "bom-ref": "036e29ed-0565-4dff-be02-dc8e2b0376d7", + "version": "v1.10.0", + "purl": "pkg:golang/github.com/fatih/color@v1.10.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/fatih/color", + "bom-ref": "c85c3481-4815-486c-82e9-dba0f7a3eac6", + "version": "v1.10.0", + "purl": "pkg:golang/github.com/fatih/color@v1.10.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/fsnotify/fsnotify", + "bom-ref": "pkg:golang/github.com/fsnotify/fsnotify@v1.4.9", + "version": "v1.4.9", + "purl": "pkg:golang/github.com/fsnotify/fsnotify@v1.4.9", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/ghodss/yaml", + "bom-ref": "pkg:golang/github.com/ghodss/yaml@v1.0.0", + "version": "v1.0.0", + "purl": "pkg:golang/github.com/ghodss/yaml@v1.0.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/gogo/protobuf", + "bom-ref": "4497229a-93b4-4299-a9e6-a1070b6ffda5", + "version": "v1.3.2", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/gogo/protobuf", + "bom-ref": "90b91b63-c94e-469d-87ef-b98807e67bfb", + "version": "v1.3.2", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/gogo/protobuf", + "bom-ref": "d99b8db3-8f9e-41a4-bb16-0c1936f401d3", + "version": "v1.3.2", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/google/go-cmp", + "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.5.5", + "version": "v0.5.5", + "purl": "pkg:golang/github.com/google/go-cmp@v0.5.5", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/google/go-github/v30", + "bom-ref": "pkg:golang/github.com/google/go-github/v30@v30.1.0", + "version": "v30.1.0", + "purl": "pkg:golang/github.com/google/go-github/v30@v30.1.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/google/go-querystring", + "bom-ref": "pkg:golang/github.com/google/go-querystring@v1.1.0", + "version": "v1.1.0", + "purl": "pkg:golang/github.com/google/go-querystring@v1.1.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/gosuri/uilive", + "bom-ref": "pkg:golang/github.com/gosuri/uilive@v0.0.4", + "version": "v0.0.4", + "purl": "pkg:golang/github.com/gosuri/uilive@v0.0.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/gosuri/uiprogress", + "bom-ref": "pkg:golang/github.com/gosuri/uiprogress@v0.0.1", + "version": "v0.0.1", + "purl": "pkg:golang/github.com/gosuri/uiprogress@v0.0.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/guptarohit/asciigraph", + "bom-ref": "pkg:golang/github.com/guptarohit/asciigraph@v0.5.2", + "version": "v0.5.2", + "purl": "pkg:golang/github.com/guptarohit/asciigraph@v0.5.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/hashicorp/hcl", + "bom-ref": "pkg:golang/github.com/hashicorp/hcl@v1.0.0", + "version": "v1.0.0", + "purl": "pkg:golang/github.com/hashicorp/hcl@v1.0.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/inconshreveable/go-update", + "bom-ref": "pkg:golang/github.com/inconshreveable/go-update@v0.0.0-20160112193335-8152e7eb6ccf", + "version": "v0.0.0-20160112193335-8152e7eb6ccf", + "purl": "pkg:golang/github.com/inconshreveable/go-update@v0.0.0-20160112193335-8152e7eb6ccf", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/kballard/go-shellquote", + "bom-ref": "1044da61-152a-465b-8952-c9e949247616", + "version": "v0.0.0-20180428030007-95032a82bc51", + "purl": "pkg:golang/github.com/kballard/go-shellquote@v0.0.0-20180428030007-95032a82bc51", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/kballard/go-shellquote", + "bom-ref": "5b9357f0-f8fd-4f05-a2c8-d43d47bad559", + "version": "v0.0.0-20180428030007-95032a82bc51", + "purl": "pkg:golang/github.com/kballard/go-shellquote@v0.0.0-20180428030007-95032a82bc51", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/klauspost/compress", + "bom-ref": "pkg:golang/github.com/klauspost/compress@v1.12.1", + "version": "v1.12.1", + "purl": "pkg:golang/github.com/klauspost/compress@v1.12.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/magiconair/properties", + "bom-ref": "pkg:golang/github.com/magiconair/properties@v1.8.5", + "version": "v1.8.5", + "purl": "pkg:golang/github.com/magiconair/properties@v1.8.5", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/mattn/go-colorable", + "bom-ref": "3550f049-6eb2-41a9-8e67-eec39e46a33d", + "version": "v0.1.8", + "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.8", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/mattn/go-colorable", + "bom-ref": "8623282c-313d-4047-9f16-bcfd7e550997", + "version": "v0.1.8", + "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.8", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/mattn/go-isatty", + "bom-ref": "6bd9a336-e7bc-41d1-8c95-294cb3eb6726", + "version": "v0.0.12", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.12", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/mattn/go-isatty", + "bom-ref": "e2cef7b8-d52f-49c6-9c4c-fce547506589", + "version": "v0.0.12", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.12", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/mattn/go-runewidth", + "bom-ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.1", + "version": "v0.0.1", + "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/mgutz/ansi", + "bom-ref": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20170206155736-9520e82c474b", + "version": "v0.0.0-20170206155736-9520e82c474b", + "purl": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20170206155736-9520e82c474b", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/mgutz/ansi", + "bom-ref": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d", + "version": "v0.0.0-20200706080929-d51e80ef957d", + "purl": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/minio/highwayhash", + "bom-ref": "pkg:golang/github.com/minio/highwayhash@v1.0.1", + "version": "v1.0.1", + "purl": "pkg:golang/github.com/minio/highwayhash@v1.0.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/mitchellh/go-homedir", + "bom-ref": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0", + "version": "v1.1.0", + "purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/mitchellh/go-wordwrap", + "bom-ref": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1", + "version": "v1.0.1", + "purl": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/mitchellh/mapstructure", + "bom-ref": "pkg:golang/github.com/mitchellh/mapstructure@v1.4.1", + "version": "v1.4.1", + "purl": "pkg:golang/github.com/mitchellh/mapstructure@v1.4.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/cliprompts/v2", + "bom-ref": "pkg:golang/github.com/nats-io/cliprompts/v2@v2.0.0-20200221130455-2737f3b8cbb9", + "version": "v2.0.0-20200221130455-2737f3b8cbb9", + "purl": "pkg:golang/github.com/nats-io/cliprompts/v2@v2.0.0-20200221130455-2737f3b8cbb9", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/jsm.go", + "bom-ref": "pkg:golang/github.com/nats-io/jsm.go@v0.0.23", + "version": "v0.0.23", + "purl": "pkg:golang/github.com/nats-io/jsm.go@v0.0.23", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/jwt", + "bom-ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "version": "v0.3.2", + "purl": "pkg:golang/github.com/nats-io/jwt@v0.3.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/jwt", + "bom-ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "version": "v0.3.2", + "purl": "pkg:golang/github.com/nats-io/jwt@v0.3.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/jwt", + "bom-ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "version": "v0.3.2", + "purl": "pkg:golang/github.com/nats-io/jwt@v0.3.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/jwt", + "bom-ref": "pkg:golang/github.com/nats-io/jwt@v1.1.0", + "version": "v1.1.0", + "purl": "pkg:golang/github.com/nats-io/jwt@v1.1.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/jwt", + "bom-ref": "pkg:golang/github.com/nats-io/jwt@v1.2.2", + "version": "v1.2.2", + "purl": "pkg:golang/github.com/nats-io/jwt@v1.2.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/jwt/v2", + "bom-ref": "d8213071-7f1e-4f2e-bdac-e66ee0c2dde6", + "version": "v2.0.1", + "purl": "pkg:golang/github.com/nats-io/jwt/v2@v2.0.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/jwt/v2", + "bom-ref": "f97ba060-ad20-45f4-ac69-fc24d30411ad", + "version": "v2.0.1", + "purl": "pkg:golang/github.com/nats-io/jwt/v2@v2.0.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nats-server/v2", + "bom-ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "version": "v2.1.9", + "purl": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nats-server/v2", + "bom-ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.2.2", + "version": "v2.2.2", + "purl": "pkg:golang/github.com/nats-io/nats-server/v2@v2.2.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nats.go", + "bom-ref": "232a0439-a241-452a-be09-f5d63c6335ef", + "version": "v1.10.0", + "purl": "pkg:golang/github.com/nats-io/nats.go@v1.10.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nats.go", + "bom-ref": "7b125efc-c47a-449d-b273-75828649b1a4", + "version": "v1.10.0", + "purl": "pkg:golang/github.com/nats-io/nats.go@v1.10.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nats.go", + "bom-ref": "ad12cc30-75c9-4dbe-9cd7-19b5b086be4e", + "version": "v1.10.0", + "purl": "pkg:golang/github.com/nats-io/nats.go@v1.10.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nats.go", + "bom-ref": "pkg:golang/github.com/nats-io/nats.go@v1.10.1-0.20201021145452-94be476ad6e0", + "version": "v1.10.1-0.20201021145452-94be476ad6e0", + "purl": "pkg:golang/github.com/nats-io/nats.go@v1.10.1-0.20201021145452-94be476ad6e0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nats.go", + "bom-ref": "pkg:golang/github.com/nats-io/nats.go@v1.10.1-0.20210427145106-109f3dd25f10", + "version": "v1.10.1-0.20210427145106-109f3dd25f10", + "purl": "pkg:golang/github.com/nats-io/nats.go@v1.10.1-0.20210427145106-109f3dd25f10", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nkeys", + "bom-ref": "00d71201-cd27-4648-ad71-190cd4b4abf8", + "version": "v0.1.4", + "purl": "pkg:golang/github.com/nats-io/nkeys@v0.1.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nkeys", + "bom-ref": "3a508e2a-ffa6-44b1-a334-46b9aaaf403b", + "version": "v0.1.4", + "purl": "pkg:golang/github.com/nats-io/nkeys@v0.1.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nkeys", + "bom-ref": "417740b7-723b-4313-8059-5f1b4945dc11", + "version": "v0.1.4", + "purl": "pkg:golang/github.com/nats-io/nkeys@v0.1.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nkeys", + "bom-ref": "8d4a3605-99a8-40ad-960e-858be6815082", + "version": "v0.1.4", + "purl": "pkg:golang/github.com/nats-io/nkeys@v0.1.4", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nkeys", + "bom-ref": "8075733b-5b92-4bdc-9b3a-1ea48bff49ad", + "version": "v0.3.0", + "purl": "pkg:golang/github.com/nats-io/nkeys@v0.3.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nkeys", + "bom-ref": "d3c7fe00-7922-44b3-ab7a-6815c8754dfa", + "version": "v0.3.0", + "purl": "pkg:golang/github.com/nats-io/nkeys@v0.3.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nuid", + "bom-ref": "26b20f66-3994-4e05-adb5-c3a663fdc0d3", + "version": "v1.0.1", + "purl": "pkg:golang/github.com/nats-io/nuid@v1.0.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nuid", + "bom-ref": "2ce6cbe0-970f-4185-9e29-4e61713b2391", + "version": "v1.0.1", + "purl": "pkg:golang/github.com/nats-io/nuid@v1.0.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nuid", + "bom-ref": "2dabc52f-279a-4393-91e6-5b3034b68d60", + "version": "v1.0.1", + "purl": "pkg:golang/github.com/nats-io/nuid@v1.0.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nuid", + "bom-ref": "4fbc1e52-81cf-4163-a4c0-dfc0ae24f480", + "version": "v1.0.1", + "purl": "pkg:golang/github.com/nats-io/nuid@v1.0.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nuid", + "bom-ref": "af137522-c78a-4301-becc-f921d74266c9", + "version": "v1.0.1", + "purl": "pkg:golang/github.com/nats-io/nuid@v1.0.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nats-io/nuid", + "bom-ref": "dcadec35-53bc-493d-910d-9e96306127d1", + "version": "v1.0.1", + "purl": "pkg:golang/github.com/nats-io/nuid@v1.0.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/nsf/termbox-go", + "bom-ref": "pkg:golang/github.com/nsf/termbox-go@v0.0.0-20160808045038-e8f6d27f72a2", + "version": "v0.0.0-20160808045038-e8f6d27f72a2", + "purl": "pkg:golang/github.com/nsf/termbox-go@v0.0.0-20160808045038-e8f6d27f72a2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/pelletier/go-toml", + "bom-ref": "pkg:golang/github.com/pelletier/go-toml@v1.9.0", + "version": "v1.9.0", + "purl": "pkg:golang/github.com/pelletier/go-toml@v1.9.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/rhysd/go-github-selfupdate", + "bom-ref": "pkg:golang/github.com/rhysd/go-github-selfupdate@v1.2.3", + "version": "v1.2.3", + "purl": "pkg:golang/github.com/rhysd/go-github-selfupdate@v1.2.3", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/russross/blackfriday/v2", + "bom-ref": "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0", + "version": "v2.1.0", + "purl": "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/spf13/afero", + "bom-ref": "pkg:golang/github.com/spf13/afero@v1.6.0", + "version": "v1.6.0", + "purl": "pkg:golang/github.com/spf13/afero@v1.6.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/spf13/cast", + "bom-ref": "pkg:golang/github.com/spf13/cast@v1.3.1", + "version": "v1.3.1", + "purl": "pkg:golang/github.com/spf13/cast@v1.3.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/spf13/cobra", + "bom-ref": "pkg:golang/github.com/spf13/cobra@v1.1.3", + "version": "v1.1.3", + "purl": "pkg:golang/github.com/spf13/cobra@v1.1.3", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/spf13/jwalterweatherman", + "bom-ref": "pkg:golang/github.com/spf13/jwalterweatherman@v1.1.0", + "version": "v1.1.0", + "purl": "pkg:golang/github.com/spf13/jwalterweatherman@v1.1.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/spf13/pflag", + "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "version": "v1.0.5", + "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/spf13/viper", + "bom-ref": "pkg:golang/github.com/spf13/viper@v1.7.1", + "version": "v1.7.1", + "purl": "pkg:golang/github.com/spf13/viper@v1.7.1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/subosito/gotenv", + "bom-ref": "pkg:golang/github.com/subosito/gotenv@v1.2.0", + "version": "v1.2.0", + "purl": "pkg:golang/github.com/subosito/gotenv@v1.2.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/tcnksm/go-gitconfig", + "bom-ref": "pkg:golang/github.com/tcnksm/go-gitconfig@v0.1.2", + "version": "v0.1.2", + "purl": "pkg:golang/github.com/tcnksm/go-gitconfig@v0.1.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/tylertreat/hdrhistogram-writer", + "bom-ref": "pkg:golang/github.com/tylertreat/hdrhistogram-writer@v0.0.0-20180430173243-73b8d31ba571", + "version": "v0.0.0-20180430173243-73b8d31ba571", + "purl": "pkg:golang/github.com/tylertreat/hdrhistogram-writer@v0.0.0-20180430173243-73b8d31ba571", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/ulikunitz/xz", + "bom-ref": "pkg:golang/github.com/ulikunitz/xz@v0.5.10", + "version": "v0.5.10", + "purl": "pkg:golang/github.com/ulikunitz/xz@v0.5.10", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/xeipuuv/gojsonpointer", + "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb", + "version": "v0.0.0-20190905194746-02993c407bfb", + "purl": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/xeipuuv/gojsonreference", + "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415", + "version": "v0.0.0-20180127040603-bd5ef7bd5415", + "purl": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/xeipuuv/gojsonschema", + "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0", + "version": "v1.2.0", + "purl": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/xlab/tablewriter", + "bom-ref": "1f71cc2c-4dae-4721-a209-956d08b69871", + "version": "v0.0.0-20160610135559-80b567a11ad5", + "purl": "pkg:golang/github.com/xlab/tablewriter@v0.0.0-20160610135559-80b567a11ad5", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "github.com/xlab/tablewriter", + "bom-ref": "63635711-87a0-4f17-a181-a1a240810ec4", + "version": "v0.0.0-20160610135559-80b567a11ad5", + "purl": "pkg:golang/github.com/xlab/tablewriter@v0.0.0-20160610135559-80b567a11ad5", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/crypto", + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59", + "version": "v0.0.0-20200323165209-0ec3e9974c59", + "purl": "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/crypto", + "bom-ref": "64ecbd63-f74a-4fcc-a240-3f8a16435789", + "version": "v0.0.0-20200622213623-75b288015ac9", + "purl": "pkg:golang/golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/crypto", + "bom-ref": "718081db-83c2-4309-87c8-e43228139b88", + "version": "v0.0.0-20200622213623-75b288015ac9", + "purl": "pkg:golang/golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/crypto", + "bom-ref": "c6ba0fd6-a390-4fcf-aaec-4a072dcd17c4", + "version": "v0.0.0-20200622213623-75b288015ac9", + "purl": "pkg:golang/golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/crypto", + "bom-ref": "84eac386-ca89-4217-8a72-84d77e3bd144", + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "purl": "pkg:golang/golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/crypto", + "bom-ref": "ce164c60-ee4f-4360-a85f-73106cf59f6c", + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "purl": "pkg:golang/golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/net", + "bom-ref": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "version": "v0.0.0-20210428140749-89ef3d95e781", + "purl": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/oauth2", + "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20210427180440-81ed05c6b58c", + "version": "v0.0.0-20210427180440-81ed05c6b58c", + "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20210427180440-81ed05c6b58c", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/sys", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20210421221651-33663a62ff08", + "version": "v0.0.0-20210421221651-33663a62ff08", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20210421221651-33663a62ff08", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/sys", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20210426230700-d19ff857e887", + "version": "v0.0.0-20210426230700-d19ff857e887", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20210426230700-d19ff857e887", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/term", + "bom-ref": "a6b681f9-0866-480c-9a19-7df19b930d0d", + "version": "v0.0.0-20210422114643-f5beecf764ed", + "purl": "pkg:golang/golang.org/x/term@v0.0.0-20210422114643-f5beecf764ed", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/term", + "bom-ref": "ab2a2a27-ce28-429e-a2d9-985a5b58ff2f", + "version": "v0.0.0-20210422114643-f5beecf764ed", + "purl": "pkg:golang/golang.org/x/term@v0.0.0-20210422114643-f5beecf764ed", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/text", + "bom-ref": "869288c8-06d2-4a38-8b68-ced0ff17bc77", + "version": "v0.3.6", + "purl": "pkg:golang/golang.org/x/text@v0.3.6", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/text", + "bom-ref": "99b7b900-55f8-4676-8c8f-32262681845b", + "version": "v0.3.6", + "purl": "pkg:golang/golang.org/x/text@v0.3.6", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "golang.org/x/time", + "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20200416051211-89c76fbcd5d1", + "version": "v0.0.0-20200416051211-89c76fbcd5d1", + "purl": "pkg:golang/golang.org/x/time@v0.0.0-20200416051211-89c76fbcd5d1", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "gopkg.in/alecthomas/kingpin.v2", + "bom-ref": "pkg:golang/gopkg.in/alecthomas/kingpin.v2@v2.2.6", + "version": "v2.2.6", + "purl": "pkg:golang/gopkg.in/alecthomas/kingpin.v2@v2.2.6", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "gopkg.in/gizak/termui.v1", + "bom-ref": "pkg:golang/gopkg.in/gizak/termui.v1@v1.0.0-20151021151108-e62b5929642a", + "version": "v1.0.0-20151021151108-e62b5929642a", + "purl": "pkg:golang/gopkg.in/gizak/termui.v1@v1.0.0-20151021151108-e62b5929642a", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "gopkg.in/ini.v1", + "bom-ref": "pkg:golang/gopkg.in/ini.v1@v1.62.0", + "version": "v1.62.0", + "purl": "pkg:golang/gopkg.in/ini.v1@v1.62.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "gopkg.in/yaml.v2", + "bom-ref": "bedd6971-db83-4b95-a3ec-2d000422efed", + "version": "v2.4.0", + "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:e6beccd82255a68627116aea57b3e289359ab8bf4575b94228c4b3bbae16dd23" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:417204a428f254546a3dd352242983aa9972e86c55e2762122fe88cb385ed6b9" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "gopkg.in/yaml.v2", + "bom-ref": "ce8adfce-acb4-4fe1-b310-bd23e88e4e57", + "version": "v2.4.0", + "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:3fd49cd6af694330a549c552a5d678b75306aca9fca7fcaf18867753c5a24f36" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:248f99e65485110dd520fd318b3141c527b038657cb66255a0af748170cd9ade" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "gobinary" + } + ] + }, + { + "type": "library", + "name": "libc-utils", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&distro=3.13.2", + "version": "0.7.2-r3", + "hashes": [ + { + "alg": "SHA-1", + "content": "261cab49287a370b3889e6ec33afd51c2c703df4" + } + ], + "licenses": [ + { + "license": { + "name": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-3-Clause" + } + } + ], + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&distro=3.13.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cb381a32b2296e4eb5af3f84092a2e6685e88adbc54ee0768a1a1010ce6376c7" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:ba3557a56b150f9b813f9d02274d62914fd8fce120dd374d9ee17b87cf1d277d" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "libc-utils@0.7.2-r3" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "libc-dev" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "0.7.2-r3" + } + ] + }, + { + "type": "library", + "name": "libcrypto1.1", + "bom-ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "version": "1.1.1j-r0", + "hashes": [ + { + "alg": "SHA-1", + "content": "5adb82dd79a48d631f9aef830e4183187811bce7" + } + ], + "licenses": [ + { + "license": { + "name": "OpenSSL" + } + } + ], + "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cb381a32b2296e4eb5af3f84092a2e6685e88adbc54ee0768a1a1010ce6376c7" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:ba3557a56b150f9b813f9d02274d62914fd8fce120dd374d9ee17b87cf1d277d" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "libcrypto1.1@1.1.1j-r0" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "openssl" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "1.1.1j-r0" + } + ] + }, + { + "type": "library", + "name": "libssl1.1", + "bom-ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "version": "1.1.1j-r0", + "hashes": [ + { + "alg": "SHA-1", + "content": "0640f8669ebb73d9f34f64bf044b6caa91191077" + } + ], + "licenses": [ + { + "license": { + "name": "OpenSSL" + } + } + ], + "purl": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cb381a32b2296e4eb5af3f84092a2e6685e88adbc54ee0768a1a1010ce6376c7" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:ba3557a56b150f9b813f9d02274d62914fd8fce120dd374d9ee17b87cf1d277d" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "libssl1.1@1.1.1j-r0" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "openssl" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "1.1.1j-r0" + } + ] + }, + { + "type": "library", + "name": "libtls-standalone", + "bom-ref": "pkg:apk/alpine/libtls-standalone@2.9.1-r1?arch=x86_64&distro=3.13.2", + "version": "2.9.1-r1", + "hashes": [ + { + "alg": "SHA-1", + "content": "82d33d0f18a70fdb1b8c9327ae23a196d5bbb0d4" + } + ], + "licenses": [ + { + "license": { + "name": "ISC" + } + } + ], + "purl": "pkg:apk/alpine/libtls-standalone@2.9.1-r1?arch=x86_64&distro=3.13.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cb381a32b2296e4eb5af3f84092a2e6685e88adbc54ee0768a1a1010ce6376c7" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:ba3557a56b150f9b813f9d02274d62914fd8fce120dd374d9ee17b87cf1d277d" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "libtls-standalone@2.9.1-r1" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "libtls-standalone" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "2.9.1-r1" + } + ] + }, + { + "type": "library", + "name": "musl", + "bom-ref": "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2", + "version": "1.2.2-r0", + "hashes": [ + { + "alg": "SHA-1", + "content": "d0dbb978de30ae1f165ee240d89692c2a3a52721" + } + ], + "licenses": [ + { + "license": { + "name": "MIT" + } + } + ], + "purl": "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cb381a32b2296e4eb5af3f84092a2e6685e88adbc54ee0768a1a1010ce6376c7" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:ba3557a56b150f9b813f9d02274d62914fd8fce120dd374d9ee17b87cf1d277d" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "musl@1.2.2-r0" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "musl" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "1.2.2-r0" + } + ] + }, + { + "type": "library", + "name": "musl-utils", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.2-r0?arch=x86_64&distro=3.13.2", + "version": "1.2.2-r0", + "hashes": [ + { + "alg": "SHA-1", + "content": "0f7258226eb526d3701b14343d4b0f0aecae13bc" + } + ], + "licenses": [ + { + "license": { + "name": "BSD-3-Clause" + } + }, + { + "license": { + "name": "GPL-2.0" + } + }, + { + "license": { + "name": "MIT" + } + } + ], + "purl": "pkg:apk/alpine/musl-utils@1.2.2-r0?arch=x86_64&distro=3.13.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cb381a32b2296e4eb5af3f84092a2e6685e88adbc54ee0768a1a1010ce6376c7" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:ba3557a56b150f9b813f9d02274d62914fd8fce120dd374d9ee17b87cf1d277d" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "musl-utils@1.2.2-r0" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "musl" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "1.2.2-r0" + } + ] + }, + { + "type": "library", + "name": "scanelf", + "bom-ref": "pkg:apk/alpine/scanelf@1.2.8-r0?arch=x86_64&distro=3.13.2", + "version": "1.2.8-r0", + "hashes": [ + { + "alg": "SHA-1", + "content": "39824e854e7520bc03411c0d89882ab6af7cebfa" + } + ], + "licenses": [ + { + "license": { + "name": "GPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/scanelf@1.2.8-r0?arch=x86_64&distro=3.13.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cb381a32b2296e4eb5af3f84092a2e6685e88adbc54ee0768a1a1010ce6376c7" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:ba3557a56b150f9b813f9d02274d62914fd8fce120dd374d9ee17b87cf1d277d" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "scanelf@1.2.8-r0" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "pax-utils" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "1.2.8-r0" + } + ] + }, + { + "type": "library", + "name": "ssl_client", + "bom-ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64&distro=3.13.2", + "version": "1.32.1-r3", + "hashes": [ + { + "alg": "SHA-1", + "content": "18b22c9a0ce4aacdd4ab48e1696ccf70f98068dc" + } + ], + "licenses": [ + { + "license": { + "name": "GPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64&distro=3.13.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cb381a32b2296e4eb5af3f84092a2e6685e88adbc54ee0768a1a1010ce6376c7" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:ba3557a56b150f9b813f9d02274d62914fd8fce120dd374d9ee17b87cf1d277d" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "ssl_client@1.32.1-r3" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "busybox" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "1.32.1-r3" + } + ] + }, + { + "type": "library", + "name": "zlib", + "bom-ref": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.13.2", + "version": "1.2.11-r3", + "hashes": [ + { + "alg": "SHA-1", + "content": "36bf58da74d48e0011cb00b7e27f4d114b772cee" + } + ], + "licenses": [ + { + "license": { + "name": "Zlib" + } + } + ], + "purl": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.13.2", + "properties": [ + { + "name": "aquasecurity:trivy:LayerDiffID", + "value": "sha256:cb381a32b2296e4eb5af3f84092a2e6685e88adbc54ee0768a1a1010ce6376c7" + }, + { + "name": "aquasecurity:trivy:LayerDigest", + "value": "sha256:ba3557a56b150f9b813f9d02274d62914fd8fce120dd374d9ee17b87cf1d277d" + }, + { + "name": "aquasecurity:trivy:PkgID", + "value": "zlib@1.2.11-r3" + }, + { + "name": "aquasecurity:trivy:PkgType", + "value": "alpine" + }, + { + "name": "aquasecurity:trivy:SrcName", + "value": "zlib" + }, + { + "name": "aquasecurity:trivy:SrcVersion", + "value": "1.2.11-r3" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "bom-ref": "cfba38a6-98c7-43e7-82ac-7841dd9513ca", + "version": "3.13.2", + "properties": [ + { + "name": "aquasecurity:trivy:Class", + "value": "os-pkgs" + }, + { + "name": "aquasecurity:trivy:Type", + "value": "alpine" + } + ] + } + ], + "dependencies": [ + { + "ref": "00d71201-cd27-4648-ad71-190cd4b4abf8", + "dependsOn": [] + }, + { + "ref": "02c6e323-75c9-41ad-a48b-ea236df51a1a", + "dependsOn": [] + }, + { + "ref": "036e29ed-0565-4dff-be02-dc8e2b0376d7", + "dependsOn": [] + }, + { + "ref": "1044da61-152a-465b-8952-c9e949247616", + "dependsOn": [] + }, + { + "ref": "17d6a00d-ad1c-422f-ab52-07d021d4d62a", + "dependsOn": [ + "417740b7-723b-4313-8059-5f1b4945dc11", + "4497229a-93b4-4299-a9e6-a1070b6ffda5", + "64ecbd63-f74a-4fcc-a240-3f8a16435789", + "7b125efc-c47a-449d-b273-75828649b1a4", + "dcadec35-53bc-493d-910d-9e96306127d1", + "e192291f-a90f-4cc4-ad6d-0379a45256cd" + ] + }, + { + "ref": "1f71cc2c-4dae-4721-a209-956d08b69871", + "dependsOn": [] + }, + { + "ref": "232a0439-a241-452a-be09-f5d63c6335ef", + "dependsOn": [] + }, + { + "ref": "26b20f66-3994-4e05-adb5-c3a663fdc0d3", + "dependsOn": [] + }, + { + "ref": "2ce6cbe0-970f-4185-9e29-4e61713b2391", + "dependsOn": [] + }, + { + "ref": "2dabc52f-279a-4393-91e6-5b3034b68d60", + "dependsOn": [] + }, + { + "ref": "3550f049-6eb2-41a9-8e67-eec39e46a33d", + "dependsOn": [] + }, + { + "ref": "37100b09-d58e-456b-bf66-96cb133c434d", + "dependsOn": [ + "00d71201-cd27-4648-ad71-190cd4b4abf8", + "232a0439-a241-452a-be09-f5d63c6335ef", + "4fbc1e52-81cf-4163-a4c0-dfc0ae24f480", + "718081db-83c2-4309-87c8-e43228139b88", + "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "90b91b63-c94e-469d-87ef-b98807e67bfb" + ] + }, + { + "ref": "3a508e2a-ffa6-44b1-a334-46b9aaaf403b", + "dependsOn": [] + }, + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "dependsOn": [] + }, + { + "ref": "417740b7-723b-4313-8059-5f1b4945dc11", + "dependsOn": [] + }, + { + "ref": "4497229a-93b4-4299-a9e6-a1070b6ffda5", + "dependsOn": [] + }, + { + "ref": "4fbc1e52-81cf-4163-a4c0-dfc0ae24f480", + "dependsOn": [] + }, + { + "ref": "5b9357f0-f8fd-4f05-a2c8-d43d47bad559", + "dependsOn": [] + }, + { + "ref": "5bedfcbd-bcb9-4b36-ac1c-69b77c8b0b45", + "dependsOn": [ + "2ce6cbe0-970f-4185-9e29-4e61713b2391", + "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "8d4a3605-99a8-40ad-960e-858be6815082", + "ad12cc30-75c9-4dbe-9cd7-19b5b086be4e", + "c6ba0fd6-a390-4fcf-aaec-4a072dcd17c4", + "d99b8db3-8f9e-41a4-bb16-0c1936f401d3" + ] + }, + { + "ref": "5e630d92-734e-441e-97bc-292689866d19", + "dependsOn": [ + "2dabc52f-279a-4393-91e6-5b3034b68d60", + "3a508e2a-ffa6-44b1-a334-46b9aaaf403b", + "pkg:golang/github.com/mattn/go-runewidth@v0.0.1", + "pkg:golang/github.com/nats-io/jwt@v1.1.0", + "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "pkg:golang/github.com/nsf/termbox-go@v0.0.0-20160808045038-e8f6d27f72a2", + "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59", + "pkg:golang/gopkg.in/gizak/termui.v1@v1.0.0-20151021151108-e62b5929642a" + ] + }, + { + "ref": "63635711-87a0-4f17-a181-a1a240810ec4", + "dependsOn": [] + }, + { + "ref": "64ecbd63-f74a-4fcc-a240-3f8a16435789", + "dependsOn": [] + }, + { + "ref": "6bd9a336-e7bc-41d1-8c95-294cb3eb6726", + "dependsOn": [] + }, + { + "ref": "718081db-83c2-4309-87c8-e43228139b88", + "dependsOn": [] + }, + { + "ref": "7b125efc-c47a-449d-b273-75828649b1a4", + "dependsOn": [] + }, + { + "ref": "7dba7372-931a-407d-a918-76bcac292907", + "dependsOn": [] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "dependsOn": [] + }, + { + "ref": "8075733b-5b92-4bdc-9b3a-1ea48bff49ad", + "dependsOn": [] + }, + { + "ref": "84eac386-ca89-4217-8a72-84d77e3bd144", + "dependsOn": [] + }, + { + "ref": "8623282c-313d-4047-9f16-bcfd7e550997", + "dependsOn": [] + }, + { + "ref": "869288c8-06d2-4a38-8b68-ced0ff17bc77", + "dependsOn": [] + }, + { + "ref": "8d4a3605-99a8-40ad-960e-858be6815082", + "dependsOn": [] + }, + { + "ref": "90b91b63-c94e-469d-87ef-b98807e67bfb", + "dependsOn": [] + }, + { + "ref": "99b7b900-55f8-4676-8c8f-32262681845b", + "dependsOn": [] + }, + { + "ref": "a6b681f9-0866-480c-9a19-7df19b930d0d", + "dependsOn": [] + }, + { + "ref": "ab2a2a27-ce28-429e-a2d9-985a5b58ff2f", + "dependsOn": [] + }, + { + "ref": "ad12cc30-75c9-4dbe-9cd7-19b5b086be4e", + "dependsOn": [] + }, + { + "ref": "ae9d8fc6-a066-4e24-bc8c-cdfe17a737c0", + "dependsOn": [] + }, + { + "ref": "af137522-c78a-4301-becc-f921d74266c9", + "dependsOn": [] + }, + { + "ref": "bedd6971-db83-4b95-a3ec-2d000422efed", + "dependsOn": [] + }, + { + "ref": "c6ba0fd6-a390-4fcf-aaec-4a072dcd17c4", + "dependsOn": [] + }, + { + "ref": "c85c3481-4815-486c-82e9-dba0f7a3eac6", + "dependsOn": [] + }, + { + "ref": "ce164c60-ee4f-4360-a85f-73106cf59f6c", + "dependsOn": [] + }, + { + "ref": "ce8adfce-acb4-4fe1-b310-bd23e88e4e57", + "dependsOn": [] + }, + { + "ref": "cfba38a6-98c7-43e7-82ac-7841dd9513ca", + "dependsOn": [ + "pkg:apk/alpine/alpine-baselayout@3.2.0-r8?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/alpine-keys@2.2-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/apk-tools@2.12.1-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/ca-certificates-bundle@20191127-r5?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/ca-certificates@20191127-r5?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/figlet@2.2.5-r1?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/libtls-standalone@2.9.1-r1?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/musl-utils@1.2.2-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/scanelf@1.2.8-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "d3c7fe00-7922-44b3-ab7a-6815c8754dfa", + "dependsOn": [] + }, + { + "ref": "d7122973-9d0f-4e27-bc7b-f3930bde6889", + "dependsOn": [ + "02c6e323-75c9-41ad-a48b-ea236df51a1a", + "036e29ed-0565-4dff-be02-dc8e2b0376d7", + "1044da61-152a-465b-8952-c9e949247616", + "1f71cc2c-4dae-4721-a209-956d08b69871", + "6bd9a336-e7bc-41d1-8c95-294cb3eb6726", + "8623282c-313d-4047-9f16-bcfd7e550997", + "869288c8-06d2-4a38-8b68-ced0ff17bc77", + "ab2a2a27-ce28-429e-a2d9-985a5b58ff2f", + "ae9d8fc6-a066-4e24-bc8c-cdfe17a737c0", + "af137522-c78a-4301-becc-f921d74266c9", + "bedd6971-db83-4b95-a3ec-2d000422efed", + "ce164c60-ee4f-4360-a85f-73106cf59f6c", + "d3c7fe00-7922-44b3-ab7a-6815c8754dfa", + "f97ba060-ad20-45f4-ac69-fc24d30411ad", + "pkg:golang/github.com/alecthomas/template@v0.0.0-20190718012654-fb15b899a751", + "pkg:golang/github.com/alecthomas/units@v0.0.0-20210208195552-ff826a37aa15", + "pkg:golang/github.com/emicklei/dot@v0.15.0", + "pkg:golang/github.com/ghodss/yaml@v1.0.0", + "pkg:golang/github.com/google/go-cmp@v0.5.5", + "pkg:golang/github.com/gosuri/uilive@v0.0.4", + "pkg:golang/github.com/gosuri/uiprogress@v0.0.1", + "pkg:golang/github.com/guptarohit/asciigraph@v0.5.2", + "pkg:golang/github.com/hdrhistogram/hdrhistogram-go@v0.9.0", + "pkg:golang/github.com/klauspost/compress@v1.12.1", + "pkg:golang/github.com/mgutz/ansi@v0.0.0-20170206155736-9520e82c474b", + "pkg:golang/github.com/minio/highwayhash@v1.0.1", + "pkg:golang/github.com/nats-io/jsm.go@v0.0.23", + "pkg:golang/github.com/nats-io/nats-server/v2@v2.2.2", + "pkg:golang/github.com/nats-io/nats.go@v1.10.1-0.20210427145106-109f3dd25f10", + "pkg:golang/github.com/tylertreat/hdrhistogram-writer@v0.0.0-20180430173243-73b8d31ba571", + "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb", + "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415", + "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0", + "pkg:golang/golang.org/x/sys@v0.0.0-20210421221651-33663a62ff08", + "pkg:golang/golang.org/x/time@v0.0.0-20200416051211-89c76fbcd5d1", + "pkg:golang/gopkg.in/alecthomas/kingpin.v2@v2.2.6" + ] + }, + { + "ref": "d8213071-7f1e-4f2e-bdac-e66ee0c2dde6", + "dependsOn": [] + }, + { + "ref": "d99b8db3-8f9e-41a4-bb16-0c1936f401d3", + "dependsOn": [] + }, + { + "ref": "dcadec35-53bc-493d-910d-9e96306127d1", + "dependsOn": [] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "dependsOn": [] + }, + { + "ref": "e2cef7b8-d52f-49c6-9c4c-fce547506589", + "dependsOn": [] + }, + { + "ref": "f0745570-156e-489b-9743-7a6c34f2b983", + "dependsOn": [] + }, + { + "ref": "f97ba060-ad20-45f4-ac69-fc24d30411ad", + "dependsOn": [] + }, + { + "ref": "fff3d909-640a-4173-b0c3-b23507dd77d3", + "dependsOn": [ + "26b20f66-3994-4e05-adb5-c3a663fdc0d3", + "3550f049-6eb2-41a9-8e67-eec39e46a33d", + "5b9357f0-f8fd-4f05-a2c8-d43d47bad559", + "63635711-87a0-4f17-a181-a1a240810ec4", + "7dba7372-931a-407d-a918-76bcac292907", + "8075733b-5b92-4bdc-9b3a-1ea48bff49ad", + "84eac386-ca89-4217-8a72-84d77e3bd144", + "99b7b900-55f8-4676-8c8f-32262681845b", + "a6b681f9-0866-480c-9a19-7df19b930d0d", + "c85c3481-4815-486c-82e9-dba0f7a3eac6", + "ce8adfce-acb4-4fe1-b310-bd23e88e4e57", + "d8213071-7f1e-4f2e-bdac-e66ee0c2dde6", + "e2cef7b8-d52f-49c6-9c4c-fce547506589", + "f0745570-156e-489b-9743-7a6c34f2b983", + "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible", + "pkg:golang/github.com/briandowns/spinner@v1.12.0", + "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0", + "pkg:golang/github.com/fsnotify/fsnotify@v1.4.9", + "pkg:golang/github.com/google/go-github/v30@v30.1.0", + "pkg:golang/github.com/google/go-querystring@v1.1.0", + "pkg:golang/github.com/hashicorp/hcl@v1.0.0", + "pkg:golang/github.com/inconshreveable/go-update@v0.0.0-20160112193335-8152e7eb6ccf", + "pkg:golang/github.com/magiconair/properties@v1.8.5", + "pkg:golang/github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d", + "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0", + "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1", + "pkg:golang/github.com/mitchellh/mapstructure@v1.4.1", + "pkg:golang/github.com/nats-io/cliprompts/v2@v2.0.0-20200221130455-2737f3b8cbb9", + "pkg:golang/github.com/nats-io/jwt@v1.2.2", + "pkg:golang/github.com/nats-io/nats.go@v1.10.1-0.20201021145452-94be476ad6e0", + "pkg:golang/github.com/pelletier/go-toml@v1.9.0", + "pkg:golang/github.com/rhysd/go-github-selfupdate@v1.2.3", + "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0", + "pkg:golang/github.com/spf13/afero@v1.6.0", + "pkg:golang/github.com/spf13/cast@v1.3.1", + "pkg:golang/github.com/spf13/cobra@v1.1.3", + "pkg:golang/github.com/spf13/jwalterweatherman@v1.1.0", + "pkg:golang/github.com/spf13/pflag@v1.0.5", + "pkg:golang/github.com/spf13/viper@v1.7.1", + "pkg:golang/github.com/subosito/gotenv@v1.2.0", + "pkg:golang/github.com/tcnksm/go-gitconfig@v0.1.2", + "pkg:golang/github.com/ulikunitz/xz@v0.5.10", + "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "pkg:golang/golang.org/x/oauth2@v0.0.0-20210427180440-81ed05c6b58c", + "pkg:golang/golang.org/x/sys@v0.0.0-20210426230700-d19ff857e887", + "pkg:golang/gopkg.in/ini.v1@v1.62.0" + ] + }, + { + "ref": "pkg:apk/alpine/alpine-baselayout@3.2.0-r8?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/alpine-keys@2.2-r0?arch=x86_64&distro=3.13.2", + "dependsOn": [] + }, + { + "ref": "pkg:apk/alpine/apk-tools@2.12.1-r0?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/ca-certificates-bundle@20191127-r5?arch=x86_64&distro=3.13.2", + "dependsOn": [] + }, + { + "ref": "pkg:apk/alpine/ca-certificates@20191127-r5?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/figlet@2.2.5-r1?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/musl-utils@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/libtls-standalone@2.9.1-r1?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/ca-certificates-bundle@20191127-r5?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/musl-utils@1.2.2-r0?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/scanelf@1.2.8-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2", + "dependsOn": [] + }, + { + "ref": "pkg:apk/alpine/scanelf@1.2.8-r0?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/libtls-standalone@2.9.1-r1?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:golang/github.com/alecthomas/template@v0.0.0-20190718012654-fb15b899a751", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/alecthomas/units@v0.0.0-20210208195552-ff826a37aa15", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/briandowns/spinner@v1.12.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/emicklei/dot@v0.15.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/fsnotify/fsnotify@v1.4.9", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/ghodss/yaml@v1.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/google/go-cmp@v0.5.5", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/google/go-github/v30@v30.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/google/go-querystring@v1.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/gosuri/uilive@v0.0.4", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/gosuri/uiprogress@v0.0.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/guptarohit/asciigraph@v0.5.2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/hashicorp/hcl@v1.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/hdrhistogram/hdrhistogram-go@v0.9.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/inconshreveable/go-update@v0.0.0-20160112193335-8152e7eb6ccf", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/klauspost/compress@v1.12.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/magiconair/properties@v1.8.5", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20170206155736-9520e82c474b", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/minio/highwayhash@v1.0.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mitchellh/mapstructure@v1.4.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/cliprompts/v2@v2.0.0-20200221130455-2737f3b8cbb9", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/jsm.go@v0.0.23", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.2.2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.2.2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats.go@v1.10.1-0.20201021145452-94be476ad6e0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats.go@v1.10.1-0.20210427145106-109f3dd25f10", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nsf/termbox-go@v0.0.0-20160808045038-e8f6d27f72a2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/pelletier/go-toml@v1.9.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/rhysd/go-github-selfupdate@v1.2.3", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/spf13/afero@v1.6.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/spf13/cast@v1.3.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/spf13/cobra@v1.1.3", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/spf13/jwalterweatherman@v1.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/spf13/viper@v1.7.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/subosito/gotenv@v1.2.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/tcnksm/go-gitconfig@v0.1.2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/tylertreat/hdrhistogram-writer@v0.0.0-20180430173243-73b8d31ba571", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/ulikunitz/xz@v0.5.10", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20210427180440-81ed05c6b58c", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/sys@v0.0.0-20210421221651-33663a62ff08", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/sys@v0.0.0-20210426230700-d19ff857e887", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/time@v0.0.0-20200416051211-89c76fbcd5d1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/gopkg.in/alecthomas/kingpin.v2@v2.2.6", + "dependsOn": [] + }, + { + "ref": "pkg:golang/gopkg.in/gizak/termui.v1@v1.0.0-20151021151108-e62b5929642a", + "dependsOn": [] + }, + { + "ref": "pkg:golang/gopkg.in/ini.v1@v1.62.0", + "dependsOn": [] + }, + { + "ref": "pkg:oci/nats-box@sha256%3Acaf0c9fe15a9a88d001c74fd9d80f7f6fd57474aa243cd63a9a086eda9e202be?arch=amd64&repository_url=index.docker.io%2Fnatsio%2Fnats-box", + "dependsOn": [ + "17d6a00d-ad1c-422f-ab52-07d021d4d62a", + "37100b09-d58e-456b-bf66-96cb133c434d", + "5bedfcbd-bcb9-4b36-ac1c-69b77c8b0b45", + "5e630d92-734e-441e-97bc-292689866d19", + "cfba38a6-98c7-43e7-82ac-7841dd9513ca", + "d7122973-9d0f-4e27-bc7b-f3930bde6889", + "fff3d909-640a-4173-b0c3-b23507dd77d3" + ] + } + ], + "vulnerabilities": [ + { + "advisories": [ + { + "url": "http://seclists.org/fulldisclosure/2022/May/33" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/35" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/38" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2022/03/25/2" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2022/03/26/1" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2022:8420" + }, + { + "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2018-25032" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2018-25032" + }, + { + "url": "https://bugzilla.redhat.com/2067945" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2022-8420.html" + }, + { + "url": "https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531" + }, + { + "url": "https://github.com/madler/zlib/compare/v1.2.11...v1.2.12" + }, + { + "url": "https://github.com/madler/zlib/issues/605" + }, + { + "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml" + }, + { + "url": "https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4" + }, + { + "url": "https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5" + }, + { + "url": "https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2018-25032.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2022-9565.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-25032" + }, + { + "url": "https://security.gentoo.org/glsa/202210-42" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220526-0009" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220526-0009/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220729-0004" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220729-0004/" + }, + { + "url": "https://support.apple.com/kb/HT213255" + }, + { + "url": "https://support.apple.com/kb/HT213256" + }, + { + "url": "https://support.apple.com/kb/HT213257" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5355-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5355-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5359-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5359-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5739-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2018-25032" + }, + { + "url": "https://www.debian.org/security/2022/dsa-5111" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2022/03/24/1" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2022/03/28/1" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2022/03/28/3" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujul2022.html" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.2.11-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 787 + ], + "description": "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.", + "id": "CVE-2018-25032", + "published": "2022-03-25T09:15:08+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "high" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "ruby-advisory-db" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 8.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + } + ], + "recommendation": "Upgrade zlib to version 1.2.12-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T02:56:26+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2019-13126" + }, + { + "url": "https://github.com/nats-io/nats-server/commit/07ef71ff98f45f8c2711be4aeaf484610d891dda" + }, + { + "url": "https://github.com/nats-io/nats-server/commits/master" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/1053" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/1441" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13126" + }, + { + "url": "https://www.twistlock.com/labs-blog/finding-dos-vulnerability-nats-go-fuzz-cve-2019-13126" + }, + { + "url": "https://www.twistlock.com/labs-blog/finding-dos-vulnerability-nats-go-fuzz-cve-2019-13126/" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + } + ], + "cwes": [ + 190 + ], + "description": "An integer overflow in NATS Server before 2.0.2 allows a remote attacker to crash the server by sending a crafted request. If authentication is enabled, then the remote attacker must have first authenticated.", + "id": "CVE-2019-13126", + "published": "2019-07-29T17:15:11+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.2.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-03-03T19:13:24+00:00" + }, + { + "advisories": [ + { + "url": "http://www.openwall.com/lists/oss-security/2020/11/02/2" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2020-26521.txt" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2020-26521" + }, + { + "url": "https://github.com/nats-io/jwt/pull/107" + }, + { + "url": "https://github.com/nats-io/jwt/security/advisories/GHSA-h2fg-54x9-5qhq" + }, + { + "url": "https://github.com/nats-io/nats-server/commit/9ff8bcde2e46009e98bd9e88f598af355f62c168" + }, + { + "url": "https://github.com/nats-io/nats-server/commits/master" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-26521" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2022-0402" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + } + ], + "cwes": [ + 476 + ], + "description": "The JWT library in NATS nats-server before 2.1.9 allows a denial of service (a nil dereference in Go code).", + "id": "CVE-2020-26521", + "published": "2020-11-06T08:15:13+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 1.1.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:20:36+00:00" + }, + { + "advisories": [ + { + "url": "https://advisories.nats.io/CVE/CVE-2020-26892.txt" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2020-26892" + }, + { + "url": "https://github.com/nats-io/jwt/commit/e11ce317263cef69619fc1ca743b195d02aa1d8a" + }, + { + "url": "https://github.com/nats-io/jwt/security/advisories/GHSA-4w5x-x539-ppf5" + }, + { + "url": "https://github.com/nats-io/nats-server/commit/1e08b67f08e18cd844dce833a265aaa72500a12f" + }, + { + "url": "https://github.com/nats-io/nats-server/commits/master" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-26892" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2022-0380" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2020/11/02/2" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + } + ], + "cwes": [ + 798 + ], + "description": "The JWT library in NATS nats-server before 2.1.9 has Incorrect Access Control because of how expired credentials are handled.", + "id": "CVE-2020-26892", + "published": "2020-11-06T08:15:13+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 1.1.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:20:46+00:00" + }, + { + "advisories": [ + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/16/1" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/16/2" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2020-28466" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/1731" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/1731/commits/2e3c22672936f4980d343fb1d328b38919e74796" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28466" + }, + { + "url": "https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMNATSIONATSSERVERSERVER-1042967" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + } + ], + "description": "This affects all versions of package github.com/nats-io/nats-server/server. Untrusted accounts are able to crash the server using configs that represent a service export/import cycles. Disclaimer from the maintainers: Running a NATS service which is exposed to untrusted users presents a heightened risk. Any remote execution flaw or equivalent seriousness, or denial-of-service by unauthenticated users, will lead to prompt releases by the NATS maintainers. Fixes for denial of service issues with no threat of remote execution, when limited to account holders, are likely to just be committed to the main development branch with no special attention. Those who are running such services are encouraged to build regularly from git.", + "id": "CVE-2020-28466", + "published": "2021-03-07T10:15:12+00:00", + "ratings": [ + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.2.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2021-03-25T00:21:15+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2020-29652" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2020-29652" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29652" + }, + { + "url": "https://errata.almalinux.org/8/ALSA-2021-1796.html" + }, + { + "url": "https://go-review.googlesource.com/c/crypto/+/278852" + }, + { + "url": "https://go.dev/cl/278852" + }, + { + "url": "https://go.googlesource.com/crypto/+/8b5274cf687fd9316b4108863654cc57385531e8" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/ouZIlBimOsE?pli=1" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2020-29652.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2021-1796.html" + }, + { + "url": "https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff%40%3Cnotifications.skywalking.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff@%3Cnotifications.skywalking.apache.org%3E" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-29652" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2021-0227" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2020-29652" + } + ], + "affects": [ + { + "ref": "64ecbd63-f74a-4fcc-a240-3f8a16435789", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "718081db-83c2-4309-87c8-e43228139b88", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "c6ba0fd6-a390-4fcf-aaec-4a072dcd17c4", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59", + "versions": [ + { + "version": "v0.0.0-20200323165209-0ec3e9974c59", + "status": "affected" + } + ] + } + ], + "cwes": [ + 476 + ], + "description": "A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.", + "id": "CVE-2020-29652", + "published": "2020-12-17T05:15:10+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + } + ], + "recommendation": "Upgrade golang.org/x/crypto to version 0.0.0-20201216223049-8b5274cf687f", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:21:32+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2021-28831" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2021-28831" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28831" + }, + { + "url": "https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28831" + }, + { + "url": "https://security.gentoo.org/glsa/202105-09" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6335-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-28831" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 755 + ], + "description": "decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.", + "id": "CVE-2021-28831", + "published": "2021-03-19T05:15:13+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r4; Upgrade ssl_client to version 1.32.1-r4", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:32:23+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-30139" + }, + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741" + }, + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/apk-tools@2.12.1-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "2.12.1-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.", + "id": "CVE-2021-30139", + "published": "2021-04-21T16:15:08+00:00", + "ratings": [ + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + } + ], + "recommendation": "Upgrade apk-tools to version 2.12.5-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2021-04-22T18:21:47+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3127" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2021-3127.txt" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3127" + }, + { + "url": "https://github.com/nats-io/jwt" + }, + { + "url": "https://github.com/nats-io/jwt/pull/149/commits/a826c77dc9d2671c961b75ceefdb439c41029866" + }, + { + "url": "https://github.com/nats-io/nats-server/commit/423b79440c80c863de9f4e20548504e6c5d5e403" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3127" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.1.0", + "versions": [ + { + "version": "v1.1.0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.2.2", + "versions": [ + { + "version": "v1.2.2", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + } + ], + "cwes": [ + 755 + ], + "description": "NATS Server 2.x before 2.2.0 and JWT library before 2.0.1 have Incorrect Access Control because Import Token bindings are mishandled.", + "id": "CVE-2021-3127", + "published": "2021-03-16T20:15:13+00:00", + "ratings": [ + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 1.2.3-0.20210314221642-a826c77dc9d2; Upgrade github.com/nats-io/nats-server/v2 to version 2.2.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2022-07-12T17:42:04+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2021-33194" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2021-33194" + }, + { + "url": "https://github.com/golang/net/commit/37e1c6afe02340126705deced573a85ab75209d7" + }, + { + "url": "https://go.dev/cl/311090" + }, + { + "url": "https://go.dev/issue/46288" + }, + { + "url": "https://go.googlesource.com/net/+/37e1c6afe02340126705deced573a85ab75209d7" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/wPunbCPkWUg" + }, + { + "url": "https://groups.google.com/g/golang-dev/c/28x0nthP-c8/m/KqWVTjsnBAAJ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4CHKSFMHZVOBCZSSVRE3UEYNKARTBMTM/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4CHKSFMHZVOBCZSSVRE3UEYNKARTBMTM" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33194" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2021-0238" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-33194" + } + ], + "affects": [ + { + "ref": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "versions": [ + { + "version": "v0.0.0-20210428140749-89ef3d95e781", + "status": "affected" + } + ] + } + ], + "cwes": [ + 835 + ], + "description": "golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop) via crafted ParseFragment input.", + "id": "CVE-2021-33194", + "published": "2021-05-26T15:15:08+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade golang.org/x/net to version 0.0.0-20210520170846-37e1c6afe023", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:35:49+00:00" + }, + { + "advisories": [ + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/27/1" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/27/2" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/28/3" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/28/4" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3449" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3449" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148" + }, + { + "url": "https://github.com/alexcrichton/openssl-src-rs" + }, + { + "url": "https://github.com/nodejs/node/pull/38083" + }, + { + "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845" + }, + { + "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10356" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2021-3449.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2021-9151.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3449" + }, + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0055" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0055.html" + }, + { + "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc" + }, + { + "url": "https://security.gentoo.org/glsa/202103-03" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210326-0006" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210326-0006/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210513-0002" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210513-0002/" + }, + { + "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd" + }, + { + "url": "https://ubuntu.com/security/notices/USN-4891-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5038-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-3449" + }, + { + "url": "https://www.debian.org/security/2021/dsa-4875" + }, + { + "url": "https://www.openssl.org/news/secadv/20210325.txt" + }, + { + "url": "https://www.oracle.com//security-alerts/cpujul2021.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuApr2021.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujul2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" + }, + { + "url": "https://www.tenable.com/security/tns-2021-05" + }, + { + "url": "https://www.tenable.com/security/tns-2021-06" + }, + { + "url": "https://www.tenable.com/security/tns-2021-09" + }, + { + "url": "https://www.tenable.com/security/tns-2021-10" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 476 + ], + "description": "An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).", + "id": "CVE-2021-3449", + "published": "2021-03-25T15:15:13+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.9, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "photon" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 4.3, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "bitnami" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ghsa" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1k-r0; Upgrade libssl1.1 to version 1.1.1k-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:38:00+00:00" + }, + { + "advisories": [ + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/27/1" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/27/2" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/28/3" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/28/4" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3450" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3450" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b" + }, + { + "url": "https://github.com/alexcrichton/openssl-src-rs" + }, + { + "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845" + }, + { + "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10356" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2021-3450.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2021-9151.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP" + }, + { + "url": "https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3450" + }, + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0056.html" + }, + { + "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc" + }, + { + "url": "https://security.gentoo.org/glsa/202103-03" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210326-0006" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210326-0006/" + }, + { + "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-3450" + }, + { + "url": "https://www.openssl.org/news/secadv/20210325.txt" + }, + { + "url": "https://www.oracle.com//security-alerts/cpujul2021.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuApr2021.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujul2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" + }, + { + "url": "https://www.tenable.com/security/tns-2021-05" + }, + { + "url": "https://www.tenable.com/security/tns-2021-08" + }, + { + "url": "https://www.tenable.com/security/tns-2021-09" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 295 + ], + "description": "The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a \"purpose\" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named \"purpose\" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).", + "id": "CVE-2021-3450", + "published": "2021-03-25T15:15:13+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.8, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:N" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1k-r0; Upgrade libssl1.1 to version 1.1.1k-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:38:00+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2021-36159" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2021-36159" + }, + { + "url": "https://github.com/freebsd/freebsd-src/commits/main/lib/libfetch" + }, + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10749" + }, + { + "url": "https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-36159" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-36159" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/apk-tools@2.12.1-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "2.12.1-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because strtol is used to parse the relevant numbers into address bytes. It does not check if the line ends prematurely. If it does, the for-loop condition checks for the '\\0' terminator one byte too late.", + "id": "CVE-2021-36159", + "published": "2021-08-03T14:15:08+00:00", + "ratings": [ + { + "source": { + "name": "nvd" + }, + "score": 9.1, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 9.1, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.4, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:P" + } + ], + "recommendation": "Upgrade apk-tools to version 2.12.6-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:36:43+00:00" + }, + { + "advisories": [ + { + "url": "http://www.openwall.com/lists/oss-security/2021/08/26/2" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3711" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3711" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3711" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46" + }, + { + "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3711" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0097.html" + }, + { + "url": "https://security.gentoo.org/glsa/202209-02" + }, + { + "url": "https://security.gentoo.org/glsa/202210-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210827-0010" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210827-0010/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211022-0003" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211022-0003/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-3711" + }, + { + "url": "https://www.debian.org/security/2021/dsa-4963" + }, + { + "url": "https://www.openssl.org/news/secadv/20210824.txt" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujan2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" + }, + { + "url": "https://www.tenable.com/security/tns-2021-16" + }, + { + "url": "https://www.tenable.com/security/tns-2022-02" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 120 + ], + "description": "In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the \"out\" parameter can be NULL and, on exit, the \"outlen\" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the \"out\" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).", + "id": "CVE-2021-3711", + "published": "2021-08-24T15:15:09+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "critical" + }, + { + "source": { + "name": "photon" + }, + "severity": "critical" + }, + { + "source": { + "name": "ghsa" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P" + }, + { + "source": { + "name": "redhat" + }, + "score": 9.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1l-r0; Upgrade libssl1.1 to version 1.1.1l-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:38:13+00:00" + }, + { + "advisories": [ + { + "url": "http://www.openwall.com/lists/oss-security/2021/08/26/2" + }, + { + "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3712" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3712" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3712" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12" + }, + { + "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10366" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2021-3712.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2022-9023.html" + }, + { + "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3712" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0098.html" + }, + { + "url": "https://security.gentoo.org/glsa/202209-02" + }, + { + "url": "https://security.gentoo.org/glsa/202210-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210827-0010" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210827-0010/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-3" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5088-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-3712" + }, + { + "url": "https://www.debian.org/security/2021/dsa-4963" + }, + { + "url": "https://www.openssl.org/news/secadv/20210824.txt" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujan2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" + }, + { + "url": "https://www.tenable.com/security/tns-2021-16" + }, + { + "url": "https://www.tenable.com/security/tns-2022-02" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).", + "id": "CVE-2021-3712", + "published": "2021-08-24T15:15:09+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "rocky" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.8, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:M/Au:N/C:P/I:N/A:P" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.4, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1l-r0; Upgrade libssl1.1 to version 1.1.1l-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:38:13+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2021-38561" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2021-38561" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38561" + }, + { + "url": "https://deps.dev/advisory/OSV/GO-2021-0113" + }, + { + "url": "https://go.dev/cl/340830" + }, + { + "url": "https://go.googlesource.com/text/+/383b2e75a7a4198c42f8f87833eefb772868a56f" + }, + { + "url": "https://groups.google.com/g/golang-announce" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-38561" + }, + { + "url": "https://pkg.go.dev/golang.org/x/text/language" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2021-0113" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5873-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-38561" + } + ], + "affects": [ + { + "ref": "869288c8-06d2-4a38-8b68-ced0ff17bc77", + "versions": [ + { + "version": "v0.3.6", + "status": "affected" + } + ] + }, + { + "ref": "99b7b900-55f8-4676-8c8f-32262681845b", + "versions": [ + { + "version": "v0.3.6", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack.", + "id": "CVE-2021-38561", + "published": "2022-12-26T06:15:10+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade golang.org/x/text to version 0.3.7", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-01-05T04:52:36+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42374" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42374" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42374" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42374" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42374" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that", + "id": "CVE-2021-42374", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "nvd" + }, + "score": 3.3, + "severity": "info", + "method": "CVSSv2", + "vector": "AV:L/AC:M/Au:N/C:P/I:N/A:P" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.7, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:09+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42375" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42375" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42375" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42375" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 159 + ], + "description": "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.", + "id": "CVE-2021-42375", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "nvd" + }, + "score": 1.9, + "severity": "info", + "method": "CVSSv2", + "vector": "AV:L/AC:M/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "redhat" + }, + "score": 4.1, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:09+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42378" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42378" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42378" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42378" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42378" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function", + "id": "CVE-2021-42378", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42379" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42379" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42379" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42379" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42379" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function", + "id": "CVE-2021-42379", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42380" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42380" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42380" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42380" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42380" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function", + "id": "CVE-2021-42380", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42381" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42381" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42381" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42381" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42381" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function", + "id": "CVE-2021-42381", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42382" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42382" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42382" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42382" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42382" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function", + "id": "CVE-2021-42382", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42383" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42383" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42383" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42383" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function", + "id": "CVE-2021-42383", + "published": "2021-11-15T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42384" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42384" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42384" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42384" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42384" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function", + "id": "CVE-2021-42384", + "published": "2021-11-15T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42385" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42385" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42385" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42385" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42385" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function", + "id": "CVE-2021-42385", + "published": "2021-11-15T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42386" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42386" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42386" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42386" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42386" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function", + "id": "CVE-2021-42386", + "published": "2021-11-15T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2021-43565" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2021-43565" + }, + { + "url": "https://go.dev/cl/368814" + }, + { + "url": "https://go.dev/issues/49932" + }, + { + "url": "https://groups.google.com/forum/#!forum/golang-announce" + }, + { + "url": "https://groups.google.com/forum/#%21forum/golang-announce" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/2AR1sKiM-Qs" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-43565" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2022-0968" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-43565" + } + ], + "affects": [ + { + "ref": "64ecbd63-f74a-4fcc-a240-3f8a16435789", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "718081db-83c2-4309-87c8-e43228139b88", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "84eac386-ca89-4217-8a72-84d77e3bd144", + "versions": [ + { + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "status": "affected" + } + ] + }, + { + "ref": "c6ba0fd6-a390-4fcf-aaec-4a072dcd17c4", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "ce164c60-ee4f-4360-a85f-73106cf59f6c", + "versions": [ + { + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59", + "versions": [ + { + "version": "v0.0.0-20200323165209-0ec3e9974c59", + "status": "affected" + } + ] + } + ], + "description": "The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.", + "id": "CVE-2021-43565", + "published": "2022-09-06T18:15:10+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade golang.org/x/crypto to version 0.0.0-20211202192323-5770296d904e", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:39:23+00:00" + }, + { + "advisories": [ + { + "url": "http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/33" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/35" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/38" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2022:5326" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-0778" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2022-0778" + }, + { + "url": "https://bugzilla.redhat.com/2062202" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2062202" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778" + }, + { + "url": "https://errata.almalinux.org/8/ALSA-2022-5326.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2022:4899" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2022-0778.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2022-9272.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0778" + }, + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2022-0014.html" + }, + { + "url": "https://security.gentoo.org/glsa/202210-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220321-0002" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220321-0002/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220429-0005" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220429-0005/" + }, + { + "url": "https://support.apple.com/kb/HT213255" + }, + { + "url": "https://support.apple.com/kb/HT213256" + }, + { + "url": "https://support.apple.com/kb/HT213257" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5328-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5328-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6457-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-0778" + }, + { + "url": "https://www.debian.org/security/2022/dsa-5103" + }, + { + "url": "https://www.openssl.org/news/secadv/20220315.txt" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujul2022.html" + }, + { + "url": "https://www.tenable.com/security/tns-2022-06" + }, + { + "url": "https://www.tenable.com/security/tns-2022-07" + }, + { + "url": "https://www.tenable.com/security/tns-2022-08" + }, + { + "url": "https://www.tenable.com/security/tns-2022-09" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 835 + ], + "description": "The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).", + "id": "CVE-2022-0778", + "published": "2022-03-15T17:15:08+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "rocky" + }, + "severity": "high" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "alma" + }, + "severity": "low" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1n-r0; Upgrade libssl1.1 to version 1.1.1n-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:41:33+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/errata/RHSA-2022:6224" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-2097" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2022-2097" + }, + { + "url": "https://bugzilla.redhat.com/2081494" + }, + { + "url": "https://bugzilla.redhat.com/2087911" + }, + { + "url": "https://bugzilla.redhat.com/2087913" + }, + { + "url": "https://bugzilla.redhat.com/2097310" + }, + { + "url": "https://bugzilla.redhat.com/2104905" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2081494" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2097310" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2100554" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2104905" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2022-6224.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2022:5818" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93" + }, + { + "url": "https://github.com/alexcrichton/openssl-src-rs" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2022-2097.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2022-9751.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2097" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2022-0032.html" + }, + { + "url": "https://security.gentoo.org/glsa/202210-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220715-0011" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220715-0011/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20230420-0008" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20230420-0008/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5502-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6457-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-2097" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5343" + }, + { + "url": "https://www.openssl.org/news/secadv/20220705.txt" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 327 + ], + "description": "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).", + "id": "CVE-2022-2097", + "published": "2022-07-05T11:15:08+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "photon" + }, + "severity": "medium" + }, + { + "source": { + "name": "rocky" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1q-r0; Upgrade libssl1.1 to version 1.1.1q-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:46:13+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2022-24450" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2022-24450.txt" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2022-24450" + }, + { + "url": "https://github.com/nats-io/nats-server" + }, + { + "url": "https://github.com/nats-io/nats-server/releases/tag/v2.7.2" + }, + { + "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-g6w6-r76c-28j7" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24450" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-24450" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.2.2", + "versions": [ + { + "version": "v2.2.2", + "status": "affected" + } + ] + } + ], + "cwes": [ + 862 + ], + "description": "NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the \"dynamically provisioned sandbox accounts\" feature.", + "id": "CVE-2022-24450", + "published": "2022-02-08T02:15:06+00:00", + "ratings": [ + { + "source": { + "name": "bitnami" + }, + "score": 8.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ghsa" + }, + "score": 8.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 8.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 9, + "severity": "high", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:C/I:C/A:C" + }, + { + "source": { + "name": "redhat" + }, + "score": 8.8, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.7.2", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-08-08T14:22:24+00:00" + }, + { + "advisories": [ + { + "url": "http://www.openwall.com/lists/oss-security/2022/03/10/1" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2022-26652.txt" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2022-26652" + }, + { + "url": "https://github.com/nats-io/nats-server" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/2917" + }, + { + "url": "https://github.com/nats-io/nats-server/releases" + }, + { + "url": "https://github.com/nats-io/nats-server/releases/tag/v2.7.4" + }, + { + "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-6h3m-36w8-hv68" + }, + { + "url": "https://github.com/nats-io/nats-streaming-server/releases/tag/v0.24.3" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-26652" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.2.2", + "versions": [ + { + "version": "v2.2.2", + "status": "affected" + } + ] + } + ], + "cwes": [ + 22 + ], + "description": "NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected.", + "id": "CVE-2022-26652", + "published": "2022-03-10T17:47:51+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 6.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 4, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:N/I:P/A:N" + }, + { + "source": { + "name": "bitnami" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.7.4", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2022-03-18T01:44:13+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/errata/RHSA-2022:8008" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-27191" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2022-27191" + }, + { + "url": "https://bugzilla.redhat.com/1939485" + }, + { + "url": "https://bugzilla.redhat.com/1989564" + }, + { + "url": "https://bugzilla.redhat.com/1989570" + }, + { + "url": "https://bugzilla.redhat.com/1989575" + }, + { + "url": "https://bugzilla.redhat.com/2064702" + }, + { + "url": "https://bugzilla.redhat.com/2121445" + }, + { + "url": "https://bugzilla.redhat.com/2121453" + }, + { + "url": "https://cs.opensource.google/go/x/crypto" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2022-8008.html" + }, + { + "url": "https://go.dev/cl/392355" + }, + { + "url": "https://go.googlesource.com/crypto/+/1baeb1ce4c0b006eff0f294c47cb7617598dfb3d" + }, + { + "url": "https://groups.google.com/g/golang-announce" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/-cp44ypCT5s" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/-cp44ypCT5s/m/wmegxkLiAQAJ" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2022-27191.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2022-8008.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLUJZV3HBP56ADXU6QH2V7RNYUPMVBXQ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ3S7LB65N54HXXBCB67P4TTOHTNPP5O/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HHGBEGJ54DZZGTXFUQNS7ZIG3E624YAF/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J5WPM42UR6XIBQNQPNQHM32X7S4LJTRX/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QTFOIDHQRGNI4P6LYN6ILH5G443RYYKB/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YHYRQB7TRMHDB3NEHW5XBRG7PPMUTPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZFUNHFHQVJSADNH7EZ3B53CYDZVEEPBP/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQNPPQWSTP2IX7SHE6TS4SP4EVMI5EZK/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DLUJZV3HBP56ADXU6QH2V7RNYUPMVBXQ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZ3S7LB65N54HXXBCB67P4TTOHTNPP5O" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HHGBEGJ54DZZGTXFUQNS7ZIG3E624YAF" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J5WPM42UR6XIBQNQPNQHM32X7S4LJTRX" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QTFOIDHQRGNI4P6LYN6ILH5G443RYYKB" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YHYRQB7TRMHDB3NEHW5XBRG7PPMUTPGV" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZFUNHFHQVJSADNH7EZ3B53CYDZVEEPBP" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZQNPPQWSTP2IX7SHE6TS4SP4EVMI5EZK" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27191" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2021-0356" + }, + { + "url": "https://raw.githubusercontent.com/golang/vulndb/df2d3d326300e2ae768f00351ffa96cc2c56cf54/reports/GO-2021-0356.yaml" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220429-0002" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220429-0002/" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-27191" + } + ], + "affects": [ + { + "ref": "64ecbd63-f74a-4fcc-a240-3f8a16435789", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "718081db-83c2-4309-87c8-e43228139b88", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "84eac386-ca89-4217-8a72-84d77e3bd144", + "versions": [ + { + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "status": "affected" + } + ] + }, + { + "ref": "c6ba0fd6-a390-4fcf-aaec-4a072dcd17c4", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "ce164c60-ee4f-4360-a85f-73106cf59f6c", + "versions": [ + { + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59", + "versions": [ + { + "version": "v0.0.0-20200323165209-0ec3e9974c59", + "status": "affected" + } + ] + } + ], + "description": "The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.", + "id": "CVE-2022-27191", + "published": "2022-03-18T07:15:06+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 4.3, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade golang.org/x/crypto to version 0.0.0-20220314234659-1baeb1ce4c0b", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:45:17+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/errata/RHSA-2023:2357" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-27664" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2022-27664" + }, + { + "url": "https://bugzilla.redhat.com/2107371" + }, + { + "url": "https://bugzilla.redhat.com/2107374" + }, + { + "url": "https://bugzilla.redhat.com/2107383" + }, + { + "url": "https://bugzilla.redhat.com/2107386" + }, + { + "url": "https://bugzilla.redhat.com/2107388" + }, + { + "url": "https://bugzilla.redhat.com/2113814" + }, + { + "url": "https://bugzilla.redhat.com/2124669" + }, + { + "url": "https://bugzilla.redhat.com/2132868" + }, + { + "url": "https://bugzilla.redhat.com/2132872" + }, + { + "url": "https://bugzilla.redhat.com/2161274" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1913333" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1913338" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2107371" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2107374" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2107383" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2107386" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2107388" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2113814" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2124669" + }, + { + "url": "https://cs.opensource.google/go/x/net" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28851" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28852" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1705" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27664" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30630" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30632" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30635" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32148" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32189" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2023-2357.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2022:7129" + }, + { + "url": "https://github.com/golang/go/commit/5bc9106458fc07851ac324a4157132a91b1f3479 (go1.18.6)" + }, + { + "url": "https://github.com/golang/go/commit/9cfe4e258b1c9d4a04a42539c21c7bdb2e227824 (go1.19.1)" + }, + { + "url": "https://github.com/golang/go/issues/54658" + }, + { + "url": "https://go.dev/cl/428735" + }, + { + "url": "https://go.dev/issue/54658" + }, + { + "url": "https://groups.google.com/g/golang-announce" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/x49AQzIVX-s" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/x49AQzIVX-s/m/0tgO0pjiBQAJ" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2022-27664.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2024-0121.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXKTHIGE5F576MAPFYCIJXNRGBSPISUF/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TXS2OQ57KZC5XZKK5UW4SYKPVQAHIOJX/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JXKTHIGE5F576MAPFYCIJXNRGBSPISUF" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TXS2OQ57KZC5XZKK5UW4SYKPVQAHIOJX" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27664" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2022-0969" + }, + { + "url": "https://security.gentoo.org/glsa/202209-26" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220923-0004" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220923-0004/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6038-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6038-2" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-27664" + } + ], + "affects": [ + { + "ref": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "versions": [ + { + "version": "v0.0.0-20210428140749-89ef3d95e781", + "status": "affected" + } + ] + } + ], + "description": "In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.", + "id": "CVE-2022-27664", + "published": "2022-09-06T18:15:12+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "rocky" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade golang.org/x/net to version 0.0.0-20220906165146-f3363e06e74c", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:45:22+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2022-28391" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2022-28391" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28391" + }, + { + "url": "https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch" + }, + { + "url": "https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch" + }, + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-28391" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-28391" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "description": "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.", + "id": "CVE-2022-28391", + "published": "2022-04-03T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 8.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.8, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r8; Upgrade ssl_client to version 1.32.1-r8", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2022-08-11T18:44:50+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2022-29526" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2022-29526" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29526" + }, + { + "url": "https://github.com/golang/go" + }, + { + "url": "https://github.com/golang/go/commit/f66925e854e71e0c54b581885380a490d7afa30c" + }, + { + "url": "https://github.com/golang/go/issues/52313" + }, + { + "url": "https://go.dev/cl/399539" + }, + { + "url": "https://go.dev/cl/400074" + }, + { + "url": "https://go.dev/issue/52313" + }, + { + "url": "https://groups.google.com/g/golang-announce" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/Y5qrqw_lWdU" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2022-29526.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2022-5337.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q6GE5EQGE4L2KRVGW4T75QVIYAXCLO5X/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q6GE5EQGE4L2KRVGW4T75QVIYAXCLO5X" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-29526" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2022-0493" + }, + { + "url": "https://security.gentoo.org/glsa/202208-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220729-0001" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220729-0001/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6038-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6038-2" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-29526" + } + ], + "affects": [ + { + "ref": "pkg:golang/golang.org/x/sys@v0.0.0-20210421221651-33663a62ff08", + "versions": [ + { + "version": "v0.0.0-20210421221651-33663a62ff08", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/golang.org/x/sys@v0.0.0-20210426230700-d19ff857e887", + "versions": [ + { + "version": "v0.0.0-20210426230700-d19ff857e887", + "status": "affected" + } + ] + } + ], + "cwes": [ + 269 + ], + "description": "Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.", + "id": "CVE-2022-29526", + "published": "2022-06-23T17:15:12+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "photon" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N" + }, + { + "source": { + "name": "bitnami" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "source": { + "name": "ghsa" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.2, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade golang.org/x/sys to version 0.0.0-20220412211240-33da011f77ad", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:46:03+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2022-30065" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2022-30065" + }, + { + "url": "https://bugs.busybox.net/show_bug.cgi?id=14781" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-30065" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-30065" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.", + "id": "CVE-2022-30065", + "published": "2022-05-18T15:15:10+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.2, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.8, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r9; Upgrade ssl_client to version 1.32.1-r9", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-02-11T17:44:54+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2022-32149" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2022-32149" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32149" + }, + { + "url": "https://github.com/golang/go/issues/56152" + }, + { + "url": "https://github.com/golang/text" + }, + { + "url": "https://github.com/golang/text/commit/434eadcdbc3b0256971992e8c70027278364c72c" + }, + { + "url": "https://github.com/golang/text/commit/434eadcdbc3b0256971992e8c70027278364c72c (v0.3.8)" + }, + { + "url": "https://go.dev/cl/442235" + }, + { + "url": "https://go.dev/issue/56152" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/-hjNw559_tE/m/KlGTfid5CAAJ" + }, + { + "url": "https://groups.google.com/g/golang-dev/c/qfPIly0X7aU" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-32149" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2022-1059" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5873-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-32149" + } + ], + "affects": [ + { + "ref": "869288c8-06d2-4a38-8b68-ced0ff17bc77", + "versions": [ + { + "version": "v0.3.6", + "status": "affected" + } + ] + }, + { + "ref": "99b7b900-55f8-4676-8c8f-32262681845b", + "versions": [ + { + "version": "v0.3.6", + "status": "affected" + } + ] + } + ], + "cwes": [ + 772 + ], + "description": "An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.", + "id": "CVE-2022-32149", + "published": "2022-10-14T15:15:34+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade golang.org/x/text to version 0.3.8", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2022-10-18T17:41:31+00:00" + }, + { + "advisories": [ + { + "url": "http://seclists.org/fulldisclosure/2022/Oct/37" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/Oct/38" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/Oct/41" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/Oct/42" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2022/08/05/2" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2022/08/09/1" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2022:8291" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-37434" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2022-37434" + }, + { + "url": "https://bugzilla.redhat.com/2116639" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2053198" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2077431" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2081296" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2116639" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2022-8291.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2022:8291" + }, + { + "url": "https://github.com/curl/curl/issues/9271" + }, + { + "url": "https://github.com/ivd38/zlib_overflow" + }, + { + "url": "https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063" + }, + { + "url": "https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1" + }, + { + "url": "https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2022-37434.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2023-1095.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-37434" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220901-0005/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20230427-0007/" + }, + { + "url": "https://support.apple.com/kb/HT213488" + }, + { + "url": "https://support.apple.com/kb/HT213489" + }, + { + "url": "https://support.apple.com/kb/HT213490" + }, + { + "url": "https://support.apple.com/kb/HT213491" + }, + { + "url": "https://support.apple.com/kb/HT213493" + }, + { + "url": "https://support.apple.com/kb/HT213494" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5570-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5570-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5573-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-37434" + }, + { + "url": "https://www.debian.org/security/2022/dsa-5218" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.2.11-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 787 + ], + "description": "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).", + "id": "CVE-2022-37434", + "published": "2022-08-05T07:15:07+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "critical" + }, + { + "source": { + "name": "photon" + }, + "severity": "critical" + }, + { + "source": { + "name": "nvd" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "rocky" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 7, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" + } + ], + "recommendation": "Upgrade zlib to version 1.2.12-r2", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-07-19T00:56:46+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/errata/RHSA-2023:6474" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-41723" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2022-41723" + }, + { + "url": "https://bugzilla.redhat.com/2174485" + }, + { + "url": "https://bugzilla.redhat.com/2178358" + }, + { + "url": "https://bugzilla.redhat.com/2178488" + }, + { + "url": "https://bugzilla.redhat.com/2178492" + }, + { + "url": "https://bugzilla.redhat.com/2184481" + }, + { + "url": "https://bugzilla.redhat.com/2184482" + }, + { + "url": "https://bugzilla.redhat.com/2184483" + }, + { + "url": "https://bugzilla.redhat.com/2184484" + }, + { + "url": "https://bugzilla.redhat.com/2196026" + }, + { + "url": "https://bugzilla.redhat.com/2196027" + }, + { + "url": "https://bugzilla.redhat.com/2196029" + }, + { + "url": "https://bugzilla.redhat.com/2222167" + }, + { + "url": "https://bugzilla.redhat.com/2228689" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41723" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2023-6474.html" + }, + { + "url": "https://github.com/advisories/GHSA-vvpx-j8f3-3w6h" + }, + { + "url": "https://go.dev/cl/468135" + }, + { + "url": "https://go.dev/cl/468295" + }, + { + "url": "https://go.dev/issue/57855" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2022-41723.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2023-6939.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MA5XS5DAOJ5PKKNG5TUXKPQOFHT5VBC" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MA5XS5DAOJ5PKKNG5TUXKPQOFHT5VBC/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGW7GE2Z32ZT47UFAQFDRQE33B7Q7LMT" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGW7GE2Z32ZT47UFAQFDRQE33B7Q7LMT/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLBQ3A7ROLEQXQLXFDLNJ7MYPKG5GULE" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLBQ3A7ROLEQXQLXFDLNJ7MYPKG5GULE/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XX3IMUTZKRQ73PBZM4E2JP4BKYH4C6XE" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XX3IMUTZKRQ73PBZM4E2JP4BKYH4C6XE/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41723" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2023-1571" + }, + { + "url": "https://security.gentoo.org/glsa/202311-09" + }, + { + "url": "https://vuln.go.dev/ID/GO-2023-1571.json" + }, + { + "url": "https://www.couchbase.com/alerts" + }, + { + "url": "https://www.couchbase.com/alerts/" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-41723" + } + ], + "affects": [ + { + "ref": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "versions": [ + { + "version": "v0.0.0-20210428140749-89ef3d95e781", + "status": "affected" + } + ] + } + ], + "description": "A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.", + "id": "CVE-2022-41723", + "published": "2023-02-28T18:15:09+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade golang.org/x/net to version 0.7.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-25T11:15:10+00:00" + }, + { + "advisories": [ + { + "url": "golang.org/x/net" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2023:6077" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2023-39325" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2023-44487" + }, + { + "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2023-003" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2023-39325" + }, + { + "url": "https://bugzilla.redhat.com/2242803" + }, + { + "url": "https://bugzilla.redhat.com/2243296" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2242803" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2243296" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39325" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2023-6077.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2023:6077" + }, + { + "url": "https://github.com/golang/go/commit/24ae2d927285c697440fdde3ad7f26028354bcf3 [golang- 1.21]" + }, + { + "url": "https://github.com/golang/go/commit/e175f27f58aa7b9cd4d79607ae65d2cd5baaee68 [golang-1.20]" + }, + { + "url": "https://github.com/golang/go/issues/63417" + }, + { + "url": "https://go.dev/cl/534215" + }, + { + "url": "https://go.dev/cl/534235" + }, + { + "url": "https://go.dev/issue/63417" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2023-39325.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2023-5867.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39325" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2023-2102" + }, + { + "url": "https://security.gentoo.org/glsa/202311-09" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20231110-0008" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20231110-0008/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6574-1" + }, + { + "url": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2023-39325" + } + ], + "affects": [ + { + "ref": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "versions": [ + { + "version": "v0.0.0-20210428140749-89ef3d95e781", + "status": "affected" + } + ] + } + ], + "cwes": [ + 770 + ], + "description": "A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function.", + "id": "CVE-2023-39325", + "published": "2023-10-11T22:15:09+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "rocky" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade golang.org/x/net to version 0.17.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2024-03-10T04:15:05+00:00" + }, + { + "advisories": [ + { + "url": "https://access.redhat.com/errata/RHSA-2023:6474" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2023-3978" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2023-3978" + }, + { + "url": "https://bugzilla.redhat.com/2174485" + }, + { + "url": "https://bugzilla.redhat.com/2178358" + }, + { + "url": "https://bugzilla.redhat.com/2178488" + }, + { + "url": "https://bugzilla.redhat.com/2178492" + }, + { + "url": "https://bugzilla.redhat.com/2184481" + }, + { + "url": "https://bugzilla.redhat.com/2184482" + }, + { + "url": "https://bugzilla.redhat.com/2184483" + }, + { + "url": "https://bugzilla.redhat.com/2184484" + }, + { + "url": "https://bugzilla.redhat.com/2196026" + }, + { + "url": "https://bugzilla.redhat.com/2196027" + }, + { + "url": "https://bugzilla.redhat.com/2196029" + }, + { + "url": "https://bugzilla.redhat.com/2222167" + }, + { + "url": "https://bugzilla.redhat.com/2228689" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2023-6474.html" + }, + { + "url": "https://go.dev/cl/514896" + }, + { + "url": "https://go.dev/issue/61615" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2023-3978.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2023-6939.html" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3978" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2023-1988" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2023-3978" + } + ], + "affects": [ + { + "ref": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "versions": [ + { + "version": "v0.0.0-20210428140749-89ef3d95e781", + "status": "affected" + } + ] + } + ], + "cwes": [ + 79 + ], + "description": "Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack.", + "id": "CVE-2023-3978", + "published": "2023-08-02T20:15:12+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "ghsa" + }, + "score": 6.1, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.1, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.1, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "recommendation": "Upgrade golang.org/x/net to version 0.13.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T04:20:03+00:00" + }, + { + "advisories": [ + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/13/4" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/13/9" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/18/4" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/18/8" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/19/6" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/20/8" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2023:6746" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2023-44487" + }, + { + "url": "https://access.redhat.com/security/cve/cve-2023-44487" + }, + { + "url": "https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size" + }, + { + "url": "https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2023-44487" + }, + { + "url": "https://aws.amazon.com/security/security-bulletins/AWS-2023-011" + }, + { + "url": "https://aws.amazon.com/security/security-bulletins/AWS-2023-011/" + }, + { + "url": "https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack" + }, + { + "url": "https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/" + }, + { + "url": "https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack" + }, + { + "url": "https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/" + }, + { + "url": "https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty" + }, + { + "url": "https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/" + }, + { + "url": "https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack" + }, + { + "url": "https://blog.vespa.ai/cve-2023-44487" + }, + { + "url": "https://blog.vespa.ai/cve-2023-44487/" + }, + { + "url": "https://bugzilla.proxmox.com/show_bug.cgi?id=4988" + }, + { + "url": "https://bugzilla.redhat.com/2242803" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2242803" + }, + { + "url": "https://bugzilla.suse.com/show_bug.cgi?id=1216123" + }, + { + "url": "https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9" + }, + { + "url": "https://chaos.social/@icing/111210915918780532" + }, + { + "url": "https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps" + }, + { + "url": "https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/" + }, + { + "url": "https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack" + }, + { + "url": "https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487" + }, + { + "url": "https://devblogs.microsoft.com/dotnet/october-2023-updates/" + }, + { + "url": "https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715" + }, + { + "url": "https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2023-6746.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2023:5838" + }, + { + "url": "https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764" + }, + { + "url": "https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088" + }, + { + "url": "https://github.com/Azure/AKS/issues/3947" + }, + { + "url": "https://github.com/Kong/kong/discussions/11741" + }, + { + "url": "https://github.com/advisories/GHSA-qppj-fm5r-hxr3" + }, + { + "url": "https://github.com/advisories/GHSA-vx74-f528-fxqg" + }, + { + "url": "https://github.com/advisories/GHSA-xpw8-rcwv-8f8p" + }, + { + "url": "https://github.com/akka/akka-http/issues/4323" + }, + { + "url": "https://github.com/alibaba/tengine/issues/1872" + }, + { + "url": "https://github.com/apache/apisix/issues/10320" + }, + { + "url": "https://github.com/apache/httpd-site/pull/10" + }, + { + "url": "https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113" + }, + { + "url": "https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2" + }, + { + "url": "https://github.com/apache/trafficserver/pull/10564" + }, + { + "url": "https://github.com/apple/swift-nio-http2" + }, + { + "url": "https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3" + }, + { + "url": "https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487" + }, + { + "url": "https://github.com/bcdannyboy/CVE-2023-44487" + }, + { + "url": "https://github.com/caddyserver/caddy/issues/5877" + }, + { + "url": "https://github.com/caddyserver/caddy/releases/tag/v2.7.5" + }, + { + "url": "https://github.com/dotnet/announcements/issues/277" + }, + { + "url": "https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73" + }, + { + "url": "https://github.com/eclipse/jetty.project/issues/10679" + }, + { + "url": "https://github.com/envoyproxy/envoy/pull/30055" + }, + { + "url": "https://github.com/etcd-io/etcd/issues/16740" + }, + { + "url": "https://github.com/facebook/proxygen/pull/466" + }, + { + "url": "https://github.com/golang/go/issues/63417" + }, + { + "url": "https://github.com/grpc/grpc-go/pull/6703" + }, + { + "url": "https://github.com/grpc/grpc-go/releases" + }, + { + "url": "https://github.com/h2o/h2o/pull/3291" + }, + { + "url": "https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf" + }, + { + "url": "https://github.com/haproxy/haproxy/issues/2312" + }, + { + "url": "https://github.com/hyperium/hyper/issues/3337" + }, + { + "url": "https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244" + }, + { + "url": "https://github.com/junkurihara/rust-rpxy/issues/97" + }, + { + "url": "https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1" + }, + { + "url": "https://github.com/kazu-yamamoto/http2/issues/93" + }, + { + "url": "https://github.com/kubernetes/kubernetes/pull/121120" + }, + { + "url": "https://github.com/line/armeria/pull/5232" + }, + { + "url": "https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632" + }, + { + "url": "https://github.com/micrictor/http2-rst-stream" + }, + { + "url": "https://github.com/microsoft/CBL-Mariner/pull/6381" + }, + { + "url": "https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61" + }, + { + "url": "https://github.com/nghttp2/nghttp2/pull/1961" + }, + { + "url": "https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0" + }, + { + "url": "https://github.com/ninenines/cowboy/issues/1615" + }, + { + "url": "https://github.com/nodejs/node/pull/50121" + }, + { + "url": "https://github.com/openresty/openresty/issues/930" + }, + { + "url": "https://github.com/opensearch-project/data-prepper/issues/3474" + }, + { + "url": "https://github.com/oqtane/oqtane.framework/discussions/3367" + }, + { + "url": "https://github.com/projectcontour/contour/pull/5826" + }, + { + "url": "https://github.com/tempesta-tech/tempesta/issues/1986" + }, + { + "url": "https://github.com/varnishcache/varnish-cache/issues/3996" + }, + { + "url": "https://go.dev/cl/534215" + }, + { + "url": "https://go.dev/cl/534235" + }, + { + "url": "https://go.dev/issue/63417" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ" + }, + { + "url": "https://istio.io/latest/news/security/istio-security-2023-004" + }, + { + "url": "https://istio.io/latest/news/security/istio-security-2023-004/" + }, + { + "url": "https://linkerd.io/2023/10/12/linkerd-cve-2023-44487" + }, + { + "url": "https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2023-44487.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2023-7205.html" + }, + { + "url": "https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4" + }, + { + "url": "https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html" + }, + { + "url": "https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html" + }, + { + "url": "https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html" + }, + { + "url": "https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2" + }, + { + "url": "https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/" + }, + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487" + }, + { + "url": "https://my.f5.com/manage/s/article/K000137106" + }, + { + "url": "https://netty.io/news/2023/10/10/4-1-100-Final.html" + }, + { + "url": "https://news.ycombinator.com/item?id=37830987" + }, + { + "url": "https://news.ycombinator.com/item?id=37830998" + }, + { + "url": "https://news.ycombinator.com/item?id=37831062" + }, + { + "url": "https://news.ycombinator.com/item?id=37837043" + }, + { + "url": "https://nodejs.org/en/blog/vulnerability/october-2023-security-releases" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44487" + }, + { + "url": "https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response" + }, + { + "url": "https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2023-2102" + }, + { + "url": "https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected" + }, + { + "url": "https://security.gentoo.org/glsa/202311-09" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20231016-0001" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20231016-0001/" + }, + { + "url": "https://security.paloaltonetworks.com/CVE-2023-44487" + }, + { + "url": "https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14" + }, + { + "url": "https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.0-M12" + }, + { + "url": "https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.94" + }, + { + "url": "https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.81" + }, + { + "url": "https://ubuntu.com/security/CVE-2023-44487" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6427-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6427-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6438-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6505-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6574-1" + }, + { + "url": "https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records" + }, + { + "url": "https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/" + }, + { + "url": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2023-44487" + }, + { + "url": "https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5521" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5522" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5540" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5549" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5558" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5570" + }, + { + "url": "https://www.eclipse.org/lists/jetty-announce/msg00181.html" + }, + { + "url": "https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487" + }, + { + "url": "https://www.mail-archive.com/haproxy@formilux.org/msg44134.html" + }, + { + "url": "https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487" + }, + { + "url": "https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/" + }, + { + "url": "https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products" + }, + { + "url": "https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2023/10/10/6" + }, + { + "url": "https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack" + }, + { + "url": "https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday" + }, + { + "url": "https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/" + } + ], + "affects": [ + { + "ref": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "versions": [ + { + "version": "v0.0.0-20210428140749-89ef3d95e781", + "status": "affected" + } + ] + } + ], + "cwes": [ + 400 + ], + "description": "The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.", + "id": "CVE-2023-44487", + "published": "2023-10-10T14:15:10+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "high" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "rocky" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + }, + { + "source": { + "name": "ghsa" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" + } + ], + "recommendation": "Upgrade golang.org/x/net to version 0.17.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2024-02-02T15:40:23+00:00" + }, + { + "advisories": [ + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/30/1" + }, + { + "url": "https://advisories.nats.io/CVE/secnote-2023-01.txt" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2023-47090" + }, + { + "url": "https://github.com/nats-io/nats-server" + }, + { + "url": "https://github.com/nats-io/nats-server/commit/fa5b7afcb64e7e887e49afdd032358802b5c4478" + }, + { + "url": "https://github.com/nats-io/nats-server/discussions/4535" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/4605" + }, + { + "url": "https://github.com/nats-io/nats-server/releases/tag/v2.10.2" + }, + { + "url": "https://github.com/nats-io/nats-server/releases/tag/v2.9.23" + }, + { + "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-fr2g-9hjm-wr23" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47090" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2023/10/13/2" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.2.2", + "versions": [ + { + "version": "v2.2.2", + "status": "affected" + } + ] + } + ], + "cwes": [ + 863 + ], + "description": "NATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. An implicit $G user in an authorization block can sometimes be used for unauthenticated access, even when the intention of the configuration was for each user to have an account. The earliest affected version is 2.2.0.", + "id": "CVE-2023-47090", + "published": "2023-10-30T17:15:52+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "severity": "high" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.9.23, 2.10.2", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-08T00:15:54+00:00" + }, + { + "advisories": [ + { + "url": "http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html" + }, + { + "url": "http://seclists.org/fulldisclosure/2024/Mar/21" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/12/18/3" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/12/19/5" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/12/20/3" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2024:1150" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2023-48795" + }, + { + "url": "https://access.redhat.com/security/cve/cve-2023-48795" + }, + { + "url": "https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack" + }, + { + "url": "https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/" + }, + { + "url": "https://avd.aquasec.com/nvd/cve-2023-48795" + }, + { + "url": "https://bugs.gentoo.org/920280" + }, + { + "url": "https://bugzilla.redhat.com/2254210" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254210" + }, + { + "url": "https://bugzilla.suse.com/show_bug.cgi?id=1217950" + }, + { + "url": "https://crates.io/crates/thrussh/versions" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2024-1150.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2024:0628" + }, + { + "url": "https://filezilla-project.org/versions.php" + }, + { + "url": "https://forum.netgate.com/topic/184941/terrapin-ssh-attack" + }, + { + "url": "https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10\u0026id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6" + }, + { + "url": "https://github.com/NixOS/nixpkgs/pull/275249" + }, + { + "url": "https://github.com/PowerShell/Win32-OpenSSH/issues/2189" + }, + { + "url": "https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta" + }, + { + "url": "https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0" + }, + { + "url": "https://github.com/TeraTermProject/teraterm/releases/tag/v5.1" + }, + { + "url": "https://github.com/advisories/GHSA-45x7-px36-x8w8" + }, + { + "url": "https://github.com/apache/mina-sshd/issues/445" + }, + { + "url": "https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab" + }, + { + "url": "https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22" + }, + { + "url": "https://github.com/cyd01/KiTTY/issues/520" + }, + { + "url": "https://github.com/drakkan/sftpgo/releases/tag/v2.5.6" + }, + { + "url": "https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42" + }, + { + "url": "https://github.com/erlang/otp/releases/tag/OTP-26.2.1" + }, + { + "url": "https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d" + }, + { + "url": "https://github.com/hierynomus/sshj/issues/916" + }, + { + "url": "https://github.com/janmojzis/tinyssh/issues/81" + }, + { + "url": "https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5" + }, + { + "url": "https://github.com/libssh2/libssh2/pull/1291" + }, + { + "url": "https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25" + }, + { + "url": "https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3" + }, + { + "url": "https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15" + }, + { + "url": "https://github.com/mwiede/jsch/issues/457" + }, + { + "url": "https://github.com/mwiede/jsch/pull/461" + }, + { + "url": "https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16" + }, + { + "url": "https://github.com/openssh/openssh-portable/commits/master" + }, + { + "url": "https://github.com/paramiko/paramiko/issues/2337" + }, + { + "url": "https://github.com/paramiko/paramiko/issues/2337#issuecomment-1887642773" + }, + { + "url": "https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES" + }, + { + "url": "https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES" + }, + { + "url": "https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES" + }, + { + "url": "https://github.com/proftpd/proftpd/issues/456" + }, + { + "url": "https://github.com/rapier1/hpn-ssh/releases" + }, + { + "url": "https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst" + }, + { + "url": "https://github.com/ronf/asyncssh/security/advisories/GHSA-hfmc-7525-mj55" + }, + { + "url": "https://github.com/ronf/asyncssh/tags" + }, + { + "url": "https://github.com/ssh-mitm/ssh-mitm/issues/165" + }, + { + "url": "https://github.com/warp-tech/russh" + }, + { + "url": "https://github.com/warp-tech/russh/commit/1aa340a7df1d5be1c0f4a9e247aade76dfdd2951" + }, + { + "url": "https://github.com/warp-tech/russh/releases/tag/v0.40.2" + }, + { + "url": "https://github.com/warp-tech/russh/security/advisories/GHSA-45x7-px36-x8w8" + }, + { + "url": "https://gitlab.com/libssh/libssh-mirror/-/tags" + }, + { + "url": "https://go.dev/cl/550715" + }, + { + "url": "https://go.dev/issue/64784" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg" + }, + { + "url": "https://help.panic.com/releasenotes/transmit5" + }, + { + "url": "https://help.panic.com/releasenotes/transmit5/" + }, + { + "url": "https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795" + }, + { + "url": "https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2023-48795.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2024-12233.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/" + }, + { + "url": "https://matt.ucc.asn.au/dropbear/CHANGES" + }, + { + "url": "https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC" + }, + { + "url": "https://news.ycombinator.com/item?id=38684904" + }, + { + "url": "https://news.ycombinator.com/item?id=38685286" + }, + { + "url": "https://news.ycombinator.com/item?id=38732005" + }, + { + "url": "https://nova.app/releases/#v11.8" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-48795" + }, + { + "url": "https://oryx-embedded.com/download/#changelog" + }, + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002" + }, + { + "url": "https://roumenpetrov.info/secsh/#news20231220" + }, + { + "url": "https://security-tracker.debian.org/tracker/CVE-2023-48795" + }, + { + "url": "https://security-tracker.debian.org/tracker/source-package/libssh2" + }, + { + "url": "https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg" + }, + { + "url": "https://security-tracker.debian.org/tracker/source-package/trilead-ssh2" + }, + { + "url": "https://security.gentoo.org/glsa/202312-16" + }, + { + "url": "https://security.gentoo.org/glsa/202312-17" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20240105-0004" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20240105-0004/" + }, + { + "url": "https://support.apple.com/kb/HT214084" + }, + { + "url": "https://terrapin-attack.com/" + }, + { + "url": "https://thorntech.com/cve-2023-48795-and-sftp-gateway" + }, + { + "url": "https://thorntech.com/cve-2023-48795-and-sftp-gateway/" + }, + { + "url": "https://twitter.com/TrueSkrillor/status/1736774389725565005" + }, + { + "url": "https://ubuntu.com/security/CVE-2023-48795" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6560-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6560-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6561-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6585-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6589-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6598-1" + }, + { + "url": "https://winscp.net/eng/docs/history#6.2.2" + }, + { + "url": "https://www.bitvise.com/ssh-client-version-history#933" + }, + { + "url": "https://www.bitvise.com/ssh-server-version-history" + }, + { + "url": "https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html" + }, + { + "url": "https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2023-48795" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5586" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5588" + }, + { + "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc" + }, + { + "url": "https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508" + }, + { + "url": "https://www.netsarang.com/en/xshell-update-history" + }, + { + "url": "https://www.netsarang.com/en/xshell-update-history/" + }, + { + "url": "https://www.openssh.com/openbsd.html" + }, + { + "url": "https://www.openssh.com/txt/release-9.6" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2023/12/18/2" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2023/12/18/3" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2023/12/20/3" + }, + { + "url": "https://www.paramiko.org/changelog.html" + }, + { + "url": "https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed" + }, + { + "url": "https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/" + }, + { + "url": "https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795" + }, + { + "url": "https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/" + }, + { + "url": "https://www.terrapin-attack.com" + }, + { + "url": "https://www.theregister.com/2023/12/20/terrapin_attack_ssh" + }, + { + "url": "https://www.vandyke.com/products/securecrt/history.txt" + } + ], + "affects": [ + { + "ref": "64ecbd63-f74a-4fcc-a240-3f8a16435789", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "718081db-83c2-4309-87c8-e43228139b88", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "84eac386-ca89-4217-8a72-84d77e3bd144", + "versions": [ + { + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "status": "affected" + } + ] + }, + { + "ref": "c6ba0fd6-a390-4fcf-aaec-4a072dcd17c4", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "ce164c60-ee4f-4360-a85f-73106cf59f6c", + "versions": [ + { + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59", + "versions": [ + { + "version": "v0.0.0-20200323165209-0ec3e9974c59", + "status": "affected" + } + ] + } + ], + "cwes": [ + 354 + ], + "description": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.", + "id": "CVE-2023-48795", + "published": "2023-12-18T16:15:10+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "photon" + }, + "severity": "medium" + }, + { + "source": { + "name": "rocky" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + }, + { + "source": { + "name": "ghsa" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" + } + ], + "recommendation": "Upgrade golang.org/x/crypto to version 0.17.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2024-03-13T21:15:54+00:00" + }, + { + "advisories": [ + { + "url": "https://advisories.nats.io/CVE/CVE-2020-26892.txt" + }, + { + "url": "https://github.com/advisories/GHSA-2c64-vj8g-vwrq" + }, + { + "url": "https://github.com/nats-io/jwt/commit/e11ce317263cef69619fc1ca743b195d02aa1d8a" + }, + { + "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-2c64-vj8g-vwrq" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + } + ], + "description": "(This advisory is canonically https://advisories.nats.io/CVE/CVE-2020-26892.txt )\n\n## Problem Description\n\nNATS nats-server through 2020-10-07 has Incorrect Access Control because of how expired credentials are handled.\n\nThe NATS accounts system has expiration timestamps on credentials; the \u003chttps://github.com/nats-io/jwt\u003e library had an API which encouraged misuse and an `IsRevoked()` method which misused its own API.\n\nA new `IsClaimRevoked()` method has correct handling and the nats-server has been updated to use this. The old `IsRevoked()` method now always returns true and other client code will have to be updated to avoid calling it.\n\nThe CVE identifier should cover any application using the old JWT API, where the nats-server is one of those applications.\n\n\n## Affected versions\n\n#### JWT library\n\n * all versions prior to 1.1.0\n * fixed after nats-io/jwt PR 103 landed (2020-10-06)\n\n#### NATS Server\n\n * Version 2 prior to 2.1.9\n + 2.0.0 through and including 2.1.8 are vulnerable.\n * fixed with nats-io/nats-server PRs 1632, 1635, 1645\n\n\n## Impact\n\nTime-based credential expiry did not work.\n\n\n## Workaround\n\nHave credentials which only expire after fixes can be deployed.\n\n\n## Solution\n\nUpgrade the JWT dependency in any application using it.\n\nUpgrade the NATS server if using NATS Accounts.", + "id": "GHSA-2c64-vj8g-vwrq", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "severity": "high" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 1.1.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + } + }, + { + "advisories": [ + { + "url": "https://advisories.nats.io/CVE/CVE-2021-3127.txt" + }, + { + "url": "https://github.com/advisories/GHSA-62mh-w5cv-p88c" + }, + { + "url": "https://github.com/nats-io/jwt" + }, + { + "url": "https://github.com/nats-io/jwt/pull/149" + }, + { + "url": "https://github.com/nats-io/jwt/security/advisories/GHSA-62mh-w5cv-p88c" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.1.0", + "versions": [ + { + "version": "v1.1.0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.2.2", + "versions": [ + { + "version": "v1.2.2", + "status": "affected" + } + ] + } + ], + "description": "(This advisory is canonically \u003chttps://advisories.nats.io/CVE/CVE-2021-3127.txt\u003e)\n\n## Problem Description\n\nThe NATS server provides for Subjects which are namespaced by Account; all Subjects are supposed to be private to an account, with an Export/Import system used to grant cross-account access to some Subjects. Some Exports are public, such that anyone can import the\nrelevant subjects, and some Exports are private, such that the Import requires a token JWT to prove permission.\n\nThe JWT library's validation of the bindings in the Import Token incorrectly warned on mismatches, instead of outright rejecting the token.\n\nAs a result, any account can take an Import token used by any other account and re-use it for themselves because the binding to the\nimporting account is not rejected, and use it to import *any* Subject from the Exporting account, not just the Subject referenced in the Import Token.\n\nThe NATS account-server system treats account JWTs as semi-public information, such that an attacker can easily enumerate all account JWTs and retrieve all Import Tokens from those account JWTs.\n\nThe CVE identifier should cover the JWT library repair and the nats-server containing the fixed JWT library, and any other application depending upon the fixed JWT library.\n\n\n## Affected versions\n\n#### JWT library\n\n * all versions prior to 2.0.1\n * fixed after nats-io/jwt#149 landed (2021-03-14)\n\n#### NATS Server\n\n * Version 2 prior to 2.2.0\n + 2.0.0 through and including 2.1.9 are vulnerable\n * fixed with nats-io/nats-server@423b79440c (2021-03-14)\n\n\n## Impact\n\nIn deployments with untrusted accounts able to update the Account Server with imports, a malicious account can access any Subject from an account which provides Exported Subjects.\n\nAbuse of this facility requires the malicious actor to upload their tampered Account JWT to the Account Server, providing the service operator with a data-store which can be scanned for signs of abuse.\n\n\n## Workaround\n\nDeny access to clients to update their account JWT in the account server.\n\n\n## Solution\n\nUpgrade the JWT dependency in any application using it.\n\nUpgrade the NATS server if using NATS Accounts (with private Exports; Account owners can create those at any time though).\n\nAudit all accounts JWTs to scan for exploit attempts; a Python script to audit the accounts can be found at \u003chttps://gist.github.com/philpennock/09d49524ad98043ff11d8a40c2bb0d5a\u003e.", + "id": "GHSA-62mh-w5cv-p88c", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "severity": "critical" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 2.0.1", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + } + }, + { + "advisories": [ + { + "url": "https://github.com/advisories/GHSA-gwj5-3vfq-q992" + }, + { + "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-gwj5-3vfq-q992" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + } + ], + "description": "(This advisory is canonically \u003chttps://advisories.nats.io/CVE/CVE-2020-28466.txt\u003e)\n\n## Problem Description\n\nAn export/import cycle between accounts could crash the nats-server, after consuming CPU and memory.\n\nThis issue was fixed publicly in \u003chttps://github.com/nats-io/nats-server/pull/1731\u003e in November 2020.\n\nThe need to call this out as a security issue was highlighted by `snyk.io` and we are grateful for their assistance in doing so.\n\nOrganizations which run a NATS service providing access to accounts run by untrusted third parties are affected.\nSee below for an important caveat if running such a service.\n\n\n## Affected versions\n\n#### NATS Server\n\n * Version 2 prior to 2.2.0\n + 2.0.0 through and including 2.1.9 are vulnerable.\n * fixed with nats-io/nats-server PR 1731, commit 2e3c226729\n\n\n## Impact\n\nThe nats-server could be killed, after consuming resources.\n\n\n## Workaround\n\nThe import cycle requires at least two accounts to work; if you have open account sign-up, then restricting new account sign-up might hinder an attacker.\n\n\n## Solution\n\nUpgrade the nats-server.\n\n\n## Caveat on NATS with untrusted users\n\nRunning a NATS service which is exposed to untrusted users presents a heightened risk.\n\nAny remote execution flaw or equivalent seriousness, or denial-of-service by unauthenticated users, will lead to prompt releases by the NATS maintainers.\n\nFixes for denial of service issues with no threat of remote execution, when limited to account holders, are likely to just be committed to the main development branch with no special attention.\n\nThose who are running such services are encouraged to build regularly from git.", + "id": "GHSA-gwj5-3vfq-q992", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "low", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.2.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + } + }, + { + "advisories": [ + { + "url": "https://advisories.nats.io/CVE/CVE-2020-26521.txt" + }, + { + "url": "https://github.com/advisories/GHSA-hmm9-r2m2-qg9w" + }, + { + "url": "https://github.com/nats-io/jwt/pull/107" + }, + { + "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-hmm9-r2m2-qg9w" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-26521" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2020/11/02/2" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + } + ], + "description": "(This advisory is canonically \u003chttps://advisories.nats.io/CVE/CVE-2020-26521.txt\u003e)\n\n## Problem Description\n\nThe NATS account system has an Operator trusted by the servers, which signs Accounts, and each Account can then create and sign Users within their account. The Operator should be able to safely issue Accounts to other entities which it does not fully trust.\n\nA malicious Account could create and sign a User JWT with a state not created by the normal tooling, such that decoding by the NATS JWT library (written in Go) would attempt a nil dereference, aborting execution.\n\nThe NATS Server is known to be impacted by this.\n\n\n## Affected versions\n\n#### JWT library\n\n * all versions prior to 1.1.0\n\n#### NATS Server\n\n * Version 2 prior to 2.1.9\n\n\n## Impact\n\n#### JWT library\n\n * Programs would nil dereference and panic, aborting execution by default.\n\n#### NATS server\n\n * Denial of Service caused by process termination\n\n\n## Workaround\n\nIf your NATS servers do not trust any accounts which are managed by untrusted entities, then malformed User credentials are unlikely to be encountered.\n\n\n## Solution\n\nUpgrade the JWT dependency in any application using it.\n\nUpgrade the NATS server if using NATS Accounts.", + "id": "GHSA-hmm9-r2m2-qg9w", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 1.1.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + } + }, + { + "advisories": [ + { + "url": "https://advisories.nats.io/CVE/CVE-2021-3127.txt" + }, + { + "url": "https://github.com/advisories/GHSA-j756-f273-xhp4" + }, + { + "url": "https://github.com/nats-io/jwt/pull/149" + }, + { + "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-j756-f273-xhp4" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3127" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.1.0", + "versions": [ + { + "version": "v1.1.0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.2.2", + "versions": [ + { + "version": "v1.2.2", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + } + ], + "description": "(This advisory is canonically \u003chttps://advisories.nats.io/CVE/CVE-2021-3127.txt\u003e)\n\n## Problem Description\n\nThe NATS server provides for Subjects which are namespaced by Account; all Subjects are supposed to be private to an account, with an Export/Import system used to grant cross-account access to some Subjects. Some Exports are public, such that anyone can import the relevant subjects, and some Exports are private, such that the Import requires a token JWT to prove permission.\n\nThe JWT library's validation of the bindings in the Import Token incorrectly warned on mismatches, instead of outright rejecting the token.\n\nAs a result, any account can take an Import token used by any other account and re-use it for themselves because the binding to the importing account is not rejected, and use it to import *any* Subject from the Exporting account, not just the Subject referenced in the Import Token.\n\nThe NATS account-server system treats account JWTs as semi-public information, such that an attacker can easily enumerate all account JWTs and retrieve all Import Tokens from those account JWTs.\n\nThe CVE identifier should cover the JWT library repair and the nats-server containing the fixed JWT library, and any other application depending upon the fixed JWT library.\n\n\n## Affected versions\n\n#### JWT library\n\n * all versions prior to 2.0.1\n * fixed after nats-io/jwt#149 landed (2021-03-14)\n\n#### NATS Server\n\n * Version 2 prior to 2.2.0\n + 2.0.0 through and including 2.1.9 are vulnerable\n * fixed with nats-io/nats-server@423b79440c (2021-03-14)\n\n\n## Impact\n\nIn deployments with untrusted accounts able to update the Account Server with imports, a malicious account can access any Subject from an account which provides Exported Subjects.\n\nAbuse of this facility requires the malicious actor to upload their tampered Account JWT to the Account Server, providing the service operator with a data-store which can be scanned for signs of abuse.\n\n\n## Workaround\n\nDeny access to clients to update their account JWT in the account server.\n\n\n## Solution\n\nUpgrade the JWT dependency in any application using it.\n\nUpgrade the NATS server if using NATS Accounts (with private Exports; Account owners can create those at any time though).\n\nAudit all accounts JWTs to scan for exploit attempts; a Python script to audit the accounts can be found at \u003chttps://gist.github.com/philpennock/09d49524ad98043ff11d8a40c2bb0d5a\u003e.", + "id": "GHSA-j756-f273-xhp4", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 1.2.3-0.20210314221642-a826c77dc9d2; Upgrade github.com/nats-io/nats-server/v2 to version 2.2.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + } + } + ] +} diff --git a/test/diff/vulnerability/cdx-1-5-vulnerabilities-base.bom.json b/test/diff/vulnerability/cdx-1-5-vulnerabilities-base.bom.json new file mode 100644 index 00000000..51160ba0 --- /dev/null +++ b/test/diff/vulnerability/cdx-1-5-vulnerabilities-base.bom.json @@ -0,0 +1,4143 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.5", + "serialNumber": "urn:uuid:xxxx", + "version": 1, + "metadata": { + "component": { + "type": "container", + "bom-ref": "pkg:oci/nats-box@sha256%3Acaf0c9fe15a9a88d001c74fd9d80f7f6fd57474aa243cd63a9a086eda9e202be?arch=amd64&repository_url=index.docker.io%2Fnats-io%2Fnats-box", + "name": "nats-io/nats-box", + "purl": "pkg:oci/nats-box@sha256%3Acaf0c9fe15a9a88d001c74fd9d80f7f6fd57474aa243cd63a9a086eda9e202be?arch=amd64&repository_url=index.docker.io%2Fnats-io%2Fnats-box" + } + }, + "vulnerabilities": [ + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2018-25032" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/33" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/35" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/38" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2022/03/25/2" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2022/03/26/1" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2022:8420" + }, + { + "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2018-25032" + }, + { + "url": "https://bugzilla.redhat.com/2067945" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.2.11-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 787 + ], + "description": "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.", + "id": "CVE-2018-25032", + "published": "2022-03-25T09:15:08+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "high" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 8.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" + }, + { + "source": { + "name": "ruby-advisory-db" + }, + "severity": "high" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade zlib to version 1.2.12-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T02:56:26+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2019-13126" + }, + { + "url": "https://github.com/nats-io/nats-server/commit/07ef71ff98f45f8c2711be4aeaf484610d891dda" + }, + { + "url": "https://github.com/nats-io/nats-server/commits/master" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/1053" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/1441" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13126" + }, + { + "url": "https://www.twistlock.com/labs-blog/finding-dos-vulnerability-nats-go-fuzz-cve-2019-13126" + }, + { + "url": "https://www.twistlock.com/labs-blog/finding-dos-vulnerability-nats-go-fuzz-cve-2019-13126/" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + } + ], + "cwes": [ + 190 + ], + "description": "An integer overflow in NATS Server before 2.0.2 allows a remote attacker to crash the server by sending a crafted request. If authentication is enabled, then the remote attacker must have first authenticated.", + "id": "CVE-2019-13126", + "published": "2019-07-29T17:15:11+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.2.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-03-03T19:13:24+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2020-26521" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2020/11/02/2" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2020-26521.txt" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + } + ], + "cwes": [ + 476 + ], + "description": "The JWT library in NATS nats-server before 2.1.9 allows a denial of service (a nil dereference in Go code).", + "id": "CVE-2020-26521", + "published": "2020-11-06T08:15:13+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 1.1.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:20:36+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2020-26892" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2020-26892.txt" + }, + { + "url": "https://github.com/nats-io/jwt/commit/e11ce317263cef69619fc1ca743b195d02aa1d8a" + }, + { + "url": "https://github.com/nats-io/jwt/security/advisories/GHSA-4w5x-x539-ppf5" + }, + { + "url": "https://github.com/nats-io/nats-server/commit/1e08b67f08e18cd844dce833a265aaa72500a12f" + }, + { + "url": "https://github.com/nats-io/nats-server/commits/master" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-26892" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2022-0380" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2020/11/02/2" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + } + ], + "cwes": [ + 798 + ], + "description": "The JWT library in NATS nats-server before 2.1.9 has Incorrect Access Control because of how expired credentials are handled.", + "id": "CVE-2020-26892", + "published": "2020-11-06T08:15:13+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 1.1.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:20:46+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2020-28466" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/16/1" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/16/2" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/1731" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/1731/commits/2e3c22672936f4980d343fb1d328b38919e74796" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28466" + }, + { + "url": "https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMNATSIONATSSERVERSERVER-1042967" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + } + ], + "description": "This affects all versions of package github.com/nats-io/nats-server/server. Untrusted accounts are able to crash the server using configs that represent a service export/import cycles. Disclaimer from the maintainers: Running a NATS service which is exposed to untrusted users presents a heightened risk. Any remote execution flaw or equivalent seriousness, or denial-of-service by unauthenticated users, will lead to prompt releases by the NATS maintainers. Fixes for denial of service issues with no threat of remote execution, when limited to account holders, are likely to just be committed to the main development branch with no special attention. Those who are running such services are encouraged to build regularly from git.", + "id": "CVE-2020-28466", + "published": "2021-03-07T10:15:12+00:00", + "ratings": [ + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.2.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2021-03-25T00:21:15+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2020-29652" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2020-29652" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29652" + }, + { + "url": "https://errata.almalinux.org/8/ALSA-2021-1796.html" + }, + { + "url": "https://go-review.googlesource.com/c/crypto/+/278852" + }, + { + "url": "https://go.dev/cl/278852" + }, + { + "url": "https://go.googlesource.com/crypto/+/8b5274cf687fd9316b4108863654cc57385531e8" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/ouZIlBimOsE?pli=1" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2020-29652.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2021-1796.html" + }, + { + "url": "https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff%40%3Cnotifications.skywalking.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff@%3Cnotifications.skywalking.apache.org%3E" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-29652" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2021-0227" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2020-29652" + } + ], + "affects": [ + { + "ref": "64ecbd63-f74a-4fcc-a240-3f8a16435789", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "718081db-83c2-4309-87c8-e43228139b88", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "c6ba0fd6-a390-4fcf-aaec-4a072dcd17c4", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59", + "versions": [ + { + "version": "v0.0.0-20200323165209-0ec3e9974c59", + "status": "affected" + } + ] + } + ], + "cwes": [ + 476 + ], + "description": "A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.", + "id": "CVE-2020-29652", + "published": "2020-12-17T05:15:10+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade golang.org/x/crypto to version 0.0.0-20201216223049-8b5274cf687f", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:21:32+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-28831" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-28831" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28831" + }, + { + "url": "https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28831" + }, + { + "url": "https://security.gentoo.org/glsa/202105-09" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6335-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-28831" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 755 + ], + "description": "decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.", + "id": "CVE-2021-28831", + "published": "2021-03-19T05:15:13+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r4; Upgrade ssl_client to version 1.32.1-r4", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:32:23+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-30139" + }, + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741" + }, + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/apk-tools@2.12.1-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "2.12.1-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.", + "id": "CVE-2021-30139", + "published": "2021-04-21T16:15:08+00:00", + "ratings": [ + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade apk-tools to version 2.12.5-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2021-04-22T18:21:47+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3127" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3127" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2021-3127.txt" + }, + { + "url": "https://github.com/nats-io/jwt" + }, + { + "url": "https://github.com/nats-io/jwt/pull/149/commits/a826c77dc9d2671c961b75ceefdb439c41029866" + }, + { + "url": "https://github.com/nats-io/nats-server/commit/423b79440c80c863de9f4e20548504e6c5d5e403" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3127" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.1.0", + "versions": [ + { + "version": "v1.1.0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.2.2", + "versions": [ + { + "version": "v1.2.2", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + } + ], + "cwes": [ + 755 + ], + "description": "NATS Server 2.x before 2.2.0 and JWT library before 2.0.1 have Incorrect Access Control because Import Token bindings are mishandled.", + "id": "CVE-2021-3127", + "published": "2021-03-16T20:15:13+00:00", + "ratings": [ + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 1.2.3-0.20210314221642-a826c77dc9d2; Upgrade github.com/nats-io/nats-server/v2 to version 2.2.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2022-07-12T17:42:04+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-33194" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-33194" + }, + { + "url": "https://github.com/golang/net/commit/37e1c6afe02340126705deced573a85ab75209d7" + }, + { + "url": "https://go.dev/cl/311090" + }, + { + "url": "https://go.dev/issue/46288" + }, + { + "url": "https://go.googlesource.com/net/+/37e1c6afe02340126705deced573a85ab75209d7" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/wPunbCPkWUg" + }, + { + "url": "https://groups.google.com/g/golang-dev/c/28x0nthP-c8/m/KqWVTjsnBAAJ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4CHKSFMHZVOBCZSSVRE3UEYNKARTBMTM/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4CHKSFMHZVOBCZSSVRE3UEYNKARTBMTM" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33194" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2021-0238" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-33194" + } + ], + "affects": [ + { + "ref": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "versions": [ + { + "version": "v0.0.0-20210428140749-89ef3d95e781", + "status": "affected" + } + ] + } + ], + "cwes": [ + 835 + ], + "description": "golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop) via crafted ParseFragment input.", + "id": "CVE-2021-33194", + "published": "2021-05-26T15:15:08+00:00", + "ratings": [ + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade golang.org/x/net to version 0.0.0-20210520170846-37e1c6afe023", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:35:49+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3449" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/27/1" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/27/2" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/28/3" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/28/4" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3449" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148" + }, + { + "url": "https://github.com/alexcrichton/openssl-src-rs" + }, + { + "url": "https://github.com/nodejs/node/pull/38083" + }, + { + "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845" + }, + { + "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10356" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2021-3449.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2021-9151.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3449" + }, + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0055" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0055.html" + }, + { + "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc" + }, + { + "url": "https://security.gentoo.org/glsa/202103-03" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210326-0006" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210326-0006/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210513-0002" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210513-0002/" + }, + { + "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd" + }, + { + "url": "https://ubuntu.com/security/notices/USN-4891-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5038-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-3449" + }, + { + "url": "https://www.debian.org/security/2021/dsa-4875" + }, + { + "url": "https://www.openssl.org/news/secadv/20210325.txt" + }, + { + "url": "https://www.oracle.com//security-alerts/cpujul2021.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuApr2021.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujul2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" + }, + { + "url": "https://www.tenable.com/security/tns-2021-05" + }, + { + "url": "https://www.tenable.com/security/tns-2021-06" + }, + { + "url": "https://www.tenable.com/security/tns-2021-09" + }, + { + "url": "https://www.tenable.com/security/tns-2021-10" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 476 + ], + "description": "An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).", + "id": "CVE-2021-3449", + "published": "2021-03-25T15:15:13+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ghsa" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 4.3, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.9, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "high" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1k-r0; Upgrade libssl1.1 to version 1.1.1k-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:38:00+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3450" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/27/1" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/27/2" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/28/3" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/28/4" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3450" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b" + }, + { + "url": "https://github.com/alexcrichton/openssl-src-rs" + }, + { + "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845" + }, + { + "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10356" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2021-3450.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2021-9151.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP" + }, + { + "url": "https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3450" + }, + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0056.html" + }, + { + "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc" + }, + { + "url": "https://security.gentoo.org/glsa/202103-03" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210326-0006" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210326-0006/" + }, + { + "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-3450" + }, + { + "url": "https://www.openssl.org/news/secadv/20210325.txt" + }, + { + "url": "https://www.oracle.com//security-alerts/cpujul2021.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuApr2021.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujul2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" + }, + { + "url": "https://www.tenable.com/security/tns-2021-05" + }, + { + "url": "https://www.tenable.com/security/tns-2021-08" + }, + { + "url": "https://www.tenable.com/security/tns-2021-09" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 295 + ], + "description": "The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a \"purpose\" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named \"purpose\" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).", + "id": "CVE-2021-3450", + "published": "2021-03-25T15:15:13+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.8, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1k-r0; Upgrade libssl1.1 to version 1.1.1k-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:38:00+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-36159" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-36159" + }, + { + "url": "https://github.com/freebsd/freebsd-src/commits/main/lib/libfetch" + }, + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10749" + }, + { + "url": "https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-36159" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-36159" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/apk-tools@2.12.1-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "2.12.1-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because strtol is used to parse the relevant numbers into address bytes. It does not check if the line ends prematurely. If it does, the for-loop condition checks for the '\\0' terminator one byte too late.", + "id": "CVE-2021-36159", + "published": "2021-08-03T14:15:08+00:00", + "ratings": [ + { + "source": { + "name": "nvd" + }, + "score": 6.4, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 9.1, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 9.1, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" + } + ], + "recommendation": "Upgrade apk-tools to version 2.12.6-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:36:43+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3711" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/08/26/2" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3711" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3711" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46" + }, + { + "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3711" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0097.html" + }, + { + "url": "https://security.gentoo.org/glsa/202209-02" + }, + { + "url": "https://security.gentoo.org/glsa/202210-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210827-0010" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210827-0010/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211022-0003" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211022-0003/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-3711" + }, + { + "url": "https://www.debian.org/security/2021/dsa-4963" + }, + { + "url": "https://www.openssl.org/news/secadv/20210824.txt" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujan2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" + }, + { + "url": "https://www.tenable.com/security/tns-2021-16" + }, + { + "url": "https://www.tenable.com/security/tns-2022-02" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 120 + ], + "description": "In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the \"out\" parameter can be NULL and, on exit, the \"outlen\" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the \"out\" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).", + "id": "CVE-2021-3711", + "published": "2021-08-24T15:15:09+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "critical" + }, + { + "source": { + "name": "ghsa" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "photon" + }, + "severity": "critical" + }, + { + "source": { + "name": "redhat" + }, + "score": 9.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "high" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1l-r0; Upgrade libssl1.1 to version 1.1.1l-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:38:13+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3712" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/08/26/2" + }, + { + "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3712" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3712" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12" + }, + { + "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10366" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2021-3712.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2022-9023.html" + }, + { + "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3712" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0098.html" + }, + { + "url": "https://security.gentoo.org/glsa/202209-02" + }, + { + "url": "https://security.gentoo.org/glsa/202210-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210827-0010" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210827-0010/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-3" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5088-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-3712" + }, + { + "url": "https://www.debian.org/security/2021/dsa-4963" + }, + { + "url": "https://www.openssl.org/news/secadv/20210824.txt" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujan2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" + }, + { + "url": "https://www.tenable.com/security/tns-2021-16" + }, + { + "url": "https://www.tenable.com/security/tns-2022-02" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).", + "id": "CVE-2021-3712", + "published": "2021-08-24T15:15:09+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.8, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:M/Au:N/C:P/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.4, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" + }, + { + "source": { + "name": "rocky" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1l-r0; Upgrade libssl1.1 to version 1.1.1l-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:38:13+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-38561" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-38561" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38561" + }, + { + "url": "https://deps.dev/advisory/OSV/GO-2021-0113" + }, + { + "url": "https://go.dev/cl/340830" + }, + { + "url": "https://go.googlesource.com/text/+/383b2e75a7a4198c42f8f87833eefb772868a56f" + }, + { + "url": "https://groups.google.com/g/golang-announce" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-38561" + }, + { + "url": "https://pkg.go.dev/golang.org/x/text/language" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2021-0113" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5873-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-38561" + } + ], + "affects": [ + { + "ref": "869288c8-06d2-4a38-8b68-ced0ff17bc77", + "versions": [ + { + "version": "v0.3.6", + "status": "affected" + } + ] + }, + { + "ref": "99b7b900-55f8-4676-8c8f-32262681845b", + "versions": [ + { + "version": "v0.3.6", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack.", + "id": "CVE-2021-38561", + "published": "2022-12-26T06:15:10+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade golang.org/x/text to version 0.3.7", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-01-05T04:52:36+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42374" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42374" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42374" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42374" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42374" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that", + "id": "CVE-2021-42374", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 3.3, + "severity": "info", + "method": "CVSSv2", + "vector": "AV:L/AC:M/Au:N/C:P/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.7, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:09+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42375" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42375" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42375" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42375" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 159 + ], + "description": "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.", + "id": "CVE-2021-42375", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "nvd" + }, + "score": 1.9, + "severity": "info", + "method": "CVSSv2", + "vector": "AV:L/AC:M/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 4.1, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:09+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42378" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42378" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42378" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42378" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42378" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function", + "id": "CVE-2021-42378", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42379" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42379" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42379" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42379" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42379" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function", + "id": "CVE-2021-42379", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42380" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42380" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42380" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42380" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42380" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function", + "id": "CVE-2021-42380", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42381" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42381" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42381" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42381" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42381" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function", + "id": "CVE-2021-42381", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42382" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42382" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42382" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42382" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42382" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function", + "id": "CVE-2021-42382", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42383" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42383" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42383" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42383" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function", + "id": "CVE-2021-42383", + "published": "2021-11-15T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42384" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42384" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42384" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42384" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42384" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function", + "id": "CVE-2021-42384", + "published": "2021-11-15T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42385" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42385" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42385" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42385" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42385" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function", + "id": "CVE-2021-42385", + "published": "2021-11-15T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42386" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42386" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42386" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42386" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42386" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function", + "id": "CVE-2021-42386", + "published": "2021-11-15T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-43565" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-43565" + }, + { + "url": "https://go.dev/cl/368814" + }, + { + "url": "https://go.dev/issues/49932" + }, + { + "url": "https://groups.google.com/forum/#!forum/golang-announce" + }, + { + "url": "https://groups.google.com/forum/#%21forum/golang-announce" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/2AR1sKiM-Qs" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-43565" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2022-0968" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-43565" + } + ], + "affects": [ + { + "ref": "64ecbd63-f74a-4fcc-a240-3f8a16435789", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "718081db-83c2-4309-87c8-e43228139b88", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "84eac386-ca89-4217-8a72-84d77e3bd144", + "versions": [ + { + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "status": "affected" + } + ] + }, + { + "ref": "c6ba0fd6-a390-4fcf-aaec-4a072dcd17c4", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "ce164c60-ee4f-4360-a85f-73106cf59f6c", + "versions": [ + { + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59", + "versions": [ + { + "version": "v0.0.0-20200323165209-0ec3e9974c59", + "status": "affected" + } + ] + } + ], + "description": "The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.", + "id": "CVE-2021-43565", + "published": "2022-09-06T18:15:10+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade golang.org/x/crypto to version 0.0.0-20211202192323-5770296d904e", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:39:23+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2022-0778" + }, + { + "url": "http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/33" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/35" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/38" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2022:5326" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-0778" + }, + { + "url": "https://bugzilla.redhat.com/2062202" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2062202" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778" + }, + { + "url": "https://errata.almalinux.org/8/ALSA-2022-5326.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2022:4899" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2022-0778.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2022-9272.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0778" + }, + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2022-0014.html" + }, + { + "url": "https://security.gentoo.org/glsa/202210-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220321-0002" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220321-0002/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220429-0005" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220429-0005/" + }, + { + "url": "https://support.apple.com/kb/HT213255" + }, + { + "url": "https://support.apple.com/kb/HT213256" + }, + { + "url": "https://support.apple.com/kb/HT213257" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5328-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5328-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6457-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-0778" + }, + { + "url": "https://www.debian.org/security/2022/dsa-5103" + }, + { + "url": "https://www.openssl.org/news/secadv/20220315.txt" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujul2022.html" + }, + { + "url": "https://www.tenable.com/security/tns-2022-06" + }, + { + "url": "https://www.tenable.com/security/tns-2022-07" + }, + { + "url": "https://www.tenable.com/security/tns-2022-08" + }, + { + "url": "https://www.tenable.com/security/tns-2022-09" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 835 + ], + "description": "The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).", + "id": "CVE-2022-0778", + "published": "2022-03-15T17:15:08+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "low" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "rocky" + }, + "severity": "high" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "high" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1n-r0; Upgrade libssl1.1 to version 1.1.1n-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:41:33+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2022-2097" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2022:6224" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-2097" + }, + { + "url": "https://bugzilla.redhat.com/2081494" + }, + { + "url": "https://bugzilla.redhat.com/2087911" + }, + { + "url": "https://bugzilla.redhat.com/2087913" + }, + { + "url": "https://bugzilla.redhat.com/2097310" + }, + { + "url": "https://bugzilla.redhat.com/2104905" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2081494" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2097310" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2100554" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2104905" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2022-6224.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2022:5818" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93" + }, + { + "url": "https://github.com/alexcrichton/openssl-src-rs" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2022-2097.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2022-9751.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2097" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2022-0032.html" + }, + { + "url": "https://security.gentoo.org/glsa/202210-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220715-0011" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220715-0011/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20230420-0008" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20230420-0008/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5502-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6457-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-2097" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5343" + }, + { + "url": "https://www.openssl.org/news/secadv/20220705.txt" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 327 + ], + "description": "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).", + "id": "CVE-2022-2097", + "published": "2022-07-05T11:15:08+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "photon" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "source": { + "name": "rocky" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1q-r0; Upgrade libssl1.1 to version 1.1.1q-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:46:13+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2022-24450" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-24450" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2022-24450.txt" + }, + { + "url": "https://github.com/nats-io/nats-server" + }, + { + "url": "https://github.com/nats-io/nats-server/releases/tag/v2.7.2" + }, + { + "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-g6w6-r76c-28j7" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24450" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-24450" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.2.2", + "versions": [ + { + "version": "v2.2.2", + "status": "affected" + } + ] + } + ], + "cwes": [ + 862 + ], + "description": "NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the \"dynamically provisioned sandbox accounts\" feature.", + "id": "CVE-2022-24450", + "published": "2022-02-08T02:15:06+00:00", + "ratings": [ + { + "source": { + "name": "bitnami" + }, + "score": 8.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ghsa" + }, + "score": 8.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 9, + "severity": "high", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:C/I:C/A:C" + }, + { + "source": { + "name": "nvd" + }, + "score": 8.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 8.8, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.7.2", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-08-08T14:22:24+00:00" + } + ] +} diff --git a/test/diff/vulnerability/cdx-1-5-vulnerabilities-delta-add-1.bom.json b/test/diff/vulnerability/cdx-1-5-vulnerabilities-delta-add-1.bom.json new file mode 100644 index 00000000..c431d881 --- /dev/null +++ b/test/diff/vulnerability/cdx-1-5-vulnerabilities-delta-add-1.bom.json @@ -0,0 +1,4295 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.5", + "serialNumber": "urn:uuid:xxxx", + "version": 1, + "metadata": { + "component": { + "type": "container", + "bom-ref": "pkg:oci/nats-box@sha256%3Acaf0c9fe15a9a88d001c74fd9d80f7f6fd57474aa243cd63a9a086eda9e202be?arch=amd64&repository_url=index.docker.io%2Fnats-io%2Fnats-box", + "name": "nats-io/nats-box", + "purl": "pkg:oci/nats-box@sha256%3Acaf0c9fe15a9a88d001c74fd9d80f7f6fd57474aa243cd63a9a086eda9e202be?arch=amd64&repository_url=index.docker.io%2Fnats-io%2Fnats-box" + } + }, + "vulnerabilities": [ + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2018-25032" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/33" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/35" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/38" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2022/03/25/2" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2022/03/26/1" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2022:8420" + }, + { + "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2018-25032" + }, + { + "url": "https://bugzilla.redhat.com/2067945" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.2.11-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 787 + ], + "description": "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.", + "id": "CVE-2018-25032", + "published": "2022-03-25T09:15:08+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "high" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 8.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" + }, + { + "source": { + "name": "ruby-advisory-db" + }, + "severity": "high" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade zlib to version 1.2.12-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T02:56:26+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2019-13126" + }, + { + "url": "https://github.com/nats-io/nats-server/commit/07ef71ff98f45f8c2711be4aeaf484610d891dda" + }, + { + "url": "https://github.com/nats-io/nats-server/commits/master" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/1053" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/1441" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13126" + }, + { + "url": "https://www.twistlock.com/labs-blog/finding-dos-vulnerability-nats-go-fuzz-cve-2019-13126" + }, + { + "url": "https://www.twistlock.com/labs-blog/finding-dos-vulnerability-nats-go-fuzz-cve-2019-13126/" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + } + ], + "cwes": [ + 190 + ], + "description": "An integer overflow in NATS Server before 2.0.2 allows a remote attacker to crash the server by sending a crafted request. If authentication is enabled, then the remote attacker must have first authenticated.", + "id": "CVE-2019-13126", + "published": "2019-07-29T17:15:11+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.2.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-03-03T19:13:24+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2020-26521" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2020/11/02/2" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2020-26521.txt" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + } + ], + "cwes": [ + 476 + ], + "description": "The JWT library in NATS nats-server before 2.1.9 allows a denial of service (a nil dereference in Go code).", + "id": "CVE-2020-26521", + "published": "2020-11-06T08:15:13+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 1.1.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:20:36+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2020-26892" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2020-26892.txt" + }, + { + "url": "https://github.com/nats-io/jwt/commit/e11ce317263cef69619fc1ca743b195d02aa1d8a" + }, + { + "url": "https://github.com/nats-io/jwt/security/advisories/GHSA-4w5x-x539-ppf5" + }, + { + "url": "https://github.com/nats-io/nats-server/commit/1e08b67f08e18cd844dce833a265aaa72500a12f" + }, + { + "url": "https://github.com/nats-io/nats-server/commits/master" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-26892" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2022-0380" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2020/11/02/2" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + } + ], + "cwes": [ + 798 + ], + "description": "The JWT library in NATS nats-server before 2.1.9 has Incorrect Access Control because of how expired credentials are handled.", + "id": "CVE-2020-26892", + "published": "2020-11-06T08:15:13+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 1.1.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:20:46+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2020-28466" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/16/1" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/16/2" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/1731" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/1731/commits/2e3c22672936f4980d343fb1d328b38919e74796" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28466" + }, + { + "url": "https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMNATSIONATSSERVERSERVER-1042967" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + } + ], + "description": "This affects all versions of package github.com/nats-io/nats-server/server. Untrusted accounts are able to crash the server using configs that represent a service export/import cycles. Disclaimer from the maintainers: Running a NATS service which is exposed to untrusted users presents a heightened risk. Any remote execution flaw or equivalent seriousness, or denial-of-service by unauthenticated users, will lead to prompt releases by the NATS maintainers. Fixes for denial of service issues with no threat of remote execution, when limited to account holders, are likely to just be committed to the main development branch with no special attention. Those who are running such services are encouraged to build regularly from git.", + "id": "CVE-2020-28466", + "published": "2021-03-07T10:15:12+00:00", + "ratings": [ + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.2.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2021-03-25T00:21:15+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2020-29652" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2020-29652" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29652" + }, + { + "url": "https://errata.almalinux.org/8/ALSA-2021-1796.html" + }, + { + "url": "https://go-review.googlesource.com/c/crypto/+/278852" + }, + { + "url": "https://go.dev/cl/278852" + }, + { + "url": "https://go.googlesource.com/crypto/+/8b5274cf687fd9316b4108863654cc57385531e8" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/ouZIlBimOsE?pli=1" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2020-29652.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2021-1796.html" + }, + { + "url": "https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff%40%3Cnotifications.skywalking.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff@%3Cnotifications.skywalking.apache.org%3E" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-29652" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2021-0227" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2020-29652" + } + ], + "affects": [ + { + "ref": "64ecbd63-f74a-4fcc-a240-3f8a16435789", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "718081db-83c2-4309-87c8-e43228139b88", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "c6ba0fd6-a390-4fcf-aaec-4a072dcd17c4", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59", + "versions": [ + { + "version": "v0.0.0-20200323165209-0ec3e9974c59", + "status": "affected" + } + ] + } + ], + "cwes": [ + 476 + ], + "description": "A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.", + "id": "CVE-2020-29652", + "published": "2020-12-17T05:15:10+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade golang.org/x/crypto to version 0.0.0-20201216223049-8b5274cf687f", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:21:32+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-28831" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-28831" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28831" + }, + { + "url": "https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28831" + }, + { + "url": "https://security.gentoo.org/glsa/202105-09" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6335-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-28831" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 755 + ], + "description": "decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.", + "id": "CVE-2021-28831", + "published": "2021-03-19T05:15:13+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r4; Upgrade ssl_client to version 1.32.1-r4", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:32:23+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-30139" + }, + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741" + }, + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/apk-tools@2.12.1-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "2.12.1-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.", + "id": "CVE-2021-30139", + "published": "2021-04-21T16:15:08+00:00", + "ratings": [ + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade apk-tools to version 2.12.5-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2021-04-22T18:21:47+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3127" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3127" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2021-3127.txt" + }, + { + "url": "https://github.com/nats-io/jwt" + }, + { + "url": "https://github.com/nats-io/jwt/pull/149/commits/a826c77dc9d2671c961b75ceefdb439c41029866" + }, + { + "url": "https://github.com/nats-io/nats-server/commit/423b79440c80c863de9f4e20548504e6c5d5e403" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3127" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.1.0", + "versions": [ + { + "version": "v1.1.0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.2.2", + "versions": [ + { + "version": "v1.2.2", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + } + ], + "cwes": [ + 755 + ], + "description": "NATS Server 2.x before 2.2.0 and JWT library before 2.0.1 have Incorrect Access Control because Import Token bindings are mishandled.", + "id": "CVE-2021-3127", + "published": "2021-03-16T20:15:13+00:00", + "ratings": [ + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 1.2.3-0.20210314221642-a826c77dc9d2; Upgrade github.com/nats-io/nats-server/v2 to version 2.2.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2022-07-12T17:42:04+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-33194" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-33194" + }, + { + "url": "https://github.com/golang/net/commit/37e1c6afe02340126705deced573a85ab75209d7" + }, + { + "url": "https://go.dev/cl/311090" + }, + { + "url": "https://go.dev/issue/46288" + }, + { + "url": "https://go.googlesource.com/net/+/37e1c6afe02340126705deced573a85ab75209d7" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/wPunbCPkWUg" + }, + { + "url": "https://groups.google.com/g/golang-dev/c/28x0nthP-c8/m/KqWVTjsnBAAJ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4CHKSFMHZVOBCZSSVRE3UEYNKARTBMTM/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4CHKSFMHZVOBCZSSVRE3UEYNKARTBMTM" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33194" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2021-0238" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-33194" + } + ], + "affects": [ + { + "ref": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "versions": [ + { + "version": "v0.0.0-20210428140749-89ef3d95e781", + "status": "affected" + } + ] + } + ], + "cwes": [ + 835 + ], + "description": "golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop) via crafted ParseFragment input.", + "id": "CVE-2021-33194", + "published": "2021-05-26T15:15:08+00:00", + "ratings": [ + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade golang.org/x/net to version 0.0.0-20210520170846-37e1c6afe023", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:35:49+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3449" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/27/1" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/27/2" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/28/3" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/28/4" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3449" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148" + }, + { + "url": "https://github.com/alexcrichton/openssl-src-rs" + }, + { + "url": "https://github.com/nodejs/node/pull/38083" + }, + { + "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845" + }, + { + "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10356" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2021-3449.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2021-9151.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3449" + }, + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0055" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0055.html" + }, + { + "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc" + }, + { + "url": "https://security.gentoo.org/glsa/202103-03" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210326-0006" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210326-0006/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210513-0002" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210513-0002/" + }, + { + "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd" + }, + { + "url": "https://ubuntu.com/security/notices/USN-4891-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5038-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-3449" + }, + { + "url": "https://www.debian.org/security/2021/dsa-4875" + }, + { + "url": "https://www.openssl.org/news/secadv/20210325.txt" + }, + { + "url": "https://www.oracle.com//security-alerts/cpujul2021.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuApr2021.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujul2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" + }, + { + "url": "https://www.tenable.com/security/tns-2021-05" + }, + { + "url": "https://www.tenable.com/security/tns-2021-06" + }, + { + "url": "https://www.tenable.com/security/tns-2021-09" + }, + { + "url": "https://www.tenable.com/security/tns-2021-10" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 476 + ], + "description": "An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).", + "id": "CVE-2021-3449", + "published": "2021-03-25T15:15:13+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ghsa" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 4.3, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.9, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "high" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1k-r0; Upgrade libssl1.1 to version 1.1.1k-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:38:00+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3450" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/27/1" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/27/2" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/28/3" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/28/4" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3450" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b" + }, + { + "url": "https://github.com/alexcrichton/openssl-src-rs" + }, + { + "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845" + }, + { + "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10356" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2021-3450.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2021-9151.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP" + }, + { + "url": "https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3450" + }, + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0056.html" + }, + { + "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc" + }, + { + "url": "https://security.gentoo.org/glsa/202103-03" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210326-0006" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210326-0006/" + }, + { + "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-3450" + }, + { + "url": "https://www.openssl.org/news/secadv/20210325.txt" + }, + { + "url": "https://www.oracle.com//security-alerts/cpujul2021.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuApr2021.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujul2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" + }, + { + "url": "https://www.tenable.com/security/tns-2021-05" + }, + { + "url": "https://www.tenable.com/security/tns-2021-08" + }, + { + "url": "https://www.tenable.com/security/tns-2021-09" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 295 + ], + "description": "The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a \"purpose\" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named \"purpose\" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).", + "id": "CVE-2021-3450", + "published": "2021-03-25T15:15:13+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.8, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1k-r0; Upgrade libssl1.1 to version 1.1.1k-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:38:00+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-36159" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-36159" + }, + { + "url": "https://github.com/freebsd/freebsd-src/commits/main/lib/libfetch" + }, + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10749" + }, + { + "url": "https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-36159" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-36159" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/apk-tools@2.12.1-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "2.12.1-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because strtol is used to parse the relevant numbers into address bytes. It does not check if the line ends prematurely. If it does, the for-loop condition checks for the '\\0' terminator one byte too late.", + "id": "CVE-2021-36159", + "published": "2021-08-03T14:15:08+00:00", + "ratings": [ + { + "source": { + "name": "nvd" + }, + "score": 6.4, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 9.1, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 9.1, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" + } + ], + "recommendation": "Upgrade apk-tools to version 2.12.6-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:36:43+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3711" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/08/26/2" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3711" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3711" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46" + }, + { + "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3711" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0097.html" + }, + { + "url": "https://security.gentoo.org/glsa/202209-02" + }, + { + "url": "https://security.gentoo.org/glsa/202210-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210827-0010" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210827-0010/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211022-0003" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211022-0003/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-3711" + }, + { + "url": "https://www.debian.org/security/2021/dsa-4963" + }, + { + "url": "https://www.openssl.org/news/secadv/20210824.txt" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujan2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" + }, + { + "url": "https://www.tenable.com/security/tns-2021-16" + }, + { + "url": "https://www.tenable.com/security/tns-2022-02" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 120 + ], + "description": "In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the \"out\" parameter can be NULL and, on exit, the \"outlen\" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the \"out\" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).", + "id": "CVE-2021-3711", + "published": "2021-08-24T15:15:09+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "critical" + }, + { + "source": { + "name": "ghsa" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "photon" + }, + "severity": "critical" + }, + { + "source": { + "name": "redhat" + }, + "score": 9.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "high" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1l-r0; Upgrade libssl1.1 to version 1.1.1l-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:38:13+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3712" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/08/26/2" + }, + { + "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3712" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3712" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12" + }, + { + "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10366" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2021-3712.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2022-9023.html" + }, + { + "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3712" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0098.html" + }, + { + "url": "https://security.gentoo.org/glsa/202209-02" + }, + { + "url": "https://security.gentoo.org/glsa/202210-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210827-0010" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210827-0010/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-3" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5088-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-3712" + }, + { + "url": "https://www.debian.org/security/2021/dsa-4963" + }, + { + "url": "https://www.openssl.org/news/secadv/20210824.txt" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujan2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" + }, + { + "url": "https://www.tenable.com/security/tns-2021-16" + }, + { + "url": "https://www.tenable.com/security/tns-2022-02" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).", + "id": "CVE-2021-3712", + "published": "2021-08-24T15:15:09+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.8, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:M/Au:N/C:P/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.4, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" + }, + { + "source": { + "name": "rocky" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1l-r0; Upgrade libssl1.1 to version 1.1.1l-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:38:13+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-38561" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-38561" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38561" + }, + { + "url": "https://deps.dev/advisory/OSV/GO-2021-0113" + }, + { + "url": "https://go.dev/cl/340830" + }, + { + "url": "https://go.googlesource.com/text/+/383b2e75a7a4198c42f8f87833eefb772868a56f" + }, + { + "url": "https://groups.google.com/g/golang-announce" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-38561" + }, + { + "url": "https://pkg.go.dev/golang.org/x/text/language" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2021-0113" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5873-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-38561" + } + ], + "affects": [ + { + "ref": "869288c8-06d2-4a38-8b68-ced0ff17bc77", + "versions": [ + { + "version": "v0.3.6", + "status": "affected" + } + ] + }, + { + "ref": "99b7b900-55f8-4676-8c8f-32262681845b", + "versions": [ + { + "version": "v0.3.6", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack.", + "id": "CVE-2021-38561", + "published": "2022-12-26T06:15:10+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade golang.org/x/text to version 0.3.7", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-01-05T04:52:36+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42374" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42374" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42374" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42374" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42374" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that", + "id": "CVE-2021-42374", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 3.3, + "severity": "info", + "method": "CVSSv2", + "vector": "AV:L/AC:M/Au:N/C:P/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.7, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:09+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42375" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42375" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42375" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42375" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 159 + ], + "description": "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.", + "id": "CVE-2021-42375", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "nvd" + }, + "score": 1.9, + "severity": "info", + "method": "CVSSv2", + "vector": "AV:L/AC:M/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 4.1, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:09+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2023-3978" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2023:6474" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2023-3978" + }, + { + "url": "https://bugzilla.redhat.com/2174485" + }, + { + "url": "https://bugzilla.redhat.com/2178358" + }, + { + "url": "https://bugzilla.redhat.com/2178488" + }, + { + "url": "https://bugzilla.redhat.com/2178492" + }, + { + "url": "https://bugzilla.redhat.com/2184481" + }, + { + "url": "https://bugzilla.redhat.com/2184482" + }, + { + "url": "https://bugzilla.redhat.com/2184483" + }, + { + "url": "https://bugzilla.redhat.com/2184484" + }, + { + "url": "https://bugzilla.redhat.com/2196026" + }, + { + "url": "https://bugzilla.redhat.com/2196027" + }, + { + "url": "https://bugzilla.redhat.com/2196029" + }, + { + "url": "https://bugzilla.redhat.com/2222167" + }, + { + "url": "https://bugzilla.redhat.com/2228689" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2023-6474.html" + }, + { + "url": "https://go.dev/cl/514896" + }, + { + "url": "https://go.dev/issue/61615" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2023-3978.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2023-6939.html" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3978" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2023-1988" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2023-3978" + } + ], + "affects": [ + { + "ref": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "versions": [ + { + "version": "v0.0.0-20210428140749-89ef3d95e781", + "status": "affected" + } + ] + } + ], + "cwes": [ + 79 + ], + "description": "DIFF: ADD: Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack.", + "id": "CVE-2023-3978", + "published": "2023-08-02T20:15:12+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "ghsa" + }, + "score": 6.1, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.1, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.1, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "recommendation": "Upgrade golang.org/x/net to version 0.13.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2024-04-14T04:20:03+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42378" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42378" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42378" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42378" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42378" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function", + "id": "CVE-2021-42378", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42379" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42379" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42379" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42379" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42379" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function", + "id": "CVE-2021-42379", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42380" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42380" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42380" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42380" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42380" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function", + "id": "CVE-2021-42380", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42381" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42381" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42381" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42381" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42381" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function", + "id": "CVE-2021-42381", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42382" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42382" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42382" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42382" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42382" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function", + "id": "CVE-2021-42382", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42383" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42383" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42383" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42383" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function", + "id": "CVE-2021-42383", + "published": "2021-11-15T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42384" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42384" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42384" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42384" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42384" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function", + "id": "CVE-2021-42384", + "published": "2021-11-15T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42385" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42385" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42385" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42385" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42385" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function", + "id": "CVE-2021-42385", + "published": "2021-11-15T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42386" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42386" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42386" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42386" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42386" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function", + "id": "CVE-2021-42386", + "published": "2021-11-15T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-43565" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-43565" + }, + { + "url": "https://go.dev/cl/368814" + }, + { + "url": "https://go.dev/issues/49932" + }, + { + "url": "https://groups.google.com/forum/#!forum/golang-announce" + }, + { + "url": "https://groups.google.com/forum/#%21forum/golang-announce" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/2AR1sKiM-Qs" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-43565" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2022-0968" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-43565" + } + ], + "affects": [ + { + "ref": "64ecbd63-f74a-4fcc-a240-3f8a16435789", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "718081db-83c2-4309-87c8-e43228139b88", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "84eac386-ca89-4217-8a72-84d77e3bd144", + "versions": [ + { + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "status": "affected" + } + ] + }, + { + "ref": "c6ba0fd6-a390-4fcf-aaec-4a072dcd17c4", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "ce164c60-ee4f-4360-a85f-73106cf59f6c", + "versions": [ + { + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59", + "versions": [ + { + "version": "v0.0.0-20200323165209-0ec3e9974c59", + "status": "affected" + } + ] + } + ], + "description": "The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.", + "id": "CVE-2021-43565", + "published": "2022-09-06T18:15:10+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade golang.org/x/crypto to version 0.0.0-20211202192323-5770296d904e", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:39:23+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2022-0778" + }, + { + "url": "http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/33" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/35" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/38" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2022:5326" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-0778" + }, + { + "url": "https://bugzilla.redhat.com/2062202" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2062202" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778" + }, + { + "url": "https://errata.almalinux.org/8/ALSA-2022-5326.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2022:4899" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2022-0778.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2022-9272.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0778" + }, + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2022-0014.html" + }, + { + "url": "https://security.gentoo.org/glsa/202210-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220321-0002" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220321-0002/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220429-0005" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220429-0005/" + }, + { + "url": "https://support.apple.com/kb/HT213255" + }, + { + "url": "https://support.apple.com/kb/HT213256" + }, + { + "url": "https://support.apple.com/kb/HT213257" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5328-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5328-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6457-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-0778" + }, + { + "url": "https://www.debian.org/security/2022/dsa-5103" + }, + { + "url": "https://www.openssl.org/news/secadv/20220315.txt" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujul2022.html" + }, + { + "url": "https://www.tenable.com/security/tns-2022-06" + }, + { + "url": "https://www.tenable.com/security/tns-2022-07" + }, + { + "url": "https://www.tenable.com/security/tns-2022-08" + }, + { + "url": "https://www.tenable.com/security/tns-2022-09" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 835 + ], + "description": "The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).", + "id": "CVE-2022-0778", + "published": "2022-03-15T17:15:08+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "low" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "rocky" + }, + "severity": "high" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "high" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1n-r0; Upgrade libssl1.1 to version 1.1.1n-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:41:33+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2022-2097" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2022:6224" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-2097" + }, + { + "url": "https://bugzilla.redhat.com/2081494" + }, + { + "url": "https://bugzilla.redhat.com/2087911" + }, + { + "url": "https://bugzilla.redhat.com/2087913" + }, + { + "url": "https://bugzilla.redhat.com/2097310" + }, + { + "url": "https://bugzilla.redhat.com/2104905" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2081494" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2097310" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2100554" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2104905" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2022-6224.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2022:5818" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93" + }, + { + "url": "https://github.com/alexcrichton/openssl-src-rs" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2022-2097.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2022-9751.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2097" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2022-0032.html" + }, + { + "url": "https://security.gentoo.org/glsa/202210-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220715-0011" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220715-0011/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20230420-0008" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20230420-0008/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5502-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6457-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-2097" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5343" + }, + { + "url": "https://www.openssl.org/news/secadv/20220705.txt" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 327 + ], + "description": "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).", + "id": "CVE-2022-2097", + "published": "2022-07-05T11:15:08+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "photon" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "source": { + "name": "rocky" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1q-r0; Upgrade libssl1.1 to version 1.1.1q-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:46:13+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2022-24450" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-24450" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2022-24450.txt" + }, + { + "url": "https://github.com/nats-io/nats-server" + }, + { + "url": "https://github.com/nats-io/nats-server/releases/tag/v2.7.2" + }, + { + "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-g6w6-r76c-28j7" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24450" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-24450" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.2.2", + "versions": [ + { + "version": "v2.2.2", + "status": "affected" + } + ] + } + ], + "cwes": [ + 862 + ], + "description": "NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the \"dynamically provisioned sandbox accounts\" feature.", + "id": "CVE-2022-24450", + "published": "2022-02-08T02:15:06+00:00", + "ratings": [ + { + "source": { + "name": "bitnami" + }, + "score": 8.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ghsa" + }, + "score": 8.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 9, + "severity": "high", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:C/I:C/A:C" + }, + { + "source": { + "name": "nvd" + }, + "score": 8.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 8.8, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.7.2", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-08-08T14:22:24+00:00" + } + ] +} diff --git a/test/diff/vulnerability/cdx-1-5-vulnerabilities-delta-remove-1.bom.json b/test/diff/vulnerability/cdx-1-5-vulnerabilities-delta-remove-1.bom.json new file mode 100644 index 00000000..6fdea565 --- /dev/null +++ b/test/diff/vulnerability/cdx-1-5-vulnerabilities-delta-remove-1.bom.json @@ -0,0 +1,4033 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.5", + "serialNumber": "urn:uuid:xxxx", + "version": 1, + "metadata": { + "component": { + "type": "container", + "bom-ref": "pkg:oci/nats-box@sha256%3Acaf0c9fe15a9a88d001c74fd9d80f7f6fd57474aa243cd63a9a086eda9e202be?arch=amd64&repository_url=index.docker.io%2Fnats-io%2Fnats-box", + "name": "nats-io/nats-box", + "purl": "pkg:oci/nats-box@sha256%3Acaf0c9fe15a9a88d001c74fd9d80f7f6fd57474aa243cd63a9a086eda9e202be?arch=amd64&repository_url=index.docker.io%2Fnats-io%2Fnats-box" + } + }, + "vulnerabilities": [ + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2018-25032" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/33" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/35" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/38" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2022/03/25/2" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2022/03/26/1" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2022:8420" + }, + { + "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2018-25032" + }, + { + "url": "https://bugzilla.redhat.com/2067945" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.2.11-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 787 + ], + "description": "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.", + "id": "CVE-2018-25032", + "published": "2022-03-25T09:15:08+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "high" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 8.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" + }, + { + "source": { + "name": "ruby-advisory-db" + }, + "severity": "high" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade zlib to version 1.2.12-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T02:56:26+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2019-13126" + }, + { + "url": "https://github.com/nats-io/nats-server/commit/07ef71ff98f45f8c2711be4aeaf484610d891dda" + }, + { + "url": "https://github.com/nats-io/nats-server/commits/master" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/1053" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/1441" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13126" + }, + { + "url": "https://www.twistlock.com/labs-blog/finding-dos-vulnerability-nats-go-fuzz-cve-2019-13126" + }, + { + "url": "https://www.twistlock.com/labs-blog/finding-dos-vulnerability-nats-go-fuzz-cve-2019-13126/" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + } + ], + "cwes": [ + 190 + ], + "description": "An integer overflow in NATS Server before 2.0.2 allows a remote attacker to crash the server by sending a crafted request. If authentication is enabled, then the remote attacker must have first authenticated.", + "id": "CVE-2019-13126", + "published": "2019-07-29T17:15:11+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.2.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-03-03T19:13:24+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2020-26521" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2020/11/02/2" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2020-26521.txt" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + } + ], + "cwes": [ + 476 + ], + "description": "The JWT library in NATS nats-server before 2.1.9 allows a denial of service (a nil dereference in Go code).", + "id": "CVE-2020-26521", + "published": "2020-11-06T08:15:13+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 1.1.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:20:36+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2020-26892" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2020-26892.txt" + }, + { + "url": "https://github.com/nats-io/jwt/commit/e11ce317263cef69619fc1ca743b195d02aa1d8a" + }, + { + "url": "https://github.com/nats-io/jwt/security/advisories/GHSA-4w5x-x539-ppf5" + }, + { + "url": "https://github.com/nats-io/nats-server/commit/1e08b67f08e18cd844dce833a265aaa72500a12f" + }, + { + "url": "https://github.com/nats-io/nats-server/commits/master" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-26892" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2022-0380" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2020/11/02/2" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + } + ], + "cwes": [ + 798 + ], + "description": "The JWT library in NATS nats-server before 2.1.9 has Incorrect Access Control because of how expired credentials are handled.", + "id": "CVE-2020-26892", + "published": "2020-11-06T08:15:13+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 1.1.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:20:46+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2020-28466" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/16/1" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/16/2" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/1731" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/1731/commits/2e3c22672936f4980d343fb1d328b38919e74796" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28466" + }, + { + "url": "https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMNATSIONATSSERVERSERVER-1042967" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + } + ], + "description": "This affects all versions of package github.com/nats-io/nats-server/server. Untrusted accounts are able to crash the server using configs that represent a service export/import cycles. Disclaimer from the maintainers: Running a NATS service which is exposed to untrusted users presents a heightened risk. Any remote execution flaw or equivalent seriousness, or denial-of-service by unauthenticated users, will lead to prompt releases by the NATS maintainers. Fixes for denial of service issues with no threat of remote execution, when limited to account holders, are likely to just be committed to the main development branch with no special attention. Those who are running such services are encouraged to build regularly from git.", + "id": "CVE-2020-28466", + "published": "2021-03-07T10:15:12+00:00", + "ratings": [ + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.2.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2021-03-25T00:21:15+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2020-29652" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2020-29652" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29652" + }, + { + "url": "https://errata.almalinux.org/8/ALSA-2021-1796.html" + }, + { + "url": "https://go-review.googlesource.com/c/crypto/+/278852" + }, + { + "url": "https://go.dev/cl/278852" + }, + { + "url": "https://go.googlesource.com/crypto/+/8b5274cf687fd9316b4108863654cc57385531e8" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/ouZIlBimOsE?pli=1" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2020-29652.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2021-1796.html" + }, + { + "url": "https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff%40%3Cnotifications.skywalking.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff@%3Cnotifications.skywalking.apache.org%3E" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-29652" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2021-0227" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2020-29652" + } + ], + "affects": [ + { + "ref": "64ecbd63-f74a-4fcc-a240-3f8a16435789", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "718081db-83c2-4309-87c8-e43228139b88", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "c6ba0fd6-a390-4fcf-aaec-4a072dcd17c4", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59", + "versions": [ + { + "version": "v0.0.0-20200323165209-0ec3e9974c59", + "status": "affected" + } + ] + } + ], + "cwes": [ + 476 + ], + "description": "A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.", + "id": "CVE-2020-29652", + "published": "2020-12-17T05:15:10+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade golang.org/x/crypto to version 0.0.0-20201216223049-8b5274cf687f", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:21:32+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-28831" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-28831" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28831" + }, + { + "url": "https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28831" + }, + { + "url": "https://security.gentoo.org/glsa/202105-09" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6335-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-28831" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 755 + ], + "description": "decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.", + "id": "CVE-2021-28831", + "published": "2021-03-19T05:15:13+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r4; Upgrade ssl_client to version 1.32.1-r4", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:32:23+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-30139" + }, + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741" + }, + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/apk-tools@2.12.1-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "2.12.1-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.", + "id": "CVE-2021-30139", + "published": "2021-04-21T16:15:08+00:00", + "ratings": [ + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade apk-tools to version 2.12.5-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2021-04-22T18:21:47+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3127" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3127" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2021-3127.txt" + }, + { + "url": "https://github.com/nats-io/jwt" + }, + { + "url": "https://github.com/nats-io/jwt/pull/149/commits/a826c77dc9d2671c961b75ceefdb439c41029866" + }, + { + "url": "https://github.com/nats-io/nats-server/commit/423b79440c80c863de9f4e20548504e6c5d5e403" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3127" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.1.0", + "versions": [ + { + "version": "v1.1.0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.2.2", + "versions": [ + { + "version": "v1.2.2", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + } + ], + "cwes": [ + 755 + ], + "description": "NATS Server 2.x before 2.2.0 and JWT library before 2.0.1 have Incorrect Access Control because Import Token bindings are mishandled.", + "id": "CVE-2021-3127", + "published": "2021-03-16T20:15:13+00:00", + "ratings": [ + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 1.2.3-0.20210314221642-a826c77dc9d2; Upgrade github.com/nats-io/nats-server/v2 to version 2.2.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2022-07-12T17:42:04+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-33194" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-33194" + }, + { + "url": "https://github.com/golang/net/commit/37e1c6afe02340126705deced573a85ab75209d7" + }, + { + "url": "https://go.dev/cl/311090" + }, + { + "url": "https://go.dev/issue/46288" + }, + { + "url": "https://go.googlesource.com/net/+/37e1c6afe02340126705deced573a85ab75209d7" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/wPunbCPkWUg" + }, + { + "url": "https://groups.google.com/g/golang-dev/c/28x0nthP-c8/m/KqWVTjsnBAAJ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4CHKSFMHZVOBCZSSVRE3UEYNKARTBMTM/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4CHKSFMHZVOBCZSSVRE3UEYNKARTBMTM" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33194" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2021-0238" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-33194" + } + ], + "affects": [ + { + "ref": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "versions": [ + { + "version": "v0.0.0-20210428140749-89ef3d95e781", + "status": "affected" + } + ] + } + ], + "cwes": [ + 835 + ], + "description": "golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop) via crafted ParseFragment input.", + "id": "CVE-2021-33194", + "published": "2021-05-26T15:15:08+00:00", + "ratings": [ + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade golang.org/x/net to version 0.0.0-20210520170846-37e1c6afe023", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:35:49+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3449" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/27/1" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/27/2" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/28/3" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/28/4" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3449" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148" + }, + { + "url": "https://github.com/alexcrichton/openssl-src-rs" + }, + { + "url": "https://github.com/nodejs/node/pull/38083" + }, + { + "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845" + }, + { + "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10356" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2021-3449.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2021-9151.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3449" + }, + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0055" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0055.html" + }, + { + "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc" + }, + { + "url": "https://security.gentoo.org/glsa/202103-03" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210326-0006" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210326-0006/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210513-0002" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210513-0002/" + }, + { + "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd" + }, + { + "url": "https://ubuntu.com/security/notices/USN-4891-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5038-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-3449" + }, + { + "url": "https://www.debian.org/security/2021/dsa-4875" + }, + { + "url": "https://www.openssl.org/news/secadv/20210325.txt" + }, + { + "url": "https://www.oracle.com//security-alerts/cpujul2021.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuApr2021.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujul2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" + }, + { + "url": "https://www.tenable.com/security/tns-2021-05" + }, + { + "url": "https://www.tenable.com/security/tns-2021-06" + }, + { + "url": "https://www.tenable.com/security/tns-2021-09" + }, + { + "url": "https://www.tenable.com/security/tns-2021-10" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 476 + ], + "description": "An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).", + "id": "CVE-2021-3449", + "published": "2021-03-25T15:15:13+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ghsa" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 4.3, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.9, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "high" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1k-r0; Upgrade libssl1.1 to version 1.1.1k-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:38:00+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3450" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/27/1" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/27/2" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/28/3" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/28/4" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3450" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b" + }, + { + "url": "https://github.com/alexcrichton/openssl-src-rs" + }, + { + "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845" + }, + { + "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10356" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2021-3450.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2021-9151.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP" + }, + { + "url": "https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3450" + }, + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0056.html" + }, + { + "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc" + }, + { + "url": "https://security.gentoo.org/glsa/202103-03" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210326-0006" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210326-0006/" + }, + { + "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-3450" + }, + { + "url": "https://www.openssl.org/news/secadv/20210325.txt" + }, + { + "url": "https://www.oracle.com//security-alerts/cpujul2021.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuApr2021.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujul2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" + }, + { + "url": "https://www.tenable.com/security/tns-2021-05" + }, + { + "url": "https://www.tenable.com/security/tns-2021-08" + }, + { + "url": "https://www.tenable.com/security/tns-2021-09" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 295 + ], + "description": "The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a \"purpose\" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named \"purpose\" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).", + "id": "CVE-2021-3450", + "published": "2021-03-25T15:15:13+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.8, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1k-r0; Upgrade libssl1.1 to version 1.1.1k-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:38:00+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-36159" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-36159" + }, + { + "url": "https://github.com/freebsd/freebsd-src/commits/main/lib/libfetch" + }, + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10749" + }, + { + "url": "https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-36159" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-36159" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/apk-tools@2.12.1-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "2.12.1-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because strtol is used to parse the relevant numbers into address bytes. It does not check if the line ends prematurely. If it does, the for-loop condition checks for the '\\0' terminator one byte too late.", + "id": "CVE-2021-36159", + "published": "2021-08-03T14:15:08+00:00", + "ratings": [ + { + "source": { + "name": "nvd" + }, + "score": 6.4, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 9.1, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 9.1, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" + } + ], + "recommendation": "Upgrade apk-tools to version 2.12.6-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:36:43+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3711" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/08/26/2" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3711" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3711" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46" + }, + { + "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3711" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0097.html" + }, + { + "url": "https://security.gentoo.org/glsa/202209-02" + }, + { + "url": "https://security.gentoo.org/glsa/202210-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210827-0010" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210827-0010/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211022-0003" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211022-0003/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-3711" + }, + { + "url": "https://www.debian.org/security/2021/dsa-4963" + }, + { + "url": "https://www.openssl.org/news/secadv/20210824.txt" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujan2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" + }, + { + "url": "https://www.tenable.com/security/tns-2021-16" + }, + { + "url": "https://www.tenable.com/security/tns-2022-02" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 120 + ], + "description": "In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the \"out\" parameter can be NULL and, on exit, the \"outlen\" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the \"out\" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).", + "id": "CVE-2021-3711", + "published": "2021-08-24T15:15:09+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "critical" + }, + { + "source": { + "name": "ghsa" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "photon" + }, + "severity": "critical" + }, + { + "source": { + "name": "redhat" + }, + "score": 9.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "high" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1l-r0; Upgrade libssl1.1 to version 1.1.1l-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:38:13+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3712" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/08/26/2" + }, + { + "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3712" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3712" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12" + }, + { + "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10366" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2021-3712.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2022-9023.html" + }, + { + "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3712" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0098.html" + }, + { + "url": "https://security.gentoo.org/glsa/202209-02" + }, + { + "url": "https://security.gentoo.org/glsa/202210-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210827-0010" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210827-0010/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-3" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5088-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-3712" + }, + { + "url": "https://www.debian.org/security/2021/dsa-4963" + }, + { + "url": "https://www.openssl.org/news/secadv/20210824.txt" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujan2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" + }, + { + "url": "https://www.tenable.com/security/tns-2021-16" + }, + { + "url": "https://www.tenable.com/security/tns-2022-02" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).", + "id": "CVE-2021-3712", + "published": "2021-08-24T15:15:09+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.8, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:M/Au:N/C:P/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.4, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" + }, + { + "source": { + "name": "rocky" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1l-r0; Upgrade libssl1.1 to version 1.1.1l-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:38:13+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-38561" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-38561" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38561" + }, + { + "url": "https://deps.dev/advisory/OSV/GO-2021-0113" + }, + { + "url": "https://go.dev/cl/340830" + }, + { + "url": "https://go.googlesource.com/text/+/383b2e75a7a4198c42f8f87833eefb772868a56f" + }, + { + "url": "https://groups.google.com/g/golang-announce" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-38561" + }, + { + "url": "https://pkg.go.dev/golang.org/x/text/language" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2021-0113" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5873-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-38561" + } + ], + "affects": [ + { + "ref": "869288c8-06d2-4a38-8b68-ced0ff17bc77", + "versions": [ + { + "version": "v0.3.6", + "status": "affected" + } + ] + }, + { + "ref": "99b7b900-55f8-4676-8c8f-32262681845b", + "versions": [ + { + "version": "v0.3.6", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack.", + "id": "CVE-2021-38561", + "published": "2022-12-26T06:15:10+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade golang.org/x/text to version 0.3.7", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-01-05T04:52:36+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42374" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42374" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42374" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42374" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42374" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that", + "id": "CVE-2021-42374", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 3.3, + "severity": "info", + "method": "CVSSv2", + "vector": "AV:L/AC:M/Au:N/C:P/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.7, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:09+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42375" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42375" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42375" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42375" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 159 + ], + "description": "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.", + "id": "CVE-2021-42375", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "nvd" + }, + "score": 1.9, + "severity": "info", + "method": "CVSSv2", + "vector": "AV:L/AC:M/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 4.1, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:09+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42378" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42378" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42378" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42378" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42378" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function", + "id": "CVE-2021-42378", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42379" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42379" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42379" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42379" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42379" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function", + "id": "CVE-2021-42379", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42380" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42380" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42380" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42380" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42380" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function", + "id": "CVE-2021-42380", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42382" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42382" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42382" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42382" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42382" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function", + "id": "CVE-2021-42382", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42383" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42383" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42383" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42383" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function", + "id": "CVE-2021-42383", + "published": "2021-11-15T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42384" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42384" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42384" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42384" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42384" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function", + "id": "CVE-2021-42384", + "published": "2021-11-15T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42385" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42385" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42385" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42385" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42385" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function", + "id": "CVE-2021-42385", + "published": "2021-11-15T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42386" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42386" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42386" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42386" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42386" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function", + "id": "CVE-2021-42386", + "published": "2021-11-15T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-43565" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-43565" + }, + { + "url": "https://go.dev/cl/368814" + }, + { + "url": "https://go.dev/issues/49932" + }, + { + "url": "https://groups.google.com/forum/#!forum/golang-announce" + }, + { + "url": "https://groups.google.com/forum/#%21forum/golang-announce" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/2AR1sKiM-Qs" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-43565" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2022-0968" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-43565" + } + ], + "affects": [ + { + "ref": "64ecbd63-f74a-4fcc-a240-3f8a16435789", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "718081db-83c2-4309-87c8-e43228139b88", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "84eac386-ca89-4217-8a72-84d77e3bd144", + "versions": [ + { + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "status": "affected" + } + ] + }, + { + "ref": "c6ba0fd6-a390-4fcf-aaec-4a072dcd17c4", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "ce164c60-ee4f-4360-a85f-73106cf59f6c", + "versions": [ + { + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59", + "versions": [ + { + "version": "v0.0.0-20200323165209-0ec3e9974c59", + "status": "affected" + } + ] + } + ], + "description": "The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.", + "id": "CVE-2021-43565", + "published": "2022-09-06T18:15:10+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade golang.org/x/crypto to version 0.0.0-20211202192323-5770296d904e", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:39:23+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2022-0778" + }, + { + "url": "http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/33" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/35" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/38" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2022:5326" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-0778" + }, + { + "url": "https://bugzilla.redhat.com/2062202" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2062202" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778" + }, + { + "url": "https://errata.almalinux.org/8/ALSA-2022-5326.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2022:4899" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2022-0778.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2022-9272.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0778" + }, + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2022-0014.html" + }, + { + "url": "https://security.gentoo.org/glsa/202210-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220321-0002" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220321-0002/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220429-0005" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220429-0005/" + }, + { + "url": "https://support.apple.com/kb/HT213255" + }, + { + "url": "https://support.apple.com/kb/HT213256" + }, + { + "url": "https://support.apple.com/kb/HT213257" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5328-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5328-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6457-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-0778" + }, + { + "url": "https://www.debian.org/security/2022/dsa-5103" + }, + { + "url": "https://www.openssl.org/news/secadv/20220315.txt" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujul2022.html" + }, + { + "url": "https://www.tenable.com/security/tns-2022-06" + }, + { + "url": "https://www.tenable.com/security/tns-2022-07" + }, + { + "url": "https://www.tenable.com/security/tns-2022-08" + }, + { + "url": "https://www.tenable.com/security/tns-2022-09" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 835 + ], + "description": "The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).", + "id": "CVE-2022-0778", + "published": "2022-03-15T17:15:08+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "low" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "rocky" + }, + "severity": "high" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "high" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1n-r0; Upgrade libssl1.1 to version 1.1.1n-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:41:33+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2022-2097" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2022:6224" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-2097" + }, + { + "url": "https://bugzilla.redhat.com/2081494" + }, + { + "url": "https://bugzilla.redhat.com/2087911" + }, + { + "url": "https://bugzilla.redhat.com/2087913" + }, + { + "url": "https://bugzilla.redhat.com/2097310" + }, + { + "url": "https://bugzilla.redhat.com/2104905" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2081494" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2097310" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2100554" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2104905" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2022-6224.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2022:5818" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93" + }, + { + "url": "https://github.com/alexcrichton/openssl-src-rs" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2022-2097.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2022-9751.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2097" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2022-0032.html" + }, + { + "url": "https://security.gentoo.org/glsa/202210-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220715-0011" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220715-0011/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20230420-0008" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20230420-0008/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5502-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6457-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-2097" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5343" + }, + { + "url": "https://www.openssl.org/news/secadv/20220705.txt" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 327 + ], + "description": "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).", + "id": "CVE-2022-2097", + "published": "2022-07-05T11:15:08+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "photon" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "source": { + "name": "rocky" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1q-r0; Upgrade libssl1.1 to version 1.1.1q-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:46:13+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2022-24450" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-24450" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2022-24450.txt" + }, + { + "url": "https://github.com/nats-io/nats-server" + }, + { + "url": "https://github.com/nats-io/nats-server/releases/tag/v2.7.2" + }, + { + "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-g6w6-r76c-28j7" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24450" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-24450" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.2.2", + "versions": [ + { + "version": "v2.2.2", + "status": "affected" + } + ] + } + ], + "cwes": [ + 862 + ], + "description": "NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the \"dynamically provisioned sandbox accounts\" feature.", + "id": "CVE-2022-24450", + "published": "2022-02-08T02:15:06+00:00", + "ratings": [ + { + "source": { + "name": "bitnami" + }, + "score": 8.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ghsa" + }, + "score": 8.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 9, + "severity": "high", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:C/I:C/A:C" + }, + { + "source": { + "name": "nvd" + }, + "score": 8.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 8.8, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.7.2", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-08-08T14:22:24+00:00" + } + ] +} diff --git a/test/normalize/cdx-1-2-components-protonmail.bom.json b/test/normalize/cdx-1-2-components-protonmail.bom.json new file mode 100644 index 00000000..789f2430 --- /dev/null +++ b/test/normalize/cdx-1-2-components-protonmail.bom.json @@ -0,0 +1,30703 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.2", + "serialNumber": "urn:uuid:371ffb8c-c11e-42b5-b5b9-9280fc62783e", + "version": 1, + "metadata": { + "timestamp": "2020-08-03T08:53:09.834Z", + "tools": [ + { + "vendor": "CycloneDX", + "name": "Node.js module", + "version": "2.0.0" + } + ], + "component": { + "type": "library", + "bom-ref": "pkg:npm/protonmail-web@4.0.0-beta.20", + "name": "protonmail-web", + "version": "4.0.0-beta.20", + "description": "Angular frontend for protonmail.com", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/protonmail-web@4.0.0-beta.20", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ProtonMail/WebClient#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ProtonMail/WebClient/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/ProtonMail/WebClient.git" + } + ] + } + }, + "components": [ + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/polyfill@7.10.4", + "group": "@babel", + "name": "polyfill", + "version": "7.10.4", + "description": "Provides polyfills necessary for a full ES2015+ environment", + "hashes": [ + { + "alg": "SHA-512", + "content": "f0161c9d5a90e64303d875e81c89c11fb1f56ffb8fdca767c026173aa1675ea82e3b2baee38dd65eeb1b2146d611f6376744f1934335b86ffc62e00c84d97ace" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/polyfill@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://babeljs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/core-js@2.6.11", + "name": "core-js", + "version": "2.6.11", + "description": "Standard library", + "hashes": [ + { + "alg": "SHA-512", + "content": "e708e7a5a4ffddd57e5c1e1ba2b12c9c06107219f4d174a04c058a0e412abfe2bc29ebe36f39a87caea17c9f536489698f6374c50a5acf2ecf891422587ab35a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/core-js@2.6.11", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/zloirock/core-js#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/zloirock/core-js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/zloirock/core-js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/regenerator-runtime@0.13.6", + "name": "regenerator-runtime", + "version": "0.13.6", + "description": "Runtime for Regenerator-compiled generator and async functions.", + "hashes": [ + { + "alg": "SHA-512", + "content": "1a6c251a26b34046cec1058375b6da3f5d22d79a46b5271858b6cc66ebbe44a473d1c67e83c21438d6b3067699a9eee3d7aef4215d47804e3ff22cbb0903dfe1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/regenerator-runtime@0.13.6", + "externalReferences": [ + { + "type": "vcs", + "url": "https://github.com/facebook/regenerator/tree/master/packages/regenerator-runtime" + } + ] + }, + { + "type": "framework", + "bom-ref": "pkg:npm/angular@1.8.0", + "name": "angular", + "version": "1.8.0", + "description": "HTML enhanced for web apps", + "hashes": [ + { + "alg": "SHA-512", + "content": "55d68cc7e424d129256bb079830efb6bc87395c39a93017c9a3956d770e921620395fab001b4922df77c37fa999f3126405e230b88a87c89ddde013bbcbf1966" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/angular@1.8.0", + "externalReferences": [ + { + "type": "website", + "url": "http://angularjs.org" + }, + { + "type": "issue-tracker", + "url": "https://github.com/angular/angular.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/angular/angular.js.git" + } + ] + }, + { + "type": "framework", + "bom-ref": "pkg:npm/angular-aria@1.8.0", + "name": "angular-aria", + "version": "1.8.0", + "description": "AngularJS module for making accessibility easy", + "hashes": [ + { + "alg": "SHA-512", + "content": "782408e84c2063a6d81ddcc851f0c00479d98e86776cd6290ac9dc7901786cb7dbab542d67bada44f35c6b8e6c8fa0bd3df8dd7ba3cd7040efb8ba3314f627ad" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/angular-aria@1.8.0", + "externalReferences": [ + { + "type": "website", + "url": "http://angularjs.org" + }, + { + "type": "issue-tracker", + "url": "https://github.com/angular/angular.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/angular/angular.js.git" + } + ] + }, + { + "type": "framework", + "bom-ref": "pkg:npm/angular-cookies@1.8.0", + "name": "angular-cookies", + "version": "1.8.0", + "description": "AngularJS module for cookies", + "hashes": [ + { + "alg": "SHA-512", + "content": "8163b744a17458c99786c7a2377030f5a126437981e77c12740c6978a2876e20f053bbe62be301b9e6f2397f6a6f0658b9b9f99ccf0b0726559a0ed3ea3395d7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/angular-cookies@1.8.0", + "externalReferences": [ + { + "type": "website", + "url": "http://angularjs.org" + }, + { + "type": "issue-tracker", + "url": "https://github.com/angular/angular.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/angular/angular.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/angular-gettext@2.4.1", + "name": "angular-gettext", + "version": "2.4.1", + "description": "Gettext support for Angular.js", + "hashes": [ + { + "alg": "SHA-512", + "content": "f816ba998e613dd91aebcaf12ee5e4ec708315e892e842071532a04d3d2d4d5b606a9ea035d2739b275bf0d8aab396b295ff14dc1efe9b5113ce9a44feab602b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/angular-gettext@2.4.1", + "externalReferences": [ + { + "type": "website", + "url": "http://angular-gettext.rocketeer.be/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/rubenv/angular-gettext/issues" + }, + { + "type": "vcs", + "url": "git://github.com/rubenv/angular-gettext.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/angular-ical@1.1.0", + "name": "angular-ical", + "version": "1.1.0", + "description": "angular-ical is an Angular factory wrapper for ical.js (https://github.com/mozilla-comm/ical.js)", + "hashes": [ + { + "alg": "SHA-1", + "content": "b3a34e889d547181f09d415a7b577a0708a63f1c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/angular-ical@1.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/stevemao/angular-ical#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/stevemao/angular-ical/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/stevemao/angular-ical.git" + } + ] + }, + { + "type": "framework", + "bom-ref": "pkg:npm/angular-loader@1.8.0", + "name": "angular-loader", + "version": "1.8.0", + "description": "AngularJS module for asynchronously loading modules", + "hashes": [ + { + "alg": "SHA-512", + "content": "342bcb2c55829312d1dffcc169518cfbbabd209ce86f1d8f5573273e82a3b40213a4ce808671f949816417370ad6843a3fa736bf4a0b79fea88a3ee64848f433" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/angular-loader@1.8.0", + "externalReferences": [ + { + "type": "website", + "url": "http://angularjs.org" + }, + { + "type": "issue-tracker", + "url": "https://github.com/angular/angular.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/angular/angular.js.git" + } + ] + }, + { + "type": "framework", + "bom-ref": "pkg:npm/angular-messages@1.8.0", + "name": "angular-messages", + "version": "1.8.0", + "description": "AngularJS module that provides enhanced support for displaying messages within templates", + "hashes": [ + { + "alg": "SHA-512", + "content": "2d29724eff34cb5be0f027ddcfe449d01aeb69692ad2ab0e647cab1c54fc3726160b9ca9e8741a6ef66f4e92aff5803eea8d39c30014f74a971d2ae752549f94" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/angular-messages@1.8.0", + "externalReferences": [ + { + "type": "website", + "url": "http://angularjs.org" + }, + { + "type": "issue-tracker", + "url": "https://github.com/angular/angular.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/angular/angular.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/angular-notify@2.5.0", + "name": "angular-notify", + "version": "2.5.0", + "description": "A minimalistic notification service for angular.", + "purl": "pkg:npm/angular-notify@2.5.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/cgross/angular-notify#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/cgross/angular-notify/issues" + }, + { + "type": "vcs", + "url": "git://github.com/cgross/angular-notify.git" + } + ] + }, + { + "type": "framework", + "bom-ref": "pkg:npm/angular-sanitize@1.8.0", + "name": "angular-sanitize", + "version": "1.8.0", + "description": "AngularJS module for sanitizing HTML", + "hashes": [ + { + "alg": "SHA-512", + "content": "8f91a238f0af7dc0d62b9b2f10e5683dbd755f7503572fe67473d15aecb5e08cb0f3ac5aabe05bfb1fde9b6b0039ae4c410798e5c88b5db177451a7c88229c36" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/angular-sanitize@1.8.0", + "externalReferences": [ + { + "type": "website", + "url": "http://angularjs.org" + }, + { + "type": "issue-tracker", + "url": "https://github.com/angular/angular.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/angular/angular.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/angular-ui-codemirror@0.3.0", + "name": "angular-ui-codemirror", + "version": "0.3.0", + "description": "This directive allows you to add CodeMirror to your textarea elements.", + "hashes": [ + { + "alg": "SHA-1", + "content": "e4286fc50f393f2a6e697c1bf3170424e12cbb60" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/angular-ui-codemirror@0.3.0", + "externalReferences": [ + { + "type": "website", + "url": "http://angular-ui.github.com" + }, + { + "type": "issue-tracker", + "url": "https://github.com/angular-ui/ui-codemirror/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/angular-ui/ui-codemirror.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/angular-ui-indeterminate@1.0.0", + "name": "angular-ui-indeterminate", + "version": "1.0.0", + "description": "Provides an easy way to toggle a checkbox input's special 'indeterminate' property. This is a visual toggle only and in no way affects the model or value outside of native browser behavior at this time.", + "hashes": [ + { + "alg": "SHA-1", + "content": "51784a60eb80aee8251e9fc9ec30fbe105125514" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/angular-ui-indeterminate@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/angular-ui/ui-indeterminate" + }, + { + "type": "issue-tracker", + "url": "https://github.com/angular-ui/ui-indeterminate/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/angular-ui/ui-indeterminate.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/angular-ui-router@0.4.3", + "name": "angular-ui-router", + "version": "0.4.3", + "description": "State-based routing for AngularJS", + "hashes": [ + { + "alg": "SHA-512", + "content": "106046ec6ec0ac556424f33e64880f2ae318b93d7a510aebdf38f70448971cac31b2cf3aedb1addeeed00fd83807147e2b6a903925a893a246be04d65c0928dc" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/angular-ui-router@0.4.3", + "externalReferences": [ + { + "type": "website", + "url": "http://angular-ui.github.com/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/angular-ui/ui-router/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/angular-ui/ui-router.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/angular-vs-repeat@2.0.13", + "name": "angular-vs-repeat", + "version": "2.0.13", + "description": "Virtual Scroll for AngularJS ngRepeat directive", + "hashes": [ + { + "alg": "SHA-512", + "content": "25bd033ade23539ff1671ef08cabe0649b6001a300e1914bab969e40753c536219cfc8b158fd0c2fa805590d7279f31aa6f8392d5f997c0f3565e78dfcdb49ec" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/angular-vs-repeat@2.0.13", + "externalReferences": [ + { + "type": "website", + "url": "http://kamilkp.github.io/angular-vs-repeat" + }, + { + "type": "issue-tracker", + "url": "https://github.com/kamilkp/angular-vs-repeat/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/kamilkp/angular-vs-repeat.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asmcrypto.js@2.3.2", + "name": "asmcrypto.js", + "version": "2.3.2", + "description": "Asm.js implementation of WebCrypto API", + "hashes": [ + { + "alg": "SHA-512", + "content": "dc58050117fb46ea6c6444d0d671e784b514be972db5c0aad6264269501b2596c267954d46b372be90f21d339bd0a0b796515cb32393fdaf7d3597026de884b0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/asmcrypto.js@2.3.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/asmcrypto/asmcrypto.js" + }, + { + "type": "issue-tracker", + "url": "https://github.com/asmcrypto/asmcrypto.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/asmcrypto/asmcrypto.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/autofill-event@1.0.0", + "name": "autofill-event", + "version": "1.0.0", + "description": "[![Build Status](https://travis-ci.org/tbosch/autofill-event.png?branch=master)](https://travis-ci.org/tbosch/autofill-event) # Autofill event polyfill", + "purl": "pkg:npm/autofill-event@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/tbosch/autofill-event#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/tbosch/autofill-event/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/tbosch/autofill-event.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/awesomplete@1.1.1", + "name": "awesomplete", + "version": "1.1.1", + "description": "http://leaverou.github.io/awesomplete/", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/awesomplete@1.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://leaverou.github.io/awesomplete/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/LeaVerou/awesomplete/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/LeaVerou/awesomplete.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bcryptjs@2.4.3", + "name": "bcryptjs", + "version": "2.4.3", + "description": "Optimized bcrypt in plain JavaScript with zero dependencies. Compatible to 'bcrypt'.", + "hashes": [ + { + "alg": "SHA-1", + "content": "9ab5627b93e60621ff7cdac5da9733027df1d0cb" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/bcryptjs@2.4.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/dcodeIO/bcrypt.js#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/dcodeIO/bcrypt.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/dcodeIO/bcrypt.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/blob.js@1.0.1", + "name": "blob.js", + "version": "1.0.1", + "description": "An HTML5 Blob implementation", + "hashes": [ + { + "alg": "SHA-1", + "content": "547b449b252c855313e837b53d15b41d000ea1d2" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/blob.js@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ecomputer/Blob.js#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ecomputer/Blob.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/ecomputer/Blob.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/clipboard@2.0.6", + "name": "clipboard", + "version": "2.0.6", + "description": "Modern copy to clipboard. No Flash. Just 2kb", + "hashes": [ + { + "alg": "SHA-512", + "content": "839cdb8a2c41464ff0c8a6a44b008a77bbd05c38c59c03061e8132068806fdbc3d9130fd1af740bdaa1147500b704cedde954ac59474a5589e90f3084b44321a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/clipboard@2.0.6", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/zenorocha/clipboard.js#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/zenorocha/clipboard.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/zenorocha/clipboard.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/good-listener@1.2.2", + "name": "good-listener", + "version": "1.2.2", + "description": "A more versatile way of adding & removing event listeners", + "hashes": [ + { + "alg": "SHA-1", + "content": "d53b30cdf9313dffb7dc9a0d477096aa6d145c50" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/good-listener@1.2.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/zenorocha/good-listener#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/zenorocha/good-listener/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/zenorocha/good-listener.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/delegate@3.2.0", + "name": "delegate", + "version": "3.2.0", + "description": "Lightweight event delegation", + "hashes": [ + { + "alg": "SHA-512", + "content": "2287e39180596998af9f457c9e7b0c24606be2354bc470e178a496f3c3f2c52e500b8568f596d956f873952c58f3b7d5ab749347aafee1c19ea721e47163904b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/delegate@3.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/zenorocha/delegate#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/zenorocha/delegate/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/zenorocha/delegate.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/select@1.1.2", + "name": "select", + "version": "1.1.2", + "description": "Programmatically select the text of a HTML element", + "hashes": [ + { + "alg": "SHA-1", + "content": "0e7350acdec80b1108528786ec1d4418d11b396d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/select@1.1.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/zenorocha/select#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/zenorocha/select/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/zenorocha/select.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tiny-emitter@2.1.0", + "name": "tiny-emitter", + "version": "2.1.0", + "description": "A tiny (less than 1k) event emitter library", + "hashes": [ + { + "alg": "SHA-512", + "content": "341e8393503dc6040f3281aa0b90955e7d76de05b2b5edb5e4e353e4fa796b4cade27944a0ed5959e0b0a6771a7a43c75ceeb48b8ee28459d93e244f8d132ae1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/tiny-emitter@2.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/scottcorgan/tiny-emitter#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/scottcorgan/tiny-emitter/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/scottcorgan/tiny-emitter.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/codemirror@5.56.0", + "name": "codemirror", + "version": "5.56.0", + "description": "Full-featured in-browser code editor", + "hashes": [ + { + "alg": "SHA-512", + "content": "31f2959988227d78d0a4b4a0a444ee8a1ec0ed64d322cc6f29f48b1ac793639faab74135503d706e564633a58b7a7391a3cb2099ffb75fe5937b6585ee6b9fcb" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/codemirror@5.56.0", + "externalReferences": [ + { + "type": "website", + "url": "https://codemirror.net" + }, + { + "type": "issue-tracker", + "url": "http://github.com/codemirror/CodeMirror/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/codemirror/CodeMirror.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/components-font-awesome@4.7.0", + "name": "components-font-awesome", + "version": "4.7.0", + "description": "Font Awesome, the iconic font designed for use with Twitter Bootstrap.", + "hashes": [ + { + "alg": "SHA-1", + "content": "a7550094b6e2cb5cd7dce49c405771c533e9cfe1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "id": "OFL-1.1" + } + } + ], + "purl": "pkg:npm/components-font-awesome@4.7.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/components/font-awesome#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/components/font-awesome/issues" + }, + { + "type": "vcs", + "url": "git://github.com/components/font-awesome.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/credit-card-type@8.3.0", + "name": "credit-card-type", + "version": "8.3.0", + "description": "A library for determining credit card type", + "hashes": [ + { + "alg": "SHA-512", + "content": "7337d952943b5bd083c592f8c852dbd6416d33fab6953398f7be612f668ef830bcf8644d0d54975421d78551593f18942a640265b14ff2f221c71e5305069387" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/credit-card-type@8.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/braintree/credit-card-type" + }, + { + "type": "issue-tracker", + "url": "https://github.com/braintree/credit-card-type/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/braintree/credit-card-type.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cssuseragent@2.1.31", + "name": "cssuseragent", + "version": "2.1.31", + "description": "Automatically adds UserAgent-specific CSS classes to the document allowing for browser variations without resorting to CSS hacks.", + "hashes": [ + { + "alg": "SHA-1", + "content": "bbb6e5695e5a5f1b80c898af933a87087b30ba3e" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/cssuseragent@2.1.31", + "externalReferences": [ + { + "type": "website", + "url": "http://cssuseragent.org" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mckamey/cssuseragent/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/mckamey/cssuseragent.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/declassify@2.1.0", + "name": "declassify", + "version": "2.1.0", + "description": "Remove any classes or IDs not found in CSS from HTML - modifies HTML, not CSS.", + "hashes": [ + { + "alg": "SHA-512", + "content": "09e1a46088cf009a5b73dbe06f75390cf7dc74b6018eb5f1944e44391b3b0a8a447845b650632d843efbc854e26e16fa4a42392a215e915934bd1d0b609d98fe" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/declassify@2.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jrit/declassify#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jrit/declassify/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jrit/declassify.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cheerio@0.22.0", + "name": "cheerio", + "version": "0.22.0", + "description": "Tiny, fast, and elegant implementation of core jQuery designed specifically for the server", + "hashes": [ + { + "alg": "SHA-1", + "content": "a9baa860a3f9b595a6b81b1a86873121ed3a269e" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/cheerio@0.22.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/cheeriojs/cheerio#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/cheeriojs/cheerio/issues" + }, + { + "type": "vcs", + "url": "git://github.com/cheeriojs/cheerio.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/css-select@1.2.0", + "name": "css-select", + "version": "1.2.0", + "description": "a CSS selector compiler/engine", + "hashes": [ + { + "alg": "SHA-1", + "content": "2b3a110539c5355f1cd8d314623e870b121ec858" + } + ], + "licenses": [ + { + "license": { + "name": "BSD-like" + } + } + ], + "purl": "pkg:npm/css-select@1.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/fb55/css-select#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/fb55/css-select/issues" + }, + { + "type": "vcs", + "url": "git://github.com/fb55/css-select.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/boolbase@1.0.0", + "name": "boolbase", + "version": "1.0.0", + "description": "two functions: One that returns true, one that returns false", + "hashes": [ + { + "alg": "SHA-1", + "content": "68dff5fbe60c51eb37725ea9e3ed310dcc1e776e" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/boolbase@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/fb55/boolbase" + }, + { + "type": "issue-tracker", + "url": "https://github.com/fb55/boolbase/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/fb55/boolbase.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/css-what@2.1.3", + "name": "css-what", + "version": "2.1.3", + "description": "a CSS selector parser", + "hashes": [ + { + "alg": "SHA-512", + "content": "6be10fa03fae66235f87ee5fc70da73bd43015aea725ed8eaf7e5f198e88a70d51dd1e001b3d5dd53119ac27a0bf0d984e66748d78ab198973c71a58487c2912" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/css-what@2.1.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/fb55/css-what#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/fb55/css-what/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/fb55/css-what.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/domutils@1.5.1", + "name": "domutils", + "version": "1.5.1", + "description": "utilities for working with htmlparser2's dom", + "hashes": [ + { + "alg": "SHA-1", + "content": "dcd8488a26f563d61079e48c9f7b7e32373682cf" + } + ], + "purl": "pkg:npm/domutils@1.5.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/FB55/domutils#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/FB55/domutils/issues" + }, + { + "type": "vcs", + "url": "git://github.com/FB55/domutils.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dom-serializer@0.1.1", + "name": "dom-serializer", + "version": "0.1.1", + "description": "render dom nodes to string", + "hashes": [ + { + "alg": "SHA-512", + "content": "974214d293f32d648705c89e65ba4e2a09089f7b6cdef021ed9b85c9737027125793f7381b08fdc5a4c9c080d54025dac160f4a9bdc8ccc187e6b82541a3b45c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/dom-serializer@0.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/cheeriojs/dom-renderer#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/cheeriojs/dom-renderer/issues" + }, + { + "type": "vcs", + "url": "git://github.com/cheeriojs/dom-renderer.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/domelementtype@1.3.1", + "name": "domelementtype", + "version": "1.3.1", + "description": "all the types of nodes in htmlparser2's dom", + "hashes": [ + { + "alg": "SHA-512", + "content": "052281f934a9329148fc73b108daf53bc68c39367c853de9337190d30fe65919a48440d2149924cb3cf85d0b01578e010a1c0692b0df3328d50f4780d9a155df" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/domelementtype@1.3.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/fb55/domelementtype#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/fb55/domelementtype/issues" + }, + { + "type": "vcs", + "url": "git://github.com/fb55/domelementtype.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/entities@1.1.2", + "name": "entities", + "version": "1.1.2", + "description": "Encode & decode XML/HTML entities with ease", + "hashes": [ + { + "alg": "SHA-512", + "content": "7f62d9318975173bbb61204a83e46844e7a5a4e68dadc1a613d019b9b7837eb08489ae3cde85b8308e15c8577954d1c8810ffbaa6d48d305072b57899e7db2db" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/entities@1.1.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/fb55/entities#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/fb55/entities/issues" + }, + { + "type": "vcs", + "url": "git://github.com/fb55/entities.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/nth-check@1.0.2", + "name": "nth-check", + "version": "1.0.2", + "description": "performant nth-check parser & compiler", + "hashes": [ + { + "alg": "SHA-512", + "content": "59e04e763bbc4a7ccf379bd3509631614c4b797a426953f98b97b42c5f1f83b58e445d9677bc055ffa64d2d61993bb3c4fe27b54bcb40dae89d7ec024f402d1e" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/nth-check@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/fb55/nth-check" + }, + { + "type": "issue-tracker", + "url": "https://github.com/fb55/nth-check/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/fb55/nth-check.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/htmlparser2@3.10.1", + "name": "htmlparser2", + "version": "3.10.1", + "description": "Fast & forgiving HTML/XML/RSS parser", + "hashes": [ + { + "alg": "SHA-512", + "content": "22089e3628d431b903a2fca828e6d4d435219b58b035813f7ee89f1281077ddd6864a64368e3414a46a5ed8d35b21c6c338f51e1768c7467b3dd69c5f547e209" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/htmlparser2@3.10.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/fb55/htmlparser2#readme" + }, + { + "type": "issue-tracker", + "url": "http://github.com/fb55/htmlparser2/issues" + }, + { + "type": "vcs", + "url": "git://github.com/fb55/htmlparser2.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/domhandler@2.4.2", + "name": "domhandler", + "version": "2.4.2", + "description": "handler for htmlparser2 that turns pages into a dom", + "hashes": [ + { + "alg": "SHA-512", + "content": "2622b4e21d07b79bbff347dd2cc084995e3390d87605ca0c141999ffdd56b5867ca955d22a38b0edf5cc8053e71dc49980ea375dd8a71ef9a70d478c7f9478c0" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/domhandler@2.4.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/fb55/DomHandler#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/fb55/DomHandler/issues" + }, + { + "type": "vcs", + "url": "git://github.com/fb55/DomHandler.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.4", + "name": "inherits", + "version": "2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "hashes": [ + { + "alg": "SHA-512", + "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/inherits#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/inherits/issues" + }, + { + "type": "vcs", + "url": "git://github.com/isaacs/inherits.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@3.6.0", + "name": "readable-stream", + "version": "3.6.0", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "hashes": [ + { + "alg": "SHA-512", + "content": "055887cbb2ca793cf8a0d9e470b27e95548beafa6215e5fafddde8487f33096ed4c4fda89dc864faf4c6075e37c6e1631d2ddd7938242a85d7ca65eaca688874" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/readable-stream@3.6.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/nodejs/readable-stream#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/nodejs/readable-stream/issues" + }, + { + "type": "vcs", + "url": "git://github.com/nodejs/readable-stream.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.3.0", + "name": "string_decoder", + "version": "1.3.0", + "description": "The string_decoder module from Node core", + "hashes": [ + { + "alg": "SHA-512", + "content": "864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/nodejs/string_decoder" + }, + { + "type": "issue-tracker", + "url": "https://github.com/nodejs/string_decoder/issues" + }, + { + "type": "vcs", + "url": "git://github.com/nodejs/string_decoder.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.2.1", + "name": "safe-buffer", + "version": "5.2.1", + "description": "Safer Node.js Buffer API", + "hashes": [ + { + "alg": "SHA-512", + "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/feross/safe-buffer" + }, + { + "type": "issue-tracker", + "url": "https://github.com/feross/safe-buffer/issues" + }, + { + "type": "vcs", + "url": "git://github.com/feross/safe-buffer.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/util-deprecate@1.0.2", + "name": "util-deprecate", + "version": "1.0.2", + "description": "The Node.js `util.deprecate()` function with browser support", + "hashes": [ + { + "alg": "SHA-1", + "content": "450d4dc9fa70de732762fbd2d4a28981419a0ccf" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/TooTallNate/util-deprecate" + }, + { + "type": "issue-tracker", + "url": "https://github.com/TooTallNate/util-deprecate/issues" + }, + { + "type": "vcs", + "url": "git://github.com/TooTallNate/util-deprecate.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.assignin@4.2.0", + "name": "lodash.assignin", + "version": "4.2.0", + "description": "The lodash method `_.assignIn` exported as a module.", + "hashes": [ + { + "alg": "SHA-1", + "content": "ba8df5fb841eb0a3e8044232b0e263a8dc6a28a2" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/lodash.assignin@4.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://lodash.com/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lodash/lodash/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lodash/lodash.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.bind@4.2.1", + "name": "lodash.bind", + "version": "4.2.1", + "description": "The lodash method `_.bind` exported as a module.", + "hashes": [ + { + "alg": "SHA-1", + "content": "7ae3017e939622ac31b7d7d7dcb1b34db1690d35" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/lodash.bind@4.2.1", + "externalReferences": [ + { + "type": "website", + "url": "https://lodash.com/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lodash/lodash/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lodash/lodash.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.defaults@4.2.0", + "name": "lodash.defaults", + "version": "4.2.0", + "description": "The lodash method `_.defaults` exported as a module.", + "hashes": [ + { + "alg": "SHA-1", + "content": "d09178716ffea4dde9e5fb7b37f6f0802274580c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/lodash.defaults@4.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://lodash.com/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lodash/lodash/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lodash/lodash.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.filter@4.6.0", + "name": "lodash.filter", + "version": "4.6.0", + "description": "The lodash method `_.filter` exported as a module.", + "hashes": [ + { + "alg": "SHA-1", + "content": "668b1d4981603ae1cc5a6fa760143e480b4c4ace" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/lodash.filter@4.6.0", + "externalReferences": [ + { + "type": "website", + "url": "https://lodash.com/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lodash/lodash/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lodash/lodash.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.flatten@4.4.0", + "name": "lodash.flatten", + "version": "4.4.0", + "description": "The lodash method `_.flatten` exported as a module.", + "hashes": [ + { + "alg": "SHA-1", + "content": "f31c22225a9632d2bbf8e4addbef240aa765a61f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/lodash.flatten@4.4.0", + "externalReferences": [ + { + "type": "website", + "url": "https://lodash.com/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lodash/lodash/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lodash/lodash.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.foreach@4.5.0", + "name": "lodash.foreach", + "version": "4.5.0", + "description": "The lodash method `_.forEach` exported as a module.", + "hashes": [ + { + "alg": "SHA-1", + "content": "1a6a35eace401280c7f06dddec35165ab27e3e53" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/lodash.foreach@4.5.0", + "externalReferences": [ + { + "type": "website", + "url": "https://lodash.com/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lodash/lodash/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lodash/lodash.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.map@4.6.0", + "name": "lodash.map", + "version": "4.6.0", + "description": "The lodash method `_.map` exported as a module.", + "hashes": [ + { + "alg": "SHA-1", + "content": "771ec7839e3473d9c4cde28b19394c3562f4f6d3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/lodash.map@4.6.0", + "externalReferences": [ + { + "type": "website", + "url": "https://lodash.com/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lodash/lodash/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lodash/lodash.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.merge@4.6.2", + "name": "lodash.merge", + "version": "4.6.2", + "description": "The Lodash method `_.merge` exported as a module.", + "hashes": [ + { + "alg": "SHA-512", + "content": "d0aa63a97455beb6320ac5f5b3047f5d32b4bdae9542440ce8c368ecfa96efb0728c086801103c11facfd4de3e2a52a3f184b46540ad453fd852e872603ba321" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/lodash.merge@4.6.2", + "externalReferences": [ + { + "type": "website", + "url": "https://lodash.com/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lodash/lodash/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lodash/lodash.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.pick@4.4.0", + "name": "lodash.pick", + "version": "4.4.0", + "description": "The lodash method `_.pick` exported as a module.", + "hashes": [ + { + "alg": "SHA-1", + "content": "52f05610fff9ded422611441ed1fc123a03001b3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/lodash.pick@4.4.0", + "externalReferences": [ + { + "type": "website", + "url": "https://lodash.com/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lodash/lodash/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lodash/lodash.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.reduce@4.6.0", + "name": "lodash.reduce", + "version": "4.6.0", + "description": "The lodash method `_.reduce` exported as a module.", + "hashes": [ + { + "alg": "SHA-1", + "content": "f1ab6b839299ad48f784abbf476596f03b914d3b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/lodash.reduce@4.6.0", + "externalReferences": [ + { + "type": "website", + "url": "https://lodash.com/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lodash/lodash/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lodash/lodash.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.reject@4.6.0", + "name": "lodash.reject", + "version": "4.6.0", + "description": "The lodash method `_.reject` exported as a module.", + "hashes": [ + { + "alg": "SHA-1", + "content": "80d6492dc1470864bbf583533b651f42a9f52415" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/lodash.reject@4.6.0", + "externalReferences": [ + { + "type": "website", + "url": "https://lodash.com/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lodash/lodash/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lodash/lodash.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.some@4.6.0", + "name": "lodash.some", + "version": "4.6.0", + "description": "The lodash method `_.some` exported as a module.", + "hashes": [ + { + "alg": "SHA-1", + "content": "1bb9f314ef6b8baded13b549169b2a945eb68e4d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/lodash.some@4.6.0", + "externalReferences": [ + { + "type": "website", + "url": "https://lodash.com/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lodash/lodash/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lodash/lodash.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cssom@0.3.8", + "name": "cssom", + "version": "0.3.8", + "description": "CSS Object Model implementation and CSS parser", + "hashes": [ + { + "alg": "SHA-512", + "content": "6f4b461db7de81b84f269c698813d4dac0a48a002ab4cf4ed76d657ba6db3a583257e3721b20a655f27a416f5e463cfc0a935f5843980483081916242f0b0862" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/cssom@0.3.8", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/NV/CSSOM#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/NV/CSSOM/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/NV/CSSOM.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/design-system@1.8.4", + "name": "design-system", + "version": "1.8.4", + "description": "Proton Design system, for all Proton Projects: https://design-system.protontech.ch/", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/design-system@1.8.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ProtonMail/design-system#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ProtonMail/design-system/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/ProtonMail/design-system.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dompurify@1.0.11", + "name": "dompurify", + "version": "1.0.11", + "description": "DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It's written in JavaScript and works in all modern browsers (Safari, Opera (15+), Internet Explorer (10+), Firefox and Chrome - as well as almost anything else using Blink or WebKit). DOMPurify is written by security people who have vast background in web attacks and XSS. Fear not.", + "hashes": [ + { + "alg": "SHA-512", + "content": "5f2c024d766d73fa825f78a9ac3d69224951564fee865f012a9913c6bf99c8c554cd2520ef09105d1069fdeb89e49e66a1ad50bdfa6f68f4153fbd73d4ee7d75" + } + ], + "licenses": [ + { + "license": { + "name": "MPL-2.0 OR Apache-2.0" + } + } + ], + "purl": "pkg:npm/dompurify@1.0.11", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/cure53/DOMPurify" + }, + { + "type": "issue-tracker", + "url": "https://github.com/cure53/DOMPurify/issues" + }, + { + "type": "vcs", + "url": "git://github.com/cure53/DOMPurify.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dropzone@5.7.1", + "name": "dropzone", + "version": "5.7.1", + "description": "Handles drag and drop of files for you.", + "hashes": [ + { + "alg": "SHA-512", + "content": "7aa70969fba930a4655548a166db0b9332e7d365933d430778898fe59b569b711139b0bf76fd79b5ed2aaa7fd7dab10a692a910b4a4d4c75013e0acf59c3f9db" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/dropzone@5.7.1", + "externalReferences": [ + { + "type": "website", + "url": "http://www.dropzonejs.com" + }, + { + "type": "issue-tracker", + "url": "https://gitlab.com/meno/dropzone/issues" + }, + { + "type": "vcs", + "url": "git+https://gitlab.com/meno/dropzone.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fastclick@1.0.6", + "name": "fastclick", + "version": "1.0.6", + "description": "Polyfill to remove click delays on browsers with touch UIs.", + "hashes": [ + { + "alg": "SHA-1", + "content": "161625b27b1a5806405936bda9a2c1926d06be6a" + } + ], + "purl": "pkg:npm/fastclick@1.0.6", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ftlabs/fastclick" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ftlabs/fastclick/issues" + }, + { + "type": "vcs", + "url": "git://github.com/ftlabs/fastclick.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/file-saver@2.0.2", + "name": "file-saver", + "version": "2.0.2", + "description": "An HTML5 saveAs() FileSaver implementation", + "hashes": [ + { + "alg": "SHA-512", + "content": "5b3ddcdd7439c6ba02c5dd46f1bef22f412191fd130bda180ba6ee3c590d9d4f449da3e589f780142c8287e89ec174f2151720d1aea3dc9ec5989b0886584177" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/file-saver@2.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/eligrey/FileSaver.js#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/eligrey/FileSaver.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/eligrey/FileSaver.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-random-values@1.0.1", + "name": "get-random-values", + "version": "1.0.1", + "description": "Cross browser and node.js implementation to generate random values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/get-random-values@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/hi-base32@0.5.0", + "name": "hi-base32", + "version": "0.5.0", + "description": "A simple Base32 encode / decode function for JavaScript supports UTF-8 encoding.", + "hashes": [ + { + "alg": "SHA-512", + "content": "0c3466c52ca862ebe351bf449d776888c0a1059ed9714549b0ae45addde4a8c86e071be665d9c17b29c055f8fbfc409b9fef827a4728a6bbc2feba6b1cf02da3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/hi-base32@0.5.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/emn178/hi-base32" + }, + { + "type": "issue-tracker", + "url": "https://github.com/emn178/hi-base32/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/emn178/hi-base32.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ical.js@1.4.0", + "name": "ical.js", + "version": "1.4.0", + "description": "Javascript parser for ics (rfc5545) and vcard (rfc6350) data", + "hashes": [ + { + "alg": "SHA-512", + "content": "96d1d9b8e14d3637321186f30e08de992ecb588161dafc9d25ece7c501d48777676ab6f1a8e62c58e358b5e05502ad4c10e1e7c171463767ac91945e1dc967ac" + } + ], + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + } + ], + "purl": "pkg:npm/ical.js@1.4.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/mozilla-comm/ical.js#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mozilla-comm/ical.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/mozilla-comm/ical.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/intl-tel-input@12.4.0", + "name": "intl-tel-input", + "version": "12.4.0", + "description": "A jQuery plugin for entering international telephone numbers", + "hashes": [ + { + "alg": "SHA-512", + "content": "b555edf5071ccc8a7d63ac96c437faa7cfb861f994d4d1926cd53793163810f63e415fbe8f80e50b5819ff090d222f284e9c8951664aab3ca7085f58d77e7079" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/intl-tel-input@12.4.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jackocnr/intl-tel-input#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jackocnr/intl-tel-input/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jackocnr/intl-tel-input.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jquery@3.4.1", + "name": "jquery", + "version": "3.4.1", + "description": "JavaScript library for DOM operations", + "hashes": [ + { + "alg": "SHA-512", + "content": "dfaf80741cc22fecbaaa3c394f1ec78337860b30bcd4c0c381a50ff25776ce1c79f0776a5c6a0177eb4776b04c8b28c642cd07c6cfcc2d94eefde1cd249b963f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jquery@3.4.1", + "externalReferences": [ + { + "type": "website", + "url": "https://jquery.com" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jquery/jquery/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jquery/jquery.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jquery-mousewheel@3.1.13", + "name": "jquery-mousewheel", + "version": "3.1.13", + "description": "A jQuery plugin that adds cross-browser mouse wheel support.", + "hashes": [ + { + "alg": "SHA-1", + "content": "06f0335f16e353a695e7206bf50503cb523a6ee5" + } + ], + "purl": "pkg:npm/jquery-mousewheel@3.1.13", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jquery/jquery-mousewheel" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jquery/jquery-mousewheel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jquery/jquery-mousewheel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jquery.payment@3.0.0", + "name": "jquery.payment", + "version": "3.0.0", + "description": "A general purpose library for building credit card forms, validating inputs and formatting numbers.", + "hashes": [ + { + "alg": "SHA-1", + "content": "71b2319547cf430bdaeebd1091b77d6cae5cd505" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jquery.payment@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/stripe/jquery.payment#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/stripe/jquery.payment/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/stripe/jquery.payment.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jszip@3.5.0", + "name": "jszip", + "version": "3.5.0", + "description": "Create, read and edit .zip files with JavaScript http://stuartk.com/jszip", + "hashes": [ + { + "alg": "SHA-512", + "content": "591b6eed33c299878f4759dacdfaedb85db5e9c215a27ff71963af1d2f504796c8c126e7c6d76999aeae9f78f21863611ec2824b39f962993e1240d1bd31a214" + } + ], + "licenses": [ + { + "license": { + "name": "(MIT OR GPL-3.0)" + } + } + ], + "purl": "pkg:npm/jszip@3.5.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/Stuk/jszip#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/Stuk/jszip/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/Stuk/jszip.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lie@3.3.0", + "name": "lie", + "version": "3.3.0", + "description": "A basic but performant promise implementation", + "hashes": [ + { + "alg": "SHA-512", + "content": "51a88c27379646512e8f302ec392e8918d4be5e70d41864a7e6c99f4bef00c76ffa797ad29ac5786884172bc341186f2f86fcd039daf452378377f5dc47008c1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/lie@3.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/calvinmetcalf/lie#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/calvinmetcalf/lie/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/calvinmetcalf/lie.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/immediate@3.0.6", + "name": "immediate", + "version": "3.0.6", + "description": "A cross browser microtask library", + "hashes": [ + { + "alg": "SHA-1", + "content": "9db1dbd0faf8de6fbe0f5dd5e56bb606280de69b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/immediate@3.0.6", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/calvinmetcalf/immediate#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/calvinmetcalf/immediate/issues" + }, + { + "type": "vcs", + "url": "git://github.com/calvinmetcalf/immediate.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pako@1.0.11", + "name": "pako", + "version": "1.0.11", + "description": "zlib port to javascript - fast, modularized, with browser support", + "hashes": [ + { + "alg": "SHA-512", + "content": "e212c1f0fcb8cd971ee6ce3277d5f3a29ab056fff218d855d4197c353982ab5efadc778adbe130553bfe95e19e2f5dc39e1db07dbaa8c153d70883b4cf8b5a63" + } + ], + "licenses": [ + { + "license": { + "name": "(MIT AND Zlib)" + } + } + ], + "purl": "pkg:npm/pako@1.0.11", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/nodeca/pako" + }, + { + "type": "issue-tracker", + "url": "https://github.com/nodeca/pako/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/nodeca/pako.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.7", + "name": "readable-stream", + "version": "2.3.7", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "hashes": [ + { + "alg": "SHA-512", + "content": "11b868f0ae2321b1c0c67bb18bba38d8ead9805fd94cd72c663ea744ac949a484b16af021c8b69fdfcba85066e6663ff9f7c99f550546e9e33cff997f219983f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/readable-stream@2.3.7", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/nodejs/readable-stream#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/nodejs/readable-stream/issues" + }, + { + "type": "vcs", + "url": "git://github.com/nodejs/readable-stream.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/core-util-is@1.0.2", + "name": "core-util-is", + "version": "1.0.2", + "description": "The `util.is*` functions introduced in Node v0.12.", + "hashes": [ + { + "alg": "SHA-1", + "content": "b5fd54220aa2bc5ab57aab7140c940754503c1a7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/core-util-is@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/core-util-is#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/core-util-is/issues" + }, + { + "type": "vcs", + "url": "git://github.com/isaacs/core-util-is.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isarray@1.0.0", + "name": "isarray", + "version": "1.0.0", + "description": "Array#isArray for older browsers", + "hashes": [ + { + "alg": "SHA-1", + "content": "bb935d48582cba168c06834957a54a3e07124f11" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/isarray@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/juliangruber/isarray" + }, + { + "type": "issue-tracker", + "url": "https://github.com/juliangruber/isarray/issues" + }, + { + "type": "vcs", + "url": "git://github.com/juliangruber/isarray.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/process-nextick-args@2.0.1", + "name": "process-nextick-args", + "version": "2.0.1", + "description": "process.nextTick but always with args", + "hashes": [ + { + "alg": "SHA-512", + "content": "de8b943a9421b60adb39ad7b27bfaec4e4e92136166863fbfc0868477f80fbfd5ef6c92bcde9468bf757cc4632bdbc6e6c417a5a7db2a6c7132a22891459f56a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/process-nextick-args@2.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/calvinmetcalf/process-nextick-args" + }, + { + "type": "issue-tracker", + "url": "https://github.com/calvinmetcalf/process-nextick-args/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/calvinmetcalf/process-nextick-args.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "hashes": [ + { + "alg": "SHA-512", + "content": "19dd94641243917958ec66c9c5fb04f3f9ef2a45045351b7f1cd6c88de903fa6bd3d3f4c98707c1a7a6c71298c252a05f0b388aedf2e77fc0fb688f2b381bafa" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/feross/safe-buffer" + }, + { + "type": "issue-tracker", + "url": "https://github.com/feross/safe-buffer/issues" + }, + { + "type": "vcs", + "url": "git://github.com/feross/safe-buffer.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "hashes": [ + { + "alg": "SHA-512", + "content": "9ff4a19ef0e2e851db6d57ef8aba3e5a88e2173bfeb3c30f30705ccd578f7d4a4324bc282d3d21b759786300426e2f29240bde104767907c8fc933ff9b345fc2" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/nodejs/string_decoder" + }, + { + "type": "issue-tracker", + "url": "https://github.com/nodejs/string_decoder/issues" + }, + { + "type": "vcs", + "url": "git://github.com/nodejs/string_decoder.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/set-immediate-shim@1.0.1", + "name": "set-immediate-shim", + "version": "1.0.1", + "description": "Simple setImmediate shim", + "hashes": [ + { + "alg": "SHA-1", + "content": "4b2b1b27eb808a9f8dcc481a58e5e56f599f3f61" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/set-immediate-shim@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/set-immediate-shim#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/set-immediate-shim/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/set-immediate-shim.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/juice@5.2.0", + "name": "juice", + "version": "5.2.0", + "description": "Inlines css into html source", + "hashes": [ + { + "alg": "SHA-512", + "content": "d25e866664f779f7b1c9a69acb749c84a4f9906df5d4de7d4c414fe657ef132d27cfd48daa3c77d75a652776f88f37bb6abb260ec88740b87fc6702e9341c54d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/juice@5.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/Automattic/juice#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/Automattic/juice/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/Automattic/juice.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/commander@2.20.3", + "name": "commander", + "version": "2.20.3", + "description": "the complete solution for node.js command-line programs", + "hashes": [ + { + "alg": "SHA-512", + "content": "1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/commander@2.20.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/tj/commander.js#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/tj/commander.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/tj/commander.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cross-spawn@6.0.5", + "name": "cross-spawn", + "version": "6.0.5", + "description": "Cross platform child_process#spawn and child_process#spawnSync", + "hashes": [ + { + "alg": "SHA-512", + "content": "79354bac14adedf8db0f2833f34e69327b2d22cd954c1364466d2ac5977e33b0395c377155158ee4cc460576618d8e1ca8b60b76dac6a917fc9813e6cf04a959" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/cross-spawn@6.0.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/moxystudio/node-cross-spawn" + }, + { + "type": "issue-tracker", + "url": "https://github.com/moxystudio/node-cross-spawn/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/moxystudio/node-cross-spawn.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/nice-try@1.0.5", + "name": "nice-try", + "version": "1.0.5", + "description": "Tries to execute a function and discards any error that occurs", + "hashes": [ + { + "alg": "SHA-512", + "content": "d67878e5d79e6f9a25358ede5fcd8190f3bb492c51e524982623d3ad3745515630025f0228c03937d3e34d89078918e2b15731710d475dd2e1c76ab1c49ccb35" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/nice-try@1.0.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/electerious/nice-try" + }, + { + "type": "issue-tracker", + "url": "https://github.com/electerious/nice-try/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/electerious/nice-try.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-key@2.0.1", + "name": "path-key", + "version": "2.0.1", + "description": "Get the PATH environment variable key cross-platform", + "hashes": [ + { + "alg": "SHA-1", + "content": "411cadb574c5a140d3a4b1910d40d80cc9f40b40" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/path-key@2.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/path-key#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/path-key/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/path-key.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver@5.7.1", + "name": "semver", + "version": "5.7.1", + "description": "The semantic version parser used by npm.", + "hashes": [ + { + "alg": "SHA-512", + "content": "b1ab9a0dffcf65d560acb4cd60746da576b589188a71a79b88a435049769425587da50af7b141d5f9e6c9cf1722bb433a6e76a6c2234a9715f39ab0777234319" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/semver@5.7.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/npm/node-semver#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/npm/node-semver/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/npm/node-semver.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/shebang-command@1.2.0", + "name": "shebang-command", + "version": "1.2.0", + "description": "Get the command from a shebang", + "hashes": [ + { + "alg": "SHA-1", + "content": "44aac65b695b03398968c39f363fee5deafdf1ea" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/shebang-command@1.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/kevva/shebang-command#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/kevva/shebang-command/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/kevva/shebang-command.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/shebang-regex@1.0.0", + "name": "shebang-regex", + "version": "1.0.0", + "description": "Regular expression for matching a shebang", + "hashes": [ + { + "alg": "SHA-1", + "content": "da42f49740c0b42db2ca9728571cb190c98efea3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/shebang-regex@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/shebang-regex#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/shebang-regex/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/shebang-regex.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/which@1.3.1", + "name": "which", + "version": "1.3.1", + "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", + "hashes": [ + { + "alg": "SHA-512", + "content": "1f125d616ab53132106c9de7c3472ab2c1e84cd536ebb2a5ac3b866755989710d2b54b4a52139a266875d76fd36661f1c547ee26a3d748e9bbb43c9ab3439221" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/which@1.3.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/node-which#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/node-which/issues" + }, + { + "type": "vcs", + "url": "git://github.com/isaacs/node-which.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isexe@2.0.0", + "name": "isexe", + "version": "2.0.0", + "description": "Minimal module to check if a file is executable.", + "hashes": [ + { + "alg": "SHA-1", + "content": "e8fbf374dc556ff8947a10dcb0572d633f2cfa10" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/isexe@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/isexe#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/isexe/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/isaacs/isexe.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/deep-extend@0.6.0", + "name": "deep-extend", + "version": "0.6.0", + "description": "Recursive object extending", + "hashes": [ + { + "alg": "SHA-512", + "content": "2ce1f120e68f61d1e5251b4241f0c8559b5fc3fb9f33cfab563eb8f51207cdc9bfbc6c1045716de8e3ea2055ac9b65c432b34812d591eb8b18d4b10a0f6bc038" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/deep-extend@0.6.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/unclechu/node-deep-extend" + }, + { + "type": "issue-tracker", + "url": "https://github.com/unclechu/node-deep-extend/issues" + }, + { + "type": "vcs", + "url": "git://github.com/unclechu/node-deep-extend.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mensch@0.3.4", + "name": "mensch", + "version": "0.3.4", + "description": "A decent CSS parser", + "hashes": [ + { + "alg": "SHA-512", + "content": "200785bdc3a757d574624f9b161611d3b3b7c8d8a76bd00d20de4ca1704a609fd12d83eeaddd9dd32c35e0c0e1a6bf7f9a89a9d16a1f4f56cf521de1933762fe" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/mensch@0.3.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/brettstimmerman/mensch" + }, + { + "type": "issue-tracker", + "url": "https://github.com/brettstimmerman/mensch/issues" + }, + { + "type": "vcs", + "url": "git://github.com/brettstimmerman/mensch.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/slick@1.12.2", + "name": "slick", + "version": "1.12.2", + "description": "Standalone CSS Selector Finder and Parser.", + "hashes": [ + { + "alg": "SHA-1", + "content": "bd048ddb74de7d1ca6915faa4a57570b3550c2d7" + } + ], + "licenses": [ + { + "license": { + "name": "MIT (http://mootools.net/license.txt)" + } + } + ], + "purl": "pkg:npm/slick@1.12.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/kamicane/slick" + }, + { + "type": "issue-tracker", + "url": "https://github.com/kamicane/slick/issues" + }, + { + "type": "vcs", + "url": "git://github.com/kamicane/slick.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/web-resource-inliner@4.3.4", + "name": "web-resource-inliner", + "version": "4.3.4", + "description": "Inlines img, script and link tags into the same file.", + "hashes": [ + { + "alg": "SHA-512", + "content": "6a054081184e3a2e06565bca2b7e28336ded0e01fcdfdd077cb9d96361d997c38507028dbd42641fbb7cf404f68a5b903fcc3d547000297e99f0437bffdb6a28" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/web-resource-inliner@4.3.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jrit/web-resource-inliner#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jrit/web-resource-inliner/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jrit/web-resource-inliner.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/async@3.2.0", + "name": "async", + "version": "3.2.0", + "description": "Higher-order functions and common patterns for asynchronous code", + "hashes": [ + { + "alg": "SHA-512", + "content": "4d1da61191553a3da92d2b58c4b86ded3c9fb91cdac9d7e9c6bde4f51a47233320c3b03ae1dcec76a0b11f5589c907687bc4f5d270d777dc271228268ae1c867" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/async@3.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://caolan.github.io/async/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/caolan/async/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/caolan/async.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chalk@2.4.2", + "name": "chalk", + "version": "2.4.2", + "description": "Terminal string styling done right", + "hashes": [ + { + "alg": "SHA-512", + "content": "32d8be7fd96924d730178b5657cfcead34ed1758198be7fc16a97201da2eada95c156150585dbe3600874a18e409bf881412eaf5bb99c04d71724414e29792b9" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/chalk@2.4.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/chalk/chalk#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/chalk/chalk/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/chalk/chalk.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-styles@3.2.1", + "name": "ansi-styles", + "version": "3.2.1", + "description": "ANSI escape codes for styling strings in the terminal", + "hashes": [ + { + "alg": "SHA-512", + "content": "553d1923a91945d4e1f18c89c3748c6d89bfbbe36a7ec03112958ed0f7fdb2af3f7bde16c713a93cac7d151d459720ad3950cd390fbc9ed96a17189173eaf9a8" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ansi-styles@3.2.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/chalk/ansi-styles#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/chalk/ansi-styles/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/chalk/ansi-styles.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-convert@1.9.3", + "name": "color-convert", + "version": "1.9.3", + "description": "Plain color conversion functions", + "hashes": [ + { + "alg": "SHA-512", + "content": "41f014b5dfaf15d02d150702f020b262dd5f616c52a8088ad9c483eb30c1f0dddca6c10102f471a7dcce1a0e86fd21c7258013f3cfdacff22e0c600bb0d55b1a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/color-convert@1.9.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/Qix-/color-convert#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/Qix-/color-convert/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/Qix-/color-convert.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-name@1.1.3", + "name": "color-name", + "version": "1.1.3", + "description": "A list of color names and its values", + "hashes": [ + { + "alg": "SHA-1", + "content": "a7d0558bd89c42f795dd42328f740831ca53bc25" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/color-name@1.1.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/dfcreative/color-name" + }, + { + "type": "issue-tracker", + "url": "https://github.com/dfcreative/color-name/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/dfcreative/color-name.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/escape-string-regexp@1.0.5", + "name": "escape-string-regexp", + "version": "1.0.5", + "description": "Escape RegExp special characters", + "hashes": [ + { + "alg": "SHA-1", + "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/escape-string-regexp@1.0.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/escape-string-regexp#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/escape-string-regexp/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/escape-string-regexp.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-color@5.5.0", + "name": "supports-color", + "version": "5.5.0", + "description": "Detect whether a terminal supports color", + "hashes": [ + { + "alg": "SHA-512", + "content": "423563c1d5c8b78d3c308880a825f8a142ac814d84a801b3b363e9926e1a4186e39be644584716e127c5353af8b8c35999ad1ecb87f99602eb901d1a5f440ca3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/supports-color@5.5.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/chalk/supports-color#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/chalk/supports-color/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/chalk/supports-color.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-flag@3.0.0", + "name": "has-flag", + "version": "3.0.0", + "description": "Check if argv has a specific flag", + "hashes": [ + { + "alg": "SHA-1", + "content": "b5d454dc2199ae225699f3467e5a07f3b955bafd" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/has-flag@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/has-flag#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/has-flag/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/has-flag.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/datauri@2.0.0", + "name": "datauri", + "version": "2.0.0", + "description": "Create DataURI scheme easily", + "hashes": [ + { + "alg": "SHA-512", + "content": "cd2d8749ff692395cf94d66022a260ff0089a5e72053f1c0e84feebf611f6969d6d4489318b7f2fc47b14c8b02f5cf7dca808e4d796a79e5a4e059024ae3b7fe" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/datauri@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/data-uri/datauri#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/data-uri/datauri/issues" + }, + { + "type": "vcs", + "url": "git://github.com/data-uri/datauri.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/image-size@0.7.5", + "name": "image-size", + "version": "0.7.5", + "description": "get dimensions of any image file", + "hashes": [ + { + "alg": "SHA-512", + "content": "1e2caffa65c77c510fecbcd42ff96583d470171c58fa8f4ddc954b21e1b913b88520501a971bd153d519b6105d6031159f31cc8239ca24f3e96b2e4159fd60f6" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/image-size@0.7.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/image-size/image-size#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/image-size/image-size/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/image-size/image-size.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mimer@1.1.0", + "name": "mimer", + "version": "1.1.0", + "description": "A simple Mime type getter", + "hashes": [ + { + "alg": "SHA-512", + "content": "cbd7557f2dae8b2710bc33620185bace9e3d6611655c332be707dd3a231b77318cff43792cd47a1d3527dee9fe59441c3349286b0f053131b56ede449c725dbd" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/mimer@1.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/heldr/mimer#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/heldr/mimer/issues" + }, + { + "type": "vcs", + "url": "git://github.com/heldr/mimer.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/htmlparser2@4.1.0", + "name": "htmlparser2", + "version": "4.1.0", + "description": "Fast & forgiving HTML/XML/RSS parser", + "hashes": [ + { + "alg": "SHA-512", + "content": "e330ead5ad73844e2042ca3f7392cfd4eb6b8584e7717352a6f258b56241b570044cf94c7e2dc814d8c6b906d82ee558e1947440ca9156fa383ddcbd28bc8ff1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/htmlparser2@4.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/fb55/htmlparser2#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/fb55/htmlparser2/issues" + }, + { + "type": "vcs", + "url": "git://github.com/fb55/htmlparser2.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/domelementtype@2.0.1", + "name": "domelementtype", + "version": "2.0.1", + "description": "all the types of nodes in htmlparser2's dom", + "hashes": [ + { + "alg": "SHA-512", + "content": "e47387503b1865657c14658dd0d8dbaff467edffde592422d6fefe1ec515c17827f2759694beb8cca0e44b49fc6664379a558e32e5ce9d1fbb371ff9b4c3b901" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/domelementtype@2.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/fb55/domelementtype#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/fb55/domelementtype/issues" + }, + { + "type": "vcs", + "url": "git://github.com/fb55/domelementtype.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/domhandler@3.0.0", + "name": "domhandler", + "version": "3.0.0", + "description": "Handler for htmlparser2 that turns pages into a dom", + "hashes": [ + { + "alg": "SHA-512", + "content": "78a2dd239bfd9baee46d741b252367d738e1d120f3bf35955ad5fea8423778c8d9c3c75a1fd93cae58f515963d99e98fc238ac91015b7bbbc755524802aa0487" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/domhandler@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/fb55/DomHandler#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/fb55/DomHandler/issues" + }, + { + "type": "vcs", + "url": "git://github.com/fb55/DomHandler.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/domutils@2.1.0", + "name": "domutils", + "version": "2.1.0", + "description": "Utilities for working with htmlparser2's dom", + "hashes": [ + { + "alg": "SHA-512", + "content": "083f4cd039b589a1df43547f4c8fb3dff256a7fa60b9bd23e23210287f3d011478013015da76da3904b95f153d99a24fe631da3dd0c3412107b84d949a95132a" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/domutils@2.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/fb55/domutils#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/fb55/domutils/issues" + }, + { + "type": "vcs", + "url": "git://github.com/fb55/domutils.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dom-serializer@0.2.2", + "name": "dom-serializer", + "version": "0.2.2", + "description": "render dom nodes to string", + "hashes": [ + { + "alg": "SHA-512", + "content": "dbfc4f6f7391b10e369c76224ae9d79038cf2c16848ffc53c143b807b5c26504d193b101b5338f6b2821d74600021d8e23542ba7a3567e9021cecc23d3276df6" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/dom-serializer@0.2.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/cheeriojs/dom-renderer#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/cheeriojs/dom-renderer/issues" + }, + { + "type": "vcs", + "url": "git://github.com/cheeriojs/dom-renderer.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/entities@2.0.3", + "name": "entities", + "version": "2.0.3", + "description": "Encode & decode XML and HTML entities with ease", + "hashes": [ + { + "alg": "SHA-512", + "content": "332a19d238272ef0765f72e0e47aa91669f59326c38887c44262b34dbe5aa6be7545bf93dca766322a9aef44fe6e11a7cafedb43a58c8f640c1e918c9a5ad461" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/entities@2.0.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/fb55/entities#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/fb55/entities/issues" + }, + { + "type": "vcs", + "url": "git://github.com/fb55/entities.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.unescape@4.0.1", + "name": "lodash.unescape", + "version": "4.0.1", + "description": "The lodash method `_.unescape` exported as a module.", + "hashes": [ + { + "alg": "SHA-1", + "content": "bf2249886ce514cda112fae9218cdc065211fc9c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/lodash.unescape@4.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://lodash.com/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lodash/lodash/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lodash/lodash.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/request@2.88.2", + "name": "request", + "version": "2.88.2", + "description": "Simplified HTTP request client.", + "hashes": [ + { + "alg": "SHA-512", + "content": "32cbed3ab7c6f5972b3b0016f908be17a1db0f40965c487da2eefbb8e6fb14cd963e1c13eec98cf37dcfcda9e124bb205e337cf48afa5763dccd7367329c0a87" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/request@2.88.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/request/request#readme" + }, + { + "type": "issue-tracker", + "url": "http://github.com/request/request/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/request/request.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aws-sign2@0.7.0", + "name": "aws-sign2", + "version": "0.7.0", + "description": "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor in request, now a standalone module.", + "hashes": [ + { + "alg": "SHA-1", + "content": "b46e890934a9591f2d2f6f86d7e6a9f1b3fe76a8" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/aws-sign2@0.7.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/mikeal/aws-sign#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mikeal/aws-sign/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/mikeal/aws-sign.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aws4@1.10.0", + "name": "aws4", + "version": "1.10.0", + "description": "Signs and prepares requests using AWS Signature Version 4", + "hashes": [ + { + "alg": "SHA-512", + "content": "dd80e2bb7e3b9ad56d8e9c95deee6456a40b3f6e36734eb3c033a0a5e467c9b99795862c2dbb53ad40549bc8bcb2b38db7e156a1b9796a26e7535d37d0f79eb8" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/aws4@1.10.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/mhart/aws4#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mhart/aws4/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/mhart/aws4.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/caseless@0.12.0", + "name": "caseless", + "version": "0.12.0", + "description": "Caseless object set/get/has, very useful when working with HTTP headers.", + "hashes": [ + { + "alg": "SHA-1", + "content": "1b681c21ff84033c826543090689420d187151dc" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/caseless@0.12.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/mikeal/caseless#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mikeal/caseless/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/mikeal/caseless.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/combined-stream@1.0.8", + "name": "combined-stream", + "version": "1.0.8", + "description": "A stream that emits multiple other streams one after another.", + "hashes": [ + { + "alg": "SHA-512", + "content": "1503783117ee25e1dfedc05b04c2455e12920eafb690002b06599106f72f144e410751d9297b5214048385d973f73398c3187c943767be630e7bffb971da0476" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/combined-stream@1.0.8", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/felixge/node-combined-stream" + }, + { + "type": "issue-tracker", + "url": "https://github.com/felixge/node-combined-stream/issues" + }, + { + "type": "vcs", + "url": "git://github.com/felixge/node-combined-stream.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/delayed-stream@1.0.0", + "name": "delayed-stream", + "version": "1.0.0", + "description": "Buffers events from a stream until you are ready to handle them.", + "hashes": [ + { + "alg": "SHA-1", + "content": "df3ae199acadfb7d440aaae0b29e2272b24ec619" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/delayed-stream@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/felixge/node-delayed-stream" + }, + { + "type": "issue-tracker", + "url": "https://github.com/felixge/node-delayed-stream/issues" + }, + { + "type": "vcs", + "url": "git://github.com/felixge/node-delayed-stream.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/extend@3.0.2", + "name": "extend", + "version": "3.0.2", + "description": "Port of jQuery.extend for node.js and the browser", + "hashes": [ + { + "alg": "SHA-512", + "content": "7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/extend@3.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/justmoon/node-extend#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/justmoon/node-extend/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/justmoon/node-extend.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/forever-agent@0.6.1", + "name": "forever-agent", + "version": "0.6.1", + "description": "HTTP Agent that keeps socket connections alive between keep-alive requests. Formerly part of mikeal/request, now a standalone module.", + "hashes": [ + { + "alg": "SHA-1", + "content": "fbc71f0c41adeb37f96c577ad1ed42d8fdacca91" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/forever-agent@0.6.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/mikeal/forever-agent#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mikeal/forever-agent/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/mikeal/forever-agent.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/form-data@2.3.3", + "name": "form-data", + "version": "2.3.3", + "description": "A library to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.", + "hashes": [ + { + "alg": "SHA-512", + "content": "d652ca07632edda18fd50ff67823b1d1f35b44c7bb5ddc24b703abba17eaa9dd2b2095b03780e1f84de1acf4a50c25e7491ed4b59d4ddfcad55e6fbaf8c12125" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/form-data@2.3.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/form-data/form-data#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/form-data/form-data/issues" + }, + { + "type": "vcs", + "url": "git://github.com/form-data/form-data.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asynckit@0.4.0", + "name": "asynckit", + "version": "0.4.0", + "description": "Minimal async jobs utility library, with streams support", + "hashes": [ + { + "alg": "SHA-1", + "content": "c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/asynckit@0.4.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/alexindigo/asynckit#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/alexindigo/asynckit/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/alexindigo/asynckit.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-types@2.1.27", + "name": "mime-types", + "version": "2.1.27", + "description": "The ultimate javascript content-type utility.", + "hashes": [ + { + "alg": "SHA-512", + "content": "24886a9c26ac23dc83f92b2692ab870714d212e65d417e41b909d2d9573ba6e41043ef3288fe40639b9686976fe182f854ce5cea296289858f809fe72502e9ef" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/mime-types@2.1.27", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jshttp/mime-types#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jshttp/mime-types/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jshttp/mime-types.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-db@1.44.0", + "name": "mime-db", + "version": "1.44.0", + "description": "Media Type Database", + "hashes": [ + { + "alg": "SHA-512", + "content": "fcd3937cbaec3c155e1fb62d14f82c556bdeb8bfb84a38d8c5a435c6d33528c163ec77719419717b234bce1c89571eebe2b64624067fea590a0a2b5273f366a6" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/mime-db@1.44.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jshttp/mime-db#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jshttp/mime-db/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jshttp/mime-db.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/har-validator@5.1.3", + "name": "har-validator", + "version": "5.1.3", + "description": "Extremely fast HTTP Archive (HAR) validator using JSON Schema", + "hashes": [ + { + "alg": "SHA-512", + "content": "b0dbce0b311036bfeaaef260737506fe40f842d947c9caf3c12fba99f4ebad2abdec1bda61c3d9648d594aa1923d1ef70b19f82ca4c3e0fb6d4707d4ee35aae6" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/har-validator@5.1.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ahmadnassri/node-har-validator" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ahmadnassri/node-har-validator/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/ahmadnassri/node-har-validator.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ajv@6.12.3", + "name": "ajv", + "version": "6.12.3", + "description": "Another JSON Schema Validator", + "hashes": [ + { + "alg": "SHA-512", + "content": "e0ad1c2b72f586caa4f7121bdb3f6fb3f5d4f8f18967d3cda494434bd60bce635d5fa8e654f7da98bbd326bd1a0c0bac9c7c821cee8c8f396402c82daa9f6d78" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv@6.12.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ajv-validator/ajv" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ajv-validator/ajv/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/ajv-validator/ajv.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-deep-equal@3.1.3", + "name": "fast-deep-equal", + "version": "3.1.3", + "description": "Fast deep equal", + "hashes": [ + { + "alg": "SHA-512", + "content": "7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fast-deep-equal@3.1.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/epoberezkin/fast-deep-equal#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/epoberezkin/fast-deep-equal/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/epoberezkin/fast-deep-equal.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-json-stable-stringify@2.1.0", + "name": "fast-json-stable-stringify", + "version": "2.1.0", + "description": "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify", + "hashes": [ + { + "alg": "SHA-512", + "content": "96177fc05f8b93df076684c2b6556b687b5f8795d88a32236a55dc93bb1a52db9a9d20f22ccc671e149710326a1f10fb9ac47c0f4b829aa964c23095f31bf01f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fast-json-stable-stringify@2.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/epoberezkin/fast-json-stable-stringify" + }, + { + "type": "issue-tracker", + "url": "https://github.com/epoberezkin/fast-json-stable-stringify/issues" + }, + { + "type": "vcs", + "url": "git://github.com/epoberezkin/fast-json-stable-stringify.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema-traverse@0.4.1", + "name": "json-schema-traverse", + "version": "0.4.1", + "description": "Traverse JSON Schema passing each schema object to callback", + "hashes": [ + { + "alg": "SHA-512", + "content": "c5b6c21f9742614e53f0b704861ba1ec727cf075ee5b7aac237634cce64529f6441dca5688753f271ce4eb6f41aec69bfe63221d0b62f7030ffbce3944f7b756" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/json-schema-traverse@0.4.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/epoberezkin/json-schema-traverse#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/epoberezkin/json-schema-traverse/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/epoberezkin/json-schema-traverse.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uri-js@4.2.2", + "name": "uri-js", + "version": "4.2.2", + "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", + "hashes": [ + { + "alg": "SHA-512", + "content": "298f45ae68abaa5f755f64208ebcb459de18f984ddadd661792f13170be46cb59ffc6e4a3490c287aa4a2f939972d116e3ed0169ae6274ad9942e10b4703f39d" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/uri-js@4.2.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/garycourt/uri-js" + }, + { + "type": "issue-tracker", + "url": "https://github.com/garycourt/uri-js/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/garycourt/uri-js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/punycode@2.1.1", + "name": "punycode", + "version": "2.1.1", + "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", + "hashes": [ + { + "alg": "SHA-512", + "content": "5d1b118dd7fe8f99a5fb2ffa18a1cf65bac5ffca766206b424fb5da93218d977b9a2124f0fdb1a0c924b3efa7df8d481a6b56f7af7576726e78f672ff0e11dd0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/punycode@2.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://mths.be/punycode" + }, + { + "type": "issue-tracker", + "url": "https://github.com/bestiejs/punycode.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/bestiejs/punycode.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/har-schema@2.0.0", + "name": "har-schema", + "version": "2.0.0", + "description": "JSON Schema for HTTP Archive (HAR)", + "hashes": [ + { + "alg": "SHA-1", + "content": "a94c2224ebcac04782a0d9035521f24735b7ec92" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/har-schema@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ahmadnassri/har-schema" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ahmadnassri/har-schema/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/ahmadnassri/har-schema.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-signature@1.2.0", + "name": "http-signature", + "version": "1.2.0", + "description": "Reference implementation of Joyent's HTTP Signature scheme.", + "hashes": [ + { + "alg": "SHA-1", + "content": "9aecd925114772f3d95b65a60abb8f7c18fbace1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/http-signature@1.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/joyent/node-http-signature/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/joyent/node-http-signature/issues" + }, + { + "type": "vcs", + "url": "git://github.com/joyent/node-http-signature.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/assert-plus@1.0.0", + "name": "assert-plus", + "version": "1.0.0", + "description": "Extra assertions on top of node's assert module", + "hashes": [ + { + "alg": "SHA-1", + "content": "f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/assert-plus@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/mcavage/node-assert-plus#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mcavage/node-assert-plus/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/mcavage/node-assert-plus.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsprim@1.4.1", + "name": "jsprim", + "version": "1.4.1", + "description": "utilities for primitive JavaScript types", + "hashes": [ + { + "alg": "SHA-1", + "content": "313e66bc1e5cc06e438bc1b7499c2e5c56acb6a2" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jsprim@1.4.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/joyent/node-jsprim#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/joyent/node-jsprim/issues" + }, + { + "type": "vcs", + "url": "git://github.com/joyent/node-jsprim.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/extsprintf@1.3.0", + "name": "extsprintf", + "version": "1.3.0", + "description": "extended POSIX-style sprintf", + "hashes": [ + { + "alg": "SHA-1", + "content": "96918440e3041a7a414f8c52e3c574eb3c3e1e05" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/extsprintf@1.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/davepacheco/node-extsprintf#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/davepacheco/node-extsprintf/issues" + }, + { + "type": "vcs", + "url": "git://github.com/davepacheco/node-extsprintf.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema@0.2.3", + "name": "json-schema", + "version": "0.2.3", + "description": "JSON Schema validation and specifications", + "hashes": [ + { + "alg": "SHA-1", + "content": "b480c892e59a2f05954ce727bd3f2a4e882f9e13" + } + ], + "purl": "pkg:npm/json-schema@0.2.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/kriszyp/json-schema#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/kriszyp/json-schema/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/kriszyp/json-schema.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/verror@1.10.0", + "name": "verror", + "version": "1.10.0", + "description": "richer JavaScript errors", + "hashes": [ + { + "alg": "SHA-1", + "content": "3a105ca17053af55d6e270c1f8288682e18da400" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/verror@1.10.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/davepacheco/node-verror#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/davepacheco/node-verror/issues" + }, + { + "type": "vcs", + "url": "git://github.com/davepacheco/node-verror.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sshpk@1.16.1", + "name": "sshpk", + "version": "1.16.1", + "description": "A library for finding and using SSH public keys", + "hashes": [ + { + "alg": "SHA-512", + "content": "1d75ea554abbfa970a78baaa663ea61c550cbd7b4e26dd6ea14c74f69156eb4d758a74ccc6a23c040f0f33de66cab232c8ac1d9f38dd1632e213a2813d5b4922" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/sshpk@1.16.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/arekinath/node-sshpk#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/arekinath/node-sshpk/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/joyent/node-sshpk.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asn1@0.2.4", + "name": "asn1", + "version": "0.2.4", + "description": "Contains parsers and serializers for ASN.1 (currently BER only)", + "hashes": [ + { + "alg": "SHA-512", + "content": "8f1c334292d08d29965e0c1a09913d373fa09401b4d721754275a06e11b01c8e40e85448118e8856ab478487a91ea23bfe4c84c9011a8010b998110594862f76" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/asn1@0.2.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/joyent/node-asn1#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/joyent/node-asn1/issues" + }, + { + "type": "vcs", + "url": "git://github.com/joyent/node-asn1.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safer-buffer@2.1.2", + "name": "safer-buffer", + "version": "2.1.2", + "description": "Modern Buffer API polyfill without footguns", + "hashes": [ + { + "alg": "SHA-512", + "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/safer-buffer@2.1.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ChALkeR/safer-buffer#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ChALkeR/safer-buffer/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/ChALkeR/safer-buffer.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2", + "name": "bcrypt-pbkdf", + "version": "1.0.2", + "description": "Port of the OpenBSD bcrypt_pbkdf function to pure JS", + "hashes": [ + { + "alg": "SHA-1", + "content": "a4301d389b6a43f9b67ff3ca11a3f6637e360e9e" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/bcrypt-pbkdf@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/joyent/node-bcrypt-pbkdf#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/joyent/node-bcrypt-pbkdf/issues" + }, + { + "type": "vcs", + "url": "git://github.com/joyent/node-bcrypt-pbkdf.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tweetnacl@0.14.5", + "name": "tweetnacl", + "version": "0.14.5", + "description": "Port of TweetNaCl cryptographic library to JavaScript", + "hashes": [ + { + "alg": "SHA-1", + "content": "5ae68177f192d4456269d108afa93ff8743f4f64" + } + ], + "licenses": [ + { + "license": { + "id": "Unlicense" + } + } + ], + "purl": "pkg:npm/tweetnacl@0.14.5", + "externalReferences": [ + { + "type": "website", + "url": "https://tweetnacl.js.org" + }, + { + "type": "issue-tracker", + "url": "https://github.com/dchest/tweetnacl-js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/dchest/tweetnacl-js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dashdash@1.14.1", + "name": "dashdash", + "version": "1.14.1", + "description": "A light, featureful and explicit option parsing library.", + "hashes": [ + { + "alg": "SHA-1", + "content": "853cfa0f7cbe2fed5de20326b8dd581035f6e2f0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/dashdash@1.14.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/trentm/node-dashdash#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/trentm/node-dashdash/issues" + }, + { + "type": "vcs", + "url": "git://github.com/trentm/node-dashdash.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ecc-jsbn@0.1.2", + "name": "ecc-jsbn", + "version": "0.1.2", + "description": "ECC JS code based on JSBN", + "hashes": [ + { + "alg": "SHA-1", + "content": "3a83a904e54353287874c564b7549386849a98c9" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ecc-jsbn@0.1.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/quartzjer/ecc-jsbn" + }, + { + "type": "issue-tracker", + "url": "https://github.com/quartzjer/ecc-jsbn/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/quartzjer/ecc-jsbn.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsbn@0.1.1", + "name": "jsbn", + "version": "0.1.1", + "description": "The jsbn library is a fast, portable implementation of large-number math in pure JavaScript, enabling public-key crypto and other applications on desktop and mobile browsers.", + "hashes": [ + { + "alg": "SHA-1", + "content": "a5e654c2e5a2deb5f201d96cefbca80c0ef2f513" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jsbn@0.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/andyperlitch/jsbn#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/andyperlitch/jsbn/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/andyperlitch/jsbn.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/getpass@0.1.7", + "name": "getpass", + "version": "0.1.7", + "description": "getpass for node.js", + "hashes": [ + { + "alg": "SHA-1", + "content": "5eff8e3e684d569ae4cb2b1282604e8ba62149fa" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/getpass@0.1.7", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/arekinath/node-getpass#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/arekinath/node-getpass/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/arekinath/node-getpass.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-typedarray@1.0.0", + "name": "is-typedarray", + "version": "1.0.0", + "description": "Detect whether or not an object is a Typed Array", + "hashes": [ + { + "alg": "SHA-1", + "content": "e479c80858df0c1b11ddda6940f96011fcda4a9a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-typedarray@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/hughsk/is-typedarray" + }, + { + "type": "issue-tracker", + "url": "https://github.com/hughsk/is-typedarray/issues" + }, + { + "type": "vcs", + "url": "git://github.com/hughsk/is-typedarray.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isstream@0.1.2", + "name": "isstream", + "version": "0.1.2", + "description": "Determine if an object is a Stream", + "hashes": [ + { + "alg": "SHA-1", + "content": "47e63f7af55afa6f92e1500e690eb8b8529c099a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/isstream@0.1.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/rvagg/isstream" + }, + { + "type": "issue-tracker", + "url": "https://github.com/rvagg/isstream/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/rvagg/isstream.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-stringify-safe@5.0.1", + "name": "json-stringify-safe", + "version": "5.0.1", + "description": "Like JSON.stringify, but doesn't blow up on circular refs.", + "hashes": [ + { + "alg": "SHA-1", + "content": "1296a2d58fd45f19a0f6ce01d65701e2c735b6eb" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/json-stringify-safe@5.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/json-stringify-safe" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/json-stringify-safe/issues" + }, + { + "type": "vcs", + "url": "git://github.com/isaacs/json-stringify-safe.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/oauth-sign@0.9.0", + "name": "oauth-sign", + "version": "0.9.0", + "description": "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.", + "hashes": [ + { + "alg": "SHA-512", + "content": "7dec6150514f4c657cc9b02d48819b57a80e912bfc52d45b0c19c0c8b430e103ca920365b07d81c8f1ad314a9d5a4a2ce98091980a958b0819ac973f9910f365" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/oauth-sign@0.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/mikeal/oauth-sign#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mikeal/oauth-sign/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/mikeal/oauth-sign.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/performance-now@2.1.0", + "name": "performance-now", + "version": "2.1.0", + "description": "Implements performance.now (based on process.hrtime).", + "hashes": [ + { + "alg": "SHA-1", + "content": "6309f4e0e5fa913ec1c69307ae364b4b377c9e7b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/performance-now@2.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/braveg1rl/performance-now" + }, + { + "type": "issue-tracker", + "url": "https://github.com/braveg1rl/performance-now/issues" + }, + { + "type": "vcs", + "url": "git://github.com/braveg1rl/performance-now.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/qs@6.5.2", + "name": "qs", + "version": "6.5.2", + "description": "A querystring parser that supports nesting and arrays, with a depth limit", + "hashes": [ + { + "alg": "SHA-512", + "content": "3796405f8fcbc49985fbbc0def8a540faa8087dff09ef750723abd4d98debef5f3494a3b6df9b0f75b1aa8c8f3192db1abdd7fa1d376756fd63a5eea40734318" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/qs@6.5.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ljharb/qs" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ljharb/qs/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/ljharb/qs.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tough-cookie@2.5.0", + "name": "tough-cookie", + "version": "2.5.0", + "description": "RFC6265 Cookies and Cookie Jar for node.js", + "hashes": [ + { + "alg": "SHA-512", + "content": "9e52ec533826d647cb5d25df45931cd4a2c0ba077886a2470d3bdcda10c8c12de66407cc12e31b734dd2ba3305f8611ca5a5ffa9ba1ec9cc3a88ef09c15bf6fa" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/tough-cookie@2.5.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/salesforce/tough-cookie" + }, + { + "type": "issue-tracker", + "url": "https://github.com/salesforce/tough-cookie/issues" + }, + { + "type": "vcs", + "url": "git://github.com/salesforce/tough-cookie.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/psl@1.8.0", + "name": "psl", + "version": "1.8.0", + "description": "Domain name parser based on the Public Suffix List", + "hashes": [ + { + "alg": "SHA-512", + "content": "44874ecf2a1abcafa1035f0e186583a944ec08b86d03b21c67fe8d0ace1f14968704369bfa90c3983201c96151409ab609deebd4ea10c4118a39acedabe86321" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/psl@1.8.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/lupomontero/psl#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lupomontero/psl/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/lupomontero/psl.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tunnel-agent@0.6.0", + "name": "tunnel-agent", + "version": "0.6.0", + "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.", + "hashes": [ + { + "alg": "SHA-1", + "content": "27a5dea06b36b04a0a9966774b290868f0fc40fd" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/tunnel-agent@0.6.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/mikeal/tunnel-agent#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mikeal/tunnel-agent/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/mikeal/tunnel-agent.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uuid@3.4.0", + "name": "uuid", + "version": "3.4.0", + "description": "RFC4122 (v1, v4, and v5) UUIDs", + "hashes": [ + { + "alg": "SHA-512", + "content": "1e3483470ea0644e4932081cb4705c8d56a4d3cf8a1158522220f31674fd4bd69e826a7ce52fdb45e0554dbe104c5691369b49f64b9868d8676cd10e91b29bfc" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/uuid@3.4.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/uuidjs/uuid#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/uuidjs/uuid/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/uuidjs/uuid.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/valid-data-url@2.0.0", + "name": "valid-data-url", + "version": "2.0.0", + "description": "Detect if a string is a data URL", + "hashes": [ + { + "alg": "SHA-512", + "content": "7720999efdda09ecbbc9f4e022a7596a72a5ef15801042826e0991ed22aac8ae904ff674ed139a72dae00f5780dfb0baf4e0d18fbacd3a3cca5953e1d0452304" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/valid-data-url@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/killmenot/valid-data-url" + }, + { + "type": "issue-tracker", + "url": "https://github.com/killmenot/valid-data-url/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/killmenot/valid-data-url.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/xtend@4.0.2", + "name": "xtend", + "version": "4.0.2", + "description": "extend like a boss", + "hashes": [ + { + "alg": "SHA-512", + "content": "2ca614d620172575200179fd5118e2bbe3168725171ecbdfa7b99cb989bd75250a2b4fc28edad4c050310fcdbf98259bb4bb068c521a774c08b28778ceb4c011" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/xtend@4.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/Raynos/xtend" + }, + { + "type": "issue-tracker", + "url": "https://github.com/Raynos/xtend/issues" + }, + { + "type": "vcs", + "url": "git://github.com/Raynos/xtend.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/linkify-it@2.2.0", + "name": "linkify-it", + "version": "2.2.0", + "description": "Links recognition library with FULL unicode support", + "hashes": [ + { + "alg": "SHA-512", + "content": "1a7025fe49c69fe8b553fc23073dda933dacb73f87ac72ecc4cc07406a1f0837cfbe57fe80328de7c52d7e652ab93638fcc5de136c7b935f4a4267a8662f7823" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/linkify-it@2.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/markdown-it/linkify-it#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/markdown-it/linkify-it/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/markdown-it/linkify-it.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uc.micro@1.0.6", + "name": "uc.micro", + "version": "1.0.6", + "description": "Micro subset of unicode data files for markdown-it projects.", + "hashes": [ + { + "alg": "SHA-512", + "content": "f18ef9a6f4d890b256da15901d7c68a91815eea6fd07ef6f144b6274c2feee4a075056a99d524067a70ab3e423cf9030dda6561cc0babb4c0913702dfa7486c0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/uc.micro@1.0.6", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/markdown-it/uc.micro#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/markdown-it/uc.micro/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/markdown-it/uc.micro.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash@4.17.19", + "name": "lodash", + "version": "4.17.19", + "description": "Lodash modular utilities.", + "hashes": [ + { + "alg": "SHA-512", + "content": "24dbddf17111f46417d2fdaa260b1a37f9b3142340e4145efe3f0937d77eb56c862d2a1d2901ca16271dc0d6335b0237c2346768a3ec1a3d579018f1fc5f7a0d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/lodash@4.17.19", + "externalReferences": [ + { + "type": "website", + "url": "https://lodash.com/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lodash/lodash/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lodash/lodash.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/markdown-it@8.4.2", + "name": "markdown-it", + "version": "8.4.2", + "description": "Markdown-it - modern pluggable markdown parser.", + "hashes": [ + { + "alg": "SHA-512", + "content": "19c473dc0593a92529858defb14a9048531b811dfc6b82e1dc65a51d187fecc470cfc99cbbd9f620eec73a1f9b5c7ad1f6438f0e5e51342684b2b9de6fec611d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/markdown-it@8.4.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/markdown-it/markdown-it#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/markdown-it/markdown-it/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/markdown-it/markdown-it.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/argparse@1.0.10", + "name": "argparse", + "version": "1.0.10", + "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", + "hashes": [ + { + "alg": "SHA-512", + "content": "a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/argparse@1.0.10", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/nodeca/argparse#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/nodeca/argparse/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/nodeca/argparse.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sprintf-js@1.0.3", + "name": "sprintf-js", + "version": "1.0.3", + "description": "JavaScript sprintf implementation", + "hashes": [ + { + "alg": "SHA-1", + "content": "04e6926f662895354f3dd015203633b857297e2c" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/sprintf-js@1.0.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/alexei/sprintf.js#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/alexei/sprintf.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/alexei/sprintf.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mdurl@1.0.1", + "name": "mdurl", + "version": "1.0.1", + "description": "URL utilities for markdown-it", + "hashes": [ + { + "alg": "SHA-1", + "content": "fe85b2ec75a59037f2adfec100fd6c601761152e" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/mdurl@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/markdown-it/mdurl#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/markdown-it/mdurl/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/markdown-it/mdurl.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mimemessage@1.1.4", + "name": "mimemessage", + "version": "1.1.4", + "description": "MIME messages for JavaScript (RFC 2045 & 2046)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/mimemessage@1.1.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/eface2face/mimemessage.js" + }, + { + "type": "issue-tracker", + "url": "https://github.com/eface2face/mimemessage.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/eface2face/mimemessage.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@2.6.9", + "name": "debug", + "version": "2.6.9", + "description": "small debugging utility", + "hashes": [ + { + "alg": "SHA-512", + "content": "6c2ec496b7496899cf6c03fed44a2d62fa99b1bdde725e708ba05f8ba0494d470da30a7a72fb298348d7ce74532838e6fc4ec076014155e00f54c35c286b0730" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/debug@2.6.9", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/visionmedia/debug#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/visionmedia/debug/issues" + }, + { + "type": "vcs", + "url": "git://github.com/visionmedia/debug.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.0.0", + "name": "ms", + "version": "2.0.0", + "description": "Tiny milisecond conversion utility", + "hashes": [ + { + "alg": "SHA-1", + "content": "5608aeadfc00be6c2901df5f9861788de0d597c8" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ms@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/zeit/ms#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/zeit/ms/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/zeit/ms.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rfc2047@2.0.1", + "name": "rfc2047", + "version": "2.0.1", + "description": "Encode and decode rfc2047 (MIME encoded words)", + "hashes": [ + { + "alg": "SHA-1", + "content": "1a659b91585c3757d535a59f9afef1ba532ae86b" + } + ], + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "purl": "pkg:npm/rfc2047@2.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/One-com/rfc2047" + }, + { + "type": "issue-tracker", + "url": "https://github.com/One-com/rfc2047/issues" + }, + { + "type": "vcs", + "url": "git://github.com/One-com/rfc2047.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iconv-lite@0.4.5", + "name": "iconv-lite", + "version": "0.4.5", + "description": "Convert character encodings in pure javascript.", + "hashes": [ + { + "alg": "SHA-1", + "content": "9c574b70c30d615859f2064d2be4335ad6b1a8d6" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/iconv-lite@0.4.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ashtuchkin/iconv-lite" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ashtuchkin/iconv-lite/issues" + }, + { + "type": "vcs", + "url": "git://github.com/ashtuchkin/iconv-lite.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/moment@2.27.0", + "name": "moment", + "version": "2.27.0", + "description": "Parse, validate, manipulate, and display dates", + "hashes": [ + { + "alg": "SHA-512", + "content": "6a5d0c50aedca4872094cbf7605d77a9281d008ab11d33bb6eb46d6b3dc395250b6ea7dacea91ce6412336b2c338cedfb23b21a0522286753cb27acfef352f85" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/moment@2.27.0", + "externalReferences": [ + { + "type": "website", + "url": "https://momentjs.com" + }, + { + "type": "issue-tracker", + "url": "https://github.com/moment/moment/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/moment/moment.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/moment-timezone@0.5.31", + "name": "moment-timezone", + "version": "0.5.31", + "description": "Parse and display moments in any timezone.", + "hashes": [ + { + "alg": "SHA-512", + "content": "f86807360f314613177c46eff35883b6b55e4dc5add245a64c46355d02b5e1d2024d79d62674f47717653eca70a85de478a3153d7c1ac84b24d43234000fe374" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/moment-timezone@0.5.31", + "externalReferences": [ + { + "type": "website", + "url": "http://momentjs.com/timezone/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/moment/moment-timezone/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/moment/moment-timezone.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mousetrap@1.6.5", + "name": "mousetrap", + "version": "1.6.5", + "description": "Simple library for handling keyboard shortcuts", + "hashes": [ + { + "alg": "SHA-512", + "content": "40da389047a9688070893f020e13fdf2e9937ada7e24d7d06015af0b5a5cebf38089bb97b51731679f10cfcb24bc41d8bd44677bfed1f13e55a0e23bac3b0450" + } + ], + "licenses": [ + { + "license": { + "name": "Apache-2.0 WITH LLVM-exception" + } + } + ], + "purl": "pkg:npm/mousetrap@1.6.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ccampbell/mousetrap#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ccampbell/mousetrap/issues" + }, + { + "type": "vcs", + "url": "git://github.com/ccampbell/mousetrap.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ng-intl-tel-input@2.0.0", + "name": "ng-intl-tel-input", + "version": "2.0.0", + "description": "AngularJS directive implementing intl-tel-input (https://github.com/Bluefieldscom/intl-tel-input)", + "hashes": [ + { + "alg": "SHA-1", + "content": "705a09c68cbc754113e376d81856a0a598bd1890" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ng-intl-tel-input@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "http://hodgepodgers.github.io/ng-intl-tel-input" + }, + { + "type": "issue-tracker", + "url": "https://github.com/hodgepodgers/ng-intl-tel-input/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/hodgepodgers/ng-intl-tel-input.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ng-pikaday@2.0.2", + "name": "ng-pikaday", + "version": "2.0.2", + "description": "an AngularJS directive wraper that aims to make using Pikaday with Angular as simple as possible.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ng-pikaday@2.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/fxding/ng-pikaday" + }, + { + "type": "issue-tracker", + "url": "https://github.com/fxding/ng-pikaday/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/fxding/ng-pikaday.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pikaday@1.8.0", + "name": "pikaday", + "version": "1.8.0", + "description": "A refreshing JavaScript Datepicker — lightweight, no dependencies, modular CSS", + "hashes": [ + { + "alg": "SHA-512", + "content": "4a01b13185f43478fda109cc692c808a9af680eadb0782dfb3f4c94dbe87ea1447b37f7fe5ce55662ef743c86be77faf5a3767e87ce459c8fc56d97773dce268" + } + ], + "licenses": [ + { + "license": { + "name": "(0BSD OR MIT)" + } + } + ], + "purl": "pkg:npm/pikaday@1.8.0", + "externalReferences": [ + { + "type": "website", + "url": "https://pikaday.com" + }, + { + "type": "issue-tracker", + "url": "https://github.com/Pikaday/Pikaday/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/Pikaday/Pikaday.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/nouislider@10.1.0", + "name": "nouislider", + "version": "10.1.0", + "description": "noUiSlider is lightweight JavaScript range slider.", + "hashes": [ + { + "alg": "SHA-512", + "content": "944370c65a68620e3fe608dd698fcf30d1de54bf82309cab3beed1cd78b532a852486c2e26c41226d7970905796c4d942847522c0456aea205f1749602aee1f8" + } + ], + "licenses": [ + { + "license": { + "id": "WTFPL" + } + } + ], + "purl": "pkg:npm/nouislider@10.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/leongersen/noUiSlider#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/leongersen/noUiSlider/issues" + }, + { + "type": "vcs", + "url": "git://github.com/leongersen/noUiSlider.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/papaparse@4.6.3", + "name": "papaparse", + "version": "4.6.3", + "description": "Fast and powerful CSV parser for the browser that supports web workers and streaming large files. Converts CSV to JSON and JSON to CSV.", + "hashes": [ + { + "alg": "SHA-512", + "content": "2d1abb06b1c2da41cf058483e7468abb0fc1fdd19c836f689b225b2966372ac614654ebd44ac1a047bb5de31a609806d39ce2876c2c2ac5ca4ea299fc8db9b25" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/papaparse@4.6.3", + "externalReferences": [ + { + "type": "website", + "url": "http://papaparse.com" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mholt/PapaParse/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/mholt/PapaParse.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/parse-domain@2.3.4", + "name": "parse-domain", + "version": "2.3.4", + "description": "Splits an url into sub-domain, domain and effective top-level-domain", + "hashes": [ + { + "alg": "SHA-512", + "content": "2e51492554ebcb80c3dd76bbe82b1534fe8c22edc967c1977791c4129dfc2920c604256c9dc71a80027960bcbbb8411a6efc2d6ae40440f72f5d68141a425b30" + } + ], + "licenses": [ + { + "license": { + "id": "Unlicense" + } + } + ], + "purl": "pkg:npm/parse-domain@2.3.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/peerigon/parse-domain#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/peerigon/parse-domain/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/peerigon/parse-domain.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/got@8.3.2", + "name": "got", + "version": "8.3.2", + "description": "Simplified HTTP requests", + "hashes": [ + { + "alg": "SHA-512", + "content": "aa3509e54fe16b0c68b0caf220ba1f642926dc2f383cb252ff482b448a63030bbe2e4c718f9731782536e411b4ff79834a95ca4f266bf2887cc0880b687d100b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/got@8.3.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/got#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/got/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/got.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40sindresorhus/is@0.7.0", + "group": "@sindresorhus", + "name": "is", + "version": "0.7.0", + "description": "Type check values: `is.string('🦄') //=> true`", + "hashes": [ + { + "alg": "SHA-512", + "content": "38d85a28f22e7f3ceb94d6eab5614577e8e59de997ea524082af597a266d4bb2353c87ff95aec25b89bcdeb4d7467567b0c6d6da4e7aa4662eec0505243f4fa3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40sindresorhus/is@0.7.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/is#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/is/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/is.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cacheable-request@2.1.4", + "name": "cacheable-request", + "version": "2.1.4", + "description": "Wrap native HTTP requests with RFC compliant cache support", + "hashes": [ + { + "alg": "SHA-1", + "content": "0d808801b6342ad33c91df9d0b44dc09b91e5c3d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/cacheable-request@2.1.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/lukechilds/cacheable-request" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lukechilds/cacheable-request/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lukechilds/cacheable-request.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/clone-response@1.0.2", + "name": "clone-response", + "version": "1.0.2", + "description": "Clone a Node.js HTTP response stream", + "hashes": [ + { + "alg": "SHA-1", + "content": "d1dc973920314df67fbeb94223b4ee350239e96b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/clone-response@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/lukechilds/clone-response" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lukechilds/clone-response/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lukechilds/clone-response.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mimic-response@1.0.1", + "name": "mimic-response", + "version": "1.0.1", + "description": "Mimic a Node.js HTTP response stream", + "hashes": [ + { + "alg": "SHA-512", + "content": "8f911cb67907eda99f57fab91e09a86a5d60d901c5251ada3ad9b1d09a48aa4c6106123f9494a5d67329438e6155aaf03444cea161229a7759e102b4447c6ec5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/mimic-response@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/mimic-response#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/mimic-response/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/mimic-response.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-stream@3.0.0", + "name": "get-stream", + "version": "3.0.0", + "description": "Get a stream as a string, buffer, or array", + "hashes": [ + { + "alg": "SHA-1", + "content": "8e943d1358dc37555054ecbe2edb05aa174ede14" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/get-stream@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/get-stream#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/get-stream/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/get-stream.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-cache-semantics@3.8.1", + "name": "http-cache-semantics", + "version": "3.8.1", + "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies", + "hashes": [ + { + "alg": "SHA-512", + "content": "e5a8b68a4b3257c6579a76611c7e2b58fa31c62b2d11ec528b9f77eb3210d5b9cd4d6e559c0f3907a3ff5695e244cd35ec8811bdbda42a8d5afffcbed304a9df" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/http-cache-semantics@3.8.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/pornel/http-cache-semantics#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/pornel/http-cache-semantics/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/pornel/http-cache-semantics.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/keyv@3.0.0", + "name": "keyv", + "version": "3.0.0", + "description": "Simple key-value storage with support for multiple backends", + "hashes": [ + { + "alg": "SHA-512", + "content": "7a0b879eadb6384dee5684981b42d558d3fee29a5a996afdfb35817b56ec35ca2f20ccba86e50914f832e261b009dfeb9e5def38b196d4c4e5bb8739ec24f5c4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/keyv@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/lukechilds/keyv" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lukechilds/keyv/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lukechilds/keyv.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-buffer@3.0.0", + "name": "json-buffer", + "version": "3.0.0", + "description": "JSON parse & stringify that supports binary via bops & base64", + "hashes": [ + { + "alg": "SHA-1", + "content": "5b1f397afc75d677bde8bcfc0e47e1f9a3d9a898" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/json-buffer@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/dominictarr/json-buffer" + }, + { + "type": "issue-tracker", + "url": "https://github.com/dominictarr/json-buffer/issues" + }, + { + "type": "vcs", + "url": "git://github.com/dominictarr/json-buffer.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lowercase-keys@1.0.0", + "name": "lowercase-keys", + "version": "1.0.0", + "description": "Lowercase the keys of an object", + "hashes": [ + { + "alg": "SHA-1", + "content": "4e3366b39e7f5457e35f1324bdf6f88d0bfc7306" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/lowercase-keys@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/lowercase-keys#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/lowercase-keys/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/lowercase-keys.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/normalize-url@2.0.1", + "name": "normalize-url", + "version": "2.0.1", + "description": "Normalize a URL", + "hashes": [ + { + "alg": "SHA-512", + "content": "0fa3145b82bf573a09e2b274d4914ac43aed635bfdc2b833097e5fdaa8ff9731f59bf956e8c85464529ead5b27ca33a13ac63323d2aaa9a93ed749782ef2e933" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/normalize-url@2.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/normalize-url#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/normalize-url/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/normalize-url.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/prepend-http@2.0.0", + "name": "prepend-http", + "version": "2.0.0", + "description": "Prepend `http://` to humanized URLs like todomvc.com and localhost", + "hashes": [ + { + "alg": "SHA-1", + "content": "e92434bfa5ea8c19f41cdfd401d741a3c819d897" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/prepend-http@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/prepend-http#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/prepend-http/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/prepend-http.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/query-string@5.1.1", + "name": "query-string", + "version": "5.1.1", + "description": "Parse and stringify URL query strings", + "hashes": [ + { + "alg": "SHA-512", + "content": "82358eb26d92a069602c47401adedaeac9553a4f661a25e63c532aac484b43af2b850b819e97ecdfe12696fa8acb19c2a3dfcf3e517ef4cb58d364b568583e27" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/query-string@5.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/query-string#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/query-string/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/query-string.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/decode-uri-component@0.2.0", + "name": "decode-uri-component", + "version": "0.2.0", + "description": "A better decodeURIComponent", + "hashes": [ + { + "alg": "SHA-1", + "content": "eb3913333458775cb84cd1a1fae062106bb87545" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/decode-uri-component@0.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/SamVerschueren/decode-uri-component#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/SamVerschueren/decode-uri-component/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/SamVerschueren/decode-uri-component.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-assign@4.1.1", + "name": "object-assign", + "version": "4.1.1", + "description": "ES2015 `Object.assign()` ponyfill", + "hashes": [ + { + "alg": "SHA-1", + "content": "2109adc7965887cfc05cbbd442cac8bfbb360863" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/object-assign@4.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/object-assign#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/object-assign/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/object-assign.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strict-uri-encode@1.1.0", + "name": "strict-uri-encode", + "version": "1.1.0", + "description": "A stricter URI encode adhering to RFC 3986", + "hashes": [ + { + "alg": "SHA-1", + "content": "279b225df1d582b1f54e65addd4352e18faa0713" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/strict-uri-encode@1.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/kevva/strict-uri-encode#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/kevva/strict-uri-encode/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/kevva/strict-uri-encode.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sort-keys@2.0.0", + "name": "sort-keys", + "version": "2.0.0", + "description": "Sort the keys of an object", + "hashes": [ + { + "alg": "SHA-1", + "content": "658535584861ec97d730d6cf41822e1f56684128" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/sort-keys@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/sort-keys#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/sort-keys/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/sort-keys.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-plain-obj@1.1.0", + "name": "is-plain-obj", + "version": "1.1.0", + "description": "Check if a value is a plain object", + "hashes": [ + { + "alg": "SHA-1", + "content": "71a50c8429dfca773c92a390a4a03b39fcd51d3e" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-plain-obj@1.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/is-plain-obj#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/is-plain-obj/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/is-plain-obj.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/responselike@1.0.2", + "name": "responselike", + "version": "1.0.2", + "description": "A response-like object for mocking a Node.js HTTP response stream", + "hashes": [ + { + "alg": "SHA-1", + "content": "918720ef3b631c5642be068f15ade5a46f4ba1e7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/responselike@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/lukechilds/responselike#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lukechilds/responselike/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lukechilds/responselike.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lowercase-keys@1.0.1", + "name": "lowercase-keys", + "version": "1.0.1", + "description": "Lowercase the keys of an object", + "hashes": [ + { + "alg": "SHA-512", + "content": "1b62e3eb5b570e754514e8bc55976cf92a108ed402ddd82890a7431b69939b5b71e26e743541c1399481c10407cb2d15d760342531b889c7d9407fb13f287c54" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/lowercase-keys@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/lowercase-keys#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/lowercase-keys/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/lowercase-keys.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/decompress-response@3.3.0", + "name": "decompress-response", + "version": "3.3.0", + "description": "Decompress a HTTP response if needed", + "hashes": [ + { + "alg": "SHA-1", + "content": "80a4dd323748384bfa248083622aedec982adff3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/decompress-response@3.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/decompress-response#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/decompress-response/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/decompress-response.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/duplexer3@0.1.4", + "name": "duplexer3", + "version": "0.1.4", + "description": "Like duplexer but using streams3", + "hashes": [ + { + "alg": "SHA-1", + "content": "ee01dd1cac0ed3cbc7fdbea37dc0a8f1ce002ce2" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/duplexer3@0.1.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/floatdrop/duplexer3#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/floatdrop/duplexer3/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/floatdrop/duplexer3.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/into-stream@3.1.0", + "name": "into-stream", + "version": "3.1.0", + "description": "Convert a buffer/string/array/object/iterable/promise into a stream", + "hashes": [ + { + "alg": "SHA-1", + "content": "96fb0a936c12babd6ff1752a17d05616abd094c6" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/into-stream@3.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/into-stream#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/into-stream/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/into-stream.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/from2@2.3.0", + "name": "from2", + "version": "2.3.0", + "description": "Convenience wrapper for ReadableStream, with an API lifted from \"from\" and \"through2\"", + "hashes": [ + { + "alg": "SHA-1", + "content": "8bfb5502bde4a4d36cfdeea007fcca21d7e382af" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/from2@2.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/hughsk/from2" + }, + { + "type": "issue-tracker", + "url": "https://github.com/hughsk/from2/issues" + }, + { + "type": "vcs", + "url": "git://github.com/hughsk/from2.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-is-promise@1.1.0", + "name": "p-is-promise", + "version": "1.1.0", + "description": "Check if something is a promise", + "hashes": [ + { + "alg": "SHA-1", + "content": "9c9456989e9f6588017b0434d56097675c3da05e" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/p-is-promise@1.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/p-is-promise#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/p-is-promise/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/p-is-promise.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-retry-allowed@1.2.0", + "name": "is-retry-allowed", + "version": "1.2.0", + "description": "Is retry allowed for Error?", + "hashes": [ + { + "alg": "SHA-512", + "content": "4546d478ac2f9b75c6d9561a9a124bd71164b608ef3f32f41eaf02fbacab588b300f2dc12171aa0b187191cdf437d8ea2b7d75815535dfb2bc122e79ff354946" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-retry-allowed@1.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/floatdrop/is-retry-allowed#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/floatdrop/is-retry-allowed/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/floatdrop/is-retry-allowed.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isurl@1.0.0", + "name": "isurl", + "version": "1.0.0", + "description": "Checks whether a value is a WHATWG URL.", + "hashes": [ + { + "alg": "SHA-512", + "content": "d4fff25acc4f943b67ed07910fe50b2903da21a37ac85dfaf06676bc37efd002f4370a52b5a7e35820c3767d24f30805316a5502a1bba098711e796e778da2f7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/isurl@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/stevenvachon/isurl#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/stevenvachon/isurl/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/stevenvachon/isurl.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-to-string-tag-x@1.4.1", + "name": "has-to-string-tag-x", + "version": "1.4.1", + "description": "Tests if ES6 @@toStringTag is supported.", + "hashes": [ + { + "alg": "SHA-512", + "content": "bdd6ca7e6c3edcba0e615afe9adc47697e5af7afb47f70e58d877c24eaaf38bb1fe66c363ad75adaa0834fda91a8b021ae3c90d21eee6a5e673a2012a6c18d17" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/has-to-string-tag-x@1.4.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/Xotic750/has-to-string-tag-x" + }, + { + "type": "issue-tracker", + "url": "https://github.com/Xotic750/has-to-string-tag-x/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/Xotic750/has-to-string-tag-x.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-symbol-support-x@1.4.2", + "name": "has-symbol-support-x", + "version": "1.4.2", + "description": "Tests if ES6 Symbol is supported.", + "hashes": [ + { + "alg": "SHA-512", + "content": "dd3a0ebdafbe1da5be782a60a99ac27cde7520f07eedb24d553e825004f3b9e0791de6fca3a35a9b45771c6e5d943bd95351a7e502dc6da8622b0fd7564e4927" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/has-symbol-support-x@1.4.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/Xotic750/has-symbol-support-x" + }, + { + "type": "issue-tracker", + "url": "https://github.com/Xotic750/has-symbol-support-x/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/Xotic750/has-symbol-support-x.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-object@1.0.1", + "name": "is-object", + "version": "1.0.1", + "description": "Checks whether a value is an object", + "hashes": [ + { + "alg": "SHA-1", + "content": "8952688c5ec2ffd6b03ecc85e769e02903083470" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-object@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ljharb/is-object" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ljharb/is-object/issues" + }, + { + "type": "vcs", + "url": "git://github.com/ljharb/is-object.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-cancelable@0.4.1", + "name": "p-cancelable", + "version": "0.4.1", + "description": "Create a promise that can be canceled", + "hashes": [ + { + "alg": "SHA-512", + "content": "1cd6b503c2ef0759227bb704472cb6d5535e1dbd82589258ab2c82da8de495615f306945996bf667bb058191fc6626982fde72753a0a4c555780c57f3acd1b05" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/p-cancelable@0.4.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/p-cancelable#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/p-cancelable/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/p-cancelable.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-timeout@2.0.1", + "name": "p-timeout", + "version": "2.0.1", + "description": "Timeout a promise after a specified amount of time", + "hashes": [ + { + "alg": "SHA-512", + "content": "f3c7a6e7c743541fcaccf131d57d0ddcbc057d864fc8373807a785dfc335ae4f554d931bc575e08ee833f269b0a52f4ec7804367eb7ab7740fe7efe06b3c1e20" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/p-timeout@2.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/p-timeout#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/p-timeout/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/p-timeout.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-finally@1.0.0", + "name": "p-finally", + "version": "1.0.0", + "description": "`Promise#finally()` ponyfill - Invoked when the promise is settled regardless of outcome", + "hashes": [ + { + "alg": "SHA-1", + "content": "3fbcfb15b899a44123b34b6dcc18b724336a2cae" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/p-finally@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/p-finally#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/p-finally/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/p-finally.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pify@3.0.0", + "name": "pify", + "version": "3.0.0", + "description": "Promisify a callback-style function", + "hashes": [ + { + "alg": "SHA-1", + "content": "e5a4acd2c101fdf3d9a4d07f0dbc4db49dd28176" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/pify@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/pify#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/pify/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/pify.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/timed-out@4.0.1", + "name": "timed-out", + "version": "4.0.1", + "description": "Emit `ETIMEDOUT` or `ESOCKETTIMEDOUT` when ClientRequest is hanged", + "hashes": [ + { + "alg": "SHA-1", + "content": "f32eacac5a175bea25d7fab565ab3ed8741ef56f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/timed-out@4.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/floatdrop/timed-out#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/floatdrop/timed-out/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/floatdrop/timed-out.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/url-parse-lax@3.0.0", + "name": "url-parse-lax", + "version": "3.0.0", + "description": "Lax url.parse() with support for protocol-less URLs & IPs", + "hashes": [ + { + "alg": "SHA-1", + "content": "16b5cafc07dbe3676c1b1999177823d6503acb0c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/url-parse-lax@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/url-parse-lax#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/url-parse-lax/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/url-parse-lax.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/url-to-options@1.0.1", + "name": "url-to-options", + "version": "1.0.1", + "description": "Convert a WHATWG URL to an http(s).request options object.", + "hashes": [ + { + "alg": "SHA-1", + "content": "1505a03a289a48cbd7a434efbaeec5055f5633a9" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/url-to-options@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/stevenvachon/url-to-options#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/stevenvachon/url-to-options/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/stevenvachon/url-to-options.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest@24.9.0", + "name": "jest", + "version": "24.9.0", + "description": "Delightful JavaScript Testing.", + "hashes": [ + { + "alg": "SHA-512", + "content": "62f9012f5666eddd81d7e8797c710e7728c21beb06333e1ff03f3aff41e2a89e8c0783270dcf0580fe6f756b069de98e42ba3b967628f146a4677fb90348f11b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://jestjs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/import-local@2.0.0", + "name": "import-local", + "version": "2.0.0", + "description": "Let a globally installed package use a locally installed version of itself if available", + "hashes": [ + { + "alg": "SHA-512", + "content": "6fab34e26dcefacdc21926ea0c8c8fe11e9a03001e62556af7e59459ea7a8876bc11345ff727a2d54e3c0b93267c9995f4088b61804a3ccabf5befd646942609" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/import-local@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/import-local#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/import-local/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/import-local.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pkg-dir@3.0.0", + "name": "pkg-dir", + "version": "3.0.0", + "description": "Find the root directory of a Node.js project or npm package", + "hashes": [ + { + "alg": "SHA-512", + "content": "fc4e7b018928790db9aa4c4c8f93c1395805f0a8aefe1edc612df4679f91ed66a208205f2eae7c648fdd49e68429bf565495799ffd37430acddc8796205965bf" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/pkg-dir@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/pkg-dir#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/pkg-dir/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/pkg-dir.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/find-up@3.0.0", + "name": "find-up", + "version": "3.0.0", + "description": "Find a file or directory by walking up parent directories", + "hashes": [ + { + "alg": "SHA-512", + "content": "d720fa4662c8d5705fc6e82f391c25724e9fef9b582fe891d23ab0b0eacec4c672198a94b83849d25e005dd3b5897fc54ecf5c040304935816484c759126f296" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/find-up@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/find-up#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/find-up/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/find-up.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/locate-path@3.0.0", + "name": "locate-path", + "version": "3.0.0", + "description": "Get the first path that exists on disk of multiple paths", + "hashes": [ + { + "alg": "SHA-512", + "content": "ec03bbe3cc169c884da80b9ab72d995879101d148d7cf548b0f21fc043963b6d8099aa15ad66af94e70c4799f34cb358be9dfa5f6db4fe669a46cade7351bae4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/locate-path@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/locate-path#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/locate-path/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/locate-path.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-locate@3.0.0", + "name": "p-locate", + "version": "3.0.0", + "description": "Get the first fulfilled promise that satisfies the provided testing function", + "hashes": [ + { + "alg": "SHA-512", + "content": "c7ed76c3f4e8fb81857e0261044a620dc2e8cd12467a063e122effcf4b522e4326c4664dc9b54c49f5a3f5a267f19e4573b74150d24e39580fbf61fb230ba549" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/p-locate@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/p-locate#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/p-locate/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/p-locate.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-limit@2.3.0", + "name": "p-limit", + "version": "2.3.0", + "description": "Run multiple promise-returning & async functions with limited concurrency", + "hashes": [ + { + "alg": "SHA-512", + "content": "ffff3c985592271f25c42cf07400014c92f6332581d76f9e218ecc0cbd92a8b98091e294f6ac51bd6b92c938e6dc5526a4110cb857dc90022a11a546503c5beb" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/p-limit@2.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/p-limit#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/p-limit/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/p-limit.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-try@2.2.0", + "name": "p-try", + "version": "2.2.0", + "description": "`Start a promise chain", + "hashes": [ + { + "alg": "SHA-512", + "content": "4789cf0154c053407d0f7e7f1a4dee25fffb5d86d0732a2148a76f03121148d821165e1eef5855a069c1350cfd716697c4ed88d742930bede331dbefa0ac3a75" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/p-try@2.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/p-try#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/p-try/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/p-try.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-exists@3.0.0", + "name": "path-exists", + "version": "3.0.0", + "description": "Check if a path exists", + "hashes": [ + { + "alg": "SHA-1", + "content": "ce0ebeaa5f78cb18925ea7d810d7b59b010fd515" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/path-exists@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/path-exists#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/path-exists/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/path-exists.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/resolve-cwd@2.0.0", + "name": "resolve-cwd", + "version": "2.0.0", + "description": "Resolve the path of a module like `require.resolve()` but from the current working directory", + "hashes": [ + { + "alg": "SHA-1", + "content": "00a9f7387556e27038eae232caa372a6a59b665a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/resolve-cwd@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/resolve-cwd#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/resolve-cwd/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/resolve-cwd.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/resolve-from@3.0.0", + "name": "resolve-from", + "version": "3.0.0", + "description": "Resolve the path of a module like `require.resolve()` but from a given path", + "hashes": [ + { + "alg": "SHA-1", + "content": "b22c7af7d9d6881bc8b6e653335eebcb0a188748" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/resolve-from@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/resolve-from#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/resolve-from/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/resolve-from.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-cli@24.9.0", + "name": "jest-cli", + "version": "24.9.0", + "description": "Delightful JavaScript Testing.", + "hashes": [ + { + "alg": "SHA-512", + "content": "f952d12b28ad4f7056a0c7925081d1c55ff683ccbd830f75261e73d949976739192a96c2d3c0927a15718075304e9cbe1f019c9ecfeda9a7d00c95bb8a662f1a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-cli@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://jestjs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40jest/core@24.9.0", + "group": "@jest", + "name": "core", + "version": "24.9.0", + "description": "Delightful JavaScript Testing.", + "hashes": [ + { + "alg": "SHA-512", + "content": "168820dece30940af5557eeafab855f5156752fe6d0fb56e59f632d7ec21322594aef97b537409489c967038a8f4bab6a6ba98b1969e4efd91cf6e29586909d8" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40jest/core@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://jestjs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40jest/console@24.9.0", + "group": "@jest", + "name": "console", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "66e8fa6fc4e72978b7ab8ca669cf0441f73779afee84b782193845a97782f07f7fada687f0044f51374877e5f219dd37678227d3f5630f639815c045d3d7cd2d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40jest/console@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40jest/source-map@24.9.0", + "group": "@jest", + "name": "source-map", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "fd7c3bc4696c65be0c273343801ecf5b972ba2ee49a9688141acfac723dddc0ace8369df9ff3ee9d5f3ea255db6c4673365e7dd68e6b58a13d0510da140b8806" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40jest/source-map@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/callsites@3.1.0", + "name": "callsites", + "version": "3.1.0", + "description": "Get callsites from the V8 stack trace API", + "hashes": [ + { + "alg": "SHA-512", + "content": "3fc06302c5ef652f95203508d7584709012fef8613ebb6148b924914d588a8bdb7e6c0668d7e3eab1f4cbaf96ce62bf234435cb71e3ac502d0dda4ee13bb2c69" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/callsites@3.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/callsites#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/callsites/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/callsites.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/graceful-fs@4.2.4", + "name": "graceful-fs", + "version": "4.2.4", + "description": "A drop-in replacement for fs, making various improvements.", + "hashes": [ + { + "alg": "SHA-512", + "content": "5a328f34917bf5db490159e2525186587606cf68d6c53e9584dff89b535d91b6769ceb0417e708d44760aa5e7309186cfd5b10611beb5dcb7192d557654922c7" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/graceful-fs@4.2.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/node-graceful-fs#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/node-graceful-fs/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/isaacs/node-graceful-fs.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/source-map@0.6.1", + "name": "source-map", + "version": "0.6.1", + "description": "Generates and consumes source maps", + "hashes": [ + { + "alg": "SHA-512", + "content": "52381aa6e99695b3219018334fb624739617513e3a17488abbc4865ead1b7303f9773fe1d0f963e9e9c9aa3cf565bab697959aa989eb55bc16396332177178ee" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/source-map@0.6.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/mozilla/source-map" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mozilla/source-map/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/mozilla/source-map.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/slash@2.0.0", + "name": "slash", + "version": "2.0.0", + "description": "Convert Windows backslash paths to slash paths", + "hashes": [ + { + "alg": "SHA-512", + "content": "6582a1dd6876cf53e91175abd0ca52059d15ea66470107d87afb6d3b5d5ce7509a5a319369a762299fb056dd4f6cc943579aa1305b25a5909e9a1c0e2bb0bcf4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/slash@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/slash#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/slash/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/slash.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40jest/reporters@24.9.0", + "group": "@jest", + "name": "reporters", + "version": "24.9.0", + "description": "Jest's reporters", + "hashes": [ + { + "alg": "SHA-512", + "content": "9aee17d328da1eb7df3ac5a654bce2b4a9a6996490dc61ae79f80db1c51258d89435c10e484424f64de911128441505bd029e7f3cf9411222c644307de8f3c1b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40jest/reporters@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://jestjs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40jest/environment@24.9.0", + "group": "@jest", + "name": "environment", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "e40d5096e4cf86f7483c56273b7b190b7b2690d7973d510bcfb8a43db8548f46d08c1d3b12813daad2eb7a6d786546167556b261bb235702222f858120c57869" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40jest/environment@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40jest/fake-timers@24.9.0", + "group": "@jest", + "name": "fake-timers", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "79641c35ad984b0cd7588302e4ab9f061de85912228eb40544eb08aadeaffcd4bd228fe0927c358ec002f5cfa287f4505f80373bb49e58085078dd20a0a853f4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40jest/fake-timers@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40jest/types@24.9.0", + "group": "@jest", + "name": "types", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "5ca2bbcded5aa6ee49590e5e6631c84cfeba017f90b0b95b689441198afca4dcf07001362559309dfd32aa31d3b0345c8d1d26ba3cbf36664c5f0e6497e90607" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40jest/types@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/istanbul-lib-coverage@2.0.3", + "group": "@types", + "name": "istanbul-lib-coverage", + "version": "2.0.3", + "description": "TypeScript definitions for istanbul-lib-coverage", + "hashes": [ + { + "alg": "SHA-512", + "content": "b33ee22eabd5520d6021e7413af964c4f95cf3fb95cf24b93b01b3d5c2a35f3925dc5a4bdda97472b53c6065355a81e4c67d16c5bc39b728ba86fcc928dcc5b3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40types/istanbul-lib-coverage@2.0.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/istanbul-reports@1.1.2", + "group": "@types", + "name": "istanbul-reports", + "version": "1.1.2", + "description": "TypeScript definitions for istanbul-reports", + "hashes": [ + { + "alg": "SHA-512", + "content": "3ff5bdc8e5ffde83d94a96983824331aa8024115e7d0514efd5f1b5ab090b3ec0b9af555c64e824415c02c4bcdb3d38721ab659e516891f86e0e8dae834d5c8b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40types/istanbul-reports@1.1.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/istanbul-lib-report@3.0.0", + "group": "@types", + "name": "istanbul-lib-report", + "version": "3.0.0", + "description": "TypeScript definitions for istanbul-lib-report", + "hashes": [ + { + "alg": "SHA-512", + "content": "a651a05c03df54a16861f6bd369603024b1e1be83a26bdbde11a9ea9ca838b149b537e0c6552518bf3feed8f060e9ce41302da19964ea4a20499e55936d2acae" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40types/istanbul-lib-report@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/yargs@13.0.9", + "group": "@types", + "name": "yargs", + "version": "13.0.9", + "description": "TypeScript definitions for yargs", + "hashes": [ + { + "alg": "SHA-512", + "content": "c6bbe16780d97b03038681f5bad2ed380c18432eb47981685de8dedf44f333754ebd0941c10684a4a16ae66df8935c0ec3600a222da9c2d8808dd9a1be5054ce" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40types/yargs@13.0.9", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/yargs-parser@15.0.0", + "group": "@types", + "name": "yargs-parser", + "version": "15.0.0", + "description": "TypeScript definitions for yargs-parser", + "hashes": [ + { + "alg": "SHA-512", + "content": "140fc15aff2df19589fa010e9cb2ddf328311ffd9415b02f804a27c9f37ac9618b29cef35636e99766380938e277d87645f80f3fa484b7ab87c043a9972d34cb" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40types/yargs-parser@15.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-message-util@24.9.0", + "name": "jest-message-util", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "a028fc1626775348533f8692ba2f3b3f82f88c2dfb06d43050caa4fb393f6f5d45475f41243799b1902f207bad5a79adc3bafce54991dc21166741d653698097" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-message-util@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/code-frame@7.10.4", + "group": "@babel", + "name": "code-frame", + "version": "7.10.4", + "description": "Generate errors that contain a code frame that point to source locations.", + "hashes": [ + { + "alg": "SHA-512", + "content": "bc6e92bc1ea860486f822b193454664425242f3d7573bae9fad6cd4f29c6a9cea64b577901377fb06c95e96d0a6599d744a313cd90d18104f73aef6386901f52" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/code-frame@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://babeljs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/highlight@7.10.4", + "group": "@babel", + "name": "highlight", + "version": "7.10.4", + "description": "Syntax highlight JavaScript strings for output in terminals.", + "hashes": [ + { + "alg": "SHA-512", + "content": "8baae09d1fd880f110cd96676d31c7b9976513cab2a0135a943e85faae2f00595c30472a9a4a06fa63ea258242a3adea3dfef8f98d5466c97797a7fbfd122498" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/highlight@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://babeljs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-validator-identifier@7.10.4", + "group": "@babel", + "name": "helper-validator-identifier", + "version": "7.10.4", + "description": "Validate identifier/keywords name", + "hashes": [ + { + "alg": "SHA-512", + "content": "dd4f72fb8de1cfb64cfabcc6db841eda6b9f5b92a1bc583f3619cda61fa2f66802b5d4c2b4c26e2354cc92b21488aec8c783d895117d239761a9a2d803f0035f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-validator-identifier@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/js-tokens@4.0.0", + "name": "js-tokens", + "version": "4.0.0", + "description": "A regex that tokenizes JavaScript.", + "hashes": [ + { + "alg": "SHA-512", + "content": "45d2547e5704ddc5332a232a420b02bb4e853eef5474824ed1b7986cf84737893a6a9809b627dca02b53f5b7313a9601b690f690233a49bce0e026aeb16fcf29" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/js-tokens@4.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/lydell/js-tokens#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lydell/js-tokens/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lydell/js-tokens.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40jest/test-result@24.9.0", + "group": "@jest", + "name": "test-result", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "5c416b1db0689c127c746a7626617c90ffe7408fc898fa7280a1f043f498f9eb39f59dcbe4f23841bf5341030011e62c4e11b5c45d24ead986d2d20a01336288" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40jest/test-result@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/stack-utils@1.0.1", + "group": "@types", + "name": "stack-utils", + "version": "1.0.1", + "description": "TypeScript definitions for stack-utils", + "hashes": [ + { + "alg": "SHA-512", + "content": "978d81820a6947accb9a97d4e9fabd1c46b6a063c423ccab48f2f71884e37d1227a696056a139b6c840e40add41b1127c90a65b592da3deef9d38e8d39942293" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40types/stack-utils@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/micromatch@3.1.10", + "name": "micromatch", + "version": "3.1.10", + "description": "Glob matching for javascript/node.js. A drop-in replacement and faster alternative to minimatch and multimatch.", + "hashes": [ + { + "alg": "SHA-512", + "content": "3168a4825f67f4cdf0f9ba6c6371def0bfb0f5e17ddf7f31465f0800ee6f8838b3c12cf3885132533a36c6bae5a01eb80036d37fcb80f2f46aaadb434ce99c72" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/micromatch@3.1.10", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/micromatch/micromatch" + }, + { + "type": "issue-tracker", + "url": "https://github.com/micromatch/micromatch/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/micromatch/micromatch.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/arr-diff@4.0.0", + "name": "arr-diff", + "version": "4.0.0", + "description": "Returns an array with only the unique values from the first array, by excluding all values from additional arrays using strict equality for comparisons.", + "hashes": [ + { + "alg": "SHA-1", + "content": "d6461074febfec71e7e15235761a329a5dc7c520" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/arr-diff@4.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/arr-diff" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/arr-diff/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/arr-diff.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/array-unique@0.3.2", + "name": "array-unique", + "version": "0.3.2", + "description": "Remove duplicate values from an array. Fastest ES5 implementation.", + "hashes": [ + { + "alg": "SHA-1", + "content": "a894b75d4bc4f6cd679ef3244a9fd8f46ae2d428" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/array-unique@0.3.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/array-unique" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/array-unique/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/array-unique.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/braces@2.3.2", + "name": "braces", + "version": "2.3.2", + "description": "Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.", + "hashes": [ + { + "alg": "SHA-512", + "content": "68d75b9e3f4ff0f8dd5d4e326da58b2b6205de373f1280d86c2ec06b35bab68dd346c7d7c6c702f545ce07988388442b93221b5a9d922d075ae3e4006bb9dcdf" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/braces@2.3.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/micromatch/braces" + }, + { + "type": "issue-tracker", + "url": "https://github.com/micromatch/braces/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/micromatch/braces.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/arr-flatten@1.1.0", + "name": "arr-flatten", + "version": "1.1.0", + "description": "Recursively flatten an array or arrays.", + "hashes": [ + { + "alg": "SHA-512", + "content": "2f784a57947fa79a3cd51eced362069f0a439a4a7a13df365e1b5bbb049edcee2a3ad30c32da1d89c0120350a7cb653e6825dc3699a5fa6e1d3ecbec2778dab6" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/arr-flatten@1.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/arr-flatten" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/arr-flatten/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/arr-flatten.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/extend-shallow@2.0.1", + "name": "extend-shallow", + "version": "2.0.1", + "description": "Extend an object with the properties of additional objects. node.js/javascript util.", + "hashes": [ + { + "alg": "SHA-1", + "content": "51af7d614ad9a9f610ea1bafbb989d6b1c56890f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/extend-shallow@2.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/extend-shallow" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/extend-shallow/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/extend-shallow.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-extendable@0.1.1", + "name": "is-extendable", + "version": "0.1.1", + "description": "Returns true if a value is any of the object types: array, regexp, plain object, function or date. This is useful for determining if a value can be extended, e.g. \"can the value have keys?\"", + "hashes": [ + { + "alg": "SHA-1", + "content": "62b110e289a471418e3ec36a617d472e301dfc89" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-extendable@0.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/is-extendable" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/is-extendable/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/is-extendable.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fill-range@4.0.0", + "name": "fill-range", + "version": "4.0.0", + "description": "Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`", + "hashes": [ + { + "alg": "SHA-1", + "content": "d544811d428f98eb06a63dc402d2403c328c38f7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fill-range@4.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/fill-range" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/fill-range/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/fill-range.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-number@3.0.0", + "name": "is-number", + "version": "3.0.0", + "description": "Returns true if the value is a number. comprehensive tests.", + "hashes": [ + { + "alg": "SHA-1", + "content": "24fd6201a4782cf50561c810276afc7d12d71195" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-number@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/is-number" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/is-number/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/is-number.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/kind-of@3.2.2", + "name": "kind-of", + "version": "3.2.2", + "description": "Get the native type of a value.", + "hashes": [ + { + "alg": "SHA-1", + "content": "31ea21a734bab9bbb0f32466d893aea51e4a3c64" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/kind-of@3.2.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/kind-of" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/kind-of/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/kind-of.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-buffer@1.1.6", + "name": "is-buffer", + "version": "1.1.6", + "description": "Determine if an object is a Buffer", + "hashes": [ + { + "alg": "SHA-512", + "content": "35c7402f0a579139b966fbdb93ba303944af56f04a0e028fe7f7b07d71339e64057ece194666a739e2814e34558e46b7405a0de9727ef45dd44aa7c7a93694e7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-buffer@1.1.6", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/feross/is-buffer#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/feross/is-buffer/issues" + }, + { + "type": "vcs", + "url": "git://github.com/feross/is-buffer.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/repeat-string@1.6.1", + "name": "repeat-string", + "version": "1.6.1", + "description": "Repeat the given string n times. Fastest implementation for repeating a string.", + "hashes": [ + { + "alg": "SHA-1", + "content": "8dcae470e1c88abc2d600fff4a776286da75e637" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/repeat-string@1.6.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/repeat-string" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/repeat-string/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/repeat-string.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/to-regex-range@2.1.1", + "name": "to-regex-range", + "version": "2.1.1", + "description": "Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.", + "hashes": [ + { + "alg": "SHA-1", + "content": "7c80c17b9dfebe599e27367e0d4dd5590141db38" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/to-regex-range@2.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/micromatch/to-regex-range" + }, + { + "type": "issue-tracker", + "url": "https://github.com/micromatch/to-regex-range/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/micromatch/to-regex-range.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isobject@3.0.1", + "name": "isobject", + "version": "3.0.1", + "description": "Returns true if the value is an object and not an array or null.", + "hashes": [ + { + "alg": "SHA-1", + "content": "4e431e92b11a9731636aa1f9c8d1ccbcfdab78df" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/isobject@3.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/isobject" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/isobject/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/isobject.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/repeat-element@1.1.3", + "name": "repeat-element", + "version": "1.1.3", + "description": "Create an array by repeating the given value n times.", + "hashes": [ + { + "alg": "SHA-512", + "content": "6a11aad199d5e66e57b592cc6febcfefa91c00ce6790baa4d25a6a02ea2348a1a042d9f87918b86591a6da8968db32851feb0cb166aa3825b576a0273abbbbda" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/repeat-element@1.1.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/repeat-element" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/repeat-element/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/repeat-element.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/snapdragon@0.8.2", + "name": "snapdragon", + "version": "0.8.2", + "description": "Fast, pluggable and easy-to-use parser-renderer factory.", + "hashes": [ + { + "alg": "SHA-512", + "content": "16dc8e9d637fc021d355738cc2f4afdba77e928e6f5a52030face8509ecb5bcbe1f99042f107658ef7913fe72b36bb41c22a04516cbfe1d32d6c18c0e22a0d96" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/snapdragon@0.8.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/snapdragon" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/snapdragon/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/snapdragon.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/base@0.11.2", + "name": "base", + "version": "0.11.2", + "description": "base is the foundation for creating modular, unit testable and highly pluggable node.js applications, starting with a handful of common methods, like `set`, `get`, `del` and `use`.", + "hashes": [ + { + "alg": "SHA-512", + "content": "e53e8fe313e0a69d180c5bd25b0119e0da04dda3384014170f39956eb6829058fccc733e99b6bc4b2a81e436d95b247b9981e8e98ec1750a373280389b44de42" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/base@0.11.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/node-base/base" + }, + { + "type": "issue-tracker", + "url": "https://github.com/node-base/base/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/node-base/base.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cache-base@1.0.1", + "name": "cache-base", + "version": "1.0.1", + "description": "Basic object cache with `get`, `set`, `del`, and `has` methods for node.js/javascript projects.", + "hashes": [ + { + "alg": "SHA-512", + "content": "00a71d4e71525804dde7f1823d1c6bd82870209f3909ecab1328d11e52b1439e9de1724c1b29b4b8088a9f4c5b2ce18e977fb24693938b8f38755084739014cd" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/cache-base@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/cache-base" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/cache-base/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/cache-base.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/collection-visit@1.0.0", + "name": "collection-visit", + "version": "1.0.0", + "description": "Visit a method over the items in an object, or map visit over the objects in an array.", + "hashes": [ + { + "alg": "SHA-1", + "content": "4bc0373c164bc3291b4d368c829cf1a80a59dca0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/collection-visit@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/collection-visit" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/collection-visit/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/collection-visit.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/map-visit@1.0.0", + "name": "map-visit", + "version": "1.0.0", + "description": "Map `visit` over an array of objects.", + "hashes": [ + { + "alg": "SHA-1", + "content": "ecdca8f13144e660f1b5bd41f12f3479d98dfb8f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/map-visit@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/map-visit" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/map-visit/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/map-visit.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-visit@1.0.1", + "name": "object-visit", + "version": "1.0.1", + "description": "Call a specified method on each value in the given object.", + "hashes": [ + { + "alg": "SHA-1", + "content": "f79c4493af0c5377b59fe39d395e41042dd045bb" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/object-visit@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/object-visit" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/object-visit/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/object-visit.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/component-emitter@1.3.0", + "name": "component-emitter", + "version": "1.3.0", + "description": "Event emitter", + "hashes": [ + { + "alg": "SHA-512", + "content": "45ddec7ba401fac3b54f0a998ec710aeeae910f21f3b4ff26274a29fa43fac3de63aeb47bd4ac202126e6f7afdd2e35bf9211206e134418a01f7461d7dab6c46" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/component-emitter@1.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/component/emitter#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/component/emitter/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/component/emitter.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-value@2.0.6", + "name": "get-value", + "version": "2.0.6", + "description": "Use property paths (`a.b.c`) to get a nested value from an object.", + "hashes": [ + { + "alg": "SHA-1", + "content": "dc15ca1c672387ca76bd37ac0a395ba2042a2c28" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/get-value@2.0.6", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/get-value" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/get-value/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/get-value.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-value@1.0.0", + "name": "has-value", + "version": "1.0.0", + "description": "Returns true if a value exists, false if empty. Works with deeply nested values using object paths.", + "hashes": [ + { + "alg": "SHA-1", + "content": "18b281da585b1c5c51def24c930ed29a0be6b177" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/has-value@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/has-value" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/has-value/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/has-value.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-values@1.0.0", + "name": "has-values", + "version": "1.0.0", + "description": "Returns true if any values exist, false if empty. Works for booleans, functions, numbers, strings, nulls, objects and arrays. ", + "hashes": [ + { + "alg": "SHA-1", + "content": "95b0b63fec2146619a6fe57fe75628d5a39efe4f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/has-values@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/has-values" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/has-values/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/has-values.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/kind-of@4.0.0", + "name": "kind-of", + "version": "4.0.0", + "description": "Get the native type of a value.", + "hashes": [ + { + "alg": "SHA-1", + "content": "20813df3d712928b207378691a45066fae72dd57" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/kind-of@4.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/kind-of" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/kind-of/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/kind-of.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/set-value@2.0.1", + "name": "set-value", + "version": "2.0.1", + "description": "Create nested values and any intermediaries using dot notation (`'a.b.c'`) paths.", + "hashes": [ + { + "alg": "SHA-512", + "content": "2711dcd7078237af30458d1f842a17a722b9e66fd73c769f3a62b85160fb9b6088d7818c705ca9b78c3fd3e355e5ffd931bcb617a4b6c3003b7e0ca787d8164b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/set-value@2.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/set-value" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/set-value/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/set-value.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-plain-object@2.0.4", + "name": "is-plain-object", + "version": "2.0.4", + "description": "Returns true if an object was created by the `Object` constructor.", + "hashes": [ + { + "alg": "SHA-512", + "content": "8793e98179168ad737f0104c61ac1360c5891c564956706ab85139ef11698c1f29245885ea067e6d4f96c88ff2a9788547999d2ec81835a3def2e6a8e94bfd3a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-plain-object@2.0.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/is-plain-object" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/is-plain-object/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/is-plain-object.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/split-string@3.1.0", + "name": "split-string", + "version": "3.1.0", + "description": "Split a string on a character except when the character is escaped.", + "hashes": [ + { + "alg": "SHA-512", + "content": "3733558490d8a7071e5558a2f3f1eee8329f0f61be36b407952fd5fea82fefadc462e755c0470c40dc5dda587ed15ad40725cdfe826497982b3a1616bd05188b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/split-string@3.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/split-string" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/split-string/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/split-string.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/extend-shallow@3.0.2", + "name": "extend-shallow", + "version": "3.0.2", + "description": "Extend an object with the properties of additional objects. node.js/javascript util.", + "hashes": [ + { + "alg": "SHA-1", + "content": "26a71aaf073b39fb2127172746131c2704028db8" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/extend-shallow@3.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/extend-shallow" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/extend-shallow/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/extend-shallow.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/assign-symbols@1.0.0", + "name": "assign-symbols", + "version": "1.0.0", + "description": "Assign the enumerable es6 Symbol properties from an object (or objects) to the first object passed on the arguments. Can be used as a supplement to other extend, assign or merge methods as a polyfill for the Symbols part of the es6 Object.assign method.", + "hashes": [ + { + "alg": "SHA-1", + "content": "59667f41fadd4f20ccbc2bb96b8d4f7f78ec0367" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/assign-symbols@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/assign-symbols" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/assign-symbols/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/assign-symbols.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-extendable@1.0.1", + "name": "is-extendable", + "version": "1.0.1", + "description": "Returns true if a value is a plain object, array or function.", + "hashes": [ + { + "alg": "SHA-512", + "content": "6ab9d73314f5861a0aa3d9352d976694dc897430dfcb6bf47d78c5966a24e3e8bcba5ffa5a56d581ef5b84cef83a934f40f306513a03b73f8a5dad4f9de27138" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-extendable@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/is-extendable" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/is-extendable/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/is-extendable.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/to-object-path@0.3.0", + "name": "to-object-path", + "version": "0.3.0", + "description": "Create an object path from a list or array of strings.", + "hashes": [ + { + "alg": "SHA-1", + "content": "297588b7b0e7e0ac08e04e672f85c1f4999e17af" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/to-object-path@0.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/to-object-path" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/to-object-path/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/to-object-path.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/union-value@1.0.1", + "name": "union-value", + "version": "1.0.1", + "description": "Set an array of unique values as the property of an object. Supports setting deeply nested properties using using object-paths/dot notation.", + "hashes": [ + { + "alg": "SHA-512", + "content": "b497d79b131e5989dccc256ced7004bc857b89ea6900b7727a958c90793072246966b686ff1c13facd8937cfa9af5fbc8c245ff34145cefafe32941e7a81785e" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/union-value@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/union-value" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/union-value/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/union-value.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/arr-union@3.1.0", + "name": "arr-union", + "version": "3.1.0", + "description": "Combines a list of arrays, returning a single array with unique values, using strict equality for comparisons.", + "hashes": [ + { + "alg": "SHA-1", + "content": "e39b09aea9def866a8f206e288af63919bae39c4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/arr-union@3.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/arr-union" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/arr-union/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/arr-union.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unset-value@1.0.0", + "name": "unset-value", + "version": "1.0.0", + "description": "Delete nested properties from an object using dot notation.", + "hashes": [ + { + "alg": "SHA-1", + "content": "8376873f7d2335179ffb1e6fc3a8ed0dfc8ab559" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/unset-value@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/unset-value" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/unset-value/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/unset-value.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-value@0.3.1", + "name": "has-value", + "version": "0.3.1", + "description": "Returns true if a value exists, false if empty. Works with deeply nested values using object paths.", + "hashes": [ + { + "alg": "SHA-1", + "content": "7b1f58bada62ca827ec0a2078025654845995e1f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/has-value@0.3.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/has-value" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/has-value/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/has-value.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-values@0.1.4", + "name": "has-values", + "version": "0.1.4", + "description": "Returns true if any values exist, false if empty. Works for booleans, functions, numbers, strings, nulls, objects and arrays. ", + "hashes": [ + { + "alg": "SHA-1", + "content": "6d61de95d91dfca9b9a02089ad384bff8f62b771" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/has-values@0.1.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/has-values" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/has-values/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/has-values.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isobject@2.1.0", + "name": "isobject", + "version": "2.1.0", + "description": "Returns true if the value is an object and not an array or null.", + "hashes": [ + { + "alg": "SHA-1", + "content": "f065561096a3f1da2ef46272f815c840d87e0c89" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/isobject@2.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/isobject" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/isobject/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/isobject.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/class-utils@0.3.6", + "name": "class-utils", + "version": "0.3.6", + "description": "Utils for working with JavaScript classes and prototype methods.", + "hashes": [ + { + "alg": "SHA-512", + "content": "a8e84f6bf163eece9363c1fc7ac1aee5036930c431cfbf61faeaf3acd60dea69fef419f194319fe5067e5de083b314a33eab12479e973993899a97aeae72cc7a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/class-utils@0.3.6", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/class-utils" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/class-utils/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/class-utils.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/define-property@0.2.5", + "name": "define-property", + "version": "0.2.5", + "description": "Define a non-enumerable property on an object.", + "hashes": [ + { + "alg": "SHA-1", + "content": "c35b1ef918ec3c990f9a5bc57be04aacec5c8116" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/define-property@0.2.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/define-property" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/define-property/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/define-property.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-descriptor@0.1.6", + "name": "is-descriptor", + "version": "0.1.6", + "description": "Returns true if a value has the characteristics of a valid JavaScript descriptor. Works for data descriptors and accessor descriptors.", + "hashes": [ + { + "alg": "SHA-512", + "content": "6af0d8af4481dc3c0ef73b0ca2fd20282112158a829c4e21abfe33dd375496e904cb9b7d0b4611abb1cbaec379d8d01ca9729a7a97820f49fe0746ab9d51b71e" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-descriptor@0.1.6", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/is-descriptor" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/is-descriptor/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/is-descriptor.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-accessor-descriptor@0.1.6", + "name": "is-accessor-descriptor", + "version": "0.1.6", + "description": "Returns true if a value has the characteristics of a valid JavaScript accessor descriptor.", + "hashes": [ + { + "alg": "SHA-1", + "content": "a9e12cb3ae8d876727eeef3843f8a0897b5c98d6" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-accessor-descriptor@0.1.6", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/is-accessor-descriptor" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/is-accessor-descriptor/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/is-accessor-descriptor.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-data-descriptor@0.1.4", + "name": "is-data-descriptor", + "version": "0.1.4", + "description": "Returns true if a value has the characteristics of a valid JavaScript data descriptor.", + "hashes": [ + { + "alg": "SHA-1", + "content": "0b5ee648388e2c860282e793f1856fec3f301b56" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-data-descriptor@0.1.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/is-data-descriptor" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/is-data-descriptor/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/is-data-descriptor.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/kind-of@5.1.0", + "name": "kind-of", + "version": "5.1.0", + "description": "Get the native type of a value.", + "hashes": [ + { + "alg": "SHA-512", + "content": "346104ae71fa176bd4b970e1f8e95b70a5bbff039c7dd447699ed55ada82ced7c7ae2ffef982a63f9d4e7567863eea8239b6ba924d8e4dee5dd365664c1f343f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/kind-of@5.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/kind-of" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/kind-of/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/kind-of.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/static-extend@0.1.2", + "name": "static-extend", + "version": "0.1.2", + "description": "Adds a static `extend` method to a class, to simplify inheritance. Extends the static properties, prototype properties, and descriptors from a `Parent` constructor onto `Child` constructors.", + "hashes": [ + { + "alg": "SHA-1", + "content": "60809c39cbff55337226fd5e0b520f341f1fb5c6" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/static-extend@0.1.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/static-extend" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/static-extend/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/static-extend.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-copy@0.1.0", + "name": "object-copy", + "version": "0.1.0", + "description": "Copy static properties, prototype properties, and descriptors from one object to another.", + "hashes": [ + { + "alg": "SHA-1", + "content": "7e7d858b781bd7c991a41ba975ed3812754e998c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/object-copy@0.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/object-copy" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/object-copy/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/object-copy.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/copy-descriptor@0.1.1", + "name": "copy-descriptor", + "version": "0.1.1", + "description": "Copy a descriptor from object A to object B", + "hashes": [ + { + "alg": "SHA-1", + "content": "676f6eb3c39997c2ee1ac3a924fd6124748f578d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/copy-descriptor@0.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/copy-descriptor" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/copy-descriptor/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/copy-descriptor.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/define-property@1.0.0", + "name": "define-property", + "version": "1.0.0", + "description": "Define a non-enumerable property on an object.", + "hashes": [ + { + "alg": "SHA-1", + "content": "769ebaaf3f4a63aad3af9e8d304c9bbe79bfb0e6" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/define-property@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/define-property" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/define-property/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/define-property.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-descriptor@1.0.2", + "name": "is-descriptor", + "version": "1.0.2", + "description": "Returns true if a value has the characteristics of a valid JavaScript descriptor. Works for data descriptors and accessor descriptors.", + "hashes": [ + { + "alg": "SHA-512", + "content": "d9e8ace56a90195ee97a8a03c8b98d10f52ba6cf7e4975f973da4bdf1101fb87bd1e71ae0daee607b907c47c3809ba92f64d53da1387de688bf27f16b62615b6" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-descriptor@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/is-descriptor" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/is-descriptor/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/is-descriptor.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-accessor-descriptor@1.0.0", + "name": "is-accessor-descriptor", + "version": "1.0.0", + "description": "Returns true if a value has the characteristics of a valid JavaScript accessor descriptor.", + "hashes": [ + { + "alg": "SHA-512", + "content": "9b98671d391c56c3dfab1dc02a5cadb483dbec9f97ca41ef24fd81f5b6438e584b22812ae17a0aeb8560edba199555982ba2d463de1d60f104ecb87466464a71" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-accessor-descriptor@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/is-accessor-descriptor" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/is-accessor-descriptor/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/is-accessor-descriptor.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/kind-of@6.0.3", + "name": "kind-of", + "version": "6.0.3", + "description": "Get the native type of a value.", + "hashes": [ + { + "alg": "SHA-512", + "content": "75c4b5ba5fbdb66783f794fec76f3f7a12e077d98435adcbb2f0d3b739b7bf20443bb44fa6dbc00feb78e165576948d305172ba45785942f160abb94478e7a87" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/kind-of@6.0.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/kind-of" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/kind-of/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/kind-of.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-data-descriptor@1.0.0", + "name": "is-data-descriptor", + "version": "1.0.0", + "description": "Returns true if a value has the characteristics of a valid JavaScript data descriptor.", + "hashes": [ + { + "alg": "SHA-512", + "content": "8db457cb5166b40a028d0915988558c2ebaa0c551b68e7838e679dd6d3863ebb0c86d240e2b0fdb64800d05d6a2778111515dc1d856475e68fe74439ac4fe32d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-data-descriptor@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/is-data-descriptor" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/is-data-descriptor/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/is-data-descriptor.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mixin-deep@1.3.2", + "name": "mixin-deep", + "version": "1.3.2", + "description": "Deeply mix the properties of objects into the first object. Like merge-deep, but doesn't clone.", + "hashes": [ + { + "alg": "SHA-512", + "content": "591a039fffe65c1889d47e34aea6b7bc7d2da1e3f04ac19be398889d6953c926be52ee24ded6144b16b6bf52aa0222edbe5ad2cda131a92d60b64f7a03dcef10" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/mixin-deep@1.3.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/mixin-deep" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/mixin-deep/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/mixin-deep.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/for-in@1.0.2", + "name": "for-in", + "version": "1.0.2", + "description": "Iterate over the own and inherited enumerable properties of an object, and return an object with properties that evaluate to true from the callback. Exit early by returning `false`. JavaScript/Node.js", + "hashes": [ + { + "alg": "SHA-1", + "content": "81068d295a8142ec0ac726c6e2200c30fb6d5e80" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/for-in@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/for-in" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/for-in/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/for-in.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pascalcase@0.1.1", + "name": "pascalcase", + "version": "0.1.1", + "description": "Convert a string to pascal-case.", + "hashes": [ + { + "alg": "SHA-1", + "content": "b363e55e8006ca6fe21784d2db22bd15d7917f14" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/pascalcase@0.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/pascalcase" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/pascalcase/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/pascalcase.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/map-cache@0.2.2", + "name": "map-cache", + "version": "0.2.2", + "description": "Basic cache object for storing key-value pairs.", + "hashes": [ + { + "alg": "SHA-1", + "content": "c32abd0bd6525d9b051645bb4f26ac5dc98a0dbf" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/map-cache@0.2.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/map-cache" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/map-cache/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/map-cache.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/source-map@0.5.7", + "name": "source-map", + "version": "0.5.7", + "description": "Generates and consumes source maps", + "hashes": [ + { + "alg": "SHA-1", + "content": "8a039d2d1021d22d1ea14c80d8ea468ba2ef3fcc" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/source-map@0.5.7", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/mozilla/source-map" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mozilla/source-map/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/mozilla/source-map.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/source-map-resolve@0.5.3", + "name": "source-map-resolve", + "version": "0.5.3", + "description": "Resolve the source map and/or sources for a generated file.", + "hashes": [ + { + "alg": "SHA-512", + "content": "1edcfe467b175a4e7e3f6b25c79261dd0ebabe1423d429659b4cef9da63df3e345c7e0efd8217f7f93bfb7cc7e29a35dadd200b2bb8dce887f2a989a95ba809f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/source-map-resolve@0.5.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/lydell/source-map-resolve#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lydell/source-map-resolve/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lydell/source-map-resolve.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/atob@2.1.2", + "name": "atob", + "version": "2.1.2", + "description": "atob for Node.JS and Linux / Mac / Windows CLI (it's a one-liner)", + "hashes": [ + { + "alg": "SHA-512", + "content": "5a6eae92868e1898bfef7a7f725d86bcb8d323924cd64fced788ac0fbdd830bf12b6b1ffeff9511609a0f272026600f76d966f8f0086c6d30e0f7c16340bbc72" + } + ], + "licenses": [ + { + "license": { + "name": "(MIT OR Apache-2.0)" + } + } + ], + "purl": "pkg:npm/atob@2.1.2", + "externalReferences": [ + { + "type": "website", + "url": "https://git.coolaj86.com/coolaj86/atob.js.git" + }, + { + "type": "vcs", + "url": "git://git.coolaj86.com/coolaj86/atob.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/resolve-url@0.2.1", + "name": "resolve-url", + "version": "0.2.1", + "description": "Like Node.js’ `path.resolve`/`url.resolve` for the browser.", + "hashes": [ + { + "alg": "SHA-1", + "content": "2c637fe77c893afd2a663fe21aa9080068e2052a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/resolve-url@0.2.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/lydell/resolve-url#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lydell/resolve-url/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lydell/resolve-url.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/source-map-url@0.4.0", + "name": "source-map-url", + "version": "0.4.0", + "description": "Tools for working with sourceMappingURL comments.", + "hashes": [ + { + "alg": "SHA-1", + "content": "3e935d7ddd73631b97659956d55128e87b5084a3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/source-map-url@0.4.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/lydell/source-map-url#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lydell/source-map-url/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lydell/source-map-url.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/urix@0.1.0", + "name": "urix", + "version": "0.1.0", + "description": "Makes Windows-style paths more unix and URI friendly.", + "hashes": [ + { + "alg": "SHA-1", + "content": "da937f7a62e21fec1fd18d49b35c2935067a6c72" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/urix@0.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/lydell/urix#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lydell/urix/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lydell/urix.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/use@3.1.1", + "name": "use", + "version": "3.1.1", + "description": "Easily add plugin support to your node.js application.", + "hashes": [ + { + "alg": "SHA-512", + "content": "73011255794edeeae5f585a5156fd303d72c842121b6eec8289fe9e6ca09fe01a98fbbdbbc5ac063f7888a843a0f0db72a3661620888a3c1ceb359d0dafaffa1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/use@3.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/use" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/use/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/use.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/snapdragon-node@2.1.1", + "name": "snapdragon-node", + "version": "2.1.1", + "description": "Snapdragon utility for creating a new AST node in custom code, such as plugins.", + "hashes": [ + { + "alg": "SHA-512", + "content": "3b6ee5e3168c62dfd1490e53477be9582001e4a6ff73321ca9414e33f0b87d870b9db6547353e48d300c8e87f6a4159a493c0e51deaa5077051951a3eda2309f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/snapdragon-node@2.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/snapdragon-node" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/snapdragon-node/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/snapdragon-node.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/snapdragon-util@3.0.1", + "name": "snapdragon-util", + "version": "3.0.1", + "description": "Utilities for the snapdragon parser/compiler.", + "hashes": [ + { + "alg": "SHA-512", + "content": "99b2a431d40ab235f80402f86d16138f6d5e74e7fc70ded71dd6142447be667f7d85511870cbca3dcb7522a35eefe0193e2ae7f01083390047419927aa62a565" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/snapdragon-util@3.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/snapdragon-util" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/snapdragon-util/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/snapdragon-util.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/to-regex@3.0.2", + "name": "to-regex", + "version": "3.0.2", + "description": "Generate a regex from a string or array of strings.", + "hashes": [ + { + "alg": "SHA-512", + "content": "156b6578d02d67f2a2daab6a7a3d825d339ac8e1fd6c70d017e438f15a56c835e36d8c40e18cfc883077d735ce05494e1c72a27436ea195ad352f40c3e604607" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/to-regex@3.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/to-regex" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/to-regex/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/to-regex.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/define-property@2.0.2", + "name": "define-property", + "version": "2.0.2", + "description": "Define a non-enumerable property on an object. Uses Reflect.defineProperty when available, otherwise Object.defineProperty.", + "hashes": [ + { + "alg": "SHA-512", + "content": "8f02b6515e1c9cfa5b706efe55101129364f516a30c1703c6f31f934feae774a1e031c983ee1995000bb84cba0a42773e01792665d8397d93ae821c9ff8e9961" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/define-property@2.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/define-property" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/define-property/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/define-property.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/regex-not@1.0.2", + "name": "regex-not", + "version": "1.0.2", + "description": "Create a javascript regular expression for matching everything except for the given string.", + "hashes": [ + { + "alg": "SHA-512", + "content": "27a4838d4803c508f936eb273ad745c43c0dffe1d6ca447c1842f072d27b99daa1732cb5c44738491147517bf14e9ebad586952808df44b67d702a92ead9f7d8" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/regex-not@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/regex-not" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/regex-not/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/regex-not.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-regex@1.1.0", + "name": "safe-regex", + "version": "1.1.0", + "description": "detect possibly catastrophic, exponential-time regular expressions", + "hashes": [ + { + "alg": "SHA-1", + "content": "40a3669f3b077d1e943d44629e157dd48023bf2e" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/safe-regex@1.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/substack/safe-regex" + }, + { + "type": "issue-tracker", + "url": "https://github.com/substack/safe-regex/issues" + }, + { + "type": "vcs", + "url": "git://github.com/substack/safe-regex.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ret@0.1.15", + "name": "ret", + "version": "0.1.15", + "description": "Tokenizes a string that represents a regular expression.", + "hashes": [ + { + "alg": "SHA-512", + "content": "4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ret@0.1.15", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/fent/ret.js#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/fent/ret.js/issues" + }, + { + "type": "vcs", + "url": "git://github.com/fent/ret.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/extglob@2.0.4", + "name": "extglob", + "version": "2.0.4", + "description": "Extended glob support for JavaScript. Adds (almost) the expressive power of regular expressions to glob patterns.", + "hashes": [ + { + "alg": "SHA-512", + "content": "3666fa4179042ecb81af6e02252922968e941c781b7a42b95226607c4e941c3dc46f6ed80baa03f9b85c4feb49e9c97c766b20750c675a572bcbc92c04804ba7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/extglob@2.0.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/micromatch/extglob" + }, + { + "type": "issue-tracker", + "url": "https://github.com/micromatch/extglob/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/micromatch/extglob.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/expand-brackets@2.1.4", + "name": "expand-brackets", + "version": "2.1.4", + "description": "Expand POSIX bracket expressions (character classes) in glob patterns.", + "hashes": [ + { + "alg": "SHA-1", + "content": "b77735e315ce30f6b6eff0f83b04151a22449622" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/expand-brackets@2.1.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/expand-brackets" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/expand-brackets/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/expand-brackets.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/posix-character-classes@0.1.1", + "name": "posix-character-classes", + "version": "0.1.1", + "description": "POSIX character classes for creating regular expressions.", + "hashes": [ + { + "alg": "SHA-1", + "content": "01eac0fe3b5af71a2a6c02feabb8c1fef7e00eab" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/posix-character-classes@0.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/posix-character-classes" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/posix-character-classes/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/posix-character-classes.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fragment-cache@0.2.1", + "name": "fragment-cache", + "version": "0.2.1", + "description": "A cache for managing namespaced sub-caches", + "hashes": [ + { + "alg": "SHA-1", + "content": "4290fad27f13e89be7f33799c6bc5a0abfff0d19" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fragment-cache@0.2.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/fragment-cache" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/fragment-cache/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/fragment-cache.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/nanomatch@1.2.13", + "name": "nanomatch", + "version": "1.2.13", + "description": "Fast, minimal glob matcher for node.js. Similar to micromatch, minimatch and multimatch, but complete Bash 4.3 wildcard support only (no support for exglobs, posix brackets or braces)", + "hashes": [ + { + "alg": "SHA-512", + "content": "7e9a1ed93d116c7c014c150e7ed01f04f683122d3ab9f6946a2d2613a627d6469c7374a74c4adf6ff87e5fde155f323ae2b2851d82265d2bddc061829b03aa08" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/nanomatch@1.2.13", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/micromatch/nanomatch" + }, + { + "type": "issue-tracker", + "url": "https://github.com/micromatch/nanomatch/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/micromatch/nanomatch.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-windows@1.0.2", + "name": "is-windows", + "version": "1.0.2", + "description": "Returns true if the platform is windows. UMD module, works with node.js, commonjs, browser, AMD, electron, etc.", + "hashes": [ + { + "alg": "SHA-512", + "content": "7972b55089ead9b3e68f25fa7b754723330ba1b73827de22e005a7f87a6adce5392a4ad10bde8e01c4773d127fa46bba9bc4d19c11cff5d917415b13fc239520" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-windows@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/is-windows" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/is-windows/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/is-windows.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object.pick@1.3.0", + "name": "object.pick", + "version": "1.3.0", + "description": "Returns a filtered copy of an object with only the specified keys, similar to `_.pick` from lodash / underscore.", + "hashes": [ + { + "alg": "SHA-1", + "content": "87a10ac4c1694bd2e1cbf53591a66141fb5dd747" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/object.pick@1.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/object.pick" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/object.pick/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/object.pick.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/stack-utils@1.0.2", + "name": "stack-utils", + "version": "1.0.2", + "description": "Captures and cleans stack traces", + "hashes": [ + { + "alg": "SHA-512", + "content": "3135fe31e1b953df7871ace48ddffd28d01aa6c1e789b8cc2e77d7a1d9645f0efa24479ad1488dcebaa2773a357a633093bc3942173d8dde019fd4c16f5305c0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/stack-utils@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/tapjs/stack-utils#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/tapjs/stack-utils/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/tapjs/stack-utils.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-mock@24.9.0", + "name": "jest-mock", + "version": "24.9.0", + "description": "## API", + "hashes": [ + { + "alg": "SHA-512", + "content": "dc111837959b4aaf7077e4b22c3112ec01e78c7f40fd1381c26cfb976cbea25f8db5214ef03622101ce83b509e15cf5af03632d7410ee1d0c556fff0377ce5d7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-mock@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40jest/transform@24.9.0", + "group": "@jest", + "name": "transform", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "4dc4149b2351c55f784b442930e9d9974fbee91322aa96c7fd931c70507f6a692ee94c2fc9bd5c8d85fbc64a799c63646d7e103c7fc5701eaad470531f29cb99" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40jest/transform@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/core@7.10.5", + "group": "@babel", + "name": "core", + "version": "7.10.5", + "description": "Babel compiler core.", + "hashes": [ + { + "alg": "SHA-512", + "content": "3b7e0b428a185435cf97b41609d5bda78351f909733abef14a13cf273f06b2e094dfff2e6bfc2a4ebee09a7c57bfe58111288653f1b9b35ea2ead52f1e435bfb" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/core@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://babeljs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/generator@7.10.5", + "group": "@babel", + "name": "generator", + "version": "7.10.5", + "description": "Turns an AST into code.", + "hashes": [ + { + "alg": "SHA-512", + "content": "def5f1af71445bb13b949662590ddb338faffd5cabf42fa1a68950f01185afd63c462dad14b5938b19b028169f0ee8ced5655a8787e1641794d5b89e29d8218a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/generator@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://babeljs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/types@7.10.5", + "group": "@babel", + "name": "types", + "version": "7.10.5", + "description": "Babel Types is a Lodash-esque utility library for AST nodes", + "hashes": [ + { + "alg": "SHA-512", + "content": "8b157ae8a59f088e862a803fd87f6fe9b41d6df5c4c30a4e750f1c46f6f817e7b2be195a1f1585310078fb777d40525766c8a28aa56b7b0355d03144429c93e1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/types@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://babeljs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/to-fast-properties@2.0.0", + "name": "to-fast-properties", + "version": "2.0.0", + "description": "Force V8 to use fast properties for an object", + "hashes": [ + { + "alg": "SHA-1", + "content": "dc5e698cbd079265bc73e0377681a4e4e83f616e" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/to-fast-properties@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/to-fast-properties#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/to-fast-properties/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/to-fast-properties.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsesc@2.5.2", + "name": "jsesc", + "version": "2.5.2", + "description": "Given some data, jsesc returns the shortest possible stringified & ASCII-safe representation of that data.", + "hashes": [ + { + "alg": "SHA-512", + "content": "398bbb5c4ce39024370b93ecdd0219b107cda6aa09c99640f7dc1df5a59dd39342b42e6958e91284ada690be875d047afc2cb695b35d3e5641a6e4075c4eb780" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jsesc@2.5.2", + "externalReferences": [ + { + "type": "website", + "url": "https://mths.be/jsesc" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mathiasbynens/jsesc/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/mathiasbynens/jsesc.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-module-transforms@7.10.5", + "group": "@babel", + "name": "helper-module-transforms", + "version": "7.10.5", + "description": "Babel helper functions for implementing ES6 module transformations", + "hashes": [ + { + "alg": "SHA-512", + "content": "e0ff8258c27afe3d56f75e484c969491a74b39b982451482db7e2e72d25f9ffbc7aec2cdc6c47c77095c5eff598495b397bedac1ffa659749910ab79b743a794" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-module-transforms@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://babeljs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-module-imports@7.10.4", + "group": "@babel", + "name": "helper-module-imports", + "version": "7.10.4", + "description": "Babel helper functions for inserting module loads", + "hashes": [ + { + "alg": "SHA-512", + "content": "9c44091ea61abc8db5ee80fdface4c501ce4eb1d4896fa12f564cf7e01b8dc26cc11e4ad134bfeafe4ee716771f0a146a303c6bf23a40d3f7eec31de7480e757" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-module-imports@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://babeljs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-replace-supers@7.10.4", + "group": "@babel", + "name": "helper-replace-supers", + "version": "7.10.4", + "description": "Helper function to replace supers", + "hashes": [ + { + "alg": "SHA-512", + "content": "b0fc597c55e8704ca66137552b550d9853c137e1efe662642cfb185b0181c590316967c5bbec6aa7b6faa960f4ca336e34bd9529ce8be4cd7cb4e5d43fb354d0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-replace-supers@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-member-expression-to-functions@7.10.5", + "group": "@babel", + "name": "helper-member-expression-to-functions", + "version": "7.10.5", + "description": "Helper function to replace certain member expressions with function calls", + "hashes": [ + { + "alg": "SHA-512", + "content": "1e2a89a580f9f96a290972006d00c6d33c9ee57615bdc3bdc3f0c7a791ac68691151a6a62e3d9b12dbba8bcae7186a6b0211ccdea89d08c829ef51c5e1e9dd84" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-member-expression-to-functions@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-optimise-call-expression@7.10.4", + "group": "@babel", + "name": "helper-optimise-call-expression", + "version": "7.10.4", + "description": "Helper function to optimise call expression", + "hashes": [ + { + "alg": "SHA-512", + "content": "9f7506298e155f05d384488aae0440a153c132a7a83e01d5aa21d939a9c02421bd9d050bda92d1422ad4ce5d22a0a7251c6a46a918083a481c20968858ba7282" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-optimise-call-expression@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/traverse@7.10.5", + "group": "@babel", + "name": "traverse", + "version": "7.10.5", + "description": "The Babel Traverse module maintains the overall tree state, and is responsible for replacing, removing, and adding nodes", + "hashes": [ + { + "alg": "SHA-512", + "content": "c9cfdfcafda05233eacd3cf4587791247da9bfb8c0f6403b9815f6b5797fc7988e13cd6e6953ee18fb5a624ef09a4c786faee643b36a23cae64f6a45e3b29829" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/traverse@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://babeljs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-function-name@7.10.4", + "group": "@babel", + "name": "helper-function-name", + "version": "7.10.4", + "description": "Helper function to change the property 'name' of every function", + "hashes": [ + { + "alg": "SHA-512", + "content": "61d692cb3d67f20638e0498def1e38cc19fdcd0d51cb663edc64c0fb7bc7e8c8b391ed55c346960cceba14e6043f0f3ffea2a49aa39c92b1a04d86beeac71ea9" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-function-name@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-get-function-arity@7.10.4", + "group": "@babel", + "name": "helper-get-function-arity", + "version": "7.10.4", + "description": "Helper function to get function arity", + "hashes": [ + { + "alg": "SHA-512", + "content": "12437760307e4910e0888527360726883dfad6d8be0156cbddfdc77a77fa76aa94cabe5d32ca2b9e8d2525626e2e10e1908e6c604a608facbd901f00394d48d8" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-get-function-arity@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/template@7.10.4", + "group": "@babel", + "name": "template", + "version": "7.10.4", + "description": "Generate an AST from a string template.", + "hashes": [ + { + "alg": "SHA-512", + "content": "6428c3dbb706245501ea7982075127922debf8be6426f797f69ab54af0142a8202cba099f720fcc4ed3ce985dd621bcd8c17677a49b866768fe720bc0acff5b4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/template@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://babeljs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/parser@7.10.5", + "group": "@babel", + "name": "parser", + "version": "7.10.5", + "description": "A JavaScript parser", + "hashes": [ + { + "alg": "SHA-512", + "content": "c1faf2c72e1b135522bef40a4900d4e3f5fa76bfa2f1b72d8d48e3f19caddc3432ecdb4f8b32574fc339da7aa934a2fe9ead8f5bc97193866a2e3d1f0f807885" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/parser@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://babeljs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-split-export-declaration@7.10.4", + "group": "@babel", + "name": "helper-split-export-declaration", + "version": "7.10.4", + "description": ">", + "hashes": [ + { + "alg": "SHA-512", + "content": "a724814dea147dfe7a7cbe42054da15a6f537ac038afface908f43c892efbe0cf4f4c07d62d7c861ede206b89569835a3def8096e6b4bc120e54e2ecd9bb9686" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-split-export-declaration@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@4.1.1", + "name": "debug", + "version": "4.1.1", + "description": "small debugging utility", + "hashes": [ + { + "alg": "SHA-512", + "content": "a58008cde468f09e8a3c4689d1558e8793f391bc3f45eb6ecde84633b411457e617b87cf1f1dab74a301db9e9e8490a45fe5d1426d7a7992ea2cd4bc45265767" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/debug@4.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/visionmedia/debug#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/visionmedia/debug/issues" + }, + { + "type": "vcs", + "url": "git://github.com/visionmedia/debug.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.2", + "name": "ms", + "version": "2.1.2", + "description": "Tiny millisecond conversion utility", + "hashes": [ + { + "alg": "SHA-512", + "content": "b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/zeit/ms#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/zeit/ms/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/zeit/ms.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/globals@11.12.0", + "name": "globals", + "version": "11.12.0", + "description": "Global identifiers from different JavaScript environments", + "hashes": [ + { + "alg": "SHA-512", + "content": "58e069fc410652222c252a7bc1cbffcba30efa557d5289dc5aac6e15f9bc781c3358d8327c177a1b3f8878a43d8c29b28681fdf60d793374fe41a5471638b354" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/globals@11.12.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/globals#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/globals/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/globals.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-simple-access@7.10.4", + "group": "@babel", + "name": "helper-simple-access", + "version": "7.10.4", + "description": "Babel helper for ensuring that access to a given value is performed through simple accesses", + "hashes": [ + { + "alg": "SHA-512", + "content": "d1f332ef67a3fd512f17c50b997eb26f932d1c6e2e1f80db77a23f6870dbfc9560d1b6e2bf0b7d5a0fa1dee32f5fe41216dc2be4c788b6f6b36eb7388ed4405f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-simple-access@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://babeljs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helpers@7.10.4", + "group": "@babel", + "name": "helpers", + "version": "7.10.4", + "description": "Collection of helper functions used by Babel transforms.", + "hashes": [ + { + "alg": "SHA-512", + "content": "2f6817fd779438d7846c8efc7574ab27319dcf8190f994c0fda6b37d4b056968d27bde64882b8e6791ec5ef922c378b017e9851d24547c953cb7a61abe871d5c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helpers@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://babeljs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/convert-source-map@1.7.0", + "name": "convert-source-map", + "version": "1.7.0", + "description": "Converts a source-map from/to different formats and allows adding/changing properties.", + "hashes": [ + { + "alg": "SHA-512", + "content": "e052645f3297103075b270856652cfe20a42dc920b89c0a919bcc6f5ff46eed1aa182cc44d0da158fadc8a703da14e30b5fd9b8946841f9d3ae549cc791df7a0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/convert-source-map@1.7.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/thlorenz/convert-source-map" + }, + { + "type": "issue-tracker", + "url": "https://github.com/thlorenz/convert-source-map/issues" + }, + { + "type": "vcs", + "url": "git://github.com/thlorenz/convert-source-map.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/gensync@1.0.0-beta.1", + "name": "gensync", + "version": "1.0.0-beta.1", + "description": "Allows users to use generators in order to write common functions that can be both sync or async.", + "hashes": [ + { + "alg": "SHA-512", + "content": "afc102e8d3b5b27807ff3743f5f8910cb75c8276dac976a1fa62e031a9d3688649a840b5319b2d9a7a31f0aa67236fdfc50c2ba793a908e6162e9e2b065e0972" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/gensync@1.0.0-beta.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/json5@2.1.3", + "name": "json5", + "version": "2.1.3", + "description": "JSON for humans.", + "hashes": [ + { + "alg": "SHA-512", + "content": "2973ef3a6f0af4824a14cd1b99d9fc41787bb9d0e1d60fe08a2797d0d2c268c9dbe21122545aa7a29d889935c27397b4fe81f3dcb4ea9871ad1319f985f32438" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/json5@2.1.3", + "externalReferences": [ + { + "type": "website", + "url": "http://json5.org/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/json5/json5/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/json5/json5.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimist@1.2.5", + "name": "minimist", + "version": "1.2.5", + "description": "parse argument options", + "hashes": [ + { + "alg": "SHA-512", + "content": "14cf6735462b4410042d9413df179943b7e630e060ea758d989293720b0979a2ecb4ffd43835691acaf93a15e185783a7feaad27cba267e3d4c640d67202172f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/minimist@1.2.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/substack/minimist" + }, + { + "type": "issue-tracker", + "url": "https://github.com/substack/minimist/issues" + }, + { + "type": "vcs", + "url": "git://github.com/substack/minimist.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/resolve@1.17.0", + "name": "resolve", + "version": "1.17.0", + "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", + "hashes": [ + { + "alg": "SHA-512", + "content": "89cfbb258895f158b6cb34061563a48990f967dcfb3b66619bd5cc693c5d244c4a6ac89e142afec9767f5a65ec7241e22a5d766abd32e978970f1de6e111e7d7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/resolve@1.17.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/browserify/resolve#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/browserify/resolve/issues" + }, + { + "type": "vcs", + "url": "git://github.com/browserify/resolve.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-parse@1.0.6", + "name": "path-parse", + "version": "1.0.6", + "description": "Node.js path.parse() ponyfill", + "hashes": [ + { + "alg": "SHA-512", + "content": "19298e4f611b1eb20d05ff5247b08310bc2527c004364dd09fb3a290ae2715802edceb5edbe258355be4a401109b7fd32cd109143ff16498f3cb183728158ecf" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/path-parse@1.0.6", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jbgutierrez/path-parse#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jbgutierrez/path-parse/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jbgutierrez/path-parse.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/babel-plugin-istanbul@5.2.0", + "name": "babel-plugin-istanbul", + "version": "5.2.0", + "description": "A babel plugin that adds istanbul instrumentation to ES6 code", + "hashes": [ + { + "alg": "SHA-512", + "content": "e4ba610b451203cb788b5cc2b636db35bea3263ffdf97e8fdfb41f8ab73fef4110df8c4a94c5be6b54471b0c4623e4b05a9370676ec7aafcc0a1b7aa697c2267" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/babel-plugin-istanbul@5.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/istanbuljs/babel-plugin-istanbul#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/istanbuljs/babel-plugin-istanbul/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/istanbuljs/babel-plugin-istanbul.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-plugin-utils@7.10.4", + "group": "@babel", + "name": "helper-plugin-utils", + "version": "7.10.4", + "description": "General utilities for plugins to use", + "hashes": [ + { + "alg": "SHA-512", + "content": "3b8282bd003a94b88c53d97679ac013cc7f5c4f3fcc4f7c1de2110c35e7484e553aa3feb7d7cf44e14dbe07133a907ecd819a8e40cbc073c5fcd5b41aebf5d56" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-plugin-utils@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://babeljs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/istanbul-lib-instrument@3.3.0", + "name": "istanbul-lib-instrument", + "version": "3.3.0", + "description": "Core istanbul API for JS code coverage", + "hashes": [ + { + "alg": "SHA-512", + "content": "e679c8378be8e714191dd5e7a3f6035c9d06f88ddd026e178337d25533cb4298ffcc0576755e89bb2d3269fd74ff3ac9389787a0dddfada15ef9746ad9b15564" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/istanbul-lib-instrument@3.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://istanbul.js.org/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/istanbuljs/istanbuljs/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/istanbul-lib-coverage@2.0.5", + "name": "istanbul-lib-coverage", + "version": "2.0.5", + "description": "Data library for istanbul coverage objects", + "hashes": [ + { + "alg": "SHA-512", + "content": "f1a5f39ee10f089bc69cc4917ede2e743443b5bd55de991090c308e4b23ee87b90cf9a10e09d94167d47f36ada037a89b7238b924c15a880814248e71ad9f998" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/istanbul-lib-coverage@2.0.5", + "externalReferences": [ + { + "type": "website", + "url": "https://istanbul.js.org/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/istanbuljs/istanbuljs/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver@6.3.0", + "name": "semver", + "version": "6.3.0", + "description": "The semantic version parser used by npm.", + "hashes": [ + { + "alg": "SHA-512", + "content": "6f7f5305a4d27d5eb206b6a953cf69e5f29e904da6fcdc270e870e56bb90152d7fbde320773b8f72738cdf833a0b0c56f231ff97111ae6b0680de530bb91c74f" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/semver@6.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/npm/node-semver#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/npm/node-semver/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/npm/node-semver.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/test-exclude@5.2.3", + "name": "test-exclude", + "version": "5.2.3", + "description": "test for inclusion or exclusion of paths using pkg-conf and globs", + "hashes": [ + { + "alg": "SHA-512", + "content": "33ea31b6c78214edc40ed01a187ee289e8f70819335ea14c6f3a9800009dccaba2e1e640fa9ab7b591300a1bce74d7daef1c72f017db9a025222be37702ffeda" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/test-exclude@5.2.3", + "externalReferences": [ + { + "type": "website", + "url": "https://istanbul.js.org/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/istanbuljs/istanbuljs/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/istanbuljs/istanbuljs.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.1.6", + "name": "glob", + "version": "7.1.6", + "description": "a little globber", + "hashes": [ + { + "alg": "SHA-512", + "content": "2f06b1c3267bd8b93bbd920db4d36bcb05f466e2f24adadd0ed69b79f64a018e59189855b607739e5b917acc4d98f8ad1344803be3b6eac5931de292236c0c04" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/glob@7.1.6", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/node-glob#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/node-glob/issues" + }, + { + "type": "vcs", + "url": "git://github.com/isaacs/node-glob.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs.realpath@1.0.0", + "name": "fs.realpath", + "version": "1.0.0", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "hashes": [ + { + "alg": "SHA-1", + "content": "1504ad2523158caa40db4a2787cb01411994ea4f" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/fs.realpath#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/fs.realpath/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/isaacs/fs.realpath.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inflight@1.0.6", + "name": "inflight", + "version": "1.0.6", + "description": "Add callbacks to requests in flight to avoid async duplication", + "hashes": [ + { + "alg": "SHA-1", + "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/inflight" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/inflight/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/npm/inflight.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/once@1.4.0", + "name": "once", + "version": "1.4.0", + "description": "Run a function exactly one time", + "hashes": [ + { + "alg": "SHA-1", + "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/once#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/once/issues" + }, + { + "type": "vcs", + "url": "git://github.com/isaacs/once.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrappy@1.0.2", + "name": "wrappy", + "version": "1.0.2", + "description": "Callback wrapping utility", + "hashes": [ + { + "alg": "SHA-1", + "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/npm/wrappy" + }, + { + "type": "issue-tracker", + "url": "https://github.com/npm/wrappy/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/npm/wrappy.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.0.4", + "name": "minimatch", + "version": "3.0.4", + "description": "a glob matcher in javascript", + "hashes": [ + { + "alg": "SHA-512", + "content": "c891d5404872a8f2d44e0b7d07cdcf5eee96debc7832fbc7bd252f4e8a20a70a060ce510fb20eb4741d1a2dfb23827423bbbb8857de959fb7a91604172a87450" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minimatch@3.0.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/minimatch#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/minimatch/issues" + }, + { + "type": "vcs", + "url": "git://github.com/isaacs/minimatch.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11", + "name": "brace-expansion", + "version": "1.1.11", + "description": "Brace expansion as known from sh/bash", + "hashes": [ + { + "alg": "SHA-512", + "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/juliangruber/brace-expansion" + }, + { + "type": "issue-tracker", + "url": "https://github.com/juliangruber/brace-expansion/issues" + }, + { + "type": "vcs", + "url": "git://github.com/juliangruber/brace-expansion.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/balanced-match@1.0.0", + "name": "balanced-match", + "version": "1.0.0", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "hashes": [ + { + "alg": "SHA-1", + "content": "89b4d199ab2bee49de164ea02b89ce462d71b767" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/balanced-match@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/juliangruber/balanced-match" + }, + { + "type": "issue-tracker", + "url": "https://github.com/juliangruber/balanced-match/issues" + }, + { + "type": "vcs", + "url": "git://github.com/juliangruber/balanced-match.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-map@0.0.1", + "name": "concat-map", + "version": "0.0.1", + "description": "concatenative mapdashery", + "hashes": [ + { + "alg": "SHA-1", + "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/substack/node-concat-map#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/substack/node-concat-map/issues" + }, + { + "type": "vcs", + "url": "git://github.com/substack/node-concat-map.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-is-absolute@1.0.1", + "name": "path-is-absolute", + "version": "1.0.1", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "hashes": [ + { + "alg": "SHA-1", + "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/path-is-absolute#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/path-is-absolute/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/path-is-absolute.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-pkg-up@4.0.0", + "name": "read-pkg-up", + "version": "4.0.0", + "description": "Read the closest package.json file", + "hashes": [ + { + "alg": "SHA-512", + "content": "e9eb50487ee7246b0ad116c6ff64de0f36456bcb218d0d6e9be4b0410e5cc0acb476149774e9dc1216f508fa6f406e21ec5c8e57a101e98955d3226f65034090" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/read-pkg-up@4.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/read-pkg-up#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/read-pkg-up/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/read-pkg-up.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-pkg@3.0.0", + "name": "read-pkg", + "version": "3.0.0", + "description": "Read a package.json file", + "hashes": [ + { + "alg": "SHA-1", + "content": "9cbc686978fee65d16c00e2b19c237fcf6e38389" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/read-pkg@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/read-pkg#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/read-pkg/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/read-pkg.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/load-json-file@4.0.0", + "name": "load-json-file", + "version": "4.0.0", + "description": "Read and parse a JSON file", + "hashes": [ + { + "alg": "SHA-1", + "content": "2f5f45ab91e33216234fd53adab668eb4ec0993b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/load-json-file@4.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/load-json-file#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/load-json-file/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/load-json-file.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/parse-json@4.0.0", + "name": "parse-json", + "version": "4.0.0", + "description": "Parse JSON with more helpful errors", + "hashes": [ + { + "alg": "SHA-1", + "content": "be35f5425be1f7f6c747184f98a788cb99477ee0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/parse-json@4.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/parse-json#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/parse-json/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/parse-json.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/error-ex@1.3.2", + "name": "error-ex", + "version": "1.3.2", + "description": "Easy error subclassing and stack customization", + "hashes": [ + { + "alg": "SHA-512", + "content": "edd147366a9e15212dd9906c0ab8a8aca9e7dd9da98fe7ddf64988e90a16c38fff0cbfa270405f73453ba890a2b2aad3b0a4e3c387cd172da95bd3aa4ad0fce2" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/error-ex@1.3.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/qix-/node-error-ex#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/qix-/node-error-ex/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/qix-/node-error-ex.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-arrayish@0.2.1", + "name": "is-arrayish", + "version": "0.2.1", + "description": "Determines if an object can be used as an array", + "hashes": [ + { + "alg": "SHA-1", + "content": "77c99840527aa8ecb1a8ba697b80645a7a926a9d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-arrayish@0.2.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/qix-/node-is-arrayish#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/qix-/node-is-arrayish/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/qix-/node-is-arrayish.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-parse-better-errors@1.0.2", + "name": "json-parse-better-errors", + "version": "1.0.2", + "description": "JSON.parse with context information on error", + "hashes": [ + { + "alg": "SHA-512", + "content": "9abab264a7d7e4484bee1bea715e961b5c988e78deb980f30e185c00052babc3e8f3934140124ff990d44fbe6a650f7c22452806a76413192e90e53b4ecdb0af" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/json-parse-better-errors@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/zkat/json-parse-better-errors#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/zkat/json-parse-better-errors/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/zkat/json-parse-better-errors.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-bom@3.0.0", + "name": "strip-bom", + "version": "3.0.0", + "description": "Strip UTF-8 byte order mark (BOM) from a string", + "hashes": [ + { + "alg": "SHA-1", + "content": "2334c18e9c759f7bdd56fdef7e9ae3d588e68ed3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/strip-bom@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/strip-bom#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/strip-bom/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/strip-bom.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/normalize-package-data@2.5.0", + "name": "normalize-package-data", + "version": "2.5.0", + "description": "Normalizes data that can be found in package.json files.", + "hashes": [ + { + "alg": "SHA-512", + "content": "ff908c3774f44785d38f80dc19a7b1a3eae8652752156ff400e39344eae3c73086d70ad65c4b066d129ebe39482fe643138b19949af9103e185b4caa9a42be78" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/normalize-package-data@2.5.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/npm/normalize-package-data#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/npm/normalize-package-data/issues" + }, + { + "type": "vcs", + "url": "git://github.com/npm/normalize-package-data.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/hosted-git-info@2.8.8", + "name": "hosted-git-info", + "version": "2.8.8", + "description": "Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab", + "hashes": [ + { + "alg": "SHA-512", + "content": "7ffc330b641a581b3bb7d218a81e13dec475c6f8885625c94494d6065c7619fde0d178b9bc8ed8cb89285d0d5cf4e60318737db01cb50d0d8007c7ea6415a152" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/hosted-git-info@2.8.8", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/npm/hosted-git-info" + }, + { + "type": "issue-tracker", + "url": "https://github.com/npm/hosted-git-info/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/npm/hosted-git-info.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4", + "name": "validate-npm-package-license", + "version": "3.0.4", + "description": "Give me a string and I'll tell you if it's a valid npm package license string", + "hashes": [ + { + "alg": "SHA-512", + "content": "0e92a6d948bfc4deff1d0282b69671a11581859f59d24aadca01bc5c280d43c6650e7c6e4265a18f9eba8fc7cde02bb7fc999b86c0e8edf70026ae2cf61dbb13" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/validate-npm-package-license@3.0.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/kemitchell/validate-npm-package-license.js#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/kemitchell/validate-npm-package-license.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/kemitchell/validate-npm-package-license.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-correct@3.1.1", + "name": "spdx-correct", + "version": "3.1.1", + "description": "correct invalid SPDX expressions", + "hashes": [ + { + "alg": "SHA-512", + "content": "70e61c516c210ae1c25e2e3d4611510b22442b788f8f5662cfd0e9562577b5b64ec170f8f50cc837732938b24dc61daac2ada524965a28c570f6a362e234c2d3" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/spdx-correct@3.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jslicense/spdx-correct.js#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jslicense/spdx-correct.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jslicense/spdx-correct.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-expression-parse@3.0.1", + "name": "spdx-expression-parse", + "version": "3.0.1", + "description": "parse SPDX license expressions", + "hashes": [ + { + "alg": "SHA-512", + "content": "71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/spdx-expression-parse@3.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jslicense/spdx-expression-parse.js#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jslicense/spdx-expression-parse.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jslicense/spdx-expression-parse.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-exceptions@2.3.0", + "name": "spdx-exceptions", + "version": "2.3.0", + "description": "list of SPDX standard license exceptions", + "hashes": [ + { + "alg": "SHA-512", + "content": "fed4eb60e0bb3cf2359d4020c77e21529a97bb2246f834c72539c850b1b8ac3ca08b8c6efed7e09aad5ed5c211c11cf0660a3834bc928beae270b919930e22e4" + } + ], + "licenses": [ + { + "license": { + "id": "CC-BY-3.0" + } + } + ], + "purl": "pkg:npm/spdx-exceptions@2.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/kemitchell/spdx-exceptions.json#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/kemitchell/spdx-exceptions.json/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/kemitchell/spdx-exceptions.json.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-license-ids@3.0.5", + "name": "spdx-license-ids", + "version": "3.0.5", + "description": "A list of SPDX license identifiers", + "hashes": [ + { + "alg": "SHA-512", + "content": "27e156cd9a329c91171a9855212f97121de41528d95ffd62f6014169641c07efed9a97b6a94b12040069731ab19c0c45762505120017d5b8d8190bc8666a33f5" + } + ], + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "purl": "pkg:npm/spdx-license-ids@3.0.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/shinnn/spdx-license-ids#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/shinnn/spdx-license-ids/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/shinnn/spdx-license-ids.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-type@3.0.0", + "name": "path-type", + "version": "3.0.0", + "description": "Check if a path is a file, directory, or symlink", + "hashes": [ + { + "alg": "SHA-512", + "content": "4f6654b1d6451e0037bb87b93df3db8ddec70c3a713e741be633744ab0ec8cd4ae5571c9aadc139d6a86d01d6366b82627fee58f51265480725add60c46916be" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/path-type@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/path-type#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/path-type/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/path-type.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/require-main-filename@2.0.0", + "name": "require-main-filename", + "version": "2.0.0", + "description": "shim for require.main.filename() that works in as many environments as possible", + "hashes": [ + { + "alg": "SHA-512", + "content": "34a37990c0f294aba577160b4947eb6e8e53bb387885dfb613c34f3d7d36999b67d55b911104e861efd9765272f89dee0a97da886174e5eec1f16d225db4079a" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/require-main-filename@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/yargs/require-main-filename#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/yargs/require-main-filename/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/yargs/require-main-filename.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-haste-map@24.9.0", + "name": "jest-haste-map", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "91f5459acb96ba2d928f5469d402780fd1ea270138bb04e54bfbcef9e45468c99de78045a658b65e13109cf0b69387071556c1d90d82fa3b48d4018b8049c28d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-haste-map@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/anymatch@2.0.0", + "name": "anymatch", + "version": "2.0.0", + "description": "Matches strings against configurable strings, globs, regular expressions, and/or functions", + "hashes": [ + { + "alg": "SHA-512", + "content": "e6d78eb105800571c70453fdcb7b244b93f777f59f597a6fdc5529cbe2e8accacd61a4fda48e282cc417ee3cd0d8a9253691a9587cdd0974c34f66375c695907" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/anymatch@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/micromatch/anymatch" + }, + { + "type": "issue-tracker", + "url": "https://github.com/micromatch/anymatch/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/micromatch/anymatch.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/normalize-path@2.1.1", + "name": "normalize-path", + "version": "2.1.1", + "description": "Normalize file path slashes to be unix-like forward slashes. Also condenses repeat slashes to a single slash and removes and trailing slashes unless disabled.", + "hashes": [ + { + "alg": "SHA-1", + "content": "1ab28b556e198363a8c1a6f7e6fa20137fe6aed9" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/normalize-path@2.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/normalize-path" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/normalize-path/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/normalize-path.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/remove-trailing-separator@1.1.0", + "name": "remove-trailing-separator", + "version": "1.1.0", + "description": "Removes separators from the end of the string.", + "hashes": [ + { + "alg": "SHA-1", + "content": "c24bce2a283adad5bc3f58e0d48249b92379d8ef" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/remove-trailing-separator@1.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/darsain/remove-trailing-separator#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/darsain/remove-trailing-separator/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/darsain/remove-trailing-separator.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fb-watchman@2.0.1", + "name": "fb-watchman", + "version": "2.0.1", + "description": "Bindings for the Watchman file watching service", + "hashes": [ + { + "alg": "SHA-512", + "content": "0e43c9290798ea42b09ae32b7ad061afb1ba56876bedb1700d84d72247c6d608ef3696b1053415dcf6d783a6d1d5cd543f88cf397d231d46db1c034bf6f46356" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/fb-watchman@2.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://facebook.github.io/watchman/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/watchman/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/facebook/watchman.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bser@2.1.1", + "name": "bser", + "version": "2.1.1", + "description": "JavaScript implementation of the BSER Binary Serialization", + "hashes": [ + { + "alg": "SHA-512", + "content": "810c53344fc601f208ae61cb504de8272a7914ee874417e18e7c38ff032603add91832675819a063f972401a670d490698085b49edfdb71d9dfe24ce01f825c1" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/bser@2.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://facebook.github.io/watchman/docs/bser.html" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/watchman/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/watchman.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-int64@0.4.0", + "name": "node-int64", + "version": "0.4.0", + "description": "Support for representing 64-bit integers in JavaScript", + "hashes": [ + { + "alg": "SHA-1", + "content": "87a9065cdb355d3182d8f94ce11188b825c68a3b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/node-int64@0.4.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/broofa/node-int64#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/broofa/node-int64/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/broofa/node-int64.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/invariant@2.2.4", + "name": "invariant", + "version": "2.2.4", + "description": "invariant", + "hashes": [ + { + "alg": "SHA-512", + "content": "a6125f41506e689339ada3a926349f9220fa0696c213836cfff2da5e5eb0198b54058f379d64ba45ff6d5e6d9ef1568aeb42448d895d6cf89ffc0d81d42da034" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/invariant@2.2.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/zertosh/invariant#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/zertosh/invariant/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/zertosh/invariant.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/loose-envify@1.4.0", + "name": "loose-envify", + "version": "1.4.0", + "description": "Fast (and loose) selective `process.env` replacer using js-tokens instead of an AST", + "hashes": [ + { + "alg": "SHA-512", + "content": "972bb13c6aff59f86b95e9b608bfd472751cd7372a280226043cee918ed8e45ff242235d928ebe7d12debe5c351e03324b0edfeb5d54218e34f04b71452a0add" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/loose-envify@1.4.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/zertosh/loose-envify" + }, + { + "type": "issue-tracker", + "url": "https://github.com/zertosh/loose-envify/issues" + }, + { + "type": "vcs", + "url": "git://github.com/zertosh/loose-envify.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-serializer@24.9.0", + "name": "jest-serializer", + "version": "24.9.0", + "description": "Module for serializing and deserializing object into memory and disk. By default, the `v8` implementations are used, but if not present, it defaults to `JSON` implementation. Both serializers have the advantage of being able to serialize `Map`, `Set`, `undefined`, `NaN`, etc, although the JSON one does it through a replacer/reviver.", + "hashes": [ + { + "alg": "SHA-512", + "content": "0f1622a43afc3af7eb287dca7a5e8d7440f7397c63bf15d9d6e218d88f4e15b1a0faf524920ec01af8bae6a6e16d634fbc37245e6ccc3db2b7bb71da0cee3d6d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-serializer@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-util@24.9.0", + "name": "jest-util", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "c7e71953c55198e2716c0d4ae680c177142676ad0e21d0036ab2f193432afb75d2e2382f846fe828659c2030ad3c6d07823c4e62f17e8a53c942c0325df6cd3a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-util@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-ci@2.0.0", + "name": "is-ci", + "version": "2.0.0", + "description": "Detect if the current environment is a CI server", + "hashes": [ + { + "alg": "SHA-512", + "content": "61f253eeb929401d2ea5db1d1cb196aef84125f71fccd35ac180cd232417273d0856219fef93bc1013ca49dbf0dab17e2c60ac5f8159f2d72bddbd7d2dc66ae3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-ci@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/watson/is-ci" + }, + { + "type": "issue-tracker", + "url": "https://github.com/watson/is-ci/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/watson/is-ci.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ci-info@2.0.0", + "name": "ci-info", + "version": "2.0.0", + "description": "Get details about the current Continuous Integration environment", + "hashes": [ + { + "alg": "SHA-512", + "content": "e6d2bb12dad9d0df8e2c532d86da8e8f87c8d8979bf3c0b808064fbb6e4b0d55205c9d00dc9b383cc1aaae7d095355b4321d7f67cc19cd83f1a94ad77816e809" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ci-info@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/watson/ci-info" + }, + { + "type": "issue-tracker", + "url": "https://github.com/watson/ci-info/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/watson/ci-info.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp@0.5.5", + "name": "mkdirp", + "version": "0.5.5", + "description": "Recursively mkdir, like `mkdir -p`", + "hashes": [ + { + "alg": "SHA-512", + "content": "34a98094449fea3306ca6d7ef91d116bbc2f855fb0156eb715a48e14fc116a1bde6b480c51c19485578083fd010b4c22bfd8a1e4d60f0755a7d54108d7f2fec5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/mkdirp@0.5.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/substack/node-mkdirp#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/substack/node-mkdirp/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/substack/node-mkdirp.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-worker@24.9.0", + "name": "jest-worker", + "version": "24.9.0", + "description": "Module for executing heavy tasks under forked processes in parallel, by providing a `Promise` based interface, minimum overhead, and bound workers.", + "hashes": [ + { + "alg": "SHA-512", + "content": "e753c4e2168c497707a219d231d338d9a9dbbd900d613a8caebe76b5528faaab0f24cce83fa15860356a6a15ff1eb0282842b3dee50fcd2bcab3d037a91e2257" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-worker@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/merge-stream@2.0.0", + "name": "merge-stream", + "version": "2.0.0", + "description": "Create a stream that emits events from multiple other streams", + "hashes": [ + { + "alg": "SHA-512", + "content": "69bbffa8e72e3df9375113df0f39995352ca9aec3c913fb49c81ef2ab2a016bc227e897f76859c740e19aac590f0436b14a91debb31fa68fcba2f6c852c6eddf" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/merge-stream@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/grncdr/merge-stream#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/grncdr/merge-stream/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/grncdr/merge-stream.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-color@6.1.0", + "name": "supports-color", + "version": "6.1.0", + "description": "Detect whether a terminal supports color", + "hashes": [ + { + "alg": "SHA-512", + "content": "a9ed637e6d4c83b36afcd4a1e97136e203d744e115b161f10b52c8c7ffd73650fd8b0ed86501a364d8d837bc466841ba88a740f04b4d156e91d208e7557a7ec1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/supports-color@6.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/chalk/supports-color#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/chalk/supports-color/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/chalk/supports-color.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sane@4.1.0", + "name": "sane", + "version": "4.1.0", + "description": "Sane aims to be fast, small, and reliable file system watcher.", + "hashes": [ + { + "alg": "SHA-512", + "content": "8616f30204c85fc3bb4877e9d9cf3f91111f127e2a3bff6af02f5b7b263afadbd9f3b129a19de2d51204be9dbb601b309cd6d8f6659dea968a56629b0202df64" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/sane@4.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/amasad/sane" + }, + { + "type": "issue-tracker", + "url": "https://github.com/amasad/sane/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/amasad/sane.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40cnakazawa/watch@1.0.4", + "group": "@cnakazawa", + "name": "watch", + "version": "1.0.4", + "description": "Utilities for watching file trees.", + "hashes": [ + { + "alg": "SHA-512", + "content": "bfd90884ac237994e1896acb9a3d32d7b096a3275d0122e3f4edb2bdb6646efc3f377ad6398cbdce457aeaeaec02856bd26575e5b2fc834738419504e9c743a1" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cnakazawa/watch@1.0.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/mikeal/watch" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mikeal/watch/issues" + }, + { + "type": "vcs", + "url": "git://github.com/mikeal/watch.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/exec-sh@0.3.4", + "name": "exec-sh", + "version": "0.3.4", + "description": "Execute shell command forwarding all stdio.", + "hashes": [ + { + "alg": "SHA-512", + "content": "b0414891ceb5bfbe6c59e39eef6ab2aea836420d0eb8b112ce250393f3bfcf6aa04b5e72da059516b23a7f6427feac3fd3f3427c212c98d038cce8e4c04653d4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/exec-sh@0.3.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/tsertkov/exec-sh#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/tsertkov/exec-sh/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/tsertkov/exec-sh.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/capture-exit@2.0.0", + "name": "capture-exit", + "version": "2.0.0", + "description": "safely cleanup in signal handlers", + "hashes": [ + { + "alg": "SHA-512", + "content": "3e24ff850993a271e197f1c518df8bc772495339eb558277f8042c9ed8677996ef5bbc7e7f4f1393bc8b2532c4394bc14db76e2de78193111a61750e52b46aea" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/capture-exit@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/stefanpenner/capture-exit#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/stefanpenner/capture-exit/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/stefanpenner/capture-exit.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rsvp@4.8.5", + "name": "rsvp", + "version": "4.8.5", + "description": "A lightweight library that provides tools for organizing asynchronous code", + "hashes": [ + { + "alg": "SHA-512", + "content": "9df30e9404aef4e9d1268d666c4936733d03e7a6b530136b27ba2b8d16501b5d170f2bafc24b0a6ee5cda7aa9afa46e7f37f47c23c2107384599db1a1007dab8" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/rsvp@4.8.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/tildeio/rsvp.js" + }, + { + "type": "issue-tracker", + "url": "https://github.com/tildeio/rsvp.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/tildeio/rsvp.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/execa@1.0.0", + "name": "execa", + "version": "1.0.0", + "description": "A better `child_process`", + "hashes": [ + { + "alg": "SHA-512", + "content": "69d6f1732595e3aaa21f2bd2a79d132add39b41e2d2b71dc985eff9f17c07619e8c7cdec7930dbc276aa28ee2c5d1cbbae81c0205a893ff470fc0b846d7eb52c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/execa@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/execa#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/execa/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/execa.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-stream@4.1.0", + "name": "get-stream", + "version": "4.1.0", + "description": "Get a stream as a string, buffer, or array", + "hashes": [ + { + "alg": "SHA-512", + "content": "18c6ade04279d7ad64232d877af2e5af896e363060be68f8d7729a400ee3b7857c078443b1fa4793b590f4656a7d8cb2c7c392fcbeba2a8c7eac944d9252caef" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/get-stream@4.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/get-stream#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/get-stream/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/get-stream.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pump@3.0.0", + "name": "pump", + "version": "3.0.0", + "description": "pipe streams together and close all of them if one of them closes", + "hashes": [ + { + "alg": "SHA-512", + "content": "2f0672fa9dd216cd4fcad77f8d872de30a6fe3d1e2602a9df5195ce5955d93457ef18cefea34790659374d198f2f57edebd4f13f420c64627e58f154d81161c3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/pump@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/mafintosh/pump#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mafintosh/pump/issues" + }, + { + "type": "vcs", + "url": "git://github.com/mafintosh/pump.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/end-of-stream@1.4.4", + "name": "end-of-stream", + "version": "1.4.4", + "description": "Call a callback when a readable/writable/duplex stream has completed or failed.", + "hashes": [ + { + "alg": "SHA-512", + "content": "faec358a720754f428695b87cd1c97776d6270cf9c9ede02cc3e6b5be342d708ce5124ceb3e4deec53afec084deef4bdc7fa08ca12cfe4f4751fea614001eee5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/end-of-stream@1.4.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/mafintosh/end-of-stream" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mafintosh/end-of-stream/issues" + }, + { + "type": "vcs", + "url": "git://github.com/mafintosh/end-of-stream.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-stream@1.1.0", + "name": "is-stream", + "version": "1.1.0", + "description": "Check if something is a Node.js stream", + "hashes": [ + { + "alg": "SHA-1", + "content": "12d4a3dd4e68e0b79ceb8dbc84173ae80d91ca44" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-stream@1.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/is-stream#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/is-stream/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/is-stream.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-run-path@2.0.2", + "name": "npm-run-path", + "version": "2.0.2", + "description": "Get your PATH prepended with locally installed binaries", + "hashes": [ + { + "alg": "SHA-1", + "content": "35a9232dfa35d7067b4cb2ddf2357b1871536c5f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/npm-run-path@2.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/npm-run-path#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/npm-run-path/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/npm-run-path.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/signal-exit@3.0.3", + "name": "signal-exit", + "version": "3.0.3", + "description": "when you want to fire an event no matter how a process exits.", + "hashes": [ + { + "alg": "SHA-512", + "content": "554278f450bc5353b1c192f121b4d3ac3bcb9dfffa4c383165c2bcc3147ccecd77c69c7bc5b1bad2774196136b162d8432e151a1e0e824eef0b6148bab8d848c" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/signal-exit@3.0.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/tapjs/signal-exit" + }, + { + "type": "issue-tracker", + "url": "https://github.com/tapjs/signal-exit/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/tapjs/signal-exit.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-eof@1.0.0", + "name": "strip-eof", + "version": "1.0.0", + "description": "Strip the End-Of-File (EOF) character from a string/buffer", + "hashes": [ + { + "alg": "SHA-1", + "content": "bb43ff5598a6eb05d89b59fcd129c983313606bf" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/strip-eof@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/strip-eof#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/strip-eof/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/strip-eof.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/walker@1.0.7", + "name": "walker", + "version": "1.0.7", + "description": "A simple directory tree walker.", + "hashes": [ + { + "alg": "SHA-1", + "content": "2f7f9b8fd10d677262b18a884e28d19618e028fb" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/walker@1.0.7", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/daaku/nodejs-walker" + }, + { + "type": "issue-tracker", + "url": "https://github.com/daaku/nodejs-walker/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/daaku/nodejs-walker.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/makeerror@1.0.11", + "name": "makeerror", + "version": "1.0.11", + "description": "A library to make errors.", + "hashes": [ + { + "alg": "SHA-1", + "content": "e01a5c9109f2af79660e4e8b9587790184f5a96c" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/makeerror@1.0.11", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/daaku/nodejs-makeerror#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/daaku/nodejs-makeerror/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/daaku/nodejs-makeerror.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tmpl@1.0.4", + "name": "tmpl", + "version": "1.0.4", + "description": "JavaScript micro templates.", + "hashes": [ + { + "alg": "SHA-1", + "content": "23640dd7b42d00433911140820e5cf440e521dd1" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/tmpl@1.0.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/nshah/nodejs-tmpl" + }, + { + "type": "issue-tracker", + "url": "https://github.com/daaku/nodejs-tmpl/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/daaku/nodejs-tmpl.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-regex-util@24.9.0", + "name": "jest-regex-util", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "d390a66fa0aec5a03e62ce9f8ebdcf86f5776c64263beda9d8b6b88456d4f96e6e39ce3bf5fec574b5d4597c38a5830086149922e287c125d2bba0ac48101740" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-regex-util@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pirates@4.0.1", + "name": "pirates", + "version": "4.0.1", + "description": "Properly hijack require", + "hashes": [ + { + "alg": "SHA-512", + "content": "5ae36a2d36cc237b667de7f64cac654260222c72ad16196c0999cf229bafd8ec3444354ef257f2d4ea5fe0d53394c5cb8cf97e31e9fb02e55d5fa4c0facfae18" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/pirates@4.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ariporad/pirates#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ariporad/pirates/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/ariporad/pirates.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-modules-regexp@1.0.0", + "name": "node-modules-regexp", + "version": "1.0.0", + "description": "A regular expression for file paths that contain a `node_modules` folder.", + "hashes": [ + { + "alg": "SHA-1", + "content": "8d9dbe28964a4ac5712e9131642107c71e90ec40" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/node-modules-regexp@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jamestalmage/node-modules-regexp#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jamestalmage/node-modules-regexp/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jamestalmage/node-modules-regexp.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/realpath-native@1.1.0", + "name": "realpath-native", + "version": "1.1.0", + "description": "Use the system's native `realpath`", + "hashes": [ + { + "alg": "SHA-512", + "content": "c2580f03a70220883d80acf47e000f8e7ce1e3247f2e75e8bf0ba8f61bf21afc7787c9d7e3efe22d9a657d459ab17a6a0fc05d9c69cfe678ce163914c0fcef8c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/realpath-native@1.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/SimenB/realpath-native#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/SimenB/realpath-native/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/SimenB/realpath-native.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/util.promisify@1.0.1", + "name": "util.promisify", + "version": "1.0.1", + "description": "Polyfill/shim for util.promisify in node versions < v8", + "hashes": [ + { + "alg": "SHA-512", + "content": "83d2690bfdc77b76e6dfccec2eea56af25c7a04712db6607b61b8f41225d332e8a36bcc84735aa72c1f30ff5949ea7b8e70855a2ee1522c3dec37ec3a1758dac" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/util.promisify@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ljharb/util.promisify#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ljharb/util.promisify/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/ljharb/util.promisify.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/define-properties@1.1.3", + "name": "define-properties", + "version": "1.1.3", + "description": "Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.", + "hashes": [ + { + "alg": "SHA-512", + "content": "dcca9f60a8f694bcdd3127fc648644fd5f99bb2f81803e9fd7ae1ef0adb0edd827a4a02b0437ab198a4ce3a21861c8e791d3cd3233e4f40e95141f3edd22a55d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/define-properties@1.1.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ljharb/define-properties#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ljharb/define-properties/issues" + }, + { + "type": "vcs", + "url": "git://github.com/ljharb/define-properties.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-keys@1.1.1", + "name": "object-keys", + "version": "1.1.1", + "description": "An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim", + "hashes": [ + { + "alg": "SHA-512", + "content": "36e00449439432b9485ce7c72b30fa6e93eeded62ddf1be335d44843e15e4f494d6f82bc591ef409a0f186e360b92d971be1a39323303b3b0de5992d2267e12c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/object-keys@1.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ljharb/object-keys#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ljharb/object-keys/issues" + }, + { + "type": "vcs", + "url": "git://github.com/ljharb/object-keys.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/es-abstract@1.17.6", + "name": "es-abstract", + "version": "1.17.6", + "description": "ECMAScript spec abstract operations.", + "hashes": [ + { + "alg": "SHA-512", + "content": "16bf3d6ce377585c948b912f01e238f104d65f40327a41a02c0f07f9cfbb7db7c2909c1159130b77c09079d344c89ba8618866b44a98f76a60b5ed4502106587" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/es-abstract@1.17.6", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ljharb/es-abstract#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ljharb/es-abstract/issues" + }, + { + "type": "vcs", + "url": "git://github.com/ljharb/es-abstract.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/es-to-primitive@1.2.1", + "name": "es-to-primitive", + "version": "1.2.1", + "description": "ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions.", + "hashes": [ + { + "alg": "SHA-512", + "content": "4023a5960649b5a528f6689805c2c285351a1cd8c91773d8b35562743ec0c22123d6463129e41372d2c07b300e1f964a447d20d8880f9fa2b0078213f22469bc" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/es-to-primitive@1.2.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ljharb/es-to-primitive#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ljharb/es-to-primitive/issues" + }, + { + "type": "vcs", + "url": "git://github.com/ljharb/es-to-primitive.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-callable@1.2.0", + "name": "is-callable", + "version": "1.2.0", + "description": "Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.", + "hashes": [ + { + "alg": "SHA-512", + "content": "a72543f406862f1b60eacadbd8d83aca7589aa41d4f5b10cd3cec029c934c3c4300daad37cd729218a14f31f07bf621c9bcbba90524cd7c0da83c972a8692f8b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-callable@1.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ljharb/is-callable#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ljharb/is-callable/issues" + }, + { + "type": "vcs", + "url": "git://github.com/ljharb/is-callable.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-date-object@1.0.2", + "name": "is-date-object", + "version": "1.0.2", + "description": "Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", + "hashes": [ + { + "alg": "SHA-512", + "content": "5129434f9db8c28434f1aa19173877fd9e9c87d63f1165c41d0fc06913744a42aae2dd89c36476df7f6d4979b0b95a18ecb2e50426ce225c769b23ff2f9ce4d2" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-date-object@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ljharb/is-date-object#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ljharb/is-date-object/issues" + }, + { + "type": "vcs", + "url": "git://github.com/ljharb/is-date-object.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-symbol@1.0.3", + "name": "is-symbol", + "version": "1.0.3", + "description": "Determine if a value is an ES6 Symbol or not.", + "hashes": [ + { + "alg": "SHA-512", + "content": "3b08a385a45282abe19bfd19740717359b7d95874a1697110d3e542d4b985cfa13efde1434e754fa0a53e91ce8edbe15d87525fe8a7a1aa63cf78019c2ff5f69" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-symbol@1.0.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/inspect-js/is-symbol#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/inspect-js/is-symbol/issues" + }, + { + "type": "vcs", + "url": "git://github.com/inspect-js/is-symbol.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-symbols@1.0.1", + "name": "has-symbols", + "version": "1.0.1", + "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.", + "hashes": [ + { + "alg": "SHA-512", + "content": "3cb72ca2abbef9d98421907eeada2d3452aaffb0e8f99d2ee284f4cca389365de560aeaf1b0c2eda18c7b3eebc38465b4e389413d6e03800576cffc6beb4b42a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/has-symbols@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ljharb/has-symbols#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ljharb/has-symbols/issues" + }, + { + "type": "vcs", + "url": "git://github.com/ljharb/has-symbols.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/function-bind@1.1.1", + "name": "function-bind", + "version": "1.1.1", + "description": "Implementation of Function.prototype.bind", + "hashes": [ + { + "alg": "SHA-512", + "content": "c88a2f033317e3db05f18979f1f482589e6cbd22ee6a26cfc5740914b98139b4ee0abd0c7f52a23e8a4633d3621638980426df69ad8587a6eb790e803554c8d0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/function-bind@1.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/Raynos/function-bind" + }, + { + "type": "issue-tracker", + "url": "https://github.com/Raynos/function-bind/issues" + }, + { + "type": "vcs", + "url": "git://github.com/Raynos/function-bind.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has@1.0.3", + "name": "has", + "version": "1.0.3", + "description": "Object.prototype.hasOwnProperty.call shortcut", + "hashes": [ + { + "alg": "SHA-512", + "content": "7f676f3b4554e8e7a3ed1916246ade8636f33008c5a79fd528fa79b53a56215e091c764ad7f0716c546d7ffb220364964ded3d71a0e656d618cd61086c14b8cf" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/has@1.0.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/tarruda/has" + }, + { + "type": "issue-tracker", + "url": "https://github.com/tarruda/has/issues" + }, + { + "type": "vcs", + "url": "git://github.com/tarruda/has.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-regex@1.1.0", + "name": "is-regex", + "version": "1.1.0", + "description": "Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag", + "hashes": [ + { + "alg": "SHA-512", + "content": "888f7b33c2935880f695ae6e6179646d20d0220e05ea8d6c61ba1928a4c3a670d030bb542fceb3c618037addd0d92ae2698b321aa67a327d928db44a78b1ddab" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-regex@1.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ljharb/is-regex" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ljharb/is-regex/issues" + }, + { + "type": "vcs", + "url": "git://github.com/ljharb/is-regex.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-inspect@1.8.0", + "name": "object-inspect", + "version": "1.8.0", + "description": "string representations of objects in node and the browser", + "hashes": [ + { + "alg": "SHA-512", + "content": "8cb76d10e075d767ce46eca903297fe7455154804875540e494506407cc9e310526e2b7cd7345aaf3ec64e1904159cb545c798ad661c3dc0453d0c07c8073580" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/object-inspect@1.8.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/inspect-js/object-inspect" + }, + { + "type": "issue-tracker", + "url": "https://github.com/inspect-js/object-inspect/issues" + }, + { + "type": "vcs", + "url": "git://github.com/inspect-js/object-inspect.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object.assign@4.1.0", + "name": "object.assign", + "version": "4.1.0", + "description": "ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim", + "hashes": [ + { + "alg": "SHA-512", + "content": "7b11c97aaea404a8f9f26a86c9343d0c5beb642fde47a3b0c73a0cf58468181aab5d8a27685c8688532e73d559ad77fb0daaeb784c0ca6eac6ddd77e08dc96e7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/object.assign@4.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ljharb/object.assign#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ljharb/object.assign/issues" + }, + { + "type": "vcs", + "url": "git://github.com/ljharb/object.assign.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string.prototype.trimend@1.0.1", + "name": "string.prototype.trimend", + "version": "1.0.1", + "description": "ES2019 spec-compliant String.prototype.trimEnd shim.", + "hashes": [ + { + "alg": "SHA-512", + "content": "2d13f1154693b69a98b1378d29a14ec374786f123358e9db43cdfb41f072968f23231b5c6cafc0fec315ed0f8e015fef5a8fbbb36e69384d742984a36923b4ea" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string.prototype.trimend@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/es-shims/String.prototype.trimEnd#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/es-shims/String.prototype.trimEnd/issues" + }, + { + "type": "vcs", + "url": "git://github.com/es-shims/String.prototype.trimEnd.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string.prototype.trimstart@1.0.1", + "name": "string.prototype.trimstart", + "version": "1.0.1", + "description": "ES2019 spec-compliant String.prototype.trimStart shim.", + "hashes": [ + { + "alg": "SHA-512", + "content": "5f1667f90a6fac123514e720e9d229c543e05823ee357bcc0fbd9a69169442fd5e0f87bf432f22fe11537b4054983eb4a7f400e9b8756af9ae3d37cd8ea55647" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string.prototype.trimstart@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/es-shims/String.prototype.trimStart#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/es-shims/String.prototype.trimStart/issues" + }, + { + "type": "vcs", + "url": "git://github.com/es-shims/String.prototype.trimStart.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object.getownpropertydescriptors@2.1.0", + "name": "object.getownpropertydescriptors", + "version": "2.1.0", + "description": "ES2017 spec-compliant shim for `Object.getOwnPropertyDescriptors` that works in ES5.", + "hashes": [ + { + "alg": "SHA-512", + "content": "679dce6a1f40dd374ba1b953ed52896930dd5dd4fe9503be70da4a567c9ae490def6e2efceed58c98d7214316b731ae54605ab1051f48c9b43fc86eec2370456" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/object.getownpropertydescriptors@2.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/es-shims/object.getownpropertydescriptors#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/es-shims/object.getownpropertydescriptors/issues" + }, + { + "type": "vcs", + "url": "git://github.com/es-shims/object.getownpropertydescriptors.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/write-file-atomic@2.4.1", + "name": "write-file-atomic", + "version": "2.4.1", + "description": "Write files in an atomic fashion w/configurable ownership", + "hashes": [ + { + "alg": "SHA-512", + "content": "4c61c5799119327bfe8011517e301cc4be5b3c7aec18ab676f8aac140c2ceffbe587e41fc006b2488c380173fd66c9134e1e465aedc52ee261b1655d8893c6be" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/write-file-atomic@2.4.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/iarna/write-file-atomic" + }, + { + "type": "issue-tracker", + "url": "https://github.com/iarna/write-file-atomic/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/iarna/write-file-atomic.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/imurmurhash@0.1.4", + "name": "imurmurhash", + "version": "0.1.4", + "description": "An incremental implementation of MurmurHash3", + "hashes": [ + { + "alg": "SHA-1", + "content": "9218b9b2b928a238b13dc4fb6b6d576f231453ea" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/imurmurhash@0.1.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jensyt/imurmurhash-js" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jensyt/imurmurhash-js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jensyt/imurmurhash-js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/exit@0.1.2", + "name": "exit", + "version": "0.1.2", + "description": "A replacement for process.exit that ensures stdio are fully drained before exiting.", + "hashes": [ + { + "alg": "SHA-1", + "content": "0632638f8d877cc82107d30a0fff1a17cba1cd0c" + } + ], + "purl": "pkg:npm/exit@0.1.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/cowboy/node-exit" + }, + { + "type": "issue-tracker", + "url": "https://github.com/cowboy/node-exit/issues" + }, + { + "type": "vcs", + "url": "git://github.com/cowboy/node-exit.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/istanbul-lib-report@2.0.8", + "name": "istanbul-lib-report", + "version": "2.0.8", + "description": "Base reporting library for istanbul", + "hashes": [ + { + "alg": "SHA-512", + "content": "7c705e1b9ef71088a18406e5c20c6b49e9e9d036f2ead24c151fc7be57ab06cac24c3e5b914ba836d9f7815876f59092f36e1c18604f9fb4a0edc364fb6c54b1" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/istanbul-lib-report@2.0.8", + "externalReferences": [ + { + "type": "website", + "url": "https://istanbul.js.org/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/istanbuljs/istanbuljs/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/make-dir@2.1.0", + "name": "make-dir", + "version": "2.1.0", + "description": "Make a directory and its parents if needed - Think `mkdir -p`", + "hashes": [ + { + "alg": "SHA-512", + "content": "2d2f57f9d73c28bc5709bf1d9e2efd7cb208500e55c99a328d2302c1396e697034a36edc08ad1b857929830fac4d75693f2fe548ee7b8a5462c6a934bc39ad44" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/make-dir@2.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/make-dir#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/make-dir/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/make-dir.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pify@4.0.1", + "name": "pify", + "version": "4.0.1", + "description": "Promisify a callback-style function", + "hashes": [ + { + "alg": "SHA-512", + "content": "b81f3490115bfed7ddebc6d595e1bd4f9186b063e326b2c05294793d922b8419c86914d0463a9d252b082a438fe8e00815b8fb18eadcb9d739a4d8d9fa0795da" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/pify@4.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/pify#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/pify/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/pify.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/istanbul-lib-source-maps@3.0.6", + "name": "istanbul-lib-source-maps", + "version": "3.0.6", + "description": "Source maps support for istanbul", + "hashes": [ + { + "alg": "SHA-512", + "content": "478ecacccb43247e97e3f616f574f1fa3acb9d99ec716e15a4d37ed4f5624984de8cb54f5afee8a2ff83b9ff184123f255152fb9e42acf54dcb02ea6a286535f" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/istanbul-lib-source-maps@3.0.6", + "externalReferences": [ + { + "type": "website", + "url": "https://istanbul.js.org/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/istanbuljs/istanbuljs/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rimraf@2.7.1", + "name": "rimraf", + "version": "2.7.1", + "description": "A deep deletion module for node (like `rm -rf`)", + "hashes": [ + { + "alg": "SHA-512", + "content": "b968db68a20add3d4e495a6dcd7ecd97a3ef437a801ad284b5546346e6b38df2f7071e5e238d3d5594aa80d0fee143679b32d574f8fd16a14934fa81645bdee3" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/rimraf@2.7.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/rimraf#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/rimraf/issues" + }, + { + "type": "vcs", + "url": "git://github.com/isaacs/rimraf.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/istanbul-reports@2.2.7", + "name": "istanbul-reports", + "version": "2.2.7", + "description": "istanbul reports", + "hashes": [ + { + "alg": "SHA-512", + "content": "baed45fcbd68e58e8bccf5525595cd3a80ff297a49b9ef5a78b45dd2c33db8c5df66fce8981d16c556a659be6e7bc900daf5561265bb106f80e67ddfd64a872a" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/istanbul-reports@2.2.7", + "externalReferences": [ + { + "type": "website", + "url": "https://istanbul.js.org/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/istanbuljs/istanbuljs/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/html-escaper@2.0.2", + "name": "html-escaper", + "version": "2.0.2", + "description": "fast and safe way to escape and unescape &<>'\" chars", + "hashes": [ + { + "alg": "SHA-512", + "content": "1f688cb5dd08e0cb7979889aa517480e3a7e5f37a55d0d2d144e094bb605c057af5d73263a9f66c8dad4bc28340fac2cf22aa444f05f28781bc228354a694b7e" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/html-escaper@2.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/WebReflection/html-escaper" + }, + { + "type": "issue-tracker", + "url": "https://github.com/WebReflection/html-escaper/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/WebReflection/html-escaper.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-resolve@24.9.0", + "name": "jest-resolve", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "4da2de2d52f5974f1815902ddf368fb63895bf2cb8a1203a0917bed0014f3d55f743f548d20888596a00be84b92fdeaf8fd0eac63e1f079a76aab1c299353f31" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-resolve@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/browser-resolve@1.11.3", + "name": "browser-resolve", + "version": "1.11.3", + "description": "resolve which handles browser field support in package.json", + "hashes": [ + { + "alg": "SHA-512", + "content": "7b10e2d4161607feab68a1e60d30a27107d392ac0de5f8a83055788fc06c7cc5384760cafd07d97caee439592658234035fd2c9e4073a86a802416a8f6064c75" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/browser-resolve@1.11.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/shtylman/node-browser-resolve#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/shtylman/node-browser-resolve/issues" + }, + { + "type": "vcs", + "url": "git://github.com/shtylman/node-browser-resolve.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/resolve@1.1.7", + "name": "resolve", + "version": "1.1.7", + "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", + "hashes": [ + { + "alg": "SHA-1", + "content": "203114d82ad2c5ed9e8e0411b3932875e889e97b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/resolve@1.1.7", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/substack/node-resolve#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/substack/node-resolve/issues" + }, + { + "type": "vcs", + "url": "git://github.com/substack/node-resolve.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-pnp-resolver@1.2.2", + "name": "jest-pnp-resolver", + "version": "1.2.2", + "description": "plug'n'play resolver for Webpack", + "hashes": [ + { + "alg": "SHA-512", + "content": "a25578d5b292326f01767b8cb1ec13e23aa567cfb74c20110178d9193f637284a7adf527442aa732817d5c47a85a36f339ba6a17d751847423d176fd41d17aff" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-pnp-resolver@1.2.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/arcanis/jest-pnp-resolver" + }, + { + "type": "issue-tracker", + "url": "https://github.com/arcanis/jest-pnp-resolver/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/arcanis/jest-pnp-resolver.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-runtime@24.9.0", + "name": "jest-runtime", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "f2836a827985defd89e8f55133625fba3f285f7b322a66b29e50cc30a4388b2cdb433206ead879b9bfe53366c23139a84ca337ca4714608d8fc3dc7036d8cc9f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-runtime@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-config@24.9.0", + "name": "jest-config", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "4404ed409b55610ae9edfbd683a7f9cb7a44163f48f87f2c5b0e1a2b19c367dea6a1be62e520fa64419680c2d74382c4f14babae36dd94b59d51ea3edbc4297d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-config@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40jest/test-sequencer@24.9.0", + "group": "@jest", + "name": "test-sequencer", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "eaaaac538a34916d5dbc0f79a9f36883cbfc82444df6987a2f3eebf7a22f6691dd362a4fd9c05c6f4ec9d59e399b3fd5212d35387277a58f13e5f518dfcb60e0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40jest/test-sequencer@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-runner@24.9.0", + "name": "jest-runner", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "2a4b09432237ff49a171fb299f1c44381b9e1ab779138bd5ec00d02d3f4449a0b3cf4d969db75b29621fe4c91ab9ca1a8fba1b41c9183d55fa24986051ca165a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-runner@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-docblock@24.9.0", + "name": "jest-docblock", + "version": "24.9.0", + "description": "`jest-docblock` is a package that can extract and parse a specially-formatted comment called a \"docblock\" at the top of a file.", + "hashes": [ + { + "alg": "SHA-512", + "content": "1750e37690cc24c03570de877b414d60d665a37c9898eb5152792dad3f50dfb9e36330b95846837666f29c8832d0bfc8bd7bef82c1bc3acaa12cf5d3a5f99900" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-docblock@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/detect-newline@2.1.0", + "name": "detect-newline", + "version": "2.1.0", + "description": "Detect the dominant newline character of a string", + "hashes": [ + { + "alg": "SHA-1", + "content": "f41f1c10be4b00e87b5f13da680759f2c5bfd3e2" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/detect-newline@2.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/detect-newline#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/detect-newline/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/detect-newline.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-jasmine2@24.9.0", + "name": "jest-jasmine2", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "0aaeef90081a60aa7e3ec5fedbf25b4daaeb9340e6361b04b6a05737050791d95bad304bb4c2483400dfda67f9164a3036cabc7af6cf734effa853b401d293cf" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-jasmine2@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/co@4.6.0", + "name": "co", + "version": "4.6.0", + "description": "generator async control flow goodness", + "hashes": [ + { + "alg": "SHA-1", + "content": "6ea6bdf3d853ae54ccb8e47bfa0bf3f9031fb184" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/co@4.6.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/tj/co#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/tj/co/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/tj/co.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/expect@24.9.0", + "name": "expect", + "version": "24.9.0", + "description": "This package exports the `expect` function used in [Jest](https://jestjs.io/). You can find its documentation [on Jest's website](https://jestjs.io/docs/en/expect.html).", + "hashes": [ + { + "alg": "SHA-512", + "content": "c2f540c7c5c8a25dd9e66f73bd95e2c99390fac449a8d4c89bab068dd5a569921eba94063b759b608fb5e43fc0984c19cb02fac2d2646c06c9b7390e7c1b91d1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/expect@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-get-type@24.9.0", + "name": "jest-get-type", + "version": "24.9.0", + "description": "A utility function to get the type of a value", + "hashes": [ + { + "alg": "SHA-512", + "content": "954b1e3330257b2e0b84872948ff497fe7d3ad0e1ad721d0c0b35e7956b670499b0867a8640b583ce22ff096b12c3fec5292b17ad2863fe82c1e5f1ff134a3f1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-get-type@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-matcher-utils@24.9.0", + "name": "jest-matcher-utils", + "version": "24.9.0", + "description": "A set of utility functions for expect and related packages", + "hashes": [ + { + "alg": "SHA-512", + "content": "399cf6217b2ee9e6a2300c1eebb7354fee6d500b50c90c76eff10c1246c50068b0e76b41f5e9beb866f3a5c81856903cc25d2197128f671ae5cb809753f1a31c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-matcher-utils@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-diff@24.9.0", + "name": "jest-diff", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "a8c7eb4ecf007491368aaad3a7487387b9137763d05abb05ca3f6d391a0a9aedf6c633e3784e0dca35510f3f326d8c2a4b68a4f0de21b08a62553c857a8da505" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-diff@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/diff-sequences@24.9.0", + "name": "diff-sequences", + "version": "24.9.0", + "description": "Compare items in two sequences to find a longest common subsequence", + "hashes": [ + { + "alg": "SHA-512", + "content": "0e3e96937b56c9313e168d6b5bcbf45e1c24f34ba6eb215829bb80c5cf5cdc46712071436306e2df8524e36bb509d9c8895a2bbede119a54838c83f2cc60b67b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/diff-sequences@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pretty-format@24.9.0", + "name": "pretty-format", + "version": "24.9.0", + "description": "Stringify any JavaScript value.", + "hashes": [ + { + "alg": "SHA-512", + "content": "d3464c654887689acd7e4df782e6afaa0bdf252df4b0b61fd1ff3e4ab925bf400c3e87461877281e092c6773938589c8bce77ef323029f462210ea208e582c9c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/pretty-format@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@4.1.0", + "name": "ansi-regex", + "version": "4.1.0", + "description": "Regular expression for matching ANSI escape codes", + "hashes": [ + { + "alg": "SHA-512", + "content": "d5aa5e3df5ccd54392ab0d28f48885028bd5cfd3394b50e0fb84eb0f07cc7b043aa7fae632e79beed5998d0d6bc782e8cb502b060828a86a5faaa748e2ba2776" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ansi-regex@4.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/chalk/ansi-regex#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/chalk/ansi-regex/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/chalk/ansi-regex.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/react-is@16.13.1", + "name": "react-is", + "version": "16.13.1", + "description": "Brand checking of React Elements.", + "hashes": [ + { + "alg": "SHA-512", + "content": "db87baca71361fe38ab7892ab0ebcd77c901a55eb9ce8c5b038055b04381dc0455590922fc31f3694a02e4ab8e37f06271c0da0824d906e39c7d9b3bd2447c6d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/react-is@16.13.1", + "externalReferences": [ + { + "type": "website", + "url": "https://reactjs.org/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/react/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/react.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-generator-fn@2.1.0", + "name": "is-generator-fn", + "version": "2.1.0", + "description": "Check if something is a generator function", + "hashes": [ + { + "alg": "SHA-512", + "content": "713201e323d82ff1abc3411a4b3012ce0e9b072f60a82a1fbd637ca244e1018231289642fae7654409866ccd172de9e21094acf2e1201cf1ae1d27b55ec38b49" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-generator-fn@2.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/is-generator-fn#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/is-generator-fn/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/is-generator-fn.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-each@24.9.0", + "name": "jest-each", + "version": "24.9.0", + "description": "Parameterised tests for Jest", + "hashes": [ + { + "alg": "SHA-512", + "content": "38d8b447806f5b8e5cc3cb362ebc7c6206de5cbd68090ff0203c26b0cdc2a8cfe795b94d08f9a70b720f42531b44566edf029d43653c06a33a961dcb27906ca2" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-each@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-snapshot@24.9.0", + "name": "jest-snapshot", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "b88febb33192b3bdf108cd25faea7b3bb6b8d28f74727ae4e36f4b3a22b769e4ef7c2d071e695d6ddf35fc1ec8c7cd4a4857b597091b97b1a70461b851fb837b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-snapshot@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/natural-compare@1.4.0", + "name": "natural-compare", + "version": "1.4.0", + "description": "Compare strings containing a mix of letters and numbers in the way a human being would in sort order.", + "hashes": [ + { + "alg": "SHA-1", + "content": "4abebfeed7541f2c27acfb29bdbbd15c8d5ba4f7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/natural-compare@1.4.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/litejs/natural-compare-lite#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/litejs/natural-compare-lite/issues" + }, + { + "type": "vcs", + "url": "git://github.com/litejs/natural-compare-lite.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/throat@4.1.0", + "name": "throat", + "version": "4.1.0", + "description": "Throttle the parallelism of an asynchronous (promise returning) function / functions", + "hashes": [ + { + "alg": "SHA-1", + "content": "89037cbc92c56ab18926e6ba4cbb200e15672a6a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/throat@4.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ForbesLindesay/throat#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ForbesLindesay/throat/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/ForbesLindesay/throat.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-leak-detector@24.9.0", + "name": "jest-leak-detector", + "version": "24.9.0", + "description": "Module for verifying whether an object has been garbage collected or not.", + "hashes": [ + { + "alg": "SHA-512", + "content": "b58905203b222931b06f6146d70f215fd5746946f6a2df3363fda7160d3cedd51a81ea27c35ceb2cc3f85bacec44ee7d74f91348a89ef83e2b84cb8ff67466ac" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-leak-detector@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/source-map-support@0.5.19", + "name": "source-map-support", + "version": "0.5.19", + "description": "Fixes stack traces for files with source maps", + "hashes": [ + { + "alg": "SHA-512", + "content": "5a89e6ef3382209cc1190741fad86c3daaf4918b8223362fc59c2505af3bca2fcc763bfb4e2a7673255b2e3e68d1c14f37811592e4f06f71830f2531d831a71b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/source-map-support@0.5.19", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/evanw/node-source-map-support#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/evanw/node-source-map-support/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/evanw/node-source-map-support.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-from@1.1.1", + "name": "buffer-from", + "version": "1.1.1", + "description": "A [ponyfill](https://ponyfill.com) for `Buffer.from`, uses native implementation if available.", + "hashes": [ + { + "alg": "SHA-512", + "content": "3107171146c22ad128edb86a12ceb9eb41f27785daa2f6653bf93d57786355417fcf05bb28155d48ae2022dfdbcf04bd31b479aa86fe1798eeb19b1bd1840ad8" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/buffer-from@1.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/LinusU/buffer-from#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/LinusU/buffer-from/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/LinusU/buffer-from.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/babel-jest@24.9.0", + "name": "babel-jest", + "version": "24.9.0", + "description": "Jest plugin to use babel for transformation.", + "hashes": [ + { + "alg": "SHA-512", + "content": "9edb9d75fca237e121330e7c3d334bd698780bdac40a24178c8e2730c04a05a3635efa8b7645e93d170c4abe22c81ac983ffb0cfd6eb1540fa4613804faaf823" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/babel-jest@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/babel__core@7.1.9", + "group": "@types", + "name": "babel__core", + "version": "7.1.9", + "description": "TypeScript definitions for @babel/core", + "hashes": [ + { + "alg": "SHA-512", + "content": "b18d91b08279ae9111d6edff690f0e15223ba86232f28d4d1046e06f651a25cbceb5738ca5ddfd928ef6dcd0698d0160f52217ed35ed8de8d954678830b8683b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40types/babel__core@7.1.9", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/babel__generator@7.6.1", + "group": "@types", + "name": "babel__generator", + "version": "7.6.1", + "description": "TypeScript definitions for @babel/generator", + "hashes": [ + { + "alg": "SHA-512", + "content": "6c12a6fb654f25c311570361c4abbc5bee7fcd3ee9c0d12a7a89053a66ef552a86cc59de37161c101ae8f4073bfcdf6d96c68f62764b2bc2752d62a432c2c07b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40types/babel__generator@7.6.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/babel__template@7.0.2", + "group": "@types", + "name": "babel__template", + "version": "7.0.2", + "description": "TypeScript definitions for @babel/template", + "hashes": [ + { + "alg": "SHA-512", + "content": "fcaeb30a9796ec89b381a6f66cb90b11bcf4fb5265152ad431dc3b2a8208bbe21476ee75196681669777cb55571955f3ca7bc66b80da21ac4d64788e37719752" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40types/babel__template@7.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/babel__traverse@7.0.13", + "group": "@types", + "name": "babel__traverse", + "version": "7.0.13", + "description": "TypeScript definitions for @babel/traverse", + "hashes": [ + { + "alg": "SHA-512", + "content": "8becd2eedebfb3d71d42f6ea283011adc6eb3efb491a56d8b0c91ace8d379d300add15fd14dacb9655f2b36dae8931896a93ce4d94d0df99c7878212a61e122d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40types/babel__traverse@7.0.13", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/babel-preset-jest@24.9.0", + "name": "babel-preset-jest", + "version": "24.9.0", + "description": "> Babel preset for all Jest plugins. This preset is automatically included when using [babel-jest](https://github.com/facebook/jest/tree/master/packages/babel-jest).", + "hashes": [ + { + "alg": "SHA-512", + "content": "8b34d4ba11384cc7d344f17dd9f1700f641f7576995b4f2abd64c5088e7557cad6e71d3452e3e07376a34685a87d73aec637dc38ce73cd262c412dc7f0a18202" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/babel-preset-jest@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-object-rest-spread@7.8.3", + "group": "@babel", + "name": "plugin-syntax-object-rest-spread", + "version": "7.8.3", + "description": "Allow parsing of object rest/spread", + "hashes": [ + { + "alg": "SHA-512", + "content": "5e8a8c8a31996fdcb7cb65ec90df8fd70506895c16679266a03470c79fb71a612994dc95336b360e0f082c5426f2b58ce3ca2b1b2e58a48e4197c535cbbc9d94" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-syntax-object-rest-spread@7.8.3", + "externalReferences": [ + { + "type": "vcs", + "url": "https://github.com/babel/babel/tree/master/packages/babel-plugin-syntax-object-rest-spread" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/babel-plugin-jest-hoist@24.9.0", + "name": "babel-plugin-jest-hoist", + "version": "24.9.0", + "description": "Babel plugin to hoist `jest.disableAutomock`, `jest.enableAutomock`, `jest.unmock`, `jest.mock`, calls above `import` statements. This plugin is automatically included when using [babel-jest](https://github.com/facebook/jest/tree/master/packages/babel-jest).", + "hashes": [ + { + "alg": "SHA-512", + "content": "d84300d8ff15a7b946d11033af81d7aad63069c7cc12b3aebf5537c2bbf11d7eab0f5b15eb14b75971b7afc4d1436afac3c3a1bd2756b7ecf8d6140dc0d9b75f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/babel-plugin-jest-hoist@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-environment-jsdom@24.9.0", + "name": "jest-environment-jsdom", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "66ff4557d3414732ee00b5e3bd18a33b6df9d4345078b617b690f8c4dbdfa15170db520e28d85900450a71b884b634e49b61ac2776e8315824691eeb37ca9eb4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-environment-jsdom@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsdom@11.12.0", + "name": "jsdom", + "version": "11.12.0", + "description": "A JavaScript implementation of many web standards", + "hashes": [ + { + "alg": "SHA-512", + "content": "cbc3f1e37a32881335dd9735cfbf3416b7cd2c90974cbe3411696dcbf2d752d723ca44413602e50a3597a5f48f065da2bfe37b92840df9dbeab331d9813fc58f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jsdom@11.12.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jsdom/jsdom#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jsdom/jsdom/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jsdom/jsdom.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/abab@2.0.3", + "name": "abab", + "version": "2.0.3", + "description": "WHATWG spec-compliant implementations of window.atob and window.btoa.", + "hashes": [ + { + "alg": "SHA-512", + "content": "b6c1733e972db5a94d8c504214caac29841c5b1c5e9f5a60251e7a6f2fff430bc9738fce512de43ce3adb71dad4887e3b32941d2962eedfe43dcad510b152752" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/abab@2.0.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jsdom/abab#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jsdom/abab/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jsdom/abab.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/acorn@5.7.4", + "name": "acorn", + "version": "5.7.4", + "description": "ECMAScript parser", + "hashes": [ + { + "alg": "SHA-512", + "content": "d43fbe546ec186bb6f42935b073a2f28d73514b186104fe819eedbf71266fd11473017946941a996e57d44b8d96b8ed815d3dc0c07a7118baaf6940f70c74b26" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/acorn@5.7.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/acornjs/acorn" + }, + { + "type": "issue-tracker", + "url": "https://github.com/acornjs/acorn/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/acornjs/acorn.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/acorn-globals@4.3.4", + "name": "acorn-globals", + "version": "4.3.4", + "description": "Detect global variables in JavaScript using acorn", + "hashes": [ + { + "alg": "SHA-512", + "content": "7257d0121db547e0f495e49b51d59fdce71fab268248043c472ab4d1ba1f49e91fafd5bcbb58f2619a3a8abd31bbd1ad71fec18dc1c9a676d91fb24e0a93fad0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/acorn-globals@4.3.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ForbesLindesay/acorn-globals#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ForbesLindesay/acorn-globals/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/ForbesLindesay/acorn-globals.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/acorn@6.4.1", + "name": "acorn", + "version": "6.4.1", + "description": "ECMAScript parser", + "hashes": [ + { + "alg": "SHA-512", + "content": "65503d937dba370ae3dc28fd8e5877c0616eb42d99a2b9cf340459c2c358a9062037412c576779df0e5137f728eb93a19f8b14014b5bd6b49400e0fa5cdf6274" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/acorn@6.4.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/acornjs/acorn" + }, + { + "type": "issue-tracker", + "url": "https://github.com/acornjs/acorn/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/acornjs/acorn.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/acorn-walk@6.2.0", + "name": "acorn-walk", + "version": "6.2.0", + "description": "ECMAScript (ESTree) AST walker", + "hashes": [ + { + "alg": "SHA-512", + "content": "edebecc9f1f570b382740cd901de370a2734e322b274dc74705fbbb62035f69d579cb2cf5387690903aaa63ab0a2415efffbd2d10a9faaa8c24b6264888b3470" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/acorn-walk@6.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/acornjs/acorn" + }, + { + "type": "issue-tracker", + "url": "https://github.com/acornjs/acorn/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/acornjs/acorn.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/array-equal@1.0.0", + "name": "array-equal", + "version": "1.0.0", + "description": "check if two arrays are equal", + "hashes": [ + { + "alg": "SHA-1", + "content": "8c2a5ef2472fd9ea742b04c77a75093ba2757c93" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/array-equal@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/component/array-equal#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/component/array-equal/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/component/array-equal.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cssstyle@1.4.0", + "name": "cssstyle", + "version": "1.4.0", + "description": "CSSStyleDeclaration Object Model implementation", + "hashes": [ + { + "alg": "SHA-512", + "content": "181acb6586785f8c7afd012806722ba9bf01fdfe65e3ef267b6764a26fe3d46b5bc72d2406fe8e1b32ae02c18cef96e41b0180164b79e88c20dbc4b75d366048" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/cssstyle@1.4.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jsakas/CSSStyleDeclaration" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jsakas/CSSStyleDeclaration/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jsakas/CSSStyleDeclaration.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/data-urls@1.1.0", + "name": "data-urls", + "version": "1.1.0", + "description": "Parses data: URLs", + "hashes": [ + { + "alg": "SHA-512", + "content": "61359823db1ed4fe79bb9f202f91a44075b83fa549049e62053f81e5aee2d938da761bf9da96891b4a875f8034391ebfb79da8748eb828fd98bc5a640ce8b779" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/data-urls@1.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jsdom/data-urls#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jsdom/data-urls/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jsdom/data-urls.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/whatwg-mimetype@2.3.0", + "name": "whatwg-mimetype", + "version": "2.3.0", + "description": "Parses, serializes, and manipulates MIME types, according to the WHATWG MIME Sniffing Standard", + "hashes": [ + { + "alg": "SHA-512", + "content": "338c8cc2bea6027433efa4db266f75e3e80fa41fe70b0bd96c9536f1c503e9d474d38480c432ce39251a07524346a2ed68e57fbe2d080b9944006160ae31affe" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/whatwg-mimetype@2.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jsdom/whatwg-mimetype#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jsdom/whatwg-mimetype/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jsdom/whatwg-mimetype.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/whatwg-url@7.1.0", + "name": "whatwg-url", + "version": "7.1.0", + "description": "An implementation of the WHATWG URL Standard's URL API and parsing machinery", + "hashes": [ + { + "alg": "SHA-512", + "content": "594bbb460d43ae833ba10bc659f3a200adb59fbe0683e4f87a55c441890e86dc8b7968891683862d73ca23ff60cc889ef42b7054b9bcc2dc3a60974acb14a37a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/whatwg-url@7.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jsdom/whatwg-url#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jsdom/whatwg-url/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jsdom/whatwg-url.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.sortby@4.7.0", + "name": "lodash.sortby", + "version": "4.7.0", + "description": "The lodash method `_.sortBy` exported as a module.", + "hashes": [ + { + "alg": "SHA-1", + "content": "edd14c824e2cc9c1e0b0a1b42bb5210516a42438" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/lodash.sortby@4.7.0", + "externalReferences": [ + { + "type": "website", + "url": "https://lodash.com/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lodash/lodash/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lodash/lodash.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tr46@1.0.1", + "name": "tr46", + "version": "1.0.1", + "description": "An implementation of the Unicode TR46 spec", + "hashes": [ + { + "alg": "SHA-1", + "content": "a8b13fd6bfd2489519674ccde55ba3693b706d09" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/tr46@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/Sebmaster/tr46.js#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/Sebmaster/tr46.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/Sebmaster/tr46.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/webidl-conversions@4.0.2", + "name": "webidl-conversions", + "version": "4.0.2", + "description": "Implements the WebIDL algorithms for converting to and from JavaScript values", + "hashes": [ + { + "alg": "SHA-512", + "content": "610f819b1b9381de945d95b7f880867f2a91c875d5943e46b50af9faa8e2356edb17472aaf35f9d341d55cf04ebe05dbe589f30ddfa1d33ab2bfad4a503efe4a" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/webidl-conversions@4.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jsdom/webidl-conversions#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jsdom/webidl-conversions/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jsdom/webidl-conversions.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/domexception@1.0.1", + "name": "domexception", + "version": "1.0.1", + "description": "An implementation of the DOMException class from browsers", + "hashes": [ + { + "alg": "SHA-512", + "content": "ada8a03249fb08934da3a221ae8d5fcc6ef0af77c7b98572b73aae64a5f99f4ca2cc6b137188337485308f55fda4ad15be37a2855f9789c94ff838f06ec48aba" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/domexception@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jsdom/domexception#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jsdom/domexception/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jsdom/domexception.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/escodegen@1.14.3", + "name": "escodegen", + "version": "1.14.3", + "description": "ECMAScript code generator", + "hashes": [ + { + "alg": "SHA-512", + "content": "a85717d17264760f8f077c636591bfc0a4ae4f53e7416c79efe4d54a320c9882dddb20bfe81c981253f0267b250ecb96b92029e00c091ae99aac002625c8792b" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/escodegen@1.14.3", + "externalReferences": [ + { + "type": "website", + "url": "http://github.com/estools/escodegen" + }, + { + "type": "issue-tracker", + "url": "https://github.com/estools/escodegen/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/estools/escodegen.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/esprima@4.0.1", + "name": "esprima", + "version": "4.0.1", + "description": "ECMAScript parsing infrastructure for multipurpose analysis", + "hashes": [ + { + "alg": "SHA-512", + "content": "786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/esprima@4.0.1", + "externalReferences": [ + { + "type": "website", + "url": "http://esprima.org" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jquery/esprima/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jquery/esprima.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/estraverse@4.3.0", + "name": "estraverse", + "version": "4.3.0", + "description": "ECMAScript JS AST traversal functions", + "hashes": [ + { + "alg": "SHA-512", + "content": "dfd9e729f7d6cfcc4dd4153fd9cefd9fd9c1f470f3a349e2614ab1eb1caa527ca8027432c96a4e4dd6447a209c87c041bb9d79b78c29f599a055f5619fd101a7" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/estraverse@4.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/estools/estraverse" + }, + { + "type": "issue-tracker", + "url": "https://github.com/estools/estraverse/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/estools/estraverse.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/esutils@2.0.3", + "name": "esutils", + "version": "2.0.3", + "description": "utility box for ECMAScript language tools", + "hashes": [ + { + "alg": "SHA-512", + "content": "915b1ca97938382a7af126747648042958baffc8a3df4d0a0564c9ab7d8ffdd61e5934b02b8d56c93c5a94dd5e46603967d514fcb5fd0fb1564a657d480631ea" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/esutils@2.0.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/estools/esutils" + }, + { + "type": "issue-tracker", + "url": "https://github.com/estools/esutils/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/estools/esutils.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/optionator@0.8.3", + "name": "optionator", + "version": "0.8.3", + "description": "option parsing and help generation", + "hashes": [ + { + "alg": "SHA-512", + "content": "f885bda4009d9375d69a64d71bc9b7ba919426cb795d11b3c4c4635f302e2755e720536f7e18e322e6240efcac9cf43bab3a95ccbb7bf010abba7b6a4615906c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/optionator@0.8.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/gkz/optionator" + }, + { + "type": "issue-tracker", + "url": "https://github.com/gkz/optionator/issues" + }, + { + "type": "vcs", + "url": "git://github.com/gkz/optionator.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/deep-is@0.1.3", + "name": "deep-is", + "version": "0.1.3", + "description": "node's assert.deepEqual algorithm except for NaN being equal to NaN", + "hashes": [ + { + "alg": "SHA-1", + "content": "b369d6fb5dbc13eecf524f91b070feedc357cf34" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/deep-is@0.1.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/thlorenz/deep-is#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/thlorenz/deep-is/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/thlorenz/deep-is.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-levenshtein@2.0.6", + "name": "fast-levenshtein", + "version": "2.0.6", + "description": "Efficient implementation of Levenshtein algorithm with locale-specific collator support.", + "hashes": [ + { + "alg": "SHA-1", + "content": "3d8a5c66883a16a30ca8643e851f19baa7797917" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fast-levenshtein@2.0.6", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/hiddentao/fast-levenshtein#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/hiddentao/fast-levenshtein/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/hiddentao/fast-levenshtein.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/levn@0.3.0", + "name": "levn", + "version": "0.3.0", + "description": "Light ECMAScript (JavaScript) Value Notation - human written, concise, typed, flexible", + "hashes": [ + { + "alg": "SHA-1", + "content": "3b09924edf9f083c0490fdd4c0bc4421e04764ee" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/levn@0.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/gkz/levn" + }, + { + "type": "issue-tracker", + "url": "https://github.com/gkz/levn/issues" + }, + { + "type": "vcs", + "url": "git://github.com/gkz/levn.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/prelude-ls@1.1.2", + "name": "prelude-ls", + "version": "1.1.2", + "description": "prelude.ls is a functionally oriented utility library. It is powerful and flexible. Almost all of its functions are curried. It is written in, and is the recommended base library for, LiveScript.", + "hashes": [ + { + "alg": "SHA-1", + "content": "21932a549f5e52ffd9a827f570e04be62a97da54" + } + ], + "purl": "pkg:npm/prelude-ls@1.1.2", + "externalReferences": [ + { + "type": "website", + "url": "http://preludels.com" + }, + { + "type": "issue-tracker", + "url": "https://github.com/gkz/prelude-ls/issues" + }, + { + "type": "vcs", + "url": "git://github.com/gkz/prelude-ls.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/type-check@0.3.2", + "name": "type-check", + "version": "0.3.2", + "description": "type-check allows you to check the types of JavaScript values at runtime with a Haskell like type syntax.", + "hashes": [ + { + "alg": "SHA-1", + "content": "5884cab512cf1d355e3fb784f30804b2b520db72" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/type-check@0.3.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/gkz/type-check" + }, + { + "type": "issue-tracker", + "url": "https://github.com/gkz/type-check/issues" + }, + { + "type": "vcs", + "url": "git://github.com/gkz/type-check.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/word-wrap@1.2.3", + "name": "word-wrap", + "version": "1.2.3", + "description": "Wrap words to a specified length.", + "hashes": [ + { + "alg": "SHA-512", + "content": "1f3fe6acdc22b4d461fc7500b4cfd54ffe551feca00fa0d5ee660a640b473ab6ecf14ee5bcf4bac5fec424a305d2e5b52890a5d07ef4d60dd91aeb3e9ae139bd" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/word-wrap@1.2.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonschlinkert/word-wrap" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonschlinkert/word-wrap/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonschlinkert/word-wrap.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/html-encoding-sniffer@1.0.2", + "name": "html-encoding-sniffer", + "version": "1.0.2", + "description": "Sniff the encoding from a HTML byte stream", + "hashes": [ + { + "alg": "SHA-512", + "content": "ef5959ce28839ecb9a6df7588947967425722aeab05a2db72fc61e22057d8d24991c2b5beb007504a5a8a07ecbded9f8fc5b9924c556c8d6880ebe111a669263" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/html-encoding-sniffer@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jsdom/html-encoding-sniffer#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jsdom/html-encoding-sniffer/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jsdom/html-encoding-sniffer.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/whatwg-encoding@1.0.5", + "name": "whatwg-encoding", + "version": "1.0.5", + "description": "Decode strings according to the WHATWG Encoding Standard", + "hashes": [ + { + "alg": "SHA-512", + "content": "6f99629b9e0938f37d1edcef2bd1c55ef0666bfae77c57aab22734852a63b436d5c51ddd24a2dcf8a07857a1a08863af97b098fca361f2bc52a3d0ca42b9d413" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/whatwg-encoding@1.0.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jsdom/whatwg-encoding#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jsdom/whatwg-encoding/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jsdom/whatwg-encoding.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iconv-lite@0.4.24", + "name": "iconv-lite", + "version": "0.4.24", + "description": "Convert character encodings in pure javascript.", + "hashes": [ + { + "alg": "SHA-512", + "content": "bf73179d901cbe7cb091350466898801cb657bb4575de79d391df5c3097b565ca85cee108bd6abbd27a73505a77b54dc4708422f51f02c8db56c4a9da63f3fac" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/iconv-lite@0.4.24", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ashtuchkin/iconv-lite" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ashtuchkin/iconv-lite/issues" + }, + { + "type": "vcs", + "url": "git://github.com/ashtuchkin/iconv-lite.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/left-pad@1.3.0", + "name": "left-pad", + "version": "1.3.0", + "description": "String left pad", + "hashes": [ + { + "alg": "SHA-512", + "content": "5c8e4c3f354d0298c0ca1433a615fc06498ab0a5310f82ddc8adb88997901a29c137dc93413ddb165081cbf695c761eb35ca901ac768b7c821ae3cabbcc0a810" + } + ], + "licenses": [ + { + "license": { + "id": "WTFPL" + } + } + ], + "purl": "pkg:npm/left-pad@1.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/stevemao/left-pad#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/stevemao/left-pad/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/stevemao/left-pad.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/nwsapi@2.2.0", + "name": "nwsapi", + "version": "2.2.0", + "description": "Fast CSS Selectors API Engine", + "hashes": [ + { + "alg": "SHA-512", + "content": "87601ab5dc181fe247899a6fee9b7f8125f55e84466fb2ffa9221ebaa03a1b062817dc35bcfd5cc38d933b4688da9372b2144ae7cf7784d4a5fb5fffbc72bb85" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/nwsapi@2.2.0", + "externalReferences": [ + { + "type": "website", + "url": "http://javascript.nwbox.com/nwsapi/" + }, + { + "type": "issue-tracker", + "url": "http://github.com/dperini/nwsapi/issues" + }, + { + "type": "vcs", + "url": "git://github.com/dperini/nwsapi.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/parse5@4.0.0", + "name": "parse5", + "version": "4.0.0", + "description": "HTML parsing/serialization toolset for Node.js. WHATWG HTML Living Standard (aka HTML5)-compliant.", + "hashes": [ + { + "alg": "SHA-512", + "content": "56b67b78e7774f5164e1758d5cc8221812bfcf4306e3c0561b6b90354e08ef67e442e2944d9a65faef64f82c441b4b70315cd2997104cf5db3e459f0d6321014" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/parse5@4.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/inikulin/parse5" + }, + { + "type": "issue-tracker", + "url": "https://github.com/inikulin/parse5/issues" + }, + { + "type": "vcs", + "url": "git://github.com/inikulin/parse5.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pn@1.1.0", + "name": "pn", + "version": "1.1.0", + "description": "Promisify the node standard library.", + "hashes": [ + { + "alg": "SHA-512", + "content": "daa1da210af654b445a317b69c04b3b15e9e7f8c8e387f858bd1413951fa72a7928149e8cb248f664c732eecddf9160e41346944e034ced4ccab144e2926ff9c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/pn@1.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/cscott/node-pn#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/cscott/node-pn/issues" + }, + { + "type": "vcs", + "url": "git://github.com/cscott/node-pn.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/request-promise-native@1.0.9", + "name": "request-promise-native", + "version": "1.0.9", + "description": "The simplified HTTP request client 'request' with Promise support. Powered by native ES6 promises.", + "hashes": [ + { + "alg": "SHA-512", + "content": "c1c5beb085225a72a0358d1da82a4e66451b17f23e60f8be7f4f496480dadfd11cfaaf360a94989e20e9f884a04d36ca9a7a4958049e2413d99a8c47f38c2dde" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/request-promise-native@1.0.9", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/request/request-promise-native#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/request/request-promise-native/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/request/request-promise-native.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/request-promise-core@1.1.4", + "name": "request-promise-core", + "version": "1.1.4", + "description": "Core Promise support implementation for the simplified HTTP request client 'request'.", + "hashes": [ + { + "alg": "SHA-512", + "content": "4d36c07c10517560fb68d34ea153811f8a4dfca8a057a2f26a960d36500f03c2706e8bd1b62d44f3c9b7b18030b0b8b9af284f2ac13d00fc278c54e07548d3a7" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/request-promise-core@1.1.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/request/promise-core#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/request/promise-core/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/request/promise-core.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/stealthy-require@1.1.1", + "name": "stealthy-require", + "version": "1.1.1", + "description": "The closest you can get to require something with bypassing the require cache", + "hashes": [ + { + "alg": "SHA-1", + "content": "35b09875b4ff49f26a777e509b3090a3226bf24b" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/stealthy-require@1.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/analog-nico/stealthy-require#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/analog-nico/stealthy-require/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/analog-nico/stealthy-require.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sax@1.2.4", + "name": "sax", + "version": "1.2.4", + "description": "An evented streaming XML parser in JavaScript", + "hashes": [ + { + "alg": "SHA-512", + "content": "36a543bfd4e900d523166d0df2e3391b12f7e9480a8bdfdab59c3ec7b6059d0f1c9301462ab978c57e325adadecb75099b99cfd6451b9d880ba29a963524615b" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/sax@1.2.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/sax-js#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/sax-js/issues" + }, + { + "type": "vcs", + "url": "git://github.com/isaacs/sax-js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/symbol-tree@3.2.4", + "name": "symbol-tree", + "version": "3.2.4", + "description": "Turn any collection of objects into its own efficient tree or linked list using Symbol", + "hashes": [ + { + "alg": "SHA-512", + "content": "f50364e4ac0317e06fcfe3f239b9264988c8e64b15518b635bb014db6af634a71f2c9717a7dea1903594dfe5e774eb146fe010f5085fcdf093d8ef823564f94f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/symbol-tree@3.2.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jsdom/js-symbol-tree#symbol-tree" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jsdom/js-symbol-tree/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jsdom/js-symbol-tree.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/w3c-hr-time@1.0.2", + "name": "w3c-hr-time", + "version": "1.0.2", + "description": "An implementation of the W3C High Resolution Time Level 2 specification.", + "hashes": [ + { + "alg": "SHA-512", + "content": "cfc3f90ef0cd8ca0e81481caeeaf2bf2569c913ea5fa3a3f61edc73a57bb97d9c808ff657f50a2db97f2f6f1ddd093967b09081735c81228374dd293ec94397d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/w3c-hr-time@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jsdom/w3c-hr-time#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jsdom/w3c-hr-time/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jsdom/w3c-hr-time.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/browser-process-hrtime@1.0.0", + "name": "browser-process-hrtime", + "version": "1.0.0", + "description": "Shim for process.hrtime in the browser", + "hashes": [ + { + "alg": "SHA-512", + "content": "f68e5479c2371a192933a0eb5ebebd3db948b96c4f2a4f58d231c1461768719db2ed81020450ac1e6efd3ebdcec91d80be384391a6c525a0c931845acc782ca3" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/browser-process-hrtime@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/kumavis/browser-process-hrtime#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/kumavis/browser-process-hrtime/issues" + }, + { + "type": "vcs", + "url": "git://github.com/kumavis/browser-process-hrtime.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/whatwg-url@6.5.0", + "name": "whatwg-url", + "version": "6.5.0", + "description": "An implementation of the WHATWG URL Standard's URL API and parsing machinery", + "hashes": [ + { + "alg": "SHA-512", + "content": "ae145946ac7f4cb250594a50e9b9abb76515e1fd07090e3adf242e38d26a0ba7ced95a046f5a5361d75b7b9f52918abcedaa0ce40ddb761319894895c2cf9fcd" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/whatwg-url@6.5.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jsdom/whatwg-url#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jsdom/whatwg-url/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jsdom/whatwg-url.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ws@5.2.2", + "name": "ws", + "version": "5.2.2", + "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js", + "hashes": [ + { + "alg": "SHA-512", + "content": "8da1c50fa3c5bfa520a0855d6baa99965a6d42c3250c42644d07326f3cd70d83355cef58f1e9baf7514630f98ce3a586c8b538cfd28c81037eaabbb1fe78651c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ws@5.2.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/websockets/ws" + }, + { + "type": "issue-tracker", + "url": "https://github.com/websockets/ws/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/websockets/ws.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/async-limiter@1.0.1", + "name": "async-limiter", + "version": "1.0.1", + "description": "asynchronous function queue with adjustable concurrency", + "hashes": [ + { + "alg": "SHA-512", + "content": "72c3a558601c44525a23a9be17658a76730aaf81e1761155064d07fd06c914c0abfae3b6930a21c1740fc70ffd382c69d39af9821541152ca2a22c71de07e435" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/async-limiter@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/strml/async-limiter#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/strml/async-limiter/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/strml/async-limiter.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/xml-name-validator@3.0.0", + "name": "xml-name-validator", + "version": "3.0.0", + "description": "Validates whether a string matches the production for an XML name or qualified name", + "hashes": [ + { + "alg": "SHA-512", + "content": "039094a6dc43b2fc4a244537c8ee83b96052273fea8b3ab324a38c21f5091c44db070fec15a0f181de9fc66d5ec1468cd23678e3815ce6f0b944e62eae0ff83f" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/xml-name-validator@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jsdom/xml-name-validator#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jsdom/xml-name-validator/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jsdom/xml-name-validator.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-environment-node@24.9.0", + "name": "jest-environment-node", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "e9de15d9fe27c73233c1e9dda36ed3af46859be21759ad171149da1fa9d4d0531aa33c68bedfac7d1be1e09e3bc0bd4ebc5f372374924eed172be8b806a7bbb8" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-environment-node@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-validate@24.9.0", + "name": "jest-validate", + "version": "24.9.0", + "description": "Generic configuration validation tool that helps you with warnings, errors and deprecation messages as well as showing users examples of correct configuration.", + "hashes": [ + { + "alg": "SHA-512", + "content": "1cf22de82e400b08aa4a2c22f8e7d24876caf2c1bb6a41bc7804e5f883ca69e223b4f39e05477f83727b0e086e833c6b1a323ddea4bff913ca7b51fa3eabe145" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-validate@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/camelcase@5.3.1", + "name": "camelcase", + "version": "5.3.1", + "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`", + "hashes": [ + { + "alg": "SHA-512", + "content": "2f6f124c1d7bd27c164badd48ed944384ddd95d400a5a257664388d6e3057f37f7ad1b8f7a01da1deb3279ef98c50f96e92bd10d057a52b74e751891d79df026" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/camelcase@5.3.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/camelcase#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/camelcase/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/camelcase.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/leven@3.1.0", + "name": "leven", + "version": "3.1.0", + "description": "Measure the difference between two strings using the fastest JS implementation of the Levenshtein distance algorithm", + "hashes": [ + { + "alg": "SHA-512", + "content": "aac75af87f234da51a37fc79bf35b6af373ef11c384c043fe0a8c1e3a2302b9547f8895579e7a37bf128651a625ef22a8c580af3841f7ea3f3b462375412c6d4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/leven@3.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/leven#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/leven/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/leven.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yargs@13.3.2", + "name": "yargs", + "version": "13.3.2", + "description": "yargs the modern, pirate-themed, successor to optimist.", + "hashes": [ + { + "alg": "SHA-512", + "content": "017dd9c3988faee37989eeb119120382a913f9986746564c2cc1c0b3cb60ee746bbb2d8d6fe8b9a3d6f082102882d334f2ad5da6bd8b5684bc2924cc62959753" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/yargs@13.3.2", + "externalReferences": [ + { + "type": "website", + "url": "https://yargs.js.org/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/yargs/yargs/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/yargs/yargs.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cliui@5.0.0", + "name": "cliui", + "version": "5.0.0", + "description": "easily create complex multi-column command-line-interfaces", + "hashes": [ + { + "alg": "SHA-512", + "content": "3d87864849a61cceb3be879fdb0f133f396b9cda572234e2a582bbf3462cc2620ff6f8f199de98d9adc20762acebf014f0d1e366e817be8f30de858cdaa9f05c" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/cliui@5.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/yargs/cliui#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/yargs/cliui/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/yargs/cliui.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@3.1.0", + "name": "string-width", + "version": "3.1.0", + "description": "Get the visual width of a string - the number of columns required to display it", + "hashes": [ + { + "alg": "SHA-512", + "content": "bda7dcbfa2a3559292833d3aa0cfc7e860c1ac0b73f2f76141a9068c522f36b1c0eb2dc7085d422272f2f902eaf1d4c93d0d5bf8a0d4a8315cb647515b8e1ed7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string-width@3.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/string-width#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/string-width/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/string-width.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/emoji-regex@7.0.3", + "name": "emoji-regex", + "version": "7.0.3", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "hashes": [ + { + "alg": "SHA-512", + "content": "0b004b444210ecbbd8141d16c91bf086ae4de6a3e173a3cc8c3e9b620805948e58c83825fb4bf1ab95476cc385a8b83b85f5b39aef13e59d50a1f8664c8848b4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/emoji-regex@7.0.3", + "externalReferences": [ + { + "type": "website", + "url": "https://mths.be/emoji-regex" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mathiasbynens/emoji-regex/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/mathiasbynens/emoji-regex.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0", + "name": "is-fullwidth-code-point", + "version": "2.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "hashes": [ + { + "alg": "SHA-1", + "content": "a3b30a5c4f199183167aaab93beefae3ddfb654f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-fullwidth-code-point@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@5.2.0", + "name": "strip-ansi", + "version": "5.2.0", + "description": "Strip ANSI escape codes from a string", + "hashes": [ + { + "alg": "SHA-512", + "content": "0ee46cd6029b06ab0c288665adf7f096e83c30791c9e98ece553e62f53c087e980df45340d3a2d7c3674776514b17a4f98f98c309e96efbdcc680dc9fa56e258" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/strip-ansi@5.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/chalk/strip-ansi#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/chalk/strip-ansi/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/chalk/strip-ansi.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrap-ansi@5.1.0", + "name": "wrap-ansi", + "version": "5.1.0", + "description": "Wordwrap a string with ANSI escape codes", + "hashes": [ + { + "alg": "SHA-512", + "content": "402d7f88dff6fd13d52798d82bc046b6d8f9cfcdcb9922a6bdbbeb5cf3422d94846f7d8a2950c90e5fcc3add8dd35a94d87fc593311af4f2ada3506a0e3b5ded" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/wrap-ansi@5.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/chalk/wrap-ansi#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/chalk/wrap-ansi/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/chalk/wrap-ansi.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-caller-file@2.0.5", + "name": "get-caller-file", + "version": "2.0.5", + "description": "[![Build Status](https://travis-ci.org/stefanpenner/get-caller-file.svg?branch=master)](https://travis-ci.org/stefanpenner/get-caller-file) [![Build status](https://ci.appveyor.com/api/projects/status/ol2q94g1932cy14a/branch/master?svg=true)](https://ci.appveyor.com/project/embercli/get-caller-file/branch/master)", + "hashes": [ + { + "alg": "SHA-512", + "content": "0f214fdc133fdd81d340e0942ffc343991d1d25a4a786af1a2d70759ca8d11d9e5b6a1705d57e110143de1e228df801f429a34ac6922e1cc8889fb58d3a87616" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/get-caller-file@2.0.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/stefanpenner/get-caller-file#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/stefanpenner/get-caller-file/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/stefanpenner/get-caller-file.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/require-directory@2.1.1", + "name": "require-directory", + "version": "2.1.1", + "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.", + "hashes": [ + { + "alg": "SHA-1", + "content": "8c64ad5fd30dab1c976e2344ffe7f792a6a6df42" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/require-directory@2.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/troygoode/node-require-directory/" + }, + { + "type": "issue-tracker", + "url": "http://github.com/troygoode/node-require-directory/issues/" + }, + { + "type": "vcs", + "url": "git://github.com/troygoode/node-require-directory.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/set-blocking@2.0.0", + "name": "set-blocking", + "version": "2.0.0", + "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", + "hashes": [ + { + "alg": "SHA-1", + "content": "045f9782d011ae9a6803ddd382b24392b3d890f7" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/set-blocking@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/yargs/set-blocking#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/yargs/set-blocking/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/yargs/set-blocking.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/which-module@2.0.0", + "name": "which-module", + "version": "2.0.0", + "description": "Find the module object for something that was require()d", + "hashes": [ + { + "alg": "SHA-1", + "content": "d9ef07dce77b9902b8a3a8fa4b31c3e3f7e6e87a" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/which-module@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/nexdrew/which-module#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/nexdrew/which-module/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/nexdrew/which-module.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/y18n@4.0.0", + "name": "y18n", + "version": "4.0.0", + "description": "the bare-bones internationalization library used by yargs", + "hashes": [ + { + "alg": "SHA-512", + "content": "afd4bf6725eefd7bbdab5b58969b0b22c6b711e2d75e4d15c25c6a4dc1517e0f4484c5bed7b91bb7d1b436b8029a119be6f4f687284964b7c31b1fbbfb9523ff" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/y18n@4.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/yargs/y18n" + }, + { + "type": "issue-tracker", + "url": "https://github.com/yargs/y18n/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/yargs/y18n.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yargs-parser@13.1.2", + "name": "yargs-parser", + "version": "13.1.2", + "description": "the mighty option parser used by yargs", + "hashes": [ + { + "alg": "SHA-512", + "content": "de56ec3517ff8fe03842e4997c3440ec74527d6af33b4623a9325de648c0ab7ed97a9d421206989ab1fd4371b03e207d707c9dd58d54c208068491a8c62a5bce" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/yargs-parser@13.1.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/yargs/yargs-parser#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/yargs/yargs-parser/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/yargs/yargs-parser.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/decamelize@1.2.0", + "name": "decamelize", + "version": "1.2.0", + "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow", + "hashes": [ + { + "alg": "SHA-1", + "content": "f6534d15148269b20352e7bee26f501f9a191290" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/decamelize@1.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/decamelize#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/decamelize/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/decamelize.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-notifier@5.4.3", + "name": "node-notifier", + "version": "5.4.3", + "description": "A Node.js module for sending notifications on native Mac, Windows (post and pre 8) and Linux (or Growl as fallback)", + "hashes": [ + { + "alg": "SHA-512", + "content": "33850119cb388de38af428d3b18c24bc7ebf333b949860b24d6fa4098eee3bed5956bd3e14719d3dd21fe4208ba806b19d1ad689dca8425364308215c1b281f1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/node-notifier@5.4.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/mikaelbr/node-notifier#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mikaelbr/node-notifier/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/mikaelbr/node-notifier.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/growly@1.3.0", + "name": "growly", + "version": "1.3.0", + "description": "Simple zero-dependency Growl notifications using GNTP.", + "hashes": [ + { + "alg": "SHA-1", + "content": "f10748cbe76af964b7c96c93c6bcc28af120c081" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/growly@1.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/theabraham/growly#readme" + }, + { + "type": "issue-tracker", + "url": "http://github.com/theabraham/growly/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/theabraham/growly.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-wsl@1.1.0", + "name": "is-wsl", + "version": "1.1.0", + "description": "Check if the process is running inside Windows Subsystem for Linux (Bash on Windows)", + "hashes": [ + { + "alg": "SHA-1", + "content": "1f16e4aa22b04d1336b66188a66af3c600c3a66d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-wsl@1.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/is-wsl#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/is-wsl/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/is-wsl.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/shellwords@0.1.1", + "name": "shellwords", + "version": "0.1.1", + "description": "Manipulate strings according to the word parsing rules of the UNIX Bourne shell.", + "hashes": [ + { + "alg": "SHA-512", + "content": "bc5c1251f42fab26e2202c19639f8301620f2cab163b7d50f752522a5dd462ff8ae5cd9044fce7d2acde73a40fbb541cf5e1d822d88fdcd749a8d56a7ad600c3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/shellwords@0.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jimmycuadra/shellwords" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jimmycuadra/shellwords/issues" + }, + { + "type": "vcs", + "url": "git://github.com/jimmycuadra/shellwords.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-length@2.0.0", + "name": "string-length", + "version": "2.0.0", + "description": "Get the real length of a string - by correctly counting astral symbols and ignoring ansi escape codes", + "hashes": [ + { + "alg": "SHA-1", + "content": "d40dbb686a3ace960c1cffca562bf2c45f8363ed" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string-length@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/string-length#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/string-length/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/string-length.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/astral-regex@1.0.0", + "name": "astral-regex", + "version": "1.0.0", + "description": "Regular expression for matching astral symbols", + "hashes": [ + { + "alg": "SHA-512", + "content": "f91c9fea0dc12a845cee37e9eda77cb4ce13b4c89a5af6c5ff5fec41c64f9244bb6a0dc3e6730109ed947ce4ce36d024686d2d3b48a3dc2e4bc267f5122ca31e" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/astral-regex@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/kevva/astral-regex#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/kevva/astral-regex/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/kevva/astral-regex.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@4.0.0", + "name": "strip-ansi", + "version": "4.0.0", + "description": "Strip ANSI escape codes", + "hashes": [ + { + "alg": "SHA-1", + "content": "a8479022eb1ac368a871389b635262c505ee368f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/strip-ansi@4.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/chalk/strip-ansi#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/chalk/strip-ansi/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/chalk/strip-ansi.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@3.0.0", + "name": "ansi-regex", + "version": "3.0.0", + "description": "Regular expression for matching ANSI escape codes", + "hashes": [ + { + "alg": "SHA-1", + "content": "ed0317c322064f79466c02966bddb605ab37d998" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ansi-regex@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/chalk/ansi-regex#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/chalk/ansi-regex/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/chalk/ansi-regex.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-escapes@3.2.0", + "name": "ansi-escapes", + "version": "3.2.0", + "description": "ANSI escape codes for manipulating the terminal", + "hashes": [ + { + "alg": "SHA-512", + "content": "701869adee266be5344f5a0ce5f5e0ec3cb5270ef3cf0bfb96dfc6a02a6bfa10d02686272953cb2f8742bd210532642eace42f4abc13ed22ff0c0961048f7b45" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ansi-escapes@3.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/ansi-escapes#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/ansi-escapes/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/ansi-escapes.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-changed-files@24.9.0", + "name": "jest-changed-files", + "version": "24.9.0", + "description": "A module used internally by Jest to check which files have changed since you last committed in git or hg.", + "hashes": [ + { + "alg": "SHA-512", + "content": "e9a4d6a5eda61c5d0384bdbc5a37643bc2f21a3b37cc8b4f113e1b31279753a4f7b9be053ccc3e99c39c6dd19740e01f98b731a1f0f6dffe4197d678024170aa" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-changed-files@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-resolve-dependencies@24.9.0", + "name": "jest-resolve-dependencies", + "version": "24.9.0", + "hashes": [ + { + "alg": "SHA-512", + "content": "166edbe809569d8853d015f2e215e969cb4722a111edeacd808b08a330d75a5e5d566fa4f1774655ed684e0d49c9a1673b16ab3046dac77c32449a863f63eafa" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-resolve-dependencies@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/facebook/jest#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-watcher@24.9.0", + "name": "jest-watcher", + "version": "24.9.0", + "description": "Delightful JavaScript Testing.", + "hashes": [ + { + "alg": "SHA-512", + "content": "fbf7cb39f28f5d76090d8964b3adbfe11e06a13f86535b5865e77df494823ac9b392417bef6ed1a8aae3340c6d7cee18a46bf5d70c9b811bc28d1ef794ad8667" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/jest-watcher@24.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://jestjs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/facebook/jest/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/facebook/jest.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-each-series@1.0.0", + "name": "p-each-series", + "version": "1.0.0", + "description": "Iterate over promises serially", + "hashes": [ + { + "alg": "SHA-1", + "content": "930f3d12dd1f50e7434457a22cd6f04ac6ad7f71" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/p-each-series@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/p-each-series#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/p-each-series/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/p-each-series.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-reduce@1.0.0", + "name": "p-reduce", + "version": "1.0.0", + "description": "Reduce a list of values using promises into a promise for a value", + "hashes": [ + { + "alg": "SHA-1", + "content": "18c2b0dd936a4690a529f8231f58a0fdb6a47dfa" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/p-reduce@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/p-reduce#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/p-reduce/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/p-reduce.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/prompts@2.3.2", + "name": "prompts", + "version": "2.3.2", + "description": "Lightweight, beautiful and user-friendly prompts", + "hashes": [ + { + "alg": "SHA-512", + "content": "434eae2acd8290d615203d15ab07c097d9a2a68f7dce406ffe7d89b5663cf58c5add969b592aecd1ed8a4ee74a55ade978b52f61731e7c3a8895e2cf55405930" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/prompts@2.3.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/terkelg/prompts#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/terkelg/prompts/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/terkelg/prompts.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/kleur@3.0.3", + "name": "kleur", + "version": "3.0.3", + "description": "The fastest Node.js library for formatting terminal text with ANSI colors~!", + "hashes": [ + { + "alg": "SHA-512", + "content": "793233955392511f89c5d0c57a911870132d67d42a75e7feae7cd675166e31b3b2c2ee6d3b6c3637baea8e800d67993dbf2c212fa06bd55463508813431e04f3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/kleur@3.0.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/lukeed/kleur#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lukeed/kleur/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lukeed/kleur.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sisteransi@1.0.5", + "name": "sisteransi", + "version": "1.0.5", + "description": "ANSI escape codes for some terminal swag", + "hashes": [ + { + "alg": "SHA-512", + "content": "6cb186951d50c417329e7d9de589835f83068e566fcb631104344d1cb27c548ea5ebef45522c9314d27422f78e48fd1b7178150cf45c7c6a80d298daa94a5f56" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/sisteransi@1.0.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/terkelg/sisteransi#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/terkelg/sisteransi/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/terkelg/sisteransi.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-run-all@4.1.5", + "name": "npm-run-all", + "version": "4.1.5", + "description": "A CLI tool to run multiple npm-scripts in parallel or sequential.", + "hashes": [ + { + "alg": "SHA-512", + "content": "3a8f368090c055c68c762de7ba82856af9081c1455a90d6abcc6fef4b1e4fdc1783fa0769bc68fd388467fba0beb067d06e1b05f5a2794b869ba8a1f4b2a100d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/npm-run-all@4.1.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/mysticatea/npm-run-all" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mysticatea/npm-run-all/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/mysticatea/npm-run-all.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/memorystream@0.3.1", + "name": "memorystream", + "version": "0.3.1", + "description": "This is lightweight memory stream module for node.js.", + "hashes": [ + { + "alg": "SHA-1", + "content": "86d7090b30ce455d63fbae12dda51a47ddcaf9b2" + } + ], + "purl": "pkg:npm/memorystream@0.3.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/JSBizon/node-memorystream" + }, + { + "type": "issue-tracker", + "url": "https://github.com/JSBizon/node-memorystream/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/JSBizon/node-memorystream.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pidtree@0.3.1", + "name": "pidtree", + "version": "0.3.1", + "description": "Cross platform children list of a PID", + "hashes": [ + { + "alg": "SHA-512", + "content": "a906d6f7884b1c4a8283b9e16f2e32442ec6dbe8d81d8e1182e7366e3c3b52e83818826ebb5b6f7f6b87699bf943ccddb7e58a27aa8ad45388e9a99a594a3914" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/pidtree@0.3.1", + "externalReferences": [ + { + "type": "website", + "url": "http://github.com/simonepri/pidtree#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/simonepri/pidtree/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/simonepri/pidtree.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/shell-quote@1.7.2", + "name": "shell-quote", + "version": "1.7.2", + "description": "quote and parse shell commands", + "hashes": [ + { + "alg": "SHA-512", + "content": "991cff9bf255b1c0ab90cc8fa8773f6dcce2dce40790b4ea5c7105bb4cc384afea7efdd470e03849599108b9a8b386e18ebf5e91542e6e3fd1ef068a6a99a242" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/shell-quote@1.7.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/substack/node-shell-quote" + }, + { + "type": "issue-tracker", + "url": "https://github.com/substack/node-shell-quote/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/substack/node-shell-quote.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string.prototype.padend@3.1.0", + "name": "string.prototype.padend", + "version": "3.1.0", + "description": "ES2017 spec-compliant String.prototype.padEnd shim.", + "hashes": [ + { + "alg": "SHA-512", + "content": "dda22ff057dda7c1198fc88bc11106a506946623f2ad6ae9ccc047be48925bf6cafc41af7bd9e9d3b570cbb209e706b2769197cd066efc5f0ecdedbf21690168" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string.prototype.padend@3.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/es-shims/String.prototype.padEnd#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/es-shims/String.prototype.padEnd/issues" + }, + { + "type": "vcs", + "url": "git://github.com/es-shims/String.prototype.padEnd.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pm-srp@1.0.0", + "name": "pm-srp", + "version": "1.0.0", + "description": "ProtonMail SRP and auth library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/pm-srp@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ProtonMail/pm-srp#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ProtonMail/pm-srp/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/ProtonMail/pm-srp.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/esm@3.2.25", + "name": "esm", + "version": "3.2.25", + "description": "Tomorrow's ECMAScript modules today!", + "hashes": [ + { + "alg": "SHA-512", + "content": "535b2e899da80d55afe333cee7a4b435c47942b8846a11ad74dd8e47a162386e1626f723055141d2a238f9e2a85851f8f373ca1ae2eebba57c6784f983add454" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/esm@3.2.25", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/standard-things/esm#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/standard-things/esm/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/standard-things/esm.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pmcrypto@6.3.11", + "name": "pmcrypto", + "version": "6.3.11", + "description": "[![CircleCI](https://circleci.com/gh/ProtonMail/pmcrypto.svg?style=svg)](https://circleci.com/gh/ProtonMail/pmcrypto)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/pmcrypto@6.3.11", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ProtonMail/pmcrypto#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ProtonMail/pmcrypto/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/ProtonMail/pmcrypto.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/openpgp@4.4.12", + "group": "@types", + "name": "openpgp", + "version": "4.4.12", + "description": "TypeScript definitions for openpgp", + "hashes": [ + { + "alg": "SHA-512", + "content": "f2f7742d03b8390c375ae783498019731948b720d68bb342797a31bc221e3d14599d7e14f687432d8e6b2bb8479d782711ab50815623b56a02e6d13bac7044a8" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40types/openpgp@4.4.12", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/bn.js@4.11.6", + "group": "@types", + "name": "bn.js", + "version": "4.11.6", + "description": "TypeScript definitions for bn.js", + "hashes": [ + { + "alg": "SHA-512", + "content": "a6aafce7b8eba7690fb8ef6e4636773f09c94e3a10cbe7dc771bc14ef1e6e9d92610bf6afa10c3ff68ffd042ce04fb4f9d2f0b8c25f4808f676e5f2556469da6" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40types/bn.js@4.11.6", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/node@14.0.24", + "group": "@types", + "name": "node", + "version": "14.0.24", + "description": "TypeScript definitions for Node.js", + "hashes": [ + { + "alg": "SHA-512", + "content": "6edb7fa0d3a20d6712b88ef6d4c74bf154069e3b0a8e54cc76b2b24dc2c229e429fe7e0000c149f7ad7031ba7ed3dcbc5ae18f0a50c4bf4ed1208b5d5ca21700" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40types/node@14.0.24", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/openpgp@4.10.7", + "name": "openpgp", + "version": "4.10.7", + "description": "OpenPGP.js is a Javascript implementation of the OpenPGP protocol. This is defined in RFC 4880.", + "hashes": [ + { + "alg": "SHA-512", + "content": "fbb1240ff6ed9ef2321a4b25074a775b5db7bbf75a8cc05c7f331f3887af95904fbc258b2571b380d14c3390985d43484de054a710b1c201de9e2aabf947c449" + } + ], + "licenses": [ + { + "license": { + "id": "LGPL-3.0+" + } + } + ], + "purl": "pkg:npm/openpgp@4.10.7", + "externalReferences": [ + { + "type": "website", + "url": "https://openpgpjs.org/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/openpgpjs/openpgpjs/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/openpgpjs/openpgpjs.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asn1.js@5.4.1", + "name": "asn1.js", + "version": "5.4.1", + "description": "ASN.1 encoder and decoder", + "hashes": [ + { + "alg": "SHA-512", + "content": "f88fffe1c60f71c57c2dd9812e25fc098bdff52a77bd0b2baaed9035745cadb896bdcc7f51d9458aa509273c5143182c666be15e19f871229e4a6a058d576ea4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/asn1.js@5.4.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/indutny/asn1.js" + }, + { + "type": "issue-tracker", + "url": "https://github.com/indutny/asn1.js/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/indutny/asn1.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bn.js@4.11.9", + "name": "bn.js", + "version": "4.11.9", + "description": "Big number implementation in pure javascript", + "hashes": [ + { + "alg": "SHA-512", + "content": "13a42862a08a65f81ab474dd1f3b3545128fee2a78bef9be132454784d9117435b97056f6f4a7a8d255e353385c4f9f6e905cdda8e9231f3712a9ea453ccd06b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/bn.js@4.11.9", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/indutny/bn.js" + }, + { + "type": "issue-tracker", + "url": "https://github.com/indutny/bn.js/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/indutny/bn.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimalistic-assert@1.0.1", + "name": "minimalistic-assert", + "version": "1.0.1", + "description": "minimalistic-assert ===", + "hashes": [ + { + "alg": "SHA-512", + "content": "52d25c003e3211a1ad8cf7b35ae3bdc02e27c149d51fff3f226df210740fe1bebb717943fd0afd85d213094d710db4845e0d9728d68ff23b11795eef41dd34fc" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minimalistic-assert@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/calvinmetcalf/minimalistic-assert" + }, + { + "type": "issue-tracker", + "url": "https://github.com/calvinmetcalf/minimalistic-assert/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/calvinmetcalf/minimalistic-assert.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-fetch@2.6.0", + "name": "node-fetch", + "version": "2.6.0", + "description": "A light-weight module that brings window.fetch to node.js", + "hashes": [ + { + "alg": "SHA-512", + "content": "f1d1b81f9ba37ef162a83995bbd7d0e5b387502d7924c8cc63f66e9afdbaa0ebef5498ccebb285f24a0258869b290d462486bdaf698c66c701abf4db74e72634" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/node-fetch@2.6.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/bitinn/node-fetch" + }, + { + "type": "issue-tracker", + "url": "https://github.com/bitinn/node-fetch/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/bitinn/node-fetch.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-localstorage@1.3.1", + "name": "node-localstorage", + "version": "1.3.1", + "description": "A drop-in substitute for the browser native localStorage API that runs on node.js.", + "hashes": [ + { + "alg": "SHA-512", + "content": "34c58249659ce896c74f93f25a5353da2f2becf806617567b6629ac18f3793f33450949c6798e2adbeb54cb9ea2b077cd790df050bbe951dec470d3c48fcc869" + } + ], + "purl": "pkg:npm/node-localstorage@1.3.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/lmaccherone/node-localstorage" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lmaccherone/node-localstorage/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/lmaccherone/node-localstorage.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/write-file-atomic@1.3.4", + "name": "write-file-atomic", + "version": "1.3.4", + "description": "Write files in an atomic fashion w/configurable ownership", + "hashes": [ + { + "alg": "SHA-1", + "content": "f807a4f0b1d9e913ae7a48112e6cc3af1991b45f" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/write-file-atomic@1.3.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/iarna/write-file-atomic" + }, + { + "type": "issue-tracker", + "url": "https://github.com/iarna/write-file-atomic/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/iarna/write-file-atomic.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/slide@1.1.6", + "name": "slide", + "version": "1.1.6", + "description": "A flow control lib small enough to fit on in a slide presentation. Derived live at Oak.JS", + "hashes": [ + { + "alg": "SHA-1", + "content": "56eb027d65b4d2dce6cb2e2d32c4d4afc9e1d707" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/slide@1.1.6", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/slide-flow-control#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/slide-flow-control/issues" + }, + { + "type": "vcs", + "url": "git://github.com/isaacs/slide-flow-control.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/popper.js@1.16.1", + "name": "popper.js", + "version": "1.16.1", + "description": "A kickass library to manage your poppers", + "hashes": [ + { + "alg": "SHA-512", + "content": "59be29d49e33c854db33ebba5ae3b85ecb58c782b2f427b07b80d6ade97b074c3a555202bcfc1d3a9a2d8f371fe9e0fc4ec72456720c34e350c8f21414e51b09" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/popper.js@1.16.1", + "externalReferences": [ + { + "type": "website", + "url": "https://popper.js.org" + }, + { + "type": "issue-tracker", + "url": "https://github.com/FezVrasta/popper.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/FezVrasta/popper.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/prettier@1.19.1", + "name": "prettier", + "version": "1.19.1", + "description": "Prettier is an opinionated code formatter", + "hashes": [ + { + "alg": "SHA-512", + "content": "b3b3e8c83bff208d4e6e042e9c26c1f4f74b99470165c9d639cc4387b3b437f5300c4b07caa916f90876f235be995b82771ee02c1d01a2d608d58eae23d8b27b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/prettier@1.19.1", + "externalReferences": [ + { + "type": "website", + "url": "https://prettier.io" + }, + { + "type": "issue-tracker", + "url": "https://github.com/prettier/prettier/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/prettier/prettier.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/proton-i18n@2.1.5", + "name": "proton-i18n", + "version": "2.1.5", + "description": "CLI to manage translations for client apps", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/proton-i18n@2.1.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/angular-gettext-cli@1.1.2", + "name": "angular-gettext-cli", + "version": "1.1.2", + "description": "A command line interface for angular gettools", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/angular-gettext-cli@1.1.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/huston007/angular-gettext-cli" + }, + { + "type": "issue-tracker", + "url": "https://github.com/huston007/angular-gettext-cli/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/huston007/angular-gettext-cli.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/angular-gettext-tools@2.5.3", + "name": "angular-gettext-tools", + "version": "2.5.3", + "description": "Tools for extracting/compiling angular-gettext strings.", + "hashes": [ + { + "alg": "SHA-512", + "content": "fd2c813213f0312a1ab194577cc917b0ac5a0079031c7685af78c032a3ee877c06349f2cf4b7c728e1b370cd055b6986228b66175091a162a05081cc0b051872" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/angular-gettext-tools@2.5.3", + "externalReferences": [ + { + "type": "website", + "url": "http://angular-gettext.rocketeer.be/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/rubenv/angular-gettext-tools/issues" + }, + { + "type": "vcs", + "url": "git://github.com/rubenv/angular-gettext-tools.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/binary-search@1.3.6", + "name": "binary-search", + "version": "1.3.6", + "description": "tiny binary search function with comparators", + "hashes": [ + { + "alg": "SHA-512", + "content": "9db1355b13934eb51621fb1f678687198bb90ceb8d91bc46a248d5e99da4c5f24adee6806fcccd2b59aecce7a2a682c76632274f806bf3c047a737af73af35c4" + } + ], + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "purl": "pkg:npm/binary-search@1.3.6", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/darkskyapp/binary-search#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/darkskyapp/binary-search/issues" + }, + { + "type": "vcs", + "url": "git://github.com/darkskyapp/binary-search.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pofile@1.0.11", + "name": "pofile", + "version": "1.0.11", + "description": "Parse and serialize Gettext PO files.", + "hashes": [ + { + "alg": "SHA-512", + "content": "572f5e1f57510fdc078d8b7f42a5dc4f3f919d7ff3839df12be2a58c5497df43ef74331bdb3f9ceae0d479b9541aaa89833dd016c765034209bc7ce23e65ad42" + } + ], + "purl": "pkg:npm/pofile@1.0.11", + "externalReferences": [ + { + "type": "website", + "url": "http://github.com/rubenv/pofile" + }, + { + "type": "issue-tracker", + "url": "https://github.com/rubenv/pofile/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/rubenv/pofile.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chalk@4.1.0", + "name": "chalk", + "version": "4.1.0", + "description": "Terminal string styling done right", + "hashes": [ + { + "alg": "SHA-512", + "content": "ab0c75d80c577b6439c50e3701cfff23abf96974e2a58ad211274e833acdfbd5e3804a728e92aebd219a378a84f777fb4d04e57ab410f12f844341320e854bd4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/chalk@4.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/chalk/chalk#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/chalk/chalk/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/chalk/chalk.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-styles@4.2.1", + "name": "ansi-styles", + "version": "4.2.1", + "description": "ANSI escape codes for styling strings in the terminal", + "hashes": [ + { + "alg": "SHA-512", + "content": "f551a3accb06d6f78fc5c4b0790b0ddb4298fdce3337487d7cb8ea01bc1b3df6a1337b7e34bf8cf470bcc5e5c6d88f295f93686a64c636ea26114148edf7148c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ansi-styles@4.2.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/chalk/ansi-styles#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/chalk/ansi-styles/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/chalk/ansi-styles.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/color-name@1.1.1", + "group": "@types", + "name": "color-name", + "version": "1.1.1", + "description": "TypeScript definitions for color-name", + "hashes": [ + { + "alg": "SHA-512", + "content": "aebf8e432023c737bb1a05ab49a270c9d1d2b48847ab696f63704e0b6323eca9f323b5cad14c354ce39d23d943a1a8c46d258b898828a387f5479d5ead07e13d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40types/color-name@1.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-convert@2.0.1", + "name": "color-convert", + "version": "2.0.1", + "description": "Plain color conversion functions", + "hashes": [ + { + "alg": "SHA-512", + "content": "4511023ec8fb8aeff16f9a0a61cb051d2a6914d9ec8ffe763954d129be333f9a275f0545df3566993a0d70e7c60be0910e97cafd4e7ce1f320dfc64709a12529" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/color-convert@2.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/Qix-/color-convert#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/Qix-/color-convert/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/Qix-/color-convert.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-name@1.1.4", + "name": "color-name", + "version": "1.1.4", + "description": "A list of color names and its values", + "hashes": [ + { + "alg": "SHA-512", + "content": "74ecbedc0b96ddadb035b64722e319a537208c6b8b53fb812ffb9b71917d3976c3a3c7dfe0ef32569e417f479f4bcb84a18a39ab8171edd63d3a04065e002c40" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/color-name@1.1.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/colorjs/color-name" + }, + { + "type": "issue-tracker", + "url": "https://github.com/colorjs/color-name/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/colorjs/color-name.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-color@7.1.0", + "name": "supports-color", + "version": "7.1.0", + "description": "Detect whether a terminal supports color", + "hashes": [ + { + "alg": "SHA-512", + "content": "a11488a51f29c53d56af616ab9336719eb7bf5bdc15a58ea3aea16fe1e28061c49fc751b5f99d7e894abb9392f5c30853300cfbec6934dbbcc2ca6564b2d11e6" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/supports-color@7.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/chalk/supports-color#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/chalk/supports-color/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/chalk/supports-color.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-flag@4.0.0", + "name": "has-flag", + "version": "4.0.0", + "description": "Check if argv has a specific flag", + "hashes": [ + { + "alg": "SHA-512", + "content": "1329094ff4352a34d672da698080207d23b4b4a56e6548e180caf5ee4a93ba6325e807efdc421295e53ba99533a170c54c01d30c2e0d3a81bf67153712f94c3d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/has-flag@4.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/has-flag#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/has-flag/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/has-flag.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dedent@0.7.0", + "name": "dedent", + "version": "0.7.0", + "description": "An ES6 string tag that strips indentation from multi-line strings", + "hashes": [ + { + "alg": "SHA-1", + "content": "2495ddbaf6eb874abb0e1be9df22d2e5a544326c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/dedent@0.7.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/dmnd/dedent" + }, + { + "type": "issue-tracker", + "url": "https://github.com/dmnd/dedent/issues" + }, + { + "type": "vcs", + "url": "git://github.com/dmnd/dedent.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dotenv@8.2.0", + "name": "dotenv", + "version": "8.2.0", + "description": "Loads environment variables from .env file", + "hashes": [ + { + "alg": "SHA-512", + "content": "f2c27bf049696c32411cd781cd46d454bb2a29d71c69afc15c5d6e3d3c371abbd04c182b42bb4e6ebda652b137f2fcd877c704bfe9bf2417c32e2a1871f5e86b" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/dotenv@8.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/motdotla/dotenv#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/motdotla/dotenv/issues" + }, + { + "type": "vcs", + "url": "git://github.com/motdotla/dotenv.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/execa@4.0.3", + "name": "execa", + "version": "4.0.3", + "description": "Process execution for humans", + "hashes": [ + { + "alg": "SHA-512", + "content": "5850d71877245cf5995f5f6dd640ac5f33a9a97f4b59836a9f80be1ea66593f5748a64e4cc966a7fced9061be91da7ed1116249e99347e34b29675d5955808d0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/execa@4.0.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/execa#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/execa/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/execa.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cross-spawn@7.0.3", + "name": "cross-spawn", + "version": "7.0.3", + "description": "Cross platform child_process#spawn and child_process#spawnSync", + "hashes": [ + { + "alg": "SHA-512", + "content": "8910cf24a50f544343edd1cf3bcae46ce9cfa720f281c0c5b568e9796342832f163f6ad77315cbf13b2445e425e8eac1d86efe509ada82cd6ad7916e75cec6eb" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/cross-spawn@7.0.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/moxystudio/node-cross-spawn" + }, + { + "type": "issue-tracker", + "url": "https://github.com/moxystudio/node-cross-spawn/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/moxystudio/node-cross-spawn.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-key@3.1.1", + "name": "path-key", + "version": "3.1.1", + "description": "Get the PATH environment variable key cross-platform", + "hashes": [ + { + "alg": "SHA-512", + "content": "a2399e374a9dfb2d23b3312da18e3caf43deab97703049089423aee90e5fe3595f92cc17b8ab58ae18284e92e7c887079b6e1486ac7ee53aa6d889d2c0b844e9" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/path-key@3.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/path-key#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/path-key/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/path-key.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/shebang-command@2.0.0", + "name": "shebang-command", + "version": "2.0.0", + "description": "Get the command from a shebang", + "hashes": [ + { + "alg": "SHA-512", + "content": "907c6bdb366962d766acdd6a0e3aeb5ff675ad1d641bc0f1fa09292b51b87979af5ecc26704d614d6056614ce5ada630d7fc99a7a62e0d8efb62dbdb3747660c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/shebang-command@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/kevva/shebang-command#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/kevva/shebang-command/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/kevva/shebang-command.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/shebang-regex@3.0.0", + "name": "shebang-regex", + "version": "3.0.0", + "description": "Regular expression for matching a shebang line", + "hashes": [ + { + "alg": "SHA-512", + "content": "efef9d161b5cc77df9dee05aabc0c347836ec417ad0730bb6503a19934089c711de9b4ab5dd884cb30af1b4ed9e3851874b4a1594c97b7933fca1cfc7a471bd4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/shebang-regex@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/shebang-regex#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/shebang-regex/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/shebang-regex.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/which@2.0.2", + "name": "which", + "version": "2.0.2", + "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", + "hashes": [ + { + "alg": "SHA-512", + "content": "04b2374e5d535b73ef97bd25df2ab763ae22f9ac29c17aac181616924a8cb676d782b303fb28fbae15b492e103c7325a6171a3116e6881aa4a34c10a34c8e26c" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/which@2.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/node-which#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/node-which/issues" + }, + { + "type": "vcs", + "url": "git://github.com/isaacs/node-which.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-stream@5.1.0", + "name": "get-stream", + "version": "5.1.0", + "description": "Get a stream as a string, buffer, or array", + "hashes": [ + { + "alg": "SHA-512", + "content": "117af514ecebcd37c678bd2041d78512f38c9b69b330e825ca2397493a4f0be8808c029fb5baf78e908c5b29e883062733e7928fdb0719ceb08c8703bd88b283" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/get-stream@5.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/get-stream#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/get-stream/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/get-stream.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/human-signals@1.1.1", + "name": "human-signals", + "version": "1.1.1", + "description": "Human-friendly process signals", + "hashes": [ + { + "alg": "SHA-512", + "content": "48442eeef97c2a334bd9ea0604b177fb0023a6c35f03d5cc9570188ffdc475a35f025c4ab610f5c631107c6394865942186255358df86d1afa94f20d84d8f267" + } + ], + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/human-signals@1.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://git.io/JeluP" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ehmicky/human-signals/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/ehmicky/human-signals.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-stream@2.0.0", + "name": "is-stream", + "version": "2.0.0", + "description": "Check if something is a Node.js stream", + "hashes": [ + { + "alg": "SHA-512", + "content": "5c2a32f96954afb775f99f06812b979a9b94142f5f3a145782524cc7e7702ca4e42f8e028dde16d59e4ff81419a6bf9c47ddda18fe12fecec5b70e8d77f92213" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-stream@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/is-stream#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/is-stream/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/is-stream.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-run-path@4.0.1", + "name": "npm-run-path", + "version": "4.0.1", + "description": "Get your PATH prepended with locally installed binaries", + "hashes": [ + { + "alg": "SHA-512", + "content": "4b8f16cd95bbefbce1348ae7ee0c4e94848d02a8bd642fee4059d175b7881e1661080e94aa990e4fc4f51bb06f7dd80fe04afc805e2c51b692d22ed0bc87c25b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/npm-run-path@4.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/npm-run-path#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/npm-run-path/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/npm-run-path.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/onetime@5.1.0", + "name": "onetime", + "version": "5.1.0", + "description": "Ensure a function is only called once", + "hashes": [ + { + "alg": "SHA-512", + "content": "e4d71290f1e1c1354521037e4d4a97a12e7e7651251d7769016bbd2341cfdb460eb488be699d02b7cda376520b0f18cb1005b0be6faa8f59ba684b6c0d59a6e9" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/onetime@5.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/onetime#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/onetime/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/onetime.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mimic-fn@2.1.0", + "name": "mimic-fn", + "version": "2.1.0", + "description": "Make a function mimic another one", + "hashes": [ + { + "alg": "SHA-512", + "content": "3aa6ce939a0441e019f165d6c9d96ef47263cfd59574422f6a63027179aea946234e49c7fecaac5af850def830285451d47a63bcd04a437ee76c9818cc6a8672" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/mimic-fn@2.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/mimic-fn#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/mimic-fn/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/mimic-fn.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-final-newline@2.0.0", + "name": "strip-final-newline", + "version": "2.0.0", + "description": "Strip the final newline character from a string/buffer", + "hashes": [ + { + "alg": "SHA-512", + "content": "06ba6f7cd004ddd72fabb965df156e9b38ca8d9439b48d6c11420aaf752892cd17525e394addc595ab55a9e7fda6b9388d10f3856e96660fb76e4f77cbaa4b8c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/strip-final-newline@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/strip-final-newline#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/strip-final-newline/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/strip-final-newline.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tar@6.0.2", + "name": "tar", + "version": "6.0.2", + "description": "tar for node", + "hashes": [ + { + "alg": "SHA-512", + "content": "1a5a378e446d3dcbe90e502cff4fa1a336afefcca85ca16bf9ce30830eb634d30ede8a3801a25d0a8db552eee5730af9e61dfd5b65c3d4b30445ceb8c2d6c8b6" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/tar@6.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/npm/node-tar#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/npm/node-tar/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/npm/node-tar.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chownr@2.0.0", + "name": "chownr", + "version": "2.0.0", + "description": "like `chown -R`", + "hashes": [ + { + "alg": "SHA-512", + "content": "6c8a26b43179286a5da2090b77d56ca6f17393d29fa72c86952f18155665ed318f0472f9b2720e9f17ac8705603ed790f5be04c9d97ea556c8c84d4372f09681" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/chownr@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/chownr#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/chownr/issues" + }, + { + "type": "vcs", + "url": "git://github.com/isaacs/chownr.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-minipass@2.1.0", + "name": "fs-minipass", + "version": "2.1.0", + "description": "fs read and write streams based on minipass", + "hashes": [ + { + "alg": "SHA-512", + "content": "57f26038b1424be47a55cab4b250ae69e58474d0b7a2e0e524c348b1a707d95b402e2bbd995e0b3eb1dce5c0e5f24e5ac3a27c8f08165a9893a39458866233be" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/fs-minipass@2.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/npm/fs-minipass#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/npm/fs-minipass/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/npm/fs-minipass.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass@3.1.3", + "name": "minipass", + "version": "3.1.3", + "description": "minimal implementation of a PassThrough stream", + "hashes": [ + { + "alg": "SHA-512", + "content": "32077619d315cd8fb1dc827ea079d533e286de503973cb6769bc892a61d2686da4006a6e771b8e7fc4e80e486e985ed4ccc13b0de71b404f6e39984d9bb3ee26" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@3.1.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/minipass#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/minipass/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/isaacs/minipass.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yallist@4.0.0", + "name": "yallist", + "version": "4.0.0", + "description": "Yet Another Linked List", + "hashes": [ + { + "alg": "SHA-512", + "content": "df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/yallist#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/yallist/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/isaacs/yallist.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minizlib@2.1.0", + "name": "minizlib", + "version": "2.1.0", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "hashes": [ + { + "alg": "SHA-512", + "content": "1334d937f7e34af89f497d1296a504442377f68e93e3400c6ab3dbbf432b6ab485b4821308187b6e2f9d53c9f11851eeaacf6374801ea18a0ab90000012b0f3c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/minizlib@2.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/minizlib#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/minizlib/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/isaacs/minizlib.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp@1.0.4", + "name": "mkdirp", + "version": "1.0.4", + "description": "Recursively mkdir, like `mkdir -p`", + "hashes": [ + { + "alg": "SHA-512", + "content": "bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/mkdirp@1.0.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/node-mkdirp#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/node-mkdirp/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/isaacs/node-mkdirp.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ttag-cli@1.8.3", + "name": "ttag-cli", + "version": "1.8.3", + "description": "> :warning: This project [was previously named `c-3po-cli`](https://github.com/ttag-org/ttag/issues/105). > Some of the talks, presentations, and documentation _may_ reference it with both names.", + "hashes": [ + { + "alg": "SHA-512", + "content": "1d3cca1e1f71fe9ec40a89bbd6355d497c07df89003c549111f2196a5232449f7b3c8077839bbfa9958e93bbfd6a0ace7df3cddc4efbb2e98f16ccd9b1351825" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ttag-cli@1.8.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ttag-org/ttag-cli#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ttag-org/ttag-cli/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/ttag-org/ttag-cli.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-class-properties@7.10.4", + "group": "@babel", + "name": "plugin-proposal-class-properties", + "version": "7.10.4", + "description": "This plugin transforms static class properties as well as properties declared with the property initializer syntax", + "hashes": [ + { + "alg": "SHA-512", + "content": "be1c241113b1cdc1c636eda6cd40b438514d5dd678336de26fc69145c252b16f0164af6940c0fb401edcb25f7b3416e01993bb6721d4c8a0e7c7339a3f822b0a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-proposal-class-properties@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-create-class-features-plugin@7.10.5", + "group": "@babel", + "name": "helper-create-class-features-plugin", + "version": "7.10.5", + "description": "Compile class public and private fields, private methods and decorators to ES6", + "hashes": [ + { + "alg": "SHA-512", + "content": "d2791d7a28c1ed5959a0b4f7aff998ddb524c374fc586fe1370f85013b3febea46db4dfd2095a34d82f4553212aac3473144c49f06d59dcf3d588257f5079dd0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-create-class-features-plugin@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-decorators@7.10.5", + "group": "@babel", + "name": "plugin-proposal-decorators", + "version": "7.10.5", + "description": "Compile class and object decorators to ES5", + "hashes": [ + { + "alg": "SHA-512", + "content": "49ce53010499b8bce0634ebae263039f6e15c363fc83f561c8bc863da5a21da86180ba9e66f7067b20593ab256d2848a20ada6bd0db66b510d5c12102e1ac489" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-proposal-decorators@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-decorators@7.10.4", + "group": "@babel", + "name": "plugin-syntax-decorators", + "version": "7.10.4", + "description": "Allow parsing of decorators", + "hashes": [ + { + "alg": "SHA-512", + "content": "d8d6a80ba7c093654c76163579eae47c757e955602d6ef1bfa39912484aa00d089953c58cb5f4719d224910b62c7652d91c3ee3eef8894382b56c7999d4d376f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-syntax-decorators@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-export-default-from@7.10.4", + "group": "@babel", + "name": "plugin-proposal-export-default-from", + "version": "7.10.4", + "description": "Compile export default to ES2015", + "hashes": [ + { + "alg": "SHA-512", + "content": "1b5974d15bc367b624db24650b90fc61bbeede099e1d2deb087a1461d8eba86614b5d78e068472a67bc3679290ab1c9a8a21875a754379213303917da3322d8a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-proposal-export-default-from@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-export-default-from@7.10.4", + "group": "@babel", + "name": "plugin-syntax-export-default-from", + "version": "7.10.4", + "description": "Allow parsing of export default from", + "hashes": [ + { + "alg": "SHA-512", + "content": "efd57aafa3e0b9dcf4467b8c1a9e7189dbba67e6cf16e821f3f43d7831e89e62e9e302850190f0ca02706200b3b83bbc94503fb18c93fa6739cb6c2477b6d35c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-syntax-export-default-from@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-nullish-coalescing-operator@7.10.4", + "group": "@babel", + "name": "plugin-proposal-nullish-coalescing-operator", + "version": "7.10.4", + "description": "Remove nullish coalescing operator", + "hashes": [ + { + "alg": "SHA-512", + "content": "c2ae67d4cdd95251e5f6ca93da89354f6fcc4ede805c4d1ed4bcf85b3581afde4bb00679a835dee0a9c5b9ab98c84c8b8a886f5c531d6ec3933322d9b3dd5997" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-proposal-nullish-coalescing-operator@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-nullish-coalescing-operator@7.8.3", + "group": "@babel", + "name": "plugin-syntax-nullish-coalescing-operator", + "version": "7.8.3", + "description": "Allow parsing of the nullish-coalescing operator", + "hashes": [ + { + "alg": "SHA-512", + "content": "6927dfe333c8235bb6403ef2f85f280eccf5f5ec3820610983d4955be6eac29c2d7c595e8900cc77303f47e525583cdf9c7142c7195e153d0f308ad1dfa5cb35" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-syntax-nullish-coalescing-operator@7.8.3", + "externalReferences": [ + { + "type": "vcs", + "url": "https://github.com/babel/babel/tree/master/packages/babel-plugin-syntax-nullish-coalescing-operator" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-object-rest-spread@7.10.4", + "group": "@babel", + "name": "plugin-proposal-object-rest-spread", + "version": "7.10.4", + "description": "Compile object rest and spread to ES5", + "hashes": [ + { + "alg": "SHA-512", + "content": "eaf8784aa46e2cb6ab8e078e7f811a44e2401e3beef4697eff7e3a3db0c7f7259b2727e727f6a1de3998298b6cc04c82a1666289dbd51e31ec85de1682307d04" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-proposal-object-rest-spread@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-parameters@7.10.5", + "group": "@babel", + "name": "plugin-transform-parameters", + "version": "7.10.5", + "description": "Compile ES2015 default and rest parameters to ES5", + "hashes": [ + { + "alg": "SHA-512", + "content": "c4f1f0523e5174557c975c2e622bb94bd7ea5863360eb61cdb84ccbd4891acf566f923375dea94f417289105ff90451efa9d91070cbeca8891d70fc196aeae6f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-parameters@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-optional-chaining@7.6.0", + "group": "@babel", + "name": "plugin-proposal-optional-chaining", + "version": "7.6.0", + "description": "Transform optional chaining operators into a series of nil checks", + "hashes": [ + { + "alg": "SHA-512", + "content": "923e20919eaa520824a6b46add487928ff179c4d4c7483b427b3217435fcfab01b07a749d94ade9ec1884bed0d3d901a689d55af43cdea82d4817314d6e31c4a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-proposal-optional-chaining@7.6.0", + "externalReferences": [ + { + "type": "vcs", + "url": "https://github.com/babel/babel/tree/master/packages/babel-plugin-proposal-optional-chaining" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-optional-chaining@7.8.3", + "group": "@babel", + "name": "plugin-syntax-optional-chaining", + "version": "7.8.3", + "description": "Allow parsing of optional properties", + "hashes": [ + { + "alg": "SHA-512", + "content": "2a82bd12b1f53019423f15745403645d6dbf770e2f95b183ac5833f1b994b0119890545c6d1c0c87a70826e6dd3eb931470b8676d0a4d2fff03d329b42006392" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-syntax-optional-chaining@7.8.3", + "externalReferences": [ + { + "type": "vcs", + "url": "https://github.com/babel/babel/tree/master/packages/babel-plugin-syntax-optional-chaining" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-dynamic-import@7.8.3", + "group": "@babel", + "name": "plugin-syntax-dynamic-import", + "version": "7.8.3", + "description": "Allow parsing of import()", + "hashes": [ + { + "alg": "SHA-512", + "content": "e607466c5a27f8fb33633aacf374b71399a98bbff2ffc33d782f743114d97ddb903985bbea283a48e48f35ee35206e4ba0fdc51819f6374463543490892f7891" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-syntax-dynamic-import@7.8.3", + "externalReferences": [ + { + "type": "vcs", + "url": "https://github.com/babel/babel/tree/master/packages/babel-plugin-syntax-dynamic-import" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/preset-env@7.10.4", + "group": "@babel", + "name": "preset-env", + "version": "7.10.4", + "description": "A Babel preset for each environment.", + "hashes": [ + { + "alg": "SHA-512", + "content": "b5c9ae43abeea5f3193eb2eb737f1dd2c1763a32d3dff6d9d1daf2e4772134241bae8928422e2b797a9c96f924013e5bfa059cdb799e556a6f7b93ffefec3fcf" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/preset-env@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://babeljs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/compat-data@7.10.5", + "group": "@babel", + "name": "compat-data", + "version": "7.10.5", + "hashes": [ + { + "alg": "SHA-512", + "content": "98f56858dcc8a582476d68ded227fb0a4dfa6e96ed4ef2313a2f7ee9648af708c611779aac0aa5c01a1342f563b00636548c2072cf15f78d20798de893344213" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/compat-data@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/browserslist@4.13.0", + "name": "browserslist", + "version": "4.13.0", + "description": "Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-env-preset", + "hashes": [ + { + "alg": "SHA-512", + "content": "30835ab49e5936b2e743a6e51af78f77f40ecfd5edbbe35efb1dbd8904821df914e41ba029527064a9ff8a22fc51ba48a5adc986f88a8f3f97c4ca349b671a15" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/browserslist@4.13.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/browserslist/browserslist#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/browserslist/browserslist/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/browserslist/browserslist.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/caniuse-lite@1.0.30001105", + "name": "caniuse-lite", + "version": "1.0.30001105", + "description": "A smaller version of caniuse-db, with only the essentials!", + "hashes": [ + { + "alg": "SHA-512", + "content": "26ea4e7baf9d18cafb136d2c8991c8650c18aab965c68b4086269e8fdeb2eb1d346ffe3cacfb78da8f92cce4823dbae9b035af4636b8d07c2b8f4834aba2d926" + } + ], + "licenses": [ + { + "license": { + "id": "CC-BY-4.0" + } + } + ], + "purl": "pkg:npm/caniuse-lite@1.0.30001105", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ben-eb/caniuse-lite#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ben-eb/caniuse-lite/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/ben-eb/caniuse-lite.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/electron-to-chromium@1.3.502", + "name": "electron-to-chromium", + "version": "1.3.502", + "description": "Provides a list of electron-to-chromium version mappings", + "hashes": [ + { + "alg": "SHA-512", + "content": "4c879739a1c0bdf3fb15e98652d009c52b6639cd5814658536a75ecbfe0d938d4bf5bd673260d50c634c21685926f39f2718b1e82bf914612704afb2bf0dd44e" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/electron-to-chromium@1.3.502", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/kilian/electron-to-chromium#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/kilian/electron-to-chromium/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/kilian/electron-to-chromium.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/escalade@3.0.2", + "name": "escalade", + "version": "3.0.2", + "description": "A tiny (183B to 210B) and fast utility to ascend parent directories", + "hashes": [ + { + "alg": "SHA-512", + "content": "80f600537ee16025215b97ae3de47e63be05ec12fe201b15f778f972f1ab892683d5a1ba306b2ab15d726a645dad6adbda3dda899bdbd17f9404e5a9c77256b5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/escalade@3.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/lukeed/escalade#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lukeed/escalade/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lukeed/escalade.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-releases@1.1.59", + "name": "node-releases", + "version": "1.1.59", + "description": "Node.js releases data", + "hashes": [ + { + "alg": "SHA-512", + "content": "1f726b7547336dd8b0c4de45b893f20879c61c816a434c16c68fbd8f59005c0cea34c007968fb823fb18631a722b48ab43bdc781d8b2cc3df6a2a403714d8eb3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/node-releases@1.1.59", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/chicoxyzzy/node-releases#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/chicoxyzzy/node-releases/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/chicoxyzzy/node-releases.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-compilation-targets@7.10.4", + "group": "@babel", + "name": "helper-compilation-targets", + "version": "7.10.4", + "description": "Engine compat data used in @babel/preset-env", + "hashes": [ + { + "alg": "SHA-512", + "content": "6b7ad8865b06574507343bebb4e5c183cfcea5f57438a4e4c4a3f3229952d73a71ec2ca00dc596c5c93165e0ddde0ccfcc2e24513d00e275450cad3018c87831" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-compilation-targets@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/levenary@1.1.1", + "name": "levenary", + "version": "1.1.1", + "description": "[![npm-version](https://img.shields.io/npm/v/levenary.svg)](https://www.npmjs.com/package/levenary) [![github-actions](https://github.com/tanhauhau/levenary/workflows/CI/badge.svg)](https://github.com/tanhauhau/levenary/actions)", + "hashes": [ + { + "alg": "SHA-512", + "content": "9a401d388b7bf450fa8abaa3612b38add6e7953e6f4689cc12f0553d56f75e67af7d2f248115f07deb347613dd12dcd3583ff578d13f066fc6d6246de8372741" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/levenary@1.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/tanhauhau/levenary#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/tanhauhau/levenary/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/tanhauhau/levenary.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-async-generator-functions@7.10.5", + "group": "@babel", + "name": "plugin-proposal-async-generator-functions", + "version": "7.10.5", + "description": "Turn async generator functions into ES2015 generators", + "hashes": [ + { + "alg": "SHA-512", + "content": "70d30255ecd06eb446bd72709bd7eeff5b098fd6c77460202a875974ba8e408a5fa07deb6aa9913c1335efe961ec2ce188a45106b1ad64bf56723c52a066144a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-proposal-async-generator-functions@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-remap-async-to-generator@7.10.4", + "group": "@babel", + "name": "helper-remap-async-to-generator", + "version": "7.10.4", + "description": "Helper function to remap async functions to generators", + "hashes": [ + { + "alg": "SHA-512", + "content": "f3a2ecafa34dc37a93365f9305c175a1164c695cc9b5b593c93928f8240bfedbcdbdc19810529b2d70cfc6d5b41ca93731c34e9382b3639e62b465820062b9b6" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-remap-async-to-generator@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-annotate-as-pure@7.10.4", + "group": "@babel", + "name": "helper-annotate-as-pure", + "version": "7.10.4", + "description": "Helper function to annotate paths and nodes with #__PURE__ comment", + "hashes": [ + { + "alg": "SHA-512", + "content": "5d096a2903f8bd7141ec137c7c411eaeb998bc7a777cafeb064445cfd8da25bccad01d4349f7a3f4a73b67313c67f3a721dd63a4974d019dc11508d61baf2b70" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-annotate-as-pure@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-wrap-function@7.10.4", + "group": "@babel", + "name": "helper-wrap-function", + "version": "7.10.4", + "description": "Helper to wrap functions inside a function call.", + "hashes": [ + { + "alg": "SHA-512", + "content": "ea9cb8e56bc417432188baddc6d4632a3b9fc0b2f5fe86f6a8326083926035da2304065200a9c08e4c8e08dba0ea7f8e065e155bbe978ef81215375a31c5b452" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-wrap-function@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-async-generators@7.8.4", + "group": "@babel", + "name": "plugin-syntax-async-generators", + "version": "7.8.4", + "description": "Allow parsing of async generator functions", + "hashes": [ + { + "alg": "SHA-512", + "content": "b727266719067d96b184c45b5e53d7b95169756957a62af65b800c85226044ace4fde0e52173a16f62c75a82e90c5ed3107ca5579ccd872917e8a0201c999337" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-syntax-async-generators@7.8.4", + "externalReferences": [ + { + "type": "vcs", + "url": "https://github.com/babel/babel/tree/master/packages/babel-plugin-syntax-async-generators" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-dynamic-import@7.10.4", + "group": "@babel", + "name": "plugin-proposal-dynamic-import", + "version": "7.10.4", + "description": "Transform import() expressions", + "hashes": [ + { + "alg": "SHA-512", + "content": "ba9ea8203d4b7a274e38048d5e0bff0856e006a4ee289d1c263cfa027e6d583f8d541365a7754d481c6fd99754ed2625dcdc490bb6a00100c0a59bac57ab85c1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-proposal-dynamic-import@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-json-strings@7.10.4", + "group": "@babel", + "name": "plugin-proposal-json-strings", + "version": "7.10.4", + "description": "Escape U+2028 LINE SEPARATOR and U+2029 PARAGRAPH SEPARATOR in JS strings", + "hashes": [ + { + "alg": "SHA-512", + "content": "7c22fb405d09a3cdeecb52b43f6617adf5f5d6d8f7964a4dee5e1d32ff58f55928c24864403c051c577c222c322b93198c4f14a5b82892482d711787f3c01b6b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-proposal-json-strings@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-json-strings@7.8.3", + "group": "@babel", + "name": "plugin-syntax-json-strings", + "version": "7.8.3", + "description": "Allow parsing of the U+2028 LINE SEPARATOR and U+2029 PARAGRAPH SEPARATOR in JS strings", + "hashes": [ + { + "alg": "SHA-512", + "content": "958ea4746a561ef8e87b6be4e16ac06a912e051ebd10cc5997e46819186b14635854af2638f016f157db4ff660ac56d794336289ac509c0b6054267a8efdf410" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-syntax-json-strings@7.8.3", + "externalReferences": [ + { + "type": "vcs", + "url": "https://github.com/babel/babel/tree/master/packages/babel-plugin-syntax-json-strings" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-numeric-separator@7.10.4", + "group": "@babel", + "name": "plugin-proposal-numeric-separator", + "version": "7.10.4", + "description": "Remove numeric separators from Decimal, Binary, Hex and Octal literals", + "hashes": [ + { + "alg": "SHA-512", + "content": "ef7fc6ed0a11a1e3642d9171b28082be58387b313878cfb9ecf9ceaa068f3a8cdde66c9f8fba749ae0f5991549bdb5166cecc3faadcda366d66da2b2f8327c0c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-proposal-numeric-separator@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-numeric-separator@7.10.4", + "group": "@babel", + "name": "plugin-syntax-numeric-separator", + "version": "7.10.4", + "description": "Allow parsing of Decimal, Binary, Hex and Octal literals that contain a Numeric Literal Separator", + "hashes": [ + { + "alg": "SHA-512", + "content": "f47e9875f91c2bfb8e9d8fcaeff680db1a73680824427dfbcb35943112bb39a3cea8ea464b5fa7d07e61c53f40530f44b128cf5bc495c8c270611b56b375f7ba" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-syntax-numeric-separator@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-optional-catch-binding@7.10.4", + "group": "@babel", + "name": "plugin-proposal-optional-catch-binding", + "version": "7.10.4", + "description": "Compile optional catch bindings", + "hashes": [ + { + "alg": "SHA-512", + "content": "2df953ea73e1f862b6327162283c8b8aa4aa5479109d57fb85da00bf24e79ca8fdc41ddda1c191b1d3eec69eaaaaa5b5f627cadf181cf54e7f170ad2682357e6" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-proposal-optional-catch-binding@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-optional-catch-binding@7.8.3", + "group": "@babel", + "name": "plugin-syntax-optional-catch-binding", + "version": "7.8.3", + "description": "Allow parsing of optional catch bindings", + "hashes": [ + { + "alg": "SHA-512", + "content": "e953c3d0f7359694eac3468aa1e45332207e916840a13db83c0fa4b16481ac5b65e52211569665c0ddcd34f4237a103613ff75155dd18cb5a855382559c495dd" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-syntax-optional-catch-binding@7.8.3", + "externalReferences": [ + { + "type": "vcs", + "url": "https://github.com/babel/babel/tree/master/packages/babel-plugin-syntax-optional-catch-binding" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-optional-chaining@7.10.4", + "group": "@babel", + "name": "plugin-proposal-optional-chaining", + "version": "7.10.4", + "description": "Transform optional chaining operators into a series of nil checks", + "hashes": [ + { + "alg": "SHA-512", + "content": "64885020479abd3828bb231275945aa7854f3c7a89277344b3672e1ece69d1eac7fa2cfa921074a9f814f20ed4b89906f3cf9f04ccb6dd9894fa7b87bde90979" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-proposal-optional-chaining@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-private-methods@7.10.4", + "group": "@babel", + "name": "plugin-proposal-private-methods", + "version": "7.10.4", + "description": "This plugin transforms private class methods", + "hashes": [ + { + "alg": "SHA-512", + "content": "c21e462657ae23c9377a68138392a424aea41cdb0612bd2e0530c1b9050127072493dc6cd5ecfbf62a21784555c4c2f23ec701d0b7e46d51ec950a88cd657a07" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-proposal-private-methods@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-unicode-property-regex@7.10.4", + "group": "@babel", + "name": "plugin-proposal-unicode-property-regex", + "version": "7.10.4", + "description": "Compile Unicode property escapes in Unicode regular expressions to ES5.", + "hashes": [ + { + "alg": "SHA-512", + "content": "1feddf3a03e711714bf73198b4a41ee080ce3ca62565d17592a14341145bf0f2b807c69fd6f0062b4e2d179890000b2e8be98734141202d776fe77440def70b8" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-proposal-unicode-property-regex@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://babeljs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-create-regexp-features-plugin@7.10.4", + "group": "@babel", + "name": "helper-create-regexp-features-plugin", + "version": "7.10.4", + "description": "Compile ESNext Regular Expressions to ES5", + "hashes": [ + { + "alg": "SHA-512", + "content": "dbf86ee7c2043ca7a82c5e390c1c31dd716ab1b0979a47406b2e2ca55af6c748d8811c6b48da7e78fc2f4accbd83a61268d0dc2884153d79353aff12d9e764da" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-create-regexp-features-plugin@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-regex@7.10.5", + "group": "@babel", + "name": "helper-regex", + "version": "7.10.5", + "description": "Helper function to check for literal RegEx", + "hashes": [ + { + "alg": "SHA-512", + "content": "ebc91d500cc3ae58ea06b8a8ec36001200a8247c69a493844473a03ab0cded68ceccfd194352ec48345771e9b355968bbe3689b0910449beaab7ece736e10d0e" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-regex@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/regexpu-core@4.7.0", + "name": "regexpu-core", + "version": "4.7.0", + "description": "regexpu’s core functionality (i.e. `rewritePattern(pattern, flag)`), capable of translating ES6 Unicode regular expressions to ES5.", + "hashes": [ + { + "alg": "SHA-512", + "content": "4d0e0a5d19c89fab73ead8e7ad71240ffb2c87280a1ff8f92b32bce97f0c91e1f267caacb7f2d9f3d8f75f8ffc1c421f1c03531483ff01b5da91e46158897961" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/regexpu-core@4.7.0", + "externalReferences": [ + { + "type": "website", + "url": "https://mths.be/regexpu" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mathiasbynens/regexpu-core/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/mathiasbynens/regexpu-core.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/regenerate@1.4.1", + "name": "regenerate", + "version": "1.4.1", + "description": "Generate JavaScript-compatible regular expressions based on a given set of Unicode symbols or code points.", + "hashes": [ + { + "alg": "SHA-512", + "content": "8f6f82f3e36d5d0804296938f4c30fe4ffeed868676a14ed5644481ebe51e6555195b2af990fa84be03968b296a7699ae55913f2c87abfebf885b1f460747ae8" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/regenerate@1.4.1", + "externalReferences": [ + { + "type": "website", + "url": "https://mths.be/regenerate" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mathiasbynens/regenerate/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/mathiasbynens/regenerate.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/regenerate-unicode-properties@8.2.0", + "name": "regenerate-unicode-properties", + "version": "8.2.0", + "description": "Regenerate sets for Unicode properties and values.", + "hashes": [ + { + "alg": "SHA-512", + "content": "17d0e3635bca2e8fed3de3c3c9cb87ddd9fd1f53933c89150fd2b3e0b383bbe1760bbe66823009ef1fe0c32e9971235100092136525238745ef24de9f8af5684" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/regenerate-unicode-properties@8.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/mathiasbynens/regenerate-unicode-properties" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mathiasbynens/regenerate-unicode-properties/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/mathiasbynens/regenerate-unicode-properties.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/regjsgen@0.5.2", + "name": "regjsgen", + "version": "0.5.2", + "description": "Generate regular expressions from regjsparser’s AST.", + "hashes": [ + { + "alg": "SHA-512", + "content": "385153dcc7eb1fdd31216f0e392c94ae4e901c3e44f49393786a1d8897814b727a230960cc930d13fd5b664956cf9a1383ef5d08cc847ad725bc255738fa0ddc" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/regjsgen@0.5.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/bnjmnt4n/regjsgen" + }, + { + "type": "issue-tracker", + "url": "https://github.com/bnjmnt4n/regjsgen/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/bnjmnt4n/regjsgen.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/regjsparser@0.6.4", + "name": "regjsparser", + "version": "0.6.4", + "description": "Parsing the JavaScript's RegExp in JavaScript.", + "hashes": [ + { + "alg": "SHA-512", + "content": "eb83bceff74f0e07e4f3f450a82e20919a06cb25852045134e1f34094e825ae2b9be4086c9e908c7ea0a704218b4ffd103149096d0991c236efe675dedfaa527" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/regjsparser@0.6.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jviereck/regjsparser" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jviereck/regjsparser/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/jviereck/regjsparser.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsesc@0.5.0", + "name": "jsesc", + "version": "0.5.0", + "description": "A JavaScript library for escaping JavaScript strings while generating the shortest possible valid output.", + "hashes": [ + { + "alg": "SHA-1", + "content": "e7dee66e35d6fc16f710fe91d5cf69f70f08911d" + } + ], + "purl": "pkg:npm/jsesc@0.5.0", + "externalReferences": [ + { + "type": "website", + "url": "http://mths.be/jsesc" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mathiasbynens/jsesc/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/mathiasbynens/jsesc.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unicode-match-property-ecmascript@1.0.4", + "name": "unicode-match-property-ecmascript", + "version": "1.0.4", + "description": "Match a Unicode property or property alias to its canonical property name per the algorithm used for RegExp Unicode property escapes in ECMAScript.", + "hashes": [ + { + "alg": "SHA-512", + "content": "2f8428875e6f4df9edb27e0fd73aa71ee946d0b75782348ed37e5f12976da7a6315e1313e7543abe0339958746ff95f73234be93f63d5f0e1214263d224474ae" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/unicode-match-property-ecmascript@1.0.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/mathiasbynens/unicode-match-property-ecmascript" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mathiasbynens/unicode-match-property-ecmascript/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/mathiasbynens/unicode-match-property-ecmascript.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unicode-canonical-property-names-ecmascript@1.0.4", + "name": "unicode-canonical-property-names-ecmascript", + "version": "1.0.4", + "description": "The set of canonical Unicode property names supported in ECMAScript RegExp property escapes.", + "hashes": [ + { + "alg": "SHA-512", + "content": "8c3acd9d7587778a07893667c7f646ee0b544d5a7e8027134caafc2f41e3970a6144e116dfe1e29be229bc2fb17091057a06a988c67265ed360b2b8e9d199b9d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/unicode-canonical-property-names-ecmascript@1.0.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/mathiasbynens/unicode-canonical-property-names-ecmascript" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mathiasbynens/unicode-canonical-property-names-ecmascript/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/mathiasbynens/unicode-canonical-property-names-ecmascript.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unicode-property-aliases-ecmascript@1.1.0", + "name": "unicode-property-aliases-ecmascript", + "version": "1.1.0", + "description": "Unicode property alias mappings in JavaScript format for property names that are supported in ECMAScript RegExp property escapes.", + "hashes": [ + { + "alg": "SHA-512", + "content": "3ea4a83e1fe959eb50da98688f944b89aa88938902370a15dc223e2df1a658b288deb137925d61e7d5e95f6063803ae66f10fd011b50a1b3c65354a0b8262e42" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/unicode-property-aliases-ecmascript@1.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/mathiasbynens/unicode-property-aliases-ecmascript" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mathiasbynens/unicode-property-aliases-ecmascript/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/mathiasbynens/unicode-property-aliases-ecmascript.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unicode-match-property-value-ecmascript@1.2.0", + "name": "unicode-match-property-value-ecmascript", + "version": "1.2.0", + "description": "Match a Unicode property or property alias to its canonical property name per the algorithm used for RegExp Unicode property escapes in ECMAScript.", + "hashes": [ + { + "alg": "SHA-512", + "content": "c23b901c6415a1f99226fd6e54848a2c4e733b6acd1b333f282619721fd042f7b3ec2d61521048b99ef4d5f617131bae7c914c3e1bf64b22fc0b2a087cc2db21" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/unicode-match-property-value-ecmascript@1.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/mathiasbynens/unicode-match-property-value-ecmascript" + }, + { + "type": "issue-tracker", + "url": "https://github.com/mathiasbynens/unicode-match-property-value-ecmascript/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/mathiasbynens/unicode-match-property-value-ecmascript.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-class-properties@7.10.4", + "group": "@babel", + "name": "plugin-syntax-class-properties", + "version": "7.10.4", + "description": "Allow parsing of class properties", + "hashes": [ + { + "alg": "SHA-512", + "content": "18248117b89495eeab36e81f511c0d982186dd9ff6fa8a7100c2ecd67343e1b8441b93eec53220803068798612ba30252edb2ea733876094203d2de98afc1720" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-syntax-class-properties@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-top-level-await@7.10.4", + "group": "@babel", + "name": "plugin-syntax-top-level-await", + "version": "7.10.4", + "description": "Allow parsing of top-level await in modules", + "hashes": [ + { + "alg": "SHA-512", + "content": "9e2d5bae0e255c4996c9a7caaf471c1569091b409e32de16575a327815ba10539b178a0e1dc95b923e5c011c403d0c80436513ba9949c8ae277e45c830c16fb1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-syntax-top-level-await@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-arrow-functions@7.10.4", + "group": "@babel", + "name": "plugin-transform-arrow-functions", + "version": "7.10.4", + "description": "Compile ES2015 arrow functions to ES5", + "hashes": [ + { + "alg": "SHA-512", + "content": "f49fe80f58d5d190817209e815616ad6f25de26b2829bfd30a918d172c8bb74cc005d72f80adda622919f078f3075e1cdba6dcec4dd0d72ba0a701b2d9a4cf34" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-arrow-functions@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-async-to-generator@7.10.4", + "group": "@babel", + "name": "plugin-transform-async-to-generator", + "version": "7.10.4", + "description": "Turn async functions into ES2015 generators", + "hashes": [ + { + "alg": "SHA-512", + "content": "17a9d110e6a7ec9e545d32ec0ec646dc35e66525687ebdad18dc1f76b5709035877d07246d05e75d23df0fb88ef9cff61c6ab2730c8b493dc39d9d7a9fe70125" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-async-to-generator@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-block-scoped-functions@7.10.4", + "group": "@babel", + "name": "plugin-transform-block-scoped-functions", + "version": "7.10.4", + "description": "Babel plugin to ensure function declarations at the block level are block scoped", + "hashes": [ + { + "alg": "SHA-512", + "content": "5b35c36ab4176187e3695d6ccc9bcddc00fbad9819cc2d49b63259f1d30753288af26c4f45a8729e9d78cf33635375643ea3ec3b7f02cf18963b573d01167c24" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-block-scoped-functions@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-block-scoping@7.10.5", + "group": "@babel", + "name": "plugin-transform-block-scoping", + "version": "7.10.5", + "description": "Compile ES2015 block scoping (const and let) to ES5", + "hashes": [ + { + "alg": "SHA-512", + "content": "e98730de18e942d8b4aacb10700e803121431de349fbe47a748327a51a948c57810539930cf6bcce017dd0e55f4ef028d75997653955515898d60f1f7eb5112e" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-block-scoping@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-classes@7.10.4", + "group": "@babel", + "name": "plugin-transform-classes", + "version": "7.10.4", + "description": "Compile ES2015 classes to ES5", + "hashes": [ + { + "alg": "SHA-512", + "content": "da867da8b8edd7ad5d9f5644d0cb3aeb10677101f8227f12ab0d585a005466e1952494b97343856572fa74fd8c447ae453f78a85683c0b3149851425e74ad0c4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-classes@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-define-map@7.10.5", + "group": "@babel", + "name": "helper-define-map", + "version": "7.10.5", + "description": "Helper function to define a map", + "hashes": [ + { + "alg": "SHA-512", + "content": "7ccc38920141ef6d1a4055d255a5ebefda638dc5b9a6e4c2335ebeac4089fe99464becc1c9e944f25f670a95751a26f14e7155994b981bd53cc187d01ddcce11" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-define-map@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-computed-properties@7.10.4", + "group": "@babel", + "name": "plugin-transform-computed-properties", + "version": "7.10.4", + "description": "Compile ES2015 computed properties to ES5", + "hashes": [ + { + "alg": "SHA-512", + "content": "245c150d770ffe133f4dbcb31aade5fd7586badee9e3a67742fa853174df93aff4f66ef164725437dc477ecbfbbeaa83e189df239b9e61d489b57aaa04bca307" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-computed-properties@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-destructuring@7.10.4", + "group": "@babel", + "name": "plugin-transform-destructuring", + "version": "7.10.4", + "description": "Compile ES2015 destructuring to ES5", + "hashes": [ + { + "alg": "SHA-512", + "content": "f9699fbf27ecc85eb4de23daebcdb99aae90adbeee2e34ceb1add7385ce561c6031d24b8426a4e58e2f434d058e6a31bbeb71fdedab40b0fafe25c6cc0e06980" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-destructuring@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-dotall-regex@7.10.4", + "group": "@babel", + "name": "plugin-transform-dotall-regex", + "version": "7.10.4", + "description": "Compile regular expressions using the `s` (`dotAll`) flag to ES5.", + "hashes": [ + { + "alg": "SHA-512", + "content": "644015bd44c232530501b012612550a3121b1e6d8e906d8cb1e5ba6d5d898c8ca03a3755bfcb6ec6b093ce3d7e4729e1ece0dbf068af532eddcc45f3121b8f68" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-dotall-regex@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://babeljs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-duplicate-keys@7.10.4", + "group": "@babel", + "name": "plugin-transform-duplicate-keys", + "version": "7.10.4", + "description": "Compile objects with duplicate keys to valid strict ES5", + "hashes": [ + { + "alg": "SHA-512", + "content": "18bd3f7c99e680c7251e20534d65cd9588d8b00eeb0ebb6c6b31c6ea68256864938742acad6d38aa697e05bcfd14bd0b709211c0158be59aa5347293914df100" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-duplicate-keys@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-exponentiation-operator@7.10.4", + "group": "@babel", + "name": "plugin-transform-exponentiation-operator", + "version": "7.10.4", + "description": "Compile exponentiation operator to ES5", + "hashes": [ + { + "alg": "SHA-512", + "content": "4b91e02d582405c45dc900076ca8feecacae5b1f02eade68113994bb0cf5a6ddd64d6261b14574588217b95bdf5ccc65fd04321ca95208d36d6886a61bc7f2b3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-exponentiation-operator@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-builder-binary-assignment-operator-visitor@7.10.4", + "group": "@babel", + "name": "helper-builder-binary-assignment-operator-visitor", + "version": "7.10.4", + "description": "Helper function to build binary assignment operator visitors", + "hashes": [ + { + "alg": "SHA-512", + "content": "2f4cc6945ac65992b83db4fc02ccd27cb4cce6c0d4d7e033fc49fd56b753f3f2e612226de335edf89bdef430809d071ba8384223edbdcbf2fdde6ac3cdd74272" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-builder-binary-assignment-operator-visitor@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-explode-assignable-expression@7.10.4", + "group": "@babel", + "name": "helper-explode-assignable-expression", + "version": "7.10.4", + "description": "Helper function to explode an assignable expression", + "hashes": [ + { + "alg": "SHA-512", + "content": "e0aef547245034f46b47ce6caf9418e17dd5c06e30b55a17641f7e2f7af51a9dfc0e110bc870ada2fab27518bb7353af6f5ede446890fc50f9b3c25d534532e4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-explode-assignable-expression@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-for-of@7.10.4", + "group": "@babel", + "name": "plugin-transform-for-of", + "version": "7.10.4", + "description": "Compile ES2015 for...of to ES5", + "hashes": [ + { + "alg": "SHA-512", + "content": "22d7507c0ceef40944aa6bac03feb94ea27bf5e45c8069a93cf16f0671882d7647f7be46d0b3633f5ca31ef1a07ee0b1aab3cfb9e5ce3def85b2fc66c4a8871d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-for-of@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-function-name@7.10.4", + "group": "@babel", + "name": "plugin-transform-function-name", + "version": "7.10.4", + "description": "Apply ES2015 function.name semantics to all functions", + "hashes": [ + { + "alg": "SHA-512", + "content": "39c0c2ab6cb9f84d1d543e4c6a04f95fec9345b72f1630c8d99540a2db461fab73aa3c7f2caa609147a9bb7869feee2d641cf1c69346c0bb00bc606f436989ce" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-function-name@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-literals@7.10.4", + "group": "@babel", + "name": "plugin-transform-literals", + "version": "7.10.4", + "description": "Compile ES2015 unicode string and number literals to ES5", + "hashes": [ + { + "alg": "SHA-512", + "content": "5ddfdd1524c456e5169f266232eefafc89d9c4b4d88a5392af55251d5fa9d75e59fcb7b6162d4a5e4254633d1be360df9dda2cb5894fb9bde6f194d094c6a2a9" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-literals@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-member-expression-literals@7.10.4", + "group": "@babel", + "name": "plugin-transform-member-expression-literals", + "version": "7.10.4", + "description": "Ensure that reserved words are quoted in property accesses", + "hashes": [ + { + "alg": "SHA-512", + "content": "d1b14ebcfc80a13061b5c24bafd55cc19a8a9928c59a5d62571bcf2f445ea26194e77097e771ec3388764b372435d910707a31d5ba40ab3c41235634f4b9414b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-member-expression-literals@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-modules-amd@7.10.5", + "group": "@babel", + "name": "plugin-transform-modules-amd", + "version": "7.10.5", + "description": "This plugin transforms ES2015 modules to AMD", + "hashes": [ + { + "alg": "SHA-512", + "content": "7a59b9babb8d8a8ec24cb148b550bfac8cca2df435efe7d7ec4573e56d13320207168d736343b3cf1fa583084be2997397c3b3567e906acc790de105ca836247" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-modules-amd@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/babel-plugin-dynamic-import-node@2.3.3", + "name": "babel-plugin-dynamic-import-node", + "version": "2.3.3", + "description": "Babel plugin to transpile import() to a deferred require(), for node", + "hashes": [ + { + "alg": "SHA-512", + "content": "8d9548facf5983722a03f91d8b48ba5030b26d423769204b9e096161b4928ca955ef217517fe4b5aff0c6a4426bd8a676c90d2e9f7012f62b31d2c4d08cb5649" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/babel-plugin-dynamic-import-node@2.3.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/airbnb/babel-plugin-dynamic-import-node#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/airbnb/babel-plugin-dynamic-import-node/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/airbnb/babel-plugin-dynamic-import-node.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-modules-commonjs@7.10.4", + "group": "@babel", + "name": "plugin-transform-modules-commonjs", + "version": "7.10.4", + "description": "This plugin transforms ES2015 modules to CommonJS", + "hashes": [ + { + "alg": "SHA-512", + "content": "5e3ed4ab9a3cd070cb956eb8ad57c30616a8e8e5fcf4729499bfbdbd661a2d70593a66b8800eadc38362d4ee6a543a195945747f1318034698cce6b0cf497ed7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-modules-commonjs@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-modules-systemjs@7.10.5", + "group": "@babel", + "name": "plugin-transform-modules-systemjs", + "version": "7.10.5", + "description": "This plugin transforms ES2015 modules to SystemJS", + "hashes": [ + { + "alg": "SHA-512", + "content": "7f844b3bf38bd78fc53f50046dcb16333a5b533eadb2c45a790835d511f504ffd79cfa51a15c2079856230569c9e46b0e24e308d14a39f78a9d54c3d4da5ee33" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-modules-systemjs@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-hoist-variables@7.10.4", + "group": "@babel", + "name": "helper-hoist-variables", + "version": "7.10.4", + "description": "Helper function to hoist variables", + "hashes": [ + { + "alg": "SHA-512", + "content": "c258eba05e4f8029368ee17af646a71d5b3abeb2f020f369e832c3f8bae5de1a10dcfa4f3e291a0d134503ed2df3534ea0cb760cbe965bf99d53c93893a673b8" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-hoist-variables@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-modules-umd@7.10.4", + "group": "@babel", + "name": "plugin-transform-modules-umd", + "version": "7.10.4", + "description": "This plugin transforms ES2015 modules to UMD", + "hashes": [ + { + "alg": "SHA-512", + "content": "9a8856e6adee004b7c4f8e584fb41ce70b3a99680901a2fff017d60fd0e8768d40dd1296962f304d2f96890fe49c5fad5e53e2ad6ff5fccab3cc67c213128408" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-modules-umd@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-named-capturing-groups-regex@7.10.4", + "group": "@babel", + "name": "plugin-transform-named-capturing-groups-regex", + "version": "7.10.4", + "description": "Compile regular expressions using named groups to ES5.", + "hashes": [ + { + "alg": "SHA-512", + "content": "57a2ee3a70f7d644e4c503e12a2558cd80bf26076ae778ab242ff10529aa70d72a14657e3c447897aad4e521f6565edb1fd98b0c771cd3e97d1d439ee1134628" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-named-capturing-groups-regex@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://babeljs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-new-target@7.10.4", + "group": "@babel", + "name": "plugin-transform-new-target", + "version": "7.10.4", + "description": "Transforms new.target meta property", + "hashes": [ + { + "alg": "SHA-512", + "content": "617c16503007fc9e9d95fc2a956b33b48d8fbb3d4db5402e6d784e3cb43982347faa643953de836381503bc02ddf724de173c186b8c1f08e1e3262d13a38cb8f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-new-target@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-object-super@7.10.4", + "group": "@babel", + "name": "plugin-transform-object-super", + "version": "7.10.4", + "description": "Compile ES2015 object super to ES5", + "hashes": [ + { + "alg": "SHA-512", + "content": "e624f0d0991d45d26fafbb18d2f1ea4e99ebb94a5379adf62479aafdab485aab2736eb2c6d1ce3103c967a9f14373b6dd41e48bac05883c22b6f46cb6e210109" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-object-super@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-property-literals@7.10.4", + "group": "@babel", + "name": "plugin-transform-property-literals", + "version": "7.10.4", + "description": "Ensure that reserved words are quoted in object property keys", + "hashes": [ + { + "alg": "SHA-512", + "content": "a1fb0070a894c50f13638b12720b06791daf248b1faf3aaf15bf46bc9e547570f397e3326026818ff146cd7bafeea13468972358c20b9f2d5ea6a7a59c5973f2" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-property-literals@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-regenerator@7.10.4", + "group": "@babel", + "name": "plugin-transform-regenerator", + "version": "7.10.4", + "description": "Explode async and generator functions into a state machine.", + "hashes": [ + { + "alg": "SHA-512", + "content": "ded8401f0b68af7f40ec2d385ee71b320d7b45c677429a5fc6bdb6c18cd935c54890f1dfa4cf49d123bccee095e9265adbae64c41252adf293bc3098a811571b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-regenerator@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://babeljs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/regenerator-transform@0.14.5", + "name": "regenerator-transform", + "version": "0.14.5", + "description": "Explode async and generator functions into a state machine.", + "hashes": [ + { + "alg": "SHA-512", + "content": "78e7fabe46b920ed79d497ecc3634ef56a465f9f16eb05a679f2b7235cc41abd25383d2ef2bc0f68da902f5691c546b12de28edc0acd87755883529b683f8517" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/regenerator-transform@0.14.5", + "externalReferences": [ + { + "type": "vcs", + "url": "https://github.com/facebook/regenerator/tree/master/packages/regenerator-transform" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/runtime@7.10.5", + "group": "@babel", + "name": "runtime", + "version": "7.10.5", + "description": "babel's modular runtime helpers", + "hashes": [ + { + "alg": "SHA-512", + "content": "a2d75d5ca85d367eddd29b681511ed30b6bc2ea0f12d8c138c1e27620335cb2e4dea053f3147fcceacb22e5b421f7c80562b41ce6c0ae2eb3e0c3d25fcc6ae02" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/runtime@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://babeljs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-reserved-words@7.10.4", + "group": "@babel", + "name": "plugin-transform-reserved-words", + "version": "7.10.4", + "description": "Ensure that no reserved words are used.", + "hashes": [ + { + "alg": "SHA-512", + "content": "846b30d4ee917b0d5f9056c322664812a03c1a889dc130229700b25aa2c133d7fe7bfbbfb10310bbbb97e9dca891f39ac91bae55f28e5b83bb1ef68158cf8995" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-reserved-words@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-shorthand-properties@7.10.4", + "group": "@babel", + "name": "plugin-transform-shorthand-properties", + "version": "7.10.4", + "description": "Compile ES2015 shorthand properties to ES5", + "hashes": [ + { + "alg": "SHA-512", + "content": "002d8afedee8d3b29e4c8c4ca079dec97f74bf7ce49b97231c912892b3c4006132dd40a9f2c2ca7e77ce206759d7de1fc8de307d7ff3654593f6dac9674a9cf9" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-shorthand-properties@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-spread@7.10.4", + "group": "@babel", + "name": "plugin-transform-spread", + "version": "7.10.4", + "description": "Compile ES2015 spread to ES5", + "hashes": [ + { + "alg": "SHA-512", + "content": "d5eff9d46fcd8beeee1f9824b5b5aff9e0840fda4ff19a518590778ce688de69b37ef25358792ec984efd19e4f62dc8cf93af609cafd914750c67eb47c8e56b9" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-spread@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-sticky-regex@7.10.4", + "group": "@babel", + "name": "plugin-transform-sticky-regex", + "version": "7.10.4", + "description": "Compile ES2015 sticky regex to an ES5 RegExp constructor", + "hashes": [ + { + "alg": "SHA-512", + "content": "0ddcb74197c86c4574558715b450c28de138c705532564e652da2b009927eaeffdd99fe7589355fa620bcaa1caad4c5760a0361280a2960a0f78fca628be03bd" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-sticky-regex@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-template-literals@7.10.5", + "group": "@babel", + "name": "plugin-transform-template-literals", + "version": "7.10.5", + "description": "Compile ES2015 template literals to ES5", + "hashes": [ + { + "alg": "SHA-512", + "content": "57f9673c621bf8a4f5d8e422903be04ae7ac457d78724e457c95edebeb5785d909f95b1dd250c256d17a8dc078acd0a5605cda0768eeb19fa534848393698c33" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-template-literals@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-typeof-symbol@7.10.4", + "group": "@babel", + "name": "plugin-transform-typeof-symbol", + "version": "7.10.4", + "description": "This transformer wraps all typeof expressions with a method that replicates native behaviour. (ie. returning “symbol” for symbols)", + "hashes": [ + { + "alg": "SHA-512", + "content": "42a360630bae5b4cb41fe91413f196491e39b7f71c4617b5e05b3fe19468b8d350b32778a373c6e0eb47888adea5b33658a5010c05ca0802bf2e4e158734da18" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-typeof-symbol@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-unicode-escapes@7.10.4", + "group": "@babel", + "name": "plugin-transform-unicode-escapes", + "version": "7.10.4", + "description": "Compile ES2015 Unicode escapes to ES5", + "hashes": [ + { + "alg": "SHA-512", + "content": "cb95c9f7068cb62d89f9eee28f6d1ef9a1fe7e1a3b59bed6f2b36ebbbd9a291c021c5a9076191d536968dee67db50b9ba0425c5056b25dd01185cc4b437fba16" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-unicode-escapes@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-unicode-regex@7.10.4", + "group": "@babel", + "name": "plugin-transform-unicode-regex", + "version": "7.10.4", + "description": "Compile ES2015 Unicode regex to ES5", + "hashes": [ + { + "alg": "SHA-512", + "content": "c0d7ec738b3c376aa7230a4efd63f66624b28dfa536a64f60bd57d1431ff2e3b9bf73c3a3f74a391770599cd11414b7dea4d9f988bed95ad8c323813c08002f8" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-unicode-regex@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/preset-modules@0.1.3", + "group": "@babel", + "name": "preset-modules", + "version": "0.1.3", + "description": "A Babel preset that targets modern browsers by fixing engine bugs.", + "hashes": [ + { + "alg": "SHA-512", + "content": "45adc95ce1c1ab6c5de7ac5217b94c297763067dd3efbd98d567addf25a7903972f731ef2648b4dbdb40173bc000ae5c7f8615df2a31b8feb572b611a25e9256" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/preset-modules@0.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/core-js-compat@3.6.5", + "name": "core-js-compat", + "version": "3.6.5", + "description": "core-js compat", + "hashes": [ + { + "alg": "SHA-512", + "content": "ec8b5328e84e65bce7857010da0fec9468353c9579cc33bf59d913c22ed410e26692fb04df63d6bf1ea62ad0e388ca639d1d8235fe81003eac4b1225bfba6d9e" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/core-js-compat@3.6.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/zloirock/core-js#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/zloirock/core-js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/zloirock/core-js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver@7.0.0", + "name": "semver", + "version": "7.0.0", + "description": "The semantic version parser used by npm.", + "hashes": [ + { + "alg": "SHA-512", + "content": "f8607acd503d2d687ace8bd840b00b1f0bf9adbd8f1c69498b795f8aa207c51d2ebb00a079f70e25ce7dbfd7efd70f066d2b70c6ebaaa808c8f4d30038e82ad4" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/semver@7.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/npm/node-semver#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/npm/node-semver/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/npm/node-semver.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/preset-flow@7.10.4", + "group": "@babel", + "name": "preset-flow", + "version": "7.10.4", + "description": "Babel preset for all Flow plugins.", + "hashes": [ + { + "alg": "SHA-512", + "content": "5c8ea5d42a6d402381bfe64a630ca7cacc21b4e2b0a59669e67d0b1b540a0a8f1ead186a8e8415ea7bf1eb5120df4247a72b16412070036016454de905b498e6" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/preset-flow@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-flow-strip-types@7.10.4", + "group": "@babel", + "name": "plugin-transform-flow-strip-types", + "version": "7.10.4", + "description": "Strip flow type annotations from your output code.", + "hashes": [ + { + "alg": "SHA-512", + "content": "5d369dcaea8db2df3c51605374b8ccfb0118ec1167636b18b4fc8089d7c2eccfd06999d2b8866932f2f1a864fba6101c9c6c9687f5d014b29c19fd380a7bf149" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-flow-strip-types@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-flow@7.10.4", + "group": "@babel", + "name": "plugin-syntax-flow", + "version": "7.10.4", + "description": "Allow parsing of the flow syntax", + "hashes": [ + { + "alg": "SHA-512", + "content": "cb142c5f57498b1178a8411dcd56ecb77499439f0dae8a33f0d57d67d18be1bc93136e41bc9825e657f44440947f47e1dbcad905bfd16135a7fde78ac0232b65" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-syntax-flow@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/preset-react@7.10.4", + "group": "@babel", + "name": "preset-react", + "version": "7.10.4", + "description": "Babel preset for all React plugins.", + "hashes": [ + { + "alg": "SHA-512", + "content": "06b1e9e1380e232e0cd7d2407ced4b8727155ce3d67436d345ea7b795c9ab5fd7be077dffba524e77b03c9a8ea64fbbc5b5a9744189839f21a99e93a8c0ed857" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/preset-react@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://babeljs.io/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-react-display-name@7.10.4", + "group": "@babel", + "name": "plugin-transform-react-display-name", + "version": "7.10.4", + "description": "Add displayName to React.createClass calls", + "hashes": [ + { + "alg": "SHA-512", + "content": "65de17e7832ef5205f3c69c471a19c3ab54060eb634f6a27f106642ca12ad52fed1dec46dfd77d5d7199bf5f557d1ac38cf2731663df4c0a8e412d697c53ae8f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-react-display-name@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-react-jsx@7.10.4", + "group": "@babel", + "name": "plugin-transform-react-jsx", + "version": "7.10.4", + "description": "Turn JSX into React function calls", + "hashes": [ + { + "alg": "SHA-512", + "content": "2fe31f4615a35f4788ec9b34f7730ce8c69c294e0ce9d9c245afd03c3c183318e58f3482cf39732b38fd3e4e0fdceb6b3dcc6bd8ddf39d1e35f67af75f0fbae4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-react-jsx@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-builder-react-jsx@7.10.4", + "group": "@babel", + "name": "helper-builder-react-jsx", + "version": "7.10.4", + "description": "Helper function to build react jsx", + "hashes": [ + { + "alg": "SHA-512", + "content": "e673dc219efe28a0f14f5e36ee8062be5f55f584da97baa4d1d89c72787b46b720ad3fe91853a3806c35760af2cb1d46bc71295d57e80c5e80937ad389687c46" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-builder-react-jsx@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-builder-react-jsx-experimental@7.10.5", + "group": "@babel", + "name": "helper-builder-react-jsx-experimental", + "version": "7.10.5", + "description": "Helper function to build react jsx", + "hashes": [ + { + "alg": "SHA-512", + "content": "06e7b09f1e8ce2db46f8d2e42b2b7b6da427ed2702fd377e7bdf46f75e1f454f1f188522bc30e054841e0c715ae5ee02452250b79f16a4d1e1b00660b73561b2" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/helper-builder-react-jsx-experimental@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-jsx@7.10.4", + "group": "@babel", + "name": "plugin-syntax-jsx", + "version": "7.10.4", + "description": "Allow parsing of jsx", + "hashes": [ + { + "alg": "SHA-512", + "content": "28283d9a2a3d8f088044207b580710ed8d6afaa89c20b8e82bc2cffd590f90429a7f976469964ad447137bdd5adc9265677ab2e8be6cf57e766e81188bc0ccf6" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-syntax-jsx@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-react-jsx-development@7.10.4", + "group": "@babel", + "name": "plugin-transform-react-jsx-development", + "version": "7.10.4", + "description": "Turn JSX into React function calls in development", + "hashes": [ + { + "alg": "SHA-512", + "content": "44cdd901dd6c535890eeb236761ad94591afd1aab335031b9085024b5b716298bdc07436647363a394f05fe503ea9bc55b801b5aa2d562f2b2e6a2520324468d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-react-jsx-development@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-react-jsx-self@7.10.4", + "group": "@babel", + "name": "plugin-transform-react-jsx-self", + "version": "7.10.4", + "description": "Add a __self prop to all JSX Elements", + "hashes": [ + { + "alg": "SHA-512", + "content": "c8ebf1636a43895262d1ac5d4d61d2322e53d0320b37e1fe49a7897800872a340b7b313384bc7d9c417dc60a412cfb6466c92cf5c9dbe4ff620448b6d449f782" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-react-jsx-self@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-react-jsx-source@7.10.5", + "group": "@babel", + "name": "plugin-transform-react-jsx-source", + "version": "7.10.5", + "description": "Add a __source prop to all JSX Elements", + "hashes": [ + { + "alg": "SHA-512", + "content": "c137aa1d590dd657cf2ee6d18991f7a3bddfe2b7e89f8d87a60c544acf3a35cfbc408726fc1f6cf0d3555eefe0c0670ec9def20e26fd8a4c680cbc493f45220c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-react-jsx-source@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-react-pure-annotations@7.10.4", + "group": "@babel", + "name": "plugin-transform-react-pure-annotations", + "version": "7.10.4", + "description": "Mark top-level React method calls as pure for tree shaking", + "hashes": [ + { + "alg": "SHA-512", + "content": "fa78d992a70eb92f1168f6a4ae747d2afc63a06d404895a9a08bff768c969e021df3c2681653e52127a71978eb55a71950800b194afa7a8751b35be63e7176dc" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-react-pure-annotations@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/preset-typescript@7.7.0", + "group": "@babel", + "name": "preset-typescript", + "version": "7.7.0", + "description": "Babel preset for TypeScript.", + "hashes": [ + { + "alg": "SHA-512", + "content": "599deabed009cbcc3f8bac2aab93ee0e790251768b5131c8949ba37c61e61f1b13e6f7806c47448e5ddc0bfde75dfc83d1bce55ac22231d521660ad78ddf505a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/preset-typescript@7.7.0", + "externalReferences": [ + { + "type": "vcs", + "url": "https://github.com/babel/babel/tree/master/packages/babel-preset-typescript" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-typescript@7.10.5", + "group": "@babel", + "name": "plugin-transform-typescript", + "version": "7.10.5", + "description": "Transform TypeScript into ES.next", + "hashes": [ + { + "alg": "SHA-512", + "content": "602c98b05aeb44c677a91ef0470b52489a2f3c6e6f1b21b865d712022bc6c137e86ac329dd5381fc02a1a21bb7745b660787020dcb277424b11adadd9620ac65" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-transform-typescript@7.10.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-typescript@7.10.4", + "group": "@babel", + "name": "plugin-syntax-typescript", + "version": "7.10.4", + "description": "Allow parsing of TypeScript syntax", + "hashes": [ + { + "alg": "SHA-512", + "content": "a12004cf562404200aaf9622abcfc136dbd200fc24a7f232527c19a2077ca7e17446e61042b2de454cc8421b9e4134c1cbf17e6b8d2e4bb3852b19e446f9af15" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40babel/plugin-syntax-typescript@7.10.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/babel/babel#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/babel/babel/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/babel/babel.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi@0.3.1", + "name": "ansi", + "version": "0.3.1", + "description": "Advanced ANSI formatting tool for Node.js", + "hashes": [ + { + "alg": "SHA-1", + "content": "0c42d4fb17160d5a9af1e484bace1c66922c1b21" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ansi@0.3.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/TooTallNate/ansi.js#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/TooTallNate/ansi.js/issues" + }, + { + "type": "vcs", + "url": "git://github.com/TooTallNate/ansi.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/babel-plugin-ttag@1.7.26", + "name": "babel-plugin-ttag", + "version": "1.7.26", + "description": "[![travis](https://api.travis-ci.org/ttag-org/babel-plugin-ttag.svg)](https://travis-ci.org/ttag-org) [![codecov](https://codecov.io/gh/ttag-org/babel-plugin-ttag/branch/master/graph/badge.svg)](https://codecov.io/gh/ttag-org/babel-plugin-ttag)", + "hashes": [ + { + "alg": "SHA-512", + "content": "9b306ab3def6710d728877fe68b4ba417d99ea3205705479c5de12da03693ec2f3cd65bc0a863fd305c7a3d98ede679f3469624c224b49c428004063d4cc2958" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/babel-plugin-ttag@1.7.26", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ttag-org/babel-plugin-ttag#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ttag-org/babel-plugin-ttag/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/ttag-org/babel-plugin-ttag.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ajv@4.9.0", + "name": "ajv", + "version": "4.9.0", + "description": "Another JSON Schema Validator", + "hashes": [ + { + "alg": "SHA-1", + "content": "5a358085747b134eb567d6d15e015f1d7802f45c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv@4.9.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/epoberezkin/ajv" + }, + { + "type": "issue-tracker", + "url": "https://github.com/epoberezkin/ajv/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/epoberezkin/ajv.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-stable-stringify@1.0.1", + "name": "json-stable-stringify", + "version": "1.0.1", + "description": "deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results", + "hashes": [ + { + "alg": "SHA-1", + "content": "9a759d39c5f2ff503fd5300646ed445f88c4f9af" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/json-stable-stringify@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/substack/json-stable-stringify" + }, + { + "type": "issue-tracker", + "url": "https://github.com/substack/json-stable-stringify/issues" + }, + { + "type": "vcs", + "url": "git://github.com/substack/json-stable-stringify.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonify@0.0.0", + "name": "jsonify", + "version": "0.0.0", + "description": "JSON without touching any globals", + "hashes": [ + { + "alg": "SHA-1", + "content": "2c74b6ee41d93ca51b7b5aaee8f503631d252a73" + } + ], + "licenses": [ + { + "license": { + "name": "Public Domain" + } + } + ], + "purl": "pkg:npm/jsonify@0.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/substack/jsonify#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/substack/jsonify/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/substack/jsonify.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/babel-plugin-macros@2.8.0", + "name": "babel-plugin-macros", + "version": "2.8.0", + "description": "Allows you to build compile-time libraries", + "hashes": [ + { + "alg": "SHA-512", + "content": "4843f9909a5f198a982a906b8f95d4dda870e69e46387274539b2c39243f58155dc240f60f395c7bde5ec504ecde339558f3ca2c1376ae51169022bb75298bbe" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/babel-plugin-macros@2.8.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/kentcdodds/babel-plugin-macros#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/kentcdodds/babel-plugin-macros/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/kentcdodds/babel-plugin-macros.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cosmiconfig@6.0.0", + "name": "cosmiconfig", + "version": "6.0.0", + "description": "Find and load configuration from a package.json property, rc file, or CommonJS module", + "hashes": [ + { + "alg": "SHA-512", + "content": "c5bdd92faf8bf1bf492cb0b1dd9768672e3ed840a9842328d8fc2a80fd6d95f56ae8ce9845ecb3049b6f596b5b0d2a4dafd867f7aa640a266a51c14473ee7842" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/cosmiconfig@6.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/davidtheclark/cosmiconfig#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/davidtheclark/cosmiconfig/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/davidtheclark/cosmiconfig.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/parse-json@4.0.0", + "group": "@types", + "name": "parse-json", + "version": "4.0.0", + "description": "TypeScript definitions for parse-json", + "hashes": [ + { + "alg": "SHA-512", + "content": "fffa28ac46632fab1b3dc2946827481a5214787dba9a0ce29a3041efb1ba5d18270e5fcbe703a7a7204645efcc99fe42556dcfc04044d4d8e2319fecb05878c0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40types/parse-json@4.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/import-fresh@3.2.1", + "name": "import-fresh", + "version": "3.2.1", + "description": "Import a module while bypassing the cache", + "hashes": [ + { + "alg": "SHA-512", + "content": "e9ed6ad5c9d63f64570fdfe47929311d2720e74f02757a975a05816844cd872b81173fa451994a6e887e2122be6d4fbe0e66c78a6541acecffcf33ded2c677b1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/import-fresh@3.2.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/import-fresh#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/import-fresh/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/import-fresh.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/parent-module@1.0.1", + "name": "parent-module", + "version": "1.0.1", + "description": "Get the path of the parent module", + "hashes": [ + { + "alg": "SHA-512", + "content": "190d84591a5057cfe8f80c3c62ab5f6593df3515996246e2744f64e6ba65fe10b7bed1c705f1a6d887e2eaa595f9ca031a4ad42990311372e8b7991cb11961fa" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/parent-module@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/parent-module#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/parent-module/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/parent-module.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/resolve-from@4.0.0", + "name": "resolve-from", + "version": "4.0.0", + "description": "Resolve the path of a module like `require.resolve()` but from a given path", + "hashes": [ + { + "alg": "SHA-512", + "content": "a5bfcc6265ecb40932b11171f2988d235b4614d408140def904dc6ab812e035745ea01e9ffebe066ab021896a9bf2f0ddd0fb8a3b170beab8f25c9d9ed1632e2" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/resolve-from@4.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/resolve-from#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/resolve-from/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/resolve-from.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/parse-json@5.0.0", + "name": "parse-json", + "version": "5.0.0", + "description": "Parse JSON with more helpful errors", + "hashes": [ + { + "alg": "SHA-512", + "content": "38e6396fb3c0105574136162af528e9317219d9342768c0026043936ec63a4129344fde9421c24ae4c6a4237a8289f9f3bb6c2a662196a8808e1e6460cc1063b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/parse-json@5.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/parse-json#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/parse-json/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/parse-json.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lines-and-columns@1.1.6", + "name": "lines-and-columns", + "version": "1.1.6", + "description": "Maps lines and columns to character offsets and back.", + "hashes": [ + { + "alg": "SHA-1", + "content": "1c00c743b433cd0a4e80758f7b64a57440d9ff00" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/lines-and-columns@1.1.6", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/eventualbuddha/lines-and-columns#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/eventualbuddha/lines-and-columns/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/eventualbuddha/lines-and-columns.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-type@4.0.0", + "name": "path-type", + "version": "4.0.0", + "description": "Check if a path is a file, directory, or symlink", + "hashes": [ + { + "alg": "SHA-512", + "content": "80329bf1a64c0de0ffb595acf4febeab427d33091d97ac4c57c4e39c63f7a89549d3a6dd32091b0652d4f0875f3ac22c173d815b5acd553dd7b8d125f333c0bf" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/path-type@4.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/path-type#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/path-type/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/path-type.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yaml@1.10.0", + "name": "yaml", + "version": "1.10.0", + "description": "JavaScript parser and stringifier for YAML", + "hashes": [ + { + "alg": "SHA-512", + "content": "cabda2708e2095868d1be29638d3836a9cb6fe30dd3120e7ace3528db9400630fd0786792e08a2adc4adf26f2c45914d8b4f241bd4a6d2e487b4498fdf36841a" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/yaml@1.10.0", + "externalReferences": [ + { + "type": "website", + "url": "https://eemeli.org/yaml/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/eemeli/yaml/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/eemeli/yaml.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dedent@0.6.0", + "name": "dedent", + "version": "0.6.0", + "description": "An ES6 string tag that strips indentation from multi-line strings", + "hashes": [ + { + "alg": "SHA-1", + "content": "0e6da8f0ce52838ef5cec5c8f9396b0c1b64a3cb" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/dedent@0.6.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/dmnd/dedent" + }, + { + "type": "issue-tracker", + "url": "https://github.com/dmnd/dedent/issues" + }, + { + "type": "vcs", + "url": "git://github.com/dmnd/dedent.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/gettext-parser@4.0.0-alpha.0", + "name": "gettext-parser", + "version": "4.0.0-alpha.0", + "description": "Parse and compile gettext po and mo files to/from json, nothing more, nothing less", + "hashes": [ + { + "alg": "SHA-512", + "content": "b3bb9d83774eae516d17f511100fe49334f92a3fc2dc2f65a6bea81b1e45e4b7c869d5c39edc20496106cc9f3af5138cd0e9c2b1d9a1727f944977cb3e9097c4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/gettext-parser@4.0.0-alpha.0", + "externalReferences": [ + { + "type": "website", + "url": "http://github.com/smhg/gettext-parser" + }, + { + "type": "issue-tracker", + "url": "https://github.com/smhg/gettext-parser/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/smhg/gettext-parser.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/content-type@1.0.4", + "name": "content-type", + "version": "1.0.4", + "description": "Create and parse HTTP Content-Type header", + "hashes": [ + { + "alg": "SHA-512", + "content": "8483f71043ecf2d07d013d4bf8d52ab70380a6ce269366686fcf4c5973078c75a0f668a517f8f8a2c9e740b5c108114193fb6f206fed51cf663942623c184f5c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/content-type@1.0.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jshttp/content-type#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jshttp/content-type/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jshttp/content-type.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/encoding@0.1.13", + "name": "encoding", + "version": "0.1.13", + "description": "Convert encodings, uses iconv-lite", + "hashes": [ + { + "alg": "SHA-512", + "content": "11305aba8c354f7e58fd664c922a3d8e2334679c631c7989e179a364eab597f757cf796bdac467f3b9c9cb6d11ba9a928751769b71c73d2a7c4a120f409ac9dc" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/encoding@0.1.13", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/andris9/encoding#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/andris9/encoding/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/andris9/encoding.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iconv-lite@0.6.2", + "name": "iconv-lite", + "version": "0.6.2", + "description": "Convert character encodings in pure javascript.", + "hashes": [ + { + "alg": "SHA-512", + "content": "db2f758793a9425a2579f30f994962bde962b6d496cb4acffa8615a67e80ec6c151cd13c016ce860e04d9a5c24b372e86da2718070986409f2368d8682935135" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/iconv-lite@0.6.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ashtuchkin/iconv-lite" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ashtuchkin/iconv-lite/issues" + }, + { + "type": "vcs", + "url": "git://github.com/ashtuchkin/iconv-lite.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/plural-forms@0.3.3", + "name": "plural-forms", + "version": "0.3.3", + "description": "Provides information about the plural forms from any language that you may know", + "hashes": [ + { + "alg": "SHA-512", + "content": "f42105c691dad4aaed645a1ad05c9b65cc720f1d5c7967a5a30b65496b45b2647306043d0e3e3b626c98e9cca73c0254a00fe42e6d81ed5622d027cd2036670b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/plural-forms@0.3.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/c-3po-org/plural-forms#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/c-3po-org/plural-forms/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/c-3po-org/plural-forms.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cross-spawn@5.1.0", + "name": "cross-spawn", + "version": "5.1.0", + "description": "Cross platform child_process#spawn and child_process#spawnSync", + "hashes": [ + { + "alg": "SHA-1", + "content": "e8bd0efee58fcff6f8f94510a0a554bbfa235449" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/cross-spawn@5.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/IndigoUnited/node-cross-spawn#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/IndigoUnited/node-cross-spawn/issues/" + }, + { + "type": "vcs", + "url": "git://github.com/IndigoUnited/node-cross-spawn.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lru-cache@4.1.5", + "name": "lru-cache", + "version": "4.1.5", + "description": "A cache object that deletes the least-recently-used items.", + "hashes": [ + { + "alg": "SHA-512", + "content": "b166656c43f63ac1cd917acc97919893f8ca93bd0c06783a514e1823fa860d86e07fa61b3f812f9aa2126d70a826244ab3ed5b4a9147560431bc9d7b176962e6" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/lru-cache@4.1.5", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/node-lru-cache#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/node-lru-cache/issues" + }, + { + "type": "vcs", + "url": "git://github.com/isaacs/node-lru-cache.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pseudomap@1.0.2", + "name": "pseudomap", + "version": "1.0.2", + "description": "A thing that is a lot like ES6 `Map`, but without iterators, for use in environments where `for..of` syntax and `Map` are not available.", + "hashes": [ + { + "alg": "SHA-1", + "content": "f052a28da70e618917ef0a8ac34c1ae5a68286b3" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/pseudomap@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/pseudomap#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/pseudomap/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/isaacs/pseudomap.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yallist@2.1.2", + "name": "yallist", + "version": "2.1.2", + "description": "Yet Another Linked List", + "hashes": [ + { + "alg": "SHA-1", + "content": "1c11f9218f076089a47dd512f93c6699a6a81d52" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/yallist@2.1.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/isaacs/yallist#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/isaacs/yallist/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/isaacs/yallist.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/estree-walker@2.0.1", + "name": "estree-walker", + "version": "2.0.1", + "description": "Traverse an ESTree-compliant AST", + "hashes": [ + { + "alg": "SHA-512", + "content": "b45d21bfe622d8eb757308fd7981edc42d2307d6e68da72342ce990538fcd87f09c14cb016e73eec4f373567cd3301d765cd759a37c57155cf7bd8043f807c76" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/estree-walker@2.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/Rich-Harris/estree-walker#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/Rich-Harris/estree-walker/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/Rich-Harris/estree-walker.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/hunspell-spellchecker@1.0.2", + "name": "hunspell-spellchecker", + "version": "1.0.2", + "description": "Parse and use Hunspell dictionaries in Javascript", + "hashes": [ + { + "alg": "SHA-1", + "content": "a10b0bd2fa00a65ab62a4c6b734ce496d318910e" + } + ], + "licenses": [ + { + "license": { + "name": "Apache 2" + } + } + ], + "purl": "pkg:npm/hunspell-spellchecker@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/GitbookIO/hunspell-spellchecker" + }, + { + "type": "issue-tracker", + "url": "https://github.com/GitbookIO/hunspell-spellchecker/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/GitbookIO/hunspell-spellchecker.git" + } + ] + }, + { + "type": "framework", + "bom-ref": "pkg:npm/koa@2.13.0", + "name": "koa", + "version": "2.13.0", + "description": "Koa web app framework", + "hashes": [ + { + "alg": "SHA-512", + "content": "8bf5c954e7cfc3b9e96ccbfaefe6ce797af780fa8e030eae879c05c8db3742f278eed531dccdd5f6b204d3ffd6cad638d8c2b3e25fcc5cac86910d8b4137cb51" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/koa@2.13.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/koajs/koa#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/koajs/koa/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/koajs/koa.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/accepts@1.3.7", + "name": "accepts", + "version": "1.3.7", + "description": "Higher-level content negotiation", + "hashes": [ + { + "alg": "SHA-512", + "content": "225f3442cd968d89492013733642ba298aa554c4db64b5e01f1da84f4a54fdf8d11f2129f8f11f10f634477582c001953ad6aec61d613b136021fe5bbfb750a4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/accepts@1.3.7", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jshttp/accepts#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jshttp/accepts/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jshttp/accepts.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/negotiator@0.6.2", + "name": "negotiator", + "version": "0.6.2", + "description": "HTTP content negotiation", + "hashes": [ + { + "alg": "SHA-512", + "content": "8595dcecad9ef8f81e23578305eff5d00adde1e91b7ebaea1bc129fbc2667f82480f66cd83b36f08f39937e91f179ef8a45408ee6ba6d8052a0e27682aa7133b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/negotiator@0.6.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jshttp/negotiator#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jshttp/negotiator/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jshttp/negotiator.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cache-content-type@1.0.1", + "name": "cache-content-type", + "version": "1.0.1", + "description": "Create a full Content-Type header given a MIME type or extension and catch the result", + "hashes": [ + { + "alg": "SHA-512", + "content": "20ab9f675a3852de36614ad94a8f3eaa7313ac5b8a92fca82d7532c0acfd189e41ae13851a12dd931f6c1b82809d5bdb63a9047121632d0ba5f83566066d9b80" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/cache-content-type@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/node-modules/cache-content-type#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/node-modules/cache-content-type/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/node-modules/cache-content-type.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ylru@1.2.1", + "name": "ylru", + "version": "1.2.1", + "description": "Extends LRU base on hashlru", + "hashes": [ + { + "alg": "SHA-512", + "content": "7da42ba8d33370f0871950b669a388364d772be69a04350f8c65a5d2d78e5f2c0494b8f254007a39eda38fada31d8b70b14e3d8d78527186ef3c434afbacc0bd" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ylru@1.2.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/node-modules/ylru" + }, + { + "type": "issue-tracker", + "url": "https://github.com/node-modules/ylru/issues" + }, + { + "type": "vcs", + "url": "git://github.com/node-modules/ylru.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/content-disposition@0.5.3", + "name": "content-disposition", + "version": "0.5.3", + "description": "Create and parse Content-Disposition header", + "hashes": [ + { + "alg": "SHA-512", + "content": "1313b4efbe2290439b200115f640e8e74a3eefd54251d101ea7ea5cca806c2ea5c55e46586b8f7a8601fc2af06eae0498e4a8bae14f4a846057169e0f33d73d2" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/content-disposition@0.5.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jshttp/content-disposition#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jshttp/content-disposition/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jshttp/content-disposition.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cookies@0.8.0", + "name": "cookies", + "version": "0.8.0", + "description": "Cookies, optionally signed using Keygrip.", + "hashes": [ + { + "alg": "SHA-512", + "content": "f1a3ec02941f79b5e7b88fb9dfb31cc18b03b635711a6f204c8cd02371435bab79b7f0c0844471b676c43cdffc457fae66d868cf87823a09685da139718c8da3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/cookies@0.8.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/pillarjs/cookies#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/pillarjs/cookies/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/pillarjs/cookies.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/depd@2.0.0", + "name": "depd", + "version": "2.0.0", + "description": "Deprecate all the things", + "hashes": [ + { + "alg": "SHA-512", + "content": "83b9c7e8fe9dc838a8268800006a6b1a90ad5489898693e4feba02cdd6f77c887ad7fb3f9cfb1f47aa27c8cc2408047f3a50b7c810b49444af52840402cb08af" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/depd@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/dougwilson/nodejs-depd#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/dougwilson/nodejs-depd/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/dougwilson/nodejs-depd.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/keygrip@1.1.0", + "name": "keygrip", + "version": "1.1.0", + "description": "Key signing and verification for rotated credentials", + "hashes": [ + { + "alg": "SHA-512", + "content": "89849c84327e96243c8b06d223642ab103afaafe7c7890846a7c893c98be2a1caef2c9a470a4855026cfc3315c2fb615b59e9e38d8ea457ff7f1c689ed08d101" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/keygrip@1.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/crypto-utils/keygrip#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/crypto-utils/keygrip/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/crypto-utils/keygrip.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tsscmp@1.0.6", + "name": "tsscmp", + "version": "1.0.6", + "description": "Timing safe string compare using double HMAC", + "hashes": [ + { + "alg": "SHA-512", + "content": "2f186d0243c34e45423108edda1e9e055636f0a0a38a466a65f31c0b5e5805e3639205297427c1bb91e888e4c3bbceafeac984f323a3c8492d27c8656c034740" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/tsscmp@1.0.6", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/suryagh/tsscmp#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/suryagh/tsscmp/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/suryagh/tsscmp.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@3.1.0", + "name": "debug", + "version": "3.1.0", + "description": "small debugging utility", + "hashes": [ + { + "alg": "SHA-512", + "content": "397f17a8feffd5af5caa4c58c36c97b2cd797f6e8d2960690d741dd3fb8afca3ea7508716cf6bdf78867ce3704d95a90a43b257f9e7bdb770a3d43864a6318de" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/debug@3.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/visionmedia/debug#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/visionmedia/debug/issues" + }, + { + "type": "vcs", + "url": "git://github.com/visionmedia/debug.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/delegates@1.0.0", + "name": "delegates", + "version": "1.0.0", + "description": "delegate methods and accessors to another property", + "hashes": [ + { + "alg": "SHA-1", + "content": "84c6e159b81904fdca59a0ef44cd870d31250f9a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/delegates@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/visionmedia/node-delegates#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/visionmedia/node-delegates/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/visionmedia/node-delegates.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/depd@1.1.2", + "name": "depd", + "version": "1.1.2", + "description": "Deprecate all the things", + "hashes": [ + { + "alg": "SHA-1", + "content": "9bcd52e14c097763e749b274c4346ed2e560b5a9" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/depd@1.1.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/dougwilson/nodejs-depd#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/dougwilson/nodejs-depd/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/dougwilson/nodejs-depd.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/destroy@1.0.4", + "name": "destroy", + "version": "1.0.4", + "description": "destroy a stream if possible", + "hashes": [ + { + "alg": "SHA-1", + "content": "978857442c44749e4206613e37946205826abd80" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/destroy@1.0.4", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/stream-utils/destroy#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/stream-utils/destroy/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/stream-utils/destroy.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/encodeurl@1.0.2", + "name": "encodeurl", + "version": "1.0.2", + "description": "Encode a URL to a percent-encoded form, excluding already-encoded sequences", + "hashes": [ + { + "alg": "SHA-1", + "content": "ad3ff4c86ec2d029322f5a02c3a9a606c95b3f59" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/encodeurl@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/pillarjs/encodeurl#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/pillarjs/encodeurl/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/pillarjs/encodeurl.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/escape-html@1.0.3", + "name": "escape-html", + "version": "1.0.3", + "description": "Escape string for use in HTML", + "hashes": [ + { + "alg": "SHA-1", + "content": "0258eae4d3d0c0974de1c169188ef0051d1d1988" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/escape-html@1.0.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/component/escape-html#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/component/escape-html/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/component/escape-html.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fresh@0.5.2", + "name": "fresh", + "version": "0.5.2", + "description": "HTTP response freshness testing", + "hashes": [ + { + "alg": "SHA-1", + "content": "3d8cadd90d976569fa835ab1f8e4b23a105605a7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fresh@0.5.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jshttp/fresh#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jshttp/fresh/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jshttp/fresh.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-assert@1.4.1", + "name": "http-assert", + "version": "1.4.1", + "description": "assert with status codes", + "hashes": [ + { + "alg": "SHA-512", + "content": "addc3baba1939626ea5556d7af408a7a57d5e6263c1b61ea1149214a4dbdec131b4a948bf1cad70bef6b8caa0c719644b24b17df495ee9fff8ba5e04dbc81e83" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/http-assert@1.4.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jshttp/http-assert#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jshttp/http-assert/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jshttp/http-assert.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/deep-equal@1.0.1", + "name": "deep-equal", + "version": "1.0.1", + "description": "node's assert.deepEqual algorithm", + "hashes": [ + { + "alg": "SHA-1", + "content": "f5d260292b660e084eff4cdbc9f08ad3247448b5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/deep-equal@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/substack/node-deep-equal#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/substack/node-deep-equal/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/substack/node-deep-equal.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-errors@1.7.3", + "name": "http-errors", + "version": "1.7.3", + "description": "Create HTTP error objects", + "hashes": [ + { + "alg": "SHA-512", + "content": "6534d7d0c5abb10d9902103571e8c0c032f2705b1dec8ee756d9e44f73a5d1aaa875a296fb4093643435b81bf9c21a6d0a773c7bc1de45127146cd249a6fd07f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/http-errors@1.7.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jshttp/http-errors#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jshttp/http-errors/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jshttp/http-errors.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/setprototypeof@1.1.1", + "name": "setprototypeof", + "version": "1.1.1", + "description": "A small polyfill for Object.setprototypeof", + "hashes": [ + { + "alg": "SHA-512", + "content": "26f74059f6d778819a67d7082e9dfc1e7b594854a8de65a0eb119c249b1df9de1a44c3aa6ae6a0d42eb77497c3c3b39a318c046c730ec4467596a55160fd8e03" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/setprototypeof@1.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/wesleytodd/setprototypeof" + }, + { + "type": "issue-tracker", + "url": "https://github.com/wesleytodd/setprototypeof/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/wesleytodd/setprototypeof.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/statuses@1.5.0", + "name": "statuses", + "version": "1.5.0", + "description": "HTTP status utility", + "hashes": [ + { + "alg": "SHA-1", + "content": "161c7dac177659fd9811f43771fa99381478628c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/statuses@1.5.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jshttp/statuses#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jshttp/statuses/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jshttp/statuses.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/toidentifier@1.0.0", + "name": "toidentifier", + "version": "1.0.0", + "description": "Convert a string of words to a JavaScript identifier", + "hashes": [ + { + "alg": "SHA-512", + "content": "c9a387fcf93f5448415964e5848faa5f10c55e57a30c67108a9325cb175af67b61ba56b12d950d714a85c68929d2f7189efb5e2659f914d40346bc63dd871b57" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/toidentifier@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/component/toidentifier#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/component/toidentifier/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/component/toidentifier.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-errors@1.8.0", + "name": "http-errors", + "version": "1.8.0", + "description": "Create HTTP error objects", + "hashes": [ + { + "alg": "SHA-512", + "content": "e08f2bd02e490e14f9564bc8e3b424b435bbe6b365195b147fff21ce3082ff091623f8dd4d19816fd688edead21bcdabd5b8ca63717a936f169ec5710750bbdc" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/http-errors@1.8.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jshttp/http-errors#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jshttp/http-errors/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jshttp/http-errors.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/setprototypeof@1.2.0", + "name": "setprototypeof", + "version": "1.2.0", + "description": "A small polyfill for Object.setprototypeof", + "hashes": [ + { + "alg": "SHA-512", + "content": "1392c35fb5aba7ce4a8a5e5b859bf8ea3f2339e6e82aae4932660cde05467461fcc45a4f59750cb0dae53830ab928c4c11e362fd7648c2e46f6385cdc18309a7" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/setprototypeof@1.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/wesleytodd/setprototypeof" + }, + { + "type": "issue-tracker", + "url": "https://github.com/wesleytodd/setprototypeof/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/wesleytodd/setprototypeof.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-generator-function@1.0.7", + "name": "is-generator-function", + "version": "1.0.7", + "description": "Determine if a function is a native generator function.", + "hashes": [ + { + "alg": "SHA-512", + "content": "619739130c8ee1fda45826b1ee87a07ee4abf66173d59be278d6011239ae90bc605df0546f101619517b1997f4ce2758b68065dd6bc2d3b60ad304fbe9af91b7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-generator-function@1.0.7", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ljharb/is-generator-function#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ljharb/is-generator-function/issues" + }, + { + "type": "vcs", + "url": "git://github.com/ljharb/is-generator-function.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/koa-compose@4.1.0", + "name": "koa-compose", + "version": "4.1.0", + "description": "compose Koa middleware", + "hashes": [ + { + "alg": "SHA-512", + "content": "f0e0d6f13ac3b8c62f5d1c2b6bf2a1effac9a3d06d39f3dceaa3bc7807c2f340a70af4a34a5d1b911336e17ebf5c1044ca3d2fd674544352f23b2ddd6ea3965f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/koa-compose@4.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/koajs/compose#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/koajs/compose/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/koajs/compose.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/koa-convert@1.2.0", + "name": "koa-convert", + "version": "1.2.0", + "description": "convert koa legacy generator-based middleware to promise-based middleware", + "hashes": [ + { + "alg": "SHA-1", + "content": "da40875df49de0539098d1700b50820cebcd21d0" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/koa-convert@1.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/gyson/koa-convert#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/gyson/koa-convert/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/gyson/koa-convert.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/koa-compose@3.2.1", + "name": "koa-compose", + "version": "3.2.1", + "description": "compose Koa middleware", + "hashes": [ + { + "alg": "SHA-1", + "content": "a85ccb40b7d986d8e5a345b3a1ace8eabcf54de7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/koa-compose@3.2.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/koajs/compose#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/koajs/compose/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/koajs/compose.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/any-promise@1.3.0", + "name": "any-promise", + "version": "1.3.0", + "description": "Resolve any installed ES6 compatible promise", + "hashes": [ + { + "alg": "SHA-1", + "content": "abc6afeedcea52e809cdc0376aed3ce39635d17f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/any-promise@1.3.0", + "externalReferences": [ + { + "type": "website", + "url": "http://github.com/kevinbeaty/any-promise" + }, + { + "type": "issue-tracker", + "url": "https://github.com/kevinbeaty/any-promise/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/kevinbeaty/any-promise.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/on-finished@2.3.0", + "name": "on-finished", + "version": "2.3.0", + "description": "Execute a callback when a request closes, finishes, or errors", + "hashes": [ + { + "alg": "SHA-1", + "content": "20f1336481b083cd75337992a16971aa2d906947" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/on-finished@2.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jshttp/on-finished#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jshttp/on-finished/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jshttp/on-finished.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ee-first@1.1.1", + "name": "ee-first", + "version": "1.1.1", + "description": "return the first event in a set of ee/event pairs", + "hashes": [ + { + "alg": "SHA-1", + "content": "590c61156b0ae2f4f0255732a158b266bc56b21d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ee-first@1.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonathanong/ee-first#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonathanong/ee-first/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonathanong/ee-first.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/only@0.0.2", + "name": "only", + "version": "0.0.2", + "description": "return whitelisted properties of an object", + "hashes": [ + { + "alg": "SHA-1", + "content": "2afde84d03e50b9a8edc444e30610a70295edfb4" + } + ], + "purl": "pkg:npm/only@0.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/visionmedia/node-only#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/visionmedia/node-only/issues" + }, + { + "type": "vcs", + "url": "git://github.com/visionmedia/node-only.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/parseurl@1.3.3", + "name": "parseurl", + "version": "1.3.3", + "description": "parse a url with memoization", + "hashes": [ + { + "alg": "SHA-512", + "content": "0a2c9e3b1153fc96723799b4cfd3df5f0e1208127a4b2833d43a65d30aa39610c418604fd469ec51510bd29eb78681b57dc8f77c7ca75e2f4d60ee2758e2fea9" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/parseurl@1.3.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/pillarjs/parseurl#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/pillarjs/parseurl/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/pillarjs/parseurl.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/type-is@1.6.18", + "name": "type-is", + "version": "1.6.18", + "description": "Infer the content-type of a request.", + "hashes": [ + { + "alg": "SHA-512", + "content": "4e444aafdb144f1107f0c75fb8248fed58b3272cd134c8e3d89d9da3626bdcaca6e7df0955d124b2eccf4029e514f5b8932f50fa203e99af411a6d3a5d0072f2" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/type-is@1.6.18", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jshttp/type-is#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jshttp/type-is/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jshttp/type-is.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/media-typer@0.3.0", + "name": "media-typer", + "version": "0.3.0", + "description": "Simple RFC 6838 media type parser and formatter", + "hashes": [ + { + "alg": "SHA-1", + "content": "8710d7af0aa626f8fffa1ce00168545263255748" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/media-typer@0.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jshttp/media-typer#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jshttp/media-typer/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jshttp/media-typer.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/vary@1.1.2", + "name": "vary", + "version": "1.1.2", + "description": "Manipulate the HTTP Vary header", + "hashes": [ + { + "alg": "SHA-1", + "content": "2299f02c6ded30d4a5961b0b9f74524a18f634fc" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/vary@1.1.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jshttp/vary#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jshttp/vary/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jshttp/vary.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/koa-body@2.6.0", + "name": "koa-body", + "version": "2.6.0", + "description": "A koa body parser middleware. Support multipart, urlencoded and json request bodies.", + "hashes": [ + { + "alg": "SHA-512", + "content": "f22f6d8b74d1c5e96c9cf51cb74c58f2da13163e604f31965b8e5e3c1913f1f9f364fef9cb9c288ac569ce221da9c9eab6dd6530d043df4a7eb648920be35f8d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/koa-body@2.6.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/dlau/koa-body#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/dlau/koa-body/issues" + }, + { + "type": "vcs", + "url": "git://github.com/dlau/koa-body.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/co-body@5.2.0", + "name": "co-body", + "version": "5.2.0", + "description": "request body parsing for co", + "hashes": [ + { + "alg": "SHA-512", + "content": "b17fcb43b2ea5218326b1cdb7bb22ac0f793af6c9fa5f50843f760a4aa3a648e32e25a50034631028996218fbb23bac759c1b4d8f1be3ae3d1133316ff9b6ccd" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/co-body@5.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/cojs/co-body#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/cojs/co-body/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/cojs/co-body.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inflation@2.0.0", + "name": "inflation", + "version": "2.0.0", + "description": "Easily unzip an HTTP stream", + "hashes": [ + { + "alg": "SHA-1", + "content": "8b417e47c28f925a45133d914ca1fd389107f30f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/inflation@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/stream-utils/inflation#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/stream-utils/inflation/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/stream-utils/inflation.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/raw-body@2.4.1", + "name": "raw-body", + "version": "2.4.1", + "description": "Get and validate the raw body of a readable stream.", + "hashes": [ + { + "alg": "SHA-512", + "content": "f56988285ea692f03448b980d8a9e6f7eaa3f3d7be8f5cea8329fc69719defe9c076e3e8aa023d94ee7b48064d9ff072ce8e4fec98574f283d3f36896c7ef76c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/raw-body@2.4.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/stream-utils/raw-body#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/stream-utils/raw-body/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/stream-utils/raw-body.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bytes@3.1.0", + "name": "bytes", + "version": "3.1.0", + "description": "Utility to parse a string bytes to bytes and vice-versa", + "hashes": [ + { + "alg": "SHA-512", + "content": "cdab8b8eb7c21bec6fa326aa2e857c6cb5575cd182e09aa5c450aeb520d603a7c9ad3a3666ebcb613a99eda1c12d948c3a8a5bcf0bfc7fec19715cdf5532360e" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/bytes@3.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/visionmedia/bytes.js#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/visionmedia/bytes.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/visionmedia/bytes.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unpipe@1.0.0", + "name": "unpipe", + "version": "1.0.0", + "description": "Unpipe a stream from all destinations", + "hashes": [ + { + "alg": "SHA-1", + "content": "b2bf4ee8514aae6165b4817829d21b2ef49904ec" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/unpipe@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/stream-utils/unpipe#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/stream-utils/unpipe/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/stream-utils/unpipe.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/formidable@1.2.2", + "name": "formidable", + "version": "1.2.2", + "description": "A node.js module for parsing form data, especially file uploads.", + "hashes": [ + { + "alg": "SHA-512", + "content": "57c80b9bee3523ff2482e438fe8d43dd1207466858146e299cdca89efb9afb8d2ba9c1264f8f95ef5c9a677078e7bc5b6e00ac09f8d23e2eb9bbf5babcad54e5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/formidable@1.2.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/node-formidable/formidable" + }, + { + "type": "issue-tracker", + "url": "https://github.com/node-formidable/formidable/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/node-formidable/formidable.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/koa-router@7.4.0", + "name": "koa-router", + "version": "7.4.0", + "description": "Router middleware for koa. Provides RESTful resource routing.", + "hashes": [ + { + "alg": "SHA-512", + "content": "21685a0d77809df0c1129592ea1906759d5a6e582be90ea919d5c2c8adfc45bcee1f82e450ea4fa8fc3eddff25f1a4c3ad098143bc497346ecdb257877370efa" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/koa-router@7.4.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/alexmingoia/koa-router#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/alexmingoia/koa-router/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/alexmingoia/koa-router.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@3.2.6", + "name": "debug", + "version": "3.2.6", + "description": "small debugging utility", + "hashes": [ + { + "alg": "SHA-512", + "content": "99e97e8dfee7aed125e4f9f5431e3acc0457283a416efcdecec7bba7b2ea20d99da0893c3d83f94b249ac44998bfa4d9d09c84280d61b0221de832218084ed59" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/debug@3.2.6", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/visionmedia/debug#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/visionmedia/debug/issues" + }, + { + "type": "vcs", + "url": "git://github.com/visionmedia/debug.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/methods@1.1.2", + "name": "methods", + "version": "1.1.2", + "description": "HTTP methods that node supports", + "hashes": [ + { + "alg": "SHA-1", + "content": "5529a4d67654134edcc5266656835b0f851afcee" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/methods@1.1.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jshttp/methods#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jshttp/methods/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jshttp/methods.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-to-regexp@1.8.0", + "name": "path-to-regexp", + "version": "1.8.0", + "description": "Express style path to RegExp utility", + "hashes": [ + { + "alg": "SHA-512", + "content": "9f8dc946195429402589b10984f7a2af59dc5080f5e909c48cda70ccd74edcb9b8cb0ac1a41679a0b0f423a6ebf5ebebd58f494eac11b4087b24ba0ecc041d54" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/path-to-regexp@1.8.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/pillarjs/path-to-regexp#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/pillarjs/path-to-regexp/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/pillarjs/path-to-regexp.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isarray@0.0.1", + "name": "isarray", + "version": "0.0.1", + "description": "Array#isArray for older browsers", + "hashes": [ + { + "alg": "SHA-1", + "content": "8a18acfca9a8f4177e09abfc6038939b05d1eedf" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/isarray@0.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/juliangruber/isarray" + }, + { + "type": "issue-tracker", + "url": "https://github.com/juliangruber/isarray/issues" + }, + { + "type": "vcs", + "url": "git://github.com/juliangruber/isarray.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/urijs@1.19.2", + "name": "urijs", + "version": "1.19.2", + "description": "URI.js is a Javascript library for working with URLs.", + "hashes": [ + { + "alg": "SHA-512", + "content": "b3f508abd6a9e093d9ec7d4407950ba3f68e51b5aa7c38bb14accc0b6373fb44a2f06893d6b2046a9aedf21cb7572d84c766893e9390bf83f80ee399f8ad5ceb" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/urijs@1.19.2", + "externalReferences": [ + { + "type": "website", + "url": "http://medialize.github.io/URI.js/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/medialize/URI.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/medialize/URI.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-fetch@1.7.3", + "name": "node-fetch", + "version": "1.7.3", + "description": "A light-weight module that brings window.fetch to node.js and io.js", + "hashes": [ + { + "alg": "SHA-512", + "content": "3616780ac2b1edc626daf4ab040af63ef14e7bab160dfd1460b46a03ab2f51883bfbf4d27d502ee3d8d80b806f4384a6b3d49981da86060ae8a9f0e125d4f229" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/node-fetch@1.7.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/bitinn/node-fetch" + }, + { + "type": "issue-tracker", + "url": "https://github.com/bitinn/node-fetch/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/bitinn/node-fetch.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/open@6.4.0", + "name": "open", + "version": "6.4.0", + "description": "Open stuff like URLs, files, executables. Cross-platform.", + "hashes": [ + { + "alg": "SHA-512", + "content": "2057a754f805ef47d29b591e49dda20c1203201664ae82deb9f7d7abec0a4f34c9941a5eb055a88d5f656fc9b339f680cccd6cafb1d01ee3b4bed574cd87a41a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/open@6.4.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/open#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/open/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/open.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ora@1.3.0", + "name": "ora", + "version": "1.3.0", + "description": "Elegant terminal spinner", + "hashes": [ + { + "alg": "SHA-1", + "content": "80078dd2b92a934af66a3ad72a5b910694ede51a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ora@1.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/ora#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/ora/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/ora.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chalk@1.1.3", + "name": "chalk", + "version": "1.1.3", + "description": "Terminal string styling done right. Much color.", + "hashes": [ + { + "alg": "SHA-1", + "content": "a8115c55e4a702fe4d150abd3872822a7e09fc98" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/chalk@1.1.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/chalk/chalk#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/chalk/chalk/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/chalk/chalk.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-styles@2.2.1", + "name": "ansi-styles", + "version": "2.2.1", + "description": "ANSI escape codes for styling strings in the terminal", + "hashes": [ + { + "alg": "SHA-1", + "content": "b432dd3358b634cf75e1e4664368240533c1ddbe" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ansi-styles@2.2.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/chalk/ansi-styles#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/chalk/ansi-styles/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/chalk/ansi-styles.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-ansi@2.0.0", + "name": "has-ansi", + "version": "2.0.0", + "description": "Check if a string has ANSI escape codes", + "hashes": [ + { + "alg": "SHA-1", + "content": "34f5049ce1ecdf2b0649af3ef24e45ed35416d91" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/has-ansi@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/has-ansi#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/has-ansi/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/has-ansi.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@2.1.1", + "name": "ansi-regex", + "version": "2.1.1", + "description": "Regular expression for matching ANSI escape codes", + "hashes": [ + { + "alg": "SHA-1", + "content": "c3b33ab5ee360d86e0e628f0468ae7ef27d654df" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ansi-regex@2.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/chalk/ansi-regex#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/chalk/ansi-regex/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/chalk/ansi-regex.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@3.0.1", + "name": "strip-ansi", + "version": "3.0.1", + "description": "Strip ANSI escape codes", + "hashes": [ + { + "alg": "SHA-1", + "content": "6a385fb8853d952d5ff05d0e8aaf94278dc63dcf" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/strip-ansi@3.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/chalk/strip-ansi#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/chalk/strip-ansi/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/chalk/strip-ansi.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-color@2.0.0", + "name": "supports-color", + "version": "2.0.0", + "description": "Detect whether a terminal supports color", + "hashes": [ + { + "alg": "SHA-1", + "content": "535d045ce6b6363fa40117084629995e9df324c7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/supports-color@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/chalk/supports-color#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/chalk/supports-color/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/chalk/supports-color.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-cursor@2.1.0", + "name": "cli-cursor", + "version": "2.1.0", + "description": "Toggle the CLI cursor", + "hashes": [ + { + "alg": "SHA-1", + "content": "b35dac376479facc3e94747d41d0d0f5238ffcb5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/cli-cursor@2.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/cli-cursor#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/cli-cursor/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/cli-cursor.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/restore-cursor@2.0.0", + "name": "restore-cursor", + "version": "2.0.0", + "description": "Gracefully restore the CLI cursor on exit", + "hashes": [ + { + "alg": "SHA-1", + "content": "9f7ee287f82fd326d4fd162923d62129eee0dfaf" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/restore-cursor@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/restore-cursor#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/restore-cursor/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/restore-cursor.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/onetime@2.0.1", + "name": "onetime", + "version": "2.0.1", + "description": "Ensure a function is only called once", + "hashes": [ + { + "alg": "SHA-1", + "content": "067428230fd67443b2794b22bba528b6867962d4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/onetime@2.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/onetime#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/onetime/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/onetime.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mimic-fn@1.2.0", + "name": "mimic-fn", + "version": "1.2.0", + "description": "Make a function mimic another one", + "hashes": [ + { + "alg": "SHA-512", + "content": "8dff38bb1cf08ae88854a88e2e97d893b378e934b2f2e6d3a279a7798f6fae91cd027a74401b76071595f5d3b7fe3f81a1501bf9ae46e980cf5b73391ce74c59" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/mimic-fn@1.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/mimic-fn#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/mimic-fn/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/mimic-fn.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-spinners@1.3.1", + "name": "cli-spinners", + "version": "1.3.1", + "description": "Spinners for use in the terminal", + "hashes": [ + { + "alg": "SHA-512", + "content": "d502f8e78e26a04b03547f53fe5e827a6a2fff7ee2bf546da0a7fb349d3803ad3ee0c4445cd7f1fd0bdabdb1fa42819db03e0de0cc32e3d726688351fe8da676" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/cli-spinners@1.3.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/cli-spinners#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/cli-spinners/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/cli-spinners.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/log-symbols@1.0.2", + "name": "log-symbols", + "version": "1.0.2", + "description": "Colored symbols for various log levels. Example: ✔︎ success", + "hashes": [ + { + "alg": "SHA-1", + "content": "376ff7b58ea3086a0f09facc74617eca501e1a18" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/log-symbols@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/log-symbols#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/log-symbols/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/log-symbols.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readline-sync@1.4.10", + "name": "readline-sync", + "version": "1.4.10", + "description": "Synchronous Readline for interactively running to have a conversation with the user via a console(TTY).", + "hashes": [ + { + "alg": "SHA-512", + "content": "80dbdaf3fe9401ef1061ea48407fe3436aa7f75423d01f6c62330106cdd0381f05d825dc2a02f141a2513fbeac595450b7e414fbc7c09026c2be38cc16eed873" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/readline-sync@1.4.10", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/anseki/readline-sync" + }, + { + "type": "issue-tracker", + "url": "https://github.com/anseki/readline-sync/issues" + }, + { + "type": "vcs", + "url": "git://github.com/anseki/readline-sync.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/serialize-javascript@2.1.2", + "name": "serialize-javascript", + "version": "2.1.2", + "description": "Serialize JavaScript to a superset of JSON that includes regular expressions and functions.", + "hashes": [ + { + "alg": "SHA-512", + "content": "aecf4e8201141745788d449e7176b3398b0b7eeece18adaa227ddcec83c189f7f3df65e7884a7f4d7f5799cf4b41f2b69d0d90287bd9da8ca0294194d251b88d" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/serialize-javascript@2.1.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/yahoo/serialize-javascript" + }, + { + "type": "issue-tracker", + "url": "https://github.com/yahoo/serialize-javascript/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/yahoo/serialize-javascript.git" + } + ] + }, + { + "type": "framework", + "bom-ref": "pkg:npm/svelte@3.24.0", + "name": "svelte", + "version": "3.24.0", + "description": "Cybernetically enhanced web apps", + "hashes": [ + { + "alg": "SHA-512", + "content": "5455e89ba10fd832bcde4c72e199416da6649526d922ba4d1f7a0d5e53d81c952e5b8ab53ae02bdd9a186df2154d560f0e0ac8ed8ab481070e843940b4ee2a7f" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/svelte@3.24.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sveltejs/svelte#README" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sveltejs/svelte/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sveltejs/svelte.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tmp@0.0.33", + "name": "tmp", + "version": "0.0.33", + "description": "Temporary file and directory creator", + "hashes": [ + { + "alg": "SHA-512", + "content": "8d10899688ca9d9dda75db533a3748aa846e3c4281bcd5dc198ab33bacd6657f0a7ca1299c66398df820250dc48cabaef03e1b251af4cbe7182459986c89971b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/tmp@0.0.33", + "externalReferences": [ + { + "type": "website", + "url": "http://github.com/raszi/node-tmp" + }, + { + "type": "issue-tracker", + "url": "http://github.com/raszi/node-tmp/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/raszi/node-tmp.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/os-tmpdir@1.0.2", + "name": "os-tmpdir", + "version": "1.0.2", + "description": "Node.js os.tmpdir() ponyfill", + "hashes": [ + { + "alg": "SHA-1", + "content": "bbe67406c79aa85c5cfec766fe5734555dfa1274" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/os-tmpdir@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/os-tmpdir#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/os-tmpdir/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/os-tmpdir.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/vue-sfc-parser@0.1.2", + "name": "vue-sfc-parser", + "version": "0.1.2", + "description": "Vue.js single file component parser for static analysis", + "hashes": [ + { + "alg": "SHA-512", + "content": "7ef62ee22e68c4ae09db9a986e59aca2d3083526342a13f52d6fc494a68c8a7e025d0d94ab28de520019684d99b35cd8a48286a04b8c8c463e966060865b3559" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/vue-sfc-parser@0.1.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ktsn/vue-sfc-parser" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ktsn/vue-sfc-parser/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/ktsn/vue-sfc-parser.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.mapvalues@4.6.0", + "name": "lodash.mapvalues", + "version": "4.6.0", + "description": "The lodash method `_.mapValues` exported as a module.", + "hashes": [ + { + "alg": "SHA-1", + "content": "1bafa5005de9dd6f4f26668c30ca37230cc9689c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/lodash.mapvalues@4.6.0", + "externalReferences": [ + { + "type": "website", + "url": "https://lodash.com/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/lodash/lodash/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/lodash/lodash.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/walk@2.3.9", + "name": "walk", + "version": "2.3.9", + "description": "A node port of python's os.walk", + "hashes": [ + { + "alg": "SHA-1", + "content": "31b4db6678f2ae01c39ea9fb8725a9031e558a7b" + } + ], + "purl": "pkg:npm/walk@2.3.9", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/coolaj86/node-walk" + }, + { + "type": "issue-tracker", + "url": "https://github.com/coolaj86/node-walk/issues" + }, + { + "type": "vcs", + "url": "git://github.com/coolaj86/node-walk.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/foreachasync@3.0.0", + "name": "foreachasync", + "version": "3.0.0", + "description": "A node- and browser-ready async counterpart of Array.prototype.forEach", + "hashes": [ + { + "alg": "SHA-1", + "content": "5502987dc8714be3392097f32e0071c9dee07cf6" + } + ], + "licenses": [ + { + "license": { + "name": "Apache2" + } + } + ], + "purl": "pkg:npm/foreachasync@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/FuturesJS/forEachAsync" + }, + { + "type": "issue-tracker", + "url": "https://github.com/FuturesJS/forEachAsync/issues" + }, + { + "type": "vcs", + "url": "git://github.com/FuturesJS/forEachAsync.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yargs@11.1.1", + "name": "yargs", + "version": "11.1.1", + "description": "yargs the modern, pirate-themed, successor to optimist.", + "hashes": [ + { + "alg": "SHA-512", + "content": "3d153b809ac9697bf7ab7c9067ffbf5fa281b30662690fb33a6769ad9728b8f62d420bcd537e62fbaf0ce1bd591cb66d6054f940e6c52d5f9992625873029d8b" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/yargs@11.1.1", + "externalReferences": [ + { + "type": "website", + "url": "http://yargs.js.org/" + }, + { + "type": "issue-tracker", + "url": "https://github.com/yargs/yargs/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/yargs/yargs.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cliui@4.1.0", + "name": "cliui", + "version": "4.1.0", + "description": "easily create complex multi-column command-line-interfaces", + "hashes": [ + { + "alg": "SHA-512", + "content": "e051be4521bd0cbeee130454657667dd24b7e038833dfccfd153a2130b545a513e011d84220fa14b2beb2205147e176047f52401e5b640781e3fe856ad7b3b8d" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/cliui@4.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/yargs/cliui#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/yargs/cliui/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/yargs/cliui.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@2.1.1", + "name": "string-width", + "version": "2.1.1", + "description": "Get the visual width of a string - the number of columns required to display it", + "hashes": [ + { + "alg": "SHA-512", + "content": "9cea87e7d75e0aaf52447971ab5030f39267b78c3a2af2caa9656293aa00f599255cb3483a5aa0e05db2ad3d4c55a4e302abd5c1d7de67bc3b682bc90fbba093" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string-width@2.1.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/string-width#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/string-width/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/string-width.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrap-ansi@2.1.0", + "name": "wrap-ansi", + "version": "2.1.0", + "description": "Wordwrap a string with ANSI escape codes", + "hashes": [ + { + "alg": "SHA-1", + "content": "d8fc3d284dd05794fe84973caecdd1cf824fdd85" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/wrap-ansi@2.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/chalk/wrap-ansi#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/chalk/wrap-ansi/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/chalk/wrap-ansi.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@1.0.2", + "name": "string-width", + "version": "1.0.2", + "description": "Get the visual width of a string - the number of columns required to display it", + "hashes": [ + { + "alg": "SHA-1", + "content": "118bdf5b8cdc51a2a7e70d211e07e2b0b9b107d3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string-width@1.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/string-width#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/string-width/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/string-width.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/code-point-at@1.1.0", + "name": "code-point-at", + "version": "1.1.0", + "description": "ES2015 `String#codePointAt()` ponyfill", + "hashes": [ + { + "alg": "SHA-1", + "content": "0d070b4d043a5bea33a2f1a40e2edb3d9a4ccf77" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/code-point-at@1.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/code-point-at#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/code-point-at/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/code-point-at.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@1.0.0", + "name": "is-fullwidth-code-point", + "version": "1.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "hashes": [ + { + "alg": "SHA-1", + "content": "ef9e31386f031a7f0d643af82fde50c457ef00cb" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-fullwidth-code-point@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/number-is-nan@1.0.1", + "name": "number-is-nan", + "version": "1.0.1", + "description": "ES2015 Number.isNaN() ponyfill", + "hashes": [ + { + "alg": "SHA-1", + "content": "097b602b53422a522c1afb8790318336941a011d" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/number-is-nan@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/number-is-nan#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/number-is-nan/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/number-is-nan.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/find-up@2.1.0", + "name": "find-up", + "version": "2.1.0", + "description": "Find a file by walking up parent directories", + "hashes": [ + { + "alg": "SHA-1", + "content": "45d1b7e506c717ddd482775a2b77920a3c0c57a7" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/find-up@2.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/find-up#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/find-up/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/find-up.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/locate-path@2.0.0", + "name": "locate-path", + "version": "2.0.0", + "description": "Get the first path that exists on disk of multiple paths", + "hashes": [ + { + "alg": "SHA-1", + "content": "2b568b265eec944c6d9c0de9c3dbbbca0354cd8e" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/locate-path@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/locate-path#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/locate-path/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/locate-path.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-locate@2.0.0", + "name": "p-locate", + "version": "2.0.0", + "description": "Get the first fulfilled promise that satisfies the provided testing function", + "hashes": [ + { + "alg": "SHA-1", + "content": "20a0103b222a70c8fd39cc2e580680f3dde5ec43" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/p-locate@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/p-locate#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/p-locate/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/p-locate.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-limit@1.3.0", + "name": "p-limit", + "version": "1.3.0", + "description": "Run multiple promise-returning & async functions with limited concurrency", + "hashes": [ + { + "alg": "SHA-512", + "content": "bef717b0b009f43af9ad038f93bb68650649029065d8ae09e9d00d4ac12e87a408e3525872c4bfaa14c66bd12b2145202b758d428258bf2971be3aa68aa100f5" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/p-limit@1.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/p-limit#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/p-limit/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/p-limit.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-try@1.0.0", + "name": "p-try", + "version": "1.0.0", + "description": "`Promise#try()` ponyfill - Starts a promise chain", + "hashes": [ + { + "alg": "SHA-1", + "content": "cbc79cdbaf8fd4228e13f621f2b1a237c1b207b3" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/p-try@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/p-try#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/p-try/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/p-try.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-caller-file@1.0.3", + "name": "get-caller-file", + "version": "1.0.3", + "description": "[![Build Status](https://travis-ci.org/stefanpenner/get-caller-file.svg?branch=master)](https://travis-ci.org/stefanpenner/get-caller-file) [![Build status](https://ci.appveyor.com/api/projects/status/ol2q94g1932cy14a/branch/master?svg=true)](https://ci.appveyor.com/project/embercli/get-caller-file/branch/master)", + "hashes": [ + { + "alg": "SHA-512", + "content": "dedeab553a1ea197d848677c6282c54760c992242b22252b19c8ef157da60f0ddb9fa9363adc073744cd08b6c13bec3ca93be29a10e4bfe2d2b1c6c9635bc4eb" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/get-caller-file@1.0.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/stefanpenner/get-caller-file#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/stefanpenner/get-caller-file/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/stefanpenner/get-caller-file.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/os-locale@3.1.0", + "name": "os-locale", + "version": "3.1.0", + "description": "Get the system locale", + "hashes": [ + { + "alg": "SHA-512", + "content": "67c977478c1858ce34ff9d99f92dbae6891f163f0ab76702d8c298fb1362de416cf97188ed65eefc8df4f5041061b456e228e267ecb1b3da6a121261d03a96dd" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/os-locale@3.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/os-locale#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/os-locale/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/os-locale.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lcid@2.0.0", + "name": "lcid", + "version": "2.0.0", + "description": "Mapping between standard locale identifiers and Windows locale identifiers (LCID)", + "hashes": [ + { + "alg": "SHA-512", + "content": "6af3c46fc3fc1069f05ca0a5c2c35482bc958e595c46ab4c61ae3d353b1b41a818b93d437179e5d7dd79a315a3a321ab5d1eb31ff63465cf7ac56b0f7280ca78" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/lcid@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/lcid#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/lcid/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/lcid.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/invert-kv@2.0.0", + "name": "invert-kv", + "version": "2.0.0", + "description": "Invert the key/value of an object. Example: `{foo: 'bar'}` → `{bar: 'foo'}`", + "hashes": [ + { + "alg": "SHA-512", + "content": "c0f56fff2fd043f5228ab8ffbe1de83fed56c3e0167a19a2d60e5f15618f17a22908108356b8601d132facb7dd61cc038774096c65c35b8240bb3c4494b4aa28" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/invert-kv@2.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/invert-kv#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/invert-kv/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/invert-kv.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mem@4.3.0", + "name": "mem", + "version": "4.3.0", + "description": "Memoize functions - An optimization used to speed up consecutive function calls by caching the result of calls with identical input", + "hashes": [ + { + "alg": "SHA-512", + "content": "a97d9b1b8f294ea6115660c1dfbae7ffa3d3ecb711f13ee8017ddb7fdf6ed53b759f3c587f1920a83c14c2894f957c1e3345f304e045cd2c7891fa7b28fd6cff" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/mem@4.3.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/mem#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/mem/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/mem.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/map-age-cleaner@0.1.3", + "name": "map-age-cleaner", + "version": "0.1.3", + "description": "Automatically cleanup expired items in a Map", + "hashes": [ + { + "alg": "SHA-512", + "content": "6c9cf1ea73283fa3c32cf0459a0efec5129e159bc56e832b1a5c66363f4296f5f9dcaae6bcce5b5c55c45a36f3e1ccf50059fe8d627dcff0c94b3ee1aecd30df" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/map-age-cleaner@0.1.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/SamVerschueren/map-age-cleaner#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/SamVerschueren/map-age-cleaner/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/SamVerschueren/map-age-cleaner.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-defer@1.0.0", + "name": "p-defer", + "version": "1.0.0", + "description": "Create a deferred promise", + "hashes": [ + { + "alg": "SHA-1", + "content": "9f6eb182f6c9aa8cd743004a7d4f96b196b0fb0c" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/p-defer@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/p-defer#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/p-defer/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/p-defer.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-is-promise@2.1.0", + "name": "p-is-promise", + "version": "2.1.0", + "description": "Check if something is a promise", + "hashes": [ + { + "alg": "SHA-512", + "content": "6375b4c2544f2bc64c45b36af7b978339a2d8a8780e659b5cfb6e4364c4291af0748f8d1d314569a90a673dbad89a2cff496f5783f0181e2314d6e00205e393e" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/p-is-promise@2.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/p-is-promise#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/p-is-promise/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/p-is-promise.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/require-main-filename@1.0.1", + "name": "require-main-filename", + "version": "1.0.1", + "description": "shim for require.main.filename() that works in as many environments as possible", + "hashes": [ + { + "alg": "SHA-1", + "content": "97f717b69d48784f5f526a6c5aa8ffdda055a4d1" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/require-main-filename@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/yargs/require-main-filename#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/yargs/require-main-filename/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/yargs/require-main-filename.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/y18n@3.2.1", + "name": "y18n", + "version": "3.2.1", + "description": "the bare-bones internationalization library used by yargs", + "hashes": [ + { + "alg": "SHA-1", + "content": "6d15fba884c08679c0d77e88e7759e811e07fa41" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/y18n@3.2.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/yargs/y18n" + }, + { + "type": "issue-tracker", + "url": "https://github.com/yargs/y18n/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/yargs/y18n.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yargs-parser@9.0.2", + "name": "yargs-parser", + "version": "9.0.2", + "description": "the mighty option parser used by yargs", + "hashes": [ + { + "alg": "SHA-1", + "content": "9ccf6a43460fe4ed40a9bb68f48d43b8a68cc077" + } + ], + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/yargs-parser@9.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/yargs/yargs-parser#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/yargs/yargs-parser/issues" + }, + { + "type": "vcs", + "url": "git+ssh://git@github.com/yargs/yargs-parser.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/camelcase@4.1.0", + "name": "camelcase", + "version": "4.1.0", + "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar", + "hashes": [ + { + "alg": "SHA-1", + "content": "d545635be1e33c542649c69173e5de6acfae34dd" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/camelcase@4.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/camelcase#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/camelcase/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/camelcase.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/proton-shared@1.0.0", + "name": "proton-shared", + "version": "1.0.0", + "description": "Proton shared", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/proton-shared@1.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ProtonMail/proton-shared#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ProtonMail/proton-shared/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/ProtonMail/proton-shared.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dayjs@1.8.30", + "name": "dayjs", + "version": "1.8.30", + "description": "2KB immutable date time library alternative to Moment.js with the same modern API ", + "hashes": [ + { + "alg": "SHA-512", + "content": "e6ce481ae3f96d5bc86ce5a410371f997b148f6e1f656d4d30755549d48517f916f1df9a959708f52a41282f9b684c817becf77d4a75ef2ef9ba5b2dbf9b3053" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/dayjs@1.8.30", + "externalReferences": [ + { + "type": "website", + "url": "https://day.js.org" + }, + { + "type": "issue-tracker", + "url": "https://github.com/iamkun/dayjs/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/iamkun/dayjs.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ua-parser-js@0.7.21", + "name": "ua-parser-js", + "version": "0.7.21", + "description": "Lightweight JavaScript-based user-agent string parser", + "hashes": [ + { + "alg": "SHA-512", + "content": "f8ef3faa1fd08fc0a00ba79805507290cacdb69e4679b9f8765183fe429756424d0f0cab030488ab0cfc0837feb6c008595c9c29c92eea0217274ab0c7f65769" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ua-parser-js@0.7.21", + "externalReferences": [ + { + "type": "website", + "url": "http://github.com/faisalman/ua-parser-js" + }, + { + "type": "issue-tracker", + "url": "https://github.com/faisalman/ua-parser-js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/faisalman/ua-parser-js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pt-formgenerator@1.5.0", + "name": "pt-formgenerator", + "version": "1.5.0", + "description": "Tested with: - Node.js `v11.6.0` - npm `6.7.0`", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/pt-formgenerator@1.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/push.js@1.0.12", + "name": "push.js", + "version": "1.0.12", + "description": "A compact, cross-browser solution for the Javascript Notifications API", + "hashes": [ + { + "alg": "SHA-512", + "content": "328ff392b3c3e7c85c6ccbc2ffd5af7943c6cf43c9e13e54c1024fe839cc61bcb17bb6f5c4cffdaaa9894cc983729adb6630ad2f37fdc16b5e93b800f0ef5007" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/push.js@1.0.12", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/Nickersoft/push.js" + }, + { + "type": "issue-tracker", + "url": "https://github.com/Nickersoft/push.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/Nickersoft/push.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/qrcodejs2@0.0.2", + "name": "qrcodejs2", + "version": "0.0.2", + "description": "Javsacript QRCode for all browsers", + "hashes": [ + { + "alg": "SHA-1", + "content": "465afe5e39f19facecb932c11f7a186109146ae1" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/qrcodejs2@0.0.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/davidshimjs/qrcodejs#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/davidshimjs/qrcodejs/issues" + }, + { + "type": "vcs", + "url": "git://github.com/davidshimjs/qrcodejs.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/raven-js@3.27.2", + "name": "raven-js", + "version": "3.27.2", + "description": "JavaScript client for Sentry", + "hashes": [ + { + "alg": "SHA-512", + "content": "9855907179e14451107b91de16ba0f684821967ab2ec5e44d89dc5b1a6f5f3da2776a533723c12562ede97b177e9cafa3ef4185e86753f6179092176fdacde31" + } + ], + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/raven-js@3.27.2", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/getsentry/raven-js" + }, + { + "type": "issue-tracker", + "url": "https://github.com/getsentry/raven-js/issues" + }, + { + "type": "vcs", + "url": "git://github.com/getsentry/raven-js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sieve.js@2.0.6", + "name": "sieve.js", + "version": "2.0.6", + "description": "JavaScript library to wrap sieve configuration", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/sieve.js@2.0.6", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/ProtonMail/sieve.js#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/ProtonMail/sieve.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/ProtonMail/sieve.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/squire-rte@1.8.11", + "name": "squire-rte", + "version": "1.8.11", + "description": "Squire is an HTML5 rich text editor, which provides powerful cross-browser normalisation, whilst being supremely lightweight and flexible.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/squire-rte@1.8.11", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/neilj/Squire" + }, + { + "type": "issue-tracker", + "url": "https://github.com/neilj/Squire/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/neilj/Squire.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/svg4everybody@2.1.9", + "name": "svg4everybody", + "version": "2.1.9", + "description": "Use external SVG spritemaps in any browser", + "hashes": [ + { + "alg": "SHA-1", + "content": "5bd9f6defc133859a044646d4743fabc28db7e2d" + } + ], + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "purl": "pkg:npm/svg4everybody@2.1.9", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jonathantneal/svg4everybody#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jonathantneal/svg4everybody/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jonathantneal/svg4everybody.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/text-security@1.2.0", + "name": "text-security", + "version": "1.2.0", + "description": "Cross-browser alternative to -webkit-text-security", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/text-security@1.2.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/noppa/text-security#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/noppa/text-security/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/noppa/text-security.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tooltip.js@1.3.3", + "name": "tooltip.js", + "version": "1.3.3", + "description": "A kickass library to create tooltips, based on Popper.js", + "hashes": [ + { + "alg": "SHA-512", + "content": "5d65aecbf741745fc5fd8a5113de79caa059e1574b7e24c051d3aaa14fb0266ea984994ca44ce5fe260767ea89b306de4fd546f36d9b35fb044c5f70ce6a32e4" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/tooltip.js@1.3.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/FezVrasta/popper.js#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/FezVrasta/popper.js/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/FezVrasta/popper.js.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/turndown@5.0.3", + "name": "turndown", + "version": "5.0.3", + "description": "A library that converts HTML to Markdown", + "hashes": [ + { + "alg": "SHA-512", + "content": "a68a5f19712279da6ae85e6c6912004e12b1abf6db10f5459ec0e751d8da0c622b7bd7f7fce2fd622ff23db3dc67b458503a5e92086bebae9b05f64faf036785" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/turndown@5.0.3", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/domchristie/turndown#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/domchristie/turndown/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/domchristie/turndown.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unfetch@4.1.0", + "name": "unfetch", + "version": "4.1.0", + "description": "Bare minimum fetch polyfill in 500 bytes", + "hashes": [ + { + "alg": "SHA-512", + "content": "72b3ff9f77803d427165733d4fcd3fcafd188644c4c762b50f787b0f500933a7f3b1666bc5dc91b8b374247fdd9198752cd1fc2f10a7073a0f1423db6f6886a6" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/unfetch@4.1.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/developit/unfetch" + }, + { + "type": "issue-tracker", + "url": "https://github.com/developit/unfetch/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/developit/unfetch.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/vcf@2.0.1", + "name": "vcf", + "version": "2.0.1", + "description": "Parse and construct vCards, jCards", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/vcf@2.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jhermsmeier/node-vcf" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jhermsmeier/node-vcf/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jhermsmeier/node-vcf.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/camelcase@3.0.0", + "name": "camelcase", + "version": "3.0.0", + "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar", + "hashes": [ + { + "alg": "SHA-1", + "content": "32fc4b9fcdaf845fcdf7e73bb97cac2261f0ab0a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/camelcase@3.0.0", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/sindresorhus/camelcase#readme" + }, + { + "type": "issue-tracker", + "url": "https://github.com/sindresorhus/camelcase/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/sindresorhus/camelcase.git" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/foldline@1.0.1", + "name": "foldline", + "version": "1.0.1", + "description": "Folds a long line according to the RFC 5322", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/foldline@1.0.1", + "externalReferences": [ + { + "type": "website", + "url": "https://github.com/jhermsmeier/node-foldline" + }, + { + "type": "issue-tracker", + "url": "https://github.com/jhermsmeier/node-foldline/issues" + }, + { + "type": "vcs", + "url": "git+https://github.com/jhermsmeier/node-foldline.git" + } + ] + } + ] +} \ No newline at end of file diff --git a/test/normalize/cdx-1-4-components-xxl.bom.json b/test/normalize/cdx-1-4-components-xxl.bom.json new file mode 100644 index 00000000..b97aff61 --- /dev/null +++ b/test/normalize/cdx-1-4-components-xxl.bom.json @@ -0,0 +1,219298 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.4", + "serialNumber": "urn:uuid:xxxx", + "version": 1, + "metadata": { + "component": { + "type": "application", + "name": "Acme" + } + }, + "components": [ + { + "type": "library", + "bom-ref": "pkg:deb/debian/acl@2.2.53-4?arch=amd64&distro=debian-10&package-id=3fcaa2363534185d", + "publisher": "Guillem Jover ", + "name": "acl", + "version": "2.2.53-4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:acl:acl:2.2.53-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/acl@2.2.53-4?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/adduser@3.118?arch=all&distro=debian-10&package-id=3e9282034226b93f", + "publisher": "Debian Adduser Developers ", + "name": "adduser", + "version": "3.118", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:adduser:adduser:3.118:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/adduser@3.118?arch=all&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/apt@1.8.2.2?arch=amd64&distro=debian-10&package-id=a82ef7ad8a96994c", + "publisher": "APT Development Team ", + "name": "apt", + "version": "1.8.2.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:apt:apt:1.8.2.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/apt@1.8.2.2?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/base-files@10.3+deb10u9?arch=amd64&distro=debian-10&package-id=76e37c6412b31348", + "publisher": "Santiago Vila ", + "name": "base-files", + "version": "10.3+deb10u9", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:10.3\\+deb10u9:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/base-files@10.3+deb10u9?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/base-passwd@3.5.46?arch=amd64&distro=debian-10&package-id=8c36ab474a82d3ae", + "publisher": "Colin Watson ", + "name": "base-passwd", + "version": "3.5.46", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "PD" + } + } + ], + "cpe": "cpe:2.3:a:base-passwd:base-passwd:3.5.46:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/base-passwd@3.5.46?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/bash@5.0-4?arch=amd64&distro=debian-10&package-id=1307b253f0761292", + "publisher": "Matthias Klose ", + "name": "bash", + "version": "5.0-4", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:bash:bash:5.0-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/bash@5.0-4?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/bsdutils@1:2.33.1-0.1?arch=amd64&upstream=util-linux%402.33.1-0.1&distro=debian-10&package-id=344ffe16352c1b24", + "publisher": "LaMont Jones ", + "name": "bsdutils", + "version": "1:2.33.1-0.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:bsdutils:bsdutils:1\\:2.33.1-0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/bsdutils@1:2.33.1-0.1?arch=amd64&upstream=util-linux%402.33.1-0.1&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ca-certificates@20200601~deb10u2?arch=all&distro=debian-10&package-id=596c81a431661de3", + "publisher": "Julien Cristau ", + "name": "ca-certificates", + "version": "20200601~deb10u2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20200601\\~deb10u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ca-certificates@20200601~deb10u2?arch=all&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/coreutils@8.30-3?arch=amd64&distro=debian-10&package-id=46b6002891a4d405", + "publisher": "Michael Stone ", + "name": "coreutils", + "version": "8.30-3", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:coreutils:coreutils:8.30-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/coreutils@8.30-3?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/curl@7.64.0-4+deb10u2?arch=amd64&distro=debian-10&package-id=d0effa75c99b912a", + "publisher": "Alessandro Ghedini ", + "name": "curl", + "version": "7.64.0-4+deb10u2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:curl:curl:7.64.0-4\\+deb10u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/curl@7.64.0-4+deb10u2?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/dash@0.5.10.2-5?arch=amd64&distro=debian-10&package-id=567db85af6d6aaf3", + "publisher": "Andrej Shadura ", + "name": "dash", + "version": "0.5.10.2-5", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:dash:dash:0.5.10.2-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/dash@0.5.10.2-5?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/debconf@1.5.71?arch=all&distro=debian-10&package-id=9470bfee238208a1", + "publisher": "Debconf Developers ", + "name": "debconf", + "version": "1.5.71", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:debconf:debconf:1.5.71:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/debconf@1.5.71?arch=all&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/debian-archive-keyring@2019.1+deb10u1?arch=all&distro=debian-10&package-id=f9b380da454eddb4", + "publisher": "Debian Release Team ", + "name": "debian-archive-keyring", + "version": "2019.1+deb10u1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:debian-archive-keyring:debian-archive-keyring:2019.1\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/debian-archive-keyring@2019.1+deb10u1?arch=all&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/debianutils@4.8.6.1?arch=amd64&distro=debian-10&package-id=a28bc35fdac63cd4", + "publisher": "Clint Adams ", + "name": "debianutils", + "version": "4.8.6.1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:debianutils:debianutils:4.8.6.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/debianutils@4.8.6.1?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/diffutils@1:3.7-3?arch=amd64&distro=debian-10&package-id=6d51f5deb90deb06", + "publisher": "Santiago Vila ", + "name": "diffutils", + "version": "1:3.7-3", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:diffutils:diffutils:1\\:3.7-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/diffutils@1:3.7-3?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/dpkg@1.19.7?arch=amd64&distro=debian-10&package-id=826669ee9d8b4b93", + "publisher": "Dpkg Developers ", + "name": "dpkg", + "version": "1.19.7", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain-md5" + } + }, + { + "license": { + "name": "public-domain-s-s-d" + } + } + ], + "cpe": "cpe:2.3:a:dpkg:dpkg:1.19.7:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/dpkg@1.19.7?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/fdisk@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10&package-id=743bbe9c435d52f3", + "publisher": "LaMont Jones ", + "name": "fdisk", + "version": "2.33.1-0.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:fdisk:fdisk:2.33.1-0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/fdisk@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/findutils@4.6.0+git+20190209-2?arch=amd64&distro=debian-10&package-id=38adf8ca435355da", + "publisher": "Andreas Metzler ", + "name": "findutils", + "version": "4.6.0+git+20190209-2", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:findutils:findutils:4.6.0\\+git\\+20190209-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/findutils@4.6.0+git+20190209-2?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gcc-8-base@8.3.0-6?arch=amd64&upstream=gcc-8&distro=debian-10&package-id=a958e0e726fb519d", + "publisher": "Debian GCC Maintainers ", + "name": "gcc-8-base", + "version": "8.3.0-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:gcc-8-base:gcc-8-base:8.3.0-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gcc-8-base@8.3.0-6?arch=amd64&upstream=gcc-8&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/opencontainers/runc@v1.0.0-rc95?package-id=9da9932a4449cb95", + "name": "github.com/opencontainers/runc", + "version": "v1.0.0-rc95", + "cpe": "cpe:2.3:a:opencontainers:runc:v1.0.0-rc95:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/opencontainers/runc@v1.0.0-rc95" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/tianon/gosu@(devel)?package-id=19d52095a2282c58", + "name": "github.com/tianon/gosu", + "version": "(devel)", + "cpe": "cpe:2.3:a:tianon:gosu:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/tianon/gosu@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20210426230700-d19ff857e887?package-id=a04162bbb33c282d", + "name": "golang.org/x/sys", + "version": "v0.0.0-20210426230700-d19ff857e887", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20210426230700-d19ff857e887:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20210426230700-d19ff857e887" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gpgv@2.2.12-1+deb10u1?arch=amd64&upstream=gnupg2&distro=debian-10&package-id=1ffde2f3ed358894", + "publisher": "Debian GnuPG Maintainers ", + "name": "gpgv", + "version": "2.2.12-1+deb10u1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + }, + { + "license": { + "name": "TinySCHEME" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:gpgv:gpgv:2.2.12-1\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gpgv@2.2.12-1+deb10u1?arch=amd64&upstream=gnupg2&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/grep@3.3-1?arch=amd64&distro=debian-10&package-id=e19c01918650b778", + "publisher": "Anibal Monsalve Salazar ", + "name": "grep", + "version": "3.3-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:grep:grep:3.3-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/grep@3.3-1?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gzip@1.9-3?arch=amd64&distro=debian-10&package-id=7de3a8e52e2d2e8b", + "publisher": "Bdale Garbee ", + "name": "gzip", + "version": "1.9-3", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:gzip:gzip:1.9-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gzip@1.9-3?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/hostname@3.21?arch=amd64&distro=debian-10&package-id=9deb64db83d5e7c0", + "publisher": "Michael Meskes ", + "name": "hostname", + "version": "3.21", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:hostname:hostname:3.21:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/hostname@3.21?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/init-system-helpers@1.56+nmu1?arch=all&distro=debian-10&package-id=7d7ed30b1f37bb0", + "publisher": "Debian systemd Maintainers ", + "name": "init-system-helpers", + "version": "1.56+nmu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:init-system-helpers:init-system-helpers:1.56\\+nmu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/init-system-helpers@1.56+nmu1?arch=all&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/insserv@1.18.0-2?arch=amd64&distro=debian-10&package-id=2787dc148b5aa2a", + "publisher": "Debian sysvinit maintainers ", + "name": "insserv", + "version": "1.18.0-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:insserv:insserv:1.18.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/insserv@1.18.0-2?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/jq@1.5+dfsg-2+b1?arch=amd64&upstream=jq%401.5+dfsg-2&distro=debian-10&package-id=9d5f6e4d8476a849", + "publisher": "ChangZhuo Chen (陳昌倬) ", + "name": "jq", + "version": "1.5+dfsg-2+b1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "CC-BY-3.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jq:jq:1.5\\+dfsg-2\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/jq@1.5+dfsg-2+b1?arch=amd64&upstream=jq%401.5+dfsg-2&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libacl1@2.2.53-4?arch=amd64&upstream=acl&distro=debian-10&package-id=a6d0197dab539e98", + "publisher": "Guillem Jover ", + "name": "libacl1", + "version": "2.2.53-4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libacl1:libacl1:2.2.53-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libacl1@2.2.53-4?arch=amd64&upstream=acl&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libapt-pkg5.0@1.8.2.2?arch=amd64&upstream=apt&distro=debian-10&package-id=1ab470673f1aff9d", + "publisher": "APT Development Team ", + "name": "libapt-pkg5.0", + "version": "1.8.2.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libapt-pkg5.0:libapt-pkg5.0:1.8.2.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libapt-pkg5.0@1.8.2.2?arch=amd64&upstream=apt&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libattr1@1:2.4.48-4?arch=amd64&upstream=attr&distro=debian-10&package-id=26f28a682fbbe026", + "publisher": "Guillem Jover ", + "name": "libattr1", + "version": "1:2.4.48-4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libattr1:libattr1:1\\:2.4.48-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libattr1@1:2.4.48-4?arch=amd64&upstream=attr&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libaudit-common@1:2.8.4-3?arch=all&upstream=audit&distro=debian-10&package-id=eacb6fb921d6e85e", + "publisher": "Laurent Bigonville ", + "name": "libaudit-common", + "version": "1:2.8.4-3", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit-common:libaudit-common:1\\:2.8.4-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libaudit-common@1:2.8.4-3?arch=all&upstream=audit&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libaudit1@1:2.8.4-3?arch=amd64&upstream=audit&distro=debian-10&package-id=74f57d9ce0c68d86", + "publisher": "Laurent Bigonville ", + "name": "libaudit1", + "version": "1:2.8.4-3", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit1:libaudit1:1\\:2.8.4-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libaudit1@1:2.8.4-3?arch=amd64&upstream=audit&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libblkid1@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10&package-id=c70296289994443b", + "publisher": "LaMont Jones ", + "name": "libblkid1", + "version": "2.33.1-0.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libblkid1:libblkid1:2.33.1-0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libblkid1@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libbz2-1.0@1.0.6-9.2~deb10u1?arch=amd64&upstream=bzip2&distro=debian-10&package-id=2cf51f0ebe123d92", + "publisher": "Anibal Monsalve Salazar ", + "name": "libbz2-1.0", + "version": "1.0.6-9.2~deb10u1", + "licenses": [ + { + "license": { + "name": "BSD-variant" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libbz2-1.0:libbz2-1.0:1.0.6-9.2\\~deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libbz2-1.0@1.0.6-9.2~deb10u1?arch=amd64&upstream=bzip2&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libc-bin@2.28-10?arch=amd64&upstream=glibc&distro=debian-10&package-id=e79c24d81f90a0f7", + "publisher": "GNU Libc Maintainers ", + "name": "libc-bin", + "version": "2.28-10", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc-bin:libc-bin:2.28-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libc-bin@2.28-10?arch=amd64&upstream=glibc&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libc6@2.28-10?arch=amd64&upstream=glibc&distro=debian-10&package-id=b5ff55594183baf5", + "publisher": "GNU Libc Maintainers ", + "name": "libc6", + "version": "2.28-10", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc6:libc6:2.28-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libc6@2.28-10?arch=amd64&upstream=glibc&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcap-ng0@0.7.9-2?arch=amd64&upstream=libcap-ng&distro=debian-10&package-id=801e27b4655082f1", + "publisher": "Pierre Chifflier ", + "name": "libcap-ng0", + "version": "0.7.9-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libcap-ng0:libcap-ng0:0.7.9-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcap-ng0@0.7.9-2?arch=amd64&upstream=libcap-ng&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcom-err2@1.44.5-1+deb10u3?arch=amd64&upstream=e2fsprogs&distro=debian-10&package-id=c05feef9d71ff201", + "publisher": "Theodore Y. Ts'o ", + "name": "libcom-err2", + "version": "1.44.5-1+deb10u3", + "cpe": "cpe:2.3:a:libcom-err2:libcom-err2:1.44.5-1\\+deb10u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcom-err2@1.44.5-1+deb10u3?arch=amd64&upstream=e2fsprogs&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcurl4@7.64.0-4+deb10u2?arch=amd64&upstream=curl&distro=debian-10&package-id=f545f78b08ad34e8", + "publisher": "Alessandro Ghedini ", + "name": "libcurl4", + "version": "7.64.0-4+deb10u2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libcurl4:libcurl4:7.64.0-4\\+deb10u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcurl4@7.64.0-4+deb10u2?arch=amd64&upstream=curl&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libdb5.3@5.3.28+dfsg1-0.5?arch=amd64&upstream=db5.3&distro=debian-10&package-id=5f1d8daf8bc92e9d", + "publisher": "Debian Berkeley DB Team ", + "name": "libdb5.3", + "version": "5.3.28+dfsg1-0.5", + "cpe": "cpe:2.3:a:libdb5.3:libdb5.3:5.3.28\\+dfsg1-0.5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libdb5.3@5.3.28+dfsg1-0.5?arch=amd64&upstream=db5.3&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libdebconfclient0@0.249?arch=amd64&upstream=cdebconf&distro=debian-10&package-id=6872b9d4842b81ec", + "publisher": "Debian Install System Team ", + "name": "libdebconfclient0", + "version": "0.249", + "cpe": "cpe:2.3:a:libdebconfclient0:libdebconfclient0:0.249:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libdebconfclient0@0.249?arch=amd64&upstream=cdebconf&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libfdisk1@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10&package-id=6c6e62c52a86ba09", + "publisher": "LaMont Jones ", + "name": "libfdisk1", + "version": "2.33.1-0.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libfdisk1:libfdisk1:2.33.1-0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libfdisk1@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libffi6@3.2.1-9?arch=amd64&upstream=libffi&distro=debian-10&package-id=40f6d811db6b6459", + "publisher": "Debian GCC Maintainers ", + "name": "libffi6", + "version": "3.2.1-9", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libffi6:libffi6:3.2.1-9:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libffi6@3.2.1-9?arch=amd64&upstream=libffi&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgcc1@1:8.3.0-6?arch=amd64&upstream=gcc-8%408.3.0-6&distro=debian-10&package-id=a4ec20e9bb10a790", + "publisher": "Debian GCC Maintainers ", + "name": "libgcc1", + "version": "1:8.3.0-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcc1:libgcc1:1\\:8.3.0-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgcc1@1:8.3.0-6?arch=amd64&upstream=gcc-8%408.3.0-6&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgcrypt20@1.8.4-5?arch=amd64&distro=debian-10&package-id=45f715c434cb0ae3", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libgcrypt20", + "version": "1.8.4-5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcrypt20:libgcrypt20:1.8.4-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgcrypt20@1.8.4-5?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgmp10@2:6.1.2+dfsg-4?arch=amd64&upstream=gmp&distro=debian-10&package-id=8681d22eff791901", + "publisher": "Debian Science Team ", + "name": "libgmp10", + "version": "2:6.1.2+dfsg-4", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgmp10:libgmp10:2\\:6.1.2\\+dfsg-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgmp10@2:6.1.2+dfsg-4?arch=amd64&upstream=gmp&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgnutls30@3.6.7-4+deb10u6?arch=amd64&upstream=gnutls28&distro=debian-10&package-id=1c198be275868dee", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libgnutls30", + "version": "3.6.7-4+deb10u6", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPLv3+" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "name": "LGPLv3+_or_GPLv2+" + } + }, + { + "license": { + "name": "The" + } + } + ], + "cpe": "cpe:2.3:a:libgnutls30:libgnutls30:3.6.7-4\\+deb10u6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgnutls30@3.6.7-4+deb10u6?arch=amd64&upstream=gnutls28&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgpg-error0@1.35-1?arch=amd64&upstream=libgpg-error&distro=debian-10&package-id=e650eaf4629b1d02", + "publisher": "Debian GnuPG Maintainers ", + "name": "libgpg-error0", + "version": "1.35-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "g10-permissive" + } + } + ], + "cpe": "cpe:2.3:a:libgpg-error0:libgpg-error0:1.35-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgpg-error0@1.35-1?arch=amd64&upstream=libgpg-error&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgssapi-krb5-2@1.17-3+deb10u1?arch=amd64&upstream=krb5&distro=debian-10&package-id=915cbd691e27493a", + "publisher": "Sam Hartman ", + "name": "libgssapi-krb5-2", + "version": "1.17-3+deb10u1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.17-3\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgssapi-krb5-2@1.17-3+deb10u1?arch=amd64&upstream=krb5&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libhogweed4@3.4.1-1?arch=amd64&upstream=nettle&distro=debian-10&package-id=f512a45c8273c1a3", + "publisher": "Magnus Holmgren ", + "name": "libhogweed4", + "version": "3.4.1-1", + "licenses": [ + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libhogweed4:libhogweed4:3.4.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libhogweed4@3.4.1-1?arch=amd64&upstream=nettle&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libidn2-0@2.0.5-1+deb10u1?arch=amd64&upstream=libidn2&distro=debian-10&package-id=fb57203f630b9840", + "publisher": "Debian Libidn team ", + "name": "libidn2-0", + "version": "2.0.5-1+deb10u1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "Unicode" + } + } + ], + "cpe": "cpe:2.3:a:libidn2-0:libidn2-0:2.0.5-1\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libidn2-0@2.0.5-1+deb10u1?arch=amd64&upstream=libidn2&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libjq1@1.5+dfsg-2+b1?arch=amd64&upstream=jq%401.5+dfsg-2&distro=debian-10&package-id=c98431b078a20aed", + "publisher": "ChangZhuo Chen (陳昌倬) ", + "name": "libjq1", + "version": "1.5+dfsg-2+b1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "CC-BY-3.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libjq1:libjq1:1.5\\+dfsg-2\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libjq1@1.5+dfsg-2+b1?arch=amd64&upstream=jq%401.5+dfsg-2&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libk5crypto3@1.17-3+deb10u1?arch=amd64&upstream=krb5&distro=debian-10&package-id=f997918d35a8c2d1", + "publisher": "Sam Hartman ", + "name": "libk5crypto3", + "version": "1.17-3+deb10u1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libk5crypto3:libk5crypto3:1.17-3\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libk5crypto3@1.17-3+deb10u1?arch=amd64&upstream=krb5&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libkeyutils1@1.6-6?arch=amd64&upstream=keyutils&distro=debian-10&package-id=f3eaa7599631bb13", + "publisher": "Christian Kastner ", + "name": "libkeyutils1", + "version": "1.6-6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libkeyutils1:libkeyutils1:1.6-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libkeyutils1@1.6-6?arch=amd64&upstream=keyutils&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libkrb5-3@1.17-3+deb10u1?arch=amd64&upstream=krb5&distro=debian-10&package-id=37df1f951aafc2c0", + "publisher": "Sam Hartman ", + "name": "libkrb5-3", + "version": "1.17-3+deb10u1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5-3:libkrb5-3:1.17-3\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libkrb5-3@1.17-3+deb10u1?arch=amd64&upstream=krb5&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libkrb5support0@1.17-3+deb10u1?arch=amd64&upstream=krb5&distro=debian-10&package-id=3a2c445f0ccc37e2", + "publisher": "Sam Hartman ", + "name": "libkrb5support0", + "version": "1.17-3+deb10u1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5support0:libkrb5support0:1.17-3\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libkrb5support0@1.17-3+deb10u1?arch=amd64&upstream=krb5&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libldap-2.4-2@2.4.47+dfsg-3+deb10u6?arch=amd64&upstream=openldap&distro=debian-10&package-id=dd6f13877960c5cd", + "publisher": "Debian OpenLDAP Maintainers ", + "name": "libldap-2.4-2", + "version": "2.4.47+dfsg-3+deb10u6", + "cpe": "cpe:2.3:a:libldap-2.4-2:libldap-2.4-2:2.4.47\\+dfsg-3\\+deb10u6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libldap-2.4-2@2.4.47+dfsg-3+deb10u6?arch=amd64&upstream=openldap&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libldap-common@2.4.47+dfsg-3+deb10u6?arch=all&upstream=openldap&distro=debian-10&package-id=3fbd1c0c811297ae", + "publisher": "Debian OpenLDAP Maintainers ", + "name": "libldap-common", + "version": "2.4.47+dfsg-3+deb10u6", + "cpe": "cpe:2.3:a:libldap-common:libldap-common:2.4.47\\+dfsg-3\\+deb10u6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libldap-common@2.4.47+dfsg-3+deb10u6?arch=all&upstream=openldap&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/liblz4-1@1.8.3-1+deb10u1?arch=amd64&upstream=lz4&distro=debian-10&package-id=3703c0e5f7c5fec2", + "publisher": "Nobuhiro Iwamatsu ", + "name": "liblz4-1", + "version": "1.8.3-1+deb10u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:liblz4-1:liblz4-1:1.8.3-1\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/liblz4-1@1.8.3-1+deb10u1?arch=amd64&upstream=lz4&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/liblzma5@5.2.4-1?arch=amd64&upstream=xz-utils&distro=debian-10&package-id=711120f227a4ca8", + "publisher": "Jonathan Nieder ", + "name": "liblzma5", + "version": "5.2.4-1", + "licenses": [ + { + "license": { + "name": "Autoconf" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "PD" + } + }, + { + "license": { + "name": "PD-debian" + } + }, + { + "license": { + "name": "config-h" + } + }, + { + "license": { + "name": "noderivs" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-nowarranty" + } + }, + { + "license": { + "name": "probably-PD" + } + } + ], + "cpe": "cpe:2.3:a:liblzma5:liblzma5:5.2.4-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/liblzma5@5.2.4-1?arch=amd64&upstream=xz-utils&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libmount1@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10&package-id=e7866651c1082fc0", + "publisher": "LaMont Jones ", + "name": "libmount1", + "version": "2.33.1-0.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmount1:libmount1:2.33.1-0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libmount1@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libncurses6@6.1+20181013-2+deb10u2?arch=amd64&upstream=ncurses&distro=debian-10&package-id=1104b89b3ce7b78c", + "publisher": "Craig Small ", + "name": "libncurses6", + "version": "6.1+20181013-2+deb10u2", + "cpe": "cpe:2.3:a:libncurses6:libncurses6:6.1\\+20181013-2\\+deb10u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libncurses6@6.1+20181013-2+deb10u2?arch=amd64&upstream=ncurses&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libncursesw6@6.1+20181013-2+deb10u2?arch=amd64&upstream=ncurses&distro=debian-10&package-id=71854d05b1ca05ab", + "publisher": "Craig Small ", + "name": "libncursesw6", + "version": "6.1+20181013-2+deb10u2", + "cpe": "cpe:2.3:a:libncursesw6:libncursesw6:6.1\\+20181013-2\\+deb10u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libncursesw6@6.1+20181013-2+deb10u2?arch=amd64&upstream=ncurses&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libnettle6@3.4.1-1?arch=amd64&upstream=nettle&distro=debian-10&package-id=9959b995ca1caa9b", + "publisher": "Magnus Holmgren ", + "name": "libnettle6", + "version": "3.4.1-1", + "licenses": [ + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libnettle6:libnettle6:3.4.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libnettle6@3.4.1-1?arch=amd64&upstream=nettle&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libnghttp2-14@1.36.0-2+deb10u1?arch=amd64&upstream=nghttp2&distro=debian-10&package-id=5390eaa0e24068d", + "publisher": "Tomasz Buchert ", + "name": "libnghttp2-14", + "version": "1.36.0-2+deb10u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "SIL-OFL-1.1" + } + }, + { + "license": { + "name": "all-permissive" + } + } + ], + "cpe": "cpe:2.3:a:libnghttp2-14:libnghttp2-14:1.36.0-2\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libnghttp2-14@1.36.0-2+deb10u1?arch=amd64&upstream=nghttp2&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libonig5@6.9.1-1?arch=amd64&upstream=libonig&distro=debian-10&package-id=a95c90e4b31b4d9f", + "publisher": "Jörg Frings-Fürst ", + "name": "libonig5", + "version": "6.9.1-1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libonig5:libonig5:6.9.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libonig5@6.9.1-1?arch=amd64&upstream=libonig&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libp11-kit0@0.23.15-2+deb10u1?arch=amd64&upstream=p11-kit&distro=debian-10&package-id=d609c3d39a184627", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libp11-kit0", + "version": "0.23.15-2+deb10u1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "ISC+IBM" + } + }, + { + "license": { + "name": "permissive-like-automake-output" + } + }, + { + "license": { + "name": "same-as-rest-of-p11kit" + } + } + ], + "cpe": "cpe:2.3:a:libp11-kit0:libp11-kit0:0.23.15-2\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libp11-kit0@0.23.15-2+deb10u1?arch=amd64&upstream=p11-kit&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam-modules@1.3.1-5?arch=amd64&upstream=pam&distro=debian-10&package-id=aab3cfb1d218fd23", + "publisher": "Steve Langasek ", + "name": "libpam-modules", + "version": "1.3.1-5", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules:libpam-modules:1.3.1-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam-modules@1.3.1-5?arch=amd64&upstream=pam&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam-modules-bin@1.3.1-5?arch=amd64&upstream=pam&distro=debian-10&package-id=12161ce3bab02f2", + "publisher": "Steve Langasek ", + "name": "libpam-modules-bin", + "version": "1.3.1-5", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules-bin:libpam-modules-bin:1.3.1-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam-modules-bin@1.3.1-5?arch=amd64&upstream=pam&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam-runtime@1.3.1-5?arch=all&upstream=pam&distro=debian-10&package-id=6db7f7079130ac03", + "publisher": "Steve Langasek ", + "name": "libpam-runtime", + "version": "1.3.1-5", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-runtime:libpam-runtime:1.3.1-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam-runtime@1.3.1-5?arch=all&upstream=pam&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam0g@1.3.1-5?arch=amd64&upstream=pam&distro=debian-10&package-id=91c506d4399b261f", + "publisher": "Steve Langasek ", + "name": "libpam0g", + "version": "1.3.1-5", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam0g:libpam0g:1.3.1-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam0g@1.3.1-5?arch=amd64&upstream=pam&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpcre3@2:8.39-12?arch=amd64&upstream=pcre3&distro=debian-10&package-id=d463b0783493ae72", + "publisher": "Matthew Vernon ", + "name": "libpcre3", + "version": "2:8.39-12", + "cpe": "cpe:2.3:a:libpcre3:libpcre3:2\\:8.39-12:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpcre3@2:8.39-12?arch=amd64&upstream=pcre3&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libprocps7@2:3.3.15-2?arch=amd64&upstream=procps&distro=debian-10&package-id=12fb64afab9e657e", + "publisher": "Craig Small ", + "name": "libprocps7", + "version": "2:3.3.15-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libprocps7:libprocps7:2\\:3.3.15-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libprocps7@2:3.3.15-2?arch=amd64&upstream=procps&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpsl5@0.20.2-2?arch=amd64&upstream=libpsl&distro=debian-10&package-id=65dd9d04d79d4653", + "publisher": "Tim Rühsen ", + "name": "libpsl5", + "version": "0.20.2-2", + "licenses": [ + { + "license": { + "name": "Chromium" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libpsl5:libpsl5:0.20.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpsl5@0.20.2-2?arch=amd64&upstream=libpsl&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/librtmp1@2.4+20151223.gitfa8646d.1-2?arch=amd64&upstream=rtmpdump&distro=debian-10&package-id=29db333dac4810d3", + "publisher": "Debian Multimedia Maintainers ", + "name": "librtmp1", + "version": "2.4+20151223.gitfa8646d.1-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:librtmp1:librtmp1:2.4\\+20151223.gitfa8646d.1-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/librtmp1@2.4+20151223.gitfa8646d.1-2?arch=amd64&upstream=rtmpdump&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsasl2-2@2.1.27+dfsg-1+deb10u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-10&package-id=65bf8764cf5e5a05", + "publisher": "Debian Cyrus Team ", + "name": "libsasl2-2", + "version": "2.1.27+dfsg-1+deb10u1", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-2:libsasl2-2:2.1.27\\+dfsg-1\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsasl2-2@2.1.27+dfsg-1+deb10u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsasl2-modules-db@2.1.27+dfsg-1+deb10u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-10&package-id=e3fafef9649e8076", + "publisher": "Debian Cyrus Team ", + "name": "libsasl2-modules-db", + "version": "2.1.27+dfsg-1+deb10u1", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-modules-db:libsasl2-modules-db:2.1.27\\+dfsg-1\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsasl2-modules-db@2.1.27+dfsg-1+deb10u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libseccomp2@2.3.3-4?arch=amd64&upstream=libseccomp&distro=debian-10&package-id=b751700bd628a765", + "publisher": "Kees Cook ", + "name": "libseccomp2", + "version": "2.3.3-4", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libseccomp2:libseccomp2:2.3.3-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libseccomp2@2.3.3-4?arch=amd64&upstream=libseccomp&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libselinux1@2.8-1+b1?arch=amd64&upstream=libselinux%402.8-1&distro=debian-10&package-id=123a35c7043b0a0", + "publisher": "Debian SELinux maintainers ", + "name": "libselinux1", + "version": "2.8-1+b1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libselinux1:libselinux1:2.8-1\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libselinux1@2.8-1+b1?arch=amd64&upstream=libselinux%402.8-1&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsemanage-common@2.8-2?arch=all&upstream=libsemanage&distro=debian-10&package-id=720058c21890c44f", + "publisher": "Debian SELinux maintainers ", + "name": "libsemanage-common", + "version": "2.8-2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage-common:libsemanage-common:2.8-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsemanage-common@2.8-2?arch=all&upstream=libsemanage&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsemanage1@2.8-2?arch=amd64&upstream=libsemanage&distro=debian-10&package-id=cd3c06cc7a1130a4", + "publisher": "Debian SELinux maintainers ", + "name": "libsemanage1", + "version": "2.8-2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage1:libsemanage1:2.8-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsemanage1@2.8-2?arch=amd64&upstream=libsemanage&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsepol1@2.8-1?arch=amd64&upstream=libsepol&distro=debian-10&package-id=b33fd215afdc5714", + "publisher": "Debian SELinux maintainers ", + "name": "libsepol1", + "version": "2.8-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsepol1:libsepol1:2.8-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsepol1@2.8-1?arch=amd64&upstream=libsepol&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsmartcols1@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10&package-id=fc03f42224a52138", + "publisher": "LaMont Jones ", + "name": "libsmartcols1", + "version": "2.33.1-0.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsmartcols1:libsmartcols1:2.33.1-0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsmartcols1@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libssh2-1@1.8.0-2.1?arch=amd64&upstream=libssh2&distro=debian-10&package-id=e6614550b3c1af75", + "publisher": "Mikhail Gusarov ", + "name": "libssh2-1", + "version": "1.8.0-2.1", + "licenses": [ + { + "license": { + "name": "BSD3" + } + } + ], + "cpe": "cpe:2.3:a:libssh2-1:libssh2-1:1.8.0-2.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libssh2-1@1.8.0-2.1?arch=amd64&upstream=libssh2&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libssl1.1@1.1.1d-0+deb10u6?arch=amd64&upstream=openssl&distro=debian-10&package-id=d9b0754ac1e35c28", + "publisher": "Debian OpenSSL Team ", + "name": "libssl1.1", + "version": "1.1.1d-0+deb10u6", + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1d-0\\+deb10u6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libssl1.1@1.1.1d-0+deb10u6?arch=amd64&upstream=openssl&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libstdc++6@8.3.0-6?arch=amd64&upstream=gcc-8&distro=debian-10&package-id=d05459fba83fc410", + "publisher": "Debian GCC Maintainers ", + "name": "libstdc++6", + "version": "8.3.0-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:8.3.0-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libstdc++6@8.3.0-6?arch=amd64&upstream=gcc-8&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsystemd0@241-7~deb10u7?arch=amd64&upstream=systemd&distro=debian-10&package-id=a0b3dfe941eedc73", + "publisher": "Debian systemd Maintainers ", + "name": "libsystemd0", + "version": "241-7~deb10u7", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsystemd0:libsystemd0:241-7\\~deb10u7:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsystemd0@241-7~deb10u7?arch=amd64&upstream=systemd&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtasn1-6@4.13-3?arch=amd64&distro=debian-10&package-id=692d7710a71ec82b", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libtasn1-6", + "version": "4.13-3", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtasn1-6:libtasn1-6:4.13-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtasn1-6@4.13-3?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtinfo6@6.1+20181013-2+deb10u2?arch=amd64&upstream=ncurses&distro=debian-10&package-id=9e8c05e586cbb968", + "publisher": "Craig Small ", + "name": "libtinfo6", + "version": "6.1+20181013-2+deb10u2", + "cpe": "cpe:2.3:a:libtinfo6:libtinfo6:6.1\\+20181013-2\\+deb10u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtinfo6@6.1+20181013-2+deb10u2?arch=amd64&upstream=ncurses&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libudev1@241-7~deb10u7?arch=amd64&upstream=systemd&distro=debian-10&package-id=b09ff6ad121b7d3", + "publisher": "Debian systemd Maintainers ", + "name": "libudev1", + "version": "241-7~deb10u7", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libudev1:libudev1:241-7\\~deb10u7:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libudev1@241-7~deb10u7?arch=amd64&upstream=systemd&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libunistring2@0.9.10-1?arch=amd64&upstream=libunistring&distro=debian-10&package-id=b394fd46c85f8bb7", + "publisher": "Jörg Frings-Fürst ", + "name": "libunistring2", + "version": "0.9.10-1", + "licenses": [ + { + "license": { + "name": "FreeSoftware" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GFDL-1.2+" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libunistring2:libunistring2:0.9.10-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libunistring2@0.9.10-1?arch=amd64&upstream=libunistring&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libuuid1@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10&package-id=69873dc165cbbd6e", + "publisher": "LaMont Jones ", + "name": "libuuid1", + "version": "2.33.1-0.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libuuid1:libuuid1:2.33.1-0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libuuid1@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libzstd1@1.3.8+dfsg-3+deb10u2?arch=amd64&upstream=libzstd&distro=debian-10&package-id=b90d64adc03a2a50", + "publisher": "Debian Med Packaging Team ", + "name": "libzstd1", + "version": "1.3.8+dfsg-3+deb10u2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libzstd1:libzstd1:1.3.8\\+dfsg-3\\+deb10u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libzstd1@1.3.8+dfsg-3+deb10u2?arch=amd64&upstream=libzstd&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/login@1:4.5-1.1?arch=amd64&upstream=shadow&distro=debian-10&package-id=98839d2adee55b56", + "publisher": "Shadow package maintainers ", + "name": "login", + "version": "1:4.5-1.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:login:login:1\\:4.5-1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/login@1:4.5-1.1?arch=amd64&upstream=shadow&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/lsb-base@10.2019051400?arch=all&upstream=lsb&distro=debian-10&package-id=4986087322566df", + "publisher": "Debian LSB Team ", + "name": "lsb-base", + "version": "10.2019051400", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:lsb-base:lsb-base:10.2019051400:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/lsb-base@10.2019051400?arch=all&upstream=lsb&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/mawk@1.3.3-17+b3?arch=amd64&upstream=mawk%401.3.3-17&distro=debian-10&package-id=2aa71b5a2c22f638", + "publisher": "Steve Langasek ", + "name": "mawk", + "version": "1.3.3-17+b3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:mawk:mawk:1.3.3-17\\+b3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/mawk@1.3.3-17+b3?arch=amd64&upstream=mawk%401.3.3-17&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/mount@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10&package-id=d4b73315d7d26098", + "publisher": "LaMont Jones ", + "name": "mount", + "version": "2.33.1-0.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:mount:mount:2.33.1-0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/mount@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ncurses-base@6.1+20181013-2+deb10u2?arch=all&upstream=ncurses&distro=debian-10&package-id=a9450a198d2ae455", + "publisher": "Craig Small ", + "name": "ncurses-base", + "version": "6.1+20181013-2+deb10u2", + "cpe": "cpe:2.3:a:ncurses-base:ncurses-base:6.1\\+20181013-2\\+deb10u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ncurses-base@6.1+20181013-2+deb10u2?arch=all&upstream=ncurses&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/openssl@1.1.1d-0+deb10u6?arch=amd64&distro=debian-10&package-id=b87eb2b49275b6d9", + "publisher": "Debian OpenSSL Team ", + "name": "openssl", + "version": "1.1.1d-0+deb10u6", + "cpe": "cpe:2.3:a:openssl:openssl:1.1.1d-0\\+deb10u6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/openssl@1.1.1d-0+deb10u6?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/passwd@1:4.5-1.1?arch=amd64&upstream=shadow&distro=debian-10&package-id=6a37b96614be0ad8", + "publisher": "Shadow package maintainers ", + "name": "passwd", + "version": "1:4.5-1.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:passwd:passwd:1\\:4.5-1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/passwd@1:4.5-1.1?arch=amd64&upstream=shadow&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/perl-base@5.28.1-6+deb10u1?arch=amd64&upstream=perl&distro=debian-10&package-id=99c7261aa39b37e1", + "publisher": "Niko Tyni ", + "name": "perl-base", + "version": "5.28.1-6+deb10u1", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "S2P" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl-base:perl-base:5.28.1-6\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/perl-base@5.28.1-6+deb10u1?arch=amd64&upstream=perl&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/procps@2:3.3.15-2?arch=amd64&distro=debian-10&package-id=ecd7f395d1b30af7", + "publisher": "Craig Small ", + "name": "procps", + "version": "2:3.3.15-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:procps:procps:2\\:3.3.15-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/procps@2:3.3.15-2?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/sed@4.7-1?arch=amd64&distro=debian-10&package-id=cd24b1a69c7b788a", + "publisher": "Clint Adams ", + "name": "sed", + "version": "4.7-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:sed:sed:4.7-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/sed@4.7-1?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/startpar@0.61-1?arch=amd64&distro=debian-10&package-id=bfa1cab592ae4a14", + "publisher": "Debian sysvinit maintainers ", + "name": "startpar", + "version": "0.61-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:startpar:startpar:0.61-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/startpar@0.61-1?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/sysv-rc@2.93-8?arch=all&upstream=sysvinit&distro=debian-10&package-id=ea0552f0f86929b5", + "publisher": "Debian sysvinit maintainers ", + "name": "sysv-rc", + "version": "2.93-8", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:sysv-rc:sysv-rc:2.93-8:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/sysv-rc@2.93-8?arch=all&upstream=sysvinit&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/sysvinit-utils@2.93-8?arch=amd64&upstream=sysvinit&distro=debian-10&package-id=9762b89f96a3933c", + "publisher": "Debian sysvinit maintainers ", + "name": "sysvinit-utils", + "version": "2.93-8", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:sysvinit-utils:sysvinit-utils:2.93-8:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/sysvinit-utils@2.93-8?arch=amd64&upstream=sysvinit&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tar@1.30+dfsg-6?arch=amd64&distro=debian-10&package-id=c194088099b2a715", + "publisher": "Bdale Garbee ", + "name": "tar", + "version": "1.30+dfsg-6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:tar:tar:1.30\\+dfsg-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tar@1.30+dfsg-6?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tzdata@2021a-0+deb10u1?arch=all&distro=debian-10&package-id=382d46893fab7c54", + "publisher": "GNU Libc Maintainers ", + "name": "tzdata", + "version": "2021a-0+deb10u1", + "cpe": "cpe:2.3:a:tzdata:tzdata:2021a-0\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tzdata@2021a-0+deb10u1?arch=all&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/util-linux@2.33.1-0.1?arch=amd64&distro=debian-10&package-id=cc8d30d3a3bc01b6", + "publisher": "LaMont Jones ", + "name": "util-linux", + "version": "2.33.1-0.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:util-linux:util-linux:2.33.1-0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/util-linux@2.33.1-0.1?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/zlib1g@1:1.2.11.dfsg-1?arch=amd64&upstream=zlib&distro=debian-10&package-id=462eb7255c2bc918", + "publisher": "Mark Brown ", + "name": "zlib1g", + "version": "1:1.2.11.dfsg-1", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib1g:zlib1g:1\\:1.2.11.dfsg-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/zlib1g@1:1.2.11.dfsg-1?arch=amd64&upstream=zlib&distro=debian-10" + }, + { + "type": "operating-system", + "name": "debian", + "version": "10", + "description": "Debian GNU/Linux 10 (buster)", + "swid": { + "tagId": "debian", + "name": "debian", + "version": "10" + }, + "externalReferences": [ + { + "url": "https://bugs.debian.org/", + "type": "issue-tracker" + }, + { + "url": "https://www.debian.org/", + "type": "website" + }, + { + "url": "https://www.debian.org/support", + "comment": "support", + "type": "other" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/adduser@3.118?arch=all&distro=debian-11&package-id=3e9282034226b93f", + "publisher": "Debian Adduser Developers ", + "name": "adduser", + "version": "3.118", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:adduser:adduser:3.118:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/adduser@3.118?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/apt@2.2.4?arch=amd64&distro=debian-11&package-id=1cce537379623b25", + "publisher": "APT Development Team ", + "name": "apt", + "version": "2.2.4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:apt:apt:2.2.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/apt@2.2.4?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/base-files@11.1+deb11u6?arch=amd64&distro=debian-11&package-id=3c26dd637259b397", + "publisher": "Santiago Vila ", + "name": "base-files", + "version": "11.1+deb11u6", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:11.1\\+deb11u6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/base-files@11.1+deb11u6?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/base-passwd@3.5.51?arch=amd64&distro=debian-11&package-id=7ae3e2ba2e10f31", + "publisher": "Colin Watson ", + "name": "base-passwd", + "version": "3.5.51", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:base-passwd:base-passwd:3.5.51:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/base-passwd@3.5.51?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/bash@5.1-2+deb11u1?arch=amd64&distro=debian-11&package-id=94b35b4f7d874a43", + "publisher": "Matthias Klose ", + "name": "bash", + "version": "5.1-2+deb11u1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:bash:bash:5.1-2\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/bash@5.1-2+deb11u1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/bsdutils@1:2.36.1-8+deb11u1?arch=amd64&upstream=util-linux%402.36.1-8+deb11u1&distro=debian-11&package-id=677e6ace24dce684", + "publisher": "util-linux packagers ", + "name": "bsdutils", + "version": "1:2.36.1-8+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:bsdutils:bsdutils:1\\:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/bsdutils@1:2.36.1-8+deb11u1?arch=amd64&upstream=util-linux%402.36.1-8+deb11u1&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ca-certificates@20210119?arch=all&distro=debian-11&package-id=6b7e2b0745c43628", + "publisher": "Julien Cristau ", + "name": "ca-certificates", + "version": "20210119", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20210119:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ca-certificates@20210119?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/coreutils@8.32-4+b1?arch=amd64&upstream=coreutils%408.32-4&distro=debian-11&package-id=65bac153c492b66e", + "publisher": "Michael Stone ", + "name": "coreutils", + "version": "8.32-4+b1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:coreutils:coreutils:8.32-4\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/coreutils@8.32-4+b1?arch=amd64&upstream=coreutils%408.32-4&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/curl@7.74.0-1.3+deb11u7?arch=amd64&distro=debian-11&package-id=cfa0e9d1620ffa4d", + "publisher": "Alessandro Ghedini ", + "name": "curl", + "version": "7.74.0-1.3+deb11u7", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/curl@7.74.0-1.3+deb11u7?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/dash@0.5.11+git20200708+dd9ef66-5?arch=amd64&distro=debian-11&package-id=19db7775ce4c27be", + "publisher": "Andrej Shadura ", + "name": "dash", + "version": "0.5.11+git20200708+dd9ef66-5", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "FSFUL" + } + }, + { + "license": { + "id": "FSFULLR" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:dash:dash:0.5.11\\+git20200708\\+dd9ef66-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/dash@0.5.11+git20200708+dd9ef66-5?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/debconf@1.5.77?arch=all&distro=debian-11&package-id=99525df5637687bd", + "publisher": "Debconf Developers ", + "name": "debconf", + "version": "1.5.77", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:debconf:debconf:1.5.77:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/debconf@1.5.77?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/debian-archive-keyring@2021.1.1?arch=all&distro=debian-11&package-id=f7fcb44a58e72708", + "publisher": "Debian Release Team ", + "name": "debian-archive-keyring", + "version": "2021.1.1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:debian-archive-keyring:debian-archive-keyring:2021.1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/debian-archive-keyring@2021.1.1?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/debianutils@4.11.2?arch=amd64&distro=debian-11&package-id=4cd4f150dae8c295", + "publisher": "Clint Adams ", + "name": "debianutils", + "version": "4.11.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:debianutils:debianutils:4.11.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/debianutils@4.11.2?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/diffutils@1:3.7-5?arch=amd64&distro=debian-11&package-id=9133f9a320bf77e1", + "publisher": "Santiago Vila ", + "name": "diffutils", + "version": "1:3.7-5", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:diffutils:diffutils:1\\:3.7-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/diffutils@1:3.7-5?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/dirmngr@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11&package-id=51dda820ce87a9d6", + "publisher": "Debian GnuPG Maintainers ", + "name": "dirmngr", + "version": "2.2.27-2+deb11u2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + }, + { + "license": { + "name": "TinySCHEME" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:dirmngr:dirmngr:2.2.27-2\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/dirmngr@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/dpkg@1.20.12?arch=amd64&distro=debian-11&package-id=3dbbad249b74a866", + "publisher": "Dpkg Developers ", + "name": "dpkg", + "version": "1.20.12", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain-md5" + } + }, + { + "license": { + "name": "public-domain-s-s-d" + } + } + ], + "cpe": "cpe:2.3:a:dpkg:dpkg:1.20.12:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/dpkg@1.20.12?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/e2fsprogs@1.46.2-2?arch=amd64&distro=debian-11&package-id=7c4baa682137e759", + "publisher": "Theodore Y. Ts'o ", + "name": "e2fsprogs", + "version": "1.46.2-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:e2fsprogs:e2fsprogs:1.46.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/e2fsprogs@1.46.2-2?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/findutils@4.8.0-1?arch=amd64&distro=debian-11&package-id=b503e3d45616f33c", + "publisher": "Andreas Metzler ", + "name": "findutils", + "version": "4.8.0-1", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:findutils:findutils:4.8.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/findutils@4.8.0-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gcc-10-base@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=742204f033ae5a1e", + "publisher": "Debian GCC Maintainers ", + "name": "gcc-10-base", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:gcc-10-base:gcc-10-base:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gcc-10-base@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gcc-9-base@9.3.0-22?arch=amd64&upstream=gcc-9&distro=debian-11&package-id=57c0768e353bbfc8", + "publisher": "Debian GCC Maintainers ", + "name": "gcc-9-base", + "version": "9.3.0-22", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:gcc-9-base:gcc-9-base:9.3.0-22:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gcc-9-base@9.3.0-22?arch=amd64&upstream=gcc-9&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gnupg@2.2.27-2+deb11u2?arch=all&upstream=gnupg2&distro=debian-11&package-id=2fa645d733f4fb20", + "publisher": "Debian GnuPG Maintainers ", + "name": "gnupg", + "version": "2.2.27-2+deb11u2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + }, + { + "license": { + "name": "TinySCHEME" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:gnupg:gnupg:2.2.27-2\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gnupg@2.2.27-2+deb11u2?arch=all&upstream=gnupg2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gnupg-l10n@2.2.27-2+deb11u2?arch=all&upstream=gnupg2&distro=debian-11&package-id=1c8761869d3138a2", + "publisher": "Debian GnuPG Maintainers ", + "name": "gnupg-l10n", + "version": "2.2.27-2+deb11u2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + }, + { + "license": { + "name": "TinySCHEME" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:gnupg-l10n:gnupg-l10n:2.2.27-2\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gnupg-l10n@2.2.27-2+deb11u2?arch=all&upstream=gnupg2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gnupg-utils@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11&package-id=d594c552b6ca1112", + "publisher": "Debian GnuPG Maintainers ", + "name": "gnupg-utils", + "version": "2.2.27-2+deb11u2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + }, + { + "license": { + "name": "TinySCHEME" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:gnupg-utils:gnupg-utils:2.2.27-2\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gnupg-utils@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gpg@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11&package-id=182fe2545483a689", + "publisher": "Debian GnuPG Maintainers ", + "name": "gpg", + "version": "2.2.27-2+deb11u2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + }, + { + "license": { + "name": "TinySCHEME" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:gpg:gpg:2.2.27-2\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gpg@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gpg-agent@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11&package-id=af8333b079fd696", + "publisher": "Debian GnuPG Maintainers ", + "name": "gpg-agent", + "version": "2.2.27-2+deb11u2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + }, + { + "license": { + "name": "TinySCHEME" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:gpg-agent:gpg-agent:2.2.27-2\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gpg-agent@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gpg-wks-client@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11&package-id=7e338b8ee49ad1b2", + "publisher": "Debian GnuPG Maintainers ", + "name": "gpg-wks-client", + "version": "2.2.27-2+deb11u2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + }, + { + "license": { + "name": "TinySCHEME" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:gpg-wks-client:gpg-wks-client:2.2.27-2\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gpg-wks-client@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gpg-wks-server@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11&package-id=d8d521443f75f35a", + "publisher": "Debian GnuPG Maintainers ", + "name": "gpg-wks-server", + "version": "2.2.27-2+deb11u2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + }, + { + "license": { + "name": "TinySCHEME" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:gpg-wks-server:gpg-wks-server:2.2.27-2\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gpg-wks-server@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gpgconf@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11&package-id=eb729dbb773068e5", + "publisher": "Debian GnuPG Maintainers ", + "name": "gpgconf", + "version": "2.2.27-2+deb11u2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + }, + { + "license": { + "name": "TinySCHEME" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:gpgconf:gpgconf:2.2.27-2\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gpgconf@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gpgsm@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11&package-id=1ff09262bf4b65d9", + "publisher": "Debian GnuPG Maintainers ", + "name": "gpgsm", + "version": "2.2.27-2+deb11u2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + }, + { + "license": { + "name": "TinySCHEME" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:gpgsm:gpgsm:2.2.27-2\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gpgsm@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gpgv@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11&package-id=b6346590c45ba7ab", + "publisher": "Debian GnuPG Maintainers ", + "name": "gpgv", + "version": "2.2.27-2+deb11u2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + }, + { + "license": { + "name": "TinySCHEME" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:gpgv:gpgv:2.2.27-2\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gpgv@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/grep@3.6-1?arch=amd64&distro=debian-11&package-id=9ed140c6f7959d", + "publisher": "Anibal Monsalve Salazar ", + "name": "grep", + "version": "3.6-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:grep:grep:3.6-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/grep@3.6-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gzip@1.10-4+deb11u1?arch=amd64&distro=debian-11&package-id=ade955af6710751d", + "publisher": "Milan Kupcevic ", + "name": "gzip", + "version": "1.10-4+deb11u1", + "licenses": [ + { + "license": { + "name": "FSF-manpages" + } + }, + { + "license": { + "name": "GFDL-1.3+-no-invariant" + } + }, + { + "license": { + "name": "GFDL-3" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:gzip:gzip:1.10-4\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gzip@1.10-4+deb11u1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/hostname@3.23?arch=amd64&distro=debian-11&package-id=fec906d1ab1d9712", + "publisher": "Michael Meskes ", + "name": "hostname", + "version": "3.23", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:hostname:hostname:3.23:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/hostname@3.23?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/influxdb@1.8.10-1?arch=amd64&distro=debian-11&package-id=668a12601e14b1ae", + "publisher": "support@influxdb.com", + "name": "influxdb", + "version": "1.8.10-1", + "cpe": "cpe:2.3:a:influxdb:influxdb:1.8.10-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/influxdb@1.8.10-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/init-system-helpers@1.60?arch=all&distro=debian-11&package-id=9853db6c4e48777f", + "publisher": "Debian systemd Maintainers ", + "name": "init-system-helpers", + "version": "1.60", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:init-system-helpers:init-system-helpers:1.60:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/init-system-helpers@1.60?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libacl1@2.2.53-10?arch=amd64&upstream=acl&distro=debian-11&package-id=e26fd10cf6ff246", + "publisher": "Guillem Jover ", + "name": "libacl1", + "version": "2.2.53-10", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libacl1:libacl1:2.2.53-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libacl1@2.2.53-10?arch=amd64&upstream=acl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libapt-pkg6.0@2.2.4?arch=amd64&upstream=apt&distro=debian-11&package-id=da442f0998cccf2b", + "publisher": "APT Development Team ", + "name": "libapt-pkg6.0", + "version": "2.2.4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libapt-pkg6.0:libapt-pkg6.0:2.2.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libapt-pkg6.0@2.2.4?arch=amd64&upstream=apt&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libassuan0@2.5.3-7.1?arch=amd64&upstream=libassuan&distro=debian-11&package-id=6de2e25825b06a93", + "publisher": "Debian GnuPG-Maintainers ", + "name": "libassuan0", + "version": "2.5.3-7.1", + "licenses": [ + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GAP~FSF" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libassuan0:libassuan0:2.5.3-7.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libassuan0@2.5.3-7.1?arch=amd64&upstream=libassuan&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libattr1@1:2.4.48-6?arch=amd64&upstream=attr&distro=debian-11&package-id=254a97dd16e20391", + "publisher": "Guillem Jover ", + "name": "libattr1", + "version": "1:2.4.48-6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libattr1:libattr1:1\\:2.4.48-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libattr1@1:2.4.48-6?arch=amd64&upstream=attr&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libaudit-common@1:3.0-2?arch=all&upstream=audit&distro=debian-11&package-id=e666dc18886f28ff", + "publisher": "Laurent Bigonville ", + "name": "libaudit-common", + "version": "1:3.0-2", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit-common:libaudit-common:1\\:3.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libaudit-common@1:3.0-2?arch=all&upstream=audit&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libaudit1@1:3.0-2?arch=amd64&upstream=audit&distro=debian-11&package-id=ae77fe6c43b7188d", + "publisher": "Laurent Bigonville ", + "name": "libaudit1", + "version": "1:3.0-2", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit1:libaudit1:1\\:3.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libaudit1@1:3.0-2?arch=amd64&upstream=audit&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libblkid1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11&package-id=f235c9c5cb7b4190", + "publisher": "util-linux packagers ", + "name": "libblkid1", + "version": "2.36.1-8+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libblkid1:libblkid1:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libblkid1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libbrotli1@1.0.9-2+b2?arch=amd64&upstream=brotli%401.0.9-2&distro=debian-11&package-id=56558463e048d713", + "publisher": "Tomasz Buchert ", + "name": "libbrotli1", + "version": "1.0.9-2+b2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libbrotli1:libbrotli1:1.0.9-2\\+b2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libbrotli1@1.0.9-2+b2?arch=amd64&upstream=brotli%401.0.9-2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libbz2-1.0@1.0.8-4?arch=amd64&upstream=bzip2&distro=debian-11&package-id=120fe415369d1784", + "publisher": "Anibal Monsalve Salazar ", + "name": "libbz2-1.0", + "version": "1.0.8-4", + "licenses": [ + { + "license": { + "name": "BSD-variant" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libbz2-1.0:libbz2-1.0:1.0.8-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libbz2-1.0@1.0.8-4?arch=amd64&upstream=bzip2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libc-bin@2.31-13+deb11u5?arch=amd64&upstream=glibc&distro=debian-11&package-id=228ff11572a24b74", + "publisher": "GNU Libc Maintainers ", + "name": "libc-bin", + "version": "2.31-13+deb11u5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc-bin:libc-bin:2.31-13\\+deb11u5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libc-bin@2.31-13+deb11u5?arch=amd64&upstream=glibc&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libc6@2.31-13+deb11u5?arch=amd64&upstream=glibc&distro=debian-11&package-id=abe2c3f30be707e3", + "publisher": "GNU Libc Maintainers ", + "name": "libc6", + "version": "2.31-13+deb11u5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc6:libc6:2.31-13\\+deb11u5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libc6@2.31-13+deb11u5?arch=amd64&upstream=glibc&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcap-ng0@0.7.9-2.2+b1?arch=amd64&upstream=libcap-ng%400.7.9-2.2&distro=debian-11&package-id=77d3f745010c245", + "publisher": "Pierre Chifflier ", + "name": "libcap-ng0", + "version": "0.7.9-2.2+b1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libcap-ng0:libcap-ng0:0.7.9-2.2\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcap-ng0@0.7.9-2.2+b1?arch=amd64&upstream=libcap-ng%400.7.9-2.2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcom-err2@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11&package-id=c3e2285fd362b920", + "publisher": "Theodore Y. Ts'o ", + "name": "libcom-err2", + "version": "1.46.2-2", + "cpe": "cpe:2.3:a:libcom-err2:libcom-err2:1.46.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcom-err2@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcrypt1@1:4.4.18-4?arch=amd64&upstream=libxcrypt&distro=debian-11&package-id=4d32f8aeb497b2e2", + "publisher": "Marco d'Itri ", + "name": "libcrypt1", + "version": "1:4.4.18-4", + "cpe": "cpe:2.3:a:libcrypt1:libcrypt1:1\\:4.4.18-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcrypt1@1:4.4.18-4?arch=amd64&upstream=libxcrypt&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcurl4@7.74.0-1.3+deb11u7?arch=amd64&upstream=curl&distro=debian-11&package-id=5ca0f748c3f34f0", + "publisher": "Alessandro Ghedini ", + "name": "libcurl4", + "version": "7.74.0-1.3+deb11u7", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3+deb11u7?arch=amd64&upstream=curl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libdb5.3@5.3.28+dfsg1-0.8?arch=amd64&upstream=db5.3&distro=debian-11&package-id=bd40bf11043e04a6", + "publisher": "Debian Berkeley DB Team ", + "name": "libdb5.3", + "version": "5.3.28+dfsg1-0.8", + "cpe": "cpe:2.3:a:libdb5.3:libdb5.3:5.3.28\\+dfsg1-0.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libdb5.3@5.3.28+dfsg1-0.8?arch=amd64&upstream=db5.3&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libdebconfclient0@0.260?arch=amd64&upstream=cdebconf&distro=debian-11&package-id=f46e6be545ae8a8c", + "publisher": "Debian Install System Team ", + "name": "libdebconfclient0", + "version": "0.260", + "cpe": "cpe:2.3:a:libdebconfclient0:libdebconfclient0:0.260:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libdebconfclient0@0.260?arch=amd64&upstream=cdebconf&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libext2fs2@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11&package-id=78620e65fcd780c3", + "publisher": "Theodore Y. Ts'o ", + "name": "libext2fs2", + "version": "1.46.2-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libext2fs2:libext2fs2:1.46.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libext2fs2@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libffi7@3.3-6?arch=amd64&upstream=libffi&distro=debian-11&package-id=b76aa1c712147c28", + "publisher": "Debian GCC Maintainers ", + "name": "libffi7", + "version": "3.3-6", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libffi7:libffi7:3.3-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libffi7@3.3-6?arch=amd64&upstream=libffi&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgcc-s1@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=ddb4ba0153b59955", + "publisher": "Debian GCC Maintainers ", + "name": "libgcc-s1", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcc-s1:libgcc-s1:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgcc-s1@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgcrypt20@1.8.7-6?arch=amd64&distro=debian-11&package-id=7bc9b7389c934ca8", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libgcrypt20", + "version": "1.8.7-6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcrypt20:libgcrypt20:1.8.7-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgcrypt20@1.8.7-6?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgmp10@2:6.2.1+dfsg-1+deb11u1?arch=amd64&upstream=gmp&distro=debian-11&package-id=b8566db47d8d4ddc", + "publisher": "Debian Science Team ", + "name": "libgmp10", + "version": "2:6.2.1+dfsg-1+deb11u1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgmp10:libgmp10:2\\:6.2.1\\+dfsg-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgmp10@2:6.2.1+dfsg-1+deb11u1?arch=amd64&upstream=gmp&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgnutls30@3.7.1-5+deb11u3?arch=amd64&upstream=gnutls28&distro=debian-11&package-id=7a4a4d471a0c6aed", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libgnutls30", + "version": "3.7.1-5+deb11u3", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPLv3+" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "name": "LGPLv2.1+" + } + }, + { + "license": { + "name": "LGPLv3+_or_GPLv2+" + } + }, + { + "license": { + "name": "The" + } + } + ], + "cpe": "cpe:2.3:a:libgnutls30:libgnutls30:3.7.1-5\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgnutls30@3.7.1-5+deb11u3?arch=amd64&upstream=gnutls28&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgpg-error0@1.38-2?arch=amd64&upstream=libgpg-error&distro=debian-11&package-id=2391ec82a95e1b79", + "publisher": "Debian GnuPG Maintainers ", + "name": "libgpg-error0", + "version": "1.38-2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "g10-permissive" + } + } + ], + "cpe": "cpe:2.3:a:libgpg-error0:libgpg-error0:1.38-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgpg-error0@1.38-2?arch=amd64&upstream=libgpg-error&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11&package-id=3f685865c7e045c1", + "publisher": "Sam Hartman ", + "name": "libgssapi-krb5-2", + "version": "1.18.3-6+deb11u3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libhogweed6@3.7.3-1?arch=amd64&upstream=nettle&distro=debian-11&package-id=5e22b39e8cb919f6", + "publisher": "Magnus Holmgren ", + "name": "libhogweed6", + "version": "3.7.3-1", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libhogweed6:libhogweed6:3.7.3-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libhogweed6@3.7.3-1?arch=amd64&upstream=nettle&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libidn2-0@2.3.0-5?arch=amd64&upstream=libidn2&distro=debian-11&package-id=8eb1c8304ad48ef2", + "publisher": "Debian Libidn team ", + "name": "libidn2-0", + "version": "2.3.0-5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "Unicode" + } + } + ], + "cpe": "cpe:2.3:a:libidn2-0:libidn2-0:2.3.0-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libidn2-0@2.3.0-5?arch=amd64&upstream=libidn2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libk5crypto3@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11&package-id=ae9e3b8691722eba", + "publisher": "Sam Hartman ", + "name": "libk5crypto3", + "version": "1.18.3-6+deb11u3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libk5crypto3:libk5crypto3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libk5crypto3@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libkeyutils1@1.6.1-2?arch=amd64&upstream=keyutils&distro=debian-11&package-id=308487f5f23bf878", + "publisher": "Christian Kastner ", + "name": "libkeyutils1", + "version": "1.6.1-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libkeyutils1:libkeyutils1:1.6.1-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libkeyutils1@1.6.1-2?arch=amd64&upstream=keyutils&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libkrb5-3@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11&package-id=8bdffe6652e8e7ef", + "publisher": "Sam Hartman ", + "name": "libkrb5-3", + "version": "1.18.3-6+deb11u3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5-3:libkrb5-3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libkrb5-3@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libkrb5support0@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11&package-id=471e6243bbbcf8b2", + "publisher": "Sam Hartman ", + "name": "libkrb5support0", + "version": "1.18.3-6+deb11u3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5support0:libkrb5support0:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libkrb5support0@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libksba8@1.5.0-3+deb11u2?arch=amd64&upstream=libksba&distro=debian-11&package-id=5d2c888e571614c7", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libksba8", + "version": "1.5.0-3+deb11u2", + "licenses": [ + { + "license": { + "id": "FSFUL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libksba8:libksba8:1.5.0-3\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libksba8@1.5.0-3+deb11u2?arch=amd64&upstream=libksba&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libldap-2.4-2@2.4.57+dfsg-3+deb11u1?arch=amd64&upstream=openldap&distro=debian-11&package-id=796a192b709a2a2b", + "publisher": "Debian OpenLDAP Maintainers ", + "name": "libldap-2.4-2", + "version": "2.4.57+dfsg-3+deb11u1", + "cpe": "cpe:2.3:a:libldap-2.4-2:libldap-2.4-2:2.4.57\\+dfsg-3\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libldap-2.4-2@2.4.57+dfsg-3+deb11u1?arch=amd64&upstream=openldap&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/liblz4-1@1.9.3-2?arch=amd64&upstream=lz4&distro=debian-11&package-id=b59e208fb7f8bae4", + "publisher": "Nobuhiro Iwamatsu ", + "name": "liblz4-1", + "version": "1.9.3-2", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:liblz4-1:liblz4-1:1.9.3-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/liblz4-1@1.9.3-2?arch=amd64&upstream=lz4&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/liblzma5@5.2.5-2.1~deb11u1?arch=amd64&upstream=xz-utils&distro=debian-11&package-id=b95662a389d30c72", + "publisher": "Jonathan Nieder ", + "name": "liblzma5", + "version": "5.2.5-2.1~deb11u1", + "licenses": [ + { + "license": { + "name": "Autoconf" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "PD" + } + }, + { + "license": { + "name": "PD-debian" + } + }, + { + "license": { + "name": "config-h" + } + }, + { + "license": { + "name": "noderivs" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-nowarranty" + } + }, + { + "license": { + "name": "probably-PD" + } + } + ], + "cpe": "cpe:2.3:a:liblzma5:liblzma5:5.2.5-2.1\\~deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/liblzma5@5.2.5-2.1~deb11u1?arch=amd64&upstream=xz-utils&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libmount1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11&package-id=afd0c3536366dc2c", + "publisher": "util-linux packagers ", + "name": "libmount1", + "version": "2.36.1-8+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmount1:libmount1:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libmount1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libncursesw6@6.2+20201114-2?arch=amd64&upstream=ncurses&distro=debian-11&package-id=9eba19a6d4dcd7de", + "publisher": "Craig Small ", + "name": "libncursesw6", + "version": "6.2+20201114-2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "MIT/X11" + } + }, + { + "license": { + "id": "X11" + } + } + ], + "cpe": "cpe:2.3:a:libncursesw6:libncursesw6:6.2\\+20201114-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libncursesw6@6.2+20201114-2?arch=amd64&upstream=ncurses&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libnettle8@3.7.3-1?arch=amd64&upstream=nettle&distro=debian-11&package-id=ceff94b390c9bf61", + "publisher": "Magnus Holmgren ", + "name": "libnettle8", + "version": "3.7.3-1", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libnettle8:libnettle8:3.7.3-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libnettle8@3.7.3-1?arch=amd64&upstream=nettle&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libnghttp2-14@1.43.0-1?arch=amd64&upstream=nghttp2&distro=debian-11&package-id=cfb81461ba0ee3f7", + "publisher": "Tomasz Buchert ", + "name": "libnghttp2-14", + "version": "1.43.0-1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "SIL-OFL-1.1" + } + }, + { + "license": { + "name": "all-permissive" + } + } + ], + "cpe": "cpe:2.3:a:libnghttp2-14:libnghttp2-14:1.43.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libnghttp2-14@1.43.0-1?arch=amd64&upstream=nghttp2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libnpth0@1.6-3?arch=amd64&upstream=npth&distro=debian-11&package-id=8f1b99f450f7926c", + "publisher": "Eric Dorland ", + "name": "libnpth0", + "version": "1.6-3", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libnpth0:libnpth0:1.6-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libnpth0@1.6-3?arch=amd64&upstream=npth&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libnsl2@1.3.0-2?arch=amd64&upstream=libnsl&distro=debian-11&package-id=fc8ac2f1807436d9", + "publisher": "GNU Libc Maintainers ", + "name": "libnsl2", + "version": "1.3.0-2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPL-2+-autoconf-exception" + } + }, + { + "license": { + "name": "GPL-2+-libtool-exception" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPL-3+-autoconf-exception" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "permissive-autoconf-m4" + } + }, + { + "license": { + "name": "permissive-autoconf-m4-no-warranty" + } + }, + { + "license": { + "name": "permissive-configure" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-makefile-in" + } + } + ], + "cpe": "cpe:2.3:a:libnsl2:libnsl2:1.3.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libnsl2@1.3.0-2?arch=amd64&upstream=libnsl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libp11-kit0@0.23.22-1?arch=amd64&upstream=p11-kit&distro=debian-11&package-id=a2ce6d1eb48ab956", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libp11-kit0", + "version": "0.23.22-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "ISC+IBM" + } + }, + { + "license": { + "name": "permissive-like-automake-output" + } + }, + { + "license": { + "name": "same-as-rest-of-p11kit" + } + } + ], + "cpe": "cpe:2.3:a:libp11-kit0:libp11-kit0:0.23.22-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libp11-kit0@0.23.22-1?arch=amd64&upstream=p11-kit&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam-modules@1.4.0-9+deb11u1?arch=amd64&upstream=pam&distro=debian-11&package-id=903eac5974d73705", + "publisher": "Steve Langasek ", + "name": "libpam-modules", + "version": "1.4.0-9+deb11u1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules:libpam-modules:1.4.0-9\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam-modules@1.4.0-9+deb11u1?arch=amd64&upstream=pam&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam-modules-bin@1.4.0-9+deb11u1?arch=amd64&upstream=pam&distro=debian-11&package-id=2dc3f20bb97e020d", + "publisher": "Steve Langasek ", + "name": "libpam-modules-bin", + "version": "1.4.0-9+deb11u1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules-bin:libpam-modules-bin:1.4.0-9\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam-modules-bin@1.4.0-9+deb11u1?arch=amd64&upstream=pam&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam-runtime@1.4.0-9+deb11u1?arch=all&upstream=pam&distro=debian-11&package-id=1238d07342abe7a3", + "publisher": "Steve Langasek ", + "name": "libpam-runtime", + "version": "1.4.0-9+deb11u1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-runtime:libpam-runtime:1.4.0-9\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam-runtime@1.4.0-9+deb11u1?arch=all&upstream=pam&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam0g@1.4.0-9+deb11u1?arch=amd64&upstream=pam&distro=debian-11&package-id=70917c5424d601fa", + "publisher": "Steve Langasek ", + "name": "libpam0g", + "version": "1.4.0-9+deb11u1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam0g:libpam0g:1.4.0-9\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam0g@1.4.0-9+deb11u1?arch=amd64&upstream=pam&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpcre2-8-0@10.36-2+deb11u1?arch=amd64&upstream=pcre2&distro=debian-11&package-id=5d07d7ec308f6bb2", + "publisher": "Matthew Vernon ", + "name": "libpcre2-8-0", + "version": "10.36-2+deb11u1", + "cpe": "cpe:2.3:a:libpcre2-8-0:libpcre2-8-0:10.36-2\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpcre2-8-0@10.36-2+deb11u1?arch=amd64&upstream=pcre2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpcre3@2:8.39-13?arch=amd64&upstream=pcre3&distro=debian-11&package-id=1c1641a0882b431f", + "publisher": "Matthew Vernon ", + "name": "libpcre3", + "version": "2:8.39-13", + "cpe": "cpe:2.3:a:libpcre3:libpcre3:2\\:8.39-13:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpcre3@2:8.39-13?arch=amd64&upstream=pcre3&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpsl5@0.21.0-1.2?arch=amd64&upstream=libpsl&distro=debian-11&package-id=3409718c91a2d222", + "publisher": "Tim Rühsen ", + "name": "libpsl5", + "version": "0.21.0-1.2", + "licenses": [ + { + "license": { + "name": "Chromium" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libpsl5:libpsl5:0.21.0-1.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpsl5@0.21.0-1.2?arch=amd64&upstream=libpsl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libreadline8@8.1-1?arch=amd64&upstream=readline&distro=debian-11&package-id=348793ec2b579ee6", + "publisher": "Matthias Klose ", + "name": "libreadline8", + "version": "8.1-1", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libreadline8:libreadline8:8.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libreadline8@8.1-1?arch=amd64&upstream=readline&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/librtmp1@2.4+20151223.gitfa8646d.1-2+b2?arch=amd64&upstream=rtmpdump%402.4+20151223.gitfa8646d.1-2&distro=debian-11&package-id=4f5f3212d3812c5d", + "publisher": "Debian Multimedia Maintainers ", + "name": "librtmp1", + "version": "2.4+20151223.gitfa8646d.1-2+b2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:librtmp1:librtmp1:2.4\\+20151223.gitfa8646d.1-2\\+b2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/librtmp1@2.4+20151223.gitfa8646d.1-2+b2?arch=amd64&upstream=rtmpdump%402.4+20151223.gitfa8646d.1-2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsasl2-2@2.1.27+dfsg-2.1+deb11u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-11&package-id=77ea74a82c5fc951", + "publisher": "Debian Cyrus Team ", + "name": "libsasl2-2", + "version": "2.1.27+dfsg-2.1+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-2:libsasl2-2:2.1.27\\+dfsg-2.1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsasl2-2@2.1.27+dfsg-2.1+deb11u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsasl2-modules-db@2.1.27+dfsg-2.1+deb11u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-11&package-id=1e10a1d2edb3e77a", + "publisher": "Debian Cyrus Team ", + "name": "libsasl2-modules-db", + "version": "2.1.27+dfsg-2.1+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-modules-db:libsasl2-modules-db:2.1.27\\+dfsg-2.1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsasl2-modules-db@2.1.27+dfsg-2.1+deb11u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libseccomp2@2.5.1-1+deb11u1?arch=amd64&upstream=libseccomp&distro=debian-11&package-id=bb0878d1437830b4", + "publisher": "Kees Cook ", + "name": "libseccomp2", + "version": "2.5.1-1+deb11u1", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libseccomp2:libseccomp2:2.5.1-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libseccomp2@2.5.1-1+deb11u1?arch=amd64&upstream=libseccomp&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libselinux1@3.1-3?arch=amd64&upstream=libselinux&distro=debian-11&package-id=bb9d0a1adefb7931", + "publisher": "Debian SELinux maintainers ", + "name": "libselinux1", + "version": "3.1-3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libselinux1:libselinux1:3.1-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libselinux1@3.1-3?arch=amd64&upstream=libselinux&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsemanage-common@3.1-1?arch=all&upstream=libsemanage&distro=debian-11&package-id=f41fe741bd23f493", + "publisher": "Debian SELinux maintainers ", + "name": "libsemanage-common", + "version": "3.1-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage-common:libsemanage-common:3.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsemanage-common@3.1-1?arch=all&upstream=libsemanage&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsemanage1@3.1-1+b2?arch=amd64&upstream=libsemanage%403.1-1&distro=debian-11&package-id=fa4813c20a8027a6", + "publisher": "Debian SELinux maintainers ", + "name": "libsemanage1", + "version": "3.1-1+b2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage1:libsemanage1:3.1-1\\+b2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsemanage1@3.1-1+b2?arch=amd64&upstream=libsemanage%403.1-1&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsepol1@3.1-1?arch=amd64&upstream=libsepol&distro=debian-11&package-id=cfa6f496d2fd049", + "publisher": "Debian SELinux maintainers ", + "name": "libsepol1", + "version": "3.1-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsepol1:libsepol1:3.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsepol1@3.1-1?arch=amd64&upstream=libsepol&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsmartcols1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11&package-id=cf3b22adc552a311", + "publisher": "util-linux packagers ", + "name": "libsmartcols1", + "version": "2.36.1-8+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsmartcols1:libsmartcols1:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsmartcols1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsqlite3-0@3.34.1-3?arch=amd64&upstream=sqlite3&distro=debian-11&package-id=373ed1f8b8bffc03", + "publisher": "Laszlo Boszormenyi (GCS) ", + "name": "libsqlite3-0", + "version": "3.34.1-3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.34.1-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsqlite3-0@3.34.1-3?arch=amd64&upstream=sqlite3&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libss2@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11&package-id=4ba13b2c11cb0876", + "publisher": "Theodore Y. Ts'o ", + "name": "libss2", + "version": "1.46.2-2", + "cpe": "cpe:2.3:a:libss2:libss2:1.46.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libss2@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libssh2-1@1.9.0-2?arch=amd64&upstream=libssh2&distro=debian-11&package-id=7b11dbeecfce2854", + "publisher": "Nicolas Mora ", + "name": "libssh2-1", + "version": "1.9.0-2", + "licenses": [ + { + "license": { + "name": "BSD3" + } + } + ], + "cpe": "cpe:2.3:a:libssh2-1:libssh2-1:1.9.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libssh2-1@1.9.0-2?arch=amd64&upstream=libssh2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libssl1.1@1.1.1n-0+deb11u4?arch=amd64&upstream=openssl&distro=debian-11&package-id=63a11d0164944054", + "publisher": "Debian OpenSSL Team ", + "name": "libssl1.1", + "version": "1.1.1n-0+deb11u4", + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libssl1.1@1.1.1n-0+deb11u4?arch=amd64&upstream=openssl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libstdc++6@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=748369630632944", + "publisher": "Debian GCC Maintainers ", + "name": "libstdc++6", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libstdc++6@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsystemd0@247.3-7+deb11u1?arch=amd64&upstream=systemd&distro=debian-11&package-id=4c258dc3b086d634", + "publisher": "Debian systemd Maintainers ", + "name": "libsystemd0", + "version": "247.3-7+deb11u1", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsystemd0:libsystemd0:247.3-7\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsystemd0@247.3-7+deb11u1?arch=amd64&upstream=systemd&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtasn1-6@4.16.0-2+deb11u1?arch=amd64&distro=debian-11&package-id=74865cf2744adb90", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libtasn1-6", + "version": "4.16.0-2+deb11u1", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtasn1-6:libtasn1-6:4.16.0-2\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtasn1-6@4.16.0-2+deb11u1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtinfo6@6.2+20201114-2?arch=amd64&upstream=ncurses&distro=debian-11&package-id=9e96601b60336037", + "publisher": "Craig Small ", + "name": "libtinfo6", + "version": "6.2+20201114-2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "MIT/X11" + } + }, + { + "license": { + "id": "X11" + } + } + ], + "cpe": "cpe:2.3:a:libtinfo6:libtinfo6:6.2\\+20201114-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtinfo6@6.2+20201114-2?arch=amd64&upstream=ncurses&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtirpc-common@1.3.1-1+deb11u1?arch=all&upstream=libtirpc&distro=debian-11&package-id=3623a1ef0b5b63b9", + "publisher": "Josue Ortega ", + "name": "libtirpc-common", + "version": "1.3.1-1+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc-common:libtirpc-common:1.3.1-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtirpc-common@1.3.1-1+deb11u1?arch=all&upstream=libtirpc&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtirpc3@1.3.1-1+deb11u1?arch=amd64&upstream=libtirpc&distro=debian-11&package-id=c7b97f0b9d21e851", + "publisher": "Josue Ortega ", + "name": "libtirpc3", + "version": "1.3.1-1+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc3:libtirpc3:1.3.1-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtirpc3@1.3.1-1+deb11u1?arch=amd64&upstream=libtirpc&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libudev1@247.3-7+deb11u1?arch=amd64&upstream=systemd&distro=debian-11&package-id=79c718cff72e218e", + "publisher": "Debian systemd Maintainers ", + "name": "libudev1", + "version": "247.3-7+deb11u1", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libudev1:libudev1:247.3-7\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libudev1@247.3-7+deb11u1?arch=amd64&upstream=systemd&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libunistring2@0.9.10-4?arch=amd64&upstream=libunistring&distro=debian-11&package-id=dc7fcfc9dde2b703", + "publisher": "Jörg Frings-Fürst ", + "name": "libunistring2", + "version": "0.9.10-4", + "licenses": [ + { + "license": { + "name": "FreeSoftware" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GFDL-1.2+" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libunistring2:libunistring2:0.9.10-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libunistring2@0.9.10-4?arch=amd64&upstream=libunistring&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libuuid1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11&package-id=e87310d3e1426d6c", + "publisher": "util-linux packagers ", + "name": "libuuid1", + "version": "2.36.1-8+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libuuid1:libuuid1:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libuuid1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxxhash0@0.8.0-2?arch=amd64&upstream=xxhash&distro=debian-11&package-id=edc71d7591d40133", + "publisher": "Norbert Preining ", + "name": "libxxhash0", + "version": "0.8.0-2", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libxxhash0:libxxhash0:0.8.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxxhash0@0.8.0-2?arch=amd64&upstream=xxhash&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libzstd1@1.4.8+dfsg-2.1?arch=amd64&upstream=libzstd&distro=debian-11&package-id=90e1680def07a674", + "publisher": "Debian Med Packaging Team ", + "name": "libzstd1", + "version": "1.4.8+dfsg-2.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libzstd1:libzstd1:1.4.8\\+dfsg-2.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libzstd1@1.4.8+dfsg-2.1?arch=amd64&upstream=libzstd&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/login@1:4.8.1-1?arch=amd64&upstream=shadow&distro=debian-11&package-id=9cdbb92ea69c08a1", + "publisher": "Shadow package maintainers ", + "name": "login", + "version": "1:4.8.1-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:login:login:1\\:4.8.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/login@1:4.8.1-1?arch=amd64&upstream=shadow&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/logsave@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11&package-id=77e8cce6db62952b", + "publisher": "Theodore Y. Ts'o ", + "name": "logsave", + "version": "1.46.2-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:logsave:logsave:1.46.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/logsave@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/lsb-base@11.1.0?arch=all&upstream=lsb&distro=debian-11&package-id=67f43d818d5952cf", + "publisher": "Debian sysvinit maintainers ", + "name": "lsb-base", + "version": "11.1.0", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:lsb-base:lsb-base:11.1.0:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/lsb-base@11.1.0?arch=all&upstream=lsb&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/mawk@1.3.4.20200120-2?arch=amd64&distro=debian-11&package-id=b91e181aea759ff5", + "publisher": "Boyuan Yang ", + "name": "mawk", + "version": "1.3.4.20200120-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:mawk:mawk:1.3.4.20200120-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/mawk@1.3.4.20200120-2?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/mount@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11&package-id=c7ff86ae9a8937ca", + "publisher": "util-linux packagers ", + "name": "mount", + "version": "2.36.1-8+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:mount:mount:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/mount@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ncurses-base@6.2+20201114-2?arch=all&upstream=ncurses&distro=debian-11&package-id=9c2239a948284096", + "publisher": "Craig Small ", + "name": "ncurses-base", + "version": "6.2+20201114-2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "MIT/X11" + } + }, + { + "license": { + "id": "X11" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-base:ncurses-base:6.2\\+20201114-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ncurses-base@6.2+20201114-2?arch=all&upstream=ncurses&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ncurses-bin@6.2+20201114-2?arch=amd64&upstream=ncurses&distro=debian-11&package-id=d98c3c34aac1c97c", + "publisher": "Craig Small ", + "name": "ncurses-bin", + "version": "6.2+20201114-2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "MIT/X11" + } + }, + { + "license": { + "id": "X11" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-bin:ncurses-bin:6.2\\+20201114-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ncurses-bin@6.2+20201114-2?arch=amd64&upstream=ncurses&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/netbase@6.3?arch=all&distro=debian-11&package-id=1632ba983c003dc3", + "publisher": "Marco d'Itri ", + "name": "netbase", + "version": "6.3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:netbase:netbase:6.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/netbase@6.3?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/openssl@1.1.1n-0+deb11u4?arch=amd64&distro=debian-11&package-id=a7dc6e66845f14bf", + "publisher": "Debian OpenSSL Team ", + "name": "openssl", + "version": "1.1.1n-0+deb11u4", + "cpe": "cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/openssl@1.1.1n-0+deb11u4?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/passwd@1:4.8.1-1?arch=amd64&upstream=shadow&distro=debian-11&package-id=fdca5992b8d73b50", + "publisher": "Shadow package maintainers ", + "name": "passwd", + "version": "1:4.8.1-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:passwd:passwd:1\\:4.8.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/passwd@1:4.8.1-1?arch=amd64&upstream=shadow&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/perl-base@5.32.1-4+deb11u2?arch=amd64&upstream=perl&distro=debian-11&package-id=96ea9246284c94e6", + "publisher": "Niko Tyni ", + "name": "perl-base", + "version": "5.32.1-4+deb11u2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl-base:perl-base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/perl-base@5.32.1-4+deb11u2?arch=amd64&upstream=perl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/pinentry-curses@1.1.0-4?arch=amd64&upstream=pinentry&distro=debian-11&package-id=97be8369853f993c", + "publisher": "Debian GnuPG Maintainers ", + "name": "pinentry-curses", + "version": "1.1.0-4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "X11" + } + } + ], + "cpe": "cpe:2.3:a:pinentry-curses:pinentry-curses:1.1.0-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/pinentry-curses@1.1.0-4?arch=amd64&upstream=pinentry&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/readline-common@8.1-1?arch=all&upstream=readline&distro=debian-11&package-id=1db616197859926a", + "publisher": "Matthias Klose ", + "name": "readline-common", + "version": "8.1-1", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:readline-common:readline-common:8.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/readline-common@8.1-1?arch=all&upstream=readline&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/sed@4.7-1?arch=amd64&distro=debian-11&package-id=cd24b1a69c7b788a", + "publisher": "Clint Adams ", + "name": "sed", + "version": "4.7-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:sed:sed:4.7-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/sed@4.7-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/sysvinit-utils@2.96-7+deb11u1?arch=amd64&upstream=sysvinit&distro=debian-11&package-id=e0e95f2e10cb825e", + "publisher": "Debian sysvinit maintainers ", + "name": "sysvinit-utils", + "version": "2.96-7+deb11u1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:sysvinit-utils:sysvinit-utils:2.96-7\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/sysvinit-utils@2.96-7+deb11u1?arch=amd64&upstream=sysvinit&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tar@1.34+dfsg-1?arch=amd64&distro=debian-11&package-id=9511efaff0991270", + "publisher": "Janos Lenart ", + "name": "tar", + "version": "1.34+dfsg-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:tar:tar:1.34\\+dfsg-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tar@1.34+dfsg-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tzdata@2021a-1+deb11u9?arch=all&distro=debian-11&package-id=5268162de7a3ef0", + "publisher": "GNU Libc Maintainers ", + "name": "tzdata", + "version": "2021a-1+deb11u9", + "cpe": "cpe:2.3:a:tzdata:tzdata:2021a-1\\+deb11u9:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tzdata@2021a-1+deb11u9?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/util-linux@2.36.1-8+deb11u1?arch=amd64&distro=debian-11&package-id=b8c872368f65d4a3", + "publisher": "util-linux packagers ", + "name": "util-linux", + "version": "2.36.1-8+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:util-linux:util-linux:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/util-linux@2.36.1-8+deb11u1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/wget@1.21-1+deb11u1?arch=amd64&distro=debian-11&package-id=a1c9b0706dcf6d72", + "publisher": "Noël Köthe ", + "name": "wget", + "version": "1.21-1+deb11u1", + "licenses": [ + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:wget:wget:1.21-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/wget@1.21-1+deb11u1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/zlib1g@1:1.2.11.dfsg-2+deb11u2?arch=amd64&upstream=zlib&distro=debian-11&package-id=369e996115240b62", + "publisher": "Mark Brown ", + "name": "zlib1g", + "version": "1:1.2.11.dfsg-2+deb11u2", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib1g:zlib1g:1\\:1.2.11.dfsg-2\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/zlib1g@1:1.2.11.dfsg-2+deb11u2?arch=amd64&upstream=zlib&distro=debian-11" + }, + { + "type": "operating-system", + "name": "debian", + "version": "11", + "description": "Debian GNU/Linux 11 (bullseye)", + "swid": { + "tagId": "debian", + "name": "debian", + "version": "11" + }, + "externalReferences": [ + { + "url": "https://bugs.debian.org/", + "type": "issue-tracker" + }, + { + "url": "https://www.debian.org/", + "type": "website" + }, + { + "url": "https://www.debian.org/support", + "comment": "support", + "type": "other" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/base-files@10.3+deb10u9?arch=amd64&distro=debian-10&package-id=5aa6e4929bf16696", + "publisher": "Santiago Vila ", + "name": "base-files", + "version": "10.3+deb10u9", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:10.3\\+deb10u9:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/base-files@10.3+deb10u9?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=cc00b9c8d0ce31ed", + "name": "github.com/beorn7/perks", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/beorn7/perks@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/blang/semver@v3.5.1+incompatible?package-id=2dbc1b01df867a6a", + "name": "github.com/blang/semver", + "version": "v3.5.1+incompatible", + "cpe": "cpe:2.3:a:blang:semver:v3.5.1\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/blang/semver@v3.5.1+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.1.1?package-id=56c8a30e6ed8d12f", + "name": "github.com/cespare/xxhash/v2", + "version": "v2.1.1", + "cpe": "cpe:2.3:a:cespare:xxhash\\/v2:v2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/container-storage-interface/spec@v1.3.0?package-id=59b273222fc08721", + "name": "github.com/container-storage-interface/spec", + "version": "v1.3.0", + "cpe": "cpe:2.3:a:container-storage-interface:spec:v1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/container-storage-interface/spec@v1.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1?package-id=54c8a26e96cd9177", + "name": "github.com/davecgh/go-spew", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:davecgh:go-spew:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/evanphx/json-patch@v4.9.0+incompatible?package-id=4d5067e77be15976", + "name": "github.com/evanphx/json-patch", + "version": "v4.9.0+incompatible", + "cpe": "cpe:2.3:a:evanphx:json-patch:v4.9.0\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/evanphx/json-patch@v4.9.0+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-logr/logr@v0.4.0?package-id=6ee9e381920d3d42", + "name": "github.com/go-logr/logr", + "version": "v0.4.0", + "cpe": "cpe:2.3:a:go-logr:logr:v0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-logr/logr@v0.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.1?package-id=8c9abae50388b70b", + "name": "github.com/gogo/protobuf", + "version": "v1.3.1", + "cpe": "cpe:2.3:a:gogo:protobuf:v1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/groupcache@v0.0.0-20200121045136-8c9f03a8e57e?package-id=d8c82a79a4166105", + "name": "github.com/golang/groupcache", + "version": "v0.0.0-20200121045136-8c9f03a8e57e", + "cpe": "cpe:2.3:a:golang:groupcache:v0.0.0-20200121045136-8c9f03a8e57e:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20200121045136-8c9f03a8e57e" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.4.3?package-id=e96e1ed4ea928c35", + "name": "github.com/golang/protobuf", + "version": "v1.4.3", + "cpe": "cpe:2.3:a:golang:protobuf:v1.4.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.4.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.5.4?package-id=7f6c51c43dbb5a29", + "name": "github.com/google/go-cmp", + "version": "v0.5.4", + "cpe": "cpe:2.3:a:google:go-cmp:v0.5.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-cmp@v0.5.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/gofuzz@v1.2.0?package-id=dba323a4fa86b9bf", + "name": "github.com/google/gofuzz", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:google:gofuzz:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/gofuzz@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/uuid@v1.1.2?package-id=c78a08959676d86b", + "name": "github.com/google/uuid", + "version": "v1.1.2", + "cpe": "cpe:2.3:a:google:uuid:v1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/uuid@v1.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/googleapis/gnostic@v0.5.3?package-id=58aceef74759b61e", + "name": "github.com/googleapis/gnostic", + "version": "v0.5.3", + "cpe": "cpe:2.3:a:googleapis:gnostic:v0.5.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/googleapis/gnostic@v0.5.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/hashicorp/golang-lru@v0.5.4?package-id=7000ab09d2435fd1", + "name": "github.com/hashicorp/golang-lru", + "version": "v0.5.4", + "cpe": "cpe:2.3:a:hashicorp:golang-lru:v0.5.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/golang-lru@v0.5.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.11?package-id=d43a6fa01161fac", + "name": "github.com/imdario/mergo", + "version": "v0.3.11", + "cpe": "cpe:2.3:a:imdario:mergo:v0.3.11:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/imdario/mergo@v0.3.11" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.10?package-id=25c6433399c83a83", + "name": "github.com/json-iterator/go", + "version": "v1.1.10", + "cpe": "cpe:2.3:a:json-iterator:go:v1.1.10:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/json-iterator/go@v1.1.10" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/kubernetes-csi/csi-lib-utils@v0.9.0?package-id=808ebba8c41ebd2", + "name": "github.com/kubernetes-csi/csi-lib-utils", + "version": "v0.9.0", + "cpe": "cpe:2.3:a:kubernetes-csi:csi-lib-utils:v0.9.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/kubernetes-csi/csi-lib-utils@v0.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/kubernetes-csi/external-provisioner@(devel)?package-id=bf0d7487d10c658e", + "name": "github.com/kubernetes-csi/external-provisioner", + "version": "(devel)", + "cpe": "cpe:2.3:a:kubernetes-csi:external-provisioner:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/kubernetes-csi/external-provisioner@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/kubernetes-csi/external-snapshotter/client/v3@v3.0.0?package-id=502963f03c832faa", + "name": "github.com/kubernetes-csi/external-snapshotter/client/v3", + "version": "v3.0.0", + "cpe": "cpe:2.3:a:kubernetes-csi:external-snapshotter\\/client\\/v3:v3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/kubernetes-csi/external-snapshotter/client/v3@v3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.2-0.20181231171920-c182affec369?package-id=73c6509bc13937d8", + "name": "github.com/matttproud/golang_protobuf_extensions", + "version": "v1.0.2-0.20181231171920-c182affec369", + "cpe": "cpe:2.3:a:matttproud:golang-protobuf-extensions:v1.0.2-0.20181231171920-c182affec369:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.2-0.20181231171920-c182affec369" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/miekg/dns@v1.1.35?package-id=df6cc70eaed9a153", + "name": "github.com/miekg/dns", + "version": "v1.1.35", + "cpe": "cpe:2.3:a:miekg:dns:v1.1.35:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/miekg/dns@v1.1.35" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=8b4a083d7e787d16", + "name": "github.com/modern-go/concurrent", + "version": "v0.0.0-20180306012644-bacd9c7ef1dd", + "cpe": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.1?package-id=44e874caefd7b533", + "name": "github.com/modern-go/reflect2", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:modern-go:reflect2:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=3502236ee518305f", + "name": "github.com/pkg/errors", + "version": "v0.9.1", + "cpe": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pkg/errors@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/client_golang@v1.8.0?package-id=2759e7bbe91b3b19", + "name": "github.com/prometheus/client_golang", + "version": "v1.8.0", + "cpe": "cpe:2.3:a:prometheus:client-golang:v1.8.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_golang@v1.8.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/client_model@v0.2.0?package-id=87a7cd7b5b7b2e9c", + "name": "github.com/prometheus/client_model", + "version": "v0.2.0", + "cpe": "cpe:2.3:a:prometheus:client-model:v0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_model@v0.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/common@v0.15.0?package-id=43259b2cf12c35e6", + "name": "github.com/prometheus/common", + "version": "v0.15.0", + "cpe": "cpe:2.3:a:prometheus:common:v0.15.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/common@v0.15.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/procfs@v0.2.0?package-id=1b61f1922fa92dce", + "name": "github.com/prometheus/procfs", + "version": "v0.2.0", + "cpe": "cpe:2.3:a:prometheus:procfs:v0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/procfs@v0.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5?package-id=a9dc68b5a7a5618a", + "name": "github.com/spf13/pflag", + "version": "v1.0.5", + "cpe": "cpe:2.3:a:spf13:pflag:v1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9?package-id=d6bedaa573a2fbdd", + "name": "golang.org/x/crypto", + "version": "v0.0.0-20201208171446-5f87f3452ae9", + "cpe": "cpe:2.3:a:golang:x\\/crypto:v0.0.0-20201208171446-5f87f3452ae9:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11?package-id=88c18788f0dd2cf5", + "name": "golang.org/x/net", + "version": "v0.0.0-20201209123823-ac852fbbde11", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.0.0-20201209123823-ac852fbbde11:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20201208152858-08078c50e5b5?package-id=29aca0a9e9f75509", + "name": "golang.org/x/oauth2", + "version": "v0.0.0-20201208152858-08078c50e5b5", + "cpe": "cpe:2.3:a:golang:x\\/oauth2:v0.0.0-20201208152858-08078c50e5b5:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20201208152858-08078c50e5b5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20201214095126-aec9a390925b?package-id=f5e5e742ba0c32fc", + "name": "golang.org/x/sys", + "version": "v0.0.0-20201214095126-aec9a390925b", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20201214095126-aec9a390925b:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20201214095126-aec9a390925b" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/term@v0.0.0-20201210144234-2321bbc49cbf?package-id=4b6f181809660169", + "name": "golang.org/x/term", + "version": "v0.0.0-20201210144234-2321bbc49cbf", + "cpe": "cpe:2.3:a:golang:x\\/term:v0.0.0-20201210144234-2321bbc49cbf:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/term@v0.0.0-20201210144234-2321bbc49cbf" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/text@v0.3.4?package-id=b57979cfd8ce8a9f", + "name": "golang.org/x/text", + "version": "v0.3.4", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.3.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.3.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20201208040808-7e3f01d25324?package-id=f921b3793b3ae1f8", + "name": "golang.org/x/time", + "version": "v0.0.0-20201208040808-7e3f01d25324", + "cpe": "cpe:2.3:a:golang:x\\/time:v0.0.0-20201208040808-7e3f01d25324:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/time@v0.0.0-20201208040808-7e3f01d25324" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20201211151036-40ec1c210f7a?package-id=8f890d9f31987220", + "name": "google.golang.org/genproto", + "version": "v0.0.0-20201211151036-40ec1c210f7a", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20201211151036-40ec1c210f7a:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20201211151036-40ec1c210f7a" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.34.0?package-id=dec51d98c24a5ac3", + "name": "google.golang.org/grpc", + "version": "v1.34.0", + "cpe": "cpe:2.3:a:google:grpc:v1.34.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.34.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.25.0?package-id=6ee790d30fc8a19e", + "name": "google.golang.org/protobuf", + "version": "v1.25.0", + "cpe": "cpe:2.3:a:google:protobuf:v1.25.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/protobuf@v1.25.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=ef83589b9205b744", + "name": "gopkg.in/inf.v0", + "version": "v0.9.1", + "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0?package-id=4f65923f7eba7149", + "name": "gopkg.in/yaml.v2", + "version": "v2.4.0", + "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776?package-id=cff0559185b67bd1", + "name": "gopkg.in/yaml.v3", + "version": "v3.0.0-20200615113413-eeeca48fe776", + "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/api@v0.20.4?package-id=8f70691277a1cc86", + "name": "k8s.io/api", + "version": "v0.20.4", + "purl": "pkg:golang/k8s.io/api@v0.20.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.20.4?package-id=3155793d5e99e63f", + "name": "k8s.io/apimachinery", + "version": "v0.20.4", + "purl": "pkg:golang/k8s.io/apimachinery@v0.20.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/apiserver@v0.20.4?package-id=eb1e3d65012d348d", + "name": "k8s.io/apiserver", + "version": "v0.20.4", + "purl": "pkg:golang/k8s.io/apiserver@v0.20.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/client-go@v0.20.4?package-id=b1ffa8e19573600e", + "name": "k8s.io/client-go", + "version": "v0.20.4", + "purl": "pkg:golang/k8s.io/client-go@v0.20.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/component-base@v0.20.4?package-id=5483a6235a011212", + "name": "k8s.io/component-base", + "version": "v0.20.4", + "purl": "pkg:golang/k8s.io/component-base@v0.20.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/component-helpers@v0.20.4?package-id=23d332f3f6db6ab0", + "name": "k8s.io/component-helpers", + "version": "v0.20.4", + "purl": "pkg:golang/k8s.io/component-helpers@v0.20.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/csi-translation-lib@v0.21.0-alpha.3?package-id=3b3970e274503390", + "name": "k8s.io/csi-translation-lib", + "version": "v0.21.0-alpha.3", + "purl": "pkg:golang/k8s.io/csi-translation-lib@v0.21.0-alpha.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/klog/v2@v2.5.0?package-id=57df0240e9181489", + "name": "k8s.io/klog/v2", + "version": "v2.5.0", + "cpe": "cpe:2.3:a:klog:v2:v2.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/k8s.io/klog/v2@v2.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20201113171705-d219536bb9fd?package-id=2608e4c9d5c367be", + "name": "k8s.io/kube-openapi", + "version": "v0.0.0-20201113171705-d219536bb9fd", + "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20201113171705-d219536bb9fd" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20201110183641-67b214c5f920?package-id=c2f84cbbd900bfd8", + "name": "k8s.io/utils", + "version": "v0.0.0-20201110183641-67b214c5f920", + "purl": "pkg:golang/k8s.io/utils@v0.0.0-20201110183641-67b214c5f920" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/netbase@5.6?arch=all&distro=debian-10&package-id=b55e51dca4eba9a6", + "publisher": "Marco d'Itri ", + "name": "netbase", + "version": "5.6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:netbase:netbase:5.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/netbase@5.6?arch=all&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/controller-runtime@v0.7.0?package-id=e4d65b1ab954f0e8", + "name": "sigs.k8s.io/controller-runtime", + "version": "v0.7.0", + "purl": "pkg:golang/sigs.k8s.io/controller-runtime@v0.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/sig-storage-lib-external-provisioner/v6@v6.3.0?package-id=a28ed5f781c23a96", + "name": "sigs.k8s.io/sig-storage-lib-external-provisioner/v6", + "version": "v6.3.0", + "cpe": "cpe:2.3:a:sig-storage-lib-external-provisioner:v6:v6.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/sigs.k8s.io/sig-storage-lib-external-provisioner/v6@v6.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.0.2?package-id=2d41a704ecf334e1", + "name": "sigs.k8s.io/structured-merge-diff/v4", + "version": "v4.0.2", + "cpe": "cpe:2.3:a:structured-merge-diff:v4:v4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.2.0?package-id=e165a82828172177", + "name": "sigs.k8s.io/yaml", + "version": "v1.2.0", + "purl": "pkg:golang/sigs.k8s.io/yaml@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tzdata@2021a-0+deb10u1?arch=all&distro=debian-10&package-id=9e5b2198bbbd7fb0", + "publisher": "GNU Libc Maintainers ", + "name": "tzdata", + "version": "2021a-0+deb10u1", + "cpe": "cpe:2.3:a:tzdata:tzdata:2021a-0\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tzdata@2021a-0+deb10u1?arch=all&distro=debian-10" + }, + { + "type": "operating-system", + "name": "debian", + "version": "10", + "description": "Distroless", + "swid": { + "tagId": "debian", + "name": "debian", + "version": "10" + }, + "externalReferences": [ + { + "url": "https://github.com/GoogleContainerTools/distroless/issues/new", + "type": "issue-tracker" + }, + { + "url": "https://github.com/GoogleContainerTools/distroless", + "type": "website" + }, + { + "url": "https://github.com/GoogleContainerTools/distroless/blob/master/README.md", + "comment": "support", + "type": "other" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/adduser@3.118ubuntu2?arch=all&distro=ubuntu-20.04&package-id=69d1980477020fa3", + "publisher": "Ubuntu Core Developers ", + "name": "adduser", + "version": "3.118ubuntu2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:adduser:adduser:3.118ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/adduser@3.118ubuntu2?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/alsa-topology-conf@1.2.2-1?arch=all&distro=ubuntu-20.04&package-id=9bedfd9c57f4f85e", + "publisher": "Ubuntu Developers ", + "name": "alsa-topology-conf", + "version": "1.2.2-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:alsa-topology-conf:alsa-topology-conf:1.2.2-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/alsa-topology-conf@1.2.2-1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/alsa-ucm-conf@1.2.2-1ubuntu0.9?arch=all&distro=ubuntu-20.04&package-id=beddb81d6dea8f2", + "publisher": "Ubuntu Developers ", + "name": "alsa-ucm-conf", + "version": "1.2.2-1ubuntu0.9", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:alsa-ucm-conf:alsa-ucm-conf:1.2.2-1ubuntu0.9:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/alsa-ucm-conf@1.2.2-1ubuntu0.9?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/apt@2.0.6?arch=amd64&distro=ubuntu-20.04&package-id=55988ea1c6f336e3", + "publisher": "Ubuntu Developers ", + "name": "apt", + "version": "2.0.6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:apt:apt:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/apt@2.0.6?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/base-files@11ubuntu5.4?arch=amd64&distro=ubuntu-20.04&package-id=63c89c28c512e1db", + "publisher": "Ubuntu Developers ", + "name": "base-files", + "version": "11ubuntu5.4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:11ubuntu5.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/base-files@11ubuntu5.4?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/base-passwd@3.5.47?arch=amd64&distro=ubuntu-20.04&package-id=8b6e494dac6dab09", + "publisher": "Colin Watson ", + "name": "base-passwd", + "version": "3.5.47", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "PD" + } + } + ], + "cpe": "cpe:2.3:a:base-passwd:base-passwd:3.5.47:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/base-passwd@3.5.47?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/bash@5.0-6ubuntu1.1?arch=amd64&distro=ubuntu-20.04&package-id=e774a3e87113196b", + "publisher": "Ubuntu Developers ", + "name": "bash", + "version": "5.0-6ubuntu1.1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:bash:bash:5.0-6ubuntu1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/bash@5.0-6ubuntu1.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/bind9-dnsutils@1:9.16.1-0ubuntu2.8?arch=amd64&upstream=bind9&distro=ubuntu-20.04&package-id=329a09dac9f80305", + "publisher": "Ubuntu Developers ", + "name": "bind9-dnsutils", + "version": "1:9.16.1-0ubuntu2.8", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:bind9-dnsutils:bind9-dnsutils:1\\:9.16.1-0ubuntu2.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/bind9-dnsutils@1:9.16.1-0ubuntu2.8?arch=amd64&upstream=bind9&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/bind9-host@1:9.16.1-0ubuntu2.8?arch=amd64&upstream=bind9&distro=ubuntu-20.04&package-id=e908a518aa52cb2f", + "publisher": "Ubuntu Developers ", + "name": "bind9-host", + "version": "1:9.16.1-0ubuntu2.8", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:bind9-host:bind9-host:1\\:9.16.1-0ubuntu2.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/bind9-host@1:9.16.1-0ubuntu2.8?arch=amd64&upstream=bind9&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/bind9-libs@1:9.16.1-0ubuntu2.8?arch=amd64&upstream=bind9&distro=ubuntu-20.04&package-id=c73106f3649b27ec", + "publisher": "Ubuntu Developers ", + "name": "bind9-libs", + "version": "1:9.16.1-0ubuntu2.8", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:bind9-libs:bind9-libs:1\\:9.16.1-0ubuntu2.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/bind9-libs@1:9.16.1-0ubuntu2.8?arch=amd64&upstream=bind9&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/bsdutils@1:2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux%402.34-0.1ubuntu9.1&distro=ubuntu-20.04&package-id=20018d8de777eda9", + "publisher": "Ubuntu Developers ", + "name": "bsdutils", + "version": "1:2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:bsdutils:bsdutils:1\\:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/bsdutils@1:2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux%402.34-0.1ubuntu9.1&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/bzip2@1.0.8-2?arch=amd64&distro=ubuntu-20.04&package-id=97dab883cac4c956", + "publisher": "Ubuntu Developers ", + "name": "bzip2", + "version": "1.0.8-2", + "licenses": [ + { + "license": { + "name": "BSD-variant" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:bzip2:bzip2:1.0.8-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/bzip2@1.0.8-2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ca-certificates@20210119~20.04.1?arch=all&distro=ubuntu-20.04&package-id=b34020e11d6f8983", + "publisher": "Ubuntu Developers ", + "name": "ca-certificates", + "version": "20210119~20.04.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20210119\\~20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ca-certificates@20210119~20.04.1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/coreutils@8.30-3ubuntu2?arch=amd64&distro=ubuntu-20.04&package-id=f77283ee51e117fa", + "publisher": "Ubuntu Developers ", + "name": "coreutils", + "version": "8.30-3ubuntu2", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:coreutils:coreutils:8.30-3ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/coreutils@8.30-3ubuntu2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/curl@7.68.0-1ubuntu2.6?arch=amd64&distro=ubuntu-20.04&package-id=123513dd4ae6c6b7", + "publisher": "Ubuntu Developers ", + "name": "curl", + "version": "7.68.0-1ubuntu2.6", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:curl:curl:7.68.0-1ubuntu2.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/curl@7.68.0-1ubuntu2.6?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/dash@0.5.10.2-6?arch=amd64&distro=ubuntu-20.04&package-id=fa0f613df8411b7", + "publisher": "Ubuntu Developers ", + "name": "dash", + "version": "0.5.10.2-6", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:dash:dash:0.5.10.2-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/dash@0.5.10.2-6?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/debconf@1.5.73?arch=all&distro=ubuntu-20.04&package-id=128eb6066f5ec19c", + "publisher": "Ubuntu Developers ", + "name": "debconf", + "version": "1.5.73", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:debconf:debconf:1.5.73:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/debconf@1.5.73?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/debianutils@4.9.1?arch=amd64&distro=ubuntu-20.04&package-id=328b1094024bda26", + "publisher": "Ubuntu Developers ", + "name": "debianutils", + "version": "4.9.1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:debianutils:debianutils:4.9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/debianutils@4.9.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/diffutils@1:3.7-3?arch=amd64&distro=ubuntu-20.04&package-id=d21aefcaf9c9c9b6", + "publisher": "Ubuntu Developers ", + "name": "diffutils", + "version": "1:3.7-3", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:diffutils:diffutils:1\\:3.7-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/diffutils@1:3.7-3?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/dmsetup@2:1.02.167-1ubuntu1?arch=amd64&upstream=lvm2%402.03.07-1ubuntu1&distro=ubuntu-20.04&package-id=c0d6316be2747294", + "publisher": "Ubuntu Developers ", + "name": "dmsetup", + "version": "2:1.02.167-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:dmsetup:dmsetup:2\\:1.02.167-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/dmsetup@2:1.02.167-1ubuntu1?arch=amd64&upstream=lvm2%402.03.07-1ubuntu1&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/dnsutils@1:9.16.1-0ubuntu2.8?arch=all&upstream=bind9&distro=ubuntu-20.04&package-id=a60d40be4a5d7f4c", + "publisher": "Ubuntu Developers ", + "name": "dnsutils", + "version": "1:9.16.1-0ubuntu2.8", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:dnsutils:dnsutils:1\\:9.16.1-0ubuntu2.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/dnsutils@1:9.16.1-0ubuntu2.8?arch=all&upstream=bind9&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/dpkg@1.19.7ubuntu3?arch=amd64&distro=ubuntu-20.04&package-id=e28aea5c134a7f8", + "publisher": "Ubuntu Developers ", + "name": "dpkg", + "version": "1.19.7ubuntu3", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain-md5" + } + }, + { + "license": { + "name": "public-domain-s-s-d" + } + } + ], + "cpe": "cpe:2.3:a:dpkg:dpkg:1.19.7ubuntu3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/dpkg@1.19.7ubuntu3?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/e2fsprogs@1.45.5-2ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=6a037357f3ebf47a", + "publisher": "Ubuntu Developers ", + "name": "e2fsprogs", + "version": "1.45.5-2ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:e2fsprogs:e2fsprogs:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/e2fsprogs@1.45.5-2ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/fdisk@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=a57a5f37c7970fe9", + "publisher": "Ubuntu Developers ", + "name": "fdisk", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:fdisk:fdisk:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/fdisk@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/file@1:5.38-4?arch=amd64&distro=ubuntu-20.04&package-id=e7f183ce6dc05cfb", + "publisher": "Ubuntu Developers ", + "name": "file", + "version": "1:5.38-4", + "licenses": [ + { + "license": { + "name": "BSD-2-Clause-alike" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-Clause-regents" + } + }, + { + "license": { + "name": "MIT-Old-Style-with-legal-disclaimer-2" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:file:file:1\\:5.38-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/file@1:5.38-4?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/findutils@4.7.0-1ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=103a5999463b7e08", + "publisher": "Ubuntu Developers ", + "name": "findutils", + "version": "4.7.0-1ubuntu1", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:findutils:findutils:4.7.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/findutils@4.7.0-1ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/gcc-10-base@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04&package-id=a268d6ad2986f239", + "publisher": "Ubuntu Core developers ", + "name": "gcc-10-base", + "version": "10.3.0-1ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:gcc-10-base:gcc-10-base:10.3.0-1ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/gcc-10-base@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/roaringbitmap/roaring@v0.4.18?package-id=d089ae842575f8b2", + "name": "github.com/RoaringBitmap/roaring", + "version": "v0.4.18", + "cpe": "cpe:2.3:a:RoaringBitmap:roaring:v0.4.18:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/RoaringBitmap/roaring@v0.4.18" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=5f85d29eac3ebc25", + "name": "github.com/beorn7/perks", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/beorn7/perks@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/c9s/goprocinfo@v0.0.0-20190309065803-0b2ad9ac246b?package-id=24f952dc860a2901", + "name": "github.com/c9s/goprocinfo", + "version": "v0.0.0-20190309065803-0b2ad9ac246b", + "cpe": "cpe:2.3:a:c9s:goprocinfo:v0.0.0-20190309065803-0b2ad9ac246b:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/c9s/goprocinfo@v0.0.0-20190309065803-0b2ad9ac246b" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.1.0?package-id=5521606a3929bc2a", + "name": "github.com/cespare/xxhash/v2", + "version": "v2.1.0", + "cpe": "cpe:2.3:a:cespare:xxhash\\/v2:v2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/container-storage-interface/spec@v1.2.0?package-id=bad6288e8e35d5fc", + "name": "github.com/container-storage-interface/spec", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:container-storage-interface:spec:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/container-storage-interface/spec@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0-20190314233015-f79a8a8ca69d?package-id=70e130a04c65e383", + "name": "github.com/cpuguy83/go-md2man/v2", + "version": "v2.0.0-20190314233015-f79a8a8ca69d", + "cpe": "cpe:2.3:a:cpuguy83:go-md2man\\/v2:v2.0.0-20190314233015-f79a8a8ca69d:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0-20190314233015-f79a8a8ca69d" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1?package-id=3db79e08ec9be340", + "name": "github.com/davecgh/go-spew", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:davecgh:go-spew:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/docker/distribution@v2.7.1+incompatible?package-id=1e5eafbca9b9b44c", + "name": "github.com/docker/distribution", + "version": "v2.7.1+incompatible", + "cpe": "cpe:2.3:a:docker:distribution:v2.7.1\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/distribution@v2.7.1+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/glycerine/go-unsnap-stream@v0.0.0-20181221182339-f9677308dec2?package-id=53a7508276bd45c2", + "name": "github.com/glycerine/go-unsnap-stream", + "version": "v0.0.0-20181221182339-f9677308dec2", + "cpe": "cpe:2.3:a:glycerine:go-unsnap-stream:v0.0.0-20181221182339-f9677308dec2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/glycerine/go-unsnap-stream@v0.0.0-20181221182339-f9677308dec2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2?package-id=934cf5f83ca33cac", + "name": "github.com/gogo/protobuf", + "version": "v1.3.2", + "cpe": "cpe:2.3:a:gogo:protobuf:v1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/groupcache@v0.0.0-20191002201903-404acd9df4cc?package-id=7f2cd7756b0aaa55", + "name": "github.com/golang/groupcache", + "version": "v0.0.0-20191002201903-404acd9df4cc", + "cpe": "cpe:2.3:a:golang:groupcache:v0.0.0-20191002201903-404acd9df4cc:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20191002201903-404acd9df4cc" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.3.3-0.20190920234318-1680a479a2cf?package-id=44af7d08ac6deef1", + "name": "github.com/golang/protobuf", + "version": "v1.3.3-0.20190920234318-1680a479a2cf", + "cpe": "cpe:2.3:a:golang:protobuf:v1.3.3-0.20190920234318-1680a479a2cf:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.3.3-0.20190920234318-1680a479a2cf" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/snappy@v0.0.1?package-id=324ab41994e42af7", + "name": "github.com/golang/snappy", + "version": "v0.0.1", + "cpe": "cpe:2.3:a:golang:snappy:v0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/snappy@v0.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.3.0?package-id=34d87a26cf0a41de", + "name": "github.com/google/go-cmp", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:google:go-cmp:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-cmp@v0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/gofuzz@v1.1.0?package-id=1f72a36359414328", + "name": "github.com/google/gofuzz", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:google:gofuzz:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/gofuzz@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/googleapis/gnostic@v0.3.1?package-id=ff98de637245c11c", + "name": "github.com/googleapis/gnostic", + "version": "v0.3.1", + "cpe": "cpe:2.3:a:googleapis:gnostic:v0.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/googleapis/gnostic@v0.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gorilla/context@v1.1.1?package-id=325bae867d0f762a", + "name": "github.com/gorilla/context", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:gorilla:context:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gorilla/context@v1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gorilla/handlers@v1.4.2?package-id=798fee4e9a14ffb5", + "name": "github.com/gorilla/handlers", + "version": "v1.4.2", + "cpe": "cpe:2.3:a:gorilla:handlers:v1.4.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gorilla/handlers@v1.4.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gorilla/mux@v1.7.3?package-id=1ae947ddc1edb3ab", + "name": "github.com/gorilla/mux", + "version": "v1.7.3", + "cpe": "cpe:2.3:a:gorilla:mux:v1.7.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gorilla/mux@v1.7.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gorilla/websocket@v1.4.2?package-id=7f1146c54bea2751", + "name": "github.com/gorilla/websocket", + "version": "v1.4.2", + "cpe": "cpe:2.3:a:gorilla:websocket:v1.4.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gorilla/websocket@v1.4.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/hashicorp/golang-lru@v0.5.3?package-id=ccffa42c4dbdd4ce", + "name": "github.com/hashicorp/golang-lru", + "version": "v0.5.3", + "cpe": "cpe:2.3:a:hashicorp:golang-lru:v0.5.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/golang-lru@v0.5.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/honestbee/jobq@v1.0.2?package-id=ef29baa163ddbb5e", + "name": "github.com/honestbee/jobq", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:honestbee:jobq:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/honestbee/jobq@v1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.8?package-id=5b692dee7346216f", + "name": "github.com/imdario/mergo", + "version": "v0.3.8", + "cpe": "cpe:2.3:a:imdario:mergo:v0.3.8:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/imdario/mergo@v0.3.8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/jinzhu/copier@v0.0.0-20190924061706-b57f9002281a?package-id=3c7777c5ddb3520e", + "name": "github.com/jinzhu/copier", + "version": "v0.0.0-20190924061706-b57f9002281a", + "cpe": "cpe:2.3:a:jinzhu:copier:v0.0.0-20190924061706-b57f9002281a:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jinzhu/copier@v0.0.0-20190924061706-b57f9002281a" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.8?package-id=2f8fc2954ce12864", + "name": "github.com/json-iterator/go", + "version": "v1.1.8", + "cpe": "cpe:2.3:a:json-iterator:go:v1.1.8:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/json-iterator/go@v1.1.8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/kubernetes-csi/csi-lib-utils@v0.6.1?package-id=a785ad59d51801be", + "name": "github.com/kubernetes-csi/csi-lib-utils", + "version": "v0.6.1", + "cpe": "cpe:2.3:a:kubernetes-csi:csi-lib-utils:v0.6.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/kubernetes-csi/csi-lib-utils@v0.6.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/longhorn/backing-image-manager@v0.0.0-20210809125601-48e29abcd637?package-id=525e43f22729f606", + "name": "github.com/longhorn/backing-image-manager", + "version": "v0.0.0-20210809125601-48e29abcd637", + "cpe": "cpe:2.3:a:longhorn:backing-image-manager:v0.0.0-20210809125601-48e29abcd637:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/longhorn/backing-image-manager@v0.0.0-20210809125601-48e29abcd637" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/longhorn/backupstore@v0.0.0-20210817080617-8ea3843e6b0d?package-id=7e8c2773e8ca8260", + "name": "github.com/longhorn/backupstore", + "version": "v0.0.0-20210817080617-8ea3843e6b0d", + "cpe": "cpe:2.3:a:longhorn:backupstore:v0.0.0-20210817080617-8ea3843e6b0d:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/longhorn/backupstore@v0.0.0-20210817080617-8ea3843e6b0d" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/longhorn/go-iscsi-helper@v0.0.0-20201111045018-ee87992ec536?package-id=bd17f74dcd826f71", + "name": "github.com/longhorn/go-iscsi-helper", + "version": "v0.0.0-20201111045018-ee87992ec536", + "cpe": "cpe:2.3:a:longhorn:go-iscsi-helper:v0.0.0-20201111045018-ee87992ec536:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/longhorn/go-iscsi-helper@v0.0.0-20201111045018-ee87992ec536" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/longhorn/longhorn-instance-manager@v0.0.0-20210729081215-50c310f97378?package-id=b87bb53661cac7c3", + "name": "github.com/longhorn/longhorn-instance-manager", + "version": "v0.0.0-20210729081215-50c310f97378", + "cpe": "cpe:2.3:a:longhorn:longhorn-instance-manager:v0.0.0-20210729081215-50c310f97378:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/longhorn/longhorn-instance-manager@v0.0.0-20210729081215-50c310f97378" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/longhorn/longhorn-manager@(devel)?package-id=685b701df9ee4ba2", + "name": "github.com/longhorn/longhorn-manager", + "version": "(devel)", + "cpe": "cpe:2.3:a:longhorn:longhorn-manager:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/longhorn/longhorn-manager@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.1?package-id=baa43fe250a569f4", + "name": "github.com/matttproud/golang_protobuf_extensions", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:matttproud:golang-protobuf-extensions:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=d0af01f76410eec4", + "name": "github.com/modern-go/concurrent", + "version": "v0.0.0-20180306012644-bacd9c7ef1dd", + "cpe": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.1?package-id=120b5391539ce8dc", + "name": "github.com/modern-go/reflect2", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:modern-go:reflect2:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0-rc1?package-id=de8720f51866f3e5", + "name": "github.com/opencontainers/go-digest", + "version": "v1.0.0-rc1", + "cpe": "cpe:2.3:a:opencontainers:go-digest:v1.0.0-rc1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0-rc1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/philhofer/fwd@v1.0.0?package-id=5704d478ebe07f9b", + "name": "github.com/philhofer/fwd", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:philhofer:fwd:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/philhofer/fwd@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=8e8eaa5cdac0593c", + "name": "github.com/pkg/errors", + "version": "v0.9.1", + "cpe": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pkg/errors@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/client_golang@v1.2.1?package-id=d5c8d56e8fe1d61c", + "name": "github.com/prometheus/client_golang", + "version": "v1.2.1", + "cpe": "cpe:2.3:a:prometheus:client-golang:v1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_golang@v1.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/client_model@v0.2.0?package-id=6e586fe5dc5bb9fa", + "name": "github.com/prometheus/client_model", + "version": "v0.2.0", + "cpe": "cpe:2.3:a:prometheus:client-model:v0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_model@v0.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/common@v0.7.0?package-id=59f97a48a9317019", + "name": "github.com/prometheus/common", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:prometheus:common:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/common@v0.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/procfs@v0.0.5?package-id=dcac005325f87b93", + "name": "github.com/prometheus/procfs", + "version": "v0.0.5", + "cpe": "cpe:2.3:a:prometheus:procfs:v0.0.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/procfs@v0.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/rancher/go-rancher@v0.1.1-0.20190307222549-9756097e5e4c?package-id=1800d99a24efcb3f", + "name": "github.com/rancher/go-rancher", + "version": "v0.1.1-0.20190307222549-9756097e5e4c", + "cpe": "cpe:2.3:a:rancher:go-rancher:v0.1.1-0.20190307222549-9756097e5e4c:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rancher/go-rancher@v0.1.1-0.20190307222549-9756097e5e4c" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/robfig/cron@v1.2.0?package-id=33721f3e8cc20a28", + "name": "github.com/robfig/cron", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:robfig:cron:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/robfig/cron@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/russross/blackfriday/v2@v2.0.1?package-id=d6d74f166ab19eb6", + "name": "github.com/russross/blackfriday/v2", + "version": "v2.0.1", + "cpe": "cpe:2.3:a:russross:blackfriday\\/v2:v2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/russross/blackfriday/v2@v2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/satori/go.uuid@v1.2.0?package-id=2d4637bafb0b29d2", + "name": "github.com/satori/go.uuid", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:satori:go.uuid:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/satori/go.uuid@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/shurcool/sanitized_anchor_name@v1.0.0?package-id=4fef9700f2af07a1", + "name": "github.com/shurcooL/sanitized_anchor_name", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:shurcooL:sanitized-anchor-name:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/shurcooL/sanitized_anchor_name@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.4.2?package-id=466e11bf745ece84", + "name": "github.com/sirupsen/logrus", + "version": "v1.4.2", + "cpe": "cpe:2.3:a:sirupsen:logrus:v1.4.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/sirupsen/logrus@v1.4.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5?package-id=dbc8ff376b8ba02f", + "name": "github.com/spf13/pflag", + "version": "v1.0.5", + "cpe": "cpe:2.3:a:spf13:pflag:v1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/tinylib/msgp@v1.1.1-0.20190612170807-0573788bc2a8?package-id=e8d752ccadf8b15e", + "name": "github.com/tinylib/msgp", + "version": "v1.1.1-0.20190612170807-0573788bc2a8", + "cpe": "cpe:2.3:a:tinylib:msgp:v1.1.1-0.20190612170807-0573788bc2a8:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/tinylib/msgp@v1.1.1-0.20190612170807-0573788bc2a8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/urfave/cli@v1.22.1?package-id=c10fc4d8849a889", + "name": "github.com/urfave/cli", + "version": "v1.22.1", + "cpe": "cpe:2.3:a:urfave:cli:v1.22.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/urfave/cli@v1.22.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9?package-id=6fc14e333bfcd43c", + "name": "golang.org/x/crypto", + "version": "v0.0.0-20200622213623-75b288015ac9", + "cpe": "cpe:2.3:a:golang:x\\/crypto:v0.0.0-20200622213623-75b288015ac9:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b?package-id=446ccb24ce95fa50", + "name": "golang.org/x/net", + "version": "v0.0.0-20201110031124-69a78807bb2b", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.0.0-20201110031124-69a78807bb2b:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45?package-id=8e98cbaad6157e39", + "name": "golang.org/x/oauth2", + "version": "v0.0.0-20190604053449-0f29369cfe45", + "cpe": "cpe:2.3:a:golang:x\\/oauth2:v0.0.0-20190604053449-0f29369cfe45:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd?package-id=16c116d250ba5edd", + "name": "golang.org/x/sys", + "version": "v0.0.0-20201112073958-5cba982894dd", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20201112073958-5cba982894dd:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/text@v0.3.3?package-id=a5f3e8ea2e87c78", + "name": "golang.org/x/text", + "version": "v0.3.3", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.3.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20190921001708-c4c64cad1fd0?package-id=1674d56fc882a7b8", + "name": "golang.org/x/time", + "version": "v0.0.0-20190921001708-c4c64cad1fd0", + "cpe": "cpe:2.3:a:golang:x\\/time:v0.0.0-20190921001708-c4c64cad1fd0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/time@v0.0.0-20190921001708-c4c64cad1fd0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20190819201941-24fa4b261c55?package-id=943b37230736746f", + "name": "google.golang.org/genproto", + "version": "v0.0.0-20190819201941-24fa4b261c55", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20190819201941-24fa4b261c55:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20190819201941-24fa4b261c55" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.26.0?package-id=1c02cb0d493367c6", + "name": "google.golang.org/grpc", + "version": "v1.26.0", + "cpe": "cpe:2.3:a:google:grpc:v1.26.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.26.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=160b9c2f3c189b2b", + "name": "gopkg.in/inf.v0", + "version": "v0.9.1", + "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/square/go-jose.v2@v2.3.1?package-id=22fdcdb79be95993", + "name": "gopkg.in/square/go-jose.v2", + "version": "v2.3.1", + "purl": "pkg:golang/gopkg.in/square/go-jose.v2@v2.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/yaml.v2@v2.2.8?package-id=8483c8d301d16462", + "name": "gopkg.in/yaml.v2", + "version": "v2.2.8", + "purl": "pkg:golang/gopkg.in/yaml.v2@v2.2.8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/gpgv@2.2.19-3ubuntu2.1?arch=amd64&upstream=gnupg2&distro=ubuntu-20.04&package-id=b3a56223224b45d2", + "publisher": "Ubuntu Developers ", + "name": "gpgv", + "version": "2.2.19-3ubuntu2.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + }, + { + "license": { + "name": "TinySCHEME" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:gpgv:gpgv:2.2.19-3ubuntu2.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/gpgv@2.2.19-3ubuntu2.1?arch=amd64&upstream=gnupg2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/grep@3.4-1?arch=amd64&distro=ubuntu-20.04&package-id=e7af9af4b90473f", + "publisher": "Ubuntu Developers ", + "name": "grep", + "version": "3.4-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:grep:grep:3.4-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/grep@3.4-1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/gzip@1.10-0ubuntu4?arch=amd64&distro=ubuntu-20.04&package-id=a9696917d3b9f9fc", + "publisher": "Ubuntu Developers ", + "name": "gzip", + "version": "1.10-0ubuntu4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:gzip:gzip:1.10-0ubuntu4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/gzip@1.10-0ubuntu4?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/hostname@3.23?arch=amd64&distro=ubuntu-20.04&package-id=263dae70cc8e6a4f", + "publisher": "Ubuntu Developers ", + "name": "hostname", + "version": "3.23", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:hostname:hostname:3.23:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/hostname@3.23?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/init-system-helpers@1.57?arch=all&distro=ubuntu-20.04&package-id=b0e335d96f12154d", + "publisher": "Ubuntu Developers ", + "name": "init-system-helpers", + "version": "1.57", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:init-system-helpers:init-system-helpers:1.57:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/init-system-helpers@1.57?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/iproute2@5.5.0-1ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=f4afda4dc550367c", + "publisher": "Ubuntu Developers ", + "name": "iproute2", + "version": "5.5.0-1ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:iproute2:iproute2:5.5.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/iproute2@5.5.0-1ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/iputils-ping@3:20190709-3?arch=amd64&upstream=iputils&distro=ubuntu-20.04&package-id=83f284daebd0969f", + "publisher": "Ubuntu Developers ", + "name": "iputils-ping", + "version": "3:20190709-3", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:iputils-ping:iputils-ping:3\\:20190709-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/iputils-ping@3:20190709-3?arch=amd64&upstream=iputils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/api@v0.18.19?package-id=337b0c8ae743e766", + "name": "k8s.io/api", + "version": "v0.18.19", + "purl": "pkg:golang/k8s.io/api@v0.18.19" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/apiextensions-apiserver@v0.18.19?package-id=ae66a6d3b8562056", + "name": "k8s.io/apiextensions-apiserver", + "version": "v0.18.19", + "purl": "pkg:golang/k8s.io/apiextensions-apiserver@v0.18.19" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.18.19?package-id=5d26de9c6adafbb5", + "name": "k8s.io/apimachinery", + "version": "v0.18.19", + "purl": "pkg:golang/k8s.io/apimachinery@v0.18.19" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/apiserver@v0.18.19?package-id=7f17cc418dc57557", + "name": "k8s.io/apiserver", + "version": "v0.18.19", + "purl": "pkg:golang/k8s.io/apiserver@v0.18.19" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/client-go@v0.18.19?package-id=aa247b01a3d9ad99", + "name": "k8s.io/client-go", + "version": "v0.18.19", + "purl": "pkg:golang/k8s.io/client-go@v0.18.19" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/component-base@v0.18.19?package-id=bfe87df4dc740d63", + "name": "k8s.io/component-base", + "version": "v0.18.19", + "purl": "pkg:golang/k8s.io/component-base@v0.18.19" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/klog@v1.0.0?package-id=6b36beaa4b8fb955", + "name": "k8s.io/klog", + "version": "v1.0.0", + "purl": "pkg:golang/k8s.io/klog@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20200410145947-61e04a5be9a6?package-id=e3c46d837051ee8f", + "name": "k8s.io/kube-openapi", + "version": "v0.0.0-20200410145947-61e04a5be9a6", + "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20200410145947-61e04a5be9a6" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/kubernetes@v1.18.19?package-id=79c702d72d73abad", + "name": "k8s.io/kubernetes", + "version": "v1.18.19", + "purl": "pkg:golang/k8s.io/kubernetes@v1.18.19" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/metrics@v0.18.19?package-id=4a8db5ce35d89963", + "name": "k8s.io/metrics", + "version": "v0.18.19", + "purl": "pkg:golang/k8s.io/metrics@v0.18.19" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20200324210504-a9aa75ae1b89?package-id=ad9c757e4a913b12", + "name": "k8s.io/utils", + "version": "v0.0.0-20200324210504-a9aa75ae1b89", + "purl": "pkg:golang/k8s.io/utils@v0.0.0-20200324210504-a9aa75ae1b89" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/keyutils@1.6-6ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=a61b8b47cf58815b", + "publisher": "Ubuntu Developers ", + "name": "keyutils", + "version": "1.6-6ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:keyutils:keyutils:1.6-6ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/keyutils@1.6-6ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/krb5-locales@1.17-6ubuntu4.1?arch=all&upstream=krb5&distro=ubuntu-20.04&package-id=87ea48972fb4adab", + "publisher": "Ubuntu Developers ", + "name": "krb5-locales", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:krb5-locales:krb5-locales:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/krb5-locales@1.17-6ubuntu4.1?arch=all&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libacl1@2.2.53-6?arch=amd64&upstream=acl&distro=ubuntu-20.04&package-id=5cec2c2009596050", + "publisher": "Ubuntu Developers ", + "name": "libacl1", + "version": "2.2.53-6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libacl1:libacl1:2.2.53-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libacl1@2.2.53-6?arch=amd64&upstream=acl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libapt-pkg6.0@2.0.6?arch=amd64&upstream=apt&distro=ubuntu-20.04&package-id=864e143f4c606a6c", + "publisher": "Ubuntu Developers ", + "name": "libapt-pkg6.0", + "version": "2.0.6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libapt-pkg6.0:libapt-pkg6.0:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libapt-pkg6.0@2.0.6?arch=amd64&upstream=apt&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libasn1-8-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=915f8cf154d1b7ce", + "publisher": "Ubuntu Developers ", + "name": "libasn1-8-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libasn1-8-heimdal:libasn1-8-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libasn1-8-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libasound2@1.2.2-2.1ubuntu2.4?arch=amd64&upstream=alsa-lib&distro=ubuntu-20.04&package-id=32aecebdfc30e11b", + "publisher": "Ubuntu Developers ", + "name": "libasound2", + "version": "1.2.2-2.1ubuntu2.4", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "LPGL-2.1+" + } + } + ], + "cpe": "cpe:2.3:a:libasound2:libasound2:1.2.2-2.1ubuntu2.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libasound2@1.2.2-2.1ubuntu2.4?arch=amd64&upstream=alsa-lib&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libasound2-data@1.2.2-2.1ubuntu2.4?arch=all&upstream=alsa-lib&distro=ubuntu-20.04&package-id=57d6fc752e69145d", + "publisher": "Ubuntu Developers ", + "name": "libasound2-data", + "version": "1.2.2-2.1ubuntu2.4", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "LPGL-2.1+" + } + } + ], + "cpe": "cpe:2.3:a:libasound2-data:libasound2-data:1.2.2-2.1ubuntu2.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libasound2-data@1.2.2-2.1ubuntu2.4?arch=all&upstream=alsa-lib&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libatm1@1:2.5.1-4?arch=amd64&upstream=linux-atm&distro=ubuntu-20.04&package-id=38fbc3dda7412f50", + "publisher": "Ubuntu Developers ", + "name": "libatm1", + "version": "1:2.5.1-4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libatm1:libatm1:1\\:2.5.1-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libatm1@1:2.5.1-4?arch=amd64&upstream=linux-atm&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libattr1@1:2.4.48-5?arch=amd64&upstream=attr&distro=ubuntu-20.04&package-id=edf8dd62bd537bd5", + "publisher": "Ubuntu Developers ", + "name": "libattr1", + "version": "1:2.4.48-5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libattr1:libattr1:1\\:2.4.48-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libattr1@1:2.4.48-5?arch=amd64&upstream=attr&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libaudit-common@1:2.8.5-2ubuntu6?arch=all&upstream=audit&distro=ubuntu-20.04&package-id=4a463ab850d7c68c", + "publisher": "Ubuntu Developers ", + "name": "libaudit-common", + "version": "1:2.8.5-2ubuntu6", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit-common:libaudit-common:1\\:2.8.5-2ubuntu6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libaudit-common@1:2.8.5-2ubuntu6?arch=all&upstream=audit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libaudit1@1:2.8.5-2ubuntu6?arch=amd64&upstream=audit&distro=ubuntu-20.04&package-id=be9537deb8db616e", + "publisher": "Ubuntu Developers ", + "name": "libaudit1", + "version": "1:2.8.5-2ubuntu6", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit1:libaudit1:1\\:2.8.5-2ubuntu6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libaudit1@1:2.8.5-2ubuntu6?arch=amd64&upstream=audit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libblkid1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=e1d6f2e998332d7d", + "publisher": "Ubuntu Developers ", + "name": "libblkid1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libblkid1:libblkid1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libblkid1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libbrotli1@1.0.7-6ubuntu0.1?arch=amd64&upstream=brotli&distro=ubuntu-20.04&package-id=3cfc22417c2e74ac", + "publisher": "Ubuntu Developers ", + "name": "libbrotli1", + "version": "1.0.7-6ubuntu0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libbrotli1:libbrotli1:1.0.7-6ubuntu0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libbrotli1@1.0.7-6ubuntu0.1?arch=amd64&upstream=brotli&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libbsd0@0.10.0-1?arch=amd64&upstream=libbsd&distro=ubuntu-20.04&package-id=88ee716d66a17869", + "publisher": "Ubuntu Developers ", + "name": "libbsd0", + "version": "0.10.0-1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-clause-author" + } + }, + { + "license": { + "name": "BSD-2-clause-verbatim" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-John-Birrell" + } + }, + { + "license": { + "name": "BSD-3-clause-Regents" + } + }, + { + "license": { + "name": "BSD-3-clause-author" + } + }, + { + "license": { + "name": "BSD-4-clause-Christopher-G-Demetriou" + } + }, + { + "license": { + "name": "BSD-4-clause-Niels-Provos" + } + }, + { + "license": { + "name": "BSD-5-clause-Peter-Wemm" + } + }, + { + "license": { + "id": "Beerware" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "ISC-Original" + } + }, + { + "license": { + "name": "public-domain" + } + }, + { + "license": { + "name": "public-domain-Colin-Plumb" + } + } + ], + "cpe": "cpe:2.3:a:libbsd0:libbsd0:0.10.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libbsd0@0.10.0-1?arch=amd64&upstream=libbsd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libbz2-1.0@1.0.8-2?arch=amd64&upstream=bzip2&distro=ubuntu-20.04&package-id=fd8b0edf257b69b7", + "publisher": "Ubuntu Developers ", + "name": "libbz2-1.0", + "version": "1.0.8-2", + "licenses": [ + { + "license": { + "name": "BSD-variant" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libbz2-1.0:libbz2-1.0:1.0.8-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libbz2-1.0@1.0.8-2?arch=amd64&upstream=bzip2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.2?arch=amd64&upstream=glibc&distro=ubuntu-20.04&package-id=256facf7cbb95a65", + "publisher": "Ubuntu Developers ", + "name": "libc-bin", + "version": "2.31-0ubuntu9.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc-bin:libc-bin:2.31-0ubuntu9.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.2?arch=amd64&upstream=glibc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libc6@2.31-0ubuntu9.2?arch=amd64&upstream=glibc&distro=ubuntu-20.04&package-id=2a96b94fa4db214", + "publisher": "Ubuntu Developers ", + "name": "libc6", + "version": "2.31-0ubuntu9.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc6:libc6:2.31-0ubuntu9.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libc6@2.31-0ubuntu9.2?arch=amd64&upstream=glibc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcanberra0@0.30-7ubuntu1?arch=amd64&upstream=libcanberra&distro=ubuntu-20.04&package-id=a64c0154d7d2f145", + "publisher": "Ubuntu Developers ", + "name": "libcanberra0", + "version": "0.30-7ubuntu1", + "licenses": [ + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libcanberra0:libcanberra0:0.30-7ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcanberra0@0.30-7ubuntu1?arch=amd64&upstream=libcanberra&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcap-ng0@0.7.9-2.1build1?arch=amd64&upstream=libcap-ng&distro=ubuntu-20.04&package-id=57ceb68462a99cb4", + "publisher": "Ubuntu Developers ", + "name": "libcap-ng0", + "version": "0.7.9-2.1build1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libcap-ng0:libcap-ng0:0.7.9-2.1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcap-ng0@0.7.9-2.1build1?arch=amd64&upstream=libcap-ng&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcap2@1:2.32-1?arch=amd64&distro=ubuntu-20.04&package-id=682f3e304c127762", + "publisher": "Ubuntu Developers ", + "name": "libcap2", + "version": "1:2.32-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libcap2:libcap2:1\\:2.32-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcap2@1:2.32-1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcap2-bin@1:2.32-1?arch=amd64&upstream=libcap2&distro=ubuntu-20.04&package-id=8f0ae2256856772c", + "publisher": "Ubuntu Developers ", + "name": "libcap2-bin", + "version": "1:2.32-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libcap2-bin:libcap2-bin:1\\:2.32-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcap2-bin@1:2.32-1?arch=amd64&upstream=libcap2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcom-err2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=fbaeb4c3d5d0f976", + "publisher": "Ubuntu Developers ", + "name": "libcom-err2", + "version": "1.45.5-2ubuntu1", + "cpe": "cpe:2.3:a:libcom-err2:libcom-err2:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcom-err2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcrypt1@1:4.4.10-10ubuntu4?arch=amd64&upstream=libxcrypt&distro=ubuntu-20.04&package-id=8a4302e2e7027353", + "publisher": "Ubuntu Developers ", + "name": "libcrypt1", + "version": "1:4.4.10-10ubuntu4", + "cpe": "cpe:2.3:a:libcrypt1:libcrypt1:1\\:4.4.10-10ubuntu4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcrypt1@1:4.4.10-10ubuntu4?arch=amd64&upstream=libxcrypt&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcurl4@7.68.0-1ubuntu2.6?arch=amd64&upstream=curl&distro=ubuntu-20.04&package-id=c9dd9bae4f158cd3", + "publisher": "Ubuntu Developers ", + "name": "libcurl4", + "version": "7.68.0-1ubuntu2.6", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libcurl4:libcurl4:7.68.0-1ubuntu2.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcurl4@7.68.0-1ubuntu2.6?arch=amd64&upstream=curl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libdb5.3@5.3.28+dfsg1-0.6ubuntu2?arch=amd64&upstream=db5.3&distro=ubuntu-20.04&package-id=bc84b4da0031640d", + "publisher": "Ubuntu Developers ", + "name": "libdb5.3", + "version": "5.3.28+dfsg1-0.6ubuntu2", + "cpe": "cpe:2.3:a:libdb5.3:libdb5.3:5.3.28\\+dfsg1-0.6ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libdb5.3@5.3.28+dfsg1-0.6ubuntu2?arch=amd64&upstream=db5.3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libdebconfclient0@0.251ubuntu1?arch=amd64&upstream=cdebconf&distro=ubuntu-20.04&package-id=78bbe40d9c2ef9b5", + "publisher": "Ubuntu Developers ", + "name": "libdebconfclient0", + "version": "0.251ubuntu1", + "cpe": "cpe:2.3:a:libdebconfclient0:libdebconfclient0:0.251ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libdebconfclient0@0.251ubuntu1?arch=amd64&upstream=cdebconf&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libdevmapper1.02.1@2:1.02.167-1ubuntu1?arch=amd64&upstream=lvm2%402.03.07-1ubuntu1&distro=ubuntu-20.04&package-id=30b70188951a65f0", + "publisher": "Ubuntu Developers ", + "name": "libdevmapper1.02.1", + "version": "2:1.02.167-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libdevmapper1.02.1:libdevmapper1.02.1:2\\:1.02.167-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libdevmapper1.02.1@2:1.02.167-1ubuntu1?arch=amd64&upstream=lvm2%402.03.07-1ubuntu1&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libedit2@3.1-20191231-1?arch=amd64&upstream=libedit&distro=ubuntu-20.04&package-id=ff7e1552e23080f7", + "publisher": "Ubuntu Developers ", + "name": "libedit2", + "version": "3.1-20191231-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libedit2:libedit2:3.1-20191231-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libedit2@3.1-20191231-1?arch=amd64&upstream=libedit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libelf1@0.176-1.1build1?arch=amd64&upstream=elfutils&distro=ubuntu-20.04&package-id=316daaa294f5e8d8", + "publisher": "Ubuntu Developers ", + "name": "libelf1", + "version": "0.176-1.1build1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL-" + } + } + ], + "cpe": "cpe:2.3:a:libelf1:libelf1:0.176-1.1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libelf1@0.176-1.1build1?arch=amd64&upstream=elfutils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libevent-2.1-7@2.1.11-stable-1?arch=amd64&upstream=libevent&distro=ubuntu-20.04&package-id=6b93a7dccfeb49e0", + "publisher": "Balint Reczey ", + "name": "libevent-2.1-7", + "version": "2.1.11-stable-1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-3-Clause~Kitware" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "FSFUL" + } + }, + { + "license": { + "id": "FSFULLR" + } + }, + { + "license": { + "name": "FSFULLR-No-Warranty" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + } + ], + "cpe": "cpe:2.3:a:libevent-2.1-7:libevent-2.1-7:2.1.11-stable-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libevent-2.1-7@2.1.11-stable-1?arch=amd64&upstream=libevent&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libexpat1@2.2.9-1build1?arch=amd64&upstream=expat&distro=ubuntu-20.04&package-id=f3ac75cd161f13c6", + "publisher": "Ubuntu Developers ", + "name": "libexpat1", + "version": "2.2.9-1build1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libexpat1:libexpat1:2.2.9-1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libexpat1@2.2.9-1build1?arch=amd64&upstream=expat&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libext2fs2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=ec6113f55e73d1fd", + "publisher": "Ubuntu Developers ", + "name": "libext2fs2", + "version": "1.45.5-2ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libext2fs2:libext2fs2:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libext2fs2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libfdisk1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=486ce61647644619", + "publisher": "Ubuntu Developers ", + "name": "libfdisk1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libfdisk1:libfdisk1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libfdisk1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libffi7@3.3-4?arch=amd64&upstream=libffi&distro=ubuntu-20.04&package-id=b43b799d45da9d97", + "publisher": "Ubuntu Developers ", + "name": "libffi7", + "version": "3.3-4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libffi7:libffi7:3.3-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libffi7@3.3-4?arch=amd64&upstream=libffi&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgcc-s1@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04&package-id=f98ce69fd9e55bb8", + "publisher": "Ubuntu Core developers ", + "name": "libgcc-s1", + "version": "10.3.0-1ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcc-s1:libgcc-s1:10.3.0-1ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgcc-s1@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgcrypt20@1.8.5-5ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=c8a43aa5b28727a1", + "publisher": "Ubuntu Developers ", + "name": "libgcrypt20", + "version": "1.8.5-5ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcrypt20:libgcrypt20:1.8.5-5ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgcrypt20@1.8.5-5ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgmp10@2:6.2.0+dfsg-4?arch=amd64&upstream=gmp&distro=ubuntu-20.04&package-id=40fc269dcb8b3369", + "publisher": "Ubuntu Developers ", + "name": "libgmp10", + "version": "2:6.2.0+dfsg-4", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgmp10:libgmp10:2\\:6.2.0\\+dfsg-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgmp10@2:6.2.0+dfsg-4?arch=amd64&upstream=gmp&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.6?arch=amd64&upstream=gnutls28&distro=ubuntu-20.04&package-id=7490f76da775c6e", + "publisher": "Ubuntu Developers ", + "name": "libgnutls30", + "version": "3.6.13-2ubuntu1.6", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPLv3+" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "name": "LGPLv2.1+" + } + }, + { + "license": { + "name": "LGPLv3+_or_GPLv2+" + } + }, + { + "license": { + "name": "The" + } + } + ], + "cpe": "cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.6?arch=amd64&upstream=gnutls28&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgpg-error0@1.37-1?arch=amd64&upstream=libgpg-error&distro=ubuntu-20.04&package-id=37ef62d87edfe03", + "publisher": "Ubuntu Developers ", + "name": "libgpg-error0", + "version": "1.37-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "g10-permissive" + } + } + ], + "cpe": "cpe:2.3:a:libgpg-error0:libgpg-error0:1.37-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgpg-error0@1.37-1?arch=amd64&upstream=libgpg-error&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgpm2@1.20.7-5?arch=amd64&upstream=gpm&distro=ubuntu-20.04&package-id=10dc077f92e6ffa8", + "publisher": "Ubuntu Developers ", + "name": "libgpm2", + "version": "1.20.7-5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgpm2:libgpm2:1.20.7-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgpm2@1.20.7-5?arch=amd64&upstream=gpm&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgssapi-krb5-2@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04&package-id=443eafe2785f5a4c", + "publisher": "Ubuntu Developers ", + "name": "libgssapi-krb5-2", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgssapi-krb5-2@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgssapi3-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=17a37cca2446b615", + "publisher": "Ubuntu Developers ", + "name": "libgssapi3-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libgssapi3-heimdal:libgssapi3-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgssapi3-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libhcrypto4-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=98098d582df76b44", + "publisher": "Ubuntu Developers ", + "name": "libhcrypto4-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libhcrypto4-heimdal:libhcrypto4-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libhcrypto4-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libheimbase1-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=f8dfc9a84c337835", + "publisher": "Ubuntu Developers ", + "name": "libheimbase1-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libheimbase1-heimdal:libheimbase1-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libheimbase1-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libheimntlm0-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=9992d88ac7d6e8e3", + "publisher": "Ubuntu Developers ", + "name": "libheimntlm0-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libheimntlm0-heimdal:libheimntlm0-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libheimntlm0-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libhogweed5@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04&package-id=3caecccf070e6760", + "publisher": "Ubuntu Developers ", + "name": "libhogweed5", + "version": "3.5.1+really3.5.1-2ubuntu0.2", + "licenses": [ + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libhogweed5:libhogweed5:3.5.1\\+really3.5.1-2ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libhogweed5@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libhx509-5-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=3b0bac5e4e8f23c5", + "publisher": "Ubuntu Developers ", + "name": "libhx509-5-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libhx509-5-heimdal:libhx509-5-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libhx509-5-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libicu66@66.1-2ubuntu2?arch=amd64&upstream=icu&distro=ubuntu-20.04&package-id=bcf598a9dea4cd38", + "publisher": "Ubuntu Developers ", + "name": "libicu66", + "version": "66.1-2ubuntu2", + "cpe": "cpe:2.3:a:libicu66:libicu66:66.1-2ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libicu66@66.1-2ubuntu2?arch=amd64&upstream=icu&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libidn2-0@2.2.0-2?arch=amd64&upstream=libidn2&distro=ubuntu-20.04&package-id=d2a82c3e28413bc1", + "publisher": "Ubuntu Developers ", + "name": "libidn2-0", + "version": "2.2.0-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "Unicode" + } + } + ], + "cpe": "cpe:2.3:a:libidn2-0:libidn2-0:2.2.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libidn2-0@2.2.0-2?arch=amd64&upstream=libidn2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libjson-c4@0.13.1+dfsg-7ubuntu0.3?arch=amd64&upstream=json-c&distro=ubuntu-20.04&package-id=909fcb74540ccf31", + "publisher": "Ubuntu Developers ", + "name": "libjson-c4", + "version": "0.13.1+dfsg-7ubuntu0.3", + "licenses": [ + { + "license": { + "name": "Expat" + } + } + ], + "cpe": "cpe:2.3:a:libjson-c4:libjson-c4:0.13.1\\+dfsg-7ubuntu0.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libjson-c4@0.13.1+dfsg-7ubuntu0.3?arch=amd64&upstream=json-c&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libk5crypto3@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04&package-id=f9479050b59432b4", + "publisher": "Ubuntu Developers ", + "name": "libk5crypto3", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libk5crypto3:libk5crypto3:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libk5crypto3@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkeyutils1@1.6-6ubuntu1?arch=amd64&upstream=keyutils&distro=ubuntu-20.04&package-id=e8692427b123ea73", + "publisher": "Ubuntu Developers ", + "name": "libkeyutils1", + "version": "1.6-6ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libkeyutils1:libkeyutils1:1.6-6ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkeyutils1@1.6-6ubuntu1?arch=amd64&upstream=keyutils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkrb5-26-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=2beb670b9378498e", + "publisher": "Ubuntu Developers ", + "name": "libkrb5-26-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5-26-heimdal:libkrb5-26-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkrb5-26-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkrb5-3@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04&package-id=fdb5970d8394a182", + "publisher": "Ubuntu Developers ", + "name": "libkrb5-3", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5-3:libkrb5-3:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkrb5-3@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkrb5support0@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04&package-id=a8d21a32e178b211", + "publisher": "Ubuntu Developers ", + "name": "libkrb5support0", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5support0:libkrb5support0:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkrb5support0@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libldap-2.4-2@2.4.49+dfsg-2ubuntu1.8?arch=amd64&upstream=openldap&distro=ubuntu-20.04&package-id=efdc80a7ae6eae19", + "publisher": "Ubuntu Developers ", + "name": "libldap-2.4-2", + "version": "2.4.49+dfsg-2ubuntu1.8", + "cpe": "cpe:2.3:a:libldap-2.4-2:libldap-2.4-2:2.4.49\\+dfsg-2ubuntu1.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libldap-2.4-2@2.4.49+dfsg-2ubuntu1.8?arch=amd64&upstream=openldap&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libldap-common@2.4.49+dfsg-2ubuntu1.8?arch=all&upstream=openldap&distro=ubuntu-20.04&package-id=4d0b88f98b40786b", + "publisher": "Ubuntu Developers ", + "name": "libldap-common", + "version": "2.4.49+dfsg-2ubuntu1.8", + "cpe": "cpe:2.3:a:libldap-common:libldap-common:2.4.49\\+dfsg-2ubuntu1.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libldap-common@2.4.49+dfsg-2ubuntu1.8?arch=all&upstream=openldap&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/liblmdb0@0.9.24-1?arch=amd64&upstream=lmdb&distro=ubuntu-20.04&package-id=71e23b84a5f4e340", + "publisher": "Ubuntu Developers ", + "name": "liblmdb0", + "version": "0.9.24-1", + "licenses": [ + { + "license": { + "name": "OpenLDAP-2.8" + } + } + ], + "cpe": "cpe:2.3:a:liblmdb0:liblmdb0:0.9.24-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/liblmdb0@0.9.24-1?arch=amd64&upstream=lmdb&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libltdl7@2.4.6-14?arch=amd64&upstream=libtool&distro=ubuntu-20.04&package-id=1b90fab6296ba661", + "publisher": "Ubuntu Developers ", + "name": "libltdl7", + "version": "2.4.6-14", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libltdl7:libltdl7:2.4.6-14:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libltdl7@2.4.6-14?arch=amd64&upstream=libtool&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/liblz4-1@1.9.2-2ubuntu0.20.04.1?arch=amd64&upstream=lz4&distro=ubuntu-20.04&package-id=6f2c431caeb4980a", + "publisher": "Ubuntu Developers ", + "name": "liblz4-1", + "version": "1.9.2-2ubuntu0.20.04.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:liblz4-1:liblz4-1:1.9.2-2ubuntu0.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/liblz4-1@1.9.2-2ubuntu0.20.04.1?arch=amd64&upstream=lz4&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/liblzma5@5.2.4-1ubuntu1?arch=amd64&upstream=xz-utils&distro=ubuntu-20.04&package-id=f1e9f3b6205a664a", + "publisher": "Ubuntu Developers ", + "name": "liblzma5", + "version": "5.2.4-1ubuntu1", + "licenses": [ + { + "license": { + "name": "Autoconf" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "PD" + } + }, + { + "license": { + "name": "PD-debian" + } + }, + { + "license": { + "name": "config-h" + } + }, + { + "license": { + "name": "noderivs" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-nowarranty" + } + }, + { + "license": { + "name": "probably-PD" + } + } + ], + "cpe": "cpe:2.3:a:liblzma5:liblzma5:5.2.4-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/liblzma5@5.2.4-1ubuntu1?arch=amd64&upstream=xz-utils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmagic-mgc@1:5.38-4?arch=amd64&upstream=file&distro=ubuntu-20.04&package-id=3b4f02792ccf99bb", + "publisher": "Ubuntu Developers ", + "name": "libmagic-mgc", + "version": "1:5.38-4", + "licenses": [ + { + "license": { + "name": "BSD-2-Clause-alike" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-Clause-regents" + } + }, + { + "license": { + "name": "MIT-Old-Style-with-legal-disclaimer-2" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmagic-mgc:libmagic-mgc:1\\:5.38-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmagic-mgc@1:5.38-4?arch=amd64&upstream=file&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmagic1@1:5.38-4?arch=amd64&upstream=file&distro=ubuntu-20.04&package-id=302b8497a938556", + "publisher": "Ubuntu Developers ", + "name": "libmagic1", + "version": "1:5.38-4", + "licenses": [ + { + "license": { + "name": "BSD-2-Clause-alike" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-Clause-regents" + } + }, + { + "license": { + "name": "MIT-Old-Style-with-legal-disclaimer-2" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmagic1:libmagic1:1\\:5.38-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmagic1@1:5.38-4?arch=amd64&upstream=file&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmaxminddb0@1.4.2-0ubuntu1.20.04.1?arch=amd64&upstream=libmaxminddb&distro=ubuntu-20.04&package-id=e918b9e4e403338f", + "publisher": "Ubuntu Developers ", + "name": "libmaxminddb0", + "version": "1.4.2-0ubuntu1.20.04.1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "CC-BY-SA" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libmaxminddb0:libmaxminddb0:1.4.2-0ubuntu1.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmaxminddb0@1.4.2-0ubuntu1.20.04.1?arch=amd64&upstream=libmaxminddb&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmnl0@1.0.4-2?arch=amd64&upstream=libmnl&distro=ubuntu-20.04&package-id=162cfe25074edf0d", + "publisher": "Ubuntu Developers ", + "name": "libmnl0", + "version": "1.0.4-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libmnl0:libmnl0:1.0.4-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmnl0@1.0.4-2?arch=amd64&upstream=libmnl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmount1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=39446194385ebce5", + "publisher": "Ubuntu Developers ", + "name": "libmount1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmount1:libmount1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmount1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmpdec2@2.4.2-3?arch=amd64&upstream=mpdecimal&distro=ubuntu-20.04&package-id=b45a0d57576ce262", + "publisher": "Ubuntu Developers ", + "name": "libmpdec2", + "version": "2.4.2-3", + "licenses": [ + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libmpdec2:libmpdec2:2.4.2-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmpdec2@2.4.2-3?arch=amd64&upstream=mpdecimal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libncurses6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=ed8fb166163a75b8", + "publisher": "Ubuntu Developers ", + "name": "libncurses6", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:libncurses6:libncurses6:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libncurses6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libncursesw6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=58525ddc073a008a", + "publisher": "Ubuntu Developers ", + "name": "libncursesw6", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:libncursesw6:libncursesw6:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libncursesw6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libnettle7@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04&package-id=3d185fbd6a7e56f", + "publisher": "Ubuntu Developers ", + "name": "libnettle7", + "version": "3.5.1+really3.5.1-2ubuntu0.2", + "licenses": [ + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libnettle7:libnettle7:3.5.1\\+really3.5.1-2ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libnettle7@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libnfsidmap2@0.25-5.1ubuntu1?arch=amd64&upstream=libnfsidmap&distro=ubuntu-20.04&package-id=71bd574c47c02b75", + "publisher": "Ubuntu Developers ", + "name": "libnfsidmap2", + "version": "0.25-5.1ubuntu1", + "cpe": "cpe:2.3:a:libnfsidmap2:libnfsidmap2:0.25-5.1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libnfsidmap2@0.25-5.1ubuntu1?arch=amd64&upstream=libnfsidmap&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libnghttp2-14@1.40.0-1build1?arch=amd64&upstream=nghttp2&distro=ubuntu-20.04&package-id=c86604c1fa72dd96", + "publisher": "Ubuntu Developers ", + "name": "libnghttp2-14", + "version": "1.40.0-1build1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "SIL-OFL-1.1" + } + }, + { + "license": { + "name": "all-permissive" + } + } + ], + "cpe": "cpe:2.3:a:libnghttp2-14:libnghttp2-14:1.40.0-1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libnghttp2-14@1.40.0-1build1?arch=amd64&upstream=nghttp2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libogg0@1.3.4-0ubuntu1?arch=amd64&upstream=libogg&distro=ubuntu-20.04&package-id=6611fa67492156e2", + "publisher": "Ubuntu Developers ", + "name": "libogg0", + "version": "1.3.4-0ubuntu1", + "cpe": "cpe:2.3:a:libogg0:libogg0:1.3.4-0ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libogg0@1.3.4-0ubuntu1?arch=amd64&upstream=libogg&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libp11-kit0@0.23.20-1ubuntu0.1?arch=amd64&upstream=p11-kit&distro=ubuntu-20.04&package-id=9fc0ca46e6d21557", + "publisher": "Ubuntu Developers ", + "name": "libp11-kit0", + "version": "0.23.20-1ubuntu0.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "ISC+IBM" + } + }, + { + "license": { + "name": "permissive-like-automake-output" + } + }, + { + "license": { + "name": "same-as-rest-of-p11kit" + } + } + ], + "cpe": "cpe:2.3:a:libp11-kit0:libp11-kit0:0.23.20-1ubuntu0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libp11-kit0@0.23.20-1ubuntu0.1?arch=amd64&upstream=p11-kit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-cap@1:2.32-1?arch=amd64&upstream=libcap2&distro=ubuntu-20.04&package-id=20db44acb7f94535", + "publisher": "Ubuntu Developers ", + "name": "libpam-cap", + "version": "1:2.32-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libpam-cap:libpam-cap:1\\:2.32-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-cap@1:2.32-1?arch=amd64&upstream=libcap2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-modules@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04&package-id=e7be6c0ad703fc9a", + "publisher": "Ubuntu Developers ", + "name": "libpam-modules", + "version": "1.3.1-5ubuntu4.2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules:libpam-modules:1.3.1-5ubuntu4.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-modules@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-modules-bin@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04&package-id=7ff667273975da27", + "publisher": "Ubuntu Developers ", + "name": "libpam-modules-bin", + "version": "1.3.1-5ubuntu4.2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules-bin:libpam-modules-bin:1.3.1-5ubuntu4.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-modules-bin@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-runtime@1.3.1-5ubuntu4.2?arch=all&upstream=pam&distro=ubuntu-20.04&package-id=47a743e8128a9af6", + "publisher": "Ubuntu Developers ", + "name": "libpam-runtime", + "version": "1.3.1-5ubuntu4.2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-runtime:libpam-runtime:1.3.1-5ubuntu4.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-runtime@1.3.1-5ubuntu4.2?arch=all&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam0g@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04&package-id=e57fbdd1e7d57983", + "publisher": "Ubuntu Developers ", + "name": "libpam0g", + "version": "1.3.1-5ubuntu4.2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam0g:libpam0g:1.3.1-5ubuntu4.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam0g@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpcre2-8-0@10.34-7?arch=amd64&upstream=pcre2&distro=ubuntu-20.04&package-id=ec9eb70008ed8b14", + "publisher": "Ubuntu Developers ", + "name": "libpcre2-8-0", + "version": "10.34-7", + "cpe": "cpe:2.3:a:libpcre2-8-0:libpcre2-8-0:10.34-7:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpcre2-8-0@10.34-7?arch=amd64&upstream=pcre2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpcre3@2:8.39-12build1?arch=amd64&upstream=pcre3&distro=ubuntu-20.04&package-id=f2af8e66c60a624", + "publisher": "Ubuntu Developers ", + "name": "libpcre3", + "version": "2:8.39-12build1", + "cpe": "cpe:2.3:a:libpcre3:libpcre3:2\\:8.39-12build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpcre3@2:8.39-12build1?arch=amd64&upstream=pcre3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libprocps8@2:3.3.16-1ubuntu2.2?arch=amd64&upstream=procps&distro=ubuntu-20.04&package-id=1444db6c35de79c6", + "publisher": "Ubuntu Developers ", + "name": "libprocps8", + "version": "2:3.3.16-1ubuntu2.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libprocps8:libprocps8:2\\:3.3.16-1ubuntu2.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libprocps8@2:3.3.16-1ubuntu2.2?arch=amd64&upstream=procps&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpsl5@0.21.0-1ubuntu1?arch=amd64&upstream=libpsl&distro=ubuntu-20.04&package-id=e77e76f35a3ad192", + "publisher": "Ubuntu Developers ", + "name": "libpsl5", + "version": "0.21.0-1ubuntu1", + "licenses": [ + { + "license": { + "name": "Chromium" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libpsl5:libpsl5:0.21.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpsl5@0.21.0-1ubuntu1?arch=amd64&upstream=libpsl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpython3-stdlib@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04&package-id=b40e3316416bbdaf", + "publisher": "Ubuntu Developers ", + "name": "libpython3-stdlib", + "version": "3.8.2-0ubuntu2", + "cpe": "cpe:2.3:a:libpython3-stdlib:libpython3-stdlib:3.8.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpython3-stdlib@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpython3.8@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04&package-id=ad8bdc246bbd4eb3", + "publisher": "Ubuntu Core Developers ", + "name": "libpython3.8", + "version": "3.8.10-0ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:libpython3.8:libpython3.8:3.8.10-0ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpython3.8@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpython3.8-minimal@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04&package-id=fb58dad98da64e3b", + "publisher": "Ubuntu Core Developers ", + "name": "libpython3.8-minimal", + "version": "3.8.10-0ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:libpython3.8-minimal:libpython3.8-minimal:3.8.10-0ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpython3.8-minimal@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpython3.8-stdlib@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04&package-id=54e48e611df3b41d", + "publisher": "Ubuntu Core Developers ", + "name": "libpython3.8-stdlib", + "version": "3.8.10-0ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:libpython3.8-stdlib:libpython3.8-stdlib:3.8.10-0ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpython3.8-stdlib@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libreadline5@5.2+dfsg-3build3?arch=amd64&upstream=readline5&distro=ubuntu-20.04&package-id=5763fb43bb0ba51a", + "publisher": "Ubuntu Developers ", + "name": "libreadline5", + "version": "5.2+dfsg-3build3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libreadline5:libreadline5:5.2\\+dfsg-3build3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libreadline5@5.2+dfsg-3build3?arch=amd64&upstream=readline5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libreadline8@8.0-4?arch=amd64&upstream=readline&distro=ubuntu-20.04&package-id=67b876656fcd9e68", + "publisher": "Ubuntu Developers ", + "name": "libreadline8", + "version": "8.0-4", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libreadline8:libreadline8:8.0-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libreadline8@8.0-4?arch=amd64&upstream=readline&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libroken18-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=68e35bc456818613", + "publisher": "Ubuntu Developers ", + "name": "libroken18-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libroken18-heimdal:libroken18-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libroken18-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/librtmp1@2.4+20151223.gitfa8646d.1-2build1?arch=amd64&upstream=rtmpdump&distro=ubuntu-20.04&package-id=ede637f87a4bfd7b", + "publisher": "Ubuntu Developers ", + "name": "librtmp1", + "version": "2.4+20151223.gitfa8646d.1-2build1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:librtmp1:librtmp1:2.4\\+20151223.gitfa8646d.1-2build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/librtmp1@2.4+20151223.gitfa8646d.1-2build1?arch=amd64&upstream=rtmpdump&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsasl2-2@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04&package-id=374396d82667544d", + "publisher": "Ubuntu Developers ", + "name": "libsasl2-2", + "version": "2.1.27+dfsg-2", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-2:libsasl2-2:2.1.27\\+dfsg-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsasl2-2@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsasl2-modules@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04&package-id=fb8d278d10c4a3cf", + "publisher": "Ubuntu Developers ", + "name": "libsasl2-modules", + "version": "2.1.27+dfsg-2", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-modules:libsasl2-modules:2.1.27\\+dfsg-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsasl2-modules@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsasl2-modules-db@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04&package-id=63c3c50d36ec1d13", + "publisher": "Ubuntu Developers ", + "name": "libsasl2-modules-db", + "version": "2.1.27+dfsg-2", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-modules-db:libsasl2-modules-db:2.1.27\\+dfsg-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsasl2-modules-db@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libseccomp2@2.5.1-1ubuntu1~20.04.1?arch=amd64&upstream=libseccomp&distro=ubuntu-20.04&package-id=b2fd79b9c242e8e8", + "publisher": "Ubuntu Developers ", + "name": "libseccomp2", + "version": "2.5.1-1ubuntu1~20.04.1", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libseccomp2:libseccomp2:2.5.1-1ubuntu1\\~20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libseccomp2@2.5.1-1ubuntu1~20.04.1?arch=amd64&upstream=libseccomp&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libselinux1@3.0-1build2?arch=amd64&upstream=libselinux&distro=ubuntu-20.04&package-id=e5d4ae16ac79b901", + "publisher": "Ubuntu Developers ", + "name": "libselinux1", + "version": "3.0-1build2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libselinux1:libselinux1:3.0-1build2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libselinux1@3.0-1build2?arch=amd64&upstream=libselinux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsemanage-common@3.0-1build2?arch=all&upstream=libsemanage&distro=ubuntu-20.04&package-id=4c6cd9f68ce53262", + "publisher": "Ubuntu Developers ", + "name": "libsemanage-common", + "version": "3.0-1build2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage-common:libsemanage-common:3.0-1build2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsemanage-common@3.0-1build2?arch=all&upstream=libsemanage&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsemanage1@3.0-1build2?arch=amd64&upstream=libsemanage&distro=ubuntu-20.04&package-id=963297f19b339026", + "publisher": "Ubuntu Developers ", + "name": "libsemanage1", + "version": "3.0-1build2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage1:libsemanage1:3.0-1build2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsemanage1@3.0-1build2?arch=amd64&upstream=libsemanage&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsepol1@3.0-1?arch=amd64&upstream=libsepol&distro=ubuntu-20.04&package-id=991afdd7bf17200c", + "publisher": "Ubuntu Developers ", + "name": "libsepol1", + "version": "3.0-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsepol1:libsepol1:3.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsepol1@3.0-1?arch=amd64&upstream=libsepol&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsmartcols1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=b47d3a935260c518", + "publisher": "Ubuntu Developers ", + "name": "libsmartcols1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsmartcols1:libsmartcols1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsmartcols1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsqlite3-0@3.31.1-4ubuntu0.2?arch=amd64&upstream=sqlite3&distro=ubuntu-20.04&package-id=a7c7ccf11d3583d1", + "publisher": "Ubuntu Developers ", + "name": "libsqlite3-0", + "version": "3.31.1-4ubuntu0.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.31.1-4ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsqlite3-0@3.31.1-4ubuntu0.2?arch=amd64&upstream=sqlite3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libss2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=4715894cb8165c", + "publisher": "Ubuntu Developers ", + "name": "libss2", + "version": "1.45.5-2ubuntu1", + "cpe": "cpe:2.3:a:libss2:libss2:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libss2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libssh-4@0.9.3-2ubuntu2.2?arch=amd64&upstream=libssh&distro=ubuntu-20.04&package-id=93df7c2bd7217cc4", + "publisher": "Ubuntu Developers ", + "name": "libssh-4", + "version": "0.9.3-2ubuntu2.2", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "LGPL-2.1+~OpenSSL" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libssh-4:libssh-4:0.9.3-2ubuntu2.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libssh-4@0.9.3-2ubuntu2.2?arch=amd64&upstream=libssh&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.8?arch=amd64&upstream=openssl&distro=ubuntu-20.04&package-id=9228d1481eea75e3", + "publisher": "Ubuntu Developers ", + "name": "libssl1.1", + "version": "1.1.1f-1ubuntu2.8", + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.8?arch=amd64&upstream=openssl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libstdc++6@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04&package-id=241fcb3d9b65153a", + "publisher": "Ubuntu Core developers ", + "name": "libstdc++6", + "version": "10.3.0-1ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:10.3.0-1ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libstdc++6@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsystemd0@245.4-4ubuntu3.11?arch=amd64&upstream=systemd&distro=ubuntu-20.04&package-id=72d1f4b2fda6e155", + "publisher": "Ubuntu Developers ", + "name": "libsystemd0", + "version": "245.4-4ubuntu3.11", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsystemd0:libsystemd0:245.4-4ubuntu3.11:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsystemd0@245.4-4ubuntu3.11?arch=amd64&upstream=systemd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtasn1-6@4.16.0-2?arch=amd64&distro=ubuntu-20.04&package-id=a290c35fc0220ba0", + "publisher": "Ubuntu Developers ", + "name": "libtasn1-6", + "version": "4.16.0-2", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtasn1-6:libtasn1-6:4.16.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtasn1-6@4.16.0-2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtdb1@1.4.2-3build1?arch=amd64&upstream=tdb&distro=ubuntu-20.04&package-id=50ead706c0e76e28", + "publisher": "Ubuntu Developers ", + "name": "libtdb1", + "version": "1.4.2-3build1", + "licenses": [ + { + "license": { + "name": "BSD-3" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "PostgreSQL" + } + } + ], + "cpe": "cpe:2.3:a:libtdb1:libtdb1:1.4.2-3build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtdb1@1.4.2-3build1?arch=amd64&upstream=tdb&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtinfo6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=72ad56d118fefea3", + "publisher": "Ubuntu Developers ", + "name": "libtinfo6", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:libtinfo6:libtinfo6:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtinfo6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtirpc-common@1.2.5-1?arch=all&upstream=libtirpc&distro=ubuntu-20.04&package-id=ba22fe8af5722b24", + "publisher": "Ubuntu Developers ", + "name": "libtirpc-common", + "version": "1.2.5-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc-common:libtirpc-common:1.2.5-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtirpc-common@1.2.5-1?arch=all&upstream=libtirpc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtirpc3@1.2.5-1?arch=amd64&upstream=libtirpc&distro=ubuntu-20.04&package-id=57b2bfa0a8467ab7", + "publisher": "Ubuntu Developers ", + "name": "libtirpc3", + "version": "1.2.5-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc3:libtirpc3:1.2.5-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtirpc3@1.2.5-1?arch=amd64&upstream=libtirpc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libudev1@245.4-4ubuntu3.11?arch=amd64&upstream=systemd&distro=ubuntu-20.04&package-id=28d962536291b482", + "publisher": "Ubuntu Developers ", + "name": "libudev1", + "version": "245.4-4ubuntu3.11", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libudev1:libudev1:245.4-4ubuntu3.11:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libudev1@245.4-4ubuntu3.11?arch=amd64&upstream=systemd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libunistring2@0.9.10-2?arch=amd64&upstream=libunistring&distro=ubuntu-20.04&package-id=3140ffa70dcd9831", + "publisher": "Ubuntu Developers ", + "name": "libunistring2", + "version": "0.9.10-2", + "licenses": [ + { + "license": { + "name": "FreeSoftware" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GFDL-1.2+" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libunistring2:libunistring2:0.9.10-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libunistring2@0.9.10-2?arch=amd64&upstream=libunistring&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libuuid1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=5395a07c00002ea6", + "publisher": "Ubuntu Developers ", + "name": "libuuid1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libuuid1:libuuid1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libuuid1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libuv1@1.34.2-1ubuntu1.3?arch=amd64&distro=ubuntu-20.04&package-id=a5e622ae2f2a04fd", + "publisher": "Ubuntu Developers ", + "name": "libuv1", + "version": "1.34.2-1ubuntu1.3", + "licenses": [ + { + "license": { + "id": "BSD-1-Clause" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC-BY-4.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libuv1:libuv1:1.34.2-1ubuntu1.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libuv1@1.34.2-1ubuntu1.3?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libvorbis0a@1.3.6-2ubuntu1?arch=amd64&upstream=libvorbis&distro=ubuntu-20.04&package-id=dfd7443230481b4d", + "publisher": "Ubuntu Developers ", + "name": "libvorbis0a", + "version": "1.3.6-2ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "RFC-special" + } + } + ], + "cpe": "cpe:2.3:a:libvorbis0a:libvorbis0a:1.3.6-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libvorbis0a@1.3.6-2ubuntu1?arch=amd64&upstream=libvorbis&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libvorbisfile3@1.3.6-2ubuntu1?arch=amd64&upstream=libvorbis&distro=ubuntu-20.04&package-id=804383bb11c2f3f9", + "publisher": "Ubuntu Developers ", + "name": "libvorbisfile3", + "version": "1.3.6-2ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "RFC-special" + } + } + ], + "cpe": "cpe:2.3:a:libvorbisfile3:libvorbisfile3:1.3.6-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libvorbisfile3@1.3.6-2ubuntu1?arch=amd64&upstream=libvorbis&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libwind0-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=7b0e172efdb36a99", + "publisher": "Ubuntu Developers ", + "name": "libwind0-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libwind0-heimdal:libwind0-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libwind0-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libwrap0@7.6.q-30?arch=amd64&upstream=tcp-wrappers&distro=ubuntu-20.04&package-id=5b14391c61bb94f1", + "publisher": "Ubuntu Developers ", + "name": "libwrap0", + "version": "7.6.q-30", + "cpe": "cpe:2.3:a:libwrap0:libwrap0:7.6.q-30:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libwrap0@7.6.q-30?arch=amd64&upstream=tcp-wrappers&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libxml2@2.9.10+dfsg-5ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04&package-id=5227ee2e55b78734", + "publisher": "Ubuntu Developers ", + "name": "libxml2", + "version": "2.9.10+dfsg-5ubuntu0.20.04.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "MIT-1" + } + } + ], + "cpe": "cpe:2.3:a:libxml2:libxml2:2.9.10\\+dfsg-5ubuntu0.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libxml2@2.9.10+dfsg-5ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libxtables12@1.8.4-3ubuntu2?arch=amd64&upstream=iptables&distro=ubuntu-20.04&package-id=440c57e95fc3a35c", + "publisher": "Ubuntu Developers ", + "name": "libxtables12", + "version": "1.8.4-3ubuntu2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libxtables12:libxtables12:1.8.4-3ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libxtables12@1.8.4-3ubuntu2?arch=amd64&upstream=iptables&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libzstd1@1.4.4+dfsg-3ubuntu0.1?arch=amd64&upstream=libzstd&distro=ubuntu-20.04&package-id=47cff0564e160066", + "publisher": "Ubuntu Developers ", + "name": "libzstd1", + "version": "1.4.4+dfsg-3ubuntu0.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libzstd1:libzstd1:1.4.4\\+dfsg-3ubuntu0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libzstd1@1.4.4+dfsg-3ubuntu0.1?arch=amd64&upstream=libzstd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/login@1:4.8.1-1ubuntu5.20.04.1?arch=amd64&upstream=shadow&distro=ubuntu-20.04&package-id=cb23947502a7c38d", + "publisher": "Ubuntu Developers ", + "name": "login", + "version": "1:4.8.1-1ubuntu5.20.04.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:login:login:1\\:4.8.1-1ubuntu5.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/login@1:4.8.1-1ubuntu5.20.04.1?arch=amd64&upstream=shadow&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/logsave@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=4a92556bee4b4f91", + "publisher": "Ubuntu Developers ", + "name": "logsave", + "version": "1.45.5-2ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:logsave:logsave:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/logsave@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/lsb-base@11.1.0ubuntu2?arch=all&upstream=lsb&distro=ubuntu-20.04&package-id=b76348b7f1282c61", + "publisher": "Ubuntu Developers ", + "name": "lsb-base", + "version": "11.1.0ubuntu2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:lsb-base:lsb-base:11.1.0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/lsb-base@11.1.0ubuntu2?arch=all&upstream=lsb&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/mawk@1.3.4.20200120-2?arch=amd64&distro=ubuntu-20.04&package-id=435885c82afbf721", + "publisher": "Ubuntu Developers ", + "name": "mawk", + "version": "1.3.4.20200120-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:mawk:mawk:1.3.4.20200120-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/mawk@1.3.4.20200120-2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/mime-support@3.64ubuntu1?arch=all&distro=ubuntu-20.04&package-id=405891a224258a92", + "publisher": "Ubuntu Developers ", + "name": "mime-support", + "version": "3.64ubuntu1", + "licenses": [ + { + "license": { + "name": "Bellcore" + } + }, + { + "license": { + "name": "ad-hoc" + } + } + ], + "cpe": "cpe:2.3:a:mime-support:mime-support:3.64ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/mime-support@3.64ubuntu1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/mount@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=fa4ef6b12af7900c", + "publisher": "Ubuntu Developers ", + "name": "mount", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:mount:mount:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/mount@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ncurses-base@6.2-0ubuntu2?arch=all&upstream=ncurses&distro=ubuntu-20.04&package-id=d7393defd95e4554", + "publisher": "Ubuntu Developers ", + "name": "ncurses-base", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:ncurses-base:ncurses-base:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ncurses-base@6.2-0ubuntu2?arch=all&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ncurses-bin@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=d6bdd43961b680f6", + "publisher": "Ubuntu Developers ", + "name": "ncurses-bin", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:ncurses-bin:ncurses-bin:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ncurses-bin@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/netbase@6.1?arch=all&distro=ubuntu-20.04&package-id=c6847a50307ac1ba", + "publisher": "Ubuntu Developers ", + "name": "netbase", + "version": "6.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:netbase:netbase:6.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/netbase@6.1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/nfs-common@1:1.3.4-2.5ubuntu3.4?arch=amd64&upstream=nfs-utils&distro=ubuntu-20.04&package-id=6a00c331080f32b7", + "publisher": "Ubuntu Developers ", + "name": "nfs-common", + "version": "1:1.3.4-2.5ubuntu3.4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:nfs-common:nfs-common:1\\:1.3.4-2.5ubuntu3.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/nfs-common@1:1.3.4-2.5ubuntu3.4?arch=amd64&upstream=nfs-utils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.8?arch=amd64&distro=ubuntu-20.04&package-id=5727f60759ec90aa", + "publisher": "Ubuntu Developers ", + "name": "openssl", + "version": "1.1.1f-1ubuntu2.8", + "cpe": "cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.8?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/passwd@1:4.8.1-1ubuntu5.20.04.1?arch=amd64&upstream=shadow&distro=ubuntu-20.04&package-id=c4a1ed5267891532", + "publisher": "Ubuntu Developers ", + "name": "passwd", + "version": "1:4.8.1-1ubuntu5.20.04.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:passwd:passwd:1\\:4.8.1-1ubuntu5.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/passwd@1:4.8.1-1ubuntu5.20.04.1?arch=amd64&upstream=shadow&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/perl-base@5.30.0-9ubuntu0.2?arch=amd64&upstream=perl&distro=ubuntu-20.04&package-id=eab1752e76cf29f", + "publisher": "Ubuntu Developers ", + "name": "perl-base", + "version": "5.30.0-9ubuntu0.2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl-base:perl-base:5.30.0-9ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/perl-base@5.30.0-9ubuntu0.2?arch=amd64&upstream=perl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/procps@2:3.3.16-1ubuntu2.2?arch=amd64&distro=ubuntu-20.04&package-id=f177d21a50776ea7", + "publisher": "Ubuntu Developers ", + "name": "procps", + "version": "2:3.3.16-1ubuntu2.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:procps:procps:2\\:3.3.16-1ubuntu2.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/procps@2:3.3.16-1ubuntu2.2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/publicsuffix@20200303.0012-1?arch=all&distro=ubuntu-20.04&package-id=fe371293cddb3ef3", + "publisher": "Ubuntu Developers ", + "name": "publicsuffix", + "version": "20200303.0012-1", + "licenses": [ + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:publicsuffix:publicsuffix:20200303.0012-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/publicsuffix@20200303.0012-1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "application", + "bom-ref": "pkg:generic/python@3.8.10?package-id=2fa60a23ba4ecb4c", + "name": "python", + "version": "3.8.10", + "cpe": "cpe:2.3:a:python_software_foundation:python:3.8.10:*:*:*:*:*:*:*", + "purl": "pkg:generic/python@3.8.10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/python3@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04&package-id=ca939acbf264771", + "publisher": "Ubuntu Developers ", + "name": "python3", + "version": "3.8.2-0ubuntu2", + "cpe": "cpe:2.3:a:python3:python3:3.8.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/python3@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/python3-minimal@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04&package-id=26eebf392e0b02cf", + "publisher": "Ubuntu Developers ", + "name": "python3-minimal", + "version": "3.8.2-0ubuntu2", + "cpe": "cpe:2.3:a:python3-minimal:python3-minimal:3.8.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/python3-minimal@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/python3.8@3.8.10-0ubuntu1~20.04?arch=amd64&distro=ubuntu-20.04&package-id=b1de928401abc554", + "publisher": "Ubuntu Core Developers ", + "name": "python3.8", + "version": "3.8.10-0ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:python3.8:python3.8:3.8.10-0ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/python3.8@3.8.10-0ubuntu1~20.04?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/python3.8-minimal@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04&package-id=91fa2bead1762d08", + "publisher": "Ubuntu Core Developers ", + "name": "python3.8-minimal", + "version": "3.8.10-0ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:python3.8-minimal:python3.8-minimal:3.8.10-0ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/python3.8-minimal@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/readline-common@8.0-4?arch=all&upstream=readline&distro=ubuntu-20.04&package-id=34a85b4423ecbe7", + "publisher": "Ubuntu Developers ", + "name": "readline-common", + "version": "8.0-4", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:readline-common:readline-common:8.0-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/readline-common@8.0-4?arch=all&upstream=readline&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/rpcbind@1.2.5-8?arch=amd64&distro=ubuntu-20.04&package-id=e98d3334085e4495", + "publisher": "Ubuntu Developers ", + "name": "rpcbind", + "version": "1.2.5-8", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "PERMISSIVE" + } + } + ], + "cpe": "cpe:2.3:a:rpcbind:rpcbind:1.2.5-8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/rpcbind@1.2.5-8?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sed@4.7-1?arch=amd64&distro=ubuntu-20.04&package-id=24bbb8989a1870c7", + "publisher": "Ubuntu Developers ", + "name": "sed", + "version": "4.7-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:sed:sed:4.7-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sed@4.7-1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sensible-utils@0.0.12+nmu1?arch=all&distro=ubuntu-20.04&package-id=7e50cf6ac335106e", + "publisher": "Ubuntu Developers ", + "name": "sensible-utils", + "version": "0.0.12+nmu1", + "licenses": [ + { + "license": { + "name": "All-permissive" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "configure" + } + }, + { + "license": { + "name": "installsh" + } + } + ], + "cpe": "cpe:2.3:a:sensible-utils:sensible-utils:0.0.12\\+nmu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sensible-utils@0.0.12+nmu1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v3@v3.0.1?package-id=aabe58be05d8a2fb", + "name": "sigs.k8s.io/structured-merge-diff/v3", + "version": "v3.0.1", + "cpe": "cpe:2.3:a:structured-merge-diff:v3:v3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v3@v3.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.2.0?package-id=185ad58c0c816b70", + "name": "sigs.k8s.io/yaml", + "version": "v1.2.0", + "purl": "pkg:golang/sigs.k8s.io/yaml@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sound-theme-freedesktop@0.8-2ubuntu1?arch=all&distro=ubuntu-20.04&package-id=9f865bbd1b40e79e", + "publisher": "Ubuntu Developers ", + "name": "sound-theme-freedesktop", + "version": "0.8-2ubuntu1", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0" + } + }, + { + "license": { + "id": "CC-BY-SA-3.0" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:sound-theme-freedesktop:sound-theme-freedesktop:0.8-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sound-theme-freedesktop@0.8-2ubuntu1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sysvinit-utils@2.96-2.1ubuntu1?arch=amd64&upstream=sysvinit&distro=ubuntu-20.04&package-id=abc451774789c392", + "publisher": "Ubuntu Developers ", + "name": "sysvinit-utils", + "version": "2.96-2.1ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:sysvinit-utils:sysvinit-utils:2.96-2.1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sysvinit-utils@2.96-2.1ubuntu1?arch=amd64&upstream=sysvinit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/tar@1.30+dfsg-7ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04&package-id=4c6cd0d17cc842e", + "publisher": "Ubuntu Developers ", + "name": "tar", + "version": "1.30+dfsg-7ubuntu0.20.04.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:tar:tar:1.30\\+dfsg-7ubuntu0.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/tar@1.30+dfsg-7ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/telnet@0.17-41.2build1?arch=amd64&upstream=netkit-telnet&distro=ubuntu-20.04&package-id=440d9ef0dcd8675e", + "publisher": "Ubuntu Developers ", + "name": "telnet", + "version": "0.17-41.2build1", + "cpe": "cpe:2.3:a:telnet:telnet:0.17-41.2build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/telnet@0.17-41.2build1?arch=amd64&upstream=netkit-telnet&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/tzdata@2021a-0ubuntu0.20.04?arch=all&distro=ubuntu-20.04&package-id=aaae4a94d26494c0", + "publisher": "Ubuntu Developers ", + "name": "tzdata", + "version": "2021a-0ubuntu0.20.04", + "licenses": [ + { + "license": { + "id": "ICU" + } + } + ], + "cpe": "cpe:2.3:a:tzdata:tzdata:2021a-0ubuntu0.20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/tzdata@2021a-0ubuntu0.20.04?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ubuntu-keyring@2020.02.11.4?arch=all&distro=ubuntu-20.04&package-id=6d2b18ebcbe1dab7", + "publisher": "Dimitri John Ledkov ", + "name": "ubuntu-keyring", + "version": "2020.02.11.4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:ubuntu-keyring:ubuntu-keyring:2020.02.11.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ubuntu-keyring@2020.02.11.4?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ucf@3.0038+nmu1?arch=all&distro=ubuntu-20.04&package-id=ab3b8cc8be7b5655", + "publisher": "Ubuntu Developers ", + "name": "ucf", + "version": "3.0038+nmu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ucf:ucf:3.0038\\+nmu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ucf@3.0038+nmu1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/unzip@6.0-25ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=e34e78f4ed1939d6", + "publisher": "Ubuntu Developers ", + "name": "unzip", + "version": "6.0-25ubuntu1", + "cpe": "cpe:2.3:a:unzip:unzip:6.0-25ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/unzip@6.0-25ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/util-linux@2.34-0.1ubuntu9.1?arch=amd64&distro=ubuntu-20.04&package-id=33e86bd94ef763b6", + "publisher": "Ubuntu Developers ", + "name": "util-linux", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:util-linux:util-linux:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/util-linux@2.34-0.1ubuntu9.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/vim@2:8.1.2269-1ubuntu5?arch=amd64&distro=ubuntu-20.04&package-id=f7c20d03c844906d", + "publisher": "Ubuntu Developers ", + "name": "vim", + "version": "2:8.1.2269-1ubuntu5", + "licenses": [ + { + "license": { + "name": "Apache" + } + }, + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-1.0" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Compaq" + } + }, + { + "license": { + "name": "EDL-1" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "OPL-1+" + } + }, + { + "license": { + "name": "SRA" + } + }, + { + "license": { + "name": "UC" + } + }, + { + "license": { + "id": "Vim" + } + }, + { + "license": { + "name": "Vim-Regexp" + } + }, + { + "license": { + "id": "X11" + } + }, + { + "license": { + "name": "XPM" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:vim:vim:2\\:8.1.2269-1ubuntu5:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/vim@2:8.1.2269-1ubuntu5?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/vim-common@2:8.1.2269-1ubuntu5?arch=all&upstream=vim&distro=ubuntu-20.04&package-id=b15d5faa156c3d2a", + "publisher": "Ubuntu Developers ", + "name": "vim-common", + "version": "2:8.1.2269-1ubuntu5", + "licenses": [ + { + "license": { + "name": "Apache" + } + }, + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-1.0" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Compaq" + } + }, + { + "license": { + "name": "EDL-1" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "OPL-1+" + } + }, + { + "license": { + "name": "SRA" + } + }, + { + "license": { + "name": "UC" + } + }, + { + "license": { + "id": "Vim" + } + }, + { + "license": { + "name": "Vim-Regexp" + } + }, + { + "license": { + "id": "X11" + } + }, + { + "license": { + "name": "XPM" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:vim-common:vim-common:2\\:8.1.2269-1ubuntu5:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/vim-common@2:8.1.2269-1ubuntu5?arch=all&upstream=vim&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/vim-runtime@2:8.1.2269-1ubuntu5?arch=all&upstream=vim&distro=ubuntu-20.04&package-id=3af115c3e4b96863", + "publisher": "Ubuntu Developers ", + "name": "vim-runtime", + "version": "2:8.1.2269-1ubuntu5", + "licenses": [ + { + "license": { + "name": "Apache" + } + }, + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-1.0" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Compaq" + } + }, + { + "license": { + "name": "EDL-1" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "OPL-1+" + } + }, + { + "license": { + "name": "SRA" + } + }, + { + "license": { + "name": "UC" + } + }, + { + "license": { + "id": "Vim" + } + }, + { + "license": { + "name": "Vim-Regexp" + } + }, + { + "license": { + "id": "X11" + } + }, + { + "license": { + "name": "XPM" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:vim-runtime:vim-runtime:2\\:8.1.2269-1ubuntu5:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/vim-runtime@2:8.1.2269-1ubuntu5?arch=all&upstream=vim&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/xfsprogs@5.3.0-1ubuntu2?arch=amd64&distro=ubuntu-20.04&package-id=bbefdc57cc2f7b90", + "publisher": "Ubuntu Developers ", + "name": "xfsprogs", + "version": "5.3.0-1ubuntu2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:xfsprogs:xfsprogs:5.3.0-1ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/xfsprogs@5.3.0-1ubuntu2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/xxd@2:8.1.2269-1ubuntu5?arch=amd64&upstream=vim&distro=ubuntu-20.04&package-id=7bcc1b7cbc0e98d5", + "publisher": "Ubuntu Developers ", + "name": "xxd", + "version": "2:8.1.2269-1ubuntu5", + "licenses": [ + { + "license": { + "name": "Apache" + } + }, + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-1.0" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Compaq" + } + }, + { + "license": { + "name": "EDL-1" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "OPL-1+" + } + }, + { + "license": { + "name": "SRA" + } + }, + { + "license": { + "name": "UC" + } + }, + { + "license": { + "id": "Vim" + } + }, + { + "license": { + "name": "Vim-Regexp" + } + }, + { + "license": { + "id": "X11" + } + }, + { + "license": { + "name": "XPM" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:xxd:xxd:2\\:8.1.2269-1ubuntu5:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/xxd@2:8.1.2269-1ubuntu5?arch=amd64&upstream=vim&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/xz-utils@5.2.4-1ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=46271b3ba3de19b6", + "publisher": "Ubuntu Developers ", + "name": "xz-utils", + "version": "5.2.4-1ubuntu1", + "licenses": [ + { + "license": { + "name": "Autoconf" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "PD" + } + }, + { + "license": { + "name": "PD-debian" + } + }, + { + "license": { + "name": "config-h" + } + }, + { + "license": { + "name": "noderivs" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-nowarranty" + } + }, + { + "license": { + "name": "probably-PD" + } + } + ], + "cpe": "cpe:2.3:a:xz-utils:xz-utils:5.2.4-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/xz-utils@5.2.4-1ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/zip@3.0-11build1?arch=amd64&distro=ubuntu-20.04&package-id=849358b990c33a2b", + "publisher": "Ubuntu Developers ", + "name": "zip", + "version": "3.0-11build1", + "cpe": "cpe:2.3:a:zip:zip:3.0-11build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/zip@3.0-11build1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/zlib1g@1:1.2.11.dfsg-2ubuntu1.2?arch=amd64&upstream=zlib&distro=ubuntu-20.04&package-id=65361fdd213cfcf7", + "publisher": "Ubuntu Developers ", + "name": "zlib1g", + "version": "1:1.2.11.dfsg-2ubuntu1.2", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib1g:zlib1g:1\\:1.2.11.dfsg-2ubuntu1.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/zlib1g@1:1.2.11.dfsg-2ubuntu1.2?arch=amd64&upstream=zlib&distro=ubuntu-20.04" + }, + { + "type": "operating-system", + "name": "ubuntu", + "version": "20.04", + "description": "Ubuntu 20.04.3 LTS", + "swid": { + "tagId": "ubuntu", + "name": "ubuntu", + "version": "20.04" + }, + "externalReferences": [ + { + "url": "https://bugs.launchpad.net/ubuntu/", + "type": "issue-tracker" + }, + { + "url": "https://www.ubuntu.com/", + "type": "website" + }, + { + "url": "https://help.ubuntu.com/", + "comment": "support", + "type": "other" + }, + { + "url": "https://www.ubuntu.com/legal/terms-and-policies/privacy-policy", + "comment": "privacyPolicy", + "type": "other" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/US_export_policy/US_export_policy?package-id=9fc12ca3a2e2eae4", + "name": "US_export_policy", + "cpe": "cpe:2.3:a:US-export-policy:US-export-policy:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/US_export_policy/US_export_policy", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "2fcb002cf98fbafecb4fe01976ab172b71411654" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/US_export_policy/US_export_policy?package-id=502b2a55c42bdec0", + "name": "US_export_policy", + "cpe": "cpe:2.3:a:US-export-policy:US-export-policy:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/US_export_policy/US_export_policy", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "2fcb002cf98fbafecb4fe01976ab172b71411654" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.4.0-r0?arch=x86_64&distro=alpine-3.17.3&package-id=92b19c7750fb559d", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.4.0-r0", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.4.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.4.0-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout-data@3.4.0-r0?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.17.3&package-id=291d1267b40d636f", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout-data", + "version": "3.4.0-r0", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout-data@3.4.0-r0?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.17.3&package-id=2b5e23d349b556cf", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.4-r1", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.10-r1?arch=x86_64&distro=alpine-3.17.3&package-id=e5f757b0df1f62bc", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.12.10-r1", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.12.10-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.12.10-r1?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/brotli-libs@1.0.9-r9?arch=x86_64&upstream=brotli&distro=alpine-3.17.3&package-id=b908173dd9145006", + "publisher": "prspkt ", + "name": "brotli-libs", + "version": "1.0.9-r9", + "description": "Generic lossless compressor (libraries)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brotli-libs:brotli-libs:1.0.9-r9:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/brotli-libs@1.0.9-r9?arch=x86_64&upstream=brotli&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://github.com/google/brotli", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "e6c9486419cbb84e", + "name": "busybox", + "version": "1.35.0", + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=alpine-3.17.3&package-id=623d53216342d45e", + "publisher": "Sören Tempel ", + "name": "busybox", + "version": "1.35.0-r29", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0-r29:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.3&package-id=256fc96b4a8c4da8", + "publisher": "Sören Tempel ", + "name": "busybox-binsh", + "version": "1.35.0-r29", + "description": "busybox ash /bin/sh", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox-binsh:busybox-binsh:1.35.0-r29:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20220614-r4?arch=x86_64&upstream=ca-certificates&distro=alpine-3.17.3&package-id=b805d823ae624f04", + "publisher": "Natanael Copa ", + "name": "ca-certificates-bundle", + "version": "20220614-r4", + "description": "Pre generated bundle of Mozilla certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-bundle@20220614-r4?arch=x86_64&upstream=ca-certificates&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/charsets/charsets?package-id=ac260baeda2f6c16", + "name": "charsets", + "cpe": "cpe:2.3:a:charsets:charsets:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/charsets/charsets", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "141875c9bf4e34ae776a45505fc5365a5a1c8180" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/cldrdata/cldrdata?package-id=aaa36a6b8966b603", + "name": "cldrdata", + "cpe": "cpe:2.3:a:cldrdata:cldrdata:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/cldrdata/cldrdata", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "040ba7365dc9db7c7b9a0fd786c6f180e61f62e3" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/dnsns/dnsns?package-id=af09d0f9bd2e5151", + "name": "dnsns", + "cpe": "cpe:2.3:a:dnsns:dnsns:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/dnsns/dnsns", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "3c80b6ce7bfb62d34251421d73d7afb67f06b1e8" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/encodings@1.0.6-r0?arch=x86_64&distro=alpine-3.17.3&package-id=27e4d13f9a311e67", + "publisher": "Natanael Copa ", + "name": "encodings", + "version": "1.0.6-r0", + "description": "X.org font encoding files", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:encodings:encodings:1.0.6-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/encodings@1.0.6-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.flywaydb/flyway-commandline@6.5.2?package-id=c6ee0475836854bc", + "group": "org.flywaydb", + "name": "flyway-commandline", + "version": "6.5.2", + "cpe": "cpe:2.3:a:flyway-commandline:flyway-commandline:6.5.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.flywaydb/flyway-commandline@6.5.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "268d5988f4c6b951ae19ac32d2700a29ea38b02a" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.flywaydb.enterprise/flyway-commandline@6.5.2?package-id=f00f61c03e76820f", + "group": "org.flywaydb.enterprise", + "name": "flyway-commandline", + "version": "6.5.2", + "cpe": "cpe:2.3:a:flyway-commandline:flyway-commandline:6.5.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.flywaydb.enterprise/flyway-commandline@6.5.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "524bbeaeabaf7d5268f12bab1e267bd9c36ffe89" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.flywaydb.pro/flyway-commandline@6.5.2?package-id=9246a63644654103", + "group": "org.flywaydb.pro", + "name": "flyway-commandline", + "version": "6.5.2", + "cpe": "cpe:2.3:a:flyway-commandline:flyway-commandline:6.5.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.flywaydb.pro/flyway-commandline@6.5.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "8f52b854dde2be056fdfa17adc953734dcb6cdfc" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.flywaydb/flyway-core@6.5.2?package-id=d9d3038fa2441d9f", + "group": "org.flywaydb", + "name": "flyway-core", + "version": "6.5.2", + "licenses": [ + { + "license": { + "name": "https://flywaydb.org/licenses/flyway-community" + } + } + ], + "cpe": "cpe:2.3:a:flyway-core:flyway-core:6.5.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.flywaydb/flyway-core@6.5.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "b278ba02208c39fe601986f313885f27bdeae3b4" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.flywaydb.enterprise/flyway-core@6.5.2?package-id=7ecd86f5bb3aa997", + "group": "org.flywaydb.enterprise", + "name": "flyway-core", + "version": "6.5.2", + "licenses": [ + { + "license": { + "name": "https://flywaydb.org/licenses/flyway-enterprise" + } + } + ], + "cpe": "cpe:2.3:a:flyway-core:flyway-core:6.5.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.flywaydb.enterprise/flyway-core@6.5.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "1a031f60991c400c4016192f4554608b7ca84b17" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.flywaydb.pro/flyway-core@6.5.2?package-id=7638a34f08a477e5", + "group": "org.flywaydb.pro", + "name": "flyway-core", + "version": "6.5.2", + "licenses": [ + { + "license": { + "name": "https://flywaydb.org/licenses/flyway-pro" + } + } + ], + "cpe": "cpe:2.3:a:flyway-core:flyway-core:6.5.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.flywaydb.pro/flyway-core@6.5.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "a4f690bd53cb4fb812e7a95d5991be43e542a723" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/font-dejavu@2.37-r3?arch=x86_64&distro=alpine-3.17.3&package-id=dcec74118c4e82d9", + "publisher": "Natanael Copa ", + "name": "font-dejavu", + "version": "2.37-r3", + "description": "Font family based on the Bitstream Vera Fonts with a wider range of characters", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:font-dejavu:font-dejavu:2.37-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/font-dejavu@2.37-r3?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://dejavu-fonts.github.io/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/fontconfig@2.14.1-r0?arch=x86_64&distro=alpine-3.17.3&package-id=adae4094ba998368", + "publisher": "Natanael Copa ", + "name": "fontconfig", + "version": "2.14.1-r0", + "description": "Library for configuring and customizing font access", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fontconfig:fontconfig:2.14.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/fontconfig@2.14.1-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.freedesktop.org/wiki/Software/fontconfig", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/freetype@2.12.1-r0?arch=x86_64&distro=alpine-3.17.3&package-id=2b1bfc10343b9080", + "publisher": "Carlo Landmeter ", + "name": "freetype", + "version": "2.12.1-r0", + "description": "TrueType font rendering library", + "licenses": [ + { + "license": { + "id": "FTL" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:freetype:freetype:2.12.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/freetype@2.12.1-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.freetype.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.google.code.gson/gson@2.8.6?package-id=fc6f3f03c604a664", + "group": "com.google.code.gson", + "name": "gson", + "version": "2.8.6", + "cpe": "cpe:2.3:a:google:gson:2.8.6:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.google.code.gson/gson@2.8.6", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "9180733b7df8542621dc12e21e87557e8c99b8cb" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.fusesource.hawtjni/hawtjni-runtime@1.17?package-id=ea2a5041dc281db7", + "group": "org.fusesource.hawtjni", + "name": "hawtjni-runtime", + "version": "1.17", + "cpe": "cpe:2.3:a:hawtjni-runtime:hawtjni-runtime:1.17:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.fusesource.hawtjni/hawtjni-runtime@1.17" + }, + { + "type": "library", + "bom-ref": "pkg:maven/jaccess/jaccess?package-id=597e861ae7234b49", + "name": "jaccess", + "cpe": "cpe:2.3:a:jaccess:jaccess:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/jaccess/jaccess", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "4cf0b06ec3ab96c68d48a3b56a6a2b9a939b4a69" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.fusesource.jansi/jansi@1.18?package-id=9bed868f402b2298", + "group": "org.fusesource.jansi", + "name": "jansi", + "version": "1.18", + "cpe": "cpe:2.3:a:fusesource:jansi:1.18:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.fusesource.jansi/jansi@1.18" + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.fusesource.jansi/jansi-freebsd32@1.8?package-id=e30a6ee31edbdff9", + "group": "org.fusesource.jansi", + "name": "jansi-freebsd32", + "version": "1.8", + "cpe": "cpe:2.3:a:jansi-freebsd32:jansi-freebsd32:1.8:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.fusesource.jansi/jansi-freebsd32@1.8" + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.fusesource.jansi/jansi-freebsd64@1.8?package-id=e51dba0a02aac9e", + "group": "org.fusesource.jansi", + "name": "jansi-freebsd64", + "version": "1.8", + "cpe": "cpe:2.3:a:jansi-freebsd64:jansi-freebsd64:1.8:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.fusesource.jansi/jansi-freebsd64@1.8" + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.fusesource.jansi/jansi-linux32@1.8?package-id=e4755ea938ee0286", + "group": "org.fusesource.jansi", + "name": "jansi-linux32", + "version": "1.8", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:fusesource\\,-corp-:jansi-linux32:1.8:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.fusesource.jansi/jansi-linux32@1.8", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "d9205bbcd4b5f9cd1effe752d18f73bd942d783f" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.fusesource.jansi/jansi-linux64@1.8?package-id=2543a23a959b7460", + "group": "org.fusesource.jansi", + "name": "jansi-linux64", + "version": "1.8", + "cpe": "cpe:2.3:a:jansi-linux64:jansi-linux64:1.8:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.fusesource.jansi/jansi-linux64@1.8" + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.fusesource.jansi/jansi-native@1.8?package-id=c4e9dbb255a7604c", + "group": "org.fusesource.jansi", + "name": "jansi-native", + "version": "1.8", + "cpe": "cpe:2.3:a:jansi-native:jansi-native:1.8:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.fusesource.jansi/jansi-native@1.8" + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.fusesource.jansi/jansi-osx@1.8?package-id=920592cacba9b51a", + "group": "org.fusesource.jansi", + "name": "jansi-osx", + "version": "1.8", + "cpe": "cpe:2.3:a:fusesource:jansi-osx:1.8:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.fusesource.jansi/jansi-osx@1.8" + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.fusesource.jansi/jansi-windows32@1.8?package-id=2ae0f5208a8fbec4", + "group": "org.fusesource.jansi", + "name": "jansi-windows32", + "version": "1.8", + "cpe": "cpe:2.3:a:jansi-windows32:jansi-windows32:1.8:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.fusesource.jansi/jansi-windows32@1.8" + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.fusesource.jansi/jansi-windows64@1.8?package-id=aab81dc393bb54a3", + "group": "org.fusesource.jansi", + "name": "jansi-windows64", + "version": "1.8", + "cpe": "cpe:2.3:a:jansi-windows64:jansi-windows64:1.8:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.fusesource.jansi/jansi-windows64@1.8" + }, + { + "type": "application", + "bom-ref": "pkg:generic/java@1.8.0_362-b09?package-id=df80297034b58157", + "name": "java", + "version": "1.8.0_362-b09", + "cpe": "cpe:2.3:a:oracle:openjdk:1.8.0_362-b09:*:*:*:*:*:*:*", + "purl": "pkg:generic/java@1.8.0_362-b09" + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun/jce@1.8.0_362?package-id=a8c489b1d53d3920", + "name": "jce", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:jce:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.sun/jce@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "ea30f8fc11602d5de2fc30432e5c489364bb7d2e" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/jfr/jfr@1.8.0_362?package-id=a79464b21bb17e9e", + "name": "jfr", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:jfr:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/jfr/jfr@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "88dbd83bf6b99249cb4a27d94cd9db30eed845d5" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/jsse/jsse@1.8.0_362?package-id=c373477973ee44a0", + "name": "jsse", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:jsse:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/jsse/jsse@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "e2cc27ebb60ca839f44d9794f18450eb23cf44b4" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libbz2@1.0.8-r4?arch=x86_64&upstream=bzip2&distro=alpine-3.17.3&package-id=60a12fd5038efa61", + "publisher": "Natanael Copa ", + "name": "libbz2", + "version": "1.0.8-r4", + "description": "Shared library for bz2", + "licenses": [ + { + "license": { + "id": "bzip2-1.0.6" + } + } + ], + "cpe": "cpe:2.3:a:libbz2:libbz2:1.0.8-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libbz2@1.0.8-r4?arch=x86_64&upstream=bzip2&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://sourceware.org/bzip2/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.17.3&package-id=8126b232e2d3c608", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r3", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.3&package-id=d3084c788891fb28", + "publisher": "Ariadne Conill ", + "name": "libcrypto3", + "version": "3.0.8-r3", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto3:libcrypto3:3.0.8-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libexpat@2.5.0-r0?arch=x86_64&upstream=expat&distro=alpine-3.17.3&package-id=3230d7655464b5cd", + "publisher": "Carlo Landmeter ", + "name": "libexpat", + "version": "2.5.0-r0", + "description": "XML Parser library written in C (libraries)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libexpat:libexpat:2.5.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libexpat@2.5.0-r0?arch=x86_64&upstream=expat&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://libexpat.github.io/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libfontenc@1.1.6-r0?arch=x86_64&distro=alpine-3.17.3&package-id=4b664e9d006f8d78", + "publisher": "Natanael Copa ", + "name": "libfontenc", + "version": "1.1.6-r0", + "description": "X11 font encoding library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libfontenc:libfontenc:1.1.6-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libfontenc@1.1.6-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libpng@1.6.38-r0?arch=x86_64&distro=alpine-3.17.3&package-id=de4865c94634be51", + "publisher": "Natanael Copa ", + "name": "libpng", + "version": "1.6.38-r0", + "description": "Portable Network Graphics library", + "licenses": [ + { + "license": { + "id": "Libpng" + } + } + ], + "cpe": "cpe:2.3:a:libpng:libpng:1.6.38-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libpng@1.6.38-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "http://www.libpng.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libretls@3.5.2-r1?arch=x86_64&distro=alpine-3.17.3&package-id=1539d83bb0f27113", + "publisher": "Ariadne Conill ", + "name": "libretls", + "version": "3.5.2-r1", + "description": "port of libtls from libressl to openssl", + "licenses": [ + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "name": "(" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "OR" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": ")" + } + } + ], + "cpe": "cpe:2.3:a:libretls:libretls:3.5.2-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libretls@3.5.2-r1?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://git.causal.agency/libretls/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.3&package-id=2a95f0251fba7a33", + "publisher": "Ariadne Conill ", + "name": "libssl3", + "version": "3.0.8-r3", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libssl3:libssl3:3.0.8-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/local_policy/local_policy?package-id=7e5a8ee4262b37db", + "name": "local_policy", + "cpe": "cpe:2.3:a:local-policy:local-policy:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/local_policy/local_policy", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "bc70ce9f98d1f3ebcf41bb5e7b92556a5a2d4788" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/local_policy/local_policy?package-id=6060fa0479e27db5", + "name": "local_policy", + "cpe": "cpe:2.3:a:local-policy:local-policy:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/local_policy/local_policy", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "8ab714610f8bf90411dc029a09ecd27c2b60c804" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/localedata/localedata?package-id=3d9158e219a57e4d", + "name": "localedata", + "cpe": "cpe:2.3:a:localedata:localedata:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/localedata/localedata", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "fd7f6a9ee8e6263caca5c369c0bb813702c672c0" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/management-agent/management-agent?package-id=7defce2ca9e0fee2", + "name": "management-agent", + "cpe": "cpe:2.3:a:management-agent:management-agent:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/management-agent/management-agent", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "66e296ac38ffd9d835b2c91f67cde75891e81631" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/mkfontscale@1.2.2-r1?arch=x86_64&distro=alpine-3.17.3&package-id=5556aac06b098482", + "publisher": "Natanael Copa ", + "name": "mkfontscale", + "version": "1.2.2-r1", + "description": "Scalable font index generator for X", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mkfontscale:mkfontscale:1.2.2-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/mkfontscale@1.2.2-r1?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.2.3-r4?arch=x86_64&distro=alpine-3.17.3&package-id=d9700f02cf26e8b8", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.2.3-r4", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.2.3-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.2.3-r4?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-locales@0.1.0-r0?arch=x86_64&distro=alpine-3.17.3&package-id=2711b5f56d3082dd", + "publisher": "TBK ", + "name": "musl-locales", + "version": "0.1.0-r0", + "description": "Locales support for musl", + "licenses": [ + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:musl-locales:musl-locales:0.1.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-locales@0.1.0-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://git.adelielinux.org/adelie/musl-locales/-/wikis/home", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-locales-lang@0.1.0-r0?arch=x86_64&upstream=musl-locales&distro=alpine-3.17.3&package-id=a5f7a593669f92ef", + "publisher": "TBK ", + "name": "musl-locales-lang", + "version": "0.1.0-r0", + "description": "Languages for package musl-locales", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-locales-lang:musl-locales-lang:0.1.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-locales-lang@0.1.0-r0?arch=x86_64&upstream=musl-locales&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://git.adelielinux.org/adelie/musl-locales/-/wikis/home", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86_64&upstream=musl&distro=alpine-3.17.3&package-id=f71ecf5267e6c37b", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.2.3-r4", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.2.3-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86_64&upstream=musl&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.mysql.cj/mysql-connector-java@8.0.17?package-id=7e34b98ca95beea6", + "name": "mysql-connector-java", + "version": "8.0.17", + "cpe": "cpe:2.3:a:mysql-connector-java:mysql-connector-java:8.0.17:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.mysql.cj/mysql-connector-java@8.0.17", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "53da6afdc5f7b45caaa5bc3627028b2041a36cee" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/nashorn/nashorn@1.8.0_362-b09?package-id=ff4e7f4643e3b763", + "name": "nashorn", + "version": "1.8.0_362-b09", + "cpe": "cpe:2.3:a:oracle-corporation:nashorn:1.8.0_362-b09:*:*:*:*:*:*:*", + "purl": "pkg:maven/nashorn/nashorn@1.8.0_362-b09", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "85cadde4959b1188714a9d6bfde1304027f07e36" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/resources/resources@1.8.0_362?package-id=8580b1e6a4b5281a", + "name": "resources", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:resources:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/resources/resources@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "34d2d9c5b59ee5ff757e7d766837a4f53947b7a1" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/rt/rt@1.8.0_362?package-id=a9e172c0e0dc2fce", + "name": "rt", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:rt:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/rt/rt@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "d85439d089c379805dac978a1e27a9a3e465bb71" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.3.5-r1?arch=x86_64&upstream=pax-utils&distro=alpine-3.17.3&package-id=e903138d19e85b80", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.3.5-r1", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.3.5-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.3.5-r1?arch=x86_64&upstream=pax-utils&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.3&package-id=b15247aafcd4a647", + "publisher": "Sören Tempel ", + "name": "ssl_client", + "version": "1.35.0-r29", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.35.0-r29:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun/sunec@1.8.0_362?package-id=514c2349426dbec0", + "name": "sunec", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:sunec:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.sun/sunec@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "0a226bea7cf5d3f5bc9ab678f9a0abbbf2836ced" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun/sunjce_provider@1.8.0_362?package-id=216feec33fd91c68", + "name": "sunjce_provider", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:sunjce-provider:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.sun/sunjce_provider@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "5d8e01ee58b00457ce81b3ab7641c7cf49c41fe4" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun/sunpkcs11@1.8.0_362?package-id=9814d36df586abb0", + "name": "sunpkcs11", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:sunpkcs11:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.sun/sunpkcs11@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "bcf85f75350c04e0abc12a15ea7a0325d8131599" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/tzdata@2023c-r0?arch=x86_64&distro=alpine-3.17.3&package-id=7443bdf13c73d18c", + "publisher": "Natanael Copa ", + "name": "tzdata", + "version": "2023c-r0", + "description": "Timezone data", + "licenses": [ + { + "license": { + "name": "Public-Domain" + } + } + ], + "cpe": "cpe:2.3:a:tzdata:tzdata:2023c-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/tzdata@2023c-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.iana.org/time-zones", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/zipfs/zipfs@1.8.0_362?package-id=649443e35eb779e0", + "name": "zipfs", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:zipfs:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/zipfs/zipfs@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "8826341a6c075308576e50fa5f97c0cdbea0b844" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.13-r0?arch=x86_64&distro=alpine-3.17.3&package-id=94014313cfcd2b71", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.13-r0", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.13-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.13-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.17.3", + "description": "Alpine Linux v3.17", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.17.3" + }, + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/US_export_policy/US_export_policy?package-id=9fc12ca3a2e2eae4", + "name": "US_export_policy", + "cpe": "cpe:2.3:a:US-export-policy:US-export-policy:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/US_export_policy/US_export_policy", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "2fcb002cf98fbafecb4fe01976ab172b71411654" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/US_export_policy/US_export_policy?package-id=502b2a55c42bdec0", + "name": "US_export_policy", + "cpe": "cpe:2.3:a:US-export-policy:US-export-policy:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/US_export_policy/US_export_policy", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "2fcb002cf98fbafecb4fe01976ab172b71411654" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.4.0-r0?arch=x86_64&distro=alpine-3.17.3&package-id=92b19c7750fb559d", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.4.0-r0", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.4.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.4.0-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout-data@3.4.0-r0?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.17.3&package-id=291d1267b40d636f", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout-data", + "version": "3.4.0-r0", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout-data@3.4.0-r0?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.17.3&package-id=2b5e23d349b556cf", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.4-r1", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.10-r1?arch=x86_64&distro=alpine-3.17.3&package-id=e5f757b0df1f62bc", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.12.10-r1", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.12.10-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.12.10-r1?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.bouncycastle.bcprovider/bcprov-jdk15@1.44?package-id=eeb8b0e5db5f7962", + "name": "bcprov-jdk15", + "version": "1.44", + "cpe": "cpe:2.3:a:bouncycastle-org:bcprov-jdk15:1.44:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.bouncycastle.bcprovider/bcprov-jdk15@1.44", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "63102221970b8471b1dd2a5bfe36fd2ab1f5c516" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/brotli-libs@1.0.9-r9?arch=x86_64&upstream=brotli&distro=alpine-3.17.3&package-id=b908173dd9145006", + "publisher": "prspkt ", + "name": "brotli-libs", + "version": "1.0.9-r9", + "description": "Generic lossless compressor (libraries)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brotli-libs:brotli-libs:1.0.9-r9:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/brotli-libs@1.0.9-r9?arch=x86_64&upstream=brotli&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://github.com/google/brotli", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "e6c9486419cbb84e", + "name": "busybox", + "version": "1.35.0", + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=alpine-3.17.3&package-id=623d53216342d45e", + "publisher": "Sören Tempel ", + "name": "busybox", + "version": "1.35.0-r29", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0-r29:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.3&package-id=256fc96b4a8c4da8", + "publisher": "Sören Tempel ", + "name": "busybox-binsh", + "version": "1.35.0-r29", + "description": "busybox ash /bin/sh", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox-binsh:busybox-binsh:1.35.0-r29:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20220614-r4?arch=x86_64&upstream=ca-certificates&distro=alpine-3.17.3&package-id=b805d823ae624f04", + "publisher": "Natanael Copa ", + "name": "ca-certificates-bundle", + "version": "20220614-r4", + "description": "Pre generated bundle of Mozilla certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-bundle@20220614-r4?arch=x86_64&upstream=ca-certificates&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/charsets/charsets?package-id=ac260baeda2f6c16", + "name": "charsets", + "cpe": "cpe:2.3:a:charsets:charsets:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/charsets/charsets", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "141875c9bf4e34ae776a45505fc5365a5a1c8180" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/cldrdata/cldrdata?package-id=aaa36a6b8966b603", + "name": "cldrdata", + "cpe": "cpe:2.3:a:cldrdata:cldrdata:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/cldrdata/cldrdata", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "040ba7365dc9db7c7b9a0fd786c6f180e61f62e3" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/commons-pool/commons-pool@1.6?package-id=5d1dcd6c610f5879", + "group": "commons-pool", + "name": "commons-pool", + "version": "1.6", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:apache:commons-pool:1.6:*:*:*:*:*:*:*", + "purl": "pkg:maven/commons-pool/commons-pool@1.6", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "4572d589699f09d866a226a14b7f4323c6d8f040" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/dnsns/dnsns?package-id=af09d0f9bd2e5151", + "name": "dnsns", + "cpe": "cpe:2.3:a:dnsns:dnsns:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/dnsns/dnsns", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "3c80b6ce7bfb62d34251421d73d7afb67f06b1e8" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/encodings@1.0.6-r0?arch=x86_64&distro=alpine-3.17.3&package-id=27e4d13f9a311e67", + "publisher": "Natanael Copa ", + "name": "encodings", + "version": "1.0.6-r0", + "description": "X.org font encoding files", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:encodings:encodings:1.0.6-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/encodings@1.0.6-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/font-dejavu@2.37-r3?arch=x86_64&distro=alpine-3.17.3&package-id=dcec74118c4e82d9", + "publisher": "Natanael Copa ", + "name": "font-dejavu", + "version": "2.37-r3", + "description": "Font family based on the Bitstream Vera Fonts with a wider range of characters", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:font-dejavu:font-dejavu:2.37-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/font-dejavu@2.37-r3?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://dejavu-fonts.github.io/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/fontconfig@2.14.1-r0?arch=x86_64&distro=alpine-3.17.3&package-id=adae4094ba998368", + "publisher": "Natanael Copa ", + "name": "fontconfig", + "version": "2.14.1-r0", + "description": "Library for configuring and customizing font access", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fontconfig:fontconfig:2.14.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/fontconfig@2.14.1-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.freedesktop.org/wiki/Software/fontconfig", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/freetype@2.12.1-r0?arch=x86_64&distro=alpine-3.17.3&package-id=2b1bfc10343b9080", + "publisher": "Carlo Landmeter ", + "name": "freetype", + "version": "2.12.1-r0", + "description": "TrueType font rendering library", + "licenses": [ + { + "license": { + "id": "FTL" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:freetype:freetype:2.12.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/freetype@2.12.1-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.freetype.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/jaccess/jaccess?package-id=597e861ae7234b49", + "name": "jaccess", + "cpe": "cpe:2.3:a:jaccess:jaccess:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/jaccess/jaccess", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "4cf0b06ec3ab96c68d48a3b56a6a2b9a939b4a69" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.11.2?package-id=6f877f8793640384", + "group": "com.fasterxml.jackson.core", + "name": "jackson-annotations", + "version": "2.11.2", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:jackson-annotations:jackson-annotations:2.11.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.11.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "0e0a7f61fce3e3eac38a079c11831868269de2ea" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.11.2?package-id=c4caf18ffa4b9fb1", + "group": "com.fasterxml.jackson.core", + "name": "jackson-core", + "version": "2.11.2", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:jackson-core:jackson-core:2.11.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.11.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "bc022ab0f0c83c07f9c52c5ab9a6a4932b15cc35" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.11.2?package-id=58bfe200ca0eafb4", + "group": "com.fasterxml.jackson.core", + "name": "jackson-databind", + "version": "2.11.2", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:jackson-databind:jackson-databind:2.11.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.11.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "ee08bbd8975dde844307fe8309dfcd5ec7ee129d" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.11.2?package-id=16ab1e33c5947f5b", + "group": "com.fasterxml.jackson.datatype", + "name": "jackson-datatype-jdk8", + "version": "2.11.2", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:jackson-datatype-jdk8:jackson-datatype-jdk8:2.11.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.11.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "d4c1933a8d62db65c3d5a5cd809511e021a189c0" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.11.2?package-id=2513f03e8793414e", + "group": "com.fasterxml.jackson.datatype", + "name": "jackson-datatype-jsr310", + "version": "2.11.2", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:jackson-datatype-jsr310:jackson-datatype-jsr310:2.11.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.11.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "e6235e5eb3cf3edd2a95cd0dc96bc48aeb309e8a" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.11.2?package-id=6ac3f07c180fc10f", + "group": "com.fasterxml.jackson.module", + "name": "jackson-module-parameter-names", + "version": "2.11.2", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:jackson-module-parameter-names:jackson-module-parameter-names:2.11.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.11.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "c0dc526fcef5a3aae0273fc516ecf3505f7a5de8" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish/jakarta.annotation-api@1.3.5?package-id=3ea11842f320080e", + "group": "jakarta.annotation", + "name": "jakarta.annotation-api", + "version": "1.3.5", + "licenses": [ + { + "license": { + "name": "http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html" + } + } + ], + "cpe": "cpe:2.3:a:jakarta.annotation-api:jakarta.annotation-api:1.3.5:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.glassfish/jakarta.annotation-api@1.3.5", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "59eb84ee0d616332ff44aba065f3888cf002cd2d" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish/jakarta.el@3.0.3?package-id=aef265b67043e79d", + "group": "org.glassfish", + "name": "jakarta.el", + "version": "3.0.3", + "licenses": [ + { + "license": { + "name": "http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html" + } + } + ], + "cpe": "cpe:2.3:a:oracle-corporation:jakarta.el:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.glassfish/jakarta.el@3.0.3", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "dab46ee1ee23f7197c13d7c40fce14817c9017df" + } + ] + } + ] + }, + { + "type": "application", + "bom-ref": "pkg:generic/java@1.8.0_362-b09?package-id=df80297034b58157", + "name": "java", + "version": "1.8.0_362-b09", + "cpe": "cpe:2.3:a:oracle:openjdk:1.8.0_362-b09:*:*:*:*:*:*:*", + "purl": "pkg:generic/java@1.8.0_362-b09" + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun/jce@1.8.0_362?package-id=a8c489b1d53d3920", + "name": "jce", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:jce:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.sun/jce@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "ea30f8fc11602d5de2fc30432e5c489364bb7d2e" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/jfr/jfr@1.8.0_362?package-id=a79464b21bb17e9e", + "name": "jfr", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:jfr:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/jfr/jfr@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "88dbd83bf6b99249cb4a27d94cd9db30eed845d5" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/net.jradius/jradius-client@1.1.5?package-id=4f95c6858e195dd3", + "group": "net.jradius", + "name": "jradius-client", + "version": "1.1.5", + "cpe": "cpe:2.3:a:jradius-client:jradius-client:1.1.5:*:*:*:*:*:*:*", + "purl": "pkg:maven/net.jradius/jradius-client@1.1.5", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "ea5857b29a4447ee6b19e2123b3f83d1a3d23ce2" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/net.jradius/jradius-core@1.1.5?package-id=16464a48ad9734d0", + "group": "net.jradius", + "name": "jradius-core", + "version": "1.1.5", + "cpe": "cpe:2.3:a:jradius-core:jradius-core:1.1.5:*:*:*:*:*:*:*", + "purl": "pkg:maven/net.jradius/jradius-core@1.1.5", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "c216654b56044f331290628a2a3d40a0c5d50323" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/net.jradius/jradius-dictionary@1.1.5?package-id=bbb7ec3937569352", + "group": "net.jradius", + "name": "jradius-dictionary", + "version": "1.1.5", + "cpe": "cpe:2.3:a:jradius-dictionary:jradius-dictionary:1.1.5:*:*:*:*:*:*:*", + "purl": "pkg:maven/net.jradius/jradius-dictionary@1.1.5", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "a186921802d11779e3ee3adbe54636489dc1dfd3" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/net.jradius/jradius-extended@1.1.5?package-id=f09f977dbbc1c06a", + "group": "net.jradius", + "name": "jradius-extended", + "version": "1.1.5", + "cpe": "cpe:2.3:a:jradius-extended:jradius-extended:1.1.5:*:*:*:*:*:*:*", + "purl": "pkg:maven/net.jradius/jradius-extended@1.1.5", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "84497fbb9e5ee80eed68d1e7f560ed45ee247cd9" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/jsse/jsse@1.8.0_362?package-id=c373477973ee44a0", + "name": "jsse", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:jsse:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/jsse/jsse@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "e2cc27ebb60ca839f44d9794f18450eb23cf44b4" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.slf4j/jul-to-slf4j@1.7.30?package-id=6d1332b674916d39", + "group": "org.slf4j", + "name": "jul-to-slf4j", + "version": "1.7.30", + "cpe": "cpe:2.3:a:jul-to-slf4j:jul-to-slf4j:1.7.30:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.slf4j/jul-to-slf4j@1.7.30", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "d58bebff8cbf70ff52b59208586095f467656c30" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libbz2@1.0.8-r4?arch=x86_64&upstream=bzip2&distro=alpine-3.17.3&package-id=60a12fd5038efa61", + "publisher": "Natanael Copa ", + "name": "libbz2", + "version": "1.0.8-r4", + "description": "Shared library for bz2", + "licenses": [ + { + "license": { + "id": "bzip2-1.0.6" + } + } + ], + "cpe": "cpe:2.3:a:libbz2:libbz2:1.0.8-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libbz2@1.0.8-r4?arch=x86_64&upstream=bzip2&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://sourceware.org/bzip2/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.17.3&package-id=8126b232e2d3c608", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r3", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.3&package-id=d3084c788891fb28", + "publisher": "Ariadne Conill ", + "name": "libcrypto3", + "version": "3.0.8-r3", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto3:libcrypto3:3.0.8-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libexpat@2.5.0-r0?arch=x86_64&upstream=expat&distro=alpine-3.17.3&package-id=3230d7655464b5cd", + "publisher": "Carlo Landmeter ", + "name": "libexpat", + "version": "2.5.0-r0", + "description": "XML Parser library written in C (libraries)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libexpat:libexpat:2.5.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libexpat@2.5.0-r0?arch=x86_64&upstream=expat&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://libexpat.github.io/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libfontenc@1.1.6-r0?arch=x86_64&distro=alpine-3.17.3&package-id=4b664e9d006f8d78", + "publisher": "Natanael Copa ", + "name": "libfontenc", + "version": "1.1.6-r0", + "description": "X11 font encoding library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libfontenc:libfontenc:1.1.6-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libfontenc@1.1.6-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libpng@1.6.38-r0?arch=x86_64&distro=alpine-3.17.3&package-id=de4865c94634be51", + "publisher": "Natanael Copa ", + "name": "libpng", + "version": "1.6.38-r0", + "description": "Portable Network Graphics library", + "licenses": [ + { + "license": { + "id": "Libpng" + } + } + ], + "cpe": "cpe:2.3:a:libpng:libpng:1.6.38-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libpng@1.6.38-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "http://www.libpng.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libretls@3.5.2-r1?arch=x86_64&distro=alpine-3.17.3&package-id=1539d83bb0f27113", + "publisher": "Ariadne Conill ", + "name": "libretls", + "version": "3.5.2-r1", + "description": "port of libtls from libressl to openssl", + "licenses": [ + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "name": "(" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "OR" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": ")" + } + } + ], + "cpe": "cpe:2.3:a:libretls:libretls:3.5.2-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libretls@3.5.2-r1?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://git.causal.agency/libretls/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.3&package-id=2a95f0251fba7a33", + "publisher": "Ariadne Conill ", + "name": "libssl3", + "version": "3.0.8-r3", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libssl3:libssl3:3.0.8-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/local_policy/local_policy?package-id=7e5a8ee4262b37db", + "name": "local_policy", + "cpe": "cpe:2.3:a:local-policy:local-policy:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/local_policy/local_policy", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "bc70ce9f98d1f3ebcf41bb5e7b92556a5a2d4788" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/local_policy/local_policy?package-id=6060fa0479e27db5", + "name": "local_policy", + "cpe": "cpe:2.3:a:local-policy:local-policy:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/local_policy/local_policy", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "8ab714610f8bf90411dc029a09ecd27c2b60c804" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/localedata/localedata?package-id=3d9158e219a57e4d", + "name": "localedata", + "cpe": "cpe:2.3:a:localedata:localedata:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/localedata/localedata", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "fd7f6a9ee8e6263caca5c369c0bb813702c672c0" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-api@2.13.3?package-id=51bfc623e5176345", + "group": "org.apache.logging.log4j", + "name": "log4j-api", + "version": "2.13.3", + "licenses": [ + { + "license": { + "name": "https://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:apache:log4j-api:2.13.3:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.logging.log4j/log4j-api@2.13.3", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "ec1508160b93d274b1add34419b897bae84c6ca9" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.13.3?package-id=bbb819b9ec1260d4", + "group": "org.apache.logging.log4j", + "name": "log4j-to-slf4j", + "version": "2.13.3", + "licenses": [ + { + "license": { + "name": "https://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:apache:log4j-to-slf4j:2.13.3:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.13.3", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "966f6fd1af4959d6b12bfa880121d4a2b164f857" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/logback-classic/logback-classic@1.2.3?package-id=8293ea7bd5e3c0ea", + "group": "ch.qos.logback", + "name": "logback-classic", + "version": "1.2.3", + "licenses": [ + { + "license": { + "name": "http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html" + } + } + ], + "cpe": "cpe:2.3:a:logback-classic:logback-classic:1.2.3:*:*:*:*:*:*:*", + "purl": "pkg:maven/logback-classic/logback-classic@1.2.3", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "7c4f3c474fb2c041d8028740440937705ebb473a" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/logback-core/logback-core@1.2.3?package-id=e22bdaf71dc66fea", + "group": "ch.qos.logback", + "name": "logback-core", + "version": "1.2.3", + "licenses": [ + { + "license": { + "name": "http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html" + } + } + ], + "cpe": "cpe:2.3:a:logback-core:logback-core:1.2.3:*:*:*:*:*:*:*", + "purl": "pkg:maven/logback-core/logback-core@1.2.3", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "864344400c3d4d92dfeb0a305dc87d953677c03c" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/management-agent/management-agent?package-id=7defce2ca9e0fee2", + "name": "management-agent", + "cpe": "cpe:2.3:a:management-agent:management-agent:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/management-agent/management-agent", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "66e296ac38ffd9d835b2c91f67cde75891e81631" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/mkfontscale@1.2.2-r1?arch=x86_64&distro=alpine-3.17.3&package-id=5556aac06b098482", + "publisher": "Natanael Copa ", + "name": "mkfontscale", + "version": "1.2.2-r1", + "description": "Scalable font index generator for X", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mkfontscale:mkfontscale:1.2.2-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/mkfontscale@1.2.2-r1?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.2.3-r4?arch=x86_64&distro=alpine-3.17.3&package-id=d9700f02cf26e8b8", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.2.3-r4", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.2.3-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.2.3-r4?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-locales@0.1.0-r0?arch=x86_64&distro=alpine-3.17.3&package-id=2711b5f56d3082dd", + "publisher": "TBK ", + "name": "musl-locales", + "version": "0.1.0-r0", + "description": "Locales support for musl", + "licenses": [ + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:musl-locales:musl-locales:0.1.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-locales@0.1.0-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://git.adelielinux.org/adelie/musl-locales/-/wikis/home", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-locales-lang@0.1.0-r0?arch=x86_64&upstream=musl-locales&distro=alpine-3.17.3&package-id=a5f7a593669f92ef", + "publisher": "TBK ", + "name": "musl-locales-lang", + "version": "0.1.0-r0", + "description": "Languages for package musl-locales", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-locales-lang:musl-locales-lang:0.1.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-locales-lang@0.1.0-r0?arch=x86_64&upstream=musl-locales&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://git.adelielinux.org/adelie/musl-locales/-/wikis/home", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86_64&upstream=musl&distro=alpine-3.17.3&package-id=f71ecf5267e6c37b", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.2.3-r4", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.2.3-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86_64&upstream=musl&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/nashorn/nashorn@1.8.0_362-b09?package-id=ff4e7f4643e3b763", + "name": "nashorn", + "version": "1.8.0_362-b09", + "cpe": "cpe:2.3:a:oracle-corporation:nashorn:1.8.0_362-b09:*:*:*:*:*:*:*", + "purl": "pkg:maven/nashorn/nashorn@1.8.0_362-b09", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "85cadde4959b1188714a9d6bfde1304027f07e36" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.pliant/radius@0.0.1-SNAPSHOT?package-id=a7070334020c9524", + "group": "io.pliant", + "name": "radius", + "version": "0.0.1-SNAPSHOT", + "cpe": "cpe:2.3:a:springframework:radius:0.0.1-SNAPSHOT:*:*:*:*:*:*:*", + "purl": "pkg:maven/io.pliant/radius@0.0.1-SNAPSHOT", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "c1ece56e9a6941d686d0f57c47774c424873bb28" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/resources/resources@1.8.0_362?package-id=8580b1e6a4b5281a", + "name": "resources", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:resources:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/resources/resources@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "34d2d9c5b59ee5ff757e7d766837a4f53947b7a1" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/rt/rt@1.8.0_362?package-id=a9e172c0e0dc2fce", + "name": "rt", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:rt:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/rt/rt@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "d85439d089c379805dac978a1e27a9a3e465bb71" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.3.5-r1?arch=x86_64&upstream=pax-utils&distro=alpine-3.17.3&package-id=e903138d19e85b80", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.3.5-r1", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.3.5-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.3.5-r1?arch=x86_64&upstream=pax-utils&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.30?package-id=1493fd2bb1976fd5", + "group": "org.slf4j", + "name": "slf4j-api", + "version": "1.7.30", + "cpe": "cpe:2.3:a:slf4j-api:slf4j-api:1.7.30:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.30", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "b5a4b6d16ab13e34a88fae84c35cd5d68cac922c" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.yaml/snakeyaml@1.26?package-id=396f43487a82ea23", + "group": "org.yaml", + "name": "snakeyaml", + "version": "1.26", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:snakeyaml:snakeyaml:1.26:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.yaml/snakeyaml@1.26", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "a78a8747147d2c5807683e76ec2b633e95c14fe9" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-aop/spring-aop@5.2.8.RELEASE?package-id=178716ef11b2f332", + "name": "spring-aop", + "version": "5.2.8.RELEASE", + "cpe": "cpe:2.3:a:spring-aop:spring-aop:5.2.8.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-aop/spring-aop@5.2.8.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "e0e9b4ed80ecde4bad258aaa3f87bf16eb1feecc" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-beans/spring-beans@5.2.8.RELEASE?package-id=2292c15ebf2a8cfb", + "name": "spring-beans", + "version": "5.2.8.RELEASE", + "cpe": "cpe:2.3:a:spring-beans:spring-beans:5.2.8.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-beans/spring-beans@5.2.8.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "5cfafc2b0f821bda0b537449a6fdf634b0a666ff" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot/spring-boot@2.3.3.RELEASE?package-id=b2a53df9bb7317f", + "name": "spring-boot", + "version": "2.3.3.RELEASE", + "cpe": "cpe:2.3:a:spring-boot:spring-boot:2.3.3.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot/spring-boot@2.3.3.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "74f0cfae433a6ba6d936c61baa5a5316a688dc22" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-autoconfigure/spring-boot-autoconfigure@2.3.3.RELEASE?package-id=84e90479d1d7f604", + "name": "spring-boot-autoconfigure", + "version": "2.3.3.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-autoconfigure:spring-boot-autoconfigure:2.3.3.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-autoconfigure/spring-boot-autoconfigure@2.3.3.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "a1343e09cb6024bb4fbf656ce3cd3d13f12ccbdd" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-starter/spring-boot-starter@2.3.3.RELEASE?package-id=545b27b1db7fd5c0", + "name": "spring-boot-starter", + "version": "2.3.3.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-starter:spring-boot-starter:2.3.3.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-starter/spring-boot-starter@2.3.3.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "c9bb3464e83990465b86fb94da3d20f92f036d1e" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-starter-json/spring-boot-starter-json@2.3.3.RELEASE?package-id=47e435666e868ec", + "name": "spring-boot-starter-json", + "version": "2.3.3.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-starter-json:spring-boot-starter-json:2.3.3.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-starter-json/spring-boot-starter-json@2.3.3.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "8c40b22a0635989ecc58f35d82fd55445be8822f" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-starter-logging/spring-boot-starter-logging@2.3.3.RELEASE?package-id=eaf6e7f59659f7ce", + "name": "spring-boot-starter-logging", + "version": "2.3.3.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-starter-logging:spring-boot-starter-logging:2.3.3.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-starter-logging/spring-boot-starter-logging@2.3.3.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "23523992dd7378fa565b1fc70e19629e8b867ada" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-starter-tomcat/spring-boot-starter-tomcat@2.3.3.RELEASE?package-id=2fbd990d9ba9f815", + "name": "spring-boot-starter-tomcat", + "version": "2.3.3.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-starter-tomcat:spring-boot-starter-tomcat:2.3.3.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-starter-tomcat/spring-boot-starter-tomcat@2.3.3.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "542a0aaf0f584d186d9bd052ab10a5cf357a5b39" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-starter-web/spring-boot-starter-web@2.3.3.RELEASE?package-id=ba00e8c5cd0f40e2", + "name": "spring-boot-starter-web", + "version": "2.3.3.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-starter-web:spring-boot-starter-web:2.3.3.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-starter-web/spring-boot-starter-web@2.3.3.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "d38db3c19ba4bc114aaa4febfc1d89cd8725822d" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-context/spring-context@5.2.8.RELEASE?package-id=5bbe73c2d365102e", + "name": "spring-context", + "version": "5.2.8.RELEASE", + "cpe": "cpe:2.3:a:spring-context:spring-context:5.2.8.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-context/spring-context@5.2.8.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "304d59d6c9fda8bc651fecc8c49748f8259de5ce" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-core/spring-core@5.2.8.RELEASE?package-id=73ae70e967fad2f4", + "name": "spring-core", + "version": "5.2.8.RELEASE", + "cpe": "cpe:2.3:a:springsource-spring-framework:springsource_spring_framework:5.2.8.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-core/spring-core@5.2.8.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "35a1654028254abd7cb85799a891de8a0ab9f599" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-expression/spring-expression@5.2.8.RELEASE?package-id=1d540a3afe78049", + "name": "spring-expression", + "version": "5.2.8.RELEASE", + "cpe": "cpe:2.3:a:spring-expression:spring-expression:5.2.8.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-expression/spring-expression@5.2.8.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "1b3b5c84e83b450357ae84135e1b47d1b4e5a217" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-jcl/spring-jcl@5.2.8.RELEASE?package-id=298ee8b304150695", + "name": "spring-jcl", + "version": "5.2.8.RELEASE", + "cpe": "cpe:2.3:a:spring-jcl:spring-jcl:5.2.8.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-jcl/spring-jcl@5.2.8.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "e18b8dea088cc58fad8fc25ee93f22987dd05d94" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-web/spring-web@5.2.8.RELEASE?package-id=714bcd33ae878ab5", + "name": "spring-web", + "version": "5.2.8.RELEASE", + "cpe": "cpe:2.3:a:spring-web:spring-web:5.2.8.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-web/spring-web@5.2.8.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "4f9542d61fff7beb6050e8028dfb6b7c6844c99a" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-webmvc/spring-webmvc@5.2.8.RELEASE?package-id=b129264f3ecc26f2", + "name": "spring-webmvc", + "version": "5.2.8.RELEASE", + "cpe": "cpe:2.3:a:spring-webmvc:spring-webmvc:5.2.8.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-webmvc/spring-webmvc@5.2.8.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "9cccf8354a7e031e217681db33f14339200dffcf" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.3&package-id=b15247aafcd4a647", + "publisher": "Sören Tempel ", + "name": "ssl_client", + "version": "1.35.0-r29", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.35.0-r29:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun/sunec@1.8.0_362?package-id=514c2349426dbec0", + "name": "sunec", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:sunec:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.sun/sunec@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "0a226bea7cf5d3f5bc9ab678f9a0abbbf2836ced" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun/sunjce_provider@1.8.0_362?package-id=216feec33fd91c68", + "name": "sunjce_provider", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:sunjce-provider:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.sun/sunjce_provider@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "5d8e01ee58b00457ce81b3ab7641c7cf49c41fe4" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun/sunpkcs11@1.8.0_362?package-id=9814d36df586abb0", + "name": "sunpkcs11", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:sunpkcs11:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.sun/sunpkcs11@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "bcf85f75350c04e0abc12a15ea7a0325d8131599" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.tomcat-embed-core/tomcat-embed-core@9.0.37?package-id=1beaf6c676c0209c", + "name": "tomcat-embed-core", + "version": "9.0.37", + "cpe": "cpe:2.3:a:apache:tomcat-embed-core:9.0.37:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.tomcat-embed-core/tomcat-embed-core@9.0.37", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "c3f788de87f17eb57a9e7083736c1820fcbc1046" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.tomcat-embed-websocket/tomcat-embed-websocket@9.0.37?package-id=df2b7c22ab34f638", + "name": "tomcat-embed-websocket", + "version": "9.0.37", + "cpe": "cpe:2.3:a:apache:tomcat-embed-websocket:9.0.37:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.tomcat-embed-websocket/tomcat-embed-websocket@9.0.37", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "ee8b7c9081372bf40c41443c93317145a01e343a" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/tzdata@2023c-r0?arch=x86_64&distro=alpine-3.17.3&package-id=7443bdf13c73d18c", + "publisher": "Natanael Copa ", + "name": "tzdata", + "version": "2023c-r0", + "description": "Timezone data", + "licenses": [ + { + "license": { + "name": "Public-Domain" + } + } + ], + "cpe": "cpe:2.3:a:tzdata:tzdata:2023c-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/tzdata@2023c-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.iana.org/time-zones", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/zipfs/zipfs@1.8.0_362?package-id=649443e35eb779e0", + "name": "zipfs", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:zipfs:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/zipfs/zipfs@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "8826341a6c075308576e50fa5f97c0cdbea0b844" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.13-r0?arch=x86_64&distro=alpine-3.17.3&package-id=94014313cfcd2b71", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.13-r0", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.13-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.13-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.17.3", + "description": "Alpine Linux v3.17", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.17.3" + }, + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/acl@2.2.52-2?arch=amd64&distro=debian-8&package-id=d01cbcd940107486", + "publisher": "Anibal Monsalve Salazar ", + "name": "acl", + "version": "2.2.52-2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:acl:acl:2.2.52-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/acl@2.2.52-2?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/adduser@3.113+nmu3?arch=all&distro=debian-8&package-id=2213f41dee97684c", + "publisher": "Debian Adduser Developers ", + "name": "adduser", + "version": "3.113+nmu3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:adduser:adduser:3.113\\+nmu3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/adduser@3.113+nmu3?arch=all&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/apt@1.0.9.8.3?arch=amd64&distro=debian-8&package-id=6116723ce9fc37f9", + "publisher": "APT Development Team ", + "name": "apt", + "version": "1.0.9.8.3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:apt:apt:1.0.9.8.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/apt@1.0.9.8.3?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/argparse@1.2.1?package-id=6b85f84e24c639d9", + "author": "Steven Bethard ", + "name": "argparse", + "version": "1.2.1", + "licenses": [ + { + "license": { + "name": "Python Software Foundation License" + } + } + ], + "cpe": "cpe:2.3:a:steven_bethard_project:python-argparse:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/argparse@1.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/base-files@8+deb8u5?arch=amd64&distro=debian-8&package-id=e0a9362eb8bed226", + "publisher": "Santiago Vila ", + "name": "base-files", + "version": "8+deb8u5", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:8\\+deb8u5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/base-files@8+deb8u5?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/base-passwd@3.5.37?arch=amd64&distro=debian-8&package-id=dd3169634bd48c60", + "publisher": "Colin Watson ", + "name": "base-passwd", + "version": "3.5.37", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "PD" + } + } + ], + "cpe": "cpe:2.3:a:base-passwd:base-passwd:3.5.37:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/base-passwd@3.5.37?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/bash@4.3-11+b1?arch=amd64&upstream=bash%404.3-11&distro=debian-8&package-id=3f60e286421223f4", + "publisher": "Matthias Klose ", + "name": "bash", + "version": "4.3-11+b1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:bash:bash:4.3-11\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/bash@4.3-11+b1?arch=amd64&upstream=bash%404.3-11&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/binutils@2.25-5?arch=amd64&distro=debian-8&package-id=651da55d8d7fcd1d", + "publisher": "Matthias Klose ", + "name": "binutils", + "version": "2.25-5", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:binutils:binutils:2.25-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/binutils@2.25-5?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/bsdutils@1:2.25.2-6?arch=amd64&upstream=util-linux%402.25.2-6&distro=debian-8&package-id=6c67f49e7e5543ae", + "publisher": "Debian util-linux Maintainers ", + "name": "bsdutils", + "version": "1:2.25.2-6", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:bsdutils:bsdutils:1\\:2.25.2-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/bsdutils@1:2.25.2-6?arch=amd64&upstream=util-linux%402.25.2-6&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/bzr@2.6.0+bzr6595-6?arch=all&distro=debian-8&package-id=705d917a84726696", + "publisher": "Debian Bazaar Maintainers ", + "name": "bzr", + "version": "2.6.0+bzr6595-6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:bzr:bzr:2.6.0\\+bzr6595-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/bzr@2.6.0+bzr6595-6?arch=all&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/bzr@2.7.0dev1?package-id=d84c807e3405bda1", + "author": "Canonical Ltd ", + "name": "bzr", + "version": "2.7.0dev1", + "licenses": [ + { + "license": { + "name": "GNU GPL v2" + } + } + ], + "cpe": "cpe:2.3:a:canonical_ltd_project:python-bzr:2.7.0dev1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/bzr@2.7.0dev1" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ca-certificates@20141019+deb8u1?arch=all&distro=debian-8&package-id=7d375e1cacd0cdf3", + "publisher": "Michael Shuler ", + "name": "ca-certificates", + "version": "20141019+deb8u1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20141019\\+deb8u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ca-certificates@20141019+deb8u1?arch=all&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/configobj@5.0.6?package-id=386eb39d2a9f5cad", + "author": "Rob Dennis, Eli Courtwright (Michael Foord & Nicola Larosa original maintainers) ", + "name": "configobj", + "version": "5.0.6", + "licenses": [ + { + "license": { + "name": "UNKNOWN" + } + } + ], + "cpe": "cpe:2.3:a:rob_dennis\\,_eli_courtwright_\\(michael_foord_\\&_nicola_larosa_original_maintainers\\)_project:python-configobj:5.0.6:*:*:*:*:*:*:*", + "purl": "pkg:pypi/configobj@5.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/coreutils@8.23-4?arch=amd64&distro=debian-8&package-id=8d3d72c1af50a311", + "publisher": "Michael Stone ", + "name": "coreutils", + "version": "8.23-4", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:coreutils:coreutils:8.23-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/coreutils@8.23-4?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/cpp@4:4.9.2-2?arch=amd64&upstream=gcc-defaults%401.136&distro=debian-8&package-id=cefe624c8fd55b6", + "publisher": "Debian GCC Maintainers ", + "name": "cpp", + "version": "4:4.9.2-2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:cpp:cpp:4\\:4.9.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/cpp@4:4.9.2-2?arch=amd64&upstream=gcc-defaults%401.136&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/cpp-4.9@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8&package-id=8c116edc1de3a76e", + "publisher": "Debian GCC Maintainers ", + "name": "cpp-4.9", + "version": "4.9.2-10", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:cpp-4.9:cpp-4.9:4.9.2-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/cpp-4.9@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/curl@7.38.0-4+deb8u4?arch=amd64&distro=debian-8&package-id=39884f55094902ce", + "publisher": "Alessandro Ghedini ", + "name": "curl", + "version": "7.38.0-4+deb8u4", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + } + ], + "cpe": "cpe:2.3:a:curl:curl:7.38.0-4\\+deb8u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/curl@7.38.0-4+deb8u4?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/dash@0.5.7-4+b1?arch=amd64&upstream=dash%400.5.7-4&distro=debian-8&package-id=9ff0e0bb5844af2a", + "publisher": "Gerrit Pape ", + "name": "dash", + "version": "0.5.7-4+b1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:dash:dash:0.5.7-4\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/dash@0.5.7-4+b1?arch=amd64&upstream=dash%400.5.7-4&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/debconf@1.5.56?arch=all&distro=debian-8&package-id=3585338e532b8fe6", + "publisher": "Debconf Developers ", + "name": "debconf", + "version": "1.5.56", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:debconf:debconf:1.5.56:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/debconf@1.5.56?arch=all&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/debconf-i18n@1.5.56?arch=all&upstream=debconf&distro=debian-8&package-id=fe5e34fadb11162", + "publisher": "Debconf Developers ", + "name": "debconf-i18n", + "version": "1.5.56", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:debconf-i18n:debconf-i18n:1.5.56:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/debconf-i18n@1.5.56?arch=all&upstream=debconf&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/debian-archive-keyring@2014.3?arch=all&distro=debian-8&package-id=bb4ac327b23ce735", + "publisher": "Debian Release Team ", + "name": "debian-archive-keyring", + "version": "2014.3", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:debian-archive-keyring:debian-archive-keyring:2014.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/debian-archive-keyring@2014.3?arch=all&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/debianutils@4.4+b1?arch=amd64&upstream=debianutils%404.4&distro=debian-8&package-id=a719b1d74729e3ad", + "publisher": "Clint Adams ", + "name": "debianutils", + "version": "4.4+b1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:debianutils:debianutils:4.4\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/debianutils@4.4+b1?arch=amd64&upstream=debianutils%404.4&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/diffutils@1:3.3-1+b1?arch=amd64&upstream=diffutils%401:3.3-1&distro=debian-8&package-id=2b73dd6dddcdeeed", + "publisher": "Santiago Vila ", + "name": "diffutils", + "version": "1:3.3-1+b1", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:diffutils:diffutils:1\\:3.3-1\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/diffutils@1:3.3-1+b1?arch=amd64&upstream=diffutils%401:3.3-1&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/dmsetup@2:1.02.90-2.2+deb8u1?arch=amd64&upstream=lvm2%402.02.111-2.2+deb8u1&distro=debian-8&package-id=20467f05b72fcf1e", + "publisher": "Debian LVM Team ", + "name": "dmsetup", + "version": "2:1.02.90-2.2+deb8u1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:dmsetup:dmsetup:2\\:1.02.90-2.2\\+deb8u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/dmsetup@2:1.02.90-2.2+deb8u1?arch=amd64&upstream=lvm2%402.02.111-2.2+deb8u1&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/dpkg@1.17.27?arch=amd64&distro=debian-8&package-id=dc03982c39f35b01", + "publisher": "Dpkg Developers ", + "name": "dpkg", + "version": "1.17.27", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:dpkg:dpkg:1.17.27:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/dpkg@1.17.27?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/e2fslibs@1.42.12-1.1?arch=amd64&upstream=e2fsprogs&distro=debian-8&package-id=20fb2569b8ab55d6", + "publisher": "Theodore Y. Ts'o ", + "name": "e2fslibs", + "version": "1.42.12-1.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:e2fslibs:e2fslibs:1.42.12-1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/e2fslibs@1.42.12-1.1?arch=amd64&upstream=e2fsprogs&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/e2fsprogs@1.42.12-1.1?arch=amd64&distro=debian-8&package-id=deca0c6d1db4190e", + "publisher": "Theodore Y. Ts'o ", + "name": "e2fsprogs", + "version": "1.42.12-1.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:e2fsprogs:e2fsprogs:1.42.12-1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/e2fsprogs@1.42.12-1.1?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/findutils@4.4.2-9+b1?arch=amd64&upstream=findutils%404.4.2-9&distro=debian-8&package-id=5e34afa4b431f97", + "publisher": "Andreas Metzler ", + "name": "findutils", + "version": "4.4.2-9+b1", + "licenses": [ + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:findutils:findutils:4.4.2-9\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/findutils@4.4.2-9+b1?arch=amd64&upstream=findutils%404.4.2-9&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/g++@4:4.9.2-2?arch=amd64&upstream=gcc-defaults%401.136&distro=debian-8&package-id=ea0e4cb7aa9bd919", + "publisher": "Debian GCC Maintainers ", + "name": "g++", + "version": "4:4.9.2-2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:g\\+\\+:g\\+\\+:4\\:4.9.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/g++@4:4.9.2-2?arch=amd64&upstream=gcc-defaults%401.136&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/g++-4.9@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8&package-id=852fc8585264b110", + "publisher": "Debian GCC Maintainers ", + "name": "g++-4.9", + "version": "4.9.2-10", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:g\\+\\+-4.9:g\\+\\+-4.9:4.9.2-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/g++-4.9@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gcc@4:4.9.2-2?arch=amd64&upstream=gcc-defaults%401.136&distro=debian-8&package-id=a4b383d94a6da678", + "publisher": "Debian GCC Maintainers ", + "name": "gcc", + "version": "4:4.9.2-2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:gcc:gcc:4\\:4.9.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gcc@4:4.9.2-2?arch=amd64&upstream=gcc-defaults%401.136&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gcc-4.8-base@4.8.4-1?arch=amd64&upstream=gcc-4.8&distro=debian-8&package-id=f2b1db8d41186097", + "publisher": "Debian GCC Maintainers ", + "name": "gcc-4.8-base", + "version": "4.8.4-1", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:gcc-4.8-base:gcc-4.8-base:4.8.4-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gcc-4.8-base@4.8.4-1?arch=amd64&upstream=gcc-4.8&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gcc-4.9@4.9.2-10?arch=amd64&distro=debian-8&package-id=c5183e7665160b81", + "publisher": "Debian GCC Maintainers ", + "name": "gcc-4.9", + "version": "4.9.2-10", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:gcc-4.9:gcc-4.9:4.9.2-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gcc-4.9@4.9.2-10?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gcc-4.9-base@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8&package-id=6a3e9c45975292e8", + "publisher": "Debian GCC Maintainers ", + "name": "gcc-4.9-base", + "version": "4.9.2-10", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:gcc-4.9-base:gcc-4.9-base:4.9.2-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gcc-4.9-base@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/git@1:2.1.4-2.1+deb8u2?arch=amd64&distro=debian-8&package-id=333d6c65f03bf613", + "publisher": "Gerrit Pape ", + "name": "git", + "version": "1:2.1.4-2.1+deb8u2", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "Boost" + } + }, + { + "license": { + "name": "EDL-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "dlmalloc" + } + }, + { + "license": { + "name": "mingw-runtime" + } + } + ], + "cpe": "cpe:2.3:a:git:git:1\\:2.1.4-2.1\\+deb8u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/git@1:2.1.4-2.1+deb8u2?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/git-man@1:2.1.4-2.1+deb8u2?arch=all&upstream=git&distro=debian-8&package-id=1a5d8f9e88723503", + "publisher": "Gerrit Pape ", + "name": "git-man", + "version": "1:2.1.4-2.1+deb8u2", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "Boost" + } + }, + { + "license": { + "name": "EDL-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "dlmalloc" + } + }, + { + "license": { + "name": "mingw-runtime" + } + } + ], + "cpe": "cpe:2.3:a:git-man:git-man:1\\:2.1.4-2.1\\+deb8u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/git-man@1:2.1.4-2.1+deb8u2?arch=all&upstream=git&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gnupg@1.4.18-7+deb8u2?arch=amd64&distro=debian-8&package-id=4e5cbcd00d54f90b", + "publisher": "Debian GnuPG-Maintainers ", + "name": "gnupg", + "version": "1.4.18-7+deb8u2", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + } + ], + "cpe": "cpe:2.3:a:gnupg:gnupg:1.4.18-7\\+deb8u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gnupg@1.4.18-7+deb8u2?arch=amd64&distro=debian-8" + }, + { + "type": "application", + "bom-ref": "pkg:generic/go@1.1?package-id=a04282ab6323a758", + "name": "go", + "version": "1.1", + "cpe": "cpe:2.3:a:golang:go:1.1:*:*:*:*:*:*:*", + "purl": "pkg:generic/go@1.1" + }, + { + "type": "application", + "bom-ref": "pkg:generic/go@1.6.3?package-id=2960c10965dd5680", + "name": "go", + "version": "1.6.3", + "cpe": "cpe:2.3:a:go:go:1.6.3:*:*:*:*:*:*:*", + "purl": "pkg:generic/go@1.6.3" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gpgv@1.4.18-7+deb8u2?arch=amd64&upstream=gnupg&distro=debian-8&package-id=445cbc1d3661275f", + "publisher": "Debian GnuPG-Maintainers ", + "name": "gpgv", + "version": "1.4.18-7+deb8u2", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + } + ], + "cpe": "cpe:2.3:a:gpgv:gpgv:1.4.18-7\\+deb8u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gpgv@1.4.18-7+deb8u2?arch=amd64&upstream=gnupg&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/grep@2.20-4.1?arch=amd64&distro=debian-8&package-id=c0ece23d390de36e", + "publisher": "Anibal Monsalve Salazar ", + "name": "grep", + "version": "2.20-4.1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:grep:grep:2.20-4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/grep@2.20-4.1?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gzip@1.6-4?arch=amd64&distro=debian-8&package-id=13211c8254512f70", + "publisher": "Bdale Garbee ", + "name": "gzip", + "version": "1.6-4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:gzip:gzip:1.6-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gzip@1.6-4?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/hostname@3.15?arch=amd64&distro=debian-8&package-id=2aae92f55fe108f5", + "publisher": "Debian Hostname Team ", + "name": "hostname", + "version": "3.15", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:hostname:hostname:3.15:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/hostname@3.15?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/inetutils-ping@2:1.9.2.39.3a460-3?arch=amd64&upstream=inetutils&distro=debian-8&package-id=e26f03497109ab6e", + "publisher": "Guillem Jover ", + "name": "inetutils-ping", + "version": "2:1.9.2.39.3a460-3", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "name": "GFDL-1.3+" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "Wietse" + } + } + ], + "cpe": "cpe:2.3:a:inetutils-ping:inetutils-ping:2\\:1.9.2.39.3a460-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/inetutils-ping@2:1.9.2.39.3a460-3?arch=amd64&upstream=inetutils&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/init@1.22?arch=amd64&upstream=init-system-helpers&distro=debian-8&package-id=2a612ff33ca16cd6", + "publisher": "pkg-systemd-maintainers ", + "name": "init", + "version": "1.22", + "licenses": [ + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:init:init:1.22:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/init@1.22?arch=amd64&upstream=init-system-helpers&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/initscripts@2.88dsf-59?arch=amd64&upstream=sysvinit&distro=debian-8&package-id=189c5a1949e5b824", + "publisher": "Debian sysvinit maintainers ", + "name": "initscripts", + "version": "2.88dsf-59", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:initscripts:initscripts:2.88dsf-59:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/initscripts@2.88dsf-59?arch=amd64&upstream=sysvinit&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/insserv@1.14.0-5?arch=amd64&distro=debian-8&package-id=44b149076caa5906", + "publisher": "Petter Reinholdtsen ", + "name": "insserv", + "version": "1.14.0-5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:insserv:insserv:1.14.0-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/insserv@1.14.0-5?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/iproute2@3.16.0-2?arch=amd64&distro=debian-8&package-id=6aa9c8c5b9c1096a", + "publisher": "Debian iproute2 Maintainers ", + "name": "iproute2", + "version": "3.16.0-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:iproute2:iproute2:3.16.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/iproute2@3.16.0-2?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libacl1@2.2.52-2?arch=amd64&upstream=acl&distro=debian-8&package-id=151113b6ff79b67c", + "publisher": "Anibal Monsalve Salazar ", + "name": "libacl1", + "version": "2.2.52-2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libacl1:libacl1:2.2.52-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libacl1@2.2.52-2?arch=amd64&upstream=acl&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libapr1@1.5.1-3?arch=amd64&upstream=apr&distro=debian-8&package-id=3450731935ede838", + "publisher": "Debian Apache Maintainers ", + "name": "libapr1", + "version": "1.5.1-3", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libapr1:libapr1:1.5.1-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libapr1@1.5.1-3?arch=amd64&upstream=apr&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libaprutil1@1.5.4-1?arch=amd64&upstream=apr-util&distro=debian-8&package-id=b47ba5154c9f64e7", + "publisher": "Debian Apache Maintainers ", + "name": "libaprutil1", + "version": "1.5.4-1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libaprutil1:libaprutil1:1.5.4-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libaprutil1@1.5.4-1?arch=amd64&upstream=apr-util&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libapt-pkg4.12@1.0.9.8.3?arch=amd64&upstream=apt&distro=debian-8&package-id=75dcaa516f819e23", + "publisher": "APT Development Team ", + "name": "libapt-pkg4.12", + "version": "1.0.9.8.3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libapt-pkg4.12:libapt-pkg4.12:1.0.9.8.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libapt-pkg4.12@1.0.9.8.3?arch=amd64&upstream=apt&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libasan1@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8&package-id=b9e97e61690d7e7d", + "publisher": "Debian GCC Maintainers ", + "name": "libasan1", + "version": "4.9.2-10", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libasan1:libasan1:4.9.2-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libasan1@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libatomic1@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8&package-id=ded90097c0970e8", + "publisher": "Debian GCC Maintainers ", + "name": "libatomic1", + "version": "4.9.2-10", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libatomic1:libatomic1:4.9.2-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libatomic1@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libattr1@1:2.4.47-2?arch=amd64&upstream=attr&distro=debian-8&package-id=6d85d19a4898b7b9", + "publisher": "Anibal Monsalve Salazar ", + "name": "libattr1", + "version": "1:2.4.47-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libattr1:libattr1:1\\:2.4.47-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libattr1@1:2.4.47-2?arch=amd64&upstream=attr&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libaudit-common@1:2.4-1?arch=all&upstream=audit&distro=debian-8&package-id=b0df28c5530499a", + "publisher": "Laurent Bigonville ", + "name": "libaudit-common", + "version": "1:2.4-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit-common:libaudit-common:1\\:2.4-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libaudit-common@1:2.4-1?arch=all&upstream=audit&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libaudit1@1:2.4-1+b1?arch=amd64&upstream=audit%401:2.4-1&distro=debian-8&package-id=5ba9d23c2a3d68b0", + "publisher": "Laurent Bigonville ", + "name": "libaudit1", + "version": "1:2.4-1+b1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit1:libaudit1:1\\:2.4-1\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libaudit1@1:2.4-1+b1?arch=amd64&upstream=audit%401:2.4-1&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libblkid1@2.25.2-6?arch=amd64&upstream=util-linux&distro=debian-8&package-id=a6e199255405add", + "publisher": "Debian util-linux Maintainers ", + "name": "libblkid1", + "version": "2.25.2-6", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libblkid1:libblkid1:2.25.2-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libblkid1@2.25.2-6?arch=amd64&upstream=util-linux&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libbsd0@0.7.0-2?arch=amd64&upstream=libbsd&distro=debian-8&package-id=7336d8fd0523ab2a", + "publisher": "Guillem Jover ", + "name": "libbsd0", + "version": "0.7.0-2", + "cpe": "cpe:2.3:a:libbsd0:libbsd0:0.7.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libbsd0@0.7.0-2?arch=amd64&upstream=libbsd&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libbz2-1.0@1.0.6-7+b3?arch=amd64&upstream=bzip2%401.0.6-7&distro=debian-8&package-id=79a805297b8dfbc1", + "publisher": "Anibal Monsalve Salazar ", + "name": "libbz2-1.0", + "version": "1.0.6-7+b3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libbz2-1.0:libbz2-1.0:1.0.6-7\\+b3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libbz2-1.0@1.0.6-7+b3?arch=amd64&upstream=bzip2%401.0.6-7&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libc-bin@2.19-18+deb8u4?arch=amd64&upstream=glibc&distro=debian-8&package-id=c342c7f98d0fe537", + "publisher": "GNU Libc Maintainers ", + "name": "libc-bin", + "version": "2.19-18+deb8u4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc-bin:libc-bin:2.19-18\\+deb8u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libc-bin@2.19-18+deb8u4?arch=amd64&upstream=glibc&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libc-dev-bin@2.19-18+deb8u4?arch=amd64&upstream=glibc&distro=debian-8&package-id=1cef0112a3af2f47", + "publisher": "GNU Libc Maintainers ", + "name": "libc-dev-bin", + "version": "2.19-18+deb8u4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc-dev-bin:libc-dev-bin:2.19-18\\+deb8u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libc-dev-bin@2.19-18+deb8u4?arch=amd64&upstream=glibc&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libc6@2.19-18+deb8u4?arch=amd64&upstream=glibc&distro=debian-8&package-id=b78cf7813b11d0ec", + "publisher": "GNU Libc Maintainers ", + "name": "libc6", + "version": "2.19-18+deb8u4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc6:libc6:2.19-18\\+deb8u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libc6@2.19-18+deb8u4?arch=amd64&upstream=glibc&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libc6-dev@2.19-18+deb8u4?arch=amd64&upstream=glibc&distro=debian-8&package-id=e583b78f2f49a1c7", + "publisher": "GNU Libc Maintainers ", + "name": "libc6-dev", + "version": "2.19-18+deb8u4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc6-dev:libc6-dev:2.19-18\\+deb8u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libc6-dev@2.19-18+deb8u4?arch=amd64&upstream=glibc&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcap2@1:2.24-8?arch=amd64&distro=debian-8&package-id=fc42a70f968491e1", + "publisher": "Christian Kastner ", + "name": "libcap2", + "version": "1:2.24-8", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libcap2:libcap2:1\\:2.24-8:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcap2@1:2.24-8?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcap2-bin@1:2.24-8?arch=amd64&upstream=libcap2&distro=debian-8&package-id=65497dd9caa3b78e", + "publisher": "Christian Kastner ", + "name": "libcap2-bin", + "version": "1:2.24-8", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libcap2-bin:libcap2-bin:1\\:2.24-8:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcap2-bin@1:2.24-8?arch=amd64&upstream=libcap2&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcilkrts5@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8&package-id=d94742cdaff2a295", + "publisher": "Debian GCC Maintainers ", + "name": "libcilkrts5", + "version": "4.9.2-10", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libcilkrts5:libcilkrts5:4.9.2-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcilkrts5@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcloog-isl4@0.18.2-1+b2?arch=amd64&upstream=cloog%400.18.2-1&distro=debian-8&package-id=d4d0d60fa0494fe2", + "publisher": "Debian GCC Maintainers ", + "name": "libcloog-isl4", + "version": "0.18.2-1+b2", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libcloog-isl4:libcloog-isl4:0.18.2-1\\+b2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcloog-isl4@0.18.2-1+b2?arch=amd64&upstream=cloog%400.18.2-1&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcomerr2@1.42.12-1.1?arch=amd64&upstream=e2fsprogs&distro=debian-8&package-id=fcc8dfa241f7aaf2", + "publisher": "Theodore Y. Ts'o ", + "name": "libcomerr2", + "version": "1.42.12-1.1", + "cpe": "cpe:2.3:a:libcomerr2:libcomerr2:1.42.12-1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcomerr2@1.42.12-1.1?arch=amd64&upstream=e2fsprogs&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcryptsetup4@2:1.6.6-5?arch=amd64&upstream=cryptsetup&distro=debian-8&package-id=3fff2fb61dd67bee", + "publisher": "Debian Cryptsetup Team ", + "name": "libcryptsetup4", + "version": "2:1.6.6-5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libcryptsetup4:libcryptsetup4:2\\:1.6.6-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcryptsetup4@2:1.6.6-5?arch=amd64&upstream=cryptsetup&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcurl3@7.38.0-4+deb8u4?arch=amd64&upstream=curl&distro=debian-8&package-id=2d856dde1550118d", + "publisher": "Alessandro Ghedini ", + "name": "libcurl3", + "version": "7.38.0-4+deb8u4", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + } + ], + "cpe": "cpe:2.3:a:libcurl3:libcurl3:7.38.0-4\\+deb8u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcurl3@7.38.0-4+deb8u4?arch=amd64&upstream=curl&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcurl3-gnutls@7.38.0-4+deb8u4?arch=amd64&upstream=curl&distro=debian-8&package-id=5830c56b98f69bbc", + "publisher": "Alessandro Ghedini ", + "name": "libcurl3-gnutls", + "version": "7.38.0-4+deb8u4", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + } + ], + "cpe": "cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.38.0-4\\+deb8u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcurl3-gnutls@7.38.0-4+deb8u4?arch=amd64&upstream=curl&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libdb5.3@5.3.28-9?arch=amd64&upstream=db5.3&distro=debian-8&package-id=87f0a99a4b60cf98", + "publisher": "Debian Berkeley DB Group ", + "name": "libdb5.3", + "version": "5.3.28-9", + "cpe": "cpe:2.3:a:libdb5.3:libdb5.3:5.3.28-9:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libdb5.3@5.3.28-9?arch=amd64&upstream=db5.3&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libdebconfclient0@0.192?arch=amd64&upstream=cdebconf&distro=debian-8&package-id=dc8cdc3bf8bdf995", + "publisher": "Debian Install System Team ", + "name": "libdebconfclient0", + "version": "0.192", + "cpe": "cpe:2.3:a:libdebconfclient0:libdebconfclient0:0.192:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libdebconfclient0@0.192?arch=amd64&upstream=cdebconf&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libdevmapper1.02.1@2:1.02.90-2.2+deb8u1?arch=amd64&upstream=lvm2%402.02.111-2.2+deb8u1&distro=debian-8&package-id=5cfd9da0daf08b97", + "publisher": "Debian LVM Team ", + "name": "libdevmapper1.02.1", + "version": "2:1.02.90-2.2+deb8u1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libdevmapper1.02.1:libdevmapper1.02.1:2\\:1.02.90-2.2\\+deb8u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libdevmapper1.02.1@2:1.02.90-2.2+deb8u1?arch=amd64&upstream=lvm2%402.02.111-2.2+deb8u1&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libedit2@3.1-20140620-2?arch=amd64&upstream=libedit&distro=debian-8&package-id=ec95c60ef6f2bfe7", + "publisher": "LLVM Packaging Team ", + "name": "libedit2", + "version": "3.1-20140620-2", + "cpe": "cpe:2.3:a:libedit2:libedit2:3.1-20140620-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libedit2@3.1-20140620-2?arch=amd64&upstream=libedit&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/liberror-perl@0.17-1.1?arch=all&distro=debian-8&package-id=7541cebea355f402", + "publisher": "Clint Burfoot ", + "name": "liberror-perl", + "version": "0.17-1.1", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:liberror-perl:liberror-perl:0.17-1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/liberror-perl@0.17-1.1?arch=all&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libexpat1@2.1.0-6+deb8u3?arch=amd64&upstream=expat&distro=debian-8&package-id=16315cb8a9b66a30", + "publisher": "Laszlo Boszormenyi (GCS) ", + "name": "libexpat1", + "version": "2.1.0-6+deb8u3", + "cpe": "cpe:2.3:a:libexpat1:libexpat1:2.1.0-6\\+deb8u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libexpat1@2.1.0-6+deb8u3?arch=amd64&upstream=expat&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libffi6@3.1-2+b2?arch=amd64&upstream=libffi%403.1-2&distro=debian-8&package-id=d18c45810d011fb1", + "publisher": "Debian GCC Maintainers ", + "name": "libffi6", + "version": "3.1-2+b2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libffi6:libffi6:3.1-2\\+b2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libffi6@3.1-2+b2?arch=amd64&upstream=libffi%403.1-2&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgcc-4.9-dev@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8&package-id=14e425189ebdf185", + "publisher": "Debian GCC Maintainers ", + "name": "libgcc-4.9-dev", + "version": "4.9.2-10", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgcc-4.9-dev:libgcc-4.9-dev:4.9.2-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgcc-4.9-dev@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgcc1@1:4.9.2-10?arch=amd64&upstream=gcc-4.9%404.9.2-10&distro=debian-8&package-id=5b91df6be89e7540", + "publisher": "Debian GCC Maintainers ", + "name": "libgcc1", + "version": "1:4.9.2-10", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgcc1:libgcc1:1\\:4.9.2-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgcc1@1:4.9.2-10?arch=amd64&upstream=gcc-4.9%404.9.2-10&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgcrypt20@1.6.3-2+deb8u2?arch=amd64&distro=debian-8&package-id=c913d2b222b607d5", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libgcrypt20", + "version": "1.6.3-2+deb8u2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcrypt20:libgcrypt20:1.6.3-2\\+deb8u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgcrypt20@1.6.3-2+deb8u2?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgdbm3@1.8.3-13.1?arch=amd64&upstream=gdbm&distro=debian-8&package-id=7fd2e05a98901459", + "publisher": "Anibal Monsalve Salazar ", + "name": "libgdbm3", + "version": "1.8.3-13.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgdbm3:libgdbm3:1.8.3-13.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgdbm3@1.8.3-13.1?arch=amd64&upstream=gdbm&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgmp10@2:6.0.0+dfsg-6?arch=amd64&upstream=gmp&distro=debian-8&package-id=853cf93a34632342", + "publisher": "Debian Science Team ", + "name": "libgmp10", + "version": "2:6.0.0+dfsg-6", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgmp10:libgmp10:2\\:6.0.0\\+dfsg-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgmp10@2:6.0.0+dfsg-6?arch=amd64&upstream=gmp&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgnutls-deb0-28@3.3.8-6+deb8u3?arch=amd64&upstream=gnutls28&distro=debian-8&package-id=71062ffec863d768", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libgnutls-deb0-28", + "version": "3.3.8-6+deb8u3", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPLv3+" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "The" + } + }, + { + "license": { + "name": "nonstandard," + } + } + ], + "cpe": "cpe:2.3:a:libgnutls-deb0-28:libgnutls-deb0-28:3.3.8-6\\+deb8u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgnutls-deb0-28@3.3.8-6+deb8u3?arch=amd64&upstream=gnutls28&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgomp1@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8&package-id=98b2222a4c75fa19", + "publisher": "Debian GCC Maintainers ", + "name": "libgomp1", + "version": "4.9.2-10", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgomp1:libgomp1:4.9.2-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgomp1@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgpg-error0@1.17-3?arch=amd64&upstream=libgpg-error&distro=debian-8&package-id=b4dc0e02e5febc6f", + "publisher": "Debian GnuPG Maintainers ", + "name": "libgpg-error0", + "version": "1.17-3", + "licenses": [ + { + "license": { + "name": "GPL-2.1+" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libgpg-error0:libgpg-error0:1.17-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgpg-error0@1.17-3?arch=amd64&upstream=libgpg-error&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgssapi-krb5-2@1.12.1+dfsg-19+deb8u2?arch=amd64&upstream=krb5&distro=debian-8&package-id=c76f60e0ef2704c0", + "publisher": "Sam Hartman ", + "name": "libgssapi-krb5-2", + "version": "1.12.1+dfsg-19+deb8u2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.12.1\\+dfsg-19\\+deb8u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgssapi-krb5-2@1.12.1+dfsg-19+deb8u2?arch=amd64&upstream=krb5&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libhogweed2@2.7.1-5+deb8u1?arch=amd64&upstream=nettle&distro=debian-8&package-id=7303473c76c98e1e", + "publisher": "Magnus Holmgren ", + "name": "libhogweed2", + "version": "2.7.1-5+deb8u1", + "licenses": [ + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libhogweed2:libhogweed2:2.7.1-5\\+deb8u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libhogweed2@2.7.1-5+deb8u1?arch=amd64&upstream=nettle&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libicu52@52.1-8+deb8u3?arch=amd64&upstream=icu&distro=debian-8&package-id=d3b93304b211cea2", + "publisher": "Laszlo Boszormenyi (GCS) ", + "name": "libicu52", + "version": "52.1-8+deb8u3", + "cpe": "cpe:2.3:a:libicu52:libicu52:52.1-8\\+deb8u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libicu52@52.1-8+deb8u3?arch=amd64&upstream=icu&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libidn11@1.29-1+deb8u1?arch=amd64&upstream=libidn&distro=debian-8&package-id=d7f65a8658225518", + "publisher": "Debian Libidn Team ", + "name": "libidn11", + "version": "1.29-1+deb8u1", + "licenses": [ + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "name": "GFDL-1.3+" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libidn11:libidn11:1.29-1\\+deb8u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libidn11@1.29-1+deb8u1?arch=amd64&upstream=libidn&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libisl10@0.12.2-2?arch=amd64&upstream=isl&distro=debian-8&package-id=9f04fbb23dc3ada5", + "publisher": "Debian GCC Maintainers ", + "name": "libisl10", + "version": "0.12.2-2", + "licenses": [ + { + "license": { + "name": "2-clause" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libisl10:libisl10:0.12.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libisl10@0.12.2-2?arch=amd64&upstream=isl&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libitm1@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8&package-id=81b865bab1a506ae", + "publisher": "Debian GCC Maintainers ", + "name": "libitm1", + "version": "4.9.2-10", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libitm1:libitm1:4.9.2-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libitm1@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libjs-excanvas@0.r3-3?arch=all&upstream=explorercanvas&distro=debian-8&package-id=1854497afd74e669", + "publisher": "Debian Javascript Maintainers ", + "name": "libjs-excanvas", + "version": "0.r3-3", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libjs-excanvas:libjs-excanvas:0.r3-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libjs-excanvas@0.r3-3?arch=all&upstream=explorercanvas&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libk5crypto3@1.12.1+dfsg-19+deb8u2?arch=amd64&upstream=krb5&distro=debian-8&package-id=72f52458e62339be", + "publisher": "Sam Hartman ", + "name": "libk5crypto3", + "version": "1.12.1+dfsg-19+deb8u2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libk5crypto3:libk5crypto3:1.12.1\\+dfsg-19\\+deb8u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libk5crypto3@1.12.1+dfsg-19+deb8u2?arch=amd64&upstream=krb5&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libkeyutils1@1.5.9-5+b1?arch=amd64&upstream=keyutils%401.5.9-5&distro=debian-8&package-id=f8db0c9260dbb4cc", + "publisher": "Christian Kastner ", + "name": "libkeyutils1", + "version": "1.5.9-5+b1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libkeyutils1:libkeyutils1:1.5.9-5\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libkeyutils1@1.5.9-5+b1?arch=amd64&upstream=keyutils%401.5.9-5&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libkmod2@18-3?arch=amd64&upstream=kmod&distro=debian-8&package-id=6a918f744f3dead5", + "publisher": "Marco d'Itri ", + "name": "libkmod2", + "version": "18-3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkmod2:libkmod2:18-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libkmod2@18-3?arch=amd64&upstream=kmod&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libkrb5-3@1.12.1+dfsg-19+deb8u2?arch=amd64&upstream=krb5&distro=debian-8&package-id=2a2e79411d2ee43d", + "publisher": "Sam Hartman ", + "name": "libkrb5-3", + "version": "1.12.1+dfsg-19+deb8u2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5-3:libkrb5-3:1.12.1\\+dfsg-19\\+deb8u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libkrb5-3@1.12.1+dfsg-19+deb8u2?arch=amd64&upstream=krb5&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libkrb5support0@1.12.1+dfsg-19+deb8u2?arch=amd64&upstream=krb5&distro=debian-8&package-id=bd3a9ae360e367f7", + "publisher": "Sam Hartman ", + "name": "libkrb5support0", + "version": "1.12.1+dfsg-19+deb8u2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5support0:libkrb5support0:1.12.1\\+dfsg-19\\+deb8u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libkrb5support0@1.12.1+dfsg-19+deb8u2?arch=amd64&upstream=krb5&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libldap-2.4-2@2.4.40+dfsg-1+deb8u2?arch=amd64&upstream=openldap&distro=debian-8&package-id=f88be8f8c005d39d", + "publisher": "Debian OpenLDAP Maintainers ", + "name": "libldap-2.4-2", + "version": "2.4.40+dfsg-1+deb8u2", + "cpe": "cpe:2.3:a:libldap-2.4-2:libldap-2.4-2:2.4.40\\+dfsg-1\\+deb8u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libldap-2.4-2@2.4.40+dfsg-1+deb8u2?arch=amd64&upstream=openldap&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/liblocale-gettext-perl@1.05-8+b1?arch=amd64&upstream=liblocale-gettext-perl%401.05-8&distro=debian-8&package-id=4ce555c27b8046dc", + "publisher": "Debian Perl Group ", + "name": "liblocale-gettext-perl", + "version": "1.05-8+b1", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:liblocale-gettext-perl:liblocale-gettext-perl:1.05-8\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/liblocale-gettext-perl@1.05-8+b1?arch=amd64&upstream=liblocale-gettext-perl%401.05-8&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/liblsan0@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8&package-id=7a8e04a0a1d56307", + "publisher": "Debian GCC Maintainers ", + "name": "liblsan0", + "version": "4.9.2-10", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:liblsan0:liblsan0:4.9.2-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/liblsan0@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/liblzma5@5.1.1alpha+20120614-2+b3?arch=amd64&upstream=xz-utils%405.1.1alpha+20120614-2&distro=debian-8&package-id=7d02df5b0c5025c5", + "publisher": "Jonathan Nieder ", + "name": "liblzma5", + "version": "5.1.1alpha+20120614-2+b3", + "licenses": [ + { + "license": { + "name": "Autoconf" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "PD" + } + }, + { + "license": { + "name": "PD-debian" + } + }, + { + "license": { + "name": "config-h" + } + }, + { + "license": { + "name": "noderivs" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-nowarranty" + } + }, + { + "license": { + "name": "probably-PD" + } + } + ], + "cpe": "cpe:2.3:a:liblzma5:liblzma5:5.1.1alpha\\+20120614-2\\+b3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/liblzma5@5.1.1alpha+20120614-2+b3?arch=amd64&upstream=xz-utils%405.1.1alpha+20120614-2&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libmount1@2.25.2-6?arch=amd64&upstream=util-linux&distro=debian-8&package-id=986739dc167f2421", + "publisher": "Debian util-linux Maintainers ", + "name": "libmount1", + "version": "2.25.2-6", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmount1:libmount1:2.25.2-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libmount1@2.25.2-6?arch=amd64&upstream=util-linux&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libmpc3@1.0.2-1?arch=amd64&upstream=mpclib3&distro=debian-8&package-id=575fe53adb300e06", + "publisher": "Laurent Fousse ", + "name": "libmpc3", + "version": "1.0.2-1", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libmpc3:libmpc3:1.0.2-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libmpc3@1.0.2-1?arch=amd64&upstream=mpclib3&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libmpfr4@3.1.2-2?arch=amd64&upstream=mpfr4&distro=debian-8&package-id=fa704f648700157f", + "publisher": "Debian QA Group ", + "name": "libmpfr4", + "version": "3.1.2-2", + "licenses": [ + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libmpfr4:libmpfr4:3.1.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libmpfr4@3.1.2-2?arch=amd64&upstream=mpfr4&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libncurses5@5.9+20140913-1+b1?arch=amd64&upstream=ncurses%405.9+20140913-1&distro=debian-8&package-id=f45ee8d9abeef235", + "publisher": "Craig Small ", + "name": "libncurses5", + "version": "5.9+20140913-1+b1", + "cpe": "cpe:2.3:a:libncurses5:libncurses5:5.9\\+20140913-1\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libncurses5@5.9+20140913-1+b1?arch=amd64&upstream=ncurses%405.9+20140913-1&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libncursesw5@5.9+20140913-1+b1?arch=amd64&upstream=ncurses%405.9+20140913-1&distro=debian-8&package-id=6d9efa5c2292b5f2", + "publisher": "Craig Small ", + "name": "libncursesw5", + "version": "5.9+20140913-1+b1", + "cpe": "cpe:2.3:a:libncursesw5:libncursesw5:5.9\\+20140913-1\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libncursesw5@5.9+20140913-1+b1?arch=amd64&upstream=ncurses%405.9+20140913-1&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libnettle4@2.7.1-5+deb8u1?arch=amd64&upstream=nettle&distro=debian-8&package-id=7a916d943ead6789", + "publisher": "Magnus Holmgren ", + "name": "libnettle4", + "version": "2.7.1-5+deb8u1", + "licenses": [ + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libnettle4:libnettle4:2.7.1-5\\+deb8u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libnettle4@2.7.1-5+deb8u1?arch=amd64&upstream=nettle&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libp11-kit0@0.20.7-1?arch=amd64&upstream=p11-kit&distro=debian-8&package-id=33ec5cb01a8eacdf", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libp11-kit0", + "version": "0.20.7-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:libp11-kit0:libp11-kit0:0.20.7-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libp11-kit0@0.20.7-1?arch=amd64&upstream=p11-kit&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam-modules@1.1.8-3.1+deb8u1+b1?arch=amd64&upstream=pam%401.1.8-3.1+deb8u1&distro=debian-8&package-id=b2984a1b0fb2d6f0", + "publisher": "Steve Langasek ", + "name": "libpam-modules", + "version": "1.1.8-3.1+deb8u1+b1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules:libpam-modules:1.1.8-3.1\\+deb8u1\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam-modules@1.1.8-3.1+deb8u1+b1?arch=amd64&upstream=pam%401.1.8-3.1+deb8u1&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam-modules-bin@1.1.8-3.1+deb8u1+b1?arch=amd64&upstream=pam%401.1.8-3.1+deb8u1&distro=debian-8&package-id=96aa873332f50408", + "publisher": "Steve Langasek ", + "name": "libpam-modules-bin", + "version": "1.1.8-3.1+deb8u1+b1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules-bin:libpam-modules-bin:1.1.8-3.1\\+deb8u1\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam-modules-bin@1.1.8-3.1+deb8u1+b1?arch=amd64&upstream=pam%401.1.8-3.1+deb8u1&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam-runtime@1.1.8-3.1+deb8u1?arch=all&upstream=pam&distro=debian-8&package-id=bc9df2b43fb96d84", + "publisher": "Steve Langasek ", + "name": "libpam-runtime", + "version": "1.1.8-3.1+deb8u1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-runtime:libpam-runtime:1.1.8-3.1\\+deb8u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam-runtime@1.1.8-3.1+deb8u1?arch=all&upstream=pam&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam0g@1.1.8-3.1+deb8u1+b1?arch=amd64&upstream=pam%401.1.8-3.1+deb8u1&distro=debian-8&package-id=dc90e32795f9bd0f", + "publisher": "Steve Langasek ", + "name": "libpam0g", + "version": "1.1.8-3.1+deb8u1+b1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam0g:libpam0g:1.1.8-3.1\\+deb8u1\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam0g@1.1.8-3.1+deb8u1+b1?arch=amd64&upstream=pam%401.1.8-3.1+deb8u1&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpcre3@2:8.35-3.3+deb8u4?arch=amd64&upstream=pcre3&distro=debian-8&package-id=229a1fd4bc24dac8", + "publisher": "Mark Baker ", + "name": "libpcre3", + "version": "2:8.35-3.3+deb8u4", + "cpe": "cpe:2.3:a:libpcre3:libpcre3:2\\:8.35-3.3\\+deb8u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpcre3@2:8.35-3.3+deb8u4?arch=amd64&upstream=pcre3&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libprocps3@2:3.3.9-9?arch=amd64&upstream=procps&distro=debian-8&package-id=64628c42729369d7", + "publisher": "Craig Small ", + "name": "libprocps3", + "version": "2:3.3.9-9", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libprocps3:libprocps3:2\\:3.3.9-9:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libprocps3@2:3.3.9-9?arch=amd64&upstream=procps&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpsl0@0.5.1-1?arch=amd64&upstream=libpsl&distro=debian-8&package-id=eab044b7226186e6", + "publisher": "Tim Rühsen ", + "name": "libpsl0", + "version": "0.5.1-1", + "licenses": [ + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libpsl0:libpsl0:0.5.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpsl0@0.5.1-1?arch=amd64&upstream=libpsl&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpython-stdlib@2.7.9-1?arch=amd64&upstream=python-defaults&distro=debian-8&package-id=c2fa87f45ec3753b", + "publisher": "Matthias Klose ", + "name": "libpython-stdlib", + "version": "2.7.9-1", + "cpe": "cpe:2.3:a:libpython-stdlib:libpython-stdlib:2.7.9-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpython-stdlib@2.7.9-1?arch=amd64&upstream=python-defaults&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpython2.7-minimal@2.7.9-2?arch=amd64&upstream=python2.7&distro=debian-8&package-id=63259999336ff6a4", + "publisher": "Matthias Klose ", + "name": "libpython2.7-minimal", + "version": "2.7.9-2", + "licenses": [ + { + "license": { + "name": "#" + } + }, + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:libpython2.7-minimal:libpython2.7-minimal:2.7.9-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpython2.7-minimal@2.7.9-2?arch=amd64&upstream=python2.7&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpython2.7-stdlib@2.7.9-2?arch=amd64&upstream=python2.7&distro=debian-8&package-id=eaf3ad8b8de0da62", + "publisher": "Matthias Klose ", + "name": "libpython2.7-stdlib", + "version": "2.7.9-2", + "licenses": [ + { + "license": { + "name": "#" + } + }, + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:libpython2.7-stdlib:libpython2.7-stdlib:2.7.9-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpython2.7-stdlib@2.7.9-2?arch=amd64&upstream=python2.7&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libquadmath0@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8&package-id=bda2085e3d427d3a", + "publisher": "Debian GCC Maintainers ", + "name": "libquadmath0", + "version": "4.9.2-10", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libquadmath0:libquadmath0:4.9.2-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libquadmath0@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libreadline6@6.3-8+b3?arch=amd64&upstream=readline6%406.3-8&distro=debian-8&package-id=fe33e859854bfe7a", + "publisher": "Matthias Klose ", + "name": "libreadline6", + "version": "6.3-8+b3", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libreadline6:libreadline6:6.3-8\\+b3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libreadline6@6.3-8+b3?arch=amd64&upstream=readline6%406.3-8&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/librtmp1@2.4+20150115.gita107cef-1?arch=amd64&upstream=rtmpdump&distro=debian-8&package-id=58f9a6c3be9cdc18", + "publisher": "Debian Multimedia Maintainers ", + "name": "librtmp1", + "version": "2.4+20150115.gita107cef-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:librtmp1:librtmp1:2.4\\+20150115.gita107cef-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/librtmp1@2.4+20150115.gita107cef-1?arch=amd64&upstream=rtmpdump&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsasl2-2@2.1.26.dfsg1-13+deb8u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-8&package-id=e4601aa0707e435", + "publisher": "Debian Cyrus SASL Team ", + "name": "libsasl2-2", + "version": "2.1.26.dfsg1-13+deb8u1", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-2:libsasl2-2:2.1.26.dfsg1-13\\+deb8u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsasl2-2@2.1.26.dfsg1-13+deb8u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsasl2-modules-db@2.1.26.dfsg1-13+deb8u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-8&package-id=a6169bf3b7454f69", + "publisher": "Debian Cyrus SASL Team ", + "name": "libsasl2-modules-db", + "version": "2.1.26.dfsg1-13+deb8u1", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-modules-db:libsasl2-modules-db:2.1.26.dfsg1-13\\+deb8u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsasl2-modules-db@2.1.26.dfsg1-13+deb8u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libselinux1@2.3-2?arch=amd64&upstream=libselinux&distro=debian-8&package-id=c5ff2746e8d2666c", + "publisher": "Debian SELinux maintainers ", + "name": "libselinux1", + "version": "2.3-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libselinux1:libselinux1:2.3-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libselinux1@2.3-2?arch=amd64&upstream=libselinux&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsemanage-common@2.3-1?arch=all&upstream=libsemanage&distro=debian-8&package-id=58717965385c5d79", + "publisher": "Debian SELinux maintainers ", + "name": "libsemanage-common", + "version": "2.3-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage-common:libsemanage-common:2.3-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsemanage-common@2.3-1?arch=all&upstream=libsemanage&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsemanage1@2.3-1+b1?arch=amd64&upstream=libsemanage%402.3-1&distro=debian-8&package-id=ad4578dab5387f60", + "publisher": "Debian SELinux maintainers ", + "name": "libsemanage1", + "version": "2.3-1+b1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage1:libsemanage1:2.3-1\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsemanage1@2.3-1+b1?arch=amd64&upstream=libsemanage%402.3-1&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsepol1@2.3-2?arch=amd64&upstream=libsepol&distro=debian-8&package-id=9de354dab38a4dea", + "publisher": "Debian SELinux maintainers ", + "name": "libsepol1", + "version": "2.3-2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsepol1:libsepol1:2.3-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsepol1@2.3-2?arch=amd64&upstream=libsepol&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libserf-1-1@1.3.8-1?arch=amd64&upstream=serf&distro=debian-8&package-id=cd47cad2fb07c74f", + "publisher": "Peter Samuelson ", + "name": "libserf-1-1", + "version": "1.3.8-1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libserf-1-1:libserf-1-1:1.3.8-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libserf-1-1@1.3.8-1?arch=amd64&upstream=serf&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libslang2@2.3.0-2?arch=amd64&upstream=slang2&distro=debian-8&package-id=91a5f72737b46c64", + "publisher": "Alastair McKinstry ", + "name": "libslang2", + "version": "2.3.0-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libslang2:libslang2:2.3.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libslang2@2.3.0-2?arch=amd64&upstream=slang2&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsmartcols1@2.25.2-6?arch=amd64&upstream=util-linux&distro=debian-8&package-id=50cd8428df9b647", + "publisher": "Debian util-linux Maintainers ", + "name": "libsmartcols1", + "version": "2.25.2-6", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsmartcols1:libsmartcols1:2.25.2-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsmartcols1@2.25.2-6?arch=amd64&upstream=util-linux&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsqlite3-0@3.8.7.1-1+deb8u1?arch=amd64&upstream=sqlite3&distro=debian-8&package-id=426949d7b03061e7", + "publisher": "Laszlo Boszormenyi (GCS) ", + "name": "libsqlite3-0", + "version": "3.8.7.1-1+deb8u1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.8.7.1-1\\+deb8u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsqlite3-0@3.8.7.1-1+deb8u1?arch=amd64&upstream=sqlite3&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libss2@1.42.12-1.1?arch=amd64&upstream=e2fsprogs&distro=debian-8&package-id=f48234c45b702890", + "publisher": "Theodore Y. Ts'o ", + "name": "libss2", + "version": "1.42.12-1.1", + "cpe": "cpe:2.3:a:libss2:libss2:1.42.12-1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libss2@1.42.12-1.1?arch=amd64&upstream=e2fsprogs&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libssh2-1@1.4.3-4.1+deb8u1?arch=amd64&upstream=libssh2&distro=debian-8&package-id=52eb587c773af190", + "publisher": "Mikhail Gusarov ", + "name": "libssh2-1", + "version": "1.4.3-4.1+deb8u1", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:libssh2-1:libssh2-1:1.4.3-4.1\\+deb8u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libssh2-1@1.4.3-4.1+deb8u1?arch=amd64&upstream=libssh2&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libssl1.0.0@1.0.1t-1+deb8u2?arch=amd64&upstream=openssl&distro=debian-8&package-id=3d4112e19ef721", + "publisher": "Debian OpenSSL Team ", + "name": "libssl1.0.0", + "version": "1.0.1t-1+deb8u2", + "cpe": "cpe:2.3:a:libssl1.0.0:libssl1.0.0:1.0.1t-1\\+deb8u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libssl1.0.0@1.0.1t-1+deb8u2?arch=amd64&upstream=openssl&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libstdc++-4.9-dev@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8&package-id=6c70c212dbe75c63", + "publisher": "Debian GCC Maintainers ", + "name": "libstdc++-4.9-dev", + "version": "4.9.2-10", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+-4.9-dev:libstdc\\+\\+-4.9-dev:4.9.2-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libstdc++-4.9-dev@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libstdc++6@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8&package-id=701cdbd42b16cea2", + "publisher": "Debian GCC Maintainers ", + "name": "libstdc++6", + "version": "4.9.2-10", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:4.9.2-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libstdc++6@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsvn1@1.8.10-6+deb8u4?arch=amd64&upstream=subversion&distro=debian-8&package-id=4447612b2c72ed8f", + "publisher": "Peter Samuelson ", + "name": "libsvn1", + "version": "1.8.10-6+deb8u4", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libsvn1:libsvn1:1.8.10-6\\+deb8u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsvn1@1.8.10-6+deb8u4?arch=amd64&upstream=subversion&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsystemd0@215-17+deb8u4?arch=amd64&upstream=systemd&distro=debian-8&package-id=99fcceb489fc5fe8", + "publisher": "Debian systemd Maintainers ", + "name": "libsystemd0", + "version": "215-17+deb8u4", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsystemd0:libsystemd0:215-17\\+deb8u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsystemd0@215-17+deb8u4?arch=amd64&upstream=systemd&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtasn1-6@4.2-3+deb8u2?arch=amd64&distro=debian-8&package-id=25b6c1b732baffaf", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libtasn1-6", + "version": "4.2-3+deb8u2", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtasn1-6:libtasn1-6:4.2-3\\+deb8u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtasn1-6@4.2-3+deb8u2?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtext-charwidth-perl@0.04-7+b3?arch=amd64&upstream=libtext-charwidth-perl%400.04-7&distro=debian-8&package-id=fdb69c382f9e7a54", + "publisher": "Anibal Monsalve Salazar ", + "name": "libtext-charwidth-perl", + "version": "0.04-7+b3", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libtext-charwidth-perl:libtext-charwidth-perl:0.04-7\\+b3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtext-charwidth-perl@0.04-7+b3?arch=amd64&upstream=libtext-charwidth-perl%400.04-7&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtext-iconv-perl@1.7-5+b2?arch=amd64&upstream=libtext-iconv-perl%401.7-5&distro=debian-8&package-id=4154fce9e480403f", + "publisher": "Anibal Monsalve Salazar ", + "name": "libtext-iconv-perl", + "version": "1.7-5+b2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libtext-iconv-perl:libtext-iconv-perl:1.7-5\\+b2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtext-iconv-perl@1.7-5+b2?arch=amd64&upstream=libtext-iconv-perl%401.7-5&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtext-wrapi18n-perl@0.06-7?arch=all&distro=debian-8&package-id=6104c6da88e81ba1", + "publisher": "Anibal Monsalve Salazar ", + "name": "libtext-wrapi18n-perl", + "version": "0.06-7", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libtext-wrapi18n-perl:libtext-wrapi18n-perl:0.06-7:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtext-wrapi18n-perl@0.06-7?arch=all&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtinfo5@5.9+20140913-1+b1?arch=amd64&upstream=ncurses%405.9+20140913-1&distro=debian-8&package-id=e3f56eb9495cb665", + "publisher": "Craig Small ", + "name": "libtinfo5", + "version": "5.9+20140913-1+b1", + "cpe": "cpe:2.3:a:libtinfo5:libtinfo5:5.9\\+20140913-1\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtinfo5@5.9+20140913-1+b1?arch=amd64&upstream=ncurses%405.9+20140913-1&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtsan0@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8&package-id=c46945564e9f752a", + "publisher": "Debian GCC Maintainers ", + "name": "libtsan0", + "version": "4.9.2-10", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libtsan0:libtsan0:4.9.2-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtsan0@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libubsan0@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8&package-id=d183ee793203cd7c", + "publisher": "Debian GCC Maintainers ", + "name": "libubsan0", + "version": "4.9.2-10", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libubsan0:libubsan0:4.9.2-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libubsan0@4.9.2-10?arch=amd64&upstream=gcc-4.9&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libudev1@215-17+deb8u4?arch=amd64&upstream=systemd&distro=debian-8&package-id=ec7cafeeb6a458f0", + "publisher": "Debian systemd Maintainers ", + "name": "libudev1", + "version": "215-17+deb8u4", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libudev1:libudev1:215-17\\+deb8u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libudev1@215-17+deb8u4?arch=amd64&upstream=systemd&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libusb-0.1-4@2:0.1.12-25?arch=amd64&upstream=libusb&distro=debian-8&package-id=2d4f1b96214e01b8", + "publisher": "Aurelien Jarno ", + "name": "libusb-0.1-4", + "version": "2:0.1.12-25", + "licenses": [ + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libusb-0.1-4:libusb-0.1-4:2\\:0.1.12-25:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libusb-0.1-4@2:0.1.12-25?arch=amd64&upstream=libusb&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libustr-1.0-1@1.0.4-3+b2?arch=amd64&upstream=ustr%401.0.4-3&distro=debian-8&package-id=1be9e21258a2e01b", + "publisher": "Vaclav Ovsik ", + "name": "libustr-1.0-1", + "version": "1.0.4-3+b2", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libustr-1.0-1:libustr-1.0-1:1.0.4-3\\+b2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libustr-1.0-1@1.0.4-3+b2?arch=amd64&upstream=ustr%401.0.4-3&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libuuid1@2.25.2-6?arch=amd64&upstream=util-linux&distro=debian-8&package-id=df1e79bc6151d233", + "publisher": "Debian util-linux Maintainers ", + "name": "libuuid1", + "version": "2.25.2-6", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libuuid1:libuuid1:2.25.2-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libuuid1@2.25.2-6?arch=amd64&upstream=util-linux&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/linux-libc-dev@3.16.7-ckt25-2+deb8u3?arch=amd64&upstream=linux&distro=debian-8&package-id=a974e6dadad28a4b", + "publisher": "Debian Kernel Team ", + "name": "linux-libc-dev", + "version": "3.16.7-ckt25-2+deb8u3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Unicode-data" + } + }, + { + "license": { + "name": "Xen-interface" + } + } + ], + "cpe": "cpe:2.3:a:linux-libc-dev:linux-libc-dev:3.16.7-ckt25-2\\+deb8u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/linux-libc-dev@3.16.7-ckt25-2+deb8u3?arch=amd64&upstream=linux&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/login@1:4.2-3+deb8u1?arch=amd64&upstream=shadow&distro=debian-8&package-id=4600df482277da2e", + "publisher": "Shadow package maintainers ", + "name": "login", + "version": "1:4.2-3+deb8u1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:login:login:1\\:4.2-3\\+deb8u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/login@1:4.2-3+deb8u1?arch=amd64&upstream=shadow&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/lsb-base@4.1+debian13+nmu1?arch=all&upstream=lsb&distro=debian-8&package-id=241b727bebb6a760", + "publisher": "Debian LSB Team ", + "name": "lsb-base", + "version": "4.1+Debian13+nmu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:lsb-base:lsb-base:4.1\\+Debian13\\+nmu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/lsb-base@4.1+Debian13+nmu1?arch=all&upstream=lsb&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/make@4.0-8.1?arch=amd64&upstream=make-dfsg&distro=debian-8&package-id=71c71e8424cb92fc", + "publisher": "Manoj Srivastava ", + "name": "make", + "version": "4.0-8.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:make:make:4.0-8.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/make@4.0-8.1?arch=amd64&upstream=make-dfsg&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/mawk@1.3.3-17?arch=amd64&distro=debian-8&package-id=c2721be686a78626", + "publisher": "Steve Langasek ", + "name": "mawk", + "version": "1.3.3-17", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:mawk:mawk:1.3.3-17:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/mawk@1.3.3-17?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/mercurial@3.1.2?package-id=6aa361de15a9c358", + "author": "Matt Mackall and many others ", + "name": "mercurial", + "version": "3.1.2", + "licenses": [ + { + "license": { + "name": "GNU GPLv2 or any later version" + } + } + ], + "cpe": "cpe:2.3:a:matt_mackall_and_many_others_project:python-mercurial:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:pypi/mercurial@3.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/mercurial@3.1.2-2+deb8u3?arch=amd64&distro=debian-8&package-id=f4aec0aab1947084", + "publisher": "Python Applications Packaging Team ", + "name": "mercurial", + "version": "3.1.2-2+deb8u3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:mercurial:mercurial:3.1.2-2\\+deb8u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/mercurial@3.1.2-2+deb8u3?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/mercurial-common@3.1.2-2+deb8u3?arch=all&upstream=mercurial&distro=debian-8&package-id=dfdf59375b6b5854", + "publisher": "Python Applications Packaging Team ", + "name": "mercurial-common", + "version": "3.1.2-2+deb8u3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:mercurial-common:mercurial-common:3.1.2-2\\+deb8u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/mercurial-common@3.1.2-2+deb8u3?arch=all&upstream=mercurial&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/mime-support@3.58?arch=all&distro=debian-8&package-id=9a4964b288ea4812", + "publisher": "Mime-Support Maintainers ", + "name": "mime-support", + "version": "3.58", + "licenses": [ + { + "license": { + "name": "Bellcore" + } + }, + { + "license": { + "name": "ad-hoc" + } + } + ], + "cpe": "cpe:2.3:a:mime-support:mime-support:3.58:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/mime-support@3.58?arch=all&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/mount@2.25.2-6?arch=amd64&upstream=util-linux&distro=debian-8&package-id=90fb7a2721a16b1a", + "publisher": "Debian util-linux Maintainers ", + "name": "mount", + "version": "2.25.2-6", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:mount:mount:2.25.2-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/mount@2.25.2-6?arch=amd64&upstream=util-linux&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/multiarch-support@2.19-18+deb8u4?arch=amd64&upstream=glibc&distro=debian-8&package-id=35e909ad2a628488", + "publisher": "GNU Libc Maintainers ", + "name": "multiarch-support", + "version": "2.19-18+deb8u4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:multiarch-support:multiarch-support:2.19-18\\+deb8u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/multiarch-support@2.19-18+deb8u4?arch=amd64&upstream=glibc&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ncurses-base@5.9+20140913-1?arch=all&upstream=ncurses&distro=debian-8&package-id=ca3ead6e6c0d8dda", + "publisher": "Craig Small ", + "name": "ncurses-base", + "version": "5.9+20140913-1", + "cpe": "cpe:2.3:a:ncurses-base:ncurses-base:5.9\\+20140913-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ncurses-base@5.9+20140913-1?arch=all&upstream=ncurses&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ncurses-bin@5.9+20140913-1+b1?arch=amd64&upstream=ncurses%405.9+20140913-1&distro=debian-8&package-id=b257abf8b8f25ac", + "publisher": "Craig Small ", + "name": "ncurses-bin", + "version": "5.9+20140913-1+b1", + "cpe": "cpe:2.3:a:ncurses-bin:ncurses-bin:5.9\\+20140913-1\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ncurses-bin@5.9+20140913-1+b1?arch=amd64&upstream=ncurses%405.9+20140913-1&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/netbase@5.3?arch=all&distro=debian-8&package-id=d416f257c9c83dd9", + "publisher": "Marco d'Itri ", + "name": "netbase", + "version": "5.3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:netbase:netbase:5.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/netbase@5.3?arch=all&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/openssh-client@1:6.7p1-5+deb8u3?arch=amd64&upstream=openssh&distro=debian-8&package-id=fa63e9c57a753a3b", + "publisher": "Debian OpenSSH Maintainers ", + "name": "openssh-client", + "version": "1:6.7p1-5+deb8u3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:openssh-client:openssh-client:1\\:6.7p1-5\\+deb8u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/openssh-client@1:6.7p1-5+deb8u3?arch=amd64&upstream=openssh&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/openssl@1.0.1t-1+deb8u2?arch=amd64&distro=debian-8&package-id=3bc03d7d02a497ca", + "publisher": "Debian OpenSSL Team ", + "name": "openssl", + "version": "1.0.1t-1+deb8u2", + "cpe": "cpe:2.3:a:openssl:openssl:1.0.1t-1\\+deb8u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/openssl@1.0.1t-1+deb8u2?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/passwd@1:4.2-3+deb8u1?arch=amd64&upstream=shadow&distro=debian-8&package-id=e718c0918f745ac3", + "publisher": "Shadow package maintainers ", + "name": "passwd", + "version": "1:4.2-3+deb8u1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:passwd:passwd:1\\:4.2-3\\+deb8u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/passwd@1:4.2-3+deb8u1?arch=amd64&upstream=shadow&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/perl@5.20.2-3+deb8u6?arch=amd64&distro=debian-8&package-id=b90d6f6315dc8769", + "publisher": "Niko Tyni ", + "name": "perl", + "version": "5.20.2-3+deb8u6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "S2P" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl:perl:5.20.2-3\\+deb8u6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/perl@5.20.2-3+deb8u6?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/perl-base@5.20.2-3+deb8u6?arch=amd64&upstream=perl&distro=debian-8&package-id=a5eb6351cb8b522d", + "publisher": "Niko Tyni ", + "name": "perl-base", + "version": "5.20.2-3+deb8u6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "S2P" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl-base:perl-base:5.20.2-3\\+deb8u6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/perl-base@5.20.2-3+deb8u6?arch=amd64&upstream=perl&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/perl-modules@5.20.2-3+deb8u6?arch=all&upstream=perl&distro=debian-8&package-id=3142b7bb4be49e2d", + "publisher": "Niko Tyni ", + "name": "perl-modules", + "version": "5.20.2-3+deb8u6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "S2P" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl-modules:perl-modules:5.20.2-3\\+deb8u6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/perl-modules@5.20.2-3+deb8u6?arch=all&upstream=perl&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/procps@2:3.3.9-9?arch=amd64&distro=debian-8&package-id=ab14cd9549bd432", + "publisher": "Craig Small ", + "name": "procps", + "version": "2:3.3.9-9", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:procps:procps:2\\:3.3.9-9:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/procps@2:3.3.9-9?arch=amd64&distro=debian-8" + }, + { + "type": "application", + "bom-ref": "pkg:generic/python@2.7.9?package-id=eacc125eb01aeb12", + "name": "python", + "version": "2.7.9", + "cpe": "cpe:2.3:a:python_software_foundation:python:2.7.9:*:*:*:*:*:*:*", + "purl": "pkg:generic/python@2.7.9" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/python@2.7.9-1?arch=amd64&upstream=python-defaults&distro=debian-8&package-id=104d7baa8784e0c0", + "publisher": "Matthias Klose ", + "name": "python", + "version": "2.7.9-1", + "cpe": "cpe:2.3:a:python:python:2.7.9-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/python@2.7.9-1?arch=amd64&upstream=python-defaults&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/python-bzrlib@2.6.0+bzr6595-6?arch=amd64&upstream=bzr&distro=debian-8&package-id=cd10fc3ff4355444", + "publisher": "Debian Bazaar Maintainers ", + "name": "python-bzrlib", + "version": "2.6.0+bzr6595-6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:python-bzrlib:python-bzrlib:2.6.0\\+bzr6595-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/python-bzrlib@2.6.0+bzr6595-6?arch=amd64&upstream=bzr&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/python-configobj@5.0.6-1?arch=all&upstream=configobj&distro=debian-8&package-id=e736a08144a4ffec", + "publisher": "Debian Python Modules Team ", + "name": "python-configobj", + "version": "5.0.6-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:python-configobj:python-configobj:5.0.6-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/python-configobj@5.0.6-1?arch=all&upstream=configobj&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/python-minimal@2.7.9-1?arch=amd64&upstream=python-defaults&distro=debian-8&package-id=d7505d4d03d180", + "publisher": "Matthias Klose ", + "name": "python-minimal", + "version": "2.7.9-1", + "cpe": "cpe:2.3:a:python-minimal:python-minimal:2.7.9-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/python-minimal@2.7.9-1?arch=amd64&upstream=python-defaults&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/python-six@1.8.0-1?arch=all&upstream=six&distro=debian-8&package-id=e0eafbcdb93fdbb2", + "publisher": "Colin Watson ", + "name": "python-six", + "version": "1.8.0-1", + "licenses": [ + { + "license": { + "name": "Expat" + } + } + ], + "cpe": "cpe:2.3:a:python-six:python-six:1.8.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/python-six@1.8.0-1?arch=all&upstream=six&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/python2.7@2.7.9-2?arch=amd64&distro=debian-8&package-id=b0ac297c1ad8ebf7", + "publisher": "Matthias Klose ", + "name": "python2.7", + "version": "2.7.9-2", + "licenses": [ + { + "license": { + "name": "#" + } + }, + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:python2.7:python2.7:2.7.9-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/python2.7@2.7.9-2?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/python2.7-minimal@2.7.9-2?arch=amd64&upstream=python2.7&distro=debian-8&package-id=6d9cb4f7d630d3d1", + "publisher": "Matthias Klose ", + "name": "python2.7-minimal", + "version": "2.7.9-2", + "licenses": [ + { + "license": { + "name": "#" + } + }, + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:python2.7-minimal:python2.7-minimal:2.7.9-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/python2.7-minimal@2.7.9-2?arch=amd64&upstream=python2.7&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/readline-common@6.3-8?arch=all&upstream=readline6&distro=debian-8&package-id=47429794eb15a36d", + "publisher": "Matthias Klose ", + "name": "readline-common", + "version": "6.3-8", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:readline-common:readline-common:6.3-8:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/readline-common@6.3-8?arch=all&upstream=readline6&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/sed@4.2.2-4+b1?arch=amd64&upstream=sed%404.2.2-4&distro=debian-8&package-id=fdf4b97bde0d134", + "publisher": "Clint Adams ", + "name": "sed", + "version": "4.2.2-4+b1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:sed:sed:4.2.2-4\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/sed@4.2.2-4+b1?arch=amd64&upstream=sed%404.2.2-4&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/sensible-utils@0.0.9?arch=all&distro=debian-8&package-id=ea4a26855bf17184", + "publisher": "Anibal Monsalve Salazar ", + "name": "sensible-utils", + "version": "0.0.9", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:sensible-utils:sensible-utils:0.0.9:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/sensible-utils@0.0.9?arch=all&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/six@1.8.0?package-id=1bcfd52c076d128", + "author": "Benjamin Peterson ", + "name": "six", + "version": "1.8.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:benjamin_peterson_project:python-six:1.8.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/six@1.8.0" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/startpar@0.59-3?arch=amd64&distro=debian-8&package-id=a05410db1cb93dee", + "publisher": "Debian sysvinit maintainers ", + "name": "startpar", + "version": "0.59-3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:startpar:startpar:0.59-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/startpar@0.59-3?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/subversion@1.8.10-6+deb8u4?arch=amd64&distro=debian-8&package-id=87fe9dbc637b8af0", + "publisher": "Peter Samuelson ", + "name": "subversion", + "version": "1.8.10-6+deb8u4", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:subversion:subversion:1.8.10-6\\+deb8u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/subversion@1.8.10-6+deb8u4?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/systemd@215-17+deb8u4?arch=amd64&distro=debian-8&package-id=ff4720b988e68b2f", + "publisher": "Debian systemd Maintainers ", + "name": "systemd", + "version": "215-17+deb8u4", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:systemd:systemd:215-17\\+deb8u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/systemd@215-17+deb8u4?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/systemd-sysv@215-17+deb8u4?arch=amd64&upstream=systemd&distro=debian-8&package-id=74efa300267dd053", + "publisher": "Debian systemd Maintainers ", + "name": "systemd-sysv", + "version": "215-17+deb8u4", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:systemd-sysv:systemd-sysv:215-17\\+deb8u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/systemd-sysv@215-17+deb8u4?arch=amd64&upstream=systemd&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/sysv-rc@2.88dsf-59?arch=all&upstream=sysvinit&distro=debian-8&package-id=3d069fbd35864526", + "publisher": "Debian sysvinit maintainers ", + "name": "sysv-rc", + "version": "2.88dsf-59", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:sysv-rc:sysv-rc:2.88dsf-59:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/sysv-rc@2.88dsf-59?arch=all&upstream=sysvinit&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/sysvinit-utils@2.88dsf-59?arch=amd64&upstream=sysvinit&distro=debian-8&package-id=9f9ce336cd7efc01", + "publisher": "Debian sysvinit maintainers ", + "name": "sysvinit-utils", + "version": "2.88dsf-59", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:sysvinit-utils:sysvinit-utils:2.88dsf-59:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/sysvinit-utils@2.88dsf-59?arch=amd64&upstream=sysvinit&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tar@1.27.1-2+b1?arch=amd64&upstream=tar%401.27.1-2&distro=debian-8&package-id=ead08fd3b3be7347", + "publisher": "Bdale Garbee ", + "name": "tar", + "version": "1.27.1-2+b1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:tar:tar:1.27.1-2\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tar@1.27.1-2+b1?arch=amd64&upstream=tar%401.27.1-2&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tzdata@2016f-0+deb8u1?arch=all&distro=debian-8&package-id=4beb92da24e5a9f6", + "publisher": "GNU Libc Maintainers ", + "name": "tzdata", + "version": "2016f-0+deb8u1", + "cpe": "cpe:2.3:a:tzdata:tzdata:2016f-0\\+deb8u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tzdata@2016f-0+deb8u1?arch=all&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ucf@3.0030?arch=all&distro=debian-8&package-id=c5577b6da214fa0b", + "publisher": "Manoj Srivastava ", + "name": "ucf", + "version": "3.0030", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ucf:ucf:3.0030:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ucf@3.0030?arch=all&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/udev@215-17+deb8u4?arch=amd64&upstream=systemd&distro=debian-8&package-id=e19b271aa5145f84", + "publisher": "Debian systemd Maintainers ", + "name": "udev", + "version": "215-17+deb8u4", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:udev:udev:215-17\\+deb8u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/udev@215-17+deb8u4?arch=amd64&upstream=systemd&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/util-linux@2.25.2-6?arch=amd64&distro=debian-8&package-id=560f81b9efb68e08", + "publisher": "Debian util-linux Maintainers ", + "name": "util-linux", + "version": "2.25.2-6", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:util-linux:util-linux:2.25.2-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/util-linux@2.25.2-6?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/wget@1.16-1?arch=amd64&distro=debian-8&package-id=3857718b6e73ebdb", + "publisher": "Noël Köthe ", + "name": "wget", + "version": "1.16-1", + "licenses": [ + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:wget:wget:1.16-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/wget@1.16-1?arch=amd64&distro=debian-8" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/wsgiref@0.1.2?package-id=f76569cabcd31278", + "author": "Phillip J. Eby ", + "name": "wsgiref", + "version": "0.1.2", + "licenses": [ + { + "license": { + "name": "PSF or ZPL" + } + } + ], + "cpe": "cpe:2.3:a:phillip_j__eby_project:python-wsgiref:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:pypi/wsgiref@0.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/zlib1g@1:1.2.8.dfsg-2+b1?arch=amd64&upstream=zlib%401:1.2.8.dfsg-2&distro=debian-8&package-id=6eb818573a94ca31", + "publisher": "Mark Brown ", + "name": "zlib1g", + "version": "1:1.2.8.dfsg-2+b1", + "cpe": "cpe:2.3:a:zlib1g:zlib1g:1\\:1.2.8.dfsg-2\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/zlib1g@1:1.2.8.dfsg-2+b1?arch=amd64&upstream=zlib%401:1.2.8.dfsg-2&distro=debian-8" + }, + { + "type": "operating-system", + "name": "debian", + "version": "8", + "description": "Debian GNU/Linux 8 (jessie)", + "swid": { + "tagId": "debian", + "name": "debian", + "version": "8" + }, + "externalReferences": [ + { + "url": "https://bugs.debian.org/", + "type": "issue-tracker" + }, + { + "url": "http://www.debian.org/", + "type": "website" + }, + { + "url": "http://www.debian.org/support", + "comment": "support", + "type": "other" + } + ] + }, + { + "type": "application", + "bom-ref": "pkg:generic/traefik@1.7.19?package-id=f7a4c93610e4abfd", + "name": "traefik", + "version": "1.7.19", + "cpe": "cpe:2.3:a:traefik:traefik:1.7.19:*:*:*:*:*:*:*", + "purl": "pkg:generic/traefik@1.7.19" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/adduser@3.118ubuntu2?arch=all&distro=ubuntu-20.04&package-id=69d1980477020fa3", + "publisher": "Ubuntu Core Developers ", + "name": "adduser", + "version": "3.118ubuntu2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:adduser:adduser:3.118ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/adduser@3.118ubuntu2?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/apt@2.0.6?arch=amd64&distro=ubuntu-20.04&package-id=55988ea1c6f336e3", + "publisher": "Ubuntu Developers ", + "name": "apt", + "version": "2.0.6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:apt:apt:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/apt@2.0.6?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/base-files@11ubuntu5.4?arch=amd64&distro=ubuntu-20.04&package-id=63c89c28c512e1db", + "publisher": "Ubuntu Developers ", + "name": "base-files", + "version": "11ubuntu5.4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:11ubuntu5.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/base-files@11ubuntu5.4?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/base-passwd@3.5.47?arch=amd64&distro=ubuntu-20.04&package-id=8b6e494dac6dab09", + "publisher": "Colin Watson ", + "name": "base-passwd", + "version": "3.5.47", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "PD" + } + } + ], + "cpe": "cpe:2.3:a:base-passwd:base-passwd:3.5.47:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/base-passwd@3.5.47?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/bash@5.0-6ubuntu1.1?arch=amd64&distro=ubuntu-20.04&package-id=e774a3e87113196b", + "publisher": "Ubuntu Developers ", + "name": "bash", + "version": "5.0-6ubuntu1.1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:bash:bash:5.0-6ubuntu1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/bash@5.0-6ubuntu1.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/bsdutils@1:2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux%402.34-0.1ubuntu9.1&distro=ubuntu-20.04&package-id=20018d8de777eda9", + "publisher": "Ubuntu Developers ", + "name": "bsdutils", + "version": "1:2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:bsdutils:bsdutils:1\\:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/bsdutils@1:2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux%402.34-0.1ubuntu9.1&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/bzip2@1.0.8-2?arch=amd64&distro=ubuntu-20.04&package-id=97dab883cac4c956", + "publisher": "Ubuntu Developers ", + "name": "bzip2", + "version": "1.0.8-2", + "licenses": [ + { + "license": { + "name": "BSD-variant" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:bzip2:bzip2:1.0.8-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/bzip2@1.0.8-2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ca-certificates@20210119~20.04.2?arch=all&distro=ubuntu-20.04&package-id=283e5b8702c92c66", + "publisher": "Ubuntu Developers ", + "name": "ca-certificates", + "version": "20210119~20.04.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20210119\\~20.04.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ca-certificates@20210119~20.04.2?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/coreutils@8.30-3ubuntu2?arch=amd64&distro=ubuntu-20.04&package-id=f77283ee51e117fa", + "publisher": "Ubuntu Developers ", + "name": "coreutils", + "version": "8.30-3ubuntu2", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:coreutils:coreutils:8.30-3ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/coreutils@8.30-3ubuntu2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/curl@7.68.0-1ubuntu2.7?arch=amd64&distro=ubuntu-20.04&package-id=4413836d2c32d64c", + "publisher": "Ubuntu Developers ", + "name": "curl", + "version": "7.68.0-1ubuntu2.7", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:curl:curl:7.68.0-1ubuntu2.7:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/curl@7.68.0-1ubuntu2.7?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/dash@0.5.10.2-6?arch=amd64&distro=ubuntu-20.04&package-id=fa0f613df8411b7", + "publisher": "Ubuntu Developers ", + "name": "dash", + "version": "0.5.10.2-6", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:dash:dash:0.5.10.2-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/dash@0.5.10.2-6?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/debconf@1.5.73?arch=all&distro=ubuntu-20.04&package-id=128eb6066f5ec19c", + "publisher": "Ubuntu Developers ", + "name": "debconf", + "version": "1.5.73", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:debconf:debconf:1.5.73:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/debconf@1.5.73?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/debianutils@4.9.1?arch=amd64&distro=ubuntu-20.04&package-id=328b1094024bda26", + "publisher": "Ubuntu Developers ", + "name": "debianutils", + "version": "4.9.1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:debianutils:debianutils:4.9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/debianutils@4.9.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/diffutils@1:3.7-3?arch=amd64&distro=ubuntu-20.04&package-id=d21aefcaf9c9c9b6", + "publisher": "Ubuntu Developers ", + "name": "diffutils", + "version": "1:3.7-3", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:diffutils:diffutils:1\\:3.7-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/diffutils@1:3.7-3?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/dmsetup@2:1.02.167-1ubuntu1?arch=amd64&upstream=lvm2%402.03.07-1ubuntu1&distro=ubuntu-20.04&package-id=c0d6316be2747294", + "publisher": "Ubuntu Developers ", + "name": "dmsetup", + "version": "2:1.02.167-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:dmsetup:dmsetup:2\\:1.02.167-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/dmsetup@2:1.02.167-1ubuntu1?arch=amd64&upstream=lvm2%402.03.07-1ubuntu1&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/dpkg@1.19.7ubuntu3?arch=amd64&distro=ubuntu-20.04&package-id=e28aea5c134a7f8", + "publisher": "Ubuntu Developers ", + "name": "dpkg", + "version": "1.19.7ubuntu3", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain-md5" + } + }, + { + "license": { + "name": "public-domain-s-s-d" + } + } + ], + "cpe": "cpe:2.3:a:dpkg:dpkg:1.19.7ubuntu3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/dpkg@1.19.7ubuntu3?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/e2fsprogs@1.45.5-2ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=6a037357f3ebf47a", + "publisher": "Ubuntu Developers ", + "name": "e2fsprogs", + "version": "1.45.5-2ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:e2fsprogs:e2fsprogs:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/e2fsprogs@1.45.5-2ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/fdisk@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=a57a5f37c7970fe9", + "publisher": "Ubuntu Developers ", + "name": "fdisk", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:fdisk:fdisk:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/fdisk@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/file@1:5.38-4?arch=amd64&distro=ubuntu-20.04&package-id=e7f183ce6dc05cfb", + "publisher": "Ubuntu Developers ", + "name": "file", + "version": "1:5.38-4", + "licenses": [ + { + "license": { + "name": "BSD-2-Clause-alike" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-Clause-regents" + } + }, + { + "license": { + "name": "MIT-Old-Style-with-legal-disclaimer-2" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:file:file:1\\:5.38-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/file@1:5.38-4?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/findutils@4.7.0-1ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=103a5999463b7e08", + "publisher": "Ubuntu Developers ", + "name": "findutils", + "version": "4.7.0-1ubuntu1", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:findutils:findutils:4.7.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/findutils@4.7.0-1ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/fuse@2.9.9-3?arch=amd64&distro=ubuntu-20.04&package-id=3862cd07205c94e", + "publisher": "Ubuntu Developers ", + "name": "fuse", + "version": "2.9.9-3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:fuse:fuse:2.9.9-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/fuse@2.9.9-3?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/gcc-10-base@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04&package-id=a268d6ad2986f239", + "publisher": "Ubuntu Core developers ", + "name": "gcc-10-base", + "version": "10.3.0-1ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:gcc-10-base:gcc-10-base:10.3.0-1ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/gcc-10-base@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/roaringbitmap/roaring@v0.4.18?package-id=44cacb1f0d828fa", + "name": "github.com/RoaringBitmap/roaring", + "version": "v0.4.18", + "cpe": "cpe:2.3:a:RoaringBitmap:roaring:v0.4.18:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/RoaringBitmap/roaring@v0.4.18" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0-20190314233015-f79a8a8ca69d?package-id=3545da61f1ea79a", + "name": "github.com/cpuguy83/go-md2man/v2", + "version": "v2.0.0-20190314233015-f79a8a8ca69d", + "cpe": "cpe:2.3:a:cpuguy83:go-md2man\\/v2:v2.0.0-20190314233015-f79a8a8ca69d:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0-20190314233015-f79a8a8ca69d" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/glycerine/go-unsnap-stream@v0.0.0-20181221182339-f9677308dec2?package-id=f23e657163a53a94", + "name": "github.com/glycerine/go-unsnap-stream", + "version": "v0.0.0-20181221182339-f9677308dec2", + "cpe": "cpe:2.3:a:glycerine:go-unsnap-stream:v0.0.0-20181221182339-f9677308dec2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/glycerine/go-unsnap-stream@v0.0.0-20181221182339-f9677308dec2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.3.2?package-id=6429a79a5d94117", + "name": "github.com/golang/protobuf", + "version": "v1.3.2", + "cpe": "cpe:2.3:a:golang:protobuf:v1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.3.3-0.20190920234318-1680a479a2cf?package-id=467cdc3789c0b2e5", + "name": "github.com/golang/protobuf", + "version": "v1.3.3-0.20190920234318-1680a479a2cf", + "cpe": "cpe:2.3:a:golang:protobuf:v1.3.3-0.20190920234318-1680a479a2cf:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.3.3-0.20190920234318-1680a479a2cf" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/snappy@v0.0.1?package-id=3188e4faab0b9d08", + "name": "github.com/golang/snappy", + "version": "v0.0.1", + "cpe": "cpe:2.3:a:golang:snappy:v0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/snappy@v0.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/grpc-ecosystem/grpc-health-probe@(devel)?package-id=2ee2eb8d871be1ce", + "name": "github.com/grpc-ecosystem/grpc-health-probe", + "version": "(devel)", + "cpe": "cpe:2.3:a:grpc-ecosystem:grpc-health-probe:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/grpc-ecosystem/grpc-health-probe@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/longhorn/longhorn-instance-manager@(devel)?package-id=7b07b64098f99595", + "name": "github.com/longhorn/longhorn-instance-manager", + "version": "(devel)", + "cpe": "cpe:2.3:a:longhorn:longhorn-instance-manager:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/longhorn/longhorn-instance-manager@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/philhofer/fwd@v1.0.0?package-id=2daec666e43b2a6a", + "name": "github.com/philhofer/fwd", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:philhofer:fwd:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/philhofer/fwd@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/pkg/errors@v0.8.1?package-id=f02e8db37ed0f28a", + "name": "github.com/pkg/errors", + "version": "v0.8.1", + "cpe": "cpe:2.3:a:pkg:errors:v0.8.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pkg/errors@v0.8.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/russross/blackfriday/v2@v2.0.1?package-id=a10a414d879a9d37", + "name": "github.com/russross/blackfriday/v2", + "version": "v2.0.1", + "cpe": "cpe:2.3:a:russross:blackfriday\\/v2:v2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/russross/blackfriday/v2@v2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/satori/go.uuid@v1.2.0?package-id=43e046b56b6b8b37", + "name": "github.com/satori/go.uuid", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:satori:go.uuid:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/satori/go.uuid@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/shurcool/sanitized_anchor_name@v1.0.0?package-id=8541ac88e9e0eedb", + "name": "github.com/shurcooL/sanitized_anchor_name", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:shurcooL:sanitized-anchor-name:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/shurcooL/sanitized_anchor_name@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.4.1?package-id=e2e40d17eb9cf8d4", + "name": "github.com/sirupsen/logrus", + "version": "v1.4.1", + "cpe": "cpe:2.3:a:sirupsen:logrus:v1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/sirupsen/logrus@v1.4.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/tinylib/msgp@v1.1.1-0.20190612170807-0573788bc2a8?package-id=3fc3be951cc4f58", + "name": "github.com/tinylib/msgp", + "version": "v1.1.1-0.20190612170807-0573788bc2a8", + "cpe": "cpe:2.3:a:tinylib:msgp:v1.1.1-0.20190612170807-0573788bc2a8:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/tinylib/msgp@v1.1.1-0.20190612170807-0573788bc2a8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/urfave/cli@v1.22.1?package-id=677bdee48c80c60c", + "name": "github.com/urfave/cli", + "version": "v1.22.1", + "cpe": "cpe:2.3:a:urfave:cli:v1.22.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/urfave/cli@v1.22.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/net@v0.0.0-20190522155817-f3200d17e092?package-id=4f1a3cddc7e49204", + "name": "golang.org/x/net", + "version": "v0.0.0-20190522155817-f3200d17e092", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.0.0-20190522155817-f3200d17e092:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.0.0-20190522155817-f3200d17e092" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/net@v0.0.0-20191021144547-ec77196f6094?package-id=dba26920fcd941ca", + "name": "golang.org/x/net", + "version": "v0.0.0-20191021144547-ec77196f6094", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.0.0-20191021144547-ec77196f6094:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.0.0-20191021144547-ec77196f6094" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20190524152521-dbbf3f1254d4?package-id=e80099fcdef38a3b", + "name": "golang.org/x/sys", + "version": "v0.0.0-20190524152521-dbbf3f1254d4", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20190524152521-dbbf3f1254d4:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20190524152521-dbbf3f1254d4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20191020212454-3e7259c5e7c2?package-id=11cab605143eb4a2", + "name": "golang.org/x/sys", + "version": "v0.0.0-20191020212454-3e7259c5e7c2", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20191020212454-3e7259c5e7c2:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20191020212454-3e7259c5e7c2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/text@v0.3.2?package-id=79c19ce62be197dd", + "name": "golang.org/x/text", + "version": "v0.3.2", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.3.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/text@v0.3.2?package-id=aed9d4e68940468c", + "name": "golang.org/x/text", + "version": "v0.3.2", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.3.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20180817151627-c66870c02cf8?package-id=7a2668b50b5c5c45", + "name": "google.golang.org/genproto", + "version": "v0.0.0-20180817151627-c66870c02cf8", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20180817151627-c66870c02cf8:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20180817151627-c66870c02cf8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20191009194640-548a555dbc03?package-id=9631f02c5c120cff", + "name": "google.golang.org/genproto", + "version": "v0.0.0-20191009194640-548a555dbc03", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20191009194640-548a555dbc03:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20191009194640-548a555dbc03" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.21.0?package-id=2849f9d807035751", + "name": "google.golang.org/grpc", + "version": "v1.21.0", + "cpe": "cpe:2.3:a:google:grpc:v1.21.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.21.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.24.0?package-id=54401e81e1c7ca15", + "name": "google.golang.org/grpc", + "version": "v1.24.0", + "cpe": "cpe:2.3:a:google:grpc:v1.24.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.24.0" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/gpgv@2.2.19-3ubuntu2.1?arch=amd64&upstream=gnupg2&distro=ubuntu-20.04&package-id=b3a56223224b45d2", + "publisher": "Ubuntu Developers ", + "name": "gpgv", + "version": "2.2.19-3ubuntu2.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + }, + { + "license": { + "name": "TinySCHEME" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:gpgv:gpgv:2.2.19-3ubuntu2.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/gpgv@2.2.19-3ubuntu2.1?arch=amd64&upstream=gnupg2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/grep@3.4-1?arch=amd64&distro=ubuntu-20.04&package-id=e7af9af4b90473f", + "publisher": "Ubuntu Developers ", + "name": "grep", + "version": "3.4-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:grep:grep:3.4-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/grep@3.4-1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/gzip@1.10-0ubuntu4?arch=amd64&distro=ubuntu-20.04&package-id=a9696917d3b9f9fc", + "publisher": "Ubuntu Developers ", + "name": "gzip", + "version": "1.10-0ubuntu4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:gzip:gzip:1.10-0ubuntu4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/gzip@1.10-0ubuntu4?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/hostname@3.23?arch=amd64&distro=ubuntu-20.04&package-id=263dae70cc8e6a4f", + "publisher": "Ubuntu Developers ", + "name": "hostname", + "version": "3.23", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:hostname:hostname:3.23:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/hostname@3.23?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ibverbs-providers@28.0-1ubuntu1?arch=amd64&upstream=rdma-core&distro=ubuntu-20.04&package-id=8e9d2de3c937ce3c", + "publisher": "Ubuntu Developers ", + "name": "ibverbs-providers", + "version": "28.0-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-MIT" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "id": "CPL-1.0" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ibverbs-providers:ibverbs-providers:28.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ibverbs-providers@28.0-1ubuntu1?arch=amd64&upstream=rdma-core&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/init-system-helpers@1.57?arch=all&distro=ubuntu-20.04&package-id=b0e335d96f12154d", + "publisher": "Ubuntu Developers ", + "name": "init-system-helpers", + "version": "1.57", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:init-system-helpers:init-system-helpers:1.57:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/init-system-helpers@1.57?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/iperf@2.0.13+dfsg1-1build1?arch=amd64&distro=ubuntu-20.04&package-id=52f5841ee19da566", + "publisher": "Ubuntu Developers ", + "name": "iperf", + "version": "2.0.13+dfsg1-1build1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "FSF-something" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-2-WithACException" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPL-3-WithACException" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:iperf:iperf:2.0.13\\+dfsg1-1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/iperf@2.0.13+dfsg1-1build1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/iproute2@5.5.0-1ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=f4afda4dc550367c", + "publisher": "Ubuntu Developers ", + "name": "iproute2", + "version": "5.5.0-1ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:iproute2:iproute2:5.5.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/iproute2@5.5.0-1ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/iputils-ping@3:20190709-3?arch=amd64&upstream=iputils&distro=ubuntu-20.04&package-id=83f284daebd0969f", + "publisher": "Ubuntu Developers ", + "name": "iputils-ping", + "version": "3:20190709-3", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:iputils-ping:iputils-ping:3\\:20190709-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/iputils-ping@3:20190709-3?arch=amd64&upstream=iputils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/keyutils@1.6-6ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=a61b8b47cf58815b", + "publisher": "Ubuntu Developers ", + "name": "keyutils", + "version": "1.6-6ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:keyutils:keyutils:1.6-6ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/keyutils@1.6-6ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/kmod@27-1ubuntu2?arch=amd64&distro=ubuntu-20.04&package-id=e1280bc47493e972", + "publisher": "Ubuntu Developers ", + "name": "kmod", + "version": "27-1ubuntu2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:kmod:kmod:27-1ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/kmod@27-1ubuntu2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/krb5-locales@1.17-6ubuntu4.1?arch=all&upstream=krb5&distro=ubuntu-20.04&package-id=87ea48972fb4adab", + "publisher": "Ubuntu Developers ", + "name": "krb5-locales", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:krb5-locales:krb5-locales:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/krb5-locales@1.17-6ubuntu4.1?arch=all&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libacl1@2.2.53-6?arch=amd64&upstream=acl&distro=ubuntu-20.04&package-id=5cec2c2009596050", + "publisher": "Ubuntu Developers ", + "name": "libacl1", + "version": "2.2.53-6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libacl1:libacl1:2.2.53-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libacl1@2.2.53-6?arch=amd64&upstream=acl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libaio1@0.3.112-5?arch=amd64&upstream=libaio&distro=ubuntu-20.04&package-id=f850a0a77c824c95", + "publisher": "Ubuntu Developers ", + "name": "libaio1", + "version": "0.3.112-5", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libaio1:libaio1:0.3.112-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libaio1@0.3.112-5?arch=amd64&upstream=libaio&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libapt-pkg6.0@2.0.6?arch=amd64&upstream=apt&distro=ubuntu-20.04&package-id=864e143f4c606a6c", + "publisher": "Ubuntu Developers ", + "name": "libapt-pkg6.0", + "version": "2.0.6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libapt-pkg6.0:libapt-pkg6.0:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libapt-pkg6.0@2.0.6?arch=amd64&upstream=apt&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libasn1-8-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=915f8cf154d1b7ce", + "publisher": "Ubuntu Developers ", + "name": "libasn1-8-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libasn1-8-heimdal:libasn1-8-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libasn1-8-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libatm1@1:2.5.1-4?arch=amd64&upstream=linux-atm&distro=ubuntu-20.04&package-id=38fbc3dda7412f50", + "publisher": "Ubuntu Developers ", + "name": "libatm1", + "version": "1:2.5.1-4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libatm1:libatm1:1\\:2.5.1-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libatm1@1:2.5.1-4?arch=amd64&upstream=linux-atm&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libattr1@1:2.4.48-5?arch=amd64&upstream=attr&distro=ubuntu-20.04&package-id=edf8dd62bd537bd5", + "publisher": "Ubuntu Developers ", + "name": "libattr1", + "version": "1:2.4.48-5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libattr1:libattr1:1\\:2.4.48-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libattr1@1:2.4.48-5?arch=amd64&upstream=attr&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libaudit-common@1:2.8.5-2ubuntu6?arch=all&upstream=audit&distro=ubuntu-20.04&package-id=4a463ab850d7c68c", + "publisher": "Ubuntu Developers ", + "name": "libaudit-common", + "version": "1:2.8.5-2ubuntu6", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit-common:libaudit-common:1\\:2.8.5-2ubuntu6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libaudit-common@1:2.8.5-2ubuntu6?arch=all&upstream=audit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libaudit1@1:2.8.5-2ubuntu6?arch=amd64&upstream=audit&distro=ubuntu-20.04&package-id=be9537deb8db616e", + "publisher": "Ubuntu Developers ", + "name": "libaudit1", + "version": "1:2.8.5-2ubuntu6", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit1:libaudit1:1\\:2.8.5-2ubuntu6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libaudit1@1:2.8.5-2ubuntu6?arch=amd64&upstream=audit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libblkid1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=e1d6f2e998332d7d", + "publisher": "Ubuntu Developers ", + "name": "libblkid1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libblkid1:libblkid1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libblkid1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libboost-iostreams1.71.0@1.71.0-6ubuntu6?arch=amd64&upstream=boost1.71&distro=ubuntu-20.04&package-id=c10288fd207d7ab9", + "publisher": "Ubuntu Developers ", + "name": "libboost-iostreams1.71.0", + "version": "1.71.0-6ubuntu6", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "BSD2" + } + }, + { + "license": { + "name": "BSD3_DEShaw" + } + }, + { + "license": { + "name": "BSD3_Google" + } + }, + { + "license": { + "id": "BSL-1.0" + } + }, + { + "license": { + "name": "Caramel" + } + }, + { + "license": { + "name": "CrystalClear" + } + }, + { + "license": { + "name": "HP" + } + }, + { + "license": { + "id": "Jam" + } + }, + { + "license": { + "name": "Kempf" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "NIST" + } + }, + { + "license": { + "name": "OldBoost1" + } + }, + { + "license": { + "name": "OldBoost2" + } + }, + { + "license": { + "name": "OldBoost3" + } + }, + { + "license": { + "name": "Python" + } + }, + { + "license": { + "name": "SGI" + } + }, + { + "license": { + "name": "Spencer" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libboost-iostreams1.71.0:libboost-iostreams1.71.0:1.71.0-6ubuntu6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libboost-iostreams1.71.0@1.71.0-6ubuntu6?arch=amd64&upstream=boost1.71&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libboost-thread1.71.0@1.71.0-6ubuntu6?arch=amd64&upstream=boost1.71&distro=ubuntu-20.04&package-id=7bdbd4008b339d07", + "publisher": "Ubuntu Developers ", + "name": "libboost-thread1.71.0", + "version": "1.71.0-6ubuntu6", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "BSD2" + } + }, + { + "license": { + "name": "BSD3_DEShaw" + } + }, + { + "license": { + "name": "BSD3_Google" + } + }, + { + "license": { + "id": "BSL-1.0" + } + }, + { + "license": { + "name": "Caramel" + } + }, + { + "license": { + "name": "CrystalClear" + } + }, + { + "license": { + "name": "HP" + } + }, + { + "license": { + "id": "Jam" + } + }, + { + "license": { + "name": "Kempf" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "NIST" + } + }, + { + "license": { + "name": "OldBoost1" + } + }, + { + "license": { + "name": "OldBoost2" + } + }, + { + "license": { + "name": "OldBoost3" + } + }, + { + "license": { + "name": "Python" + } + }, + { + "license": { + "name": "SGI" + } + }, + { + "license": { + "name": "Spencer" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libboost-thread1.71.0:libboost-thread1.71.0:1.71.0-6ubuntu6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libboost-thread1.71.0@1.71.0-6ubuntu6?arch=amd64&upstream=boost1.71&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libbrotli1@1.0.7-6ubuntu0.1?arch=amd64&upstream=brotli&distro=ubuntu-20.04&package-id=3cfc22417c2e74ac", + "publisher": "Ubuntu Developers ", + "name": "libbrotli1", + "version": "1.0.7-6ubuntu0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libbrotli1:libbrotli1:1.0.7-6ubuntu0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libbrotli1@1.0.7-6ubuntu0.1?arch=amd64&upstream=brotli&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libbsd0@0.10.0-1?arch=amd64&upstream=libbsd&distro=ubuntu-20.04&package-id=88ee716d66a17869", + "publisher": "Ubuntu Developers ", + "name": "libbsd0", + "version": "0.10.0-1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-clause-author" + } + }, + { + "license": { + "name": "BSD-2-clause-verbatim" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-John-Birrell" + } + }, + { + "license": { + "name": "BSD-3-clause-Regents" + } + }, + { + "license": { + "name": "BSD-3-clause-author" + } + }, + { + "license": { + "name": "BSD-4-clause-Christopher-G-Demetriou" + } + }, + { + "license": { + "name": "BSD-4-clause-Niels-Provos" + } + }, + { + "license": { + "name": "BSD-5-clause-Peter-Wemm" + } + }, + { + "license": { + "id": "Beerware" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "ISC-Original" + } + }, + { + "license": { + "name": "public-domain" + } + }, + { + "license": { + "name": "public-domain-Colin-Plumb" + } + } + ], + "cpe": "cpe:2.3:a:libbsd0:libbsd0:0.10.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libbsd0@0.10.0-1?arch=amd64&upstream=libbsd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libbz2-1.0@1.0.8-2?arch=amd64&upstream=bzip2&distro=ubuntu-20.04&package-id=fd8b0edf257b69b7", + "publisher": "Ubuntu Developers ", + "name": "libbz2-1.0", + "version": "1.0.8-2", + "licenses": [ + { + "license": { + "name": "BSD-variant" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libbz2-1.0:libbz2-1.0:1.0.8-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libbz2-1.0@1.0.8-2?arch=amd64&upstream=bzip2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.2?arch=amd64&upstream=glibc&distro=ubuntu-20.04&package-id=256facf7cbb95a65", + "publisher": "Ubuntu Developers ", + "name": "libc-bin", + "version": "2.31-0ubuntu9.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc-bin:libc-bin:2.31-0ubuntu9.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.2?arch=amd64&upstream=glibc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libc6@2.31-0ubuntu9.2?arch=amd64&upstream=glibc&distro=ubuntu-20.04&package-id=2a96b94fa4db214", + "publisher": "Ubuntu Developers ", + "name": "libc6", + "version": "2.31-0ubuntu9.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc6:libc6:2.31-0ubuntu9.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libc6@2.31-0ubuntu9.2?arch=amd64&upstream=glibc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcap-ng0@0.7.9-2.1build1?arch=amd64&upstream=libcap-ng&distro=ubuntu-20.04&package-id=57ceb68462a99cb4", + "publisher": "Ubuntu Developers ", + "name": "libcap-ng0", + "version": "0.7.9-2.1build1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libcap-ng0:libcap-ng0:0.7.9-2.1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcap-ng0@0.7.9-2.1build1?arch=amd64&upstream=libcap-ng&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcap2@1:2.32-1?arch=amd64&distro=ubuntu-20.04&package-id=682f3e304c127762", + "publisher": "Ubuntu Developers ", + "name": "libcap2", + "version": "1:2.32-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libcap2:libcap2:1\\:2.32-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcap2@1:2.32-1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcap2-bin@1:2.32-1?arch=amd64&upstream=libcap2&distro=ubuntu-20.04&package-id=8f0ae2256856772c", + "publisher": "Ubuntu Developers ", + "name": "libcap2-bin", + "version": "1:2.32-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libcap2-bin:libcap2-bin:1\\:2.32-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcap2-bin@1:2.32-1?arch=amd64&upstream=libcap2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcom-err2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=fbaeb4c3d5d0f976", + "publisher": "Ubuntu Developers ", + "name": "libcom-err2", + "version": "1.45.5-2ubuntu1", + "cpe": "cpe:2.3:a:libcom-err2:libcom-err2:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcom-err2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libconfig-general-perl@2.63-1?arch=all&distro=ubuntu-20.04&package-id=da9c7895b5630089", + "publisher": "Ubuntu Developers ", + "name": "libconfig-general-perl", + "version": "2.63-1", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libconfig-general-perl:libconfig-general-perl:2.63-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libconfig-general-perl@2.63-1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcrypt1@1:4.4.10-10ubuntu4?arch=amd64&upstream=libxcrypt&distro=ubuntu-20.04&package-id=8a4302e2e7027353", + "publisher": "Ubuntu Developers ", + "name": "libcrypt1", + "version": "1:4.4.10-10ubuntu4", + "cpe": "cpe:2.3:a:libcrypt1:libcrypt1:1\\:4.4.10-10ubuntu4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcrypt1@1:4.4.10-10ubuntu4?arch=amd64&upstream=libxcrypt&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcurl3-gnutls@7.68.0-1ubuntu2.7?arch=amd64&upstream=curl&distro=ubuntu-20.04&package-id=27e1128fdd417121", + "publisher": "Ubuntu Developers ", + "name": "libcurl3-gnutls", + "version": "7.68.0-1ubuntu2.7", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.68.0-1ubuntu2.7:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcurl3-gnutls@7.68.0-1ubuntu2.7?arch=amd64&upstream=curl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcurl4@7.68.0-1ubuntu2.7?arch=amd64&upstream=curl&distro=ubuntu-20.04&package-id=9b8749d7a48aa2f5", + "publisher": "Ubuntu Developers ", + "name": "libcurl4", + "version": "7.68.0-1ubuntu2.7", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libcurl4:libcurl4:7.68.0-1ubuntu2.7:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcurl4@7.68.0-1ubuntu2.7?arch=amd64&upstream=curl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libdb5.3@5.3.28+dfsg1-0.6ubuntu2?arch=amd64&upstream=db5.3&distro=ubuntu-20.04&package-id=bc84b4da0031640d", + "publisher": "Ubuntu Developers ", + "name": "libdb5.3", + "version": "5.3.28+dfsg1-0.6ubuntu2", + "cpe": "cpe:2.3:a:libdb5.3:libdb5.3:5.3.28\\+dfsg1-0.6ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libdb5.3@5.3.28+dfsg1-0.6ubuntu2?arch=amd64&upstream=db5.3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libdebconfclient0@0.251ubuntu1?arch=amd64&upstream=cdebconf&distro=ubuntu-20.04&package-id=78bbe40d9c2ef9b5", + "publisher": "Ubuntu Developers ", + "name": "libdebconfclient0", + "version": "0.251ubuntu1", + "cpe": "cpe:2.3:a:libdebconfclient0:libdebconfclient0:0.251ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libdebconfclient0@0.251ubuntu1?arch=amd64&upstream=cdebconf&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libdevmapper1.02.1@2:1.02.167-1ubuntu1?arch=amd64&upstream=lvm2%402.03.07-1ubuntu1&distro=ubuntu-20.04&package-id=30b70188951a65f0", + "publisher": "Ubuntu Developers ", + "name": "libdevmapper1.02.1", + "version": "2:1.02.167-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libdevmapper1.02.1:libdevmapper1.02.1:2\\:1.02.167-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libdevmapper1.02.1@2:1.02.167-1ubuntu1?arch=amd64&upstream=lvm2%402.03.07-1ubuntu1&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libelf1@0.176-1.1build1?arch=amd64&upstream=elfutils&distro=ubuntu-20.04&package-id=316daaa294f5e8d8", + "publisher": "Ubuntu Developers ", + "name": "libelf1", + "version": "0.176-1.1build1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL-" + } + } + ], + "cpe": "cpe:2.3:a:libelf1:libelf1:0.176-1.1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libelf1@0.176-1.1build1?arch=amd64&upstream=elfutils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libevent-2.1-7@2.1.11-stable-1?arch=amd64&upstream=libevent&distro=ubuntu-20.04&package-id=6b93a7dccfeb49e0", + "publisher": "Balint Reczey ", + "name": "libevent-2.1-7", + "version": "2.1.11-stable-1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-3-Clause~Kitware" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "FSFUL" + } + }, + { + "license": { + "id": "FSFULLR" + } + }, + { + "license": { + "name": "FSFULLR-No-Warranty" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + } + ], + "cpe": "cpe:2.3:a:libevent-2.1-7:libevent-2.1-7:2.1.11-stable-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libevent-2.1-7@2.1.11-stable-1?arch=amd64&upstream=libevent&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libexpat1@2.2.9-1build1?arch=amd64&upstream=expat&distro=ubuntu-20.04&package-id=f3ac75cd161f13c6", + "publisher": "Ubuntu Developers ", + "name": "libexpat1", + "version": "2.2.9-1build1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libexpat1:libexpat1:2.2.9-1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libexpat1@2.2.9-1build1?arch=amd64&upstream=expat&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libext2fs2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=ec6113f55e73d1fd", + "publisher": "Ubuntu Developers ", + "name": "libext2fs2", + "version": "1.45.5-2ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libext2fs2:libext2fs2:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libext2fs2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libfdisk1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=486ce61647644619", + "publisher": "Ubuntu Developers ", + "name": "libfdisk1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libfdisk1:libfdisk1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libfdisk1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libffi7@3.3-4?arch=amd64&upstream=libffi&distro=ubuntu-20.04&package-id=b43b799d45da9d97", + "publisher": "Ubuntu Developers ", + "name": "libffi7", + "version": "3.3-4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libffi7:libffi7:3.3-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libffi7@3.3-4?arch=amd64&upstream=libffi&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libfuse2@2.9.9-3?arch=amd64&upstream=fuse&distro=ubuntu-20.04&package-id=cb74b48e2705f805", + "publisher": "Ubuntu Developers ", + "name": "libfuse2", + "version": "2.9.9-3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libfuse2:libfuse2:2.9.9-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libfuse2@2.9.9-3?arch=amd64&upstream=fuse&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgcc-s1@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04&package-id=f98ce69fd9e55bb8", + "publisher": "Ubuntu Core developers ", + "name": "libgcc-s1", + "version": "10.3.0-1ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcc-s1:libgcc-s1:10.3.0-1ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgcc-s1@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgcrypt20@1.8.5-5ubuntu1.1?arch=amd64&distro=ubuntu-20.04&package-id=779dc4322dee5841", + "publisher": "Ubuntu Developers ", + "name": "libgcrypt20", + "version": "1.8.5-5ubuntu1.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcrypt20:libgcrypt20:1.8.5-5ubuntu1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgcrypt20@1.8.5-5ubuntu1.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgdbm-compat4@1.18.1-5?arch=amd64&upstream=gdbm&distro=ubuntu-20.04&package-id=216492c4d03e5a3b", + "publisher": "Ubuntu Developers ", + "name": "libgdbm-compat4", + "version": "1.18.1-5", + "licenses": [ + { + "license": { + "name": "GFDL-NIV-1.3+" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgdbm-compat4:libgdbm-compat4:1.18.1-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgdbm-compat4@1.18.1-5?arch=amd64&upstream=gdbm&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgdbm6@1.18.1-5?arch=amd64&upstream=gdbm&distro=ubuntu-20.04&package-id=e7baa5d6d4faa647", + "publisher": "Ubuntu Developers ", + "name": "libgdbm6", + "version": "1.18.1-5", + "licenses": [ + { + "license": { + "name": "GFDL-NIV-1.3+" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgdbm6:libgdbm6:1.18.1-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgdbm6@1.18.1-5?arch=amd64&upstream=gdbm&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libglib2.0-0@2.64.6-1~ubuntu20.04.4?arch=amd64&upstream=glib2.0&distro=ubuntu-20.04&package-id=173f54b9a4ea5bbf", + "publisher": "Ubuntu Developers ", + "name": "libglib2.0-0", + "version": "2.64.6-1~ubuntu20.04.4", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libglib2.0-0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libglib2.0-0@2.64.6-1~ubuntu20.04.4?arch=amd64&upstream=glib2.0&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libglib2.0-data@2.64.6-1~ubuntu20.04.4?arch=all&upstream=glib2.0&distro=ubuntu-20.04&package-id=84c7d5b71baf104a", + "publisher": "Ubuntu Developers ", + "name": "libglib2.0-data", + "version": "2.64.6-1~ubuntu20.04.4", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libglib2.0-data:libglib2.0-data:2.64.6-1\\~ubuntu20.04.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libglib2.0-data@2.64.6-1~ubuntu20.04.4?arch=all&upstream=glib2.0&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgmp10@2:6.2.0+dfsg-4?arch=amd64&upstream=gmp&distro=ubuntu-20.04&package-id=40fc269dcb8b3369", + "publisher": "Ubuntu Developers ", + "name": "libgmp10", + "version": "2:6.2.0+dfsg-4", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgmp10:libgmp10:2\\:6.2.0\\+dfsg-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgmp10@2:6.2.0+dfsg-4?arch=amd64&upstream=gmp&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.6?arch=amd64&upstream=gnutls28&distro=ubuntu-20.04&package-id=7490f76da775c6e", + "publisher": "Ubuntu Developers ", + "name": "libgnutls30", + "version": "3.6.13-2ubuntu1.6", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPLv3+" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "name": "LGPLv2.1+" + } + }, + { + "license": { + "name": "LGPLv3+_or_GPLv2+" + } + }, + { + "license": { + "name": "The" + } + } + ], + "cpe": "cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.6?arch=amd64&upstream=gnutls28&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgpg-error0@1.37-1?arch=amd64&upstream=libgpg-error&distro=ubuntu-20.04&package-id=37ef62d87edfe03", + "publisher": "Ubuntu Developers ", + "name": "libgpg-error0", + "version": "1.37-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "g10-permissive" + } + } + ], + "cpe": "cpe:2.3:a:libgpg-error0:libgpg-error0:1.37-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgpg-error0@1.37-1?arch=amd64&upstream=libgpg-error&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgssapi-krb5-2@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04&package-id=443eafe2785f5a4c", + "publisher": "Ubuntu Developers ", + "name": "libgssapi-krb5-2", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgssapi-krb5-2@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgssapi3-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=17a37cca2446b615", + "publisher": "Ubuntu Developers ", + "name": "libgssapi3-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libgssapi3-heimdal:libgssapi3-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgssapi3-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libhcrypto4-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=98098d582df76b44", + "publisher": "Ubuntu Developers ", + "name": "libhcrypto4-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libhcrypto4-heimdal:libhcrypto4-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libhcrypto4-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libheimbase1-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=f8dfc9a84c337835", + "publisher": "Ubuntu Developers ", + "name": "libheimbase1-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libheimbase1-heimdal:libheimbase1-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libheimbase1-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libheimntlm0-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=9992d88ac7d6e8e3", + "publisher": "Ubuntu Developers ", + "name": "libheimntlm0-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libheimntlm0-heimdal:libheimntlm0-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libheimntlm0-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libhogweed5@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04&package-id=3caecccf070e6760", + "publisher": "Ubuntu Developers ", + "name": "libhogweed5", + "version": "3.5.1+really3.5.1-2ubuntu0.2", + "licenses": [ + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libhogweed5:libhogweed5:3.5.1\\+really3.5.1-2ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libhogweed5@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libhx509-5-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=3b0bac5e4e8f23c5", + "publisher": "Ubuntu Developers ", + "name": "libhx509-5-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libhx509-5-heimdal:libhx509-5-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libhx509-5-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libibverbs1@28.0-1ubuntu1?arch=amd64&upstream=rdma-core&distro=ubuntu-20.04&package-id=8a574b9c0296728e", + "publisher": "Ubuntu Developers ", + "name": "libibverbs1", + "version": "28.0-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-MIT" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "id": "CPL-1.0" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libibverbs1:libibverbs1:28.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libibverbs1@28.0-1ubuntu1?arch=amd64&upstream=rdma-core&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libicu66@66.1-2ubuntu2.1?arch=amd64&upstream=icu&distro=ubuntu-20.04&package-id=8bc4cbf07b67515", + "publisher": "Ubuntu Developers ", + "name": "libicu66", + "version": "66.1-2ubuntu2.1", + "cpe": "cpe:2.3:a:libicu66:libicu66:66.1-2ubuntu2.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libicu66@66.1-2ubuntu2.1?arch=amd64&upstream=icu&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libidn2-0@2.2.0-2?arch=amd64&upstream=libidn2&distro=ubuntu-20.04&package-id=d2a82c3e28413bc1", + "publisher": "Ubuntu Developers ", + "name": "libidn2-0", + "version": "2.2.0-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "Unicode" + } + } + ], + "cpe": "cpe:2.3:a:libidn2-0:libidn2-0:2.2.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libidn2-0@2.2.0-2?arch=amd64&upstream=libidn2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libiscsi7@1.18.0-2?arch=amd64&upstream=libiscsi&distro=ubuntu-20.04&package-id=d3404aeee287695b", + "publisher": "Ubuntu Developers ", + "name": "libiscsi7", + "version": "1.18.0-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "MIT/X11" + } + }, + { + "license": { + "name": "Public_domain" + } + } + ], + "cpe": "cpe:2.3:a:libiscsi7:libiscsi7:1.18.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libiscsi7@1.18.0-2?arch=amd64&upstream=libiscsi&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libk5crypto3@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04&package-id=f9479050b59432b4", + "publisher": "Ubuntu Developers ", + "name": "libk5crypto3", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libk5crypto3:libk5crypto3:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libk5crypto3@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkeyutils1@1.6-6ubuntu1?arch=amd64&upstream=keyutils&distro=ubuntu-20.04&package-id=e8692427b123ea73", + "publisher": "Ubuntu Developers ", + "name": "libkeyutils1", + "version": "1.6-6ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libkeyutils1:libkeyutils1:1.6-6ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkeyutils1@1.6-6ubuntu1?arch=amd64&upstream=keyutils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkmod2@27-1ubuntu2?arch=amd64&upstream=kmod&distro=ubuntu-20.04&package-id=9de5f0614e60f8ee", + "publisher": "Ubuntu Developers ", + "name": "libkmod2", + "version": "27-1ubuntu2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkmod2:libkmod2:27-1ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkmod2@27-1ubuntu2?arch=amd64&upstream=kmod&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkrb5-26-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=2beb670b9378498e", + "publisher": "Ubuntu Developers ", + "name": "libkrb5-26-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5-26-heimdal:libkrb5-26-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkrb5-26-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkrb5-3@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04&package-id=fdb5970d8394a182", + "publisher": "Ubuntu Developers ", + "name": "libkrb5-3", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5-3:libkrb5-3:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkrb5-3@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkrb5support0@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04&package-id=a8d21a32e178b211", + "publisher": "Ubuntu Developers ", + "name": "libkrb5support0", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5support0:libkrb5support0:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkrb5support0@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libldap-2.4-2@2.4.49+dfsg-2ubuntu1.8?arch=amd64&upstream=openldap&distro=ubuntu-20.04&package-id=efdc80a7ae6eae19", + "publisher": "Ubuntu Developers ", + "name": "libldap-2.4-2", + "version": "2.4.49+dfsg-2ubuntu1.8", + "cpe": "cpe:2.3:a:libldap-2.4-2:libldap-2.4-2:2.4.49\\+dfsg-2ubuntu1.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libldap-2.4-2@2.4.49+dfsg-2ubuntu1.8?arch=amd64&upstream=openldap&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libldap-common@2.4.49+dfsg-2ubuntu1.8?arch=all&upstream=openldap&distro=ubuntu-20.04&package-id=4d0b88f98b40786b", + "publisher": "Ubuntu Developers ", + "name": "libldap-common", + "version": "2.4.49+dfsg-2ubuntu1.8", + "cpe": "cpe:2.3:a:libldap-common:libldap-common:2.4.49\\+dfsg-2ubuntu1.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libldap-common@2.4.49+dfsg-2ubuntu1.8?arch=all&upstream=openldap&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/liblz4-1@1.9.2-2ubuntu0.20.04.1?arch=amd64&upstream=lz4&distro=ubuntu-20.04&package-id=6f2c431caeb4980a", + "publisher": "Ubuntu Developers ", + "name": "liblz4-1", + "version": "1.9.2-2ubuntu0.20.04.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:liblz4-1:liblz4-1:1.9.2-2ubuntu0.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/liblz4-1@1.9.2-2ubuntu0.20.04.1?arch=amd64&upstream=lz4&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/liblzma5@5.2.4-1ubuntu1?arch=amd64&upstream=xz-utils&distro=ubuntu-20.04&package-id=f1e9f3b6205a664a", + "publisher": "Ubuntu Developers ", + "name": "liblzma5", + "version": "5.2.4-1ubuntu1", + "licenses": [ + { + "license": { + "name": "Autoconf" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "PD" + } + }, + { + "license": { + "name": "PD-debian" + } + }, + { + "license": { + "name": "config-h" + } + }, + { + "license": { + "name": "noderivs" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-nowarranty" + } + }, + { + "license": { + "name": "probably-PD" + } + } + ], + "cpe": "cpe:2.3:a:liblzma5:liblzma5:5.2.4-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/liblzma5@5.2.4-1ubuntu1?arch=amd64&upstream=xz-utils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmagic-mgc@1:5.38-4?arch=amd64&upstream=file&distro=ubuntu-20.04&package-id=3b4f02792ccf99bb", + "publisher": "Ubuntu Developers ", + "name": "libmagic-mgc", + "version": "1:5.38-4", + "licenses": [ + { + "license": { + "name": "BSD-2-Clause-alike" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-Clause-regents" + } + }, + { + "license": { + "name": "MIT-Old-Style-with-legal-disclaimer-2" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmagic-mgc:libmagic-mgc:1\\:5.38-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmagic-mgc@1:5.38-4?arch=amd64&upstream=file&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmagic1@1:5.38-4?arch=amd64&upstream=file&distro=ubuntu-20.04&package-id=302b8497a938556", + "publisher": "Ubuntu Developers ", + "name": "libmagic1", + "version": "1:5.38-4", + "licenses": [ + { + "license": { + "name": "BSD-2-Clause-alike" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-Clause-regents" + } + }, + { + "license": { + "name": "MIT-Old-Style-with-legal-disclaimer-2" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmagic1:libmagic1:1\\:5.38-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmagic1@1:5.38-4?arch=amd64&upstream=file&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmnl0@1.0.4-2?arch=amd64&upstream=libmnl&distro=ubuntu-20.04&package-id=162cfe25074edf0d", + "publisher": "Ubuntu Developers ", + "name": "libmnl0", + "version": "1.0.4-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libmnl0:libmnl0:1.0.4-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmnl0@1.0.4-2?arch=amd64&upstream=libmnl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmount1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=39446194385ebce5", + "publisher": "Ubuntu Developers ", + "name": "libmount1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmount1:libmount1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmount1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmpdec2@2.4.2-3?arch=amd64&upstream=mpdecimal&distro=ubuntu-20.04&package-id=b45a0d57576ce262", + "publisher": "Ubuntu Developers ", + "name": "libmpdec2", + "version": "2.4.2-3", + "licenses": [ + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libmpdec2:libmpdec2:2.4.2-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmpdec2@2.4.2-3?arch=amd64&upstream=mpdecimal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libncurses6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=ed8fb166163a75b8", + "publisher": "Ubuntu Developers ", + "name": "libncurses6", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:libncurses6:libncurses6:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libncurses6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libncursesw6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=58525ddc073a008a", + "publisher": "Ubuntu Developers ", + "name": "libncursesw6", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:libncursesw6:libncursesw6:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libncursesw6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libnettle7@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04&package-id=3d185fbd6a7e56f", + "publisher": "Ubuntu Developers ", + "name": "libnettle7", + "version": "3.5.1+really3.5.1-2ubuntu0.2", + "licenses": [ + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libnettle7:libnettle7:3.5.1\\+really3.5.1-2ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libnettle7@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libnfsidmap2@0.25-5.1ubuntu1?arch=amd64&upstream=libnfsidmap&distro=ubuntu-20.04&package-id=71bd574c47c02b75", + "publisher": "Ubuntu Developers ", + "name": "libnfsidmap2", + "version": "0.25-5.1ubuntu1", + "cpe": "cpe:2.3:a:libnfsidmap2:libnfsidmap2:0.25-5.1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libnfsidmap2@0.25-5.1ubuntu1?arch=amd64&upstream=libnfsidmap&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libnghttp2-14@1.40.0-1build1?arch=amd64&upstream=nghttp2&distro=ubuntu-20.04&package-id=c86604c1fa72dd96", + "publisher": "Ubuntu Developers ", + "name": "libnghttp2-14", + "version": "1.40.0-1build1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "SIL-OFL-1.1" + } + }, + { + "license": { + "name": "all-permissive" + } + } + ], + "cpe": "cpe:2.3:a:libnghttp2-14:libnghttp2-14:1.40.0-1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libnghttp2-14@1.40.0-1build1?arch=amd64&upstream=nghttp2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libnl-3-200@3.4.0-1?arch=amd64&upstream=libnl3&distro=ubuntu-20.04&package-id=520a765636f2f20f", + "publisher": "Ubuntu Developers ", + "name": "libnl-3-200", + "version": "3.4.0-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libnl-3-200:libnl-3-200:3.4.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libnl-3-200@3.4.0-1?arch=amd64&upstream=libnl3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libnl-route-3-200@3.4.0-1?arch=amd64&upstream=libnl3&distro=ubuntu-20.04&package-id=1a1d9f0f1f34e88b", + "publisher": "Ubuntu Developers ", + "name": "libnl-route-3-200", + "version": "3.4.0-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libnl-route-3-200:libnl-route-3-200:3.4.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libnl-route-3-200@3.4.0-1?arch=amd64&upstream=libnl3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libp11-kit0@0.23.20-1ubuntu0.1?arch=amd64&upstream=p11-kit&distro=ubuntu-20.04&package-id=9fc0ca46e6d21557", + "publisher": "Ubuntu Developers ", + "name": "libp11-kit0", + "version": "0.23.20-1ubuntu0.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "ISC+IBM" + } + }, + { + "license": { + "name": "permissive-like-automake-output" + } + }, + { + "license": { + "name": "same-as-rest-of-p11kit" + } + } + ], + "cpe": "cpe:2.3:a:libp11-kit0:libp11-kit0:0.23.20-1ubuntu0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libp11-kit0@0.23.20-1ubuntu0.1?arch=amd64&upstream=p11-kit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-cap@1:2.32-1?arch=amd64&upstream=libcap2&distro=ubuntu-20.04&package-id=20db44acb7f94535", + "publisher": "Ubuntu Developers ", + "name": "libpam-cap", + "version": "1:2.32-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libpam-cap:libpam-cap:1\\:2.32-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-cap@1:2.32-1?arch=amd64&upstream=libcap2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-modules@1.3.1-5ubuntu4.3?arch=amd64&upstream=pam&distro=ubuntu-20.04&package-id=563cd7ffd9ad09e2", + "publisher": "Ubuntu Developers ", + "name": "libpam-modules", + "version": "1.3.1-5ubuntu4.3", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules:libpam-modules:1.3.1-5ubuntu4.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-modules@1.3.1-5ubuntu4.3?arch=amd64&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-modules-bin@1.3.1-5ubuntu4.3?arch=amd64&upstream=pam&distro=ubuntu-20.04&package-id=2fef7b748bc46246", + "publisher": "Ubuntu Developers ", + "name": "libpam-modules-bin", + "version": "1.3.1-5ubuntu4.3", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules-bin:libpam-modules-bin:1.3.1-5ubuntu4.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-modules-bin@1.3.1-5ubuntu4.3?arch=amd64&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-runtime@1.3.1-5ubuntu4.3?arch=all&upstream=pam&distro=ubuntu-20.04&package-id=ee86ac677ddf58c5", + "publisher": "Ubuntu Developers ", + "name": "libpam-runtime", + "version": "1.3.1-5ubuntu4.3", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-runtime:libpam-runtime:1.3.1-5ubuntu4.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-runtime@1.3.1-5ubuntu4.3?arch=all&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam0g@1.3.1-5ubuntu4.3?arch=amd64&upstream=pam&distro=ubuntu-20.04&package-id=473c40bcd3d2ef2d", + "publisher": "Ubuntu Developers ", + "name": "libpam0g", + "version": "1.3.1-5ubuntu4.3", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam0g:libpam0g:1.3.1-5ubuntu4.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam0g@1.3.1-5ubuntu4.3?arch=amd64&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpcre2-8-0@10.34-7?arch=amd64&upstream=pcre2&distro=ubuntu-20.04&package-id=ec9eb70008ed8b14", + "publisher": "Ubuntu Developers ", + "name": "libpcre2-8-0", + "version": "10.34-7", + "cpe": "cpe:2.3:a:libpcre2-8-0:libpcre2-8-0:10.34-7:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpcre2-8-0@10.34-7?arch=amd64&upstream=pcre2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpcre3@2:8.39-12build1?arch=amd64&upstream=pcre3&distro=ubuntu-20.04&package-id=f2af8e66c60a624", + "publisher": "Ubuntu Developers ", + "name": "libpcre3", + "version": "2:8.39-12build1", + "cpe": "cpe:2.3:a:libpcre3:libpcre3:2\\:8.39-12build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpcre3@2:8.39-12build1?arch=amd64&upstream=pcre3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libperl5.30@5.30.0-9ubuntu0.2?arch=amd64&upstream=perl&distro=ubuntu-20.04&package-id=8748dda005dfdd96", + "publisher": "Ubuntu Developers ", + "name": "libperl5.30", + "version": "5.30.0-9ubuntu0.2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libperl5.30:libperl5.30:5.30.0-9ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libperl5.30@5.30.0-9ubuntu0.2?arch=amd64&upstream=perl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libprocps8@2:3.3.16-1ubuntu2.3?arch=amd64&upstream=procps&distro=ubuntu-20.04&package-id=393a438be5ba5065", + "publisher": "Ubuntu Developers ", + "name": "libprocps8", + "version": "2:3.3.16-1ubuntu2.3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libprocps8:libprocps8:2\\:3.3.16-1ubuntu2.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libprocps8@2:3.3.16-1ubuntu2.3?arch=amd64&upstream=procps&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpsl5@0.21.0-1ubuntu1?arch=amd64&upstream=libpsl&distro=ubuntu-20.04&package-id=e77e76f35a3ad192", + "publisher": "Ubuntu Developers ", + "name": "libpsl5", + "version": "0.21.0-1ubuntu1", + "licenses": [ + { + "license": { + "name": "Chromium" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libpsl5:libpsl5:0.21.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpsl5@0.21.0-1ubuntu1?arch=amd64&upstream=libpsl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpython3-stdlib@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04&package-id=b40e3316416bbdaf", + "publisher": "Ubuntu Developers ", + "name": "libpython3-stdlib", + "version": "3.8.2-0ubuntu2", + "cpe": "cpe:2.3:a:libpython3-stdlib:libpython3-stdlib:3.8.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpython3-stdlib@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpython3.8-minimal@3.8.10-0ubuntu1~20.04.1?arch=amd64&upstream=python3.8&distro=ubuntu-20.04&package-id=33f3278f3c743965", + "publisher": "Ubuntu Core Developers ", + "name": "libpython3.8-minimal", + "version": "3.8.10-0ubuntu1~20.04.1", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:libpython3.8-minimal:libpython3.8-minimal:3.8.10-0ubuntu1\\~20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpython3.8-minimal@3.8.10-0ubuntu1~20.04.1?arch=amd64&upstream=python3.8&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpython3.8-stdlib@3.8.10-0ubuntu1~20.04.1?arch=amd64&upstream=python3.8&distro=ubuntu-20.04&package-id=854ca983dc3a9ffb", + "publisher": "Ubuntu Core Developers ", + "name": "libpython3.8-stdlib", + "version": "3.8.10-0ubuntu1~20.04.1", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:libpython3.8-stdlib:libpython3.8-stdlib:3.8.10-0ubuntu1\\~20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpython3.8-stdlib@3.8.10-0ubuntu1~20.04.1?arch=amd64&upstream=python3.8&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/librados2@15.2.14-0ubuntu0.20.04.1?arch=amd64&upstream=ceph&distro=ubuntu-20.04&package-id=7cb91ca8a7b4cce7", + "publisher": "Ubuntu Developers ", + "name": "librados2", + "version": "15.2.14-0ubuntu0.20.04.1", + "licenses": [ + { + "license": { + "id": "APSL-2.0" + } + }, + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Boost" + } + }, + { + "license": { + "name": "Boost-Software-License-1.0" + } + }, + { + "license": { + "id": "CC-BY-SA-3.0" + } + }, + { + "license": { + "name": "Creative" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPL-3/OpenSSL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "Public" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:librados2:librados2:15.2.14-0ubuntu0.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/librados2@15.2.14-0ubuntu0.20.04.1?arch=amd64&upstream=ceph&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/librbd1@15.2.14-0ubuntu0.20.04.1?arch=amd64&upstream=ceph&distro=ubuntu-20.04&package-id=a8eb84c3f86087ed", + "publisher": "Ubuntu Developers ", + "name": "librbd1", + "version": "15.2.14-0ubuntu0.20.04.1", + "licenses": [ + { + "license": { + "id": "APSL-2.0" + } + }, + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Boost" + } + }, + { + "license": { + "name": "Boost-Software-License-1.0" + } + }, + { + "license": { + "id": "CC-BY-SA-3.0" + } + }, + { + "license": { + "name": "Creative" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPL-3/OpenSSL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "Public" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:librbd1:librbd1:15.2.14-0ubuntu0.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/librbd1@15.2.14-0ubuntu0.20.04.1?arch=amd64&upstream=ceph&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/librdmacm1@28.0-1ubuntu1?arch=amd64&upstream=rdma-core&distro=ubuntu-20.04&package-id=ba8ceed5ec4f0c95", + "publisher": "Ubuntu Developers ", + "name": "librdmacm1", + "version": "28.0-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-MIT" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "id": "CPL-1.0" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:librdmacm1:librdmacm1:28.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/librdmacm1@28.0-1ubuntu1?arch=amd64&upstream=rdma-core&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libreadline8@8.0-4?arch=amd64&upstream=readline&distro=ubuntu-20.04&package-id=67b876656fcd9e68", + "publisher": "Ubuntu Developers ", + "name": "libreadline8", + "version": "8.0-4", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libreadline8:libreadline8:8.0-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libreadline8@8.0-4?arch=amd64&upstream=readline&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libroken18-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=68e35bc456818613", + "publisher": "Ubuntu Developers ", + "name": "libroken18-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libroken18-heimdal:libroken18-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libroken18-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/librtmp1@2.4+20151223.gitfa8646d.1-2build1?arch=amd64&upstream=rtmpdump&distro=ubuntu-20.04&package-id=ede637f87a4bfd7b", + "publisher": "Ubuntu Developers ", + "name": "librtmp1", + "version": "2.4+20151223.gitfa8646d.1-2build1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:librtmp1:librtmp1:2.4\\+20151223.gitfa8646d.1-2build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/librtmp1@2.4+20151223.gitfa8646d.1-2build1?arch=amd64&upstream=rtmpdump&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsasl2-2@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04&package-id=374396d82667544d", + "publisher": "Ubuntu Developers ", + "name": "libsasl2-2", + "version": "2.1.27+dfsg-2", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-2:libsasl2-2:2.1.27\\+dfsg-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsasl2-2@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsasl2-modules@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04&package-id=fb8d278d10c4a3cf", + "publisher": "Ubuntu Developers ", + "name": "libsasl2-modules", + "version": "2.1.27+dfsg-2", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-modules:libsasl2-modules:2.1.27\\+dfsg-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsasl2-modules@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsasl2-modules-db@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04&package-id=63c3c50d36ec1d13", + "publisher": "Ubuntu Developers ", + "name": "libsasl2-modules-db", + "version": "2.1.27+dfsg-2", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-modules-db:libsasl2-modules-db:2.1.27\\+dfsg-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsasl2-modules-db@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libseccomp2@2.5.1-1ubuntu1~20.04.1?arch=amd64&upstream=libseccomp&distro=ubuntu-20.04&package-id=b2fd79b9c242e8e8", + "publisher": "Ubuntu Developers ", + "name": "libseccomp2", + "version": "2.5.1-1ubuntu1~20.04.1", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libseccomp2:libseccomp2:2.5.1-1ubuntu1\\~20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libseccomp2@2.5.1-1ubuntu1~20.04.1?arch=amd64&upstream=libseccomp&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libselinux1@3.0-1build2?arch=amd64&upstream=libselinux&distro=ubuntu-20.04&package-id=e5d4ae16ac79b901", + "publisher": "Ubuntu Developers ", + "name": "libselinux1", + "version": "3.0-1build2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libselinux1:libselinux1:3.0-1build2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libselinux1@3.0-1build2?arch=amd64&upstream=libselinux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsemanage-common@3.0-1build2?arch=all&upstream=libsemanage&distro=ubuntu-20.04&package-id=4c6cd9f68ce53262", + "publisher": "Ubuntu Developers ", + "name": "libsemanage-common", + "version": "3.0-1build2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage-common:libsemanage-common:3.0-1build2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsemanage-common@3.0-1build2?arch=all&upstream=libsemanage&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsemanage1@3.0-1build2?arch=amd64&upstream=libsemanage&distro=ubuntu-20.04&package-id=963297f19b339026", + "publisher": "Ubuntu Developers ", + "name": "libsemanage1", + "version": "3.0-1build2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage1:libsemanage1:3.0-1build2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsemanage1@3.0-1build2?arch=amd64&upstream=libsemanage&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsepol1@3.0-1?arch=amd64&upstream=libsepol&distro=ubuntu-20.04&package-id=991afdd7bf17200c", + "publisher": "Ubuntu Developers ", + "name": "libsepol1", + "version": "3.0-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsepol1:libsepol1:3.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsepol1@3.0-1?arch=amd64&upstream=libsepol&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsgutils2-2@1.44-1ubuntu2?arch=amd64&upstream=sg3-utils&distro=ubuntu-20.04&package-id=5eee3420d656cf76", + "publisher": "Ubuntu Developers ", + "name": "libsgutils2-2", + "version": "1.44-1ubuntu2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libsgutils2-2:libsgutils2-2:1.44-1ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsgutils2-2@1.44-1ubuntu2?arch=amd64&upstream=sg3-utils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsmartcols1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=b47d3a935260c518", + "publisher": "Ubuntu Developers ", + "name": "libsmartcols1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsmartcols1:libsmartcols1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsmartcols1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsqlite3-0@3.31.1-4ubuntu0.2?arch=amd64&upstream=sqlite3&distro=ubuntu-20.04&package-id=a7c7ccf11d3583d1", + "publisher": "Ubuntu Developers ", + "name": "libsqlite3-0", + "version": "3.31.1-4ubuntu0.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.31.1-4ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsqlite3-0@3.31.1-4ubuntu0.2?arch=amd64&upstream=sqlite3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libss2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=4715894cb8165c", + "publisher": "Ubuntu Developers ", + "name": "libss2", + "version": "1.45.5-2ubuntu1", + "cpe": "cpe:2.3:a:libss2:libss2:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libss2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libssh-4@0.9.3-2ubuntu2.2?arch=amd64&upstream=libssh&distro=ubuntu-20.04&package-id=93df7c2bd7217cc4", + "publisher": "Ubuntu Developers ", + "name": "libssh-4", + "version": "0.9.3-2ubuntu2.2", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "LGPL-2.1+~OpenSSL" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libssh-4:libssh-4:0.9.3-2ubuntu2.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libssh-4@0.9.3-2ubuntu2.2?arch=amd64&upstream=libssh&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.9?arch=amd64&upstream=openssl&distro=ubuntu-20.04&package-id=3427630da64660c5", + "publisher": "Ubuntu Developers ", + "name": "libssl1.1", + "version": "1.1.1f-1ubuntu2.9", + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.9:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.9?arch=amd64&upstream=openssl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libstdc++6@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04&package-id=241fcb3d9b65153a", + "publisher": "Ubuntu Core developers ", + "name": "libstdc++6", + "version": "10.3.0-1ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:10.3.0-1ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libstdc++6@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsystemd0@245.4-4ubuntu3.13?arch=amd64&upstream=systemd&distro=ubuntu-20.04&package-id=cc380da51eb4b1d1", + "publisher": "Ubuntu Developers ", + "name": "libsystemd0", + "version": "245.4-4ubuntu3.13", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsystemd0:libsystemd0:245.4-4ubuntu3.13:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsystemd0@245.4-4ubuntu3.13?arch=amd64&upstream=systemd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtasn1-6@4.16.0-2?arch=amd64&distro=ubuntu-20.04&package-id=a290c35fc0220ba0", + "publisher": "Ubuntu Developers ", + "name": "libtasn1-6", + "version": "4.16.0-2", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtasn1-6:libtasn1-6:4.16.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtasn1-6@4.16.0-2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtinfo6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=72ad56d118fefea3", + "publisher": "Ubuntu Developers ", + "name": "libtinfo6", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:libtinfo6:libtinfo6:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtinfo6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtirpc-common@1.2.5-1?arch=all&upstream=libtirpc&distro=ubuntu-20.04&package-id=ba22fe8af5722b24", + "publisher": "Ubuntu Developers ", + "name": "libtirpc-common", + "version": "1.2.5-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc-common:libtirpc-common:1.2.5-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtirpc-common@1.2.5-1?arch=all&upstream=libtirpc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtirpc3@1.2.5-1?arch=amd64&upstream=libtirpc&distro=ubuntu-20.04&package-id=57b2bfa0a8467ab7", + "publisher": "Ubuntu Developers ", + "name": "libtirpc3", + "version": "1.2.5-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc3:libtirpc3:1.2.5-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtirpc3@1.2.5-1?arch=amd64&upstream=libtirpc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libudev1@245.4-4ubuntu3.13?arch=amd64&upstream=systemd&distro=ubuntu-20.04&package-id=4b339254fe502057", + "publisher": "Ubuntu Developers ", + "name": "libudev1", + "version": "245.4-4ubuntu3.13", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libudev1:libudev1:245.4-4ubuntu3.13:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libudev1@245.4-4ubuntu3.13?arch=amd64&upstream=systemd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libunistring2@0.9.10-2?arch=amd64&upstream=libunistring&distro=ubuntu-20.04&package-id=3140ffa70dcd9831", + "publisher": "Ubuntu Developers ", + "name": "libunistring2", + "version": "0.9.10-2", + "licenses": [ + { + "license": { + "name": "FreeSoftware" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GFDL-1.2+" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libunistring2:libunistring2:0.9.10-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libunistring2@0.9.10-2?arch=amd64&upstream=libunistring&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libuuid1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=5395a07c00002ea6", + "publisher": "Ubuntu Developers ", + "name": "libuuid1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libuuid1:libuuid1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libuuid1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libwind0-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=7b0e172efdb36a99", + "publisher": "Ubuntu Developers ", + "name": "libwind0-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libwind0-heimdal:libwind0-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libwind0-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libwrap0@7.6.q-30?arch=amd64&upstream=tcp-wrappers&distro=ubuntu-20.04&package-id=5b14391c61bb94f1", + "publisher": "Ubuntu Developers ", + "name": "libwrap0", + "version": "7.6.q-30", + "cpe": "cpe:2.3:a:libwrap0:libwrap0:7.6.q-30:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libwrap0@7.6.q-30?arch=amd64&upstream=tcp-wrappers&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libxml2@2.9.10+dfsg-5ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04&package-id=5227ee2e55b78734", + "publisher": "Ubuntu Developers ", + "name": "libxml2", + "version": "2.9.10+dfsg-5ubuntu0.20.04.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "MIT-1" + } + } + ], + "cpe": "cpe:2.3:a:libxml2:libxml2:2.9.10\\+dfsg-5ubuntu0.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libxml2@2.9.10+dfsg-5ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libxtables12@1.8.4-3ubuntu2?arch=amd64&upstream=iptables&distro=ubuntu-20.04&package-id=440c57e95fc3a35c", + "publisher": "Ubuntu Developers ", + "name": "libxtables12", + "version": "1.8.4-3ubuntu2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libxtables12:libxtables12:1.8.4-3ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libxtables12@1.8.4-3ubuntu2?arch=amd64&upstream=iptables&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libzstd1@1.4.4+dfsg-3ubuntu0.1?arch=amd64&upstream=libzstd&distro=ubuntu-20.04&package-id=47cff0564e160066", + "publisher": "Ubuntu Developers ", + "name": "libzstd1", + "version": "1.4.4+dfsg-3ubuntu0.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libzstd1:libzstd1:1.4.4\\+dfsg-3ubuntu0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libzstd1@1.4.4+dfsg-3ubuntu0.1?arch=amd64&upstream=libzstd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/login@1:4.8.1-1ubuntu5.20.04.1?arch=amd64&upstream=shadow&distro=ubuntu-20.04&package-id=cb23947502a7c38d", + "publisher": "Ubuntu Developers ", + "name": "login", + "version": "1:4.8.1-1ubuntu5.20.04.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:login:login:1\\:4.8.1-1ubuntu5.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/login@1:4.8.1-1ubuntu5.20.04.1?arch=amd64&upstream=shadow&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/logsave@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=4a92556bee4b4f91", + "publisher": "Ubuntu Developers ", + "name": "logsave", + "version": "1.45.5-2ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:logsave:logsave:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/logsave@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/lsb-base@11.1.0ubuntu2?arch=all&upstream=lsb&distro=ubuntu-20.04&package-id=b76348b7f1282c61", + "publisher": "Ubuntu Developers ", + "name": "lsb-base", + "version": "11.1.0ubuntu2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:lsb-base:lsb-base:11.1.0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/lsb-base@11.1.0ubuntu2?arch=all&upstream=lsb&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/mawk@1.3.4.20200120-2?arch=amd64&distro=ubuntu-20.04&package-id=435885c82afbf721", + "publisher": "Ubuntu Developers ", + "name": "mawk", + "version": "1.3.4.20200120-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:mawk:mawk:1.3.4.20200120-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/mawk@1.3.4.20200120-2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/mime-support@3.64ubuntu1?arch=all&distro=ubuntu-20.04&package-id=405891a224258a92", + "publisher": "Ubuntu Developers ", + "name": "mime-support", + "version": "3.64ubuntu1", + "licenses": [ + { + "license": { + "name": "Bellcore" + } + }, + { + "license": { + "name": "ad-hoc" + } + } + ], + "cpe": "cpe:2.3:a:mime-support:mime-support:3.64ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/mime-support@3.64ubuntu1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/mount@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=fa4ef6b12af7900c", + "publisher": "Ubuntu Developers ", + "name": "mount", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:mount:mount:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/mount@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ncurses-base@6.2-0ubuntu2?arch=all&upstream=ncurses&distro=ubuntu-20.04&package-id=d7393defd95e4554", + "publisher": "Ubuntu Developers ", + "name": "ncurses-base", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:ncurses-base:ncurses-base:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ncurses-base@6.2-0ubuntu2?arch=all&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ncurses-bin@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=d6bdd43961b680f6", + "publisher": "Ubuntu Developers ", + "name": "ncurses-bin", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:ncurses-bin:ncurses-bin:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ncurses-bin@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/netbase@6.1?arch=all&distro=ubuntu-20.04&package-id=c6847a50307ac1ba", + "publisher": "Ubuntu Developers ", + "name": "netbase", + "version": "6.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:netbase:netbase:6.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/netbase@6.1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/nfs-common@1:1.3.4-2.5ubuntu3.4?arch=amd64&upstream=nfs-utils&distro=ubuntu-20.04&package-id=6a00c331080f32b7", + "publisher": "Ubuntu Developers ", + "name": "nfs-common", + "version": "1:1.3.4-2.5ubuntu3.4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:nfs-common:nfs-common:1\\:1.3.4-2.5ubuntu3.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/nfs-common@1:1.3.4-2.5ubuntu3.4?arch=amd64&upstream=nfs-utils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.9?arch=amd64&distro=ubuntu-20.04&package-id=606e5374106f5ebb", + "publisher": "Ubuntu Developers ", + "name": "openssl", + "version": "1.1.1f-1ubuntu2.9", + "cpe": "cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.9:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.9?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/passwd@1:4.8.1-1ubuntu5.20.04.1?arch=amd64&upstream=shadow&distro=ubuntu-20.04&package-id=c4a1ed5267891532", + "publisher": "Ubuntu Developers ", + "name": "passwd", + "version": "1:4.8.1-1ubuntu5.20.04.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:passwd:passwd:1\\:4.8.1-1ubuntu5.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/passwd@1:4.8.1-1ubuntu5.20.04.1?arch=amd64&upstream=shadow&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/perl@5.30.0-9ubuntu0.2?arch=amd64&distro=ubuntu-20.04&package-id=80890d41e31d4ad9", + "publisher": "Ubuntu Developers ", + "name": "perl", + "version": "5.30.0-9ubuntu0.2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl:perl:5.30.0-9ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/perl@5.30.0-9ubuntu0.2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/perl-base@5.30.0-9ubuntu0.2?arch=amd64&upstream=perl&distro=ubuntu-20.04&package-id=eab1752e76cf29f", + "publisher": "Ubuntu Developers ", + "name": "perl-base", + "version": "5.30.0-9ubuntu0.2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl-base:perl-base:5.30.0-9ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/perl-base@5.30.0-9ubuntu0.2?arch=amd64&upstream=perl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/perl-modules-5.30@5.30.0-9ubuntu0.2?arch=all&upstream=perl&distro=ubuntu-20.04&package-id=fb3bcb2d22f50638", + "publisher": "Ubuntu Developers ", + "name": "perl-modules-5.30", + "version": "5.30.0-9ubuntu0.2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl-modules-5.30:perl-modules-5.30:5.30.0-9ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/perl-modules-5.30@5.30.0-9ubuntu0.2?arch=all&upstream=perl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/procps@2:3.3.16-1ubuntu2.3?arch=amd64&distro=ubuntu-20.04&package-id=1b952d75ffac7280", + "publisher": "Ubuntu Developers ", + "name": "procps", + "version": "2:3.3.16-1ubuntu2.3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:procps:procps:2\\:3.3.16-1ubuntu2.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/procps@2:3.3.16-1ubuntu2.3?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/publicsuffix@20200303.0012-1?arch=all&distro=ubuntu-20.04&package-id=fe371293cddb3ef3", + "publisher": "Ubuntu Developers ", + "name": "publicsuffix", + "version": "20200303.0012-1", + "licenses": [ + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:publicsuffix:publicsuffix:20200303.0012-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/publicsuffix@20200303.0012-1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "application", + "bom-ref": "pkg:generic/python@3.8.10?package-id=8336df5bcdddc1a4", + "name": "python", + "version": "3.8.10", + "cpe": "cpe:2.3:a:python_software_foundation:python:3.8.10:*:*:*:*:*:*:*", + "purl": "pkg:generic/python@3.8.10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/python3@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04&package-id=ca939acbf264771", + "publisher": "Ubuntu Developers ", + "name": "python3", + "version": "3.8.2-0ubuntu2", + "cpe": "cpe:2.3:a:python3:python3:3.8.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/python3@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/python3-minimal@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04&package-id=26eebf392e0b02cf", + "publisher": "Ubuntu Developers ", + "name": "python3-minimal", + "version": "3.8.2-0ubuntu2", + "cpe": "cpe:2.3:a:python3-minimal:python3-minimal:3.8.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/python3-minimal@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/python3.8@3.8.10-0ubuntu1~20.04.1?arch=amd64&distro=ubuntu-20.04&package-id=fa10b88b12106de4", + "publisher": "Ubuntu Core Developers ", + "name": "python3.8", + "version": "3.8.10-0ubuntu1~20.04.1", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:python3.8:python3.8:3.8.10-0ubuntu1\\~20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/python3.8@3.8.10-0ubuntu1~20.04.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/python3.8-minimal@3.8.10-0ubuntu1~20.04.1?arch=amd64&upstream=python3.8&distro=ubuntu-20.04&package-id=c228c418b8a875e0", + "publisher": "Ubuntu Core Developers ", + "name": "python3.8-minimal", + "version": "3.8.10-0ubuntu1~20.04.1", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:python3.8-minimal:python3.8-minimal:3.8.10-0ubuntu1\\~20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/python3.8-minimal@3.8.10-0ubuntu1~20.04.1?arch=amd64&upstream=python3.8&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/qemu-block-extra@1:4.2-3ubuntu6.18?arch=amd64&upstream=qemu&distro=ubuntu-20.04&package-id=c61b4f09d823d283", + "publisher": "Ubuntu Developers ", + "name": "qemu-block-extra", + "version": "1:4.2-3ubuntu6.18", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:qemu-block-extra:qemu-block-extra:1\\:4.2-3ubuntu6.18:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/qemu-block-extra@1:4.2-3ubuntu6.18?arch=amd64&upstream=qemu&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/qemu-utils@1:4.2-3ubuntu6.18?arch=amd64&upstream=qemu&distro=ubuntu-20.04&package-id=8bcef6c4d564e481", + "publisher": "Ubuntu Developers ", + "name": "qemu-utils", + "version": "1:4.2-3ubuntu6.18", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:qemu-utils:qemu-utils:1\\:4.2-3ubuntu6.18:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/qemu-utils@1:4.2-3ubuntu6.18?arch=amd64&upstream=qemu&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/readline-common@8.0-4?arch=all&upstream=readline&distro=ubuntu-20.04&package-id=34a85b4423ecbe7", + "publisher": "Ubuntu Developers ", + "name": "readline-common", + "version": "8.0-4", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:readline-common:readline-common:8.0-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/readline-common@8.0-4?arch=all&upstream=readline&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/rpcbind@1.2.5-8?arch=amd64&distro=ubuntu-20.04&package-id=e98d3334085e4495", + "publisher": "Ubuntu Developers ", + "name": "rpcbind", + "version": "1.2.5-8", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "PERMISSIVE" + } + } + ], + "cpe": "cpe:2.3:a:rpcbind:rpcbind:1.2.5-8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/rpcbind@1.2.5-8?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sed@4.7-1?arch=amd64&distro=ubuntu-20.04&package-id=24bbb8989a1870c7", + "publisher": "Ubuntu Developers ", + "name": "sed", + "version": "4.7-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:sed:sed:4.7-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sed@4.7-1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sensible-utils@0.0.12+nmu1?arch=all&distro=ubuntu-20.04&package-id=7e50cf6ac335106e", + "publisher": "Ubuntu Developers ", + "name": "sensible-utils", + "version": "0.0.12+nmu1", + "licenses": [ + { + "license": { + "name": "All-permissive" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "configure" + } + }, + { + "license": { + "name": "installsh" + } + } + ], + "cpe": "cpe:2.3:a:sensible-utils:sensible-utils:0.0.12\\+nmu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sensible-utils@0.0.12+nmu1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sg3-utils@1.44-1ubuntu2?arch=amd64&distro=ubuntu-20.04&package-id=794bb1692a1cfa88", + "publisher": "Ubuntu Developers ", + "name": "sg3-utils", + "version": "1.44-1ubuntu2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:sg3-utils:sg3-utils:1.44-1ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sg3-utils@1.44-1ubuntu2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/shared-mime-info@1.15-1?arch=amd64&distro=ubuntu-20.04&package-id=c15ede029a3e38cd", + "publisher": "Ubuntu Developers ", + "name": "shared-mime-info", + "version": "1.15-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:shared-mime-info:shared-mime-info:1.15-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/shared-mime-info@1.15-1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sharutils@1:4.15.2-4build1?arch=amd64&distro=ubuntu-20.04&package-id=e920784bf62009c0", + "publisher": "Ubuntu Developers ", + "name": "sharutils", + "version": "1:4.15.2-4build1", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:sharutils:sharutils:1\\:4.15.2-4build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sharutils@1:4.15.2-4build1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sysvinit-utils@2.96-2.1ubuntu1?arch=amd64&upstream=sysvinit&distro=ubuntu-20.04&package-id=abc451774789c392", + "publisher": "Ubuntu Developers ", + "name": "sysvinit-utils", + "version": "2.96-2.1ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:sysvinit-utils:sysvinit-utils:2.96-2.1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sysvinit-utils@2.96-2.1ubuntu1?arch=amd64&upstream=sysvinit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/tar@1.30+dfsg-7ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04&package-id=4c6cd0d17cc842e", + "publisher": "Ubuntu Developers ", + "name": "tar", + "version": "1.30+dfsg-7ubuntu0.20.04.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:tar:tar:1.30\\+dfsg-7ubuntu0.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/tar@1.30+dfsg-7ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/telnet@0.17-41.2build1?arch=amd64&upstream=netkit-telnet&distro=ubuntu-20.04&package-id=440d9ef0dcd8675e", + "publisher": "Ubuntu Developers ", + "name": "telnet", + "version": "0.17-41.2build1", + "cpe": "cpe:2.3:a:telnet:telnet:0.17-41.2build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/telnet@0.17-41.2build1?arch=amd64&upstream=netkit-telnet&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/tgt@1.0.66-68.e042fd?arch=amd64&distro=ubuntu-20.04&package-id=7d43bc1090b0757a", + "publisher": "FUJITA Tomonori ", + "name": "tgt", + "version": "1.0.66-68.e042fd", + "cpe": "cpe:2.3:a:tgt:tgt:1.0.66-68.e042fd:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/tgt@1.0.66-68.e042fd?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/tzdata@2021e-0ubuntu0.20.04?arch=all&distro=ubuntu-20.04&package-id=46dc9535301423e0", + "publisher": "Ubuntu Developers ", + "name": "tzdata", + "version": "2021e-0ubuntu0.20.04", + "licenses": [ + { + "license": { + "id": "ICU" + } + } + ], + "cpe": "cpe:2.3:a:tzdata:tzdata:2021e-0ubuntu0.20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/tzdata@2021e-0ubuntu0.20.04?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ubuntu-keyring@2020.02.11.4?arch=all&distro=ubuntu-20.04&package-id=6d2b18ebcbe1dab7", + "publisher": "Dimitri John Ledkov ", + "name": "ubuntu-keyring", + "version": "2020.02.11.4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:ubuntu-keyring:ubuntu-keyring:2020.02.11.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ubuntu-keyring@2020.02.11.4?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ucf@3.0038+nmu1?arch=all&distro=ubuntu-20.04&package-id=ab3b8cc8be7b5655", + "publisher": "Ubuntu Developers ", + "name": "ucf", + "version": "3.0038+nmu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ucf:ucf:3.0038\\+nmu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ucf@3.0038+nmu1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/util-linux@2.34-0.1ubuntu9.1?arch=amd64&distro=ubuntu-20.04&package-id=33e86bd94ef763b6", + "publisher": "Ubuntu Developers ", + "name": "util-linux", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:util-linux:util-linux:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/util-linux@2.34-0.1ubuntu9.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/wget@1.20.3-1ubuntu2?arch=amd64&distro=ubuntu-20.04&package-id=49aca49f7313affb", + "publisher": "Ubuntu Developers ", + "name": "wget", + "version": "1.20.3-1ubuntu2", + "licenses": [ + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:wget:wget:1.20.3-1ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/wget@1.20.3-1ubuntu2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/xdg-user-dirs@0.17-2ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=6c580aaac3aa6068", + "publisher": "Ubuntu Developers ", + "name": "xdg-user-dirs", + "version": "0.17-2ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:xdg-user-dirs:xdg-user-dirs:0.17-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/xdg-user-dirs@0.17-2ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/xz-utils@5.2.4-1ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=46271b3ba3de19b6", + "publisher": "Ubuntu Developers ", + "name": "xz-utils", + "version": "5.2.4-1ubuntu1", + "licenses": [ + { + "license": { + "name": "Autoconf" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "PD" + } + }, + { + "license": { + "name": "PD-debian" + } + }, + { + "license": { + "name": "config-h" + } + }, + { + "license": { + "name": "noderivs" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-nowarranty" + } + }, + { + "license": { + "name": "probably-PD" + } + } + ], + "cpe": "cpe:2.3:a:xz-utils:xz-utils:5.2.4-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/xz-utils@5.2.4-1ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/zlib1g@1:1.2.11.dfsg-2ubuntu1.2?arch=amd64&upstream=zlib&distro=ubuntu-20.04&package-id=65361fdd213cfcf7", + "publisher": "Ubuntu Developers ", + "name": "zlib1g", + "version": "1:1.2.11.dfsg-2ubuntu1.2", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib1g:zlib1g:1\\:1.2.11.dfsg-2ubuntu1.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/zlib1g@1:1.2.11.dfsg-2ubuntu1.2?arch=amd64&upstream=zlib&distro=ubuntu-20.04" + }, + { + "type": "operating-system", + "name": "ubuntu", + "version": "20.04", + "description": "Ubuntu 20.04.3 LTS", + "swid": { + "tagId": "ubuntu", + "name": "ubuntu", + "version": "20.04" + }, + "externalReferences": [ + { + "url": "https://bugs.launchpad.net/ubuntu/", + "type": "issue-tracker" + }, + { + "url": "https://www.ubuntu.com/", + "type": "website" + }, + { + "url": "https://help.ubuntu.com/", + "comment": "support", + "type": "other" + }, + { + "url": "https://www.ubuntu.com/legal/terms-and-policies/privacy-policy", + "comment": "privacyPolicy", + "type": "other" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/base-files@9.9+deb9u9?arch=amd64&distro=debian-9&package-id=2d7efeebcbea7f90", + "publisher": "Santiago Vila ", + "name": "base-files", + "version": "9.9+deb9u9", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:9.9\\+deb9u9:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/base-files@9.9+deb9u9?arch=amd64&distro=debian-9" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/netbase@5.4?arch=all&distro=debian-9&package-id=429157806067bf04", + "publisher": "Marco d'Itri ", + "name": "netbase", + "version": "5.4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:netbase:netbase:5.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/netbase@5.4?arch=all&distro=debian-9" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tzdata@2019a-0+deb9u1?arch=all&distro=debian-9&package-id=adaa0cfde73d8ecb", + "publisher": "GNU Libc Maintainers ", + "name": "tzdata", + "version": "2019a-0+deb9u1", + "cpe": "cpe:2.3:a:tzdata:tzdata:2019a-0\\+deb9u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tzdata@2019a-0+deb9u1?arch=all&distro=debian-9" + }, + { + "type": "operating-system", + "name": "debian", + "version": "9", + "description": "Distroless", + "swid": { + "tagId": "debian", + "name": "debian", + "version": "9" + }, + "externalReferences": [ + { + "url": "https://github.com/GoogleContainerTools/distroless/issues/new", + "type": "issue-tracker" + }, + { + "url": "https://github.com/GoogleContainerTools/distroless", + "type": "website" + }, + { + "url": "https://github.com/GoogleContainerTools/distroless/blob/master/README.md", + "comment": "support", + "type": "other" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:golang/./client?package-id=1a9799338f879587", + "name": "./client", + "purl": "pkg:golang/./client" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/base-files@9.9+deb9u13?arch=amd64&distro=debian-9&package-id=2deefa90829900bb", + "publisher": "Santiago Vila ", + "name": "base-files", + "version": "9.9+deb9u13", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:9.9\\+deb9u13:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/base-files@9.9+deb9u13?arch=amd64&distro=debian-9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=b2858f28f03c7bb7", + "name": "github.com/beorn7/perks", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/beorn7/perks@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/blang/semver@v3.5.0+incompatible?package-id=b7af6c53df612d68", + "name": "github.com/blang/semver", + "version": "v3.5.0+incompatible", + "cpe": "cpe:2.3:a:blang:semver:v3.5.0\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/blang/semver@v3.5.0+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.1.1?package-id=f610ec628a212653", + "name": "github.com/cespare/xxhash/v2", + "version": "v2.1.1", + "cpe": "cpe:2.3:a:cespare:xxhash\\/v2:v2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/container-storage-interface/spec@v1.2.0?package-id=84ca2a5f390f8b2", + "name": "github.com/container-storage-interface/spec", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:container-storage-interface:spec:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/container-storage-interface/spec@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1?package-id=35f5a9ecd69a9c2f", + "name": "github.com/davecgh/go-spew", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:davecgh:go-spew:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-logr/logr@v0.2.0?package-id=1fe57a955f918200", + "name": "github.com/go-logr/logr", + "version": "v0.2.0", + "cpe": "cpe:2.3:a:go-logr:logr:v0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-logr/logr@v0.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.1?package-id=7b351ccea9fbfde7", + "name": "github.com/gogo/protobuf", + "version": "v1.3.1", + "cpe": "cpe:2.3:a:gogo:protobuf:v1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/groupcache@v0.0.0-20191227052852-215e87163ea7?package-id=91e4c8d359060983", + "name": "github.com/golang/groupcache", + "version": "v0.0.0-20191227052852-215e87163ea7", + "cpe": "cpe:2.3:a:golang:groupcache:v0.0.0-20191227052852-215e87163ea7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20191227052852-215e87163ea7" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.4.2?package-id=3eed8eeebadc1b3f", + "name": "github.com/golang/protobuf", + "version": "v1.4.2", + "cpe": "cpe:2.3:a:golang:protobuf:v1.4.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.4.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.4.0?package-id=13fef5c3716335f4", + "name": "github.com/google/go-cmp", + "version": "v0.4.0", + "cpe": "cpe:2.3:a:google:go-cmp:v0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-cmp@v0.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/gofuzz@v1.1.0?package-id=bbe4819fc04c64f8", + "name": "github.com/google/gofuzz", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:google:gofuzz:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/gofuzz@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/googleapis/gnostic@v0.4.1?package-id=3a602c847d260e4d", + "name": "github.com/googleapis/gnostic", + "version": "v0.4.1", + "cpe": "cpe:2.3:a:googleapis:gnostic:v0.4.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/googleapis/gnostic@v0.4.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/hashicorp/golang-lru@v0.5.1?package-id=7f2ff30da8d70229", + "name": "github.com/hashicorp/golang-lru", + "version": "v0.5.1", + "cpe": "cpe:2.3:a:hashicorp:golang-lru:v0.5.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/golang-lru@v0.5.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.9?package-id=ec21a75baf165471", + "name": "github.com/imdario/mergo", + "version": "v0.3.9", + "cpe": "cpe:2.3:a:imdario:mergo:v0.3.9:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/imdario/mergo@v0.3.9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.10?package-id=aa3983286df5176c", + "name": "github.com/json-iterator/go", + "version": "v1.1.10", + "cpe": "cpe:2.3:a:json-iterator:go:v1.1.10:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/json-iterator/go@v1.1.10" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/kubernetes-csi/csi-lib-utils@v0.8.1?package-id=b87b48e1f4e983fe", + "name": "github.com/kubernetes-csi/csi-lib-utils", + "version": "v0.8.1", + "cpe": "cpe:2.3:a:kubernetes-csi:csi-lib-utils:v0.8.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/kubernetes-csi/csi-lib-utils@v0.8.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/kubernetes-csi/external-snapshotter/v3@(devel)?package-id=4eacb460807923af", + "name": "github.com/kubernetes-csi/external-snapshotter/v3", + "version": "(devel)", + "cpe": "cpe:2.3:a:kubernetes-csi:external-snapshotter\\/v3:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/kubernetes-csi/external-snapshotter/v3@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.2-0.20181231171920-c182affec369?package-id=30e2f347a5fe9b35", + "name": "github.com/matttproud/golang_protobuf_extensions", + "version": "v1.0.2-0.20181231171920-c182affec369", + "cpe": "cpe:2.3:a:matttproud:golang-protobuf-extensions:v1.0.2-0.20181231171920-c182affec369:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.2-0.20181231171920-c182affec369" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=6a3bfbbbdac0acca", + "name": "github.com/modern-go/concurrent", + "version": "v0.0.0-20180306012644-bacd9c7ef1dd", + "cpe": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.1?package-id=c30b3c59e7931eee", + "name": "github.com/modern-go/reflect2", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:modern-go:reflect2:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/client_golang@v1.7.1?package-id=bfb05c7f3d9df0bb", + "name": "github.com/prometheus/client_golang", + "version": "v1.7.1", + "cpe": "cpe:2.3:a:prometheus:client-golang:v1.7.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_golang@v1.7.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/client_model@v0.2.0?package-id=c960161c489d87f5", + "name": "github.com/prometheus/client_model", + "version": "v0.2.0", + "cpe": "cpe:2.3:a:prometheus:client-model:v0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_model@v0.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/common@v0.10.0?package-id=1bdfd07efad5dced", + "name": "github.com/prometheus/common", + "version": "v0.10.0", + "cpe": "cpe:2.3:a:prometheus:common:v0.10.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/common@v0.10.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/procfs@v0.1.3?package-id=5bb7250a55c4c829", + "name": "github.com/prometheus/procfs", + "version": "v0.1.3", + "cpe": "cpe:2.3:a:prometheus:procfs:v0.1.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/procfs@v0.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5?package-id=8d92e006437cc6d1", + "name": "github.com/spf13/pflag", + "version": "v1.0.5", + "cpe": "cpe:2.3:a:spf13:pflag:v1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9?package-id=9a88f02496ed8716", + "name": "golang.org/x/crypto", + "version": "v0.0.0-20200622213623-75b288015ac9", + "cpe": "cpe:2.3:a:golang:x\\/crypto:v0.0.0-20200622213623-75b288015ac9:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/net@v0.0.0-20200707034311-ab3426394381?package-id=b9110b0c96b7de83", + "name": "golang.org/x/net", + "version": "v0.0.0-20200707034311-ab3426394381", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.0.0-20200707034311-ab3426394381:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.0.0-20200707034311-ab3426394381" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d?package-id=c814ec5a6f8389e0", + "name": "golang.org/x/oauth2", + "version": "v0.0.0-20200107190931-bf48bf16ab8d", + "cpe": "cpe:2.3:a:golang:x\\/oauth2:v0.0.0-20200107190931-bf48bf16ab8d:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20200622214017-ed371f2e16b4?package-id=947af2e93d8d5380", + "name": "golang.org/x/sys", + "version": "v0.0.0-20200622214017-ed371f2e16b4", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20200622214017-ed371f2e16b4:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20200622214017-ed371f2e16b4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/text@v0.3.3?package-id=983646a501312145", + "name": "golang.org/x/text", + "version": "v0.3.3", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.3.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20200416051211-89c76fbcd5d1?package-id=159ffb19b6a7c39f", + "name": "golang.org/x/time", + "version": "v0.0.0-20200416051211-89c76fbcd5d1", + "cpe": "cpe:2.3:a:golang:x\\/time:v0.0.0-20200416051211-89c76fbcd5d1:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/time@v0.0.0-20200416051211-89c76fbcd5d1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20200526211855-cb27e3aa2013?package-id=2ca1f7d8897ff89d", + "name": "google.golang.org/genproto", + "version": "v0.0.0-20200526211855-cb27e3aa2013", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20200526211855-cb27e3aa2013:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20200526211855-cb27e3aa2013" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.29.0?package-id=c056dd5e6dd61e24", + "name": "google.golang.org/grpc", + "version": "v1.29.0", + "cpe": "cpe:2.3:a:google:grpc:v1.29.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.29.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.24.0?package-id=b12c716051550c26", + "name": "google.golang.org/protobuf", + "version": "v1.24.0", + "cpe": "cpe:2.3:a:google:protobuf:v1.24.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/protobuf@v1.24.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=7faf37cb8fe7c575", + "name": "gopkg.in/inf.v0", + "version": "v0.9.1", + "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/yaml.v2@v2.2.8?package-id=67f9602c247f5d01", + "name": "gopkg.in/yaml.v2", + "version": "v2.2.8", + "purl": "pkg:golang/gopkg.in/yaml.v2@v2.2.8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/api@v0.19.0?package-id=99bab8867fc3f21", + "name": "k8s.io/api", + "version": "v0.19.0", + "purl": "pkg:golang/k8s.io/api@v0.19.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.19.0?package-id=5739f00b997b4678", + "name": "k8s.io/apimachinery", + "version": "v0.19.0", + "purl": "pkg:golang/k8s.io/apimachinery@v0.19.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/client-go@v0.19.0?package-id=91a5dbc2f6e0ec33", + "name": "k8s.io/client-go", + "version": "v0.19.0", + "purl": "pkg:golang/k8s.io/client-go@v0.19.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/component-base@v0.19.0?package-id=ee645c8af60815a4", + "name": "k8s.io/component-base", + "version": "v0.19.0", + "purl": "pkg:golang/k8s.io/component-base@v0.19.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/klog@v1.0.0?package-id=a0d734f43b3aeee0", + "name": "k8s.io/klog", + "version": "v1.0.0", + "purl": "pkg:golang/k8s.io/klog@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/klog/v2@v2.2.0?package-id=475fbe406f22b864", + "name": "k8s.io/klog/v2", + "version": "v2.2.0", + "cpe": "cpe:2.3:a:klog:v2:v2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/k8s.io/klog/v2@v2.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20200805222855-6aeccd4b50c6?package-id=7099707dd2dbcdac", + "name": "k8s.io/kube-openapi", + "version": "v0.0.0-20200805222855-6aeccd4b50c6", + "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20200805222855-6aeccd4b50c6" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20200729134348-d5654de09c73?package-id=c95e28937c0bf59b", + "name": "k8s.io/utils", + "version": "v0.0.0-20200729134348-d5654de09c73", + "purl": "pkg:golang/k8s.io/utils@v0.0.0-20200729134348-d5654de09c73" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/netbase@5.4?arch=all&distro=debian-9&package-id=429157806067bf04", + "publisher": "Marco d'Itri ", + "name": "netbase", + "version": "5.4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:netbase:netbase:5.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/netbase@5.4?arch=all&distro=debian-9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.0.1?package-id=c52a6068d608c605", + "name": "sigs.k8s.io/structured-merge-diff/v4", + "version": "v4.0.1", + "cpe": "cpe:2.3:a:structured-merge-diff:v4:v4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.2.0?package-id=15898ee67729bf04", + "name": "sigs.k8s.io/yaml", + "version": "v1.2.0", + "purl": "pkg:golang/sigs.k8s.io/yaml@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tzdata@2020d-0+deb9u1?arch=all&distro=debian-9&package-id=90a2fa7ec9eec4d9", + "publisher": "GNU Libc Maintainers ", + "name": "tzdata", + "version": "2020d-0+deb9u1", + "cpe": "cpe:2.3:a:tzdata:tzdata:2020d-0\\+deb9u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tzdata@2020d-0+deb9u1?arch=all&distro=debian-9" + }, + { + "type": "operating-system", + "name": "debian", + "version": "9", + "description": "Distroless", + "swid": { + "tagId": "debian", + "name": "debian", + "version": "9" + }, + "externalReferences": [ + { + "url": "https://github.com/GoogleContainerTools/distroless/issues/new", + "type": "issue-tracker" + }, + { + "url": "https://github.com/GoogleContainerTools/distroless", + "type": "website" + }, + { + "url": "https://github.com/GoogleContainerTools/distroless/blob/master/README.md", + "comment": "support", + "type": "other" + } + ] + }, + { + "type": "application", + "bom-ref": "5114fa9a1aa0021f", + "name": "busybox", + "version": "1.31.1", + "cpe": "cpe:2.3:a:busybox:busybox:1.31.1:*:*:*:*:*:*:*" + }, + { + "type": "operating-system", + "name": "busybox", + "version": "1.31.1", + "description": "BusyBox v1.31.1", + "swid": { + "tagId": "busybox", + "name": "busybox", + "version": "1.31.1" + } + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/adduser@3.118ubuntu2?arch=all&distro=ubuntu-20.04&package-id=69d1980477020fa3", + "publisher": "Ubuntu Core Developers ", + "name": "adduser", + "version": "3.118ubuntu2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:adduser:adduser:3.118ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/adduser@3.118ubuntu2?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/apt@2.0.6?arch=amd64&distro=ubuntu-20.04&package-id=55988ea1c6f336e3", + "publisher": "Ubuntu Developers ", + "name": "apt", + "version": "2.0.6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:apt:apt:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/apt@2.0.6?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/base-files@11ubuntu5.4?arch=amd64&distro=ubuntu-20.04&package-id=63c89c28c512e1db", + "publisher": "Ubuntu Developers ", + "name": "base-files", + "version": "11ubuntu5.4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:11ubuntu5.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/base-files@11ubuntu5.4?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/base-passwd@3.5.47?arch=amd64&distro=ubuntu-20.04&package-id=8b6e494dac6dab09", + "publisher": "Colin Watson ", + "name": "base-passwd", + "version": "3.5.47", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "PD" + } + } + ], + "cpe": "cpe:2.3:a:base-passwd:base-passwd:3.5.47:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/base-passwd@3.5.47?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/bash@5.0-6ubuntu1.1?arch=amd64&distro=ubuntu-20.04&package-id=e774a3e87113196b", + "publisher": "Ubuntu Developers ", + "name": "bash", + "version": "5.0-6ubuntu1.1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:bash:bash:5.0-6ubuntu1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/bash@5.0-6ubuntu1.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/bsdutils@1:2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux%402.34-0.1ubuntu9.1&distro=ubuntu-20.04&package-id=20018d8de777eda9", + "publisher": "Ubuntu Developers ", + "name": "bsdutils", + "version": "1:2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:bsdutils:bsdutils:1\\:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/bsdutils@1:2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux%402.34-0.1ubuntu9.1&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/bzip2@1.0.8-2?arch=amd64&distro=ubuntu-20.04&package-id=97dab883cac4c956", + "publisher": "Ubuntu Developers ", + "name": "bzip2", + "version": "1.0.8-2", + "licenses": [ + { + "license": { + "name": "BSD-variant" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:bzip2:bzip2:1.0.8-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/bzip2@1.0.8-2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ca-certificates@20210119~20.04.1?arch=all&distro=ubuntu-20.04&package-id=b34020e11d6f8983", + "publisher": "Ubuntu Developers ", + "name": "ca-certificates", + "version": "20210119~20.04.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20210119\\~20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ca-certificates@20210119~20.04.1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/coreutils@8.30-3ubuntu2?arch=amd64&distro=ubuntu-20.04&package-id=f77283ee51e117fa", + "publisher": "Ubuntu Developers ", + "name": "coreutils", + "version": "8.30-3ubuntu2", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:coreutils:coreutils:8.30-3ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/coreutils@8.30-3ubuntu2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/curl@7.68.0-1ubuntu2.6?arch=amd64&distro=ubuntu-20.04&package-id=123513dd4ae6c6b7", + "publisher": "Ubuntu Developers ", + "name": "curl", + "version": "7.68.0-1ubuntu2.6", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:curl:curl:7.68.0-1ubuntu2.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/curl@7.68.0-1ubuntu2.6?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/dash@0.5.10.2-6?arch=amd64&distro=ubuntu-20.04&package-id=fa0f613df8411b7", + "publisher": "Ubuntu Developers ", + "name": "dash", + "version": "0.5.10.2-6", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:dash:dash:0.5.10.2-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/dash@0.5.10.2-6?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/debconf@1.5.73?arch=all&distro=ubuntu-20.04&package-id=128eb6066f5ec19c", + "publisher": "Ubuntu Developers ", + "name": "debconf", + "version": "1.5.73", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:debconf:debconf:1.5.73:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/debconf@1.5.73?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/debianutils@4.9.1?arch=amd64&distro=ubuntu-20.04&package-id=328b1094024bda26", + "publisher": "Ubuntu Developers ", + "name": "debianutils", + "version": "4.9.1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:debianutils:debianutils:4.9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/debianutils@4.9.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/diffutils@1:3.7-3?arch=amd64&distro=ubuntu-20.04&package-id=d21aefcaf9c9c9b6", + "publisher": "Ubuntu Developers ", + "name": "diffutils", + "version": "1:3.7-3", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:diffutils:diffutils:1\\:3.7-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/diffutils@1:3.7-3?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/dmsetup@2:1.02.167-1ubuntu1?arch=amd64&upstream=lvm2%402.03.07-1ubuntu1&distro=ubuntu-20.04&package-id=c0d6316be2747294", + "publisher": "Ubuntu Developers ", + "name": "dmsetup", + "version": "2:1.02.167-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:dmsetup:dmsetup:2\\:1.02.167-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/dmsetup@2:1.02.167-1ubuntu1?arch=amd64&upstream=lvm2%402.03.07-1ubuntu1&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/dpkg@1.19.7ubuntu3?arch=amd64&distro=ubuntu-20.04&package-id=e28aea5c134a7f8", + "publisher": "Ubuntu Developers ", + "name": "dpkg", + "version": "1.19.7ubuntu3", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain-md5" + } + }, + { + "license": { + "name": "public-domain-s-s-d" + } + } + ], + "cpe": "cpe:2.3:a:dpkg:dpkg:1.19.7ubuntu3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/dpkg@1.19.7ubuntu3?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/e2fsprogs@1.45.5-2ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=6a037357f3ebf47a", + "publisher": "Ubuntu Developers ", + "name": "e2fsprogs", + "version": "1.45.5-2ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:e2fsprogs:e2fsprogs:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/e2fsprogs@1.45.5-2ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/fdisk@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=a57a5f37c7970fe9", + "publisher": "Ubuntu Developers ", + "name": "fdisk", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:fdisk:fdisk:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/fdisk@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/file@1:5.38-4?arch=amd64&distro=ubuntu-20.04&package-id=e7f183ce6dc05cfb", + "publisher": "Ubuntu Developers ", + "name": "file", + "version": "1:5.38-4", + "licenses": [ + { + "license": { + "name": "BSD-2-Clause-alike" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-Clause-regents" + } + }, + { + "license": { + "name": "MIT-Old-Style-with-legal-disclaimer-2" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:file:file:1\\:5.38-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/file@1:5.38-4?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/findutils@4.7.0-1ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=103a5999463b7e08", + "publisher": "Ubuntu Developers ", + "name": "findutils", + "version": "4.7.0-1ubuntu1", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:findutils:findutils:4.7.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/findutils@4.7.0-1ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/fuse@2.9.9-3?arch=amd64&distro=ubuntu-20.04&package-id=3862cd07205c94e", + "publisher": "Ubuntu Developers ", + "name": "fuse", + "version": "2.9.9-3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:fuse:fuse:2.9.9-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/fuse@2.9.9-3?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/gcc-10-base@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04&package-id=a268d6ad2986f239", + "publisher": "Ubuntu Core developers ", + "name": "gcc-10-base", + "version": "10.3.0-1ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:gcc-10-base:gcc-10-base:10.3.0-1ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/gcc-10-base@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/roaringbitmap/roaring@v0.4.18?package-id=34176267a645222e", + "name": "github.com/RoaringBitmap/roaring", + "version": "v0.4.18", + "cpe": "cpe:2.3:a:RoaringBitmap:roaring:v0.4.18:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/RoaringBitmap/roaring@v0.4.18" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go@v1.25.16?package-id=d8b03b75a855c026", + "name": "github.com/aws/aws-sdk-go", + "version": "v1.25.16", + "cpe": "cpe:2.3:a:aws:aws-sdk-go:v1.25.16:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go@v1.25.16" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/c9s/goprocinfo@v0.0.0-20190309065803-0b2ad9ac246b?package-id=d078bfa34ba3c91a", + "name": "github.com/c9s/goprocinfo", + "version": "v0.0.0-20190309065803-0b2ad9ac246b", + "cpe": "cpe:2.3:a:c9s:goprocinfo:v0.0.0-20190309065803-0b2ad9ac246b:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/c9s/goprocinfo@v0.0.0-20190309065803-0b2ad9ac246b" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0-20190314233015-f79a8a8ca69d?package-id=6b636d5ece874db4", + "name": "github.com/cpuguy83/go-md2man/v2", + "version": "v2.0.0-20190314233015-f79a8a8ca69d", + "cpe": "cpe:2.3:a:cpuguy83:go-md2man\\/v2:v2.0.0-20190314233015-f79a8a8ca69d:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0-20190314233015-f79a8a8ca69d" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0-20190314233015-f79a8a8ca69d?package-id=f1b1114a949891bc", + "name": "github.com/cpuguy83/go-md2man/v2", + "version": "v2.0.0-20190314233015-f79a8a8ca69d", + "cpe": "cpe:2.3:a:cpuguy83:go-md2man\\/v2:v2.0.0-20190314233015-f79a8a8ca69d:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0-20190314233015-f79a8a8ca69d" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/docker/go-units@v0.3.3?package-id=71db3d9c141ba902", + "name": "github.com/docker/go-units", + "version": "v0.3.3", + "cpe": "cpe:2.3:a:docker:go-units:v0.3.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/go-units@v0.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/glycerine/go-unsnap-stream@v0.0.0-20181221182339-f9677308dec2?package-id=56d8074cf7177f91", + "name": "github.com/glycerine/go-unsnap-stream", + "version": "v0.0.0-20181221182339-f9677308dec2", + "cpe": "cpe:2.3:a:glycerine:go-unsnap-stream:v0.0.0-20181221182339-f9677308dec2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/glycerine/go-unsnap-stream@v0.0.0-20181221182339-f9677308dec2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.3.2?package-id=6429a79a5d94117", + "name": "github.com/golang/protobuf", + "version": "v1.3.2", + "cpe": "cpe:2.3:a:golang:protobuf:v1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.3.3-0.20190920234318-1680a479a2cf?package-id=236d77cb45e8b164", + "name": "github.com/golang/protobuf", + "version": "v1.3.3-0.20190920234318-1680a479a2cf", + "cpe": "cpe:2.3:a:golang:protobuf:v1.3.3-0.20190920234318-1680a479a2cf:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.3.3-0.20190920234318-1680a479a2cf" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.3.3-0.20190920234318-1680a479a2cf?package-id=f55bc79d4a937d1a", + "name": "github.com/golang/protobuf", + "version": "v1.3.3-0.20190920234318-1680a479a2cf", + "cpe": "cpe:2.3:a:golang:protobuf:v1.3.3-0.20190920234318-1680a479a2cf:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.3.3-0.20190920234318-1680a479a2cf" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/snappy@v0.0.1?package-id=5837435a06653b52", + "name": "github.com/golang/snappy", + "version": "v0.0.1", + "cpe": "cpe:2.3:a:golang:snappy:v0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/snappy@v0.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gorilla/context@v1.1.1?package-id=8c0080399b7036dc", + "name": "github.com/gorilla/context", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:gorilla:context:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gorilla/context@v1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gorilla/handlers@v1.4.2?package-id=8027b79e27a696c1", + "name": "github.com/gorilla/handlers", + "version": "v1.4.2", + "cpe": "cpe:2.3:a:gorilla:handlers:v1.4.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gorilla/handlers@v1.4.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gorilla/mux@v1.7.3?package-id=dffb849d7867a4be", + "name": "github.com/gorilla/mux", + "version": "v1.7.3", + "cpe": "cpe:2.3:a:gorilla:mux:v1.7.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gorilla/mux@v1.7.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gorilla/websocket@v1.4.2?package-id=c357969583400ea6", + "name": "github.com/gorilla/websocket", + "version": "v1.4.2", + "cpe": "cpe:2.3:a:gorilla:websocket:v1.4.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gorilla/websocket@v1.4.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/grpc-ecosystem/grpc-health-probe@(devel)?package-id=2ee2eb8d871be1ce", + "name": "github.com/grpc-ecosystem/grpc-health-probe", + "version": "(devel)", + "cpe": "cpe:2.3:a:grpc-ecosystem:grpc-health-probe:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/grpc-ecosystem/grpc-health-probe@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/honestbee/jobq@v1.0.2?package-id=a8fd991182d37362", + "name": "github.com/honestbee/jobq", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:honestbee:jobq:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/honestbee/jobq@v1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/jmespath/go-jmespath@v0.0.0-20180206201540-c2b33e8439af?package-id=bd9ecaabe79058f9", + "name": "github.com/jmespath/go-jmespath", + "version": "v0.0.0-20180206201540-c2b33e8439af", + "cpe": "cpe:2.3:a:jmespath:go-jmespath:v0.0.0-20180206201540-c2b33e8439af:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jmespath/go-jmespath@v0.0.0-20180206201540-c2b33e8439af" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/longhorn/backupstore@v0.0.0-20210817080617-8ea3843e6b0d?package-id=86bad047f49929a5", + "name": "github.com/longhorn/backupstore", + "version": "v0.0.0-20210817080617-8ea3843e6b0d", + "cpe": "cpe:2.3:a:longhorn:backupstore:v0.0.0-20210817080617-8ea3843e6b0d:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/longhorn/backupstore@v0.0.0-20210817080617-8ea3843e6b0d" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/longhorn/go-iscsi-helper@v0.0.0-20210330030558-49a327fb024e?package-id=d30e6df72b1294ec", + "name": "github.com/longhorn/go-iscsi-helper", + "version": "v0.0.0-20210330030558-49a327fb024e", + "cpe": "cpe:2.3:a:longhorn:go-iscsi-helper:v0.0.0-20210330030558-49a327fb024e:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/longhorn/go-iscsi-helper@v0.0.0-20210330030558-49a327fb024e" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/longhorn/longhorn-engine@(devel)?package-id=8a83891345529d93", + "name": "github.com/longhorn/longhorn-engine", + "version": "(devel)", + "cpe": "cpe:2.3:a:longhorn:longhorn-engine:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/longhorn/longhorn-engine@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/longhorn/longhorn-instance-manager@(devel)?package-id=2a1446182b15b62f", + "name": "github.com/longhorn/longhorn-instance-manager", + "version": "(devel)", + "cpe": "cpe:2.3:a:longhorn:longhorn-instance-manager:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/longhorn/longhorn-instance-manager@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/longhorn/nsfilelock@v0.0.0-20200723175406-fa7c83ad0003?package-id=d1f54668db13d3da", + "name": "github.com/longhorn/nsfilelock", + "version": "v0.0.0-20200723175406-fa7c83ad0003", + "cpe": "cpe:2.3:a:longhorn:nsfilelock:v0.0.0-20200723175406-fa7c83ad0003:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/longhorn/nsfilelock@v0.0.0-20200723175406-fa7c83ad0003" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/longhorn/sparse-tools@v0.0.0-20210729195155-a0fb4226a960?package-id=4172598941363e6b", + "name": "github.com/longhorn/sparse-tools", + "version": "v0.0.0-20210729195155-a0fb4226a960", + "cpe": "cpe:2.3:a:longhorn:sparse-tools:v0.0.0-20210729195155-a0fb4226a960:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/longhorn/sparse-tools@v0.0.0-20210729195155-a0fb4226a960" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.5-0.20181218000649-703b5e6b11ae?package-id=8621cb30c3e0fd25", + "name": "github.com/mattn/go-runewidth", + "version": "v0.0.5-0.20181218000649-703b5e6b11ae", + "cpe": "cpe:2.3:a:mattn:go-runewidth:v0.0.5-0.20181218000649-703b5e6b11ae:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.5-0.20181218000649-703b5e6b11ae" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/moby/moby@v1.11.1?package-id=e5c9272a3028e1b2", + "name": "github.com/moby/moby", + "version": "v1.11.1", + "cpe": "cpe:2.3:a:moby:moby:v1.11.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/moby/moby@v1.11.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/philhofer/fwd@v1.0.0?package-id=3f3e822e0cc35abb", + "name": "github.com/philhofer/fwd", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:philhofer:fwd:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/philhofer/fwd@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/pkg/errors@v0.8.1?package-id=2a76c1ffd3374736", + "name": "github.com/pkg/errors", + "version": "v0.8.1", + "cpe": "cpe:2.3:a:pkg:errors:v0.8.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pkg/errors@v0.8.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=9b51cb83ae36e997", + "name": "github.com/pkg/errors", + "version": "v0.9.1", + "cpe": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pkg/errors@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/rancher/go-fibmap@v0.0.0-20160418233256-5fc9f8c1ed47?package-id=5b75fb379c8383ee", + "name": "github.com/rancher/go-fibmap", + "version": "v0.0.0-20160418233256-5fc9f8c1ed47", + "cpe": "cpe:2.3:a:rancher:go-fibmap:v0.0.0-20160418233256-5fc9f8c1ed47:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rancher/go-fibmap@v0.0.0-20160418233256-5fc9f8c1ed47" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/rancher/go-rancher@v0.1.1-0.20190307222549-9756097e5e4c?package-id=ea4e2adfba698990", + "name": "github.com/rancher/go-rancher", + "version": "v0.1.1-0.20190307222549-9756097e5e4c", + "cpe": "cpe:2.3:a:rancher:go-rancher:v0.1.1-0.20190307222549-9756097e5e4c:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rancher/go-rancher@v0.1.1-0.20190307222549-9756097e5e4c" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/russross/blackfriday/v2@v2.0.1?package-id=74596aa2ccd0104b", + "name": "github.com/russross/blackfriday/v2", + "version": "v2.0.1", + "cpe": "cpe:2.3:a:russross:blackfriday\\/v2:v2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/russross/blackfriday/v2@v2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/russross/blackfriday/v2@v2.0.1?package-id=a68eb65cb6acb763", + "name": "github.com/russross/blackfriday/v2", + "version": "v2.0.1", + "cpe": "cpe:2.3:a:russross:blackfriday\\/v2:v2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/russross/blackfriday/v2@v2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/satori/go.uuid@v1.2.0?package-id=f7e06593f8f8037", + "name": "github.com/satori/go.uuid", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:satori:go.uuid:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/satori/go.uuid@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/satori/go.uuid@v1.2.0?package-id=27fe1b1a158c8f7a", + "name": "github.com/satori/go.uuid", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:satori:go.uuid:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/satori/go.uuid@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/shurcool/sanitized_anchor_name@v1.0.0?package-id=edcf26537c93fd2f", + "name": "github.com/shurcooL/sanitized_anchor_name", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:shurcooL:sanitized-anchor-name:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/shurcooL/sanitized_anchor_name@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/shurcool/sanitized_anchor_name@v1.0.0?package-id=5c742bc94a35bb3", + "name": "github.com/shurcooL/sanitized_anchor_name", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:shurcooL:sanitized-anchor-name:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/shurcooL/sanitized_anchor_name@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.4.1?package-id=4fff64256857776", + "name": "github.com/sirupsen/logrus", + "version": "v1.4.1", + "cpe": "cpe:2.3:a:sirupsen:logrus:v1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/sirupsen/logrus@v1.4.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.8.1?package-id=3005d75bd9444515", + "name": "github.com/sirupsen/logrus", + "version": "v1.8.1", + "cpe": "cpe:2.3:a:sirupsen:logrus:v1.8.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/sirupsen/logrus@v1.8.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/tinylib/msgp@v1.1.1-0.20190612170807-0573788bc2a8?package-id=30ee6e6d1128a1ec", + "name": "github.com/tinylib/msgp", + "version": "v1.1.1-0.20190612170807-0573788bc2a8", + "cpe": "cpe:2.3:a:tinylib:msgp:v1.1.1-0.20190612170807-0573788bc2a8:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/tinylib/msgp@v1.1.1-0.20190612170807-0573788bc2a8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/urfave/cli@v1.22.1?package-id=a60136e79ed3ff0a", + "name": "github.com/urfave/cli", + "version": "v1.22.1", + "cpe": "cpe:2.3:a:urfave:cli:v1.22.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/urfave/cli@v1.22.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/urfave/cli@v1.22.1?package-id=13001d945ae58cae", + "name": "github.com/urfave/cli", + "version": "v1.22.1", + "cpe": "cpe:2.3:a:urfave:cli:v1.22.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/urfave/cli@v1.22.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/net@v0.0.0-20190522155817-f3200d17e092?package-id=6692e3bf85b5516d", + "name": "golang.org/x/net", + "version": "v0.0.0-20190522155817-f3200d17e092", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.0.0-20190522155817-f3200d17e092:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.0.0-20190522155817-f3200d17e092" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/net@v0.0.0-20190522155817-f3200d17e092?package-id=97b953d6daf049e8", + "name": "golang.org/x/net", + "version": "v0.0.0-20190522155817-f3200d17e092", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.0.0-20190522155817-f3200d17e092:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.0.0-20190522155817-f3200d17e092" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/net@v0.0.0-20191021144547-ec77196f6094?package-id=dba26920fcd941ca", + "name": "golang.org/x/net", + "version": "v0.0.0-20191021144547-ec77196f6094", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.0.0-20191021144547-ec77196f6094:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.0.0-20191021144547-ec77196f6094" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20190524152521-dbbf3f1254d4?package-id=7943c2f7e89d796c", + "name": "golang.org/x/sys", + "version": "v0.0.0-20190524152521-dbbf3f1254d4", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20190524152521-dbbf3f1254d4:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20190524152521-dbbf3f1254d4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20191020212454-3e7259c5e7c2?package-id=11cab605143eb4a2", + "name": "golang.org/x/sys", + "version": "v0.0.0-20191020212454-3e7259c5e7c2", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20191020212454-3e7259c5e7c2:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20191020212454-3e7259c5e7c2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20210630005230-0f9fa26af87c?package-id=fa1dad70a13f8995", + "name": "golang.org/x/sys", + "version": "v0.0.0-20210630005230-0f9fa26af87c", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20210630005230-0f9fa26af87c:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20210630005230-0f9fa26af87c" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/text@v0.3.2?package-id=79c19ce62be197dd", + "name": "golang.org/x/text", + "version": "v0.3.2", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.3.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/text@v0.3.2?package-id=26bc6155d2292b0f", + "name": "golang.org/x/text", + "version": "v0.3.2", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.3.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/text@v0.3.3?package-id=6ea8fbd4b018a5a0", + "name": "golang.org/x/text", + "version": "v0.3.3", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.3.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20180817151627-c66870c02cf8?package-id=adf6f54509b5bc12", + "name": "google.golang.org/genproto", + "version": "v0.0.0-20180817151627-c66870c02cf8", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20180817151627-c66870c02cf8:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20180817151627-c66870c02cf8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20180817151627-c66870c02cf8?package-id=c0d6544f847ebd01", + "name": "google.golang.org/genproto", + "version": "v0.0.0-20180817151627-c66870c02cf8", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20180817151627-c66870c02cf8:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20180817151627-c66870c02cf8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20191009194640-548a555dbc03?package-id=9631f02c5c120cff", + "name": "google.golang.org/genproto", + "version": "v0.0.0-20191009194640-548a555dbc03", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20191009194640-548a555dbc03:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20191009194640-548a555dbc03" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.21.0?package-id=1d354efe3ed788f2", + "name": "google.golang.org/grpc", + "version": "v1.21.0", + "cpe": "cpe:2.3:a:google:grpc:v1.21.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.21.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.21.0?package-id=b9f15a7ff3d6fda6", + "name": "google.golang.org/grpc", + "version": "v1.21.0", + "cpe": "cpe:2.3:a:google:grpc:v1.21.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.21.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.24.0?package-id=54401e81e1c7ca15", + "name": "google.golang.org/grpc", + "version": "v1.24.0", + "cpe": "cpe:2.3:a:google:grpc:v1.24.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.24.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/cheggaaa/pb.v2@v2.0.0-20190301131520-f907f6f5dd81?package-id=42d84823e9eebfc4", + "name": "gopkg.in/cheggaaa/pb.v2", + "version": "v2.0.0-20190301131520-f907f6f5dd81", + "purl": "pkg:golang/gopkg.in/cheggaaa/pb.v2@v2.0.0-20190301131520-f907f6f5dd81" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/gpgv@2.2.19-3ubuntu2.1?arch=amd64&upstream=gnupg2&distro=ubuntu-20.04&package-id=b3a56223224b45d2", + "publisher": "Ubuntu Developers ", + "name": "gpgv", + "version": "2.2.19-3ubuntu2.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + }, + { + "license": { + "name": "TinySCHEME" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:gpgv:gpgv:2.2.19-3ubuntu2.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/gpgv@2.2.19-3ubuntu2.1?arch=amd64&upstream=gnupg2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/grep@3.4-1?arch=amd64&distro=ubuntu-20.04&package-id=e7af9af4b90473f", + "publisher": "Ubuntu Developers ", + "name": "grep", + "version": "3.4-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:grep:grep:3.4-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/grep@3.4-1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/gzip@1.10-0ubuntu4?arch=amd64&distro=ubuntu-20.04&package-id=a9696917d3b9f9fc", + "publisher": "Ubuntu Developers ", + "name": "gzip", + "version": "1.10-0ubuntu4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:gzip:gzip:1.10-0ubuntu4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/gzip@1.10-0ubuntu4?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/hostname@3.23?arch=amd64&distro=ubuntu-20.04&package-id=263dae70cc8e6a4f", + "publisher": "Ubuntu Developers ", + "name": "hostname", + "version": "3.23", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:hostname:hostname:3.23:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/hostname@3.23?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ibverbs-providers@28.0-1ubuntu1?arch=amd64&upstream=rdma-core&distro=ubuntu-20.04&package-id=8e9d2de3c937ce3c", + "publisher": "Ubuntu Developers ", + "name": "ibverbs-providers", + "version": "28.0-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-MIT" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "id": "CPL-1.0" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ibverbs-providers:ibverbs-providers:28.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ibverbs-providers@28.0-1ubuntu1?arch=amd64&upstream=rdma-core&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/init-system-helpers@1.57?arch=all&distro=ubuntu-20.04&package-id=b0e335d96f12154d", + "publisher": "Ubuntu Developers ", + "name": "init-system-helpers", + "version": "1.57", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:init-system-helpers:init-system-helpers:1.57:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/init-system-helpers@1.57?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/iperf@2.0.13+dfsg1-1build1?arch=amd64&distro=ubuntu-20.04&package-id=52f5841ee19da566", + "publisher": "Ubuntu Developers ", + "name": "iperf", + "version": "2.0.13+dfsg1-1build1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "FSF-something" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-2-WithACException" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPL-3-WithACException" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:iperf:iperf:2.0.13\\+dfsg1-1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/iperf@2.0.13+dfsg1-1build1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/iproute2@5.5.0-1ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=f4afda4dc550367c", + "publisher": "Ubuntu Developers ", + "name": "iproute2", + "version": "5.5.0-1ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:iproute2:iproute2:5.5.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/iproute2@5.5.0-1ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/iputils-ping@3:20190709-3?arch=amd64&upstream=iputils&distro=ubuntu-20.04&package-id=83f284daebd0969f", + "publisher": "Ubuntu Developers ", + "name": "iputils-ping", + "version": "3:20190709-3", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:iputils-ping:iputils-ping:3\\:20190709-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/iputils-ping@3:20190709-3?arch=amd64&upstream=iputils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/keyutils@1.6-6ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=a61b8b47cf58815b", + "publisher": "Ubuntu Developers ", + "name": "keyutils", + "version": "1.6-6ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:keyutils:keyutils:1.6-6ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/keyutils@1.6-6ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/kmod@27-1ubuntu2?arch=amd64&distro=ubuntu-20.04&package-id=e1280bc47493e972", + "publisher": "Ubuntu Developers ", + "name": "kmod", + "version": "27-1ubuntu2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:kmod:kmod:27-1ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/kmod@27-1ubuntu2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/krb5-locales@1.17-6ubuntu4.1?arch=all&upstream=krb5&distro=ubuntu-20.04&package-id=87ea48972fb4adab", + "publisher": "Ubuntu Developers ", + "name": "krb5-locales", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:krb5-locales:krb5-locales:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/krb5-locales@1.17-6ubuntu4.1?arch=all&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libacl1@2.2.53-6?arch=amd64&upstream=acl&distro=ubuntu-20.04&package-id=5cec2c2009596050", + "publisher": "Ubuntu Developers ", + "name": "libacl1", + "version": "2.2.53-6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libacl1:libacl1:2.2.53-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libacl1@2.2.53-6?arch=amd64&upstream=acl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libaio1@0.3.112-5?arch=amd64&upstream=libaio&distro=ubuntu-20.04&package-id=f850a0a77c824c95", + "publisher": "Ubuntu Developers ", + "name": "libaio1", + "version": "0.3.112-5", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libaio1:libaio1:0.3.112-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libaio1@0.3.112-5?arch=amd64&upstream=libaio&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libapt-pkg6.0@2.0.6?arch=amd64&upstream=apt&distro=ubuntu-20.04&package-id=864e143f4c606a6c", + "publisher": "Ubuntu Developers ", + "name": "libapt-pkg6.0", + "version": "2.0.6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libapt-pkg6.0:libapt-pkg6.0:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libapt-pkg6.0@2.0.6?arch=amd64&upstream=apt&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libasn1-8-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=915f8cf154d1b7ce", + "publisher": "Ubuntu Developers ", + "name": "libasn1-8-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libasn1-8-heimdal:libasn1-8-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libasn1-8-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libatm1@1:2.5.1-4?arch=amd64&upstream=linux-atm&distro=ubuntu-20.04&package-id=38fbc3dda7412f50", + "publisher": "Ubuntu Developers ", + "name": "libatm1", + "version": "1:2.5.1-4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libatm1:libatm1:1\\:2.5.1-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libatm1@1:2.5.1-4?arch=amd64&upstream=linux-atm&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libattr1@1:2.4.48-5?arch=amd64&upstream=attr&distro=ubuntu-20.04&package-id=edf8dd62bd537bd5", + "publisher": "Ubuntu Developers ", + "name": "libattr1", + "version": "1:2.4.48-5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libattr1:libattr1:1\\:2.4.48-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libattr1@1:2.4.48-5?arch=amd64&upstream=attr&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libaudit-common@1:2.8.5-2ubuntu6?arch=all&upstream=audit&distro=ubuntu-20.04&package-id=4a463ab850d7c68c", + "publisher": "Ubuntu Developers ", + "name": "libaudit-common", + "version": "1:2.8.5-2ubuntu6", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit-common:libaudit-common:1\\:2.8.5-2ubuntu6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libaudit-common@1:2.8.5-2ubuntu6?arch=all&upstream=audit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libaudit1@1:2.8.5-2ubuntu6?arch=amd64&upstream=audit&distro=ubuntu-20.04&package-id=be9537deb8db616e", + "publisher": "Ubuntu Developers ", + "name": "libaudit1", + "version": "1:2.8.5-2ubuntu6", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit1:libaudit1:1\\:2.8.5-2ubuntu6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libaudit1@1:2.8.5-2ubuntu6?arch=amd64&upstream=audit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libblkid1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=e1d6f2e998332d7d", + "publisher": "Ubuntu Developers ", + "name": "libblkid1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libblkid1:libblkid1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libblkid1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libboost-iostreams1.71.0@1.71.0-6ubuntu6?arch=amd64&upstream=boost1.71&distro=ubuntu-20.04&package-id=c10288fd207d7ab9", + "publisher": "Ubuntu Developers ", + "name": "libboost-iostreams1.71.0", + "version": "1.71.0-6ubuntu6", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "BSD2" + } + }, + { + "license": { + "name": "BSD3_DEShaw" + } + }, + { + "license": { + "name": "BSD3_Google" + } + }, + { + "license": { + "id": "BSL-1.0" + } + }, + { + "license": { + "name": "Caramel" + } + }, + { + "license": { + "name": "CrystalClear" + } + }, + { + "license": { + "name": "HP" + } + }, + { + "license": { + "id": "Jam" + } + }, + { + "license": { + "name": "Kempf" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "NIST" + } + }, + { + "license": { + "name": "OldBoost1" + } + }, + { + "license": { + "name": "OldBoost2" + } + }, + { + "license": { + "name": "OldBoost3" + } + }, + { + "license": { + "name": "Python" + } + }, + { + "license": { + "name": "SGI" + } + }, + { + "license": { + "name": "Spencer" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libboost-iostreams1.71.0:libboost-iostreams1.71.0:1.71.0-6ubuntu6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libboost-iostreams1.71.0@1.71.0-6ubuntu6?arch=amd64&upstream=boost1.71&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libboost-thread1.71.0@1.71.0-6ubuntu6?arch=amd64&upstream=boost1.71&distro=ubuntu-20.04&package-id=7bdbd4008b339d07", + "publisher": "Ubuntu Developers ", + "name": "libboost-thread1.71.0", + "version": "1.71.0-6ubuntu6", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "BSD2" + } + }, + { + "license": { + "name": "BSD3_DEShaw" + } + }, + { + "license": { + "name": "BSD3_Google" + } + }, + { + "license": { + "id": "BSL-1.0" + } + }, + { + "license": { + "name": "Caramel" + } + }, + { + "license": { + "name": "CrystalClear" + } + }, + { + "license": { + "name": "HP" + } + }, + { + "license": { + "id": "Jam" + } + }, + { + "license": { + "name": "Kempf" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "NIST" + } + }, + { + "license": { + "name": "OldBoost1" + } + }, + { + "license": { + "name": "OldBoost2" + } + }, + { + "license": { + "name": "OldBoost3" + } + }, + { + "license": { + "name": "Python" + } + }, + { + "license": { + "name": "SGI" + } + }, + { + "license": { + "name": "Spencer" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libboost-thread1.71.0:libboost-thread1.71.0:1.71.0-6ubuntu6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libboost-thread1.71.0@1.71.0-6ubuntu6?arch=amd64&upstream=boost1.71&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libbrotli1@1.0.7-6ubuntu0.1?arch=amd64&upstream=brotli&distro=ubuntu-20.04&package-id=3cfc22417c2e74ac", + "publisher": "Ubuntu Developers ", + "name": "libbrotli1", + "version": "1.0.7-6ubuntu0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libbrotli1:libbrotli1:1.0.7-6ubuntu0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libbrotli1@1.0.7-6ubuntu0.1?arch=amd64&upstream=brotli&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libbsd0@0.10.0-1?arch=amd64&upstream=libbsd&distro=ubuntu-20.04&package-id=88ee716d66a17869", + "publisher": "Ubuntu Developers ", + "name": "libbsd0", + "version": "0.10.0-1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-clause-author" + } + }, + { + "license": { + "name": "BSD-2-clause-verbatim" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-John-Birrell" + } + }, + { + "license": { + "name": "BSD-3-clause-Regents" + } + }, + { + "license": { + "name": "BSD-3-clause-author" + } + }, + { + "license": { + "name": "BSD-4-clause-Christopher-G-Demetriou" + } + }, + { + "license": { + "name": "BSD-4-clause-Niels-Provos" + } + }, + { + "license": { + "name": "BSD-5-clause-Peter-Wemm" + } + }, + { + "license": { + "id": "Beerware" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "ISC-Original" + } + }, + { + "license": { + "name": "public-domain" + } + }, + { + "license": { + "name": "public-domain-Colin-Plumb" + } + } + ], + "cpe": "cpe:2.3:a:libbsd0:libbsd0:0.10.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libbsd0@0.10.0-1?arch=amd64&upstream=libbsd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libbz2-1.0@1.0.8-2?arch=amd64&upstream=bzip2&distro=ubuntu-20.04&package-id=fd8b0edf257b69b7", + "publisher": "Ubuntu Developers ", + "name": "libbz2-1.0", + "version": "1.0.8-2", + "licenses": [ + { + "license": { + "name": "BSD-variant" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libbz2-1.0:libbz2-1.0:1.0.8-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libbz2-1.0@1.0.8-2?arch=amd64&upstream=bzip2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.2?arch=amd64&upstream=glibc&distro=ubuntu-20.04&package-id=256facf7cbb95a65", + "publisher": "Ubuntu Developers ", + "name": "libc-bin", + "version": "2.31-0ubuntu9.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc-bin:libc-bin:2.31-0ubuntu9.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.2?arch=amd64&upstream=glibc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libc6@2.31-0ubuntu9.2?arch=amd64&upstream=glibc&distro=ubuntu-20.04&package-id=2a96b94fa4db214", + "publisher": "Ubuntu Developers ", + "name": "libc6", + "version": "2.31-0ubuntu9.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc6:libc6:2.31-0ubuntu9.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libc6@2.31-0ubuntu9.2?arch=amd64&upstream=glibc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcap-ng0@0.7.9-2.1build1?arch=amd64&upstream=libcap-ng&distro=ubuntu-20.04&package-id=57ceb68462a99cb4", + "publisher": "Ubuntu Developers ", + "name": "libcap-ng0", + "version": "0.7.9-2.1build1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libcap-ng0:libcap-ng0:0.7.9-2.1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcap-ng0@0.7.9-2.1build1?arch=amd64&upstream=libcap-ng&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcap2@1:2.32-1?arch=amd64&distro=ubuntu-20.04&package-id=682f3e304c127762", + "publisher": "Ubuntu Developers ", + "name": "libcap2", + "version": "1:2.32-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libcap2:libcap2:1\\:2.32-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcap2@1:2.32-1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcap2-bin@1:2.32-1?arch=amd64&upstream=libcap2&distro=ubuntu-20.04&package-id=8f0ae2256856772c", + "publisher": "Ubuntu Developers ", + "name": "libcap2-bin", + "version": "1:2.32-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libcap2-bin:libcap2-bin:1\\:2.32-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcap2-bin@1:2.32-1?arch=amd64&upstream=libcap2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcom-err2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=fbaeb4c3d5d0f976", + "publisher": "Ubuntu Developers ", + "name": "libcom-err2", + "version": "1.45.5-2ubuntu1", + "cpe": "cpe:2.3:a:libcom-err2:libcom-err2:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcom-err2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libconfig-general-perl@2.63-1?arch=all&distro=ubuntu-20.04&package-id=da9c7895b5630089", + "publisher": "Ubuntu Developers ", + "name": "libconfig-general-perl", + "version": "2.63-1", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libconfig-general-perl:libconfig-general-perl:2.63-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libconfig-general-perl@2.63-1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcrypt1@1:4.4.10-10ubuntu4?arch=amd64&upstream=libxcrypt&distro=ubuntu-20.04&package-id=8a4302e2e7027353", + "publisher": "Ubuntu Developers ", + "name": "libcrypt1", + "version": "1:4.4.10-10ubuntu4", + "cpe": "cpe:2.3:a:libcrypt1:libcrypt1:1\\:4.4.10-10ubuntu4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcrypt1@1:4.4.10-10ubuntu4?arch=amd64&upstream=libxcrypt&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcurl3-gnutls@7.68.0-1ubuntu2.6?arch=amd64&upstream=curl&distro=ubuntu-20.04&package-id=823f387cfa54f312", + "publisher": "Ubuntu Developers ", + "name": "libcurl3-gnutls", + "version": "7.68.0-1ubuntu2.6", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.68.0-1ubuntu2.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcurl3-gnutls@7.68.0-1ubuntu2.6?arch=amd64&upstream=curl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcurl4@7.68.0-1ubuntu2.6?arch=amd64&upstream=curl&distro=ubuntu-20.04&package-id=c9dd9bae4f158cd3", + "publisher": "Ubuntu Developers ", + "name": "libcurl4", + "version": "7.68.0-1ubuntu2.6", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libcurl4:libcurl4:7.68.0-1ubuntu2.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcurl4@7.68.0-1ubuntu2.6?arch=amd64&upstream=curl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libdb5.3@5.3.28+dfsg1-0.6ubuntu2?arch=amd64&upstream=db5.3&distro=ubuntu-20.04&package-id=bc84b4da0031640d", + "publisher": "Ubuntu Developers ", + "name": "libdb5.3", + "version": "5.3.28+dfsg1-0.6ubuntu2", + "cpe": "cpe:2.3:a:libdb5.3:libdb5.3:5.3.28\\+dfsg1-0.6ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libdb5.3@5.3.28+dfsg1-0.6ubuntu2?arch=amd64&upstream=db5.3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libdebconfclient0@0.251ubuntu1?arch=amd64&upstream=cdebconf&distro=ubuntu-20.04&package-id=78bbe40d9c2ef9b5", + "publisher": "Ubuntu Developers ", + "name": "libdebconfclient0", + "version": "0.251ubuntu1", + "cpe": "cpe:2.3:a:libdebconfclient0:libdebconfclient0:0.251ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libdebconfclient0@0.251ubuntu1?arch=amd64&upstream=cdebconf&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libdevmapper1.02.1@2:1.02.167-1ubuntu1?arch=amd64&upstream=lvm2%402.03.07-1ubuntu1&distro=ubuntu-20.04&package-id=30b70188951a65f0", + "publisher": "Ubuntu Developers ", + "name": "libdevmapper1.02.1", + "version": "2:1.02.167-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libdevmapper1.02.1:libdevmapper1.02.1:2\\:1.02.167-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libdevmapper1.02.1@2:1.02.167-1ubuntu1?arch=amd64&upstream=lvm2%402.03.07-1ubuntu1&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libelf1@0.176-1.1build1?arch=amd64&upstream=elfutils&distro=ubuntu-20.04&package-id=316daaa294f5e8d8", + "publisher": "Ubuntu Developers ", + "name": "libelf1", + "version": "0.176-1.1build1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL-" + } + } + ], + "cpe": "cpe:2.3:a:libelf1:libelf1:0.176-1.1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libelf1@0.176-1.1build1?arch=amd64&upstream=elfutils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libevent-2.1-7@2.1.11-stable-1?arch=amd64&upstream=libevent&distro=ubuntu-20.04&package-id=6b93a7dccfeb49e0", + "publisher": "Balint Reczey ", + "name": "libevent-2.1-7", + "version": "2.1.11-stable-1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-3-Clause~Kitware" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "FSFUL" + } + }, + { + "license": { + "id": "FSFULLR" + } + }, + { + "license": { + "name": "FSFULLR-No-Warranty" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + } + ], + "cpe": "cpe:2.3:a:libevent-2.1-7:libevent-2.1-7:2.1.11-stable-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libevent-2.1-7@2.1.11-stable-1?arch=amd64&upstream=libevent&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libexpat1@2.2.9-1build1?arch=amd64&upstream=expat&distro=ubuntu-20.04&package-id=f3ac75cd161f13c6", + "publisher": "Ubuntu Developers ", + "name": "libexpat1", + "version": "2.2.9-1build1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libexpat1:libexpat1:2.2.9-1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libexpat1@2.2.9-1build1?arch=amd64&upstream=expat&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libext2fs2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=ec6113f55e73d1fd", + "publisher": "Ubuntu Developers ", + "name": "libext2fs2", + "version": "1.45.5-2ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libext2fs2:libext2fs2:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libext2fs2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libfdisk1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=486ce61647644619", + "publisher": "Ubuntu Developers ", + "name": "libfdisk1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libfdisk1:libfdisk1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libfdisk1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libffi7@3.3-4?arch=amd64&upstream=libffi&distro=ubuntu-20.04&package-id=b43b799d45da9d97", + "publisher": "Ubuntu Developers ", + "name": "libffi7", + "version": "3.3-4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libffi7:libffi7:3.3-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libffi7@3.3-4?arch=amd64&upstream=libffi&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libfuse2@2.9.9-3?arch=amd64&upstream=fuse&distro=ubuntu-20.04&package-id=cb74b48e2705f805", + "publisher": "Ubuntu Developers ", + "name": "libfuse2", + "version": "2.9.9-3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libfuse2:libfuse2:2.9.9-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libfuse2@2.9.9-3?arch=amd64&upstream=fuse&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgcc-s1@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04&package-id=f98ce69fd9e55bb8", + "publisher": "Ubuntu Core developers ", + "name": "libgcc-s1", + "version": "10.3.0-1ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcc-s1:libgcc-s1:10.3.0-1ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgcc-s1@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgcrypt20@1.8.5-5ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=c8a43aa5b28727a1", + "publisher": "Ubuntu Developers ", + "name": "libgcrypt20", + "version": "1.8.5-5ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcrypt20:libgcrypt20:1.8.5-5ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgcrypt20@1.8.5-5ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgdbm-compat4@1.18.1-5?arch=amd64&upstream=gdbm&distro=ubuntu-20.04&package-id=216492c4d03e5a3b", + "publisher": "Ubuntu Developers ", + "name": "libgdbm-compat4", + "version": "1.18.1-5", + "licenses": [ + { + "license": { + "name": "GFDL-NIV-1.3+" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgdbm-compat4:libgdbm-compat4:1.18.1-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgdbm-compat4@1.18.1-5?arch=amd64&upstream=gdbm&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgdbm6@1.18.1-5?arch=amd64&upstream=gdbm&distro=ubuntu-20.04&package-id=e7baa5d6d4faa647", + "publisher": "Ubuntu Developers ", + "name": "libgdbm6", + "version": "1.18.1-5", + "licenses": [ + { + "license": { + "name": "GFDL-NIV-1.3+" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgdbm6:libgdbm6:1.18.1-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgdbm6@1.18.1-5?arch=amd64&upstream=gdbm&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libglib2.0-0@2.64.6-1~ubuntu20.04.4?arch=amd64&upstream=glib2.0&distro=ubuntu-20.04&package-id=173f54b9a4ea5bbf", + "publisher": "Ubuntu Developers ", + "name": "libglib2.0-0", + "version": "2.64.6-1~ubuntu20.04.4", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libglib2.0-0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libglib2.0-0@2.64.6-1~ubuntu20.04.4?arch=amd64&upstream=glib2.0&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libglib2.0-data@2.64.6-1~ubuntu20.04.4?arch=all&upstream=glib2.0&distro=ubuntu-20.04&package-id=84c7d5b71baf104a", + "publisher": "Ubuntu Developers ", + "name": "libglib2.0-data", + "version": "2.64.6-1~ubuntu20.04.4", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libglib2.0-data:libglib2.0-data:2.64.6-1\\~ubuntu20.04.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libglib2.0-data@2.64.6-1~ubuntu20.04.4?arch=all&upstream=glib2.0&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgmp10@2:6.2.0+dfsg-4?arch=amd64&upstream=gmp&distro=ubuntu-20.04&package-id=40fc269dcb8b3369", + "publisher": "Ubuntu Developers ", + "name": "libgmp10", + "version": "2:6.2.0+dfsg-4", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgmp10:libgmp10:2\\:6.2.0\\+dfsg-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgmp10@2:6.2.0+dfsg-4?arch=amd64&upstream=gmp&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.6?arch=amd64&upstream=gnutls28&distro=ubuntu-20.04&package-id=7490f76da775c6e", + "publisher": "Ubuntu Developers ", + "name": "libgnutls30", + "version": "3.6.13-2ubuntu1.6", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPLv3+" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "name": "LGPLv2.1+" + } + }, + { + "license": { + "name": "LGPLv3+_or_GPLv2+" + } + }, + { + "license": { + "name": "The" + } + } + ], + "cpe": "cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.6?arch=amd64&upstream=gnutls28&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgpg-error0@1.37-1?arch=amd64&upstream=libgpg-error&distro=ubuntu-20.04&package-id=37ef62d87edfe03", + "publisher": "Ubuntu Developers ", + "name": "libgpg-error0", + "version": "1.37-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "g10-permissive" + } + } + ], + "cpe": "cpe:2.3:a:libgpg-error0:libgpg-error0:1.37-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgpg-error0@1.37-1?arch=amd64&upstream=libgpg-error&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgssapi-krb5-2@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04&package-id=443eafe2785f5a4c", + "publisher": "Ubuntu Developers ", + "name": "libgssapi-krb5-2", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgssapi-krb5-2@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgssapi3-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=17a37cca2446b615", + "publisher": "Ubuntu Developers ", + "name": "libgssapi3-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libgssapi3-heimdal:libgssapi3-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgssapi3-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libhcrypto4-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=98098d582df76b44", + "publisher": "Ubuntu Developers ", + "name": "libhcrypto4-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libhcrypto4-heimdal:libhcrypto4-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libhcrypto4-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libheimbase1-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=f8dfc9a84c337835", + "publisher": "Ubuntu Developers ", + "name": "libheimbase1-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libheimbase1-heimdal:libheimbase1-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libheimbase1-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libheimntlm0-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=9992d88ac7d6e8e3", + "publisher": "Ubuntu Developers ", + "name": "libheimntlm0-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libheimntlm0-heimdal:libheimntlm0-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libheimntlm0-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libhogweed5@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04&package-id=3caecccf070e6760", + "publisher": "Ubuntu Developers ", + "name": "libhogweed5", + "version": "3.5.1+really3.5.1-2ubuntu0.2", + "licenses": [ + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libhogweed5:libhogweed5:3.5.1\\+really3.5.1-2ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libhogweed5@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libhx509-5-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=3b0bac5e4e8f23c5", + "publisher": "Ubuntu Developers ", + "name": "libhx509-5-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libhx509-5-heimdal:libhx509-5-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libhx509-5-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libibverbs1@28.0-1ubuntu1?arch=amd64&upstream=rdma-core&distro=ubuntu-20.04&package-id=8a574b9c0296728e", + "publisher": "Ubuntu Developers ", + "name": "libibverbs1", + "version": "28.0-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-MIT" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "id": "CPL-1.0" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libibverbs1:libibverbs1:28.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libibverbs1@28.0-1ubuntu1?arch=amd64&upstream=rdma-core&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libicu66@66.1-2ubuntu2?arch=amd64&upstream=icu&distro=ubuntu-20.04&package-id=bcf598a9dea4cd38", + "publisher": "Ubuntu Developers ", + "name": "libicu66", + "version": "66.1-2ubuntu2", + "cpe": "cpe:2.3:a:libicu66:libicu66:66.1-2ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libicu66@66.1-2ubuntu2?arch=amd64&upstream=icu&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libidn2-0@2.2.0-2?arch=amd64&upstream=libidn2&distro=ubuntu-20.04&package-id=d2a82c3e28413bc1", + "publisher": "Ubuntu Developers ", + "name": "libidn2-0", + "version": "2.2.0-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "Unicode" + } + } + ], + "cpe": "cpe:2.3:a:libidn2-0:libidn2-0:2.2.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libidn2-0@2.2.0-2?arch=amd64&upstream=libidn2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libiscsi7@1.18.0-2?arch=amd64&upstream=libiscsi&distro=ubuntu-20.04&package-id=d3404aeee287695b", + "publisher": "Ubuntu Developers ", + "name": "libiscsi7", + "version": "1.18.0-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "MIT/X11" + } + }, + { + "license": { + "name": "Public_domain" + } + } + ], + "cpe": "cpe:2.3:a:libiscsi7:libiscsi7:1.18.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libiscsi7@1.18.0-2?arch=amd64&upstream=libiscsi&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libk5crypto3@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04&package-id=f9479050b59432b4", + "publisher": "Ubuntu Developers ", + "name": "libk5crypto3", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libk5crypto3:libk5crypto3:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libk5crypto3@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkeyutils1@1.6-6ubuntu1?arch=amd64&upstream=keyutils&distro=ubuntu-20.04&package-id=e8692427b123ea73", + "publisher": "Ubuntu Developers ", + "name": "libkeyutils1", + "version": "1.6-6ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libkeyutils1:libkeyutils1:1.6-6ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkeyutils1@1.6-6ubuntu1?arch=amd64&upstream=keyutils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkmod2@27-1ubuntu2?arch=amd64&upstream=kmod&distro=ubuntu-20.04&package-id=9de5f0614e60f8ee", + "publisher": "Ubuntu Developers ", + "name": "libkmod2", + "version": "27-1ubuntu2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkmod2:libkmod2:27-1ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkmod2@27-1ubuntu2?arch=amd64&upstream=kmod&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkrb5-26-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=2beb670b9378498e", + "publisher": "Ubuntu Developers ", + "name": "libkrb5-26-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5-26-heimdal:libkrb5-26-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkrb5-26-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkrb5-3@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04&package-id=fdb5970d8394a182", + "publisher": "Ubuntu Developers ", + "name": "libkrb5-3", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5-3:libkrb5-3:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkrb5-3@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkrb5support0@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04&package-id=a8d21a32e178b211", + "publisher": "Ubuntu Developers ", + "name": "libkrb5support0", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5support0:libkrb5support0:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkrb5support0@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libldap-2.4-2@2.4.49+dfsg-2ubuntu1.8?arch=amd64&upstream=openldap&distro=ubuntu-20.04&package-id=efdc80a7ae6eae19", + "publisher": "Ubuntu Developers ", + "name": "libldap-2.4-2", + "version": "2.4.49+dfsg-2ubuntu1.8", + "cpe": "cpe:2.3:a:libldap-2.4-2:libldap-2.4-2:2.4.49\\+dfsg-2ubuntu1.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libldap-2.4-2@2.4.49+dfsg-2ubuntu1.8?arch=amd64&upstream=openldap&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libldap-common@2.4.49+dfsg-2ubuntu1.8?arch=all&upstream=openldap&distro=ubuntu-20.04&package-id=4d0b88f98b40786b", + "publisher": "Ubuntu Developers ", + "name": "libldap-common", + "version": "2.4.49+dfsg-2ubuntu1.8", + "cpe": "cpe:2.3:a:libldap-common:libldap-common:2.4.49\\+dfsg-2ubuntu1.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libldap-common@2.4.49+dfsg-2ubuntu1.8?arch=all&upstream=openldap&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/liblz4-1@1.9.2-2ubuntu0.20.04.1?arch=amd64&upstream=lz4&distro=ubuntu-20.04&package-id=6f2c431caeb4980a", + "publisher": "Ubuntu Developers ", + "name": "liblz4-1", + "version": "1.9.2-2ubuntu0.20.04.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:liblz4-1:liblz4-1:1.9.2-2ubuntu0.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/liblz4-1@1.9.2-2ubuntu0.20.04.1?arch=amd64&upstream=lz4&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/liblzma5@5.2.4-1ubuntu1?arch=amd64&upstream=xz-utils&distro=ubuntu-20.04&package-id=f1e9f3b6205a664a", + "publisher": "Ubuntu Developers ", + "name": "liblzma5", + "version": "5.2.4-1ubuntu1", + "licenses": [ + { + "license": { + "name": "Autoconf" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "PD" + } + }, + { + "license": { + "name": "PD-debian" + } + }, + { + "license": { + "name": "config-h" + } + }, + { + "license": { + "name": "noderivs" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-nowarranty" + } + }, + { + "license": { + "name": "probably-PD" + } + } + ], + "cpe": "cpe:2.3:a:liblzma5:liblzma5:5.2.4-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/liblzma5@5.2.4-1ubuntu1?arch=amd64&upstream=xz-utils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmagic-mgc@1:5.38-4?arch=amd64&upstream=file&distro=ubuntu-20.04&package-id=3b4f02792ccf99bb", + "publisher": "Ubuntu Developers ", + "name": "libmagic-mgc", + "version": "1:5.38-4", + "licenses": [ + { + "license": { + "name": "BSD-2-Clause-alike" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-Clause-regents" + } + }, + { + "license": { + "name": "MIT-Old-Style-with-legal-disclaimer-2" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmagic-mgc:libmagic-mgc:1\\:5.38-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmagic-mgc@1:5.38-4?arch=amd64&upstream=file&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmagic1@1:5.38-4?arch=amd64&upstream=file&distro=ubuntu-20.04&package-id=302b8497a938556", + "publisher": "Ubuntu Developers ", + "name": "libmagic1", + "version": "1:5.38-4", + "licenses": [ + { + "license": { + "name": "BSD-2-Clause-alike" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-Clause-regents" + } + }, + { + "license": { + "name": "MIT-Old-Style-with-legal-disclaimer-2" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmagic1:libmagic1:1\\:5.38-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmagic1@1:5.38-4?arch=amd64&upstream=file&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmnl0@1.0.4-2?arch=amd64&upstream=libmnl&distro=ubuntu-20.04&package-id=162cfe25074edf0d", + "publisher": "Ubuntu Developers ", + "name": "libmnl0", + "version": "1.0.4-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libmnl0:libmnl0:1.0.4-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmnl0@1.0.4-2?arch=amd64&upstream=libmnl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmount1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=39446194385ebce5", + "publisher": "Ubuntu Developers ", + "name": "libmount1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmount1:libmount1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmount1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmpdec2@2.4.2-3?arch=amd64&upstream=mpdecimal&distro=ubuntu-20.04&package-id=b45a0d57576ce262", + "publisher": "Ubuntu Developers ", + "name": "libmpdec2", + "version": "2.4.2-3", + "licenses": [ + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libmpdec2:libmpdec2:2.4.2-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmpdec2@2.4.2-3?arch=amd64&upstream=mpdecimal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libncurses6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=ed8fb166163a75b8", + "publisher": "Ubuntu Developers ", + "name": "libncurses6", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:libncurses6:libncurses6:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libncurses6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libncursesw6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=58525ddc073a008a", + "publisher": "Ubuntu Developers ", + "name": "libncursesw6", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:libncursesw6:libncursesw6:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libncursesw6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libnettle7@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04&package-id=3d185fbd6a7e56f", + "publisher": "Ubuntu Developers ", + "name": "libnettle7", + "version": "3.5.1+really3.5.1-2ubuntu0.2", + "licenses": [ + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libnettle7:libnettle7:3.5.1\\+really3.5.1-2ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libnettle7@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libnfsidmap2@0.25-5.1ubuntu1?arch=amd64&upstream=libnfsidmap&distro=ubuntu-20.04&package-id=71bd574c47c02b75", + "publisher": "Ubuntu Developers ", + "name": "libnfsidmap2", + "version": "0.25-5.1ubuntu1", + "cpe": "cpe:2.3:a:libnfsidmap2:libnfsidmap2:0.25-5.1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libnfsidmap2@0.25-5.1ubuntu1?arch=amd64&upstream=libnfsidmap&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libnghttp2-14@1.40.0-1build1?arch=amd64&upstream=nghttp2&distro=ubuntu-20.04&package-id=c86604c1fa72dd96", + "publisher": "Ubuntu Developers ", + "name": "libnghttp2-14", + "version": "1.40.0-1build1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "SIL-OFL-1.1" + } + }, + { + "license": { + "name": "all-permissive" + } + } + ], + "cpe": "cpe:2.3:a:libnghttp2-14:libnghttp2-14:1.40.0-1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libnghttp2-14@1.40.0-1build1?arch=amd64&upstream=nghttp2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libnl-3-200@3.4.0-1?arch=amd64&upstream=libnl3&distro=ubuntu-20.04&package-id=520a765636f2f20f", + "publisher": "Ubuntu Developers ", + "name": "libnl-3-200", + "version": "3.4.0-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libnl-3-200:libnl-3-200:3.4.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libnl-3-200@3.4.0-1?arch=amd64&upstream=libnl3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libnl-route-3-200@3.4.0-1?arch=amd64&upstream=libnl3&distro=ubuntu-20.04&package-id=1a1d9f0f1f34e88b", + "publisher": "Ubuntu Developers ", + "name": "libnl-route-3-200", + "version": "3.4.0-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libnl-route-3-200:libnl-route-3-200:3.4.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libnl-route-3-200@3.4.0-1?arch=amd64&upstream=libnl3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libp11-kit0@0.23.20-1ubuntu0.1?arch=amd64&upstream=p11-kit&distro=ubuntu-20.04&package-id=9fc0ca46e6d21557", + "publisher": "Ubuntu Developers ", + "name": "libp11-kit0", + "version": "0.23.20-1ubuntu0.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "ISC+IBM" + } + }, + { + "license": { + "name": "permissive-like-automake-output" + } + }, + { + "license": { + "name": "same-as-rest-of-p11kit" + } + } + ], + "cpe": "cpe:2.3:a:libp11-kit0:libp11-kit0:0.23.20-1ubuntu0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libp11-kit0@0.23.20-1ubuntu0.1?arch=amd64&upstream=p11-kit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-cap@1:2.32-1?arch=amd64&upstream=libcap2&distro=ubuntu-20.04&package-id=20db44acb7f94535", + "publisher": "Ubuntu Developers ", + "name": "libpam-cap", + "version": "1:2.32-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libpam-cap:libpam-cap:1\\:2.32-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-cap@1:2.32-1?arch=amd64&upstream=libcap2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-modules@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04&package-id=e7be6c0ad703fc9a", + "publisher": "Ubuntu Developers ", + "name": "libpam-modules", + "version": "1.3.1-5ubuntu4.2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules:libpam-modules:1.3.1-5ubuntu4.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-modules@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-modules-bin@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04&package-id=7ff667273975da27", + "publisher": "Ubuntu Developers ", + "name": "libpam-modules-bin", + "version": "1.3.1-5ubuntu4.2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules-bin:libpam-modules-bin:1.3.1-5ubuntu4.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-modules-bin@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-runtime@1.3.1-5ubuntu4.2?arch=all&upstream=pam&distro=ubuntu-20.04&package-id=47a743e8128a9af6", + "publisher": "Ubuntu Developers ", + "name": "libpam-runtime", + "version": "1.3.1-5ubuntu4.2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-runtime:libpam-runtime:1.3.1-5ubuntu4.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-runtime@1.3.1-5ubuntu4.2?arch=all&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam0g@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04&package-id=e57fbdd1e7d57983", + "publisher": "Ubuntu Developers ", + "name": "libpam0g", + "version": "1.3.1-5ubuntu4.2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam0g:libpam0g:1.3.1-5ubuntu4.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam0g@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpcre2-8-0@10.34-7?arch=amd64&upstream=pcre2&distro=ubuntu-20.04&package-id=ec9eb70008ed8b14", + "publisher": "Ubuntu Developers ", + "name": "libpcre2-8-0", + "version": "10.34-7", + "cpe": "cpe:2.3:a:libpcre2-8-0:libpcre2-8-0:10.34-7:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpcre2-8-0@10.34-7?arch=amd64&upstream=pcre2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpcre3@2:8.39-12build1?arch=amd64&upstream=pcre3&distro=ubuntu-20.04&package-id=f2af8e66c60a624", + "publisher": "Ubuntu Developers ", + "name": "libpcre3", + "version": "2:8.39-12build1", + "cpe": "cpe:2.3:a:libpcre3:libpcre3:2\\:8.39-12build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpcre3@2:8.39-12build1?arch=amd64&upstream=pcre3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libperl5.30@5.30.0-9ubuntu0.2?arch=amd64&upstream=perl&distro=ubuntu-20.04&package-id=8748dda005dfdd96", + "publisher": "Ubuntu Developers ", + "name": "libperl5.30", + "version": "5.30.0-9ubuntu0.2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libperl5.30:libperl5.30:5.30.0-9ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libperl5.30@5.30.0-9ubuntu0.2?arch=amd64&upstream=perl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libprocps8@2:3.3.16-1ubuntu2.2?arch=amd64&upstream=procps&distro=ubuntu-20.04&package-id=1444db6c35de79c6", + "publisher": "Ubuntu Developers ", + "name": "libprocps8", + "version": "2:3.3.16-1ubuntu2.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libprocps8:libprocps8:2\\:3.3.16-1ubuntu2.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libprocps8@2:3.3.16-1ubuntu2.2?arch=amd64&upstream=procps&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpsl5@0.21.0-1ubuntu1?arch=amd64&upstream=libpsl&distro=ubuntu-20.04&package-id=e77e76f35a3ad192", + "publisher": "Ubuntu Developers ", + "name": "libpsl5", + "version": "0.21.0-1ubuntu1", + "licenses": [ + { + "license": { + "name": "Chromium" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libpsl5:libpsl5:0.21.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpsl5@0.21.0-1ubuntu1?arch=amd64&upstream=libpsl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpython3-stdlib@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04&package-id=b40e3316416bbdaf", + "publisher": "Ubuntu Developers ", + "name": "libpython3-stdlib", + "version": "3.8.2-0ubuntu2", + "cpe": "cpe:2.3:a:libpython3-stdlib:libpython3-stdlib:3.8.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpython3-stdlib@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpython3.8-minimal@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04&package-id=fb58dad98da64e3b", + "publisher": "Ubuntu Core Developers ", + "name": "libpython3.8-minimal", + "version": "3.8.10-0ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:libpython3.8-minimal:libpython3.8-minimal:3.8.10-0ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpython3.8-minimal@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpython3.8-stdlib@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04&package-id=54e48e611df3b41d", + "publisher": "Ubuntu Core Developers ", + "name": "libpython3.8-stdlib", + "version": "3.8.10-0ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:libpython3.8-stdlib:libpython3.8-stdlib:3.8.10-0ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpython3.8-stdlib@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/librados2@15.2.13-0ubuntu0.20.04.2?arch=amd64&upstream=ceph&distro=ubuntu-20.04&package-id=d33d75bf7d793b3a", + "publisher": "Ubuntu Developers ", + "name": "librados2", + "version": "15.2.13-0ubuntu0.20.04.2", + "licenses": [ + { + "license": { + "id": "APSL-2.0" + } + }, + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Boost" + } + }, + { + "license": { + "name": "Boost-Software-License-1.0" + } + }, + { + "license": { + "id": "CC-BY-SA-3.0" + } + }, + { + "license": { + "name": "Creative" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPL-3/OpenSSL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "Public" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:librados2:librados2:15.2.13-0ubuntu0.20.04.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/librados2@15.2.13-0ubuntu0.20.04.2?arch=amd64&upstream=ceph&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/librbd1@15.2.13-0ubuntu0.20.04.2?arch=amd64&upstream=ceph&distro=ubuntu-20.04&package-id=db5742e3f45350c8", + "publisher": "Ubuntu Developers ", + "name": "librbd1", + "version": "15.2.13-0ubuntu0.20.04.2", + "licenses": [ + { + "license": { + "id": "APSL-2.0" + } + }, + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Boost" + } + }, + { + "license": { + "name": "Boost-Software-License-1.0" + } + }, + { + "license": { + "id": "CC-BY-SA-3.0" + } + }, + { + "license": { + "name": "Creative" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPL-3/OpenSSL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "Public" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:librbd1:librbd1:15.2.13-0ubuntu0.20.04.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/librbd1@15.2.13-0ubuntu0.20.04.2?arch=amd64&upstream=ceph&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/librdmacm1@28.0-1ubuntu1?arch=amd64&upstream=rdma-core&distro=ubuntu-20.04&package-id=ba8ceed5ec4f0c95", + "publisher": "Ubuntu Developers ", + "name": "librdmacm1", + "version": "28.0-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-MIT" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "id": "CPL-1.0" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:librdmacm1:librdmacm1:28.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/librdmacm1@28.0-1ubuntu1?arch=amd64&upstream=rdma-core&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libreadline8@8.0-4?arch=amd64&upstream=readline&distro=ubuntu-20.04&package-id=67b876656fcd9e68", + "publisher": "Ubuntu Developers ", + "name": "libreadline8", + "version": "8.0-4", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libreadline8:libreadline8:8.0-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libreadline8@8.0-4?arch=amd64&upstream=readline&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libroken18-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=68e35bc456818613", + "publisher": "Ubuntu Developers ", + "name": "libroken18-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libroken18-heimdal:libroken18-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libroken18-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/librtmp1@2.4+20151223.gitfa8646d.1-2build1?arch=amd64&upstream=rtmpdump&distro=ubuntu-20.04&package-id=ede637f87a4bfd7b", + "publisher": "Ubuntu Developers ", + "name": "librtmp1", + "version": "2.4+20151223.gitfa8646d.1-2build1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:librtmp1:librtmp1:2.4\\+20151223.gitfa8646d.1-2build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/librtmp1@2.4+20151223.gitfa8646d.1-2build1?arch=amd64&upstream=rtmpdump&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsasl2-2@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04&package-id=374396d82667544d", + "publisher": "Ubuntu Developers ", + "name": "libsasl2-2", + "version": "2.1.27+dfsg-2", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-2:libsasl2-2:2.1.27\\+dfsg-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsasl2-2@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsasl2-modules@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04&package-id=fb8d278d10c4a3cf", + "publisher": "Ubuntu Developers ", + "name": "libsasl2-modules", + "version": "2.1.27+dfsg-2", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-modules:libsasl2-modules:2.1.27\\+dfsg-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsasl2-modules@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsasl2-modules-db@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04&package-id=63c3c50d36ec1d13", + "publisher": "Ubuntu Developers ", + "name": "libsasl2-modules-db", + "version": "2.1.27+dfsg-2", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-modules-db:libsasl2-modules-db:2.1.27\\+dfsg-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsasl2-modules-db@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libseccomp2@2.5.1-1ubuntu1~20.04.1?arch=amd64&upstream=libseccomp&distro=ubuntu-20.04&package-id=b2fd79b9c242e8e8", + "publisher": "Ubuntu Developers ", + "name": "libseccomp2", + "version": "2.5.1-1ubuntu1~20.04.1", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libseccomp2:libseccomp2:2.5.1-1ubuntu1\\~20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libseccomp2@2.5.1-1ubuntu1~20.04.1?arch=amd64&upstream=libseccomp&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libselinux1@3.0-1build2?arch=amd64&upstream=libselinux&distro=ubuntu-20.04&package-id=e5d4ae16ac79b901", + "publisher": "Ubuntu Developers ", + "name": "libselinux1", + "version": "3.0-1build2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libselinux1:libselinux1:3.0-1build2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libselinux1@3.0-1build2?arch=amd64&upstream=libselinux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsemanage-common@3.0-1build2?arch=all&upstream=libsemanage&distro=ubuntu-20.04&package-id=4c6cd9f68ce53262", + "publisher": "Ubuntu Developers ", + "name": "libsemanage-common", + "version": "3.0-1build2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage-common:libsemanage-common:3.0-1build2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsemanage-common@3.0-1build2?arch=all&upstream=libsemanage&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsemanage1@3.0-1build2?arch=amd64&upstream=libsemanage&distro=ubuntu-20.04&package-id=963297f19b339026", + "publisher": "Ubuntu Developers ", + "name": "libsemanage1", + "version": "3.0-1build2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage1:libsemanage1:3.0-1build2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsemanage1@3.0-1build2?arch=amd64&upstream=libsemanage&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsepol1@3.0-1?arch=amd64&upstream=libsepol&distro=ubuntu-20.04&package-id=991afdd7bf17200c", + "publisher": "Ubuntu Developers ", + "name": "libsepol1", + "version": "3.0-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsepol1:libsepol1:3.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsepol1@3.0-1?arch=amd64&upstream=libsepol&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsgutils2-2@1.44-1ubuntu2?arch=amd64&upstream=sg3-utils&distro=ubuntu-20.04&package-id=5eee3420d656cf76", + "publisher": "Ubuntu Developers ", + "name": "libsgutils2-2", + "version": "1.44-1ubuntu2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libsgutils2-2:libsgutils2-2:1.44-1ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsgutils2-2@1.44-1ubuntu2?arch=amd64&upstream=sg3-utils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsmartcols1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=b47d3a935260c518", + "publisher": "Ubuntu Developers ", + "name": "libsmartcols1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsmartcols1:libsmartcols1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsmartcols1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsqlite3-0@3.31.1-4ubuntu0.2?arch=amd64&upstream=sqlite3&distro=ubuntu-20.04&package-id=a7c7ccf11d3583d1", + "publisher": "Ubuntu Developers ", + "name": "libsqlite3-0", + "version": "3.31.1-4ubuntu0.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.31.1-4ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsqlite3-0@3.31.1-4ubuntu0.2?arch=amd64&upstream=sqlite3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libss2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=4715894cb8165c", + "publisher": "Ubuntu Developers ", + "name": "libss2", + "version": "1.45.5-2ubuntu1", + "cpe": "cpe:2.3:a:libss2:libss2:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libss2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libssh-4@0.9.3-2ubuntu2.2?arch=amd64&upstream=libssh&distro=ubuntu-20.04&package-id=93df7c2bd7217cc4", + "publisher": "Ubuntu Developers ", + "name": "libssh-4", + "version": "0.9.3-2ubuntu2.2", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "LGPL-2.1+~OpenSSL" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libssh-4:libssh-4:0.9.3-2ubuntu2.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libssh-4@0.9.3-2ubuntu2.2?arch=amd64&upstream=libssh&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.8?arch=amd64&upstream=openssl&distro=ubuntu-20.04&package-id=9228d1481eea75e3", + "publisher": "Ubuntu Developers ", + "name": "libssl1.1", + "version": "1.1.1f-1ubuntu2.8", + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.8?arch=amd64&upstream=openssl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libstdc++6@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04&package-id=241fcb3d9b65153a", + "publisher": "Ubuntu Core developers ", + "name": "libstdc++6", + "version": "10.3.0-1ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:10.3.0-1ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libstdc++6@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsystemd0@245.4-4ubuntu3.11?arch=amd64&upstream=systemd&distro=ubuntu-20.04&package-id=72d1f4b2fda6e155", + "publisher": "Ubuntu Developers ", + "name": "libsystemd0", + "version": "245.4-4ubuntu3.11", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsystemd0:libsystemd0:245.4-4ubuntu3.11:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsystemd0@245.4-4ubuntu3.11?arch=amd64&upstream=systemd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtasn1-6@4.16.0-2?arch=amd64&distro=ubuntu-20.04&package-id=a290c35fc0220ba0", + "publisher": "Ubuntu Developers ", + "name": "libtasn1-6", + "version": "4.16.0-2", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtasn1-6:libtasn1-6:4.16.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtasn1-6@4.16.0-2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtinfo6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=72ad56d118fefea3", + "publisher": "Ubuntu Developers ", + "name": "libtinfo6", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:libtinfo6:libtinfo6:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtinfo6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtirpc-common@1.2.5-1?arch=all&upstream=libtirpc&distro=ubuntu-20.04&package-id=ba22fe8af5722b24", + "publisher": "Ubuntu Developers ", + "name": "libtirpc-common", + "version": "1.2.5-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc-common:libtirpc-common:1.2.5-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtirpc-common@1.2.5-1?arch=all&upstream=libtirpc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtirpc3@1.2.5-1?arch=amd64&upstream=libtirpc&distro=ubuntu-20.04&package-id=57b2bfa0a8467ab7", + "publisher": "Ubuntu Developers ", + "name": "libtirpc3", + "version": "1.2.5-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc3:libtirpc3:1.2.5-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtirpc3@1.2.5-1?arch=amd64&upstream=libtirpc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libudev1@245.4-4ubuntu3.11?arch=amd64&upstream=systemd&distro=ubuntu-20.04&package-id=28d962536291b482", + "publisher": "Ubuntu Developers ", + "name": "libudev1", + "version": "245.4-4ubuntu3.11", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libudev1:libudev1:245.4-4ubuntu3.11:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libudev1@245.4-4ubuntu3.11?arch=amd64&upstream=systemd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libunistring2@0.9.10-2?arch=amd64&upstream=libunistring&distro=ubuntu-20.04&package-id=3140ffa70dcd9831", + "publisher": "Ubuntu Developers ", + "name": "libunistring2", + "version": "0.9.10-2", + "licenses": [ + { + "license": { + "name": "FreeSoftware" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GFDL-1.2+" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libunistring2:libunistring2:0.9.10-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libunistring2@0.9.10-2?arch=amd64&upstream=libunistring&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libuuid1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=5395a07c00002ea6", + "publisher": "Ubuntu Developers ", + "name": "libuuid1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libuuid1:libuuid1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libuuid1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libwind0-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=7b0e172efdb36a99", + "publisher": "Ubuntu Developers ", + "name": "libwind0-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libwind0-heimdal:libwind0-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libwind0-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libwrap0@7.6.q-30?arch=amd64&upstream=tcp-wrappers&distro=ubuntu-20.04&package-id=5b14391c61bb94f1", + "publisher": "Ubuntu Developers ", + "name": "libwrap0", + "version": "7.6.q-30", + "cpe": "cpe:2.3:a:libwrap0:libwrap0:7.6.q-30:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libwrap0@7.6.q-30?arch=amd64&upstream=tcp-wrappers&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libxml2@2.9.10+dfsg-5ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04&package-id=5227ee2e55b78734", + "publisher": "Ubuntu Developers ", + "name": "libxml2", + "version": "2.9.10+dfsg-5ubuntu0.20.04.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "MIT-1" + } + } + ], + "cpe": "cpe:2.3:a:libxml2:libxml2:2.9.10\\+dfsg-5ubuntu0.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libxml2@2.9.10+dfsg-5ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libxtables12@1.8.4-3ubuntu2?arch=amd64&upstream=iptables&distro=ubuntu-20.04&package-id=440c57e95fc3a35c", + "publisher": "Ubuntu Developers ", + "name": "libxtables12", + "version": "1.8.4-3ubuntu2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libxtables12:libxtables12:1.8.4-3ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libxtables12@1.8.4-3ubuntu2?arch=amd64&upstream=iptables&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libzstd1@1.4.4+dfsg-3ubuntu0.1?arch=amd64&upstream=libzstd&distro=ubuntu-20.04&package-id=47cff0564e160066", + "publisher": "Ubuntu Developers ", + "name": "libzstd1", + "version": "1.4.4+dfsg-3ubuntu0.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libzstd1:libzstd1:1.4.4\\+dfsg-3ubuntu0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libzstd1@1.4.4+dfsg-3ubuntu0.1?arch=amd64&upstream=libzstd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/login@1:4.8.1-1ubuntu5.20.04.1?arch=amd64&upstream=shadow&distro=ubuntu-20.04&package-id=cb23947502a7c38d", + "publisher": "Ubuntu Developers ", + "name": "login", + "version": "1:4.8.1-1ubuntu5.20.04.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:login:login:1\\:4.8.1-1ubuntu5.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/login@1:4.8.1-1ubuntu5.20.04.1?arch=amd64&upstream=shadow&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/logsave@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=4a92556bee4b4f91", + "publisher": "Ubuntu Developers ", + "name": "logsave", + "version": "1.45.5-2ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:logsave:logsave:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/logsave@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/lsb-base@11.1.0ubuntu2?arch=all&upstream=lsb&distro=ubuntu-20.04&package-id=b76348b7f1282c61", + "publisher": "Ubuntu Developers ", + "name": "lsb-base", + "version": "11.1.0ubuntu2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:lsb-base:lsb-base:11.1.0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/lsb-base@11.1.0ubuntu2?arch=all&upstream=lsb&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/mawk@1.3.4.20200120-2?arch=amd64&distro=ubuntu-20.04&package-id=435885c82afbf721", + "publisher": "Ubuntu Developers ", + "name": "mawk", + "version": "1.3.4.20200120-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:mawk:mawk:1.3.4.20200120-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/mawk@1.3.4.20200120-2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/mime-support@3.64ubuntu1?arch=all&distro=ubuntu-20.04&package-id=405891a224258a92", + "publisher": "Ubuntu Developers ", + "name": "mime-support", + "version": "3.64ubuntu1", + "licenses": [ + { + "license": { + "name": "Bellcore" + } + }, + { + "license": { + "name": "ad-hoc" + } + } + ], + "cpe": "cpe:2.3:a:mime-support:mime-support:3.64ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/mime-support@3.64ubuntu1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/mount@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=fa4ef6b12af7900c", + "publisher": "Ubuntu Developers ", + "name": "mount", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:mount:mount:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/mount@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ncurses-base@6.2-0ubuntu2?arch=all&upstream=ncurses&distro=ubuntu-20.04&package-id=d7393defd95e4554", + "publisher": "Ubuntu Developers ", + "name": "ncurses-base", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:ncurses-base:ncurses-base:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ncurses-base@6.2-0ubuntu2?arch=all&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ncurses-bin@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=d6bdd43961b680f6", + "publisher": "Ubuntu Developers ", + "name": "ncurses-bin", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:ncurses-bin:ncurses-bin:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ncurses-bin@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/netbase@6.1?arch=all&distro=ubuntu-20.04&package-id=c6847a50307ac1ba", + "publisher": "Ubuntu Developers ", + "name": "netbase", + "version": "6.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:netbase:netbase:6.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/netbase@6.1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/nfs-common@1:1.3.4-2.5ubuntu3.4?arch=amd64&upstream=nfs-utils&distro=ubuntu-20.04&package-id=6a00c331080f32b7", + "publisher": "Ubuntu Developers ", + "name": "nfs-common", + "version": "1:1.3.4-2.5ubuntu3.4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:nfs-common:nfs-common:1\\:1.3.4-2.5ubuntu3.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/nfs-common@1:1.3.4-2.5ubuntu3.4?arch=amd64&upstream=nfs-utils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.8?arch=amd64&distro=ubuntu-20.04&package-id=5727f60759ec90aa", + "publisher": "Ubuntu Developers ", + "name": "openssl", + "version": "1.1.1f-1ubuntu2.8", + "cpe": "cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.8?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/passwd@1:4.8.1-1ubuntu5.20.04.1?arch=amd64&upstream=shadow&distro=ubuntu-20.04&package-id=c4a1ed5267891532", + "publisher": "Ubuntu Developers ", + "name": "passwd", + "version": "1:4.8.1-1ubuntu5.20.04.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:passwd:passwd:1\\:4.8.1-1ubuntu5.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/passwd@1:4.8.1-1ubuntu5.20.04.1?arch=amd64&upstream=shadow&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/perl@5.30.0-9ubuntu0.2?arch=amd64&distro=ubuntu-20.04&package-id=80890d41e31d4ad9", + "publisher": "Ubuntu Developers ", + "name": "perl", + "version": "5.30.0-9ubuntu0.2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl:perl:5.30.0-9ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/perl@5.30.0-9ubuntu0.2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/perl-base@5.30.0-9ubuntu0.2?arch=amd64&upstream=perl&distro=ubuntu-20.04&package-id=eab1752e76cf29f", + "publisher": "Ubuntu Developers ", + "name": "perl-base", + "version": "5.30.0-9ubuntu0.2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl-base:perl-base:5.30.0-9ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/perl-base@5.30.0-9ubuntu0.2?arch=amd64&upstream=perl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/perl-modules-5.30@5.30.0-9ubuntu0.2?arch=all&upstream=perl&distro=ubuntu-20.04&package-id=fb3bcb2d22f50638", + "publisher": "Ubuntu Developers ", + "name": "perl-modules-5.30", + "version": "5.30.0-9ubuntu0.2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl-modules-5.30:perl-modules-5.30:5.30.0-9ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/perl-modules-5.30@5.30.0-9ubuntu0.2?arch=all&upstream=perl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/procps@2:3.3.16-1ubuntu2.2?arch=amd64&distro=ubuntu-20.04&package-id=f177d21a50776ea7", + "publisher": "Ubuntu Developers ", + "name": "procps", + "version": "2:3.3.16-1ubuntu2.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:procps:procps:2\\:3.3.16-1ubuntu2.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/procps@2:3.3.16-1ubuntu2.2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/publicsuffix@20200303.0012-1?arch=all&distro=ubuntu-20.04&package-id=fe371293cddb3ef3", + "publisher": "Ubuntu Developers ", + "name": "publicsuffix", + "version": "20200303.0012-1", + "licenses": [ + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:publicsuffix:publicsuffix:20200303.0012-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/publicsuffix@20200303.0012-1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "application", + "bom-ref": "pkg:generic/python@3.8.10?package-id=ed46688c3a0df6db", + "name": "python", + "version": "3.8.10", + "cpe": "cpe:2.3:a:python_software_foundation:python:3.8.10:*:*:*:*:*:*:*", + "purl": "pkg:generic/python@3.8.10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/python3@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04&package-id=ca939acbf264771", + "publisher": "Ubuntu Developers ", + "name": "python3", + "version": "3.8.2-0ubuntu2", + "cpe": "cpe:2.3:a:python3:python3:3.8.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/python3@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/python3-minimal@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04&package-id=26eebf392e0b02cf", + "publisher": "Ubuntu Developers ", + "name": "python3-minimal", + "version": "3.8.2-0ubuntu2", + "cpe": "cpe:2.3:a:python3-minimal:python3-minimal:3.8.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/python3-minimal@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/python3.8@3.8.10-0ubuntu1~20.04?arch=amd64&distro=ubuntu-20.04&package-id=b1de928401abc554", + "publisher": "Ubuntu Core Developers ", + "name": "python3.8", + "version": "3.8.10-0ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:python3.8:python3.8:3.8.10-0ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/python3.8@3.8.10-0ubuntu1~20.04?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/python3.8-minimal@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04&package-id=91fa2bead1762d08", + "publisher": "Ubuntu Core Developers ", + "name": "python3.8-minimal", + "version": "3.8.10-0ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:python3.8-minimal:python3.8-minimal:3.8.10-0ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/python3.8-minimal@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/qemu-block-extra@1:4.2-3ubuntu6.17?arch=amd64&upstream=qemu&distro=ubuntu-20.04&package-id=f2ce7313d353bf0d", + "publisher": "Ubuntu Developers ", + "name": "qemu-block-extra", + "version": "1:4.2-3ubuntu6.17", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:qemu-block-extra:qemu-block-extra:1\\:4.2-3ubuntu6.17:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/qemu-block-extra@1:4.2-3ubuntu6.17?arch=amd64&upstream=qemu&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/qemu-utils@1:4.2-3ubuntu6.17?arch=amd64&upstream=qemu&distro=ubuntu-20.04&package-id=fd8d39c65bc83889", + "publisher": "Ubuntu Developers ", + "name": "qemu-utils", + "version": "1:4.2-3ubuntu6.17", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:qemu-utils:qemu-utils:1\\:4.2-3ubuntu6.17:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/qemu-utils@1:4.2-3ubuntu6.17?arch=amd64&upstream=qemu&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/readline-common@8.0-4?arch=all&upstream=readline&distro=ubuntu-20.04&package-id=34a85b4423ecbe7", + "publisher": "Ubuntu Developers ", + "name": "readline-common", + "version": "8.0-4", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:readline-common:readline-common:8.0-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/readline-common@8.0-4?arch=all&upstream=readline&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/rpcbind@1.2.5-8?arch=amd64&distro=ubuntu-20.04&package-id=e98d3334085e4495", + "publisher": "Ubuntu Developers ", + "name": "rpcbind", + "version": "1.2.5-8", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "PERMISSIVE" + } + } + ], + "cpe": "cpe:2.3:a:rpcbind:rpcbind:1.2.5-8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/rpcbind@1.2.5-8?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sed@4.7-1?arch=amd64&distro=ubuntu-20.04&package-id=24bbb8989a1870c7", + "publisher": "Ubuntu Developers ", + "name": "sed", + "version": "4.7-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:sed:sed:4.7-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sed@4.7-1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sensible-utils@0.0.12+nmu1?arch=all&distro=ubuntu-20.04&package-id=7e50cf6ac335106e", + "publisher": "Ubuntu Developers ", + "name": "sensible-utils", + "version": "0.0.12+nmu1", + "licenses": [ + { + "license": { + "name": "All-permissive" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "configure" + } + }, + { + "license": { + "name": "installsh" + } + } + ], + "cpe": "cpe:2.3:a:sensible-utils:sensible-utils:0.0.12\\+nmu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sensible-utils@0.0.12+nmu1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sg3-utils@1.44-1ubuntu2?arch=amd64&distro=ubuntu-20.04&package-id=794bb1692a1cfa88", + "publisher": "Ubuntu Developers ", + "name": "sg3-utils", + "version": "1.44-1ubuntu2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:sg3-utils:sg3-utils:1.44-1ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sg3-utils@1.44-1ubuntu2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/shared-mime-info@1.15-1?arch=amd64&distro=ubuntu-20.04&package-id=c15ede029a3e38cd", + "publisher": "Ubuntu Developers ", + "name": "shared-mime-info", + "version": "1.15-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:shared-mime-info:shared-mime-info:1.15-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/shared-mime-info@1.15-1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sharutils@1:4.15.2-4build1?arch=amd64&distro=ubuntu-20.04&package-id=e920784bf62009c0", + "publisher": "Ubuntu Developers ", + "name": "sharutils", + "version": "1:4.15.2-4build1", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:sharutils:sharutils:1\\:4.15.2-4build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sharutils@1:4.15.2-4build1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sysvinit-utils@2.96-2.1ubuntu1?arch=amd64&upstream=sysvinit&distro=ubuntu-20.04&package-id=abc451774789c392", + "publisher": "Ubuntu Developers ", + "name": "sysvinit-utils", + "version": "2.96-2.1ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:sysvinit-utils:sysvinit-utils:2.96-2.1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sysvinit-utils@2.96-2.1ubuntu1?arch=amd64&upstream=sysvinit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/tar@1.30+dfsg-7ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04&package-id=4c6cd0d17cc842e", + "publisher": "Ubuntu Developers ", + "name": "tar", + "version": "1.30+dfsg-7ubuntu0.20.04.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:tar:tar:1.30\\+dfsg-7ubuntu0.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/tar@1.30+dfsg-7ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/telnet@0.17-41.2build1?arch=amd64&upstream=netkit-telnet&distro=ubuntu-20.04&package-id=440d9ef0dcd8675e", + "publisher": "Ubuntu Developers ", + "name": "telnet", + "version": "0.17-41.2build1", + "cpe": "cpe:2.3:a:telnet:telnet:0.17-41.2build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/telnet@0.17-41.2build1?arch=amd64&upstream=netkit-telnet&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/tgt@1.0.66-68.e042fd?arch=amd64&distro=ubuntu-20.04&package-id=c8ab64462d876a0c", + "publisher": "FUJITA Tomonori ", + "name": "tgt", + "version": "1.0.66-68.e042fd", + "cpe": "cpe:2.3:a:tgt:tgt:1.0.66-68.e042fd:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/tgt@1.0.66-68.e042fd?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/tzdata@2021a-0ubuntu0.20.04?arch=all&distro=ubuntu-20.04&package-id=aaae4a94d26494c0", + "publisher": "Ubuntu Developers ", + "name": "tzdata", + "version": "2021a-0ubuntu0.20.04", + "licenses": [ + { + "license": { + "id": "ICU" + } + } + ], + "cpe": "cpe:2.3:a:tzdata:tzdata:2021a-0ubuntu0.20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/tzdata@2021a-0ubuntu0.20.04?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ubuntu-keyring@2020.02.11.4?arch=all&distro=ubuntu-20.04&package-id=6d2b18ebcbe1dab7", + "publisher": "Dimitri John Ledkov ", + "name": "ubuntu-keyring", + "version": "2020.02.11.4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:ubuntu-keyring:ubuntu-keyring:2020.02.11.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ubuntu-keyring@2020.02.11.4?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ucf@3.0038+nmu1?arch=all&distro=ubuntu-20.04&package-id=ab3b8cc8be7b5655", + "publisher": "Ubuntu Developers ", + "name": "ucf", + "version": "3.0038+nmu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ucf:ucf:3.0038\\+nmu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ucf@3.0038+nmu1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/util-linux@2.34-0.1ubuntu9.1?arch=amd64&distro=ubuntu-20.04&package-id=33e86bd94ef763b6", + "publisher": "Ubuntu Developers ", + "name": "util-linux", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:util-linux:util-linux:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/util-linux@2.34-0.1ubuntu9.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/wget@1.20.3-1ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=2fee01aeba885b76", + "publisher": "Ubuntu Developers ", + "name": "wget", + "version": "1.20.3-1ubuntu1", + "licenses": [ + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:wget:wget:1.20.3-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/wget@1.20.3-1ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/xdg-user-dirs@0.17-2ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=6c580aaac3aa6068", + "publisher": "Ubuntu Developers ", + "name": "xdg-user-dirs", + "version": "0.17-2ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:xdg-user-dirs:xdg-user-dirs:0.17-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/xdg-user-dirs@0.17-2ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/xz-utils@5.2.4-1ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=46271b3ba3de19b6", + "publisher": "Ubuntu Developers ", + "name": "xz-utils", + "version": "5.2.4-1ubuntu1", + "licenses": [ + { + "license": { + "name": "Autoconf" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "PD" + } + }, + { + "license": { + "name": "PD-debian" + } + }, + { + "license": { + "name": "config-h" + } + }, + { + "license": { + "name": "noderivs" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-nowarranty" + } + }, + { + "license": { + "name": "probably-PD" + } + } + ], + "cpe": "cpe:2.3:a:xz-utils:xz-utils:5.2.4-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/xz-utils@5.2.4-1ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/zlib1g@1:1.2.11.dfsg-2ubuntu1.2?arch=amd64&upstream=zlib&distro=ubuntu-20.04&package-id=65361fdd213cfcf7", + "publisher": "Ubuntu Developers ", + "name": "zlib1g", + "version": "1:1.2.11.dfsg-2ubuntu1.2", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib1g:zlib1g:1\\:1.2.11.dfsg-2ubuntu1.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/zlib1g@1:1.2.11.dfsg-2ubuntu1.2?arch=amd64&upstream=zlib&distro=ubuntu-20.04" + }, + { + "type": "operating-system", + "name": "ubuntu", + "version": "20.04", + "description": "Ubuntu 20.04.3 LTS", + "swid": { + "tagId": "ubuntu", + "name": "ubuntu", + "version": "20.04" + }, + "externalReferences": [ + { + "url": "https://bugs.launchpad.net/ubuntu/", + "type": "issue-tracker" + }, + { + "url": "https://www.ubuntu.com/", + "type": "website" + }, + { + "url": "https://help.ubuntu.com/", + "comment": "support", + "type": "other" + }, + { + "url": "https://www.ubuntu.com/legal/terms-and-policies/privacy-policy", + "comment": "privacyPolicy", + "type": "other" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/adduser@3.118?arch=all&distro=debian-11&package-id=3e9282034226b93f", + "publisher": "Debian Adduser Developers ", + "name": "adduser", + "version": "3.118", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:adduser:adduser:3.118:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/adduser@3.118?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/apt@2.2.4?arch=amd64&distro=debian-11&package-id=1cce537379623b25", + "publisher": "APT Development Team ", + "name": "apt", + "version": "2.2.4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:apt:apt:2.2.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/apt@2.2.4?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/base-files@11.1+deb11u6?arch=amd64&distro=debian-11&package-id=3c26dd637259b397", + "publisher": "Santiago Vila ", + "name": "base-files", + "version": "11.1+deb11u6", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:11.1\\+deb11u6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/base-files@11.1+deb11u6?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/base-passwd@3.5.51?arch=amd64&distro=debian-11&package-id=7ae3e2ba2e10f31", + "publisher": "Colin Watson ", + "name": "base-passwd", + "version": "3.5.51", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:base-passwd:base-passwd:3.5.51:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/base-passwd@3.5.51?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/bash@5.1-2+deb11u1?arch=amd64&distro=debian-11&package-id=94b35b4f7d874a43", + "publisher": "Matthias Klose ", + "name": "bash", + "version": "5.1-2+deb11u1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:bash:bash:5.1-2\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/bash@5.1-2+deb11u1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/bsdutils@1:2.36.1-8+deb11u1?arch=amd64&upstream=util-linux%402.36.1-8+deb11u1&distro=debian-11&package-id=677e6ace24dce684", + "publisher": "util-linux packagers ", + "name": "bsdutils", + "version": "1:2.36.1-8+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:bsdutils:bsdutils:1\\:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/bsdutils@1:2.36.1-8+deb11u1?arch=amd64&upstream=util-linux%402.36.1-8+deb11u1&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ca-certificates@20210119?arch=all&distro=debian-11&package-id=6b7e2b0745c43628", + "publisher": "Julien Cristau ", + "name": "ca-certificates", + "version": "20210119", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20210119:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ca-certificates@20210119?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/coreutils@8.32-4+b1?arch=amd64&upstream=coreutils%408.32-4&distro=debian-11&package-id=65bac153c492b66e", + "publisher": "Michael Stone ", + "name": "coreutils", + "version": "8.32-4+b1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:coreutils:coreutils:8.32-4\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/coreutils@8.32-4+b1?arch=amd64&upstream=coreutils%408.32-4&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/curl@7.74.0-1.3+deb11u7?arch=amd64&distro=debian-11&package-id=cfa0e9d1620ffa4d", + "publisher": "Alessandro Ghedini ", + "name": "curl", + "version": "7.74.0-1.3+deb11u7", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/curl@7.74.0-1.3+deb11u7?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/dash@0.5.11+git20200708+dd9ef66-5?arch=amd64&distro=debian-11&package-id=19db7775ce4c27be", + "publisher": "Andrej Shadura ", + "name": "dash", + "version": "0.5.11+git20200708+dd9ef66-5", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "FSFUL" + } + }, + { + "license": { + "id": "FSFULLR" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:dash:dash:0.5.11\\+git20200708\\+dd9ef66-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/dash@0.5.11+git20200708+dd9ef66-5?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/debconf@1.5.77?arch=all&distro=debian-11&package-id=99525df5637687bd", + "publisher": "Debconf Developers ", + "name": "debconf", + "version": "1.5.77", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:debconf:debconf:1.5.77:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/debconf@1.5.77?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/debian-archive-keyring@2021.1.1?arch=all&distro=debian-11&package-id=f7fcb44a58e72708", + "publisher": "Debian Release Team ", + "name": "debian-archive-keyring", + "version": "2021.1.1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:debian-archive-keyring:debian-archive-keyring:2021.1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/debian-archive-keyring@2021.1.1?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/debianutils@4.11.2?arch=amd64&distro=debian-11&package-id=4cd4f150dae8c295", + "publisher": "Clint Adams ", + "name": "debianutils", + "version": "4.11.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:debianutils:debianutils:4.11.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/debianutils@4.11.2?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/diffutils@1:3.7-5?arch=amd64&distro=debian-11&package-id=9133f9a320bf77e1", + "publisher": "Santiago Vila ", + "name": "diffutils", + "version": "1:3.7-5", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:diffutils:diffutils:1\\:3.7-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/diffutils@1:3.7-5?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/dpkg@1.20.12?arch=amd64&distro=debian-11&package-id=3dbbad249b74a866", + "publisher": "Dpkg Developers ", + "name": "dpkg", + "version": "1.20.12", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain-md5" + } + }, + { + "license": { + "name": "public-domain-s-s-d" + } + } + ], + "cpe": "cpe:2.3:a:dpkg:dpkg:1.20.12:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/dpkg@1.20.12?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/e2fsprogs@1.46.2-2?arch=amd64&distro=debian-11&package-id=7c4baa682137e759", + "publisher": "Theodore Y. Ts'o ", + "name": "e2fsprogs", + "version": "1.46.2-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:e2fsprogs:e2fsprogs:1.46.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/e2fsprogs@1.46.2-2?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/findutils@4.8.0-1?arch=amd64&distro=debian-11&package-id=b503e3d45616f33c", + "publisher": "Andreas Metzler ", + "name": "findutils", + "version": "4.8.0-1", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:findutils:findutils:4.8.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/findutils@4.8.0-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/fontconfig-config@2.13.1-4.2?arch=all&upstream=fontconfig&distro=debian-11&package-id=4cbb1169d85c98", + "publisher": "Debian freedesktop.org maintainers ", + "name": "fontconfig-config", + "version": "2.13.1-4.2", + "cpe": "cpe:2.3:a:fontconfig-config:fontconfig-config:2.13.1-4.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/fontconfig-config@2.13.1-4.2?arch=all&upstream=fontconfig&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/fonts-dejavu-core@2.37-2?arch=all&upstream=fonts-dejavu&distro=debian-11&package-id=6c1e339e269277ec", + "publisher": "Debian Fonts Task Force ", + "name": "fonts-dejavu-core", + "version": "2.37-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "Bitstream-Vera" + } + } + ], + "cpe": "cpe:2.3:a:fonts-dejavu-core:fonts-dejavu-core:2.37-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/fonts-dejavu-core@2.37-2?arch=all&upstream=fonts-dejavu&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gcc-10-base@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=742204f033ae5a1e", + "publisher": "Debian GCC Maintainers ", + "name": "gcc-10-base", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:gcc-10-base:gcc-10-base:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gcc-10-base@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gcc-9-base@9.3.0-22?arch=amd64&upstream=gcc-9&distro=debian-11&package-id=57c0768e353bbfc8", + "publisher": "Debian GCC Maintainers ", + "name": "gcc-9-base", + "version": "9.3.0-22", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:gcc-9-base:gcc-9-base:9.3.0-22:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gcc-9-base@9.3.0-22?arch=amd64&upstream=gcc-9&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gettext-base@0.21-4?arch=amd64&upstream=gettext&distro=debian-11&package-id=19929d95b155bf28", + "publisher": "Santiago Vila ", + "name": "gettext-base", + "version": "0.21-4", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:gettext-base:gettext-base:0.21-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gettext-base@0.21-4?arch=amd64&upstream=gettext&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/burntsushi/toml@v1.2.1?package-id=4993a0ceaabfa89", + "name": "github.com/BurntSushi/toml", + "version": "v1.2.1", + "cpe": "cpe:2.3:a:BurntSushi:toml:v1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/BurntSushi/toml@v1.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/masterminds/goutils@v1.1.1?package-id=ea2fd87e5c6b0bda", + "name": "github.com/Masterminds/goutils", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:Masterminds:goutils:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Masterminds/goutils@v1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/masterminds/semver/v3@v3.2.0?package-id=acdf5909fa386e8c", + "name": "github.com/Masterminds/semver/v3", + "version": "v3.2.0", + "cpe": "cpe:2.3:a:Masterminds:semver\\/v3:v3.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Masterminds/semver/v3@v3.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/masterminds/sprig/v3@v3.2.3?package-id=9577e423600de01f", + "name": "github.com/Masterminds/sprig/v3", + "version": "v3.2.3", + "cpe": "cpe:2.3:a:Masterminds:sprig\\/v3:v3.2.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Masterminds/sprig/v3@v3.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/containerd/containerd@v1.6.18?package-id=31596a8a7b418bf6", + "name": "github.com/containerd/containerd", + "version": "v1.6.18", + "cpe": "cpe:2.3:a:containerd:containerd:v1.6.18:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/containerd/containerd@v1.6.18" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/daviddengcn/go-colortext@v1.0.0?package-id=82d258407d30e9c7", + "name": "github.com/daviddengcn/go-colortext", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:daviddengcn:go-colortext:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/daviddengcn/go-colortext@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/docker/docker@v23.0.3+incompatible?package-id=b089572c8ed99592", + "name": "github.com/docker/docker", + "version": "v23.0.3+incompatible", + "cpe": "cpe:2.3:a:docker:docker:v23.0.3\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/docker@v23.0.3+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/docker/go-connections@v0.4.0?package-id=a8defa009bf0f86e", + "name": "github.com/docker/go-connections", + "version": "v0.4.0", + "cpe": "cpe:2.3:a:docker:go-connections:v0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/go-connections@v0.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/docker/go-units@v0.5.0?package-id=d532d3e73230f49", + "name": "github.com/docker/go-units", + "version": "v0.5.0", + "cpe": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/go-units@v0.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/fsouza/go-dockerclient@v1.9.7?package-id=7ef0e9cf0f6c74c8", + "name": "github.com/fsouza/go-dockerclient", + "version": "v1.9.7", + "cpe": "cpe:2.3:a:fsouza:go-dockerclient:v1.9.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fsouza/go-dockerclient@v1.9.7" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2?package-id=6c71296d126a9acf", + "name": "github.com/gogo/protobuf", + "version": "v1.3.2", + "cpe": "cpe:2.3:a:gogo:protobuf:v1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/uuid@v1.2.0?package-id=93206d2d4782844c", + "name": "github.com/google/uuid", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:google:uuid:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/uuid@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/huandu/xstrings@v1.3.3?package-id=8449d07c71119b5a", + "name": "github.com/huandu/xstrings", + "version": "v1.3.3", + "cpe": "cpe:2.3:a:huandu:xstrings:v1.3.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/huandu/xstrings@v1.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.12?package-id=259d03a78797d6b1", + "name": "github.com/imdario/mergo", + "version": "v0.3.12", + "cpe": "cpe:2.3:a:imdario:mergo:v0.3.12:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/imdario/mergo@v0.3.12" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/klauspost/compress@v1.11.13?package-id=ad69a215bd9e4ce", + "name": "github.com/klauspost/compress", + "version": "v1.11.13", + "cpe": "cpe:2.3:a:klauspost:compress:v1.11.13:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/klauspost/compress@v1.11.13" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mitchellh/copystructure@v1.0.0?package-id=c5b785530a468dd7", + "name": "github.com/mitchellh/copystructure", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:mitchellh:copystructure:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/copystructure@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.0?package-id=b5e57cc0ac507923", + "name": "github.com/mitchellh/reflectwalk", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:mitchellh:reflectwalk:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/moby/patternmatcher@v0.5.0?package-id=95549b63cdd672a3", + "name": "github.com/moby/patternmatcher", + "version": "v0.5.0", + "cpe": "cpe:2.3:a:moby:patternmatcher:v0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/moby/patternmatcher@v0.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/moby/sys/sequential@v0.5.0?package-id=17d1d688de0e526a", + "name": "github.com/moby/sys/sequential", + "version": "v0.5.0", + "cpe": "cpe:2.3:a:moby:sys\\/sequential:v0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/moby/sys/sequential@v0.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/moby/term@v0.0.0-20210619224110-3f7ff695adc6?package-id=f4c3fc41981972d", + "name": "github.com/moby/term", + "version": "v0.0.0-20210619224110-3f7ff695adc6", + "cpe": "cpe:2.3:a:moby:term:v0.0.0-20210619224110-3f7ff695adc6:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/moby/term@v0.0.0-20210619224110-3f7ff695adc6" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/morikuni/aec@v1.0.0?package-id=5cf4a6555fb2fc94", + "name": "github.com/morikuni/aec", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:morikuni:aec:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/morikuni/aec@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/nginx-proxy/docker-gen@v0.0.0-20230418052149-902b12d786e8?package-id=4a7d0b506880ec78", + "name": "github.com/nginx-proxy/docker-gen", + "version": "v0.0.0-20230418052149-902b12d786e8", + "cpe": "cpe:2.3:a:nginx-proxy:docker-gen:v0.0.0-20230418052149-902b12d786e8:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/nginx-proxy/docker-gen@v0.0.0-20230418052149-902b12d786e8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/nginxproxy/forego@v0.0.0-20210608192909-d75f7045feff?package-id=8231cf0aeaef9de5", + "name": "github.com/nginxproxy/forego", + "version": "v0.0.0-20210608192909-d75f7045feff", + "cpe": "cpe:2.3:a:nginxproxy:forego:v0.0.0-20210608192909-d75f7045feff:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/nginxproxy/forego@v0.0.0-20210608192909-d75f7045feff" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=803e8a92d934af59", + "name": "github.com/opencontainers/go-digest", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/opencontainers/image-spec@v1.0.3-0.20211202183452-c5a74bcca799?package-id=fa812ac66b7816f0", + "name": "github.com/opencontainers/image-spec", + "version": "v1.0.3-0.20211202183452-c5a74bcca799", + "cpe": "cpe:2.3:a:opencontainers:image-spec:v1.0.3-0.20211202183452-c5a74bcca799:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/opencontainers/image-spec@v1.0.3-0.20211202183452-c5a74bcca799" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/opencontainers/runc@v1.1.5?package-id=5d4cc056642b19a0", + "name": "github.com/opencontainers/runc", + "version": "v1.1.5", + "cpe": "cpe:2.3:a:opencontainers:runc:v1.1.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/opencontainers/runc@v1.1.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=2ed7122b49866153", + "name": "github.com/pkg/errors", + "version": "v0.9.1", + "cpe": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pkg/errors@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/shopspring/decimal@v1.2.0?package-id=79cdbc7ed43490e4", + "name": "github.com/shopspring/decimal", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:shopspring:decimal:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/shopspring/decimal@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.8.1?package-id=18f489688140621d", + "name": "github.com/sirupsen/logrus", + "version": "v1.8.1", + "cpe": "cpe:2.3:a:sirupsen:logrus:v1.8.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/sirupsen/logrus@v1.8.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/cast@v1.3.1?package-id=c9839d61d6c844bd", + "name": "github.com/spf13/cast", + "version": "v1.3.1", + "cpe": "cpe:2.3:a:spf13:cast:v1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/spf13/cast@v1.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/subosito/gotenv@v1.2.0?package-id=2bbfe34873caa650", + "name": "github.com/subosito/gotenv", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:subosito:gotenv:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/subosito/gotenv@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.3.0?package-id=438a788894c5abd3", + "name": "golang.org/x/crypto", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:golang:x\\/crypto:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/crypto@v0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.6.0?package-id=2a224142d0d15f8a", + "name": "golang.org/x/sys", + "version": "v0.6.0", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gpgv@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11&package-id=b6346590c45ba7ab", + "publisher": "Debian GnuPG Maintainers ", + "name": "gpgv", + "version": "2.2.27-2+deb11u2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + }, + { + "license": { + "name": "TinySCHEME" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:gpgv:gpgv:2.2.27-2\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gpgv@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/grep@3.6-1?arch=amd64&distro=debian-11&package-id=9ed140c6f7959d", + "publisher": "Anibal Monsalve Salazar ", + "name": "grep", + "version": "3.6-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:grep:grep:3.6-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/grep@3.6-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gzip@1.10-4+deb11u1?arch=amd64&distro=debian-11&package-id=ade955af6710751d", + "publisher": "Milan Kupcevic ", + "name": "gzip", + "version": "1.10-4+deb11u1", + "licenses": [ + { + "license": { + "name": "FSF-manpages" + } + }, + { + "license": { + "name": "GFDL-1.3+-no-invariant" + } + }, + { + "license": { + "name": "GFDL-3" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:gzip:gzip:1.10-4\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gzip@1.10-4+deb11u1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/hostname@3.23?arch=amd64&distro=debian-11&package-id=fec906d1ab1d9712", + "publisher": "Michael Meskes ", + "name": "hostname", + "version": "3.23", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:hostname:hostname:3.23:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/hostname@3.23?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/init-system-helpers@1.60?arch=all&distro=debian-11&package-id=9853db6c4e48777f", + "publisher": "Debian systemd Maintainers ", + "name": "init-system-helpers", + "version": "1.60", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:init-system-helpers:init-system-helpers:1.60:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/init-system-helpers@1.60?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libacl1@2.2.53-10?arch=amd64&upstream=acl&distro=debian-11&package-id=e26fd10cf6ff246", + "publisher": "Guillem Jover ", + "name": "libacl1", + "version": "2.2.53-10", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libacl1:libacl1:2.2.53-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libacl1@2.2.53-10?arch=amd64&upstream=acl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libapt-pkg6.0@2.2.4?arch=amd64&upstream=apt&distro=debian-11&package-id=da442f0998cccf2b", + "publisher": "APT Development Team ", + "name": "libapt-pkg6.0", + "version": "2.2.4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libapt-pkg6.0:libapt-pkg6.0:2.2.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libapt-pkg6.0@2.2.4?arch=amd64&upstream=apt&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libattr1@1:2.4.48-6?arch=amd64&upstream=attr&distro=debian-11&package-id=254a97dd16e20391", + "publisher": "Guillem Jover ", + "name": "libattr1", + "version": "1:2.4.48-6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libattr1:libattr1:1\\:2.4.48-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libattr1@1:2.4.48-6?arch=amd64&upstream=attr&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libaudit-common@1:3.0-2?arch=all&upstream=audit&distro=debian-11&package-id=e666dc18886f28ff", + "publisher": "Laurent Bigonville ", + "name": "libaudit-common", + "version": "1:3.0-2", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit-common:libaudit-common:1\\:3.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libaudit-common@1:3.0-2?arch=all&upstream=audit&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libaudit1@1:3.0-2?arch=amd64&upstream=audit&distro=debian-11&package-id=ae77fe6c43b7188d", + "publisher": "Laurent Bigonville ", + "name": "libaudit1", + "version": "1:3.0-2", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit1:libaudit1:1\\:3.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libaudit1@1:3.0-2?arch=amd64&upstream=audit&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libblkid1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11&package-id=f235c9c5cb7b4190", + "publisher": "util-linux packagers ", + "name": "libblkid1", + "version": "2.36.1-8+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libblkid1:libblkid1:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libblkid1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libbrotli1@1.0.9-2+b2?arch=amd64&upstream=brotli%401.0.9-2&distro=debian-11&package-id=56558463e048d713", + "publisher": "Tomasz Buchert ", + "name": "libbrotli1", + "version": "1.0.9-2+b2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libbrotli1:libbrotli1:1.0.9-2\\+b2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libbrotli1@1.0.9-2+b2?arch=amd64&upstream=brotli%401.0.9-2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libbsd0@0.11.3-1?arch=amd64&upstream=libbsd&distro=debian-11&package-id=19b310b25a33fc08", + "publisher": "Guillem Jover ", + "name": "libbsd0", + "version": "0.11.3-1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-clause-author" + } + }, + { + "license": { + "name": "BSD-2-clause-verbatim" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-John-Birrell" + } + }, + { + "license": { + "name": "BSD-3-clause-Regents" + } + }, + { + "license": { + "name": "BSD-3-clause-author" + } + }, + { + "license": { + "name": "BSD-4-clause-Christopher-G-Demetriou" + } + }, + { + "license": { + "name": "BSD-4-clause-Niels-Provos" + } + }, + { + "license": { + "name": "BSD-5-clause-Peter-Wemm" + } + }, + { + "license": { + "id": "Beerware" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "ISC-Original" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libbsd0:libbsd0:0.11.3-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libbsd0@0.11.3-1?arch=amd64&upstream=libbsd&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libbz2-1.0@1.0.8-4?arch=amd64&upstream=bzip2&distro=debian-11&package-id=120fe415369d1784", + "publisher": "Anibal Monsalve Salazar ", + "name": "libbz2-1.0", + "version": "1.0.8-4", + "licenses": [ + { + "license": { + "name": "BSD-variant" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libbz2-1.0:libbz2-1.0:1.0.8-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libbz2-1.0@1.0.8-4?arch=amd64&upstream=bzip2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libc-bin@2.31-13+deb11u5?arch=amd64&upstream=glibc&distro=debian-11&package-id=228ff11572a24b74", + "publisher": "GNU Libc Maintainers ", + "name": "libc-bin", + "version": "2.31-13+deb11u5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc-bin:libc-bin:2.31-13\\+deb11u5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libc-bin@2.31-13+deb11u5?arch=amd64&upstream=glibc&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libc6@2.31-13+deb11u5?arch=amd64&upstream=glibc&distro=debian-11&package-id=abe2c3f30be707e3", + "publisher": "GNU Libc Maintainers ", + "name": "libc6", + "version": "2.31-13+deb11u5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc6:libc6:2.31-13\\+deb11u5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libc6@2.31-13+deb11u5?arch=amd64&upstream=glibc&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcap-ng0@0.7.9-2.2+b1?arch=amd64&upstream=libcap-ng%400.7.9-2.2&distro=debian-11&package-id=77d3f745010c245", + "publisher": "Pierre Chifflier ", + "name": "libcap-ng0", + "version": "0.7.9-2.2+b1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libcap-ng0:libcap-ng0:0.7.9-2.2\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcap-ng0@0.7.9-2.2+b1?arch=amd64&upstream=libcap-ng%400.7.9-2.2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcom-err2@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11&package-id=c3e2285fd362b920", + "publisher": "Theodore Y. Ts'o ", + "name": "libcom-err2", + "version": "1.46.2-2", + "cpe": "cpe:2.3:a:libcom-err2:libcom-err2:1.46.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcom-err2@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcrypt1@1:4.4.18-4?arch=amd64&upstream=libxcrypt&distro=debian-11&package-id=4d32f8aeb497b2e2", + "publisher": "Marco d'Itri ", + "name": "libcrypt1", + "version": "1:4.4.18-4", + "cpe": "cpe:2.3:a:libcrypt1:libcrypt1:1\\:4.4.18-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcrypt1@1:4.4.18-4?arch=amd64&upstream=libxcrypt&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcurl4@7.74.0-1.3+deb11u7?arch=amd64&upstream=curl&distro=debian-11&package-id=5ca0f748c3f34f0", + "publisher": "Alessandro Ghedini ", + "name": "libcurl4", + "version": "7.74.0-1.3+deb11u7", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3+deb11u7?arch=amd64&upstream=curl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libdb5.3@5.3.28+dfsg1-0.8?arch=amd64&upstream=db5.3&distro=debian-11&package-id=bd40bf11043e04a6", + "publisher": "Debian Berkeley DB Team ", + "name": "libdb5.3", + "version": "5.3.28+dfsg1-0.8", + "cpe": "cpe:2.3:a:libdb5.3:libdb5.3:5.3.28\\+dfsg1-0.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libdb5.3@5.3.28+dfsg1-0.8?arch=amd64&upstream=db5.3&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libdebconfclient0@0.260?arch=amd64&upstream=cdebconf&distro=debian-11&package-id=f46e6be545ae8a8c", + "publisher": "Debian Install System Team ", + "name": "libdebconfclient0", + "version": "0.260", + "cpe": "cpe:2.3:a:libdebconfclient0:libdebconfclient0:0.260:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libdebconfclient0@0.260?arch=amd64&upstream=cdebconf&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libdeflate0@1.7-1?arch=amd64&upstream=libdeflate&distro=debian-11&package-id=6d2c83972d64bdfd", + "publisher": "Debian Med Packaging Team ", + "name": "libdeflate0", + "version": "1.7-1", + "licenses": [ + { + "license": { + "name": "Expat" + } + } + ], + "cpe": "cpe:2.3:a:libdeflate0:libdeflate0:1.7-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libdeflate0@1.7-1?arch=amd64&upstream=libdeflate&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libexpat1@2.2.10-2+deb11u5?arch=amd64&upstream=expat&distro=debian-11&package-id=a3394c6f61c6d6ab", + "publisher": "Laszlo Boszormenyi (GCS) ", + "name": "libexpat1", + "version": "2.2.10-2+deb11u5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libexpat1:libexpat1:2.2.10-2\\+deb11u5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libexpat1@2.2.10-2+deb11u5?arch=amd64&upstream=expat&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libext2fs2@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11&package-id=78620e65fcd780c3", + "publisher": "Theodore Y. Ts'o ", + "name": "libext2fs2", + "version": "1.46.2-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libext2fs2:libext2fs2:1.46.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libext2fs2@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libffi7@3.3-6?arch=amd64&upstream=libffi&distro=debian-11&package-id=b76aa1c712147c28", + "publisher": "Debian GCC Maintainers ", + "name": "libffi7", + "version": "3.3-6", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libffi7:libffi7:3.3-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libffi7@3.3-6?arch=amd64&upstream=libffi&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libfontconfig1@2.13.1-4.2?arch=amd64&upstream=fontconfig&distro=debian-11&package-id=f0e377aa1de8214e", + "publisher": "Debian freedesktop.org maintainers ", + "name": "libfontconfig1", + "version": "2.13.1-4.2", + "cpe": "cpe:2.3:a:libfontconfig1:libfontconfig1:2.13.1-4.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libfontconfig1@2.13.1-4.2?arch=amd64&upstream=fontconfig&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libfreetype6@2.10.4+dfsg-1+deb11u1?arch=amd64&upstream=freetype&distro=debian-11&package-id=55f5893ecb8315bb", + "publisher": "Hugh McMaster ", + "name": "libfreetype6", + "version": "2.10.4+dfsg-1+deb11u1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "FSFAP" + } + }, + { + "license": { + "id": "FSFUL" + } + }, + { + "license": { + "id": "FSFULLR" + } + }, + { + "license": { + "id": "FTL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "id": "OFL-1.1" + } + }, + { + "license": { + "name": "OpenGroup-BSD-like" + } + }, + { + "license": { + "name": "Permissive" + } + }, + { + "license": { + "name": "Public-Domain" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libfreetype6:libfreetype6:2.10.4\\+dfsg-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libfreetype6@2.10.4+dfsg-1+deb11u1?arch=amd64&upstream=freetype&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgcc-s1@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=ddb4ba0153b59955", + "publisher": "Debian GCC Maintainers ", + "name": "libgcc-s1", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcc-s1:libgcc-s1:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgcc-s1@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgcrypt20@1.8.7-6?arch=amd64&distro=debian-11&package-id=7bc9b7389c934ca8", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libgcrypt20", + "version": "1.8.7-6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcrypt20:libgcrypt20:1.8.7-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgcrypt20@1.8.7-6?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgd3@2.3.0-2?arch=amd64&upstream=libgd2&distro=debian-11&package-id=2b8f05c459f3fd23", + "publisher": "GD Team ", + "name": "libgd3", + "version": "2.3.0-2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "GAP~Makefile.in" + } + }, + { + "license": { + "name": "GAP~configure" + } + }, + { + "license": { + "id": "GD" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "HPND" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "WEBP" + } + }, + { + "license": { + "name": "XFIG" + } + } + ], + "cpe": "cpe:2.3:a:libgd3:libgd3:2.3.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgd3@2.3.0-2?arch=amd64&upstream=libgd2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgeoip1@1.6.12-7?arch=amd64&upstream=geoip&distro=debian-11&package-id=bf7ae46036b453be", + "publisher": "Patrick Matthäi ", + "name": "libgeoip1", + "version": "1.6.12-7", + "licenses": [ + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgeoip1:libgeoip1:1.6.12-7:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgeoip1@1.6.12-7?arch=amd64&upstream=geoip&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgmp10@2:6.2.1+dfsg-1+deb11u1?arch=amd64&upstream=gmp&distro=debian-11&package-id=b8566db47d8d4ddc", + "publisher": "Debian Science Team ", + "name": "libgmp10", + "version": "2:6.2.1+dfsg-1+deb11u1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgmp10:libgmp10:2\\:6.2.1\\+dfsg-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgmp10@2:6.2.1+dfsg-1+deb11u1?arch=amd64&upstream=gmp&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgnutls30@3.7.1-5+deb11u3?arch=amd64&upstream=gnutls28&distro=debian-11&package-id=7a4a4d471a0c6aed", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libgnutls30", + "version": "3.7.1-5+deb11u3", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPLv3+" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "name": "LGPLv2.1+" + } + }, + { + "license": { + "name": "LGPLv3+_or_GPLv2+" + } + }, + { + "license": { + "name": "The" + } + } + ], + "cpe": "cpe:2.3:a:libgnutls30:libgnutls30:3.7.1-5\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgnutls30@3.7.1-5+deb11u3?arch=amd64&upstream=gnutls28&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgpg-error0@1.38-2?arch=amd64&upstream=libgpg-error&distro=debian-11&package-id=2391ec82a95e1b79", + "publisher": "Debian GnuPG Maintainers ", + "name": "libgpg-error0", + "version": "1.38-2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "g10-permissive" + } + } + ], + "cpe": "cpe:2.3:a:libgpg-error0:libgpg-error0:1.38-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgpg-error0@1.38-2?arch=amd64&upstream=libgpg-error&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11&package-id=3f685865c7e045c1", + "publisher": "Sam Hartman ", + "name": "libgssapi-krb5-2", + "version": "1.18.3-6+deb11u3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libhogweed6@3.7.3-1?arch=amd64&upstream=nettle&distro=debian-11&package-id=5e22b39e8cb919f6", + "publisher": "Magnus Holmgren ", + "name": "libhogweed6", + "version": "3.7.3-1", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libhogweed6:libhogweed6:3.7.3-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libhogweed6@3.7.3-1?arch=amd64&upstream=nettle&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libicu67@67.1-7?arch=amd64&upstream=icu&distro=debian-11&package-id=52bb142f2f6f57d4", + "publisher": "Laszlo Boszormenyi (GCS) ", + "name": "libicu67", + "version": "67.1-7", + "cpe": "cpe:2.3:a:libicu67:libicu67:67.1-7:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libicu67@67.1-7?arch=amd64&upstream=icu&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libidn2-0@2.3.0-5?arch=amd64&upstream=libidn2&distro=debian-11&package-id=8eb1c8304ad48ef2", + "publisher": "Debian Libidn team ", + "name": "libidn2-0", + "version": "2.3.0-5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "Unicode" + } + } + ], + "cpe": "cpe:2.3:a:libidn2-0:libidn2-0:2.3.0-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libidn2-0@2.3.0-5?arch=amd64&upstream=libidn2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:maven/libintl/libintl@0.21?package-id=a29ca26c5c907c8", + "name": "libintl", + "version": "0.21", + "cpe": "cpe:2.3:a:libintl:libintl:0.21:*:*:*:*:*:*:*", + "purl": "pkg:maven/libintl/libintl@0.21", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "568f3f90c3d6aced58de033a3547ccd2e4e088e8" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libjbig0@2.1-3.1+b2?arch=amd64&upstream=jbigkit%402.1-3.1&distro=debian-11&package-id=ccf2e13886894508", + "publisher": "Michael van der Kolff ", + "name": "libjbig0", + "version": "2.1-3.1+b2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libjbig0:libjbig0:2.1-3.1\\+b2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libjbig0@2.1-3.1+b2?arch=amd64&upstream=jbigkit%402.1-3.1&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libjpeg62-turbo@1:2.0.6-4?arch=amd64&upstream=libjpeg-turbo&distro=debian-11&package-id=2e17533511143831", + "publisher": "Ondřej Surý ", + "name": "libjpeg62-turbo", + "version": "1:2.0.6-4", + "licenses": [ + { + "license": { + "name": "BSD-3" + } + }, + { + "license": { + "name": "BSD-BY-LC-NE" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "NTP" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libjpeg62-turbo:libjpeg62-turbo:1\\:2.0.6-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libjpeg62-turbo@1:2.0.6-4?arch=amd64&upstream=libjpeg-turbo&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libk5crypto3@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11&package-id=ae9e3b8691722eba", + "publisher": "Sam Hartman ", + "name": "libk5crypto3", + "version": "1.18.3-6+deb11u3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libk5crypto3:libk5crypto3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libk5crypto3@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libkeyutils1@1.6.1-2?arch=amd64&upstream=keyutils&distro=debian-11&package-id=308487f5f23bf878", + "publisher": "Christian Kastner ", + "name": "libkeyutils1", + "version": "1.6.1-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libkeyutils1:libkeyutils1:1.6.1-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libkeyutils1@1.6.1-2?arch=amd64&upstream=keyutils&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libkrb5-3@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11&package-id=8bdffe6652e8e7ef", + "publisher": "Sam Hartman ", + "name": "libkrb5-3", + "version": "1.18.3-6+deb11u3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5-3:libkrb5-3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libkrb5-3@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libkrb5support0@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11&package-id=471e6243bbbcf8b2", + "publisher": "Sam Hartman ", + "name": "libkrb5support0", + "version": "1.18.3-6+deb11u3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5support0:libkrb5support0:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libkrb5support0@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libldap-2.4-2@2.4.57+dfsg-3+deb11u1?arch=amd64&upstream=openldap&distro=debian-11&package-id=796a192b709a2a2b", + "publisher": "Debian OpenLDAP Maintainers ", + "name": "libldap-2.4-2", + "version": "2.4.57+dfsg-3+deb11u1", + "cpe": "cpe:2.3:a:libldap-2.4-2:libldap-2.4-2:2.4.57\\+dfsg-3\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libldap-2.4-2@2.4.57+dfsg-3+deb11u1?arch=amd64&upstream=openldap&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/liblz4-1@1.9.3-2?arch=amd64&upstream=lz4&distro=debian-11&package-id=b59e208fb7f8bae4", + "publisher": "Nobuhiro Iwamatsu ", + "name": "liblz4-1", + "version": "1.9.3-2", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:liblz4-1:liblz4-1:1.9.3-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/liblz4-1@1.9.3-2?arch=amd64&upstream=lz4&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/liblzma5@5.2.5-2.1~deb11u1?arch=amd64&upstream=xz-utils&distro=debian-11&package-id=b95662a389d30c72", + "publisher": "Jonathan Nieder ", + "name": "liblzma5", + "version": "5.2.5-2.1~deb11u1", + "licenses": [ + { + "license": { + "name": "Autoconf" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "PD" + } + }, + { + "license": { + "name": "PD-debian" + } + }, + { + "license": { + "name": "config-h" + } + }, + { + "license": { + "name": "noderivs" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-nowarranty" + } + }, + { + "license": { + "name": "probably-PD" + } + } + ], + "cpe": "cpe:2.3:a:liblzma5:liblzma5:5.2.5-2.1\\~deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/liblzma5@5.2.5-2.1~deb11u1?arch=amd64&upstream=xz-utils&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libmd0@1.0.3-3?arch=amd64&upstream=libmd&distro=debian-11&package-id=331d8d42d5fc0777", + "publisher": "Guillem Jover ", + "name": "libmd0", + "version": "1.0.3-3", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-Aaron-D-Gifford" + } + }, + { + "license": { + "id": "Beerware" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "public-domain-md4" + } + }, + { + "license": { + "name": "public-domain-md5" + } + }, + { + "license": { + "name": "public-domain-sha1" + } + } + ], + "cpe": "cpe:2.3:a:libmd0:libmd0:1.0.3-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libmd0@1.0.3-3?arch=amd64&upstream=libmd&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libmount1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11&package-id=afd0c3536366dc2c", + "publisher": "util-linux packagers ", + "name": "libmount1", + "version": "2.36.1-8+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmount1:libmount1:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libmount1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libnettle8@3.7.3-1?arch=amd64&upstream=nettle&distro=debian-11&package-id=ceff94b390c9bf61", + "publisher": "Magnus Holmgren ", + "name": "libnettle8", + "version": "3.7.3-1", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libnettle8:libnettle8:3.7.3-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libnettle8@3.7.3-1?arch=amd64&upstream=nettle&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libnghttp2-14@1.43.0-1?arch=amd64&upstream=nghttp2&distro=debian-11&package-id=cfb81461ba0ee3f7", + "publisher": "Tomasz Buchert ", + "name": "libnghttp2-14", + "version": "1.43.0-1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "SIL-OFL-1.1" + } + }, + { + "license": { + "name": "all-permissive" + } + } + ], + "cpe": "cpe:2.3:a:libnghttp2-14:libnghttp2-14:1.43.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libnghttp2-14@1.43.0-1?arch=amd64&upstream=nghttp2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libnsl2@1.3.0-2?arch=amd64&upstream=libnsl&distro=debian-11&package-id=fc8ac2f1807436d9", + "publisher": "GNU Libc Maintainers ", + "name": "libnsl2", + "version": "1.3.0-2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPL-2+-autoconf-exception" + } + }, + { + "license": { + "name": "GPL-2+-libtool-exception" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPL-3+-autoconf-exception" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "permissive-autoconf-m4" + } + }, + { + "license": { + "name": "permissive-autoconf-m4-no-warranty" + } + }, + { + "license": { + "name": "permissive-configure" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-makefile-in" + } + } + ], + "cpe": "cpe:2.3:a:libnsl2:libnsl2:1.3.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libnsl2@1.3.0-2?arch=amd64&upstream=libnsl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libp11-kit0@0.23.22-1?arch=amd64&upstream=p11-kit&distro=debian-11&package-id=a2ce6d1eb48ab956", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libp11-kit0", + "version": "0.23.22-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "ISC+IBM" + } + }, + { + "license": { + "name": "permissive-like-automake-output" + } + }, + { + "license": { + "name": "same-as-rest-of-p11kit" + } + } + ], + "cpe": "cpe:2.3:a:libp11-kit0:libp11-kit0:0.23.22-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libp11-kit0@0.23.22-1?arch=amd64&upstream=p11-kit&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam-modules@1.4.0-9+deb11u1?arch=amd64&upstream=pam&distro=debian-11&package-id=903eac5974d73705", + "publisher": "Steve Langasek ", + "name": "libpam-modules", + "version": "1.4.0-9+deb11u1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules:libpam-modules:1.4.0-9\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam-modules@1.4.0-9+deb11u1?arch=amd64&upstream=pam&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam-modules-bin@1.4.0-9+deb11u1?arch=amd64&upstream=pam&distro=debian-11&package-id=2dc3f20bb97e020d", + "publisher": "Steve Langasek ", + "name": "libpam-modules-bin", + "version": "1.4.0-9+deb11u1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules-bin:libpam-modules-bin:1.4.0-9\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam-modules-bin@1.4.0-9+deb11u1?arch=amd64&upstream=pam&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam-runtime@1.4.0-9+deb11u1?arch=all&upstream=pam&distro=debian-11&package-id=1238d07342abe7a3", + "publisher": "Steve Langasek ", + "name": "libpam-runtime", + "version": "1.4.0-9+deb11u1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-runtime:libpam-runtime:1.4.0-9\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam-runtime@1.4.0-9+deb11u1?arch=all&upstream=pam&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam0g@1.4.0-9+deb11u1?arch=amd64&upstream=pam&distro=debian-11&package-id=70917c5424d601fa", + "publisher": "Steve Langasek ", + "name": "libpam0g", + "version": "1.4.0-9+deb11u1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam0g:libpam0g:1.4.0-9\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam0g@1.4.0-9+deb11u1?arch=amd64&upstream=pam&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpcre2-8-0@10.36-2+deb11u1?arch=amd64&upstream=pcre2&distro=debian-11&package-id=5d07d7ec308f6bb2", + "publisher": "Matthew Vernon ", + "name": "libpcre2-8-0", + "version": "10.36-2+deb11u1", + "cpe": "cpe:2.3:a:libpcre2-8-0:libpcre2-8-0:10.36-2\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpcre2-8-0@10.36-2+deb11u1?arch=amd64&upstream=pcre2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpcre3@2:8.39-13?arch=amd64&upstream=pcre3&distro=debian-11&package-id=1c1641a0882b431f", + "publisher": "Matthew Vernon ", + "name": "libpcre3", + "version": "2:8.39-13", + "cpe": "cpe:2.3:a:libpcre3:libpcre3:2\\:8.39-13:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpcre3@2:8.39-13?arch=amd64&upstream=pcre3&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=amd64&upstream=libpng1.6&distro=debian-11&package-id=9821c1ad36f085c7", + "publisher": "Maintainers of libpng1.6 packages ", + "name": "libpng16-16", + "version": "1.6.37-3", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-like-with-advertising-clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "expat" + } + }, + { + "license": { + "id": "Libpng" + } + } + ], + "cpe": "cpe:2.3:a:libpng16-16:libpng16-16:1.6.37-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=amd64&upstream=libpng1.6&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpsl5@0.21.0-1.2?arch=amd64&upstream=libpsl&distro=debian-11&package-id=3409718c91a2d222", + "publisher": "Tim Rühsen ", + "name": "libpsl5", + "version": "0.21.0-1.2", + "licenses": [ + { + "license": { + "name": "Chromium" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libpsl5:libpsl5:0.21.0-1.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpsl5@0.21.0-1.2?arch=amd64&upstream=libpsl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libreadline8@8.1-1?arch=amd64&upstream=readline&distro=debian-11&package-id=348793ec2b579ee6", + "publisher": "Matthias Klose ", + "name": "libreadline8", + "version": "8.1-1", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libreadline8:libreadline8:8.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libreadline8@8.1-1?arch=amd64&upstream=readline&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/librtmp1@2.4+20151223.gitfa8646d.1-2+b2?arch=amd64&upstream=rtmpdump%402.4+20151223.gitfa8646d.1-2&distro=debian-11&package-id=4f5f3212d3812c5d", + "publisher": "Debian Multimedia Maintainers ", + "name": "librtmp1", + "version": "2.4+20151223.gitfa8646d.1-2+b2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:librtmp1:librtmp1:2.4\\+20151223.gitfa8646d.1-2\\+b2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/librtmp1@2.4+20151223.gitfa8646d.1-2+b2?arch=amd64&upstream=rtmpdump%402.4+20151223.gitfa8646d.1-2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsasl2-2@2.1.27+dfsg-2.1+deb11u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-11&package-id=77ea74a82c5fc951", + "publisher": "Debian Cyrus Team ", + "name": "libsasl2-2", + "version": "2.1.27+dfsg-2.1+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-2:libsasl2-2:2.1.27\\+dfsg-2.1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsasl2-2@2.1.27+dfsg-2.1+deb11u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsasl2-modules-db@2.1.27+dfsg-2.1+deb11u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-11&package-id=1e10a1d2edb3e77a", + "publisher": "Debian Cyrus Team ", + "name": "libsasl2-modules-db", + "version": "2.1.27+dfsg-2.1+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-modules-db:libsasl2-modules-db:2.1.27\\+dfsg-2.1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsasl2-modules-db@2.1.27+dfsg-2.1+deb11u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libseccomp2@2.5.1-1+deb11u1?arch=amd64&upstream=libseccomp&distro=debian-11&package-id=bb0878d1437830b4", + "publisher": "Kees Cook ", + "name": "libseccomp2", + "version": "2.5.1-1+deb11u1", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libseccomp2:libseccomp2:2.5.1-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libseccomp2@2.5.1-1+deb11u1?arch=amd64&upstream=libseccomp&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libselinux1@3.1-3?arch=amd64&upstream=libselinux&distro=debian-11&package-id=bb9d0a1adefb7931", + "publisher": "Debian SELinux maintainers ", + "name": "libselinux1", + "version": "3.1-3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libselinux1:libselinux1:3.1-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libselinux1@3.1-3?arch=amd64&upstream=libselinux&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsemanage-common@3.1-1?arch=all&upstream=libsemanage&distro=debian-11&package-id=f41fe741bd23f493", + "publisher": "Debian SELinux maintainers ", + "name": "libsemanage-common", + "version": "3.1-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage-common:libsemanage-common:3.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsemanage-common@3.1-1?arch=all&upstream=libsemanage&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsemanage1@3.1-1+b2?arch=amd64&upstream=libsemanage%403.1-1&distro=debian-11&package-id=fa4813c20a8027a6", + "publisher": "Debian SELinux maintainers ", + "name": "libsemanage1", + "version": "3.1-1+b2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage1:libsemanage1:3.1-1\\+b2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsemanage1@3.1-1+b2?arch=amd64&upstream=libsemanage%403.1-1&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsepol1@3.1-1?arch=amd64&upstream=libsepol&distro=debian-11&package-id=cfa6f496d2fd049", + "publisher": "Debian SELinux maintainers ", + "name": "libsepol1", + "version": "3.1-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsepol1:libsepol1:3.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsepol1@3.1-1?arch=amd64&upstream=libsepol&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsmartcols1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11&package-id=cf3b22adc552a311", + "publisher": "util-linux packagers ", + "name": "libsmartcols1", + "version": "2.36.1-8+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsmartcols1:libsmartcols1:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsmartcols1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libss2@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11&package-id=4ba13b2c11cb0876", + "publisher": "Theodore Y. Ts'o ", + "name": "libss2", + "version": "1.46.2-2", + "cpe": "cpe:2.3:a:libss2:libss2:1.46.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libss2@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libssh2-1@1.9.0-2?arch=amd64&upstream=libssh2&distro=debian-11&package-id=7b11dbeecfce2854", + "publisher": "Nicolas Mora ", + "name": "libssh2-1", + "version": "1.9.0-2", + "licenses": [ + { + "license": { + "name": "BSD3" + } + } + ], + "cpe": "cpe:2.3:a:libssh2-1:libssh2-1:1.9.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libssh2-1@1.9.0-2?arch=amd64&upstream=libssh2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libssl1.1@1.1.1n-0+deb11u4?arch=amd64&upstream=openssl&distro=debian-11&package-id=63a11d0164944054", + "publisher": "Debian OpenSSL Team ", + "name": "libssl1.1", + "version": "1.1.1n-0+deb11u4", + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libssl1.1@1.1.1n-0+deb11u4?arch=amd64&upstream=openssl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libstdc++6@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=748369630632944", + "publisher": "Debian GCC Maintainers ", + "name": "libstdc++6", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libstdc++6@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsystemd0@247.3-7+deb11u1?arch=amd64&upstream=systemd&distro=debian-11&package-id=4c258dc3b086d634", + "publisher": "Debian systemd Maintainers ", + "name": "libsystemd0", + "version": "247.3-7+deb11u1", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsystemd0:libsystemd0:247.3-7\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsystemd0@247.3-7+deb11u1?arch=amd64&upstream=systemd&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtasn1-6@4.16.0-2+deb11u1?arch=amd64&distro=debian-11&package-id=74865cf2744adb90", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libtasn1-6", + "version": "4.16.0-2+deb11u1", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtasn1-6:libtasn1-6:4.16.0-2\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtasn1-6@4.16.0-2+deb11u1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u4?arch=amd64&upstream=tiff&distro=debian-11&package-id=c261f1af2b842cce", + "publisher": "Laszlo Boszormenyi (GCS) ", + "name": "libtiff5", + "version": "4.2.0-1+deb11u4", + "licenses": [ + { + "license": { + "name": "Hylafax" + } + } + ], + "cpe": "cpe:2.3:a:libtiff5:libtiff5:4.2.0-1\\+deb11u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u4?arch=amd64&upstream=tiff&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtinfo6@6.2+20201114-2?arch=amd64&upstream=ncurses&distro=debian-11&package-id=9e96601b60336037", + "publisher": "Craig Small ", + "name": "libtinfo6", + "version": "6.2+20201114-2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "MIT/X11" + } + }, + { + "license": { + "id": "X11" + } + } + ], + "cpe": "cpe:2.3:a:libtinfo6:libtinfo6:6.2\\+20201114-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtinfo6@6.2+20201114-2?arch=amd64&upstream=ncurses&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtirpc-common@1.3.1-1+deb11u1?arch=all&upstream=libtirpc&distro=debian-11&package-id=3623a1ef0b5b63b9", + "publisher": "Josue Ortega ", + "name": "libtirpc-common", + "version": "1.3.1-1+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc-common:libtirpc-common:1.3.1-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtirpc-common@1.3.1-1+deb11u1?arch=all&upstream=libtirpc&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtirpc3@1.3.1-1+deb11u1?arch=amd64&upstream=libtirpc&distro=debian-11&package-id=c7b97f0b9d21e851", + "publisher": "Josue Ortega ", + "name": "libtirpc3", + "version": "1.3.1-1+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc3:libtirpc3:1.3.1-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtirpc3@1.3.1-1+deb11u1?arch=amd64&upstream=libtirpc&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libudev1@247.3-7+deb11u1?arch=amd64&upstream=systemd&distro=debian-11&package-id=79c718cff72e218e", + "publisher": "Debian systemd Maintainers ", + "name": "libudev1", + "version": "247.3-7+deb11u1", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libudev1:libudev1:247.3-7\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libudev1@247.3-7+deb11u1?arch=amd64&upstream=systemd&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libunistring2@0.9.10-4?arch=amd64&upstream=libunistring&distro=debian-11&package-id=dc7fcfc9dde2b703", + "publisher": "Jörg Frings-Fürst ", + "name": "libunistring2", + "version": "0.9.10-4", + "licenses": [ + { + "license": { + "name": "FreeSoftware" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GFDL-1.2+" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libunistring2:libunistring2:0.9.10-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libunistring2@0.9.10-4?arch=amd64&upstream=libunistring&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libuuid1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11&package-id=e87310d3e1426d6c", + "publisher": "util-linux packagers ", + "name": "libuuid1", + "version": "2.36.1-8+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libuuid1:libuuid1:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libuuid1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libwebp6@0.6.1-2.1?arch=amd64&upstream=libwebp&distro=debian-11&package-id=88ca886298d7e0b", + "publisher": "Jeff Breidenbach ", + "name": "libwebp6", + "version": "0.6.1-2.1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libwebp6:libwebp6:0.6.1-2.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libwebp6@0.6.1-2.1?arch=amd64&upstream=libwebp&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libx11-6@2:1.7.2-1?arch=amd64&upstream=libx11&distro=debian-11&package-id=ce4e2010925a4939", + "publisher": "Debian X Strike Force ", + "name": "libx11-6", + "version": "2:1.7.2-1", + "cpe": "cpe:2.3:a:libx11-6:libx11-6:2\\:1.7.2-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libx11-6@2:1.7.2-1?arch=amd64&upstream=libx11&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libx11-data@2:1.7.2-1?arch=all&upstream=libx11&distro=debian-11&package-id=8defa9b2d11078dc", + "publisher": "Debian X Strike Force ", + "name": "libx11-data", + "version": "2:1.7.2-1", + "cpe": "cpe:2.3:a:libx11-data:libx11-data:2\\:1.7.2-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libx11-data@2:1.7.2-1?arch=all&upstream=libx11&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxau6@1:1.0.9-1?arch=amd64&upstream=libxau&distro=debian-11&package-id=e6c254c1e56081d8", + "publisher": "Debian X Strike Force ", + "name": "libxau6", + "version": "1:1.0.9-1", + "cpe": "cpe:2.3:a:libxau6:libxau6:1\\:1.0.9-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxau6@1:1.0.9-1?arch=amd64&upstream=libxau&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxcb1@1.14-3?arch=amd64&upstream=libxcb&distro=debian-11&package-id=9281d5ec3fb0ebd8", + "publisher": "Debian X Strike Force ", + "name": "libxcb1", + "version": "1.14-3", + "cpe": "cpe:2.3:a:libxcb1:libxcb1:1.14-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxcb1@1.14-3?arch=amd64&upstream=libxcb&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxdmcp6@1:1.1.2-3?arch=amd64&upstream=libxdmcp&distro=debian-11&package-id=4005b45e460ecaca", + "publisher": "Debian X Strike Force ", + "name": "libxdmcp6", + "version": "1:1.1.2-3", + "cpe": "cpe:2.3:a:libxdmcp6:libxdmcp6:1\\:1.1.2-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxdmcp6@1:1.1.2-3?arch=amd64&upstream=libxdmcp&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxml2@2.9.10+dfsg-6.7+deb11u3?arch=amd64&distro=debian-11&package-id=17dda21225ad6175", + "publisher": "Debian XML/SGML Group ", + "name": "libxml2", + "version": "2.9.10+dfsg-6.7+deb11u3", + "licenses": [ + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "MIT-1" + } + } + ], + "cpe": "cpe:2.3:a:libxml2:libxml2:2.9.10\\+dfsg-6.7\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxml2@2.9.10+dfsg-6.7+deb11u3?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxpm4@1:3.5.12-1?arch=amd64&upstream=libxpm&distro=debian-11&package-id=a013468ed5f68ed3", + "publisher": "Debian X Strike Force ", + "name": "libxpm4", + "version": "1:3.5.12-1", + "cpe": "cpe:2.3:a:libxpm4:libxpm4:1\\:3.5.12-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxpm4@1:3.5.12-1?arch=amd64&upstream=libxpm&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxslt1.1@1.1.34-4+deb11u1?arch=amd64&upstream=libxslt&distro=debian-11&package-id=ee58630377288c70", + "publisher": "Debian XML/SGML Group ", + "name": "libxslt1.1", + "version": "1.1.34-4+deb11u1", + "cpe": "cpe:2.3:a:libxslt1.1:libxslt1.1:1.1.34-4\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxslt1.1@1.1.34-4+deb11u1?arch=amd64&upstream=libxslt&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxxhash0@0.8.0-2?arch=amd64&upstream=xxhash&distro=debian-11&package-id=edc71d7591d40133", + "publisher": "Norbert Preining ", + "name": "libxxhash0", + "version": "0.8.0-2", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libxxhash0:libxxhash0:0.8.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxxhash0@0.8.0-2?arch=amd64&upstream=xxhash&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libzstd1@1.4.8+dfsg-2.1?arch=amd64&upstream=libzstd&distro=debian-11&package-id=90e1680def07a674", + "publisher": "Debian Med Packaging Team ", + "name": "libzstd1", + "version": "1.4.8+dfsg-2.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libzstd1:libzstd1:1.4.8\\+dfsg-2.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libzstd1@1.4.8+dfsg-2.1?arch=amd64&upstream=libzstd&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/login@1:4.8.1-1?arch=amd64&upstream=shadow&distro=debian-11&package-id=9cdbb92ea69c08a1", + "publisher": "Shadow package maintainers ", + "name": "login", + "version": "1:4.8.1-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:login:login:1\\:4.8.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/login@1:4.8.1-1?arch=amd64&upstream=shadow&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/logsave@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11&package-id=77e8cce6db62952b", + "publisher": "Theodore Y. Ts'o ", + "name": "logsave", + "version": "1.46.2-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:logsave:logsave:1.46.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/logsave@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/lsb-base@11.1.0?arch=all&upstream=lsb&distro=debian-11&package-id=67f43d818d5952cf", + "publisher": "Debian sysvinit maintainers ", + "name": "lsb-base", + "version": "11.1.0", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:lsb-base:lsb-base:11.1.0:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/lsb-base@11.1.0?arch=all&upstream=lsb&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/mawk@1.3.4.20200120-2?arch=amd64&distro=debian-11&package-id=b91e181aea759ff5", + "publisher": "Boyuan Yang ", + "name": "mawk", + "version": "1.3.4.20200120-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:mawk:mawk:1.3.4.20200120-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/mawk@1.3.4.20200120-2?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/mount@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11&package-id=c7ff86ae9a8937ca", + "publisher": "util-linux packagers ", + "name": "mount", + "version": "2.36.1-8+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:mount:mount:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/mount@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ncurses-base@6.2+20201114-2?arch=all&upstream=ncurses&distro=debian-11&package-id=9c2239a948284096", + "publisher": "Craig Small ", + "name": "ncurses-base", + "version": "6.2+20201114-2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "MIT/X11" + } + }, + { + "license": { + "id": "X11" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-base:ncurses-base:6.2\\+20201114-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ncurses-base@6.2+20201114-2?arch=all&upstream=ncurses&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ncurses-bin@6.2+20201114-2?arch=amd64&upstream=ncurses&distro=debian-11&package-id=d98c3c34aac1c97c", + "publisher": "Craig Small ", + "name": "ncurses-bin", + "version": "6.2+20201114-2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "MIT/X11" + } + }, + { + "license": { + "id": "X11" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-bin:ncurses-bin:6.2\\+20201114-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ncurses-bin@6.2+20201114-2?arch=amd64&upstream=ncurses&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/nginx@1.23.4-1~bullseye?arch=amd64&distro=debian-11&package-id=79d4a6aea547c9", + "publisher": "NGINX Packaging ", + "name": "nginx", + "version": "1.23.4-1~bullseye", + "cpe": "cpe:2.3:a:nginx:nginx:1.23.4-1\\~bullseye:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/nginx@1.23.4-1~bullseye?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/nginx-module-geoip@1.23.4-1~bullseye?arch=amd64&distro=debian-11&package-id=c1f730ea113243e9", + "publisher": "NGINX Packaging ", + "name": "nginx-module-geoip", + "version": "1.23.4-1~bullseye", + "cpe": "cpe:2.3:a:nginx-module-geoip:nginx-module-geoip:1.23.4-1\\~bullseye:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/nginx-module-geoip@1.23.4-1~bullseye?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/nginx-module-image-filter@1.23.4-1~bullseye?arch=amd64&distro=debian-11&package-id=2ba5e104d0cb31ba", + "publisher": "NGINX Packaging ", + "name": "nginx-module-image-filter", + "version": "1.23.4-1~bullseye", + "cpe": "cpe:2.3:a:nginx-module-image-filter:nginx-module-image-filter:1.23.4-1\\~bullseye:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/nginx-module-image-filter@1.23.4-1~bullseye?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/nginx-module-njs@1.23.4+0.7.11-1~bullseye?arch=amd64&distro=debian-11&package-id=3855065ec7a87a23", + "publisher": "NGINX Packaging ", + "name": "nginx-module-njs", + "version": "1.23.4+0.7.11-1~bullseye", + "cpe": "cpe:2.3:a:nginx-module-njs:nginx-module-njs:1.23.4\\+0.7.11-1\\~bullseye:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/nginx-module-njs@1.23.4+0.7.11-1~bullseye?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/nginx-module-xslt@1.23.4-1~bullseye?arch=amd64&distro=debian-11&package-id=4812f46b471902fd", + "publisher": "NGINX Packaging ", + "name": "nginx-module-xslt", + "version": "1.23.4-1~bullseye", + "cpe": "cpe:2.3:a:nginx-module-xslt:nginx-module-xslt:1.23.4-1\\~bullseye:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/nginx-module-xslt@1.23.4-1~bullseye?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/openssl@1.1.1n-0+deb11u4?arch=amd64&distro=debian-11&package-id=a7dc6e66845f14bf", + "publisher": "Debian OpenSSL Team ", + "name": "openssl", + "version": "1.1.1n-0+deb11u4", + "cpe": "cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/openssl@1.1.1n-0+deb11u4?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/passwd@1:4.8.1-1?arch=amd64&upstream=shadow&distro=debian-11&package-id=fdca5992b8d73b50", + "publisher": "Shadow package maintainers ", + "name": "passwd", + "version": "1:4.8.1-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:passwd:passwd:1\\:4.8.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/passwd@1:4.8.1-1?arch=amd64&upstream=shadow&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/perl-base@5.32.1-4+deb11u2?arch=amd64&upstream=perl&distro=debian-11&package-id=96ea9246284c94e6", + "publisher": "Niko Tyni ", + "name": "perl-base", + "version": "5.32.1-4+deb11u2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl-base:perl-base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/perl-base@5.32.1-4+deb11u2?arch=amd64&upstream=perl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/readline-common@8.1-1?arch=all&upstream=readline&distro=debian-11&package-id=1db616197859926a", + "publisher": "Matthias Klose ", + "name": "readline-common", + "version": "8.1-1", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:readline-common:readline-common:8.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/readline-common@8.1-1?arch=all&upstream=readline&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/sed@4.7-1?arch=amd64&distro=debian-11&package-id=cd24b1a69c7b788a", + "publisher": "Clint Adams ", + "name": "sed", + "version": "4.7-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:sed:sed:4.7-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/sed@4.7-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/sensible-utils@0.0.14?arch=all&distro=debian-11&package-id=56274a0c1bc0afa2", + "publisher": "Anibal Monsalve Salazar ", + "name": "sensible-utils", + "version": "0.0.14", + "licenses": [ + { + "license": { + "name": "All-permissive" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "configure" + } + }, + { + "license": { + "name": "installsh" + } + } + ], + "cpe": "cpe:2.3:a:sensible-utils:sensible-utils:0.0.14:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/sensible-utils@0.0.14?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/sysvinit-utils@2.96-7+deb11u1?arch=amd64&upstream=sysvinit&distro=debian-11&package-id=e0e95f2e10cb825e", + "publisher": "Debian sysvinit maintainers ", + "name": "sysvinit-utils", + "version": "2.96-7+deb11u1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:sysvinit-utils:sysvinit-utils:2.96-7\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/sysvinit-utils@2.96-7+deb11u1?arch=amd64&upstream=sysvinit&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tar@1.34+dfsg-1?arch=amd64&distro=debian-11&package-id=9511efaff0991270", + "publisher": "Janos Lenart ", + "name": "tar", + "version": "1.34+dfsg-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:tar:tar:1.34\\+dfsg-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tar@1.34+dfsg-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tzdata@2021a-1+deb11u9?arch=all&distro=debian-11&package-id=5268162de7a3ef0", + "publisher": "GNU Libc Maintainers ", + "name": "tzdata", + "version": "2021a-1+deb11u9", + "cpe": "cpe:2.3:a:tzdata:tzdata:2021a-1\\+deb11u9:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tzdata@2021a-1+deb11u9?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ucf@3.0043?arch=all&distro=debian-11&package-id=dfbd4fe9d1f6c201", + "publisher": "Manoj Srivastava ", + "name": "ucf", + "version": "3.0043", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ucf:ucf:3.0043:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ucf@3.0043?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/util-linux@2.36.1-8+deb11u1?arch=amd64&distro=debian-11&package-id=b8c872368f65d4a3", + "publisher": "util-linux packagers ", + "name": "util-linux", + "version": "2.36.1-8+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:util-linux:util-linux:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/util-linux@2.36.1-8+deb11u1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/wget@1.21-1+deb11u1?arch=amd64&distro=debian-11&package-id=a1c9b0706dcf6d72", + "publisher": "Noël Köthe ", + "name": "wget", + "version": "1.21-1+deb11u1", + "licenses": [ + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:wget:wget:1.21-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/wget@1.21-1+deb11u1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/zlib1g@1:1.2.11.dfsg-2+deb11u2?arch=amd64&upstream=zlib&distro=debian-11&package-id=369e996115240b62", + "publisher": "Mark Brown ", + "name": "zlib1g", + "version": "1:1.2.11.dfsg-2+deb11u2", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib1g:zlib1g:1\\:1.2.11.dfsg-2\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/zlib1g@1:1.2.11.dfsg-2+deb11u2?arch=amd64&upstream=zlib&distro=debian-11" + }, + { + "type": "operating-system", + "name": "debian", + "version": "11", + "description": "Debian GNU/Linux 11 (bullseye)", + "swid": { + "tagId": "debian", + "name": "debian", + "version": "11" + }, + "externalReferences": [ + { + "url": "https://bugs.debian.org/", + "type": "issue-tracker" + }, + { + "url": "https://www.debian.org/", + "type": "website" + }, + { + "url": "https://www.debian.org/support", + "comment": "support", + "type": "other" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.9?package-id=983c05baf5cfe11f", + "group": "org.hdrhistogram", + "name": "HdrHistogram", + "version": "2.1.9", + "licenses": [ + { + "license": { + "name": "http://creativecommons.org/publicdomain/zero/1.0/" + } + } + ], + "cpe": "cpe:2.3:a:HdrHistogram:HdrHistogram:2.1.9:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.9", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "e4631ce165eb400edecfa32e03d3f1be53dee754" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.zaxxer/HikariCP@3.2.0?package-id=5d3fad45be7dfbfe", + "group": "com.zaxxer", + "name": "HikariCP", + "version": "3.2.0", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:HikariCP:HikariCP:3.2.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.zaxxer/HikariCP@3.2.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "6c66db1c636ee90beb4c65fe34abd8ba9396bca6" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.1.13?package-id=ceea76f1e9b80ff8", + "group": "com.googlecode.javaewah", + "name": "JavaEWAH", + "version": "1.1.13", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:googlecode:JavaEWAH:1.1.13:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.1.13", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "32cd724a42dc73f99ca08453d11a4bb83e0034c7" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?package-id=e087331436031421", + "group": "org.latencyutils", + "name": "LatencyUtils", + "version": "2.0.3", + "cpe": "cpe:2.3:a:LatencyUtils:LatencyUtils:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "769c0b82cb2421c8256300e907298a9410a2a3d3" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/US_export_policy/US_export_policy?package-id=9fc12ca3a2e2eae4", + "name": "US_export_policy", + "cpe": "cpe:2.3:a:US-export-policy:US-export-policy:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/US_export_policy/US_export_policy", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "2fcb002cf98fbafecb4fe01976ab172b71411654" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/US_export_policy/US_export_policy?package-id=502b2a55c42bdec0", + "name": "US_export_policy", + "cpe": "cpe:2.3:a:US-export-policy:US-export-policy:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/US_export_policy/US_export_policy", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "2fcb002cf98fbafecb4fe01976ab172b71411654" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun/activation@1.1?package-id=7c6676b816125c4a", + "name": "activation", + "version": "1.1", + "cpe": "cpe:2.3:a:sun-microsystems\\,-inc-:activation:1.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.sun/activation@1.1", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "e6cb541461c2834bdea3eb920f1884d1eb508b50" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.4.0-r0?arch=x86_64&distro=alpine-3.17.3&package-id=92b19c7750fb559d", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.4.0-r0", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.4.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.4.0-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout-data@3.4.0-r0?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.17.3&package-id=291d1267b40d636f", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout-data", + "version": "3.4.0-r0", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout-data@3.4.0-r0?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.17.3&package-id=2b5e23d349b556cf", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.4-r1", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.rabbitmq/amqp-client@5.4.3?package-id=194ff004c9048bbf", + "group": "com.rabbitmq", + "name": "amqp-client", + "version": "5.4.3", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.html, http://www.gnu.org/licenses/gpl-2.0.txt, http://www.mozilla.org/MPL/MPL-1.1.txt" + } + } + ], + "cpe": "cpe:2.3:a:amqp-working-group-\\(www-amqp-org\\):amqp-client:5.4.3:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.rabbitmq/amqp-client@5.4.3", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "9bede47bcd205e93f422adf4923892e31a640239" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.google.code.findbugs/annotations@3.0.1?package-id=b28c5754898a18a1", + "group": "com.google.code.findbugs", + "name": "annotations", + "version": "3.0.1", + "licenses": [ + { + "license": { + "name": "http://www.gnu.org/licenses/lgpl.html" + } + } + ], + "cpe": "cpe:2.3:a:annotations:annotations:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.google.code.findbugs/annotations@3.0.1", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "fc019a2216218990d64dfe756e7aa20f0069dea2" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/antlr/antlr@2.7.7?package-id=8c2ab51ddf98c10d", + "name": "antlr", + "version": "2.7.7", + "cpe": "cpe:2.3:a:antlr:antlr:2.7.7:*:*:*:*:*:*:*", + "purl": "pkg:maven/antlr/antlr@2.7.7", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "83cd2cd674a217ade95a4bb83a8a14f351f48bd0" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.10-r1?arch=x86_64&distro=alpine-3.17.3&package-id=e5f757b0df1f62bc", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.12.10-r1", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.12.10-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.12.10-r1?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.aspectj.weaver/aspectjweaver@1.9.4?package-id=c015668d2c0ae088", + "name": "aspectjweaver", + "version": "1.9.4", + "cpe": "cpe:2.3:a:https\\:\\/\\/www-eclipse-org\\/aspectj\\/:aspectjweaver:1.9.4:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.aspectj.weaver/aspectjweaver@1.9.4", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "9205229878f3d62fbd3a32a0fb6be2d6ad8589a9" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.pliant/backend@0.0.1-SNAPSHOT?package-id=67988932272db66c", + "group": "io.pliant", + "name": "backend", + "version": "0.0.1-SNAPSHOT", + "cpe": "cpe:2.3:a:springframework:backend:0.0.1-SNAPSHOT:*:*:*:*:*:*:*", + "purl": "pkg:maven/io.pliant/backend@0.0.1-SNAPSHOT", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "855c02bdc72ebb23574d410bba62f6822e2b1a23" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.bouncycastle.bcpkix/bcpkix-jdk15on@1.60?package-id=b4035ad272f28fea", + "name": "bcpkix-jdk15on", + "version": "1.60", + "cpe": "cpe:2.3:a:bouncycastle-org:bcpkix-jdk15on:1.60:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.bouncycastle.bcpkix/bcpkix-jdk15on@1.60", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "d0c46320fbc07be3a24eb13a56cee4e3d38e0c75" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.bouncycastle.bcproviderext/bcprov-ext-jdk15on@1.60?package-id=9d4b0a7e88e46879", + "name": "bcprov-ext-jdk15on", + "version": "1.60", + "cpe": "cpe:2.3:a:bcprov-ext-jdk15on:bcprov-ext-jdk15on:1.60:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.bouncycastle.bcproviderext/bcprov-ext-jdk15on@1.60", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "0faea4c950bbfa6e8882830f0266bc9185755d37" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.bouncycastle.bcprovider/bcprov-jdk15on@1.64?package-id=ff0833697a95bd24", + "name": "bcprov-jdk15on", + "version": "1.64", + "cpe": "cpe:2.3:a:bouncycastle-org:bcprov-jdk15on:1.64:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.bouncycastle.bcprovider/bcprov-jdk15on@1.64", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "1467dac1b787b5ad2a18201c0c281df69882259e" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.infradna.tool/bridge-method-annotation@1.13?package-id=875d69917e8f1fc1", + "group": "com.infradna.tool", + "name": "bridge-method-annotation", + "version": "1.13", + "cpe": "cpe:2.3:a:bridge-method-annotation:bridge-method-annotation:1.13:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.infradna.tool/bridge-method-annotation@1.13", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "18cdce50cde6f54ee5390d0907384f72183ff0fe" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/brotli-libs@1.0.9-r9?arch=x86_64&upstream=brotli&distro=alpine-3.17.3&package-id=b908173dd9145006", + "publisher": "prspkt ", + "name": "brotli-libs", + "version": "1.0.9-r9", + "description": "Generic lossless compressor (libraries)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brotli-libs:brotli-libs:1.0.9-r9:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/brotli-libs@1.0.9-r9?arch=x86_64&upstream=brotli&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://github.com/google/brotli", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.aayushatharva.brotli4j/brotli4j@1.8.0?package-id=74d7ede7c7c2e20d", + "group": "com.aayushatharva.brotli4j", + "name": "brotli4j", + "version": "1.8.0", + "cpe": "cpe:2.3:a:aayushatharva:brotli4j:1.8.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.aayushatharva.brotli4j/brotli4j@1.8.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "2bc52df23c9aed6aaaf63156fa9a4f7beca80f56" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/bsh/bsh@2.0b6?package-id=389c0c0206dc0128", + "name": "bsh", + "version": "2.0b6", + "cpe": "cpe:2.3:a:pat-niemeyer-\\(pat\\@pat-net\\):bsh:2.0b6:*:*:*:*:*:*:*", + "purl": "pkg:maven/bsh/bsh@2.0b6", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "fb418f9b33a0b951e9a2978b4b6ee93b2707e72f" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.github.fge.btf/btf@1.2?package-id=eb3245ad9e46961d", + "name": "btf", + "version": "1.2", + "cpe": "cpe:2.3:a:github:btf:1.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.github.fge.btf/btf@1.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "9e66651022eb86301b348d57e6f59459effc343b" + } + ] + } + ] + }, + { + "type": "application", + "bom-ref": "e6c9486419cbb84e", + "name": "busybox", + "version": "1.35.0", + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=alpine-3.17.3&package-id=623d53216342d45e", + "publisher": "Sören Tempel ", + "name": "busybox", + "version": "1.35.0-r29", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0-r29:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.3&package-id=256fc96b4a8c4da8", + "publisher": "Sören Tempel ", + "name": "busybox-binsh", + "version": "1.35.0-r29", + "description": "busybox ash /bin/sh", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox-binsh:busybox-binsh:1.35.0-r29:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/net.bytebuddy/byte-buddy-dep@1.9.12?package-id=71240cd0480f4edd", + "group": "net.bytebuddy", + "name": "byte-buddy-dep", + "version": "1.9.12", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:byte-buddy-dep:byte-buddy-dep:1.9.12:*:*:*:*:*:*:*", + "purl": "pkg:maven/net.bytebuddy/byte-buddy-dep@1.9.12", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "39050dbbd36862ea87eb9a64158854b04619ccd6" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20220614-r4?arch=x86_64&upstream=ca-certificates&distro=alpine-3.17.3&package-id=b805d823ae624f04", + "publisher": "Natanael Copa ", + "name": "ca-certificates-bundle", + "version": "20220614-r4", + "description": "Pre generated bundle of Mozilla certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-bundle@20220614-r4?arch=x86_64&upstream=ca-certificates&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.cache2k/cache2k-api@1.2.1.Final?package-id=9828dfa75b8f6a49", + "group": "org.cache2k", + "name": "cache2k-api", + "version": "1.2.1.Final", + "cpe": "cpe:2.3:a:headissue-gmbh\\,-munich:cache2k-api:1.2.1.Final:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.cache2k/cache2k-api@1.2.1.Final", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "9d11fefc7a357c91830bec9894fbc38af06edbe7" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.cache2k/cache2k-core@1.2.1.Final?package-id=371119275e0b3915", + "group": "org.cache2k", + "name": "cache2k-core", + "version": "1.2.1.Final", + "cpe": "cpe:2.3:a:headissue-gmbh\\,-munich:cache2k-core:1.2.1.Final:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.cache2k/cache2k-core@1.2.1.Final", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "1b2c5304b1467c592c0242003a6d7d0e6751b874" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.cache2k/cache2k-spring@1.2.1.Final?package-id=5473dbdf6266f9b3", + "group": "org.cache2k", + "name": "cache2k-spring", + "version": "1.2.1.Final", + "cpe": "cpe:2.3:a:headissue-gmbh\\,-munich:cache2k-spring:1.2.1.Final:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.cache2k/cache2k-spring@1.2.1.Final", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "8f9749f4b7b54c7f4e00e1ef58a834c64583b913" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/charsets/charsets?package-id=ac260baeda2f6c16", + "name": "charsets", + "cpe": "cpe:2.3:a:charsets:charsets:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/charsets/charsets", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "141875c9bf4e34ae776a45505fc5365a5a1c8180" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml/classmate@1.4.0?package-id=5f52335c23e8e55e", + "group": "com.fasterxml", + "name": "classmate", + "version": "1.4.0", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:fasterxml-com:classmate:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.fasterxml/classmate@1.4.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "291658ac2ce2476256c7115943652c0accb5c857" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/cldrdata/cldrdata?package-id=aaa36a6b8966b603", + "name": "cldrdata", + "cpe": "cpe:2.3:a:cldrdata:cldrdata:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/cldrdata/cldrdata", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "040ba7365dc9db7c7b9a0fd786c6f180e61f62e3" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.mysema.codegen/codegen@0.6.8?package-id=b70cbe993954d6e3", + "group": "com.mysema.codegen", + "name": "codegen", + "version": "0.6.8", + "cpe": "cpe:2.3:a:codegen:codegen:0.6.8:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.mysema.codegen/codegen@0.6.8", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "a94cea356af04d10e89f04f38ce746f1d5ac8359" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/commons-beanutils/commons-beanutils@1.9.3?package-id=26fd3e34e4b37111", + "group": "commons-beanutils", + "name": "commons-beanutils", + "version": "1.9.3", + "licenses": [ + { + "license": { + "name": "https://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:apache:commons-beanutils:1.9.3:*:*:*:*:*:*:*", + "purl": "pkg:maven/commons-beanutils/commons-beanutils@1.9.3", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "c845703de334ddc6b4b3cd26835458cb1cba1f3d" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/commons-codec/commons-codec@1.11?package-id=17b50a69d5c58e38", + "group": "commons-codec", + "name": "commons-codec", + "version": "1.11", + "licenses": [ + { + "license": { + "name": "https://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:apache:commons-codec:1.11:*:*:*:*:*:*:*", + "purl": "pkg:maven/commons-codec/commons-codec@1.11", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "3acb4705652e16236558f0f4f2192cc33c3bd189" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.commons/commons-collections4@4.2?package-id=2abcb73b5d293b8", + "group": "org.apache.commons", + "name": "commons-collections4", + "version": "4.2", + "licenses": [ + { + "license": { + "name": "https://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:apache:commons-collections4:4.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.commons/commons-collections4@4.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "54ebea0a5b653d3c680131e73fe807bb8f78c4ed" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.commons/commons-compress@1.20?package-id=be3ee49b810912f0", + "group": "org.apache.commons", + "name": "commons-compress", + "version": "1.20", + "licenses": [ + { + "license": { + "name": "https://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:apache:commons-compress:1.20:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.commons/commons-compress@1.20", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "b8df472b31e1f17c232d2ad78ceb1c84e00c641b" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache/commons-httpclient@3.1?package-id=be8e2d4fb76bbbcf", + "name": "commons-httpclient", + "version": "3.1", + "cpe": "cpe:2.3:a:apache:commons-httpclient:3.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache/commons-httpclient@3.1", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "964cd74171f427720480efdec40a7c7f6e58426a" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/commons-io/commons-io@2.5?package-id=9e405ca97dd23de8", + "group": "commons-io", + "name": "commons-io", + "version": "2.5", + "cpe": "cpe:2.3:a:apache:commons-io:2.5:*:*:*:*:*:*:*", + "purl": "pkg:maven/commons-io/commons-io@2.5" + }, + { + "type": "library", + "bom-ref": "pkg:maven/commons-io/commons-io@2.6?package-id=b9ec56511a393978", + "group": "commons-io", + "name": "commons-io", + "version": "2.6", + "licenses": [ + { + "license": { + "name": "https://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:apache:commons-io:2.6:*:*:*:*:*:*:*", + "purl": "pkg:maven/commons-io/commons-io@2.6", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "815893df5f31da2ece4040fe0a12fd44b577afaf" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/commons-lang/commons-lang@2.6?package-id=dc522c721e0b1b30", + "group": "commons-lang", + "name": "commons-lang", + "version": "2.6", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:apache:commons-lang:2.6:*:*:*:*:*:*:*", + "purl": "pkg:maven/commons-lang/commons-lang@2.6", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "0ce1edb914c94ebc388f086c6827e8bdeec71ac2" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.7?package-id=9cda9deeea99d491", + "group": "org.apache.commons", + "name": "commons-lang3", + "version": "3.7", + "licenses": [ + { + "license": { + "name": "https://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:apache:commons-lang3:3.7:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.commons/commons-lang3@3.7", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "557edd918fd41f9260963583ebf5a61a43a6b423" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/commons-logging/commons-logging@1.2?package-id=f42504d9b121ac04", + "group": "commons-logging", + "name": "commons-logging", + "version": "1.2", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:apache:commons-logging:1.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/commons-logging/commons-logging@1.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "4bfc12adfe4842bf07b657f0369c4cb522955686" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.commons/commons-text@1.9?package-id=96f01ea672809cd", + "group": "org.apache.commons", + "name": "commons-text", + "version": "1.9", + "licenses": [ + { + "license": { + "name": "https://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:apache:commons-text:1.9:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.commons/commons-text@1.9", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "ba6ac8c2807490944a0a27f6f8e68fb5ed2e80e2" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.squareup.retrofit2/converter-moshi@2.6.2?package-id=cc66af638a6cff9f", + "group": "com.squareup.retrofit2", + "name": "converter-moshi", + "version": "2.6.2", + "cpe": "cpe:2.3:a:converter-moshi:converter-moshi:2.6.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.squareup.retrofit2/converter-moshi@2.6.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "c365cc8246059e866eb42862240fc8c03bd15076" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/dnsns/dnsns?package-id=af09d0f9bd2e5151", + "name": "dnsns", + "cpe": "cpe:2.3:a:dnsns:dnsns:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/dnsns/dnsns", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "3c80b6ce7bfb62d34251421d73d7afb67f06b1e8" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/dom4j/dom4j@2.1.1?package-id=743d5798a1d52607", + "name": "dom4j", + "version": "2.1.1", + "cpe": "cpe:2.3:a:dom4j:dom4j:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/dom4j/dom4j@2.1.1", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "3dce5dbb3571aa820c677fadd8349bfa8f00c199" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.eclipse.jdt.core.compiler.batch/ecj@4.3.1?package-id=46a6cd894b50be50", + "name": "ecj", + "version": "4.3.1", + "cpe": "cpe:2.3:a:compiler:compiler:4.3.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.eclipse.jdt.core.compiler.batch/ecj@4.3.1", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "21582b0e662b9e54fc6f0f2721d36f753ce7c58c" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/net.i2p.crypto/eddsa@0.3.0?package-id=3b4ef3ea92c0b16a", + "group": "net.i2p.crypto", + "name": "eddsa", + "version": "0.3.0", + "licenses": [ + { + "license": { + "name": "https://creativecommons.org/publicdomain/zero/1.0/" + } + } + ], + "cpe": "cpe:2.3:a:crypto:eddsa:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/net.i2p.crypto/eddsa@0.3.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "1901c8d4d8bffb7d79027686cfb91e704217c3e1" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/encodings@1.0.6-r0?arch=x86_64&distro=alpine-3.17.3&package-id=27e4d13f9a311e67", + "publisher": "Natanael Copa ", + "name": "encodings", + "version": "1.0.6-r0", + "description": "X.org font encoding files", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:encodings:encodings:1.0.6-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/encodings@1.0.6-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.owasp.esapi/esapi@2.2.0.0?package-id=98db94ee0639931f", + "group": "org.owasp.esapi", + "name": "esapi", + "version": "2.2.0.0", + "cpe": "cpe:2.3:a:open-web-application-security-project-\\(owasp\\):esapi:2.2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.owasp.esapi/esapi@2.2.0.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "721cbbf80e2bf1cc3d87d4a791e4c7bc827fca95" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/font-dejavu@2.37-r3?arch=x86_64&distro=alpine-3.17.3&package-id=dcec74118c4e82d9", + "publisher": "Natanael Copa ", + "name": "font-dejavu", + "version": "2.37-r3", + "description": "Font family based on the Bitstream Vera Fonts with a wider range of characters", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:font-dejavu:font-dejavu:2.37-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/font-dejavu@2.37-r3?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://dejavu-fonts.github.io/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/fontconfig@2.14.1-r0?arch=x86_64&distro=alpine-3.17.3&package-id=adae4094ba998368", + "publisher": "Natanael Copa ", + "name": "fontconfig", + "version": "2.14.1-r0", + "description": "Library for configuring and customizing font access", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fontconfig:fontconfig:2.14.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/fontconfig@2.14.1-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.freedesktop.org/wiki/Software/fontconfig", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/freetype@2.12.1-r0?arch=x86_64&distro=alpine-3.17.3&package-id=2b1bfc10343b9080", + "publisher": "Carlo Landmeter ", + "name": "freetype", + "version": "2.12.1-r0", + "description": "TrueType font rendering library", + "licenses": [ + { + "license": { + "id": "FTL" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:freetype:freetype:2.12.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/freetype@2.12.1-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.freetype.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.google.http-client.google-http-client/google-http-client@1.24.1?package-id=45483e18f68f3115", + "name": "google-http-client", + "version": "1.24.1", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:google-http-client:google-http-client:1.24.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.google.http-client.google-http-client/google-http-client@1.24.1", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "396eac8d3fb1332675f82b208f48a469d64f3b4a" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.google.http-client/google-http-client-xml@1.24.1?package-id=96fa27fc1ea5dae9", + "name": "google-http-client-xml", + "version": "1.24.1", + "cpe": "cpe:2.3:a:google-http-client-xml:google-http-client-xml:1.24.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.google.http-client/google-http-client-xml@1.24.1", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "c7c75f64a2ea224c947e5f447f7c75a43060ee2d" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.google.guava/guava@20.0?package-id=f9ee9d60dcaeccfd", + "group": "com.google.guava", + "name": "guava", + "version": "20.0", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:google:guava:20.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.google.guava/guava@20.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "89507701249388e1ed5ddcf8c41f4ce1be7831ef" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.hibernate.common.hibernate-commons-annotations/hibernate-commons-annotations@5.0.4.Final?package-id=8874a1fcf7910a0a", + "name": "hibernate-commons-annotations", + "version": "5.0.4.Final", + "cpe": "cpe:2.3:a:hibernate-commons-annotations:hibernate-commons-annotations:5.0.4.Final:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.hibernate.common.hibernate-commons-annotations/hibernate-commons-annotations@5.0.4.Final", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "965a18fdf939ee75e41f7918532d37b3a8350535" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.hibernate.orm.core/hibernate-core@5.3.10.Final?package-id=76fb19d442aabaf7", + "name": "hibernate-core", + "version": "5.3.10.Final", + "cpe": "cpe:2.3:a:hibernate-core:hibernate-core:5.3.10.Final:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.hibernate.orm.core/hibernate-core@5.3.10.Final", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "e608b854325005edbf43cb2b6041fdafd3f2eb57" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.hibernate.orm.envers/hibernate-envers@5.3.10.Final?package-id=c7e65c6a06724e7b", + "name": "hibernate-envers", + "version": "5.3.10.Final", + "cpe": "cpe:2.3:a:hibernate-envers:hibernate-envers:5.3.10.Final:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.hibernate.orm.envers/hibernate-envers@5.3.10.Final", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "33d0e999e7be1ca503719a6243107b090b6cbae7" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.hibernate.validator/hibernate-validator@6.0.16.Final?package-id=ebb3a7984b2ff463", + "group": "org.hibernate.validator", + "name": "hibernate-validator", + "version": "6.0.16.Final", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:hibernate-validator:hibernate-validator:6.0.16.Final:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.hibernate.validator/hibernate-validator@6.0.16.Final", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "ad9557c558972093c0567a2a1f224f318c00f650" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.8?package-id=80dbcc392fa69a69", + "group": "org.apache.httpcomponents", + "name": "httpclient", + "version": "4.5.8", + "cpe": "cpe:2.3:a:apache:httpclient:4.5.8:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.8", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "c27c9d6f15435dc2b6947112027b418b0eef32b9" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11?package-id=9e2e9f0a698d8684", + "group": "org.apache.httpcomponents", + "name": "httpcore", + "version": "4.4.11", + "cpe": "cpe:2.3:a:apache:httpcore:4.4.11:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "de748cf874e4e193b42eceea9fe5574fabb9d4df" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.pliant/ilflow-model@1.0.2?package-id=2656768ef6e7ec05", + "group": "io.pliant", + "name": "ilflow-model", + "version": "1.0.2", + "cpe": "cpe:2.3:a:ilflow-model:ilflow-model:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/io.pliant/ilflow-model@1.0.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "7460dfcf13e7f115c5deabc36721e610cba077c0" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.influxdb/influxdb-java@2.17?package-id=a970ff7f89c57ca3", + "group": "org.influxdb", + "name": "influxdb-java", + "version": "2.17", + "cpe": "cpe:2.3:a:influxdb-java:influxdb-java:2.17:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.influxdb/influxdb-java@2.17", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "625a30f370953efd43c251394efa58b389dbc283" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/jaccess/jaccess?package-id=597e861ae7234b49", + "name": "jaccess", + "cpe": "cpe:2.3:a:jaccess:jaccess:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/jaccess/jaccess", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "4cf0b06ec3ab96c68d48a3b56a6a2b9a939b4a69" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.0?package-id=bc63e5f055dca09d", + "group": "com.fasterxml.jackson.core", + "name": "jackson-annotations", + "version": "2.14.0", + "licenses": [ + { + "license": { + "name": "https://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:jackson-annotations:jackson-annotations:2.14.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "fb7afb3c9c8ea363a9c88ea9c0a7177cf2fbd369" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.0?package-id=71479e864ea5ec89", + "group": "com.fasterxml.jackson.core", + "name": "jackson-core", + "version": "2.14.0", + "licenses": [ + { + "license": { + "name": "https://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:jackson-core:jackson-core:2.14.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "49d219171d6af643e061e9e1baaaf6a6a067918d" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/jackson-core-asl/jackson-core-asl@1.9.13?package-id=d29f366696775ad5", + "name": "jackson-core-asl", + "version": "1.9.13", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:http\\:\\/\\/www-ietf-org\\/rfc\\/rfc4627-txt:jackson-core-asl:1.9.13:*:*:*:*:*:*:*", + "purl": "pkg:maven/jackson-core-asl/jackson-core-asl@1.9.13", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "3c304d70f42f832e0a86d45bd437f692129299a4" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.github.fge.jackson-coreutils/jackson-coreutils@1.8?package-id=2a0df958a429ce8e", + "name": "jackson-coreutils", + "version": "1.8", + "cpe": "cpe:2.3:a:jackson-coreutils:jackson-coreutils:1.8:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.github.fge.jackson-coreutils/jackson-coreutils@1.8", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "491a6e1130a180c153df9f2b7aabd7a700282c67" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.0?package-id=24154c0b158f21c4", + "group": "com.fasterxml.jackson.core", + "name": "jackson-databind", + "version": "2.14.0", + "licenses": [ + { + "license": { + "name": "https://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:jackson-databind:jackson-databind:2.14.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "513b8ca3fea0352ceebe4d0bbeea527ab343dc1a" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.14.0?package-id=a855701c60c0ea0e", + "group": "com.fasterxml.jackson.dataformat", + "name": "jackson-dataformat-yaml", + "version": "2.14.0", + "licenses": [ + { + "license": { + "name": "https://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:jackson-dataformat-yaml:jackson-dataformat-yaml:2.14.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.14.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "06c635ef06d3e4e72a7e9868da41ffa1a0f98d28" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.14.0?package-id=40c03a1c78342cad", + "group": "com.fasterxml.jackson.datatype", + "name": "jackson-datatype-jdk8", + "version": "2.14.0", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:jackson-datatype-jdk8:jackson-datatype-jdk8:2.14.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.14.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "6b8da24a0da4266ed7ddea7ea46594fd50900323" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.14.0?package-id=45d264da0f5e492f", + "group": "com.fasterxml.jackson.datatype", + "name": "jackson-datatype-jsr310", + "version": "2.14.0", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:jackson-datatype-jsr310:jackson-datatype-jsr310:2.14.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.14.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "171c5831341883b1cebbbf5aafba62c0fca33b95" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/jackson-mapper-asl/jackson-mapper-asl@1.9.13?package-id=9b0409db19b4e22a", + "name": "jackson-mapper-asl", + "version": "1.9.13", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*", + "purl": "pkg:maven/jackson-mapper-asl/jackson-mapper-asl@1.9.13", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.14.0?package-id=d44595f51ca521bc", + "group": "com.fasterxml.jackson.module", + "name": "jackson-module-parameter-names", + "version": "2.14.0", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:jackson-module-parameter-names:jackson-module-parameter-names:2.14.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.14.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "e17e2fdc2dbbe802d953686a9aa2c5257a2b2fd1" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss/jandex@2.0.5.Final?package-id=3b54acb4db8c9c88", + "group": "org.jboss", + "name": "jandex", + "version": "2.0.5.Final", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:jboss-by-red-hat:jandex:2.0.5.Final:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.jboss/jandex@2.0.5.Final", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "7060f67764565b9ee9d467e3ed0cb8a9c601b23a" + } + ] + } + ] + }, + { + "type": "application", + "bom-ref": "pkg:generic/java@1.8.0_362-b09?package-id=df80297034b58157", + "name": "java", + "version": "1.8.0_362-b09", + "cpe": "cpe:2.3:a:oracle:openjdk:1.8.0_362-b09:*:*:*:*:*:*:*", + "purl": "pkg:generic/java@1.8.0_362-b09" + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.javassist/javassist@3.23.2-GA?package-id=3f941ac2ab917b73", + "group": "org.javassist", + "name": "javassist", + "version": "3.23.2-GA", + "licenses": [ + { + "license": { + "name": "http://www.mozilla.org/MPL/MPL-1.1.html, http://www.gnu.org/licenses/lgpl-2.1.html, http://www.apache.org/licenses/" + } + } + ], + "cpe": "cpe:2.3:a:shigeru-chiba\\,-www-javassist-org:javassist:3.23.2-GA:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.javassist/javassist@3.23.2-GA", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "c5afe660a95e87ceb518e4f5cf02f5c56b547683" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun/javax.activation-api@1.2.0?package-id=44695ad4c4a14e64", + "group": "javax.activation", + "name": "javax.activation-api", + "version": "1.2.0", + "licenses": [ + { + "license": { + "name": "https://github.com/javaee/activation/blob/master/LICENSE.txt" + } + } + ], + "cpe": "cpe:2.3:a:javax.activation-api:javax.activation-api:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.sun/javax.activation-api@1.2.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "85262acf3ca9816f9537ca47d5adeabaead7cb16" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish/javax.annotation-api@1.3.2?package-id=20bd801f6cf7b7a6", + "group": "javax.annotation", + "name": "javax.annotation-api", + "version": "1.3.2", + "licenses": [ + { + "license": { + "name": "https://github.com/javaee/javax.annotation/blob/master/LICENSE" + } + } + ], + "cpe": "cpe:2.3:a:javax.annotation-api:javax.annotation-api:1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.glassfish/javax.annotation-api@1.3.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "934c04d3cfef185a8008e7bf34331b79730a9d43" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.oracle/javax.persistence-api@2.2?package-id=155945b0674da452", + "group": "javax.persistence", + "name": "javax.persistence-api", + "version": "2.2", + "licenses": [ + { + "license": { + "name": "http://www.eclipse.org/legal/epl-v10.html, http://www.eclipse.org/org/documents/edl-v10.php" + } + } + ], + "cpe": "cpe:2.3:a:javax.persistence-api:javax.persistence-api:2.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.oracle/javax.persistence-api@2.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "25665ac8c0b62f50e6488173233239120fc52c96" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish/javax.transaction-api@1.3?package-id=714e2ad1cde0a927", + "group": "javax.transaction", + "name": "javax.transaction-api", + "version": "1.3", + "licenses": [ + { + "license": { + "name": "https://github.com/javaee/javax.transaction/blob/master/LICENSE" + } + } + ], + "cpe": "cpe:2.3:a:javax.transaction-api:javax.transaction-api:1.3:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.glassfish/javax.transaction-api@1.3", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "e006adf5cf3cca2181d16bd640ecb80148ec0fce" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish/jaxb-api@2.3.1?package-id=e7520f737bf4c7ed", + "group": "javax.xml.bind", + "name": "jaxb-api", + "version": "2.3.1", + "licenses": [ + { + "license": { + "name": "https://oss.oracle.com/licenses/CDDL+GPL-1.1, https://oss.oracle.com/licenses/CDDL+GPL-1.1" + } + } + ], + "cpe": "cpe:2.3:a:oracle-corporation:jaxb-api:2.3.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.glassfish/jaxb-api@2.3.1", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "8531ad5ac454cc2deb9d4d32c40c4d7451939b5d" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.3.2.Final?package-id=8f624e9189ec70d9", + "group": "org.jboss.logging", + "name": "jboss-logging", + "version": "3.3.2.Final", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:jboss-by-red-hat:jboss-logging:3.3.2.Final:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.jboss.logging/jboss-logging@3.3.2.Final", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "3789d00e859632e6c6206adc0c71625559e6e3b0" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun/jce@1.8.0_362?package-id=a8c489b1d53d3920", + "name": "jce", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:jce:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.sun/jce@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "ea30f8fc11602d5de2fc30432e5c489364bb7d2e" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/jcip-annotations/jcip-annotations@1.0?package-id=c978132a9e3cfedc", + "name": "jcip-annotations", + "version": "1.0", + "cpe": "cpe:2.3:a:jcip-annotations:jcip-annotations:1.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/jcip-annotations/jcip-annotations@1.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "afba4942caaeaf46aab0b976afd57cc7c181467e" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.26?package-id=d1b661229f7b1b57", + "group": "org.slf4j", + "name": "jcl-over-slf4j", + "version": "1.7.26", + "cpe": "cpe:2.3:a:jcl-over-slf4j:jcl-over-slf4j:1.7.26:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.26", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "33fbc2d93de829fa5e263c5ce97f5eab8f57d53e" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jctools/jctools-core@2.1.1?package-id=1e89c60aec5b2395", + "group": "org.jctools", + "name": "jctools-core", + "version": "2.1.1", + "cpe": "cpe:2.3:a:jctools-core:jctools-core:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.jctools/jctools-core@2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:maven/jdo-api/jdo-api@3.0.1?package-id=976ac26c8b36ff43", + "name": "jdo-api", + "version": "3.0.1", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.html" + } + } + ], + "cpe": "cpe:2.3:a:apache-software-foundation:jdo-api:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/jdo-api/jdo-api@3.0.1", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "058e7a538e020b73871e232eeb064835fd98a492" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/jfr/jfr@1.8.0_362?package-id=a79464b21bb17e9e", + "name": "jfr", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:jfr:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/jfr/jfr@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "88dbd83bf6b99249cb4a27d94cd9db30eed845d5" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.joda/joda-time@2.10.2?package-id=1dfc2e94aeebb351", + "group": "joda-time", + "name": "joda-time", + "version": "2.10.2", + "licenses": [ + { + "license": { + "name": "Apache 2.0" + } + } + ], + "cpe": "cpe:2.3:a:joda-time:joda-time:2.10.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.joda/joda-time@2.10.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "a079fc39ccc3de02acdeb7117443e5d9bd431687" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/net.sf.jopt-simple/jopt-simple@5.0.3?package-id=8cbe0c529f0357d", + "group": "net.sf.jopt-simple", + "name": "jopt-simple", + "version": "5.0.3", + "licenses": [ + { + "license": { + "name": "http://www.opensource.org/licenses/mit-license.php" + } + } + ], + "cpe": "cpe:2.3:a:jopt-simple:jopt-simple:5.0.3:*:*:*:*:*:*:*", + "purl": "pkg:maven/net.sf.jopt-simple/jopt-simple@5.0.3", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "cdd846cfc4e0f7eefafc02c0f5dce32b9303aa2a" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.github.java-json-tools.json-schema-core/json-schema-core@1.2.8?package-id=1a535dbb910c0719", + "name": "json-schema-core", + "version": "1.2.8", + "cpe": "cpe:2.3:a:json-schema-core:json-schema-core:1.2.8:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.github.java-json-tools.json-schema-core/json-schema-core@1.2.8", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "5164416f08168ced34e02d870cb958db42b61b5f" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.github.java-json-tools.json-schema-validator/json-schema-validator@2.2.8?package-id=fc52a0f66aec0ff8", + "name": "json-schema-validator", + "version": "2.2.8", + "cpe": "cpe:2.3:a:json-schema-validator:json-schema-validator:2.2.8:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.github.java-json-tools.json-schema-validator/json-schema-validator@2.2.8", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "b577aa61af5731102ed6044a6f01cfa10499e370" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.1?package-id=314015e8b6517faa", + "group": "com.google.code.findbugs", + "name": "jsr305", + "version": "3.0.1", + "cpe": "cpe:2.3:a:findbugs:jsr305:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.1?package-id=aff6c37de2e9097c", + "group": "com.google.code.findbugs", + "name": "jsr305", + "version": "3.0.1", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:findbugs:jsr305:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.1", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "f7be08ec23c21485b9b5a1cf1654c2ec8c58168d" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/jsse/jsse@1.8.0_362?package-id=c373477973ee44a0", + "name": "jsse", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:jsse:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/jsse/jsse@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "e2cc27ebb60ca839f44d9794f18450eb23cf44b4" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/jta/jta@1.1?package-id=dfc49ad702ec5160", + "name": "jta", + "version": "1.1", + "cpe": "cpe:2.3:a:sun-microsystems\\,-inc-:jta:1.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/jta/jta@1.1", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "2ca09f0b36ca7d71b762e14ea2ff09d5eac57558" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.slf4j/jul-to-slf4j@1.7.26?package-id=efc03a1563ee22aa", + "group": "org.slf4j", + "name": "jul-to-slf4j", + "version": "1.7.26", + "cpe": "cpe:2.3:a:jul-to-slf4j:jul-to-slf4j:1.7.26:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.slf4j/jul-to-slf4j@1.7.26", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "8031352b2bb0a49e67818bf04c027aa92e645d5c" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.lettuce/lettuce-core@5.1.6.RELEASE?package-id=46e9909fcd49becd", + "group": "io.lettuce", + "name": "lettuce-core", + "version": "5.1.6.RELEASE", + "cpe": "cpe:2.3:a:lettuce-core:lettuce-core:5.1.6.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/io.lettuce/lettuce-core@5.1.6.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "2ce6481aa829475c32adc57067cf7563a1f7dd8f" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libbz2@1.0.8-r4?arch=x86_64&upstream=bzip2&distro=alpine-3.17.3&package-id=60a12fd5038efa61", + "publisher": "Natanael Copa ", + "name": "libbz2", + "version": "1.0.8-r4", + "description": "Shared library for bz2", + "licenses": [ + { + "license": { + "id": "bzip2-1.0.6" + } + } + ], + "cpe": "cpe:2.3:a:libbz2:libbz2:1.0.8-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libbz2@1.0.8-r4?arch=x86_64&upstream=bzip2&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://sourceware.org/bzip2/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.17.3&package-id=8126b232e2d3c608", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r3", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.3&package-id=d3084c788891fb28", + "publisher": "Ariadne Conill ", + "name": "libcrypto3", + "version": "3.0.8-r3", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto3:libcrypto3:3.0.8-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libexpat@2.5.0-r0?arch=x86_64&upstream=expat&distro=alpine-3.17.3&package-id=3230d7655464b5cd", + "publisher": "Carlo Landmeter ", + "name": "libexpat", + "version": "2.5.0-r0", + "description": "XML Parser library written in C (libraries)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libexpat:libexpat:2.5.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libexpat@2.5.0-r0?arch=x86_64&upstream=expat&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://libexpat.github.io/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libfontenc@1.1.6-r0?arch=x86_64&distro=alpine-3.17.3&package-id=4b664e9d006f8d78", + "publisher": "Natanael Copa ", + "name": "libfontenc", + "version": "1.1.6-r0", + "description": "X11 font encoding library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libfontenc:libfontenc:1.1.6-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libfontenc@1.1.6-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgcc@12.2.1_git20220924-r4?arch=x86_64&upstream=gcc&distro=alpine-3.17.3&package-id=4dbb63d06d9618e9", + "publisher": "Ariadne Conill ", + "name": "libgcc", + "version": "12.2.1_git20220924-r4", + "description": "GNU C compiler runtime libraries", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgcc:libgcc:12.2.1_git20220924-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgcc@12.2.1_git20220924-r4?arch=x86_64&upstream=gcc&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.googlecode.libphonenumber/libphonenumber@8.0.0?package-id=b82e4d8fbff64d95", + "group": "com.googlecode.libphonenumber", + "name": "libphonenumber", + "version": "8.0.0", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:libphonenumber:libphonenumber:8.0.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.googlecode.libphonenumber/libphonenumber@8.0.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "ce021971974ee6a26572e43eaba7edf184c3c63d" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libpng@1.6.38-r0?arch=x86_64&distro=alpine-3.17.3&package-id=de4865c94634be51", + "publisher": "Natanael Copa ", + "name": "libpng", + "version": "1.6.38-r0", + "description": "Portable Network Graphics library", + "licenses": [ + { + "license": { + "id": "Libpng" + } + } + ], + "cpe": "cpe:2.3:a:libpng:libpng:1.6.38-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libpng@1.6.38-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "http://www.libpng.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libretls@3.5.2-r1?arch=x86_64&distro=alpine-3.17.3&package-id=1539d83bb0f27113", + "publisher": "Ariadne Conill ", + "name": "libretls", + "version": "3.5.2-r1", + "description": "port of libtls from libressl to openssl", + "licenses": [ + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "name": "(" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "OR" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": ")" + } + } + ], + "cpe": "cpe:2.3:a:libretls:libretls:3.5.2-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libretls@3.5.2-r1?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://git.causal.agency/libretls/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.3&package-id=2a95f0251fba7a33", + "publisher": "Ariadne Conill ", + "name": "libssl3", + "version": "3.0.8-r3", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libssl3:libssl3:3.0.8-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libstdc++@12.2.1_git20220924-r4?arch=x86_64&upstream=gcc&distro=alpine-3.17.3&package-id=3c33807c48d3ddd2", + "publisher": "Ariadne Conill ", + "name": "libstdc++", + "version": "12.2.1_git20220924-r4", + "description": "GNU C++ standard runtime library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:12.2.1_git20220924-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libstdc++@12.2.1_git20220924-r4?arch=x86_64&upstream=gcc&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/local_policy/local_policy?package-id=7e5a8ee4262b37db", + "name": "local_policy", + "cpe": "cpe:2.3:a:local-policy:local-policy:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/local_policy/local_policy", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "bc70ce9f98d1f3ebcf41bb5e7b92556a5a2d4788" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/local_policy/local_policy?package-id=6060fa0479e27db5", + "name": "local_policy", + "cpe": "cpe:2.3:a:local-policy:local-policy:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/local_policy/local_policy", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "8ab714610f8bf90411dc029a09ecd27c2b60c804" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/localedata/localedata?package-id=3d9158e219a57e4d", + "name": "localedata", + "cpe": "cpe:2.3:a:localedata:localedata:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/localedata/localedata", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "fd7f6a9ee8e6263caca5c369c0bb813702c672c0" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-api@2.11.2?package-id=f5b8c58ab6cffd91", + "group": "org.apache.logging.log4j", + "name": "log4j-api", + "version": "2.11.2", + "licenses": [ + { + "license": { + "name": "https://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:apache:log4j-api:2.11.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.logging.log4j/log4j-api@2.11.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "f5e9a2ffca496057d6891a3de65128efc636e26e" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.11.2?package-id=d9b1e3bf17e10c2d", + "group": "org.apache.logging.log4j", + "name": "log4j-to-slf4j", + "version": "2.11.2", + "licenses": [ + { + "license": { + "name": "https://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:apache:log4j-to-slf4j:2.11.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.11.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "6d37bf7b046c0ce2669f26b99365a2cfa45c4c18" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/logback-classic/logback-classic@1.2.3?package-id=ad06064a9a2cebb", + "group": "ch.qos.logback", + "name": "logback-classic", + "version": "1.2.3", + "licenses": [ + { + "license": { + "name": "http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html" + } + } + ], + "cpe": "cpe:2.3:a:logback-classic:logback-classic:1.2.3:*:*:*:*:*:*:*", + "purl": "pkg:maven/logback-classic/logback-classic@1.2.3", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "7c4f3c474fb2c041d8028740440937705ebb473a" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/logback-core/logback-core@1.2.3?package-id=ef82ee19623a3120", + "group": "ch.qos.logback", + "name": "logback-core", + "version": "1.2.3", + "licenses": [ + { + "license": { + "name": "http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html" + } + } + ], + "cpe": "cpe:2.3:a:logback-core:logback-core:1.2.3:*:*:*:*:*:*:*", + "purl": "pkg:maven/logback-core/logback-core@1.2.3", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "864344400c3d4d92dfeb0a305dc87d953677c03c" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.squareup.okhttp3/logging-interceptor@3.14.4?package-id=2a00eb19bdc4a32d", + "group": "com.squareup.okhttp3", + "name": "logging-interceptor", + "version": "3.14.4", + "cpe": "cpe:2.3:a:logging-interceptor:logging-interceptor:3.14.4:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.squareup.okhttp3/logging-interceptor@3.14.4", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "cc6f517fec0ea087ce2b0d8463b2bc2bc3793231" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/lombok/lombok@1.18.8?package-id=ab91ec026c318e6e", + "name": "lombok", + "version": "1.18.8", + "cpe": "cpe:2.3:a:lombok:lombok:1.18.8:*:*:*:*:*:*:*", + "purl": "pkg:maven/lombok/lombok@1.18.8", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "448003bc1b234aac04b58e27d7755c12c3ec4236" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun/mailapi@1.4.3?package-id=6e6806fbaba2063d", + "group": "javax.mail", + "name": "mailapi", + "version": "1.4.3", + "licenses": [ + { + "license": { + "name": "http://www.sun.com/cddl, https://glassfish.dev.java.net/public/CDDL+GPL.html" + } + } + ], + "cpe": "cpe:2.3:a:sun-microsystems\\,-inc-:mailapi:1.4.3:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.sun/mailapi@1.4.3", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "124600e35d9031da50e5f67661ffa741541f8f6a" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/management-agent/management-agent?package-id=7defce2ca9e0fee2", + "name": "management-agent", + "cpe": "cpe:2.3:a:management-agent:management-agent:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/management-agent/management-agent", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "66e296ac38ffd9d835b2c91f67cde75891e81631" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.mapstruct/mapstruct@1.2.0.Final?package-id=7a50c835c69f0972", + "group": "org.mapstruct", + "name": "mapstruct", + "version": "1.2.0.Final", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:mapstruct:mapstruct:1.2.0.Final:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.mapstruct/mapstruct@1.2.0.Final", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "8609d6eb044e9f6c73cb24c8f2f4ed5c72a249c7" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.mchange/mchange-commons-java@0.2.11?package-id=afa04d632f553a74", + "name": "mchange-commons-java", + "version": "0.2.11", + "cpe": "cpe:2.3:a:mchange-commons-java:mchange-commons-java:0.2.11:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.mchange/mchange-commons-java@0.2.11", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "2a6a6c1fe25f28f5a073171956ce6250813467ef" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.micrometer%23micrometer-core/micrometer-core@1.1.4?package-id=ccc0210511a01c7b", + "name": "micrometer-core", + "version": "1.1.4", + "cpe": "cpe:2.3:a:micrometer\\#micrometer-core:micrometer-core:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:maven/io.micrometer%23micrometer-core/micrometer-core@1.1.4", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "96eabfe2343a4a4676d215b2122cbbc4d4b6af9b" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.micrometer%23micrometer-registry-prometheus/micrometer-registry-prometheus@1.1.4?package-id=2165dbdf90c3f3fe", + "name": "micrometer-registry-prometheus", + "version": "1.1.4", + "cpe": "cpe:2.3:a:micrometer\\#micrometer-registry-prometheus:micrometer-registry-prometheus:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:maven/io.micrometer%23micrometer-registry-prometheus/micrometer-registry-prometheus@1.1.4", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "d93021c4f8e9efcb18bc0da79527bf39a0a41bd6" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/minio/minio@6.0.10?package-id=fcb144a93a782cf8", + "name": "minio", + "version": "6.0.10", + "cpe": "cpe:2.3:a:minio:minio:6.0.10:*:*:*:*:*:*:*", + "purl": "pkg:maven/minio/minio@6.0.10", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "cb7a02912350946087f19b0e4fb24d8ee83db66c" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/mkfontscale@1.2.2-r1?arch=x86_64&distro=alpine-3.17.3&package-id=5556aac06b098482", + "publisher": "Natanael Copa ", + "name": "mkfontscale", + "version": "1.2.2-r1", + "description": "Scalable font index generator for X", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mkfontscale:mkfontscale:1.2.2-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/mkfontscale@1.2.2-r1?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.squareup.moshi/moshi@1.8.0?package-id=8eb943c78a7fb2d3", + "group": "com.squareup.moshi", + "name": "moshi", + "version": "1.8.0", + "cpe": "cpe:2.3:a:squareup:moshi:1.8.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.squareup.moshi/moshi@1.8.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "752e7b187599d3ccb174d00ba7235e29add736be" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.github.fge.msg-simple/msg-simple@1.1?package-id=94bbe4cd347987a8", + "name": "msg-simple", + "version": "1.1", + "cpe": "cpe:2.3:a:msg-simple:msg-simple:1.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.github.fge.msg-simple/msg-simple@1.1", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "f261263e13dd4cfa93cc6b83f1f58f619097a2c4" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.msgpack/msgpack-core@0.8.18?package-id=d3b0e6957095fda3", + "name": "msgpack-core", + "version": "0.8.18", + "cpe": "cpe:2.3:a:msgpack-core:msgpack-core:0.8.18:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.msgpack/msgpack-core@0.8.18", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "759d77cdc372da2f40db977aafbecfd160a3ff0d" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.2.3-r4?arch=x86_64&distro=alpine-3.17.3&package-id=d9700f02cf26e8b8", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.2.3-r4", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.2.3-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.2.3-r4?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-locales@0.1.0-r0?arch=x86_64&distro=alpine-3.17.3&package-id=2711b5f56d3082dd", + "publisher": "TBK ", + "name": "musl-locales", + "version": "0.1.0-r0", + "description": "Locales support for musl", + "licenses": [ + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:musl-locales:musl-locales:0.1.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-locales@0.1.0-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://git.adelielinux.org/adelie/musl-locales/-/wikis/home", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-locales-lang@0.1.0-r0?arch=x86_64&upstream=musl-locales&distro=alpine-3.17.3&package-id=a5f7a593669f92ef", + "publisher": "TBK ", + "name": "musl-locales-lang", + "version": "0.1.0-r0", + "description": "Languages for package musl-locales", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-locales-lang:musl-locales-lang:0.1.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-locales-lang@0.1.0-r0?arch=x86_64&upstream=musl-locales&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://git.adelielinux.org/adelie/musl-locales/-/wikis/home", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86_64&upstream=musl&distro=alpine-3.17.3&package-id=f71ecf5267e6c37b", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.2.3-r4", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.2.3-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86_64&upstream=musl&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.mysema.commons/mysema-commons-lang@0.2.4?package-id=ca757d3681d8b371", + "group": "com.mysema.commons", + "name": "mysema-commons-lang", + "version": "0.2.4", + "cpe": "cpe:2.3:a:mysema-commons-lang:mysema-commons-lang:0.2.4:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.mysema.commons/mysema-commons-lang@0.2.4", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "d09c8489d54251a6c22fbce804bdd4a070557317" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.mysql.cj/mysql-connector-java@8.0.16?package-id=87023fda3dd7994a", + "name": "mysql-connector-java", + "version": "8.0.16", + "cpe": "cpe:2.3:a:mysql-connector-java:mysql-connector-java:8.0.16:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.mysql.cj/mysql-connector-java@8.0.16", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "06088b7a25188ab4b3ab865422a8ec77ade29236" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/nashorn/nashorn@1.8.0_362-b09?package-id=ff4e7f4643e3b763", + "name": "nashorn", + "version": "1.8.0_362-b09", + "cpe": "cpe:2.3:a:oracle-corporation:nashorn:1.8.0_362-b09:*:*:*:*:*:*:*", + "purl": "pkg:maven/nashorn/nashorn@1.8.0_362-b09", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "85cadde4959b1188714a9d6bfde1304027f07e36" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.aayushatharva.brotli4j/native-linux-x86_64@1.8.0?package-id=e5ee98086c12cac9", + "group": "com.aayushatharva.brotli4j", + "name": "native-linux-x86_64", + "version": "1.8.0", + "cpe": "cpe:2.3:a:native-linux-x86-64:native-linux-x86-64:1.8.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.aayushatharva.brotli4j/native-linux-x86_64@1.8.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "add74b11206e3a6ff14c7405718a0b61abae9a75" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.36.Final?package-id=a9bb5bb445fbc318", + "group": "io.netty", + "name": "netty-buffer", + "version": "4.1.36.Final", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "cpe": "cpe:2.3:a:netty-project:netty-buffer:4.1.36.Final:*:*:*:*:*:*:*", + "purl": "pkg:maven/io.netty/netty-buffer@4.1.36.Final", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "7f2db0921dd57df4db076229830ab09bba713aeb" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.36.Final?package-id=b9ddfe5a6c41b46a", + "group": "io.netty", + "name": "netty-codec", + "version": "4.1.36.Final", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "cpe": "cpe:2.3:a:netty-project:netty-codec:4.1.36.Final:*:*:*:*:*:*:*", + "purl": "pkg:maven/io.netty/netty-codec@4.1.36.Final", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "8462116d327bb3d1ec24258071f2e7345a73dbfc" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-common@4.1.36.Final?package-id=4fedc371f6835980", + "group": "io.netty", + "name": "netty-common", + "version": "4.1.36.Final", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "cpe": "cpe:2.3:a:netty-project:netty-common:4.1.36.Final:*:*:*:*:*:*:*", + "purl": "pkg:maven/io.netty/netty-common@4.1.36.Final", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "f6f38fde652a70ea579897edc80e52353e487ae6" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-handler@4.1.36.Final?package-id=70b0afab5f3932a1", + "group": "io.netty", + "name": "netty-handler", + "version": "4.1.36.Final", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "cpe": "cpe:2.3:a:netty-handler:netty-handler:4.1.36.Final:*:*:*:*:*:*:*", + "purl": "pkg:maven/io.netty/netty-handler@4.1.36.Final", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "1c38a5920a10c01b1cce4cdc964447ec76abf1b5" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-resolver@4.1.36.Final?package-id=a82008d74dd2c81c", + "group": "io.netty", + "name": "netty-resolver", + "version": "4.1.36.Final", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "cpe": "cpe:2.3:a:netty-resolver:netty-resolver:4.1.36.Final:*:*:*:*:*:*:*", + "purl": "pkg:maven/io.netty/netty-resolver@4.1.36.Final", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "e4d243fbf4e6837fa294f892bf97149e18129100" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.36.Final?package-id=eae6562d50f1c7e0", + "group": "io.netty", + "name": "netty-transport", + "version": "4.1.36.Final", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "cpe": "cpe:2.3:a:netty-transport:netty-transport:4.1.36.Final:*:*:*:*:*:*:*", + "purl": "pkg:maven/io.netty/netty-transport@4.1.36.Final", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "8546e6be47be587acab86bbd106ca023678f07d9" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.narupley/not-going-to-be-commons-ssl@0.3.20?package-id=9a518042b6c8e721", + "group": "com.narupley", + "name": "not-going-to-be-commons-ssl", + "version": "0.3.20", + "cpe": "cpe:2.3:a:not-going-to-be-commons-ssl:not-going-to-be-commons-ssl:0.3.20:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.narupley/not-going-to-be-commons-ssl@0.3.20", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "7502c294b7fea7abbd171a7df15fed3bdb1e368c" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.squareup.okhttp3/okhttp@3.14.4?package-id=23c40bcc187e27fc", + "group": "com.squareup.okhttp3", + "name": "okhttp", + "version": "3.14.4", + "cpe": "cpe:2.3:a:squareup:okhttp:3.14.4:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.squareup.okhttp3/okhttp@3.14.4", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "4f6f76315e70d9af39a1125dc6ff7145e26e3040" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.squareup.okio/okio@1.17.2?package-id=4337d80b6f1956cf", + "group": "com.squareup.okio", + "name": "okio", + "version": "1.17.2", + "cpe": "cpe:2.3:a:squareup:okio:1.17.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.squareup.okio/okio@1.17.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "78c7820b205002da4d2d137f6f312bd64b3d6049" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.opensaml/opensaml@2.6.6?package-id=4a274fe72cc9d6cf", + "group": "org.opensaml", + "name": "opensaml", + "version": "2.6.6", + "cpe": "cpe:2.3:a:www-opensaml-org:opensaml:2.6.6:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.opensaml/opensaml@2.6.6", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "2d2ea39a37920fa1c21330b5730619703421e839" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.opensaml/openws@1.5.6?package-id=8d9c40aa3753a22a", + "group": "org.opensaml", + "name": "openws", + "version": "1.5.6", + "cpe": "cpe:2.3:a:world-wide-web-consortium-\\(w3c\\):openws:1.5.6:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.opensaml/openws@1.5.6", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "53c9e39201fb588b42ea4059fa062ced76acba01" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.1.202206130422-r?package-id=9714452b7fbcfb43", + "group": "org.eclipse.jgit", + "name": "org.eclipse.jgit", + "version": "5.13.1.202206130422-r", + "cpe": "cpe:2.3:a:eclipse-org---jgit:org.eclipse.jgit:5.13.1.202206130422-r:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.1.202206130422-r", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "841d1ae74e4bc77ac7d4b106f15d0468dc7ac7f2" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@5.13.1.202206130422-r?package-id=85d3061f76a668a4", + "group": "org.eclipse.jgit", + "name": "org.eclipse.jgit.ssh.apache", + "version": "5.13.1.202206130422-r", + "cpe": "cpe:2.3:a:apache:org.eclipse.jgit.ssh.apache:5.13.1.202206130422-r:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@5.13.1.202206130422-r", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "7c6b09b55dc9a3325a92ae81b45161a76f083ae5" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.pcollections/pcollections@3.0.3?package-id=e478f8055b5234ad", + "group": "org.pcollections", + "name": "pcollections", + "version": "3.0.3", + "cpe": "cpe:2.3:a:pcollections:pcollections:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.pcollections/pcollections@3.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.quartz-scheduler/quartz@2.3.0?package-id=823d2b12e5e6644d", + "group": "org.quartz-scheduler", + "name": "quartz", + "version": "2.3.0", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:quartz-scheduler:quartz:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.quartz-scheduler/quartz@2.3.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "a090397102a12f6241177c5d501835334bb7662a" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.querydsl/querydsl-apt@4.1.4?package-id=e06cff1c1262978a", + "group": "com.querydsl", + "name": "querydsl-apt", + "version": "4.1.4", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:querydsl-apt:querydsl-apt:4.1.4:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.querydsl/querydsl-apt@4.1.4", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "51e33839a6b124d975bb0e7f909652024eed9f3a" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.querydsl/querydsl-codegen@4.1.4?package-id=1a3db74ac1cb54ea", + "group": "com.querydsl", + "name": "querydsl-codegen", + "version": "4.1.4", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:querydsl-codegen:querydsl-codegen:4.1.4:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.querydsl/querydsl-codegen@4.1.4", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "e67a1c8822a501bfeb174922246e430a7ccd6780" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.querydsl/querydsl-core@4.2.1?package-id=1af52076afe0efb6", + "group": "com.querydsl", + "name": "querydsl-core", + "version": "4.2.1", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:querydsl-core:querydsl-core:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.querydsl/querydsl-core@4.2.1", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "ae5b6f2cb28184f19afc1f915fc1e45bf732ffc5" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.querydsl/querydsl-jpa@4.1.4?package-id=a30c56a382fb0415", + "group": "com.querydsl", + "name": "querydsl-jpa", + "version": "4.1.4", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:querydsl-jpa:querydsl-jpa:4.1.4:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.querydsl/querydsl-jpa@4.1.4", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "b5f7d287efb716f1a9f9b102cab933c0202e119d" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.reactivestreams.reactive-streams/reactive-streams@1.0.2?package-id=66eacb86daf558b7", + "name": "reactive-streams", + "version": "1.0.2", + "cpe": "cpe:2.3:a:reactive-streams:reactive-streams:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.reactivestreams.reactive-streams/reactive-streams@1.0.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "323964c36556eb0e6209f65c1cef72b53b461ab8" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.projectreactor.reactor-core/reactor-core@3.2.9.RELEASE?package-id=e4c6c62940026de0", + "name": "reactor-core", + "version": "3.2.9.RELEASE", + "cpe": "cpe:2.3:a:projectreactor:reactor-core:3.2.9.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/io.projectreactor.reactor-core/reactor-core@3.2.9.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "a4c759ef932c530eaaad73e2544739bee9530903" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.reflections/reflections@0.9.9?package-id=12b13f6278fda317", + "group": "org.reflections", + "name": "reflections", + "version": "0.9.9", + "cpe": "cpe:2.3:a:reflections:reflections:0.9.9:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.reflections/reflections@0.9.9", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "0296d8adb2f22a38025f44b45cac89835ff0bbaf" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/resources/resources@1.8.0_362?package-id=8580b1e6a4b5281a", + "name": "resources", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:resources:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/resources/resources@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "34d2d9c5b59ee5ff757e7d766837a4f53947b7a1" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.squareup.retrofit2/retrofit@2.6.2?package-id=d605abe81c88db5", + "group": "com.squareup.retrofit2", + "name": "retrofit", + "version": "2.6.2", + "cpe": "cpe:2.3:a:retrofit2:retrofit:2.6.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.squareup.retrofit2/retrofit@2.6.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "b51e9cf3b25a2f4116612d368d1aeba671fe1533" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.mozilla.javascript.tools.shell.Main/rhino@1.7R4?package-id=f9f178fb0f7041d6", + "name": "rhino", + "version": "1.7R4", + "cpe": "cpe:2.3:a:mozilla-foundation:javascript:1.7R4:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.mozilla.javascript.tools.shell.Main/rhino@1.7R4", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "e982f2136574b9a423186fbaeaaa98dc3e5a5288" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/rt/rt@1.8.0_362?package-id=a9e172c0e0dc2fce", + "name": "rt", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:rt:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/rt/rt@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "d85439d089c379805dac978a1e27a9a3e465bb71" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.3.5-r1?arch=x86_64&upstream=pax-utils&distro=alpine-3.17.3&package-id=e903138d19e85b80", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.3.5-r1", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.3.5-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.3.5-r1?arch=x86_64&upstream=pax-utils&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.xml.serializer/serializer@2.7.2?package-id=59b2a0c9a9a5329b", + "name": "serializer", + "version": "2.7.2", + "cpe": "cpe:2.3:a:apache:serializer:2.7.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.xml.serializer/serializer@2.7.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "24247f3bb052ee068971393bdb83e04512bb1c3c" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.prometheus/simpleclient@0.5.0?package-id=37c0d287a233523d", + "group": "io.prometheus", + "name": "simpleclient", + "version": "0.5.0", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:simpleclient:simpleclient:0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/io.prometheus/simpleclient@0.5.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "fbbfe2300098798e3d23f93b7b14befeceacf512" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.prometheus/simpleclient_common@0.5.0?package-id=433f46df6c895ff7", + "group": "io.prometheus", + "name": "simpleclient_common", + "version": "0.5.0", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:simpleclient-common:simpleclient-common:0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/io.prometheus/simpleclient_common@0.5.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "bfd93082d7cf85c0543c2ccc286b96c817d1090c" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.26?package-id=d03c2fb80cd9cdf2", + "group": "org.slf4j", + "name": "slf4j-api", + "version": "1.7.26", + "cpe": "cpe:2.3:a:slf4j-api:slf4j-api:1.7.26:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.26", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "77100a62c2e6f04b53977b9f541044d7d722693d" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.yaml/snakeyaml@1.33?package-id=843db7ee7d03cb77", + "group": "org.yaml", + "name": "snakeyaml", + "version": "1.33", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:snakeyaml:snakeyaml:1.33:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.yaml/snakeyaml@1.33", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "2cd0a87ff7df953f810c344bdf2fe3340b954c69" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.springframework.amqp/spring-amqp@2.1.6.RELEASE?package-id=c49dde10135e38cf", + "name": "spring-amqp", + "version": "2.1.6.RELEASE", + "cpe": "cpe:2.3:a:pivotal-software\\,-inc-:spring-amqp:2.1.6.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.springframework.amqp/spring-amqp@2.1.6.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "417ef0e927476b20ebfad56d7759fd661493f905" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-aop/spring-aop@5.1.7.RELEASE?package-id=34fcc113d8231dbc", + "name": "spring-aop", + "version": "5.1.7.RELEASE", + "cpe": "cpe:2.3:a:spring-aop:spring-aop:5.1.7.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-aop/spring-aop@5.1.7.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "8138b5e3dd01d514741de35d7f5050599c617509" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-aspects/spring-aspects@5.1.7.RELEASE?package-id=69f2c1884df01188", + "name": "spring-aspects", + "version": "5.1.7.RELEASE", + "cpe": "cpe:2.3:a:spring-aspects:spring-aspects:5.1.7.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-aspects/spring-aspects@5.1.7.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "15309277b9a18c8dae21272be3e57b69a67c41f6" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-beans/spring-beans@5.1.7.RELEASE?package-id=59e773d20428458a", + "name": "spring-beans", + "version": "5.1.7.RELEASE", + "cpe": "cpe:2.3:a:spring-beans:spring-beans:5.1.7.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-beans/spring-beans@5.1.7.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "14cd651e4aa3514e75710c9450c7a0c89413e63f" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot/spring-boot@2.1.5.RELEASE?package-id=d560b45d698835a4", + "name": "spring-boot", + "version": "2.1.5.RELEASE", + "cpe": "cpe:2.3:a:spring-boot:spring-boot:2.1.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot/spring-boot@2.1.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "939061a385b4e30e115978d78a7412fb984674df" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-actuator/spring-boot-actuator@2.1.5.RELEASE?package-id=b99ebb8a82d732de", + "name": "spring-boot-actuator", + "version": "2.1.5.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-actuator:spring-boot-actuator:2.1.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-actuator/spring-boot-actuator@2.1.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "eccd3c70cfbe9534db19fbdd6cbf86fab884c3c0" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-actuator-autoconfigure/spring-boot-actuator-autoconfigure@2.1.5.RELEASE?package-id=2368594ea9a8feff", + "name": "spring-boot-actuator-autoconfigure", + "version": "2.1.5.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-actuator-autoconfigure:spring-boot-actuator-autoconfigure:2.1.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-actuator-autoconfigure/spring-boot-actuator-autoconfigure@2.1.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "4e6774d2f4a70e62092dbaace39190f8b1df8083" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-autoconfigure/spring-boot-autoconfigure@2.1.5.RELEASE?package-id=64083cd147bd2053", + "name": "spring-boot-autoconfigure", + "version": "2.1.5.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-autoconfigure:spring-boot-autoconfigure:2.1.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-autoconfigure/spring-boot-autoconfigure@2.1.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "69ae2819b295603563b95f79abae53f2631c5b94" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-starter/spring-boot-starter@2.1.5.RELEASE?package-id=9d7c93d5c690d94b", + "name": "spring-boot-starter", + "version": "2.1.5.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-starter:spring-boot-starter:2.1.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-starter/spring-boot-starter@2.1.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "74952d169c2da56f7794b3a88508e52005bb8f36" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-starter-actuator/spring-boot-starter-actuator@2.1.5.RELEASE?package-id=aeb3ccb03e88cea", + "name": "spring-boot-starter-actuator", + "version": "2.1.5.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-starter-actuator:spring-boot-starter-actuator:2.1.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-starter-actuator/spring-boot-starter-actuator@2.1.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "4abebc4ec0ee87155bfa8daf6a9d63366308e58a" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-starter-amqp/spring-boot-starter-amqp@2.1.5.RELEASE?package-id=9709370a3232f34e", + "name": "spring-boot-starter-amqp", + "version": "2.1.5.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-starter-amqp:spring-boot-starter-amqp:2.1.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-starter-amqp/spring-boot-starter-amqp@2.1.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "3124c5e7dc556a80f47c2d7353b42d09748e252f" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-starter-aop/spring-boot-starter-aop@2.1.5.RELEASE?package-id=dbe0e8a9b73fe9fc", + "name": "spring-boot-starter-aop", + "version": "2.1.5.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-starter-aop:spring-boot-starter-aop:2.1.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-starter-aop/spring-boot-starter-aop@2.1.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "464cfb573009e724ea76ca404f106b1b19e759ff" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-starter-cache/spring-boot-starter-cache@2.1.5.RELEASE?package-id=85f7a2c096afefbf", + "name": "spring-boot-starter-cache", + "version": "2.1.5.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-starter-cache:spring-boot-starter-cache:2.1.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-starter-cache/spring-boot-starter-cache@2.1.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "ffb4deb388f567c434d589fd04234ccacda0cfd1" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-starter-data-jpa/spring-boot-starter-data-jpa@2.1.5.RELEASE?package-id=509b8297be16e061", + "name": "spring-boot-starter-data-jpa", + "version": "2.1.5.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-starter-data-jpa:spring-boot-starter-data-jpa:2.1.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-starter-data-jpa/spring-boot-starter-data-jpa@2.1.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "f33f69b3744d07f832db6ab48eab227ccde9e922" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-starter-data-redis/spring-boot-starter-data-redis@2.1.5.RELEASE?package-id=d55335ce80b155e1", + "name": "spring-boot-starter-data-redis", + "version": "2.1.5.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-starter-data-redis:spring-boot-starter-data-redis:2.1.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-starter-data-redis/spring-boot-starter-data-redis@2.1.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "dc37913654c023b1a55ed51555ceee22717081ed" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-starter-jdbc/spring-boot-starter-jdbc@2.1.5.RELEASE?package-id=2322bb9412931751", + "name": "spring-boot-starter-jdbc", + "version": "2.1.5.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-starter-jdbc:spring-boot-starter-jdbc:2.1.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-starter-jdbc/spring-boot-starter-jdbc@2.1.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "6f187e708a47b0d37552a01292ce649a97a0059d" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-starter-json/spring-boot-starter-json@2.1.5.RELEASE?package-id=290ee6d8696bce66", + "name": "spring-boot-starter-json", + "version": "2.1.5.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-starter-json:spring-boot-starter-json:2.1.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-starter-json/spring-boot-starter-json@2.1.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "0cf880b4a4713b2a1aea21f929df718a0260aa29" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-starter-logging/spring-boot-starter-logging@2.1.5.RELEASE?package-id=b650fbda28b7dfdc", + "name": "spring-boot-starter-logging", + "version": "2.1.5.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-starter-logging:spring-boot-starter-logging:2.1.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-starter-logging/spring-boot-starter-logging@2.1.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "b4fe11fb0e606b67b9fb2bd9ae4fe65b484445dd" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-starter-security/spring-boot-starter-security@2.1.5.RELEASE?package-id=63ae7300b170ad68", + "name": "spring-boot-starter-security", + "version": "2.1.5.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-starter-security:spring-boot-starter-security:2.1.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-starter-security/spring-boot-starter-security@2.1.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "6c4509c39b8c7347e8226905b40071933ecde5e8" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-starter-tomcat/spring-boot-starter-tomcat@2.1.5.RELEASE?package-id=99b8fab8cc100899", + "name": "spring-boot-starter-tomcat", + "version": "2.1.5.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-starter-tomcat:spring-boot-starter-tomcat:2.1.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-starter-tomcat/spring-boot-starter-tomcat@2.1.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "49de1c20ea6b8c6920d0a66329f9bf980e4498eb" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-starter-web/spring-boot-starter-web@2.1.5.RELEASE?package-id=f7f46f0be5d3d0ff", + "name": "spring-boot-starter-web", + "version": "2.1.5.RELEASE", + "cpe": "cpe:2.3:a:spring-boot-starter-web:spring-boot-starter-web:2.1.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-starter-web/spring-boot-starter-web@2.1.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "d46494b46a626cbd8f253066a2d7413412efc908" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-context/spring-context@5.1.7.RELEASE?package-id=3663d23aca4d10a", + "name": "spring-context", + "version": "5.1.7.RELEASE", + "cpe": "cpe:2.3:a:spring-context:spring-context:5.1.7.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-context/spring-context@5.1.7.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "b4154d41a70c56eeca42974825fe64a8576642dd" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-context-support/spring-context-support@5.1.7.RELEASE?package-id=1df07f7ad60d218b", + "name": "spring-context-support", + "version": "5.1.7.RELEASE", + "cpe": "cpe:2.3:a:spring-context-support:spring-context-support:5.1.7.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-context-support/spring-context-support@5.1.7.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "416607b257f10065fb8d77ba27b047e719e5634d" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-core/spring-core@5.1.7.RELEASE?package-id=e2e70c5bb2da4d78", + "name": "spring-core", + "version": "5.1.7.RELEASE", + "cpe": "cpe:2.3:a:springsource-spring-framework:springsource_spring_framework:5.1.7.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-core/spring-core@5.1.7.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "280f821b9ed4dad9993f1d551d6e86557092ae58" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.springframework.data/spring-data-commons@2.1.8.RELEASE?package-id=61540a4adb043633", + "group": "org.springframework.data", + "name": "spring-data-commons", + "version": "2.1.8.RELEASE", + "cpe": "cpe:2.3:a:spring-data-commons:spring-data-commons:2.1.8.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.springframework.data/spring-data-commons@2.1.8.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "0d68b9a9850ee21319469c40bdbdfe4eaaf29557" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.springframework.data/spring-data-jpa@2.1.8.RELEASE?package-id=36776c8a81ec28a4", + "group": "org.springframework.data", + "name": "spring-data-jpa", + "version": "2.1.8.RELEASE", + "cpe": "cpe:2.3:a:spring-data-jpa:spring-data-jpa:2.1.8.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.springframework.data/spring-data-jpa@2.1.8.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "385ab53309b4f0dfb317c4753fe853821ff15c08" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.springframework.data/spring-data-keyvalue@2.1.8.RELEASE?package-id=999e0a6ad491d87f", + "group": "org.springframework.data", + "name": "spring-data-keyvalue", + "version": "2.1.8.RELEASE", + "cpe": "cpe:2.3:a:spring-data-keyvalue:spring-data-keyvalue:2.1.8.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.springframework.data/spring-data-keyvalue@2.1.8.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "d4cf8dc519f6a9debd4ba2d7857210208acffddf" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.springframework.data/spring-data-redis@2.1.8.RELEASE?package-id=25a4452fd30dfa76", + "group": "org.springframework.data", + "name": "spring-data-redis", + "version": "2.1.8.RELEASE", + "cpe": "cpe:2.3:a:spring-data-redis:spring-data-redis:2.1.8.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.springframework.data/spring-data-redis@2.1.8.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "f30e626079055dfbd0cb2fd5515f12ee02bf65e3" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-expression/spring-expression@5.1.7.RELEASE?package-id=950bd06ccacb1a9d", + "name": "spring-expression", + "version": "5.1.7.RELEASE", + "cpe": "cpe:2.3:a:spring-expression:spring-expression:5.1.7.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-expression/spring-expression@5.1.7.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "7b47446553c83a5a7323d647f5c1793106b2948c" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-jcl/spring-jcl@5.1.7.RELEASE?package-id=828e0c2abb1e88e", + "name": "spring-jcl", + "version": "5.1.7.RELEASE", + "cpe": "cpe:2.3:a:spring-jcl:spring-jcl:5.1.7.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-jcl/spring-jcl@5.1.7.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "6b14bfb9ae41ca1bc604fe2e78f4a6efa3d67002" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-jdbc/spring-jdbc@5.1.7.RELEASE?package-id=3bff6b9f4bd175bd", + "name": "spring-jdbc", + "version": "5.1.7.RELEASE", + "cpe": "cpe:2.3:a:spring-jdbc:spring-jdbc:5.1.7.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-jdbc/spring-jdbc@5.1.7.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "d00069664e066c4021fa3de167ad755e4148f340" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-ldap-core/spring-ldap-core@2.3.2.RELEASE?package-id=87044ed96b3619c", + "name": "spring-ldap-core", + "version": "2.3.2.RELEASE", + "cpe": "cpe:2.3:a:spring-ldap-core:spring-ldap-core:2.3.2.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-ldap-core/spring-ldap-core@2.3.2.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "08bd3457711b1746af93daa0aa04c9fc886569b1" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-messaging/spring-messaging@5.1.7.RELEASE?package-id=1e17b6b8c40b1803", + "name": "spring-messaging", + "version": "5.1.7.RELEASE", + "cpe": "cpe:2.3:a:spring-messaging:spring-messaging:5.1.7.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-messaging/spring-messaging@5.1.7.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "d110c80cc074228cb6993e16b4b3c98b6cfe7bea" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-orm/spring-orm@5.1.7.RELEASE?package-id=7e1920f867642469", + "name": "spring-orm", + "version": "5.1.7.RELEASE", + "cpe": "cpe:2.3:a:spring-orm:spring-orm:5.1.7.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-orm/spring-orm@5.1.7.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "1e532795f730814b07961fbf5f14e14bd2507fcd" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-oxm/spring-oxm@5.1.7.RELEASE?package-id=ab0e6299ebfeaa96", + "name": "spring-oxm", + "version": "5.1.7.RELEASE", + "cpe": "cpe:2.3:a:spring-oxm:spring-oxm:5.1.7.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-oxm/spring-oxm@5.1.7.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "5436d5d6d56b70768d296ca691d37c533429fea0" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.springframework.plugin/spring-plugin-core@1.2.0.RELEASE?package-id=f73ba8ef184cbc83", + "group": "org.springframework.plugin", + "name": "spring-plugin-core", + "version": "1.2.0.RELEASE", + "cpe": "cpe:2.3:a:spring-plugin-core:spring-plugin-core:1.2.0.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.springframework.plugin/spring-plugin-core@1.2.0.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "f380e7760032e7d929184f8ad8a33716b75c0657" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.springframework.plugin/spring-plugin-metadata@1.2.0.RELEASE?package-id=b8b705216f28f326", + "group": "org.springframework.plugin", + "name": "spring-plugin-metadata", + "version": "1.2.0.RELEASE", + "cpe": "cpe:2.3:a:spring-plugin-metadata:spring-plugin-metadata:1.2.0.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.springframework.plugin/spring-plugin-metadata@1.2.0.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "97223fc496b6cab31602eedbd4202aa4fff0d44f" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.springframework.amqp/spring-rabbit@2.1.6.RELEASE?package-id=ff7f017ca72ea29", + "name": "spring-rabbit", + "version": "2.1.6.RELEASE", + "cpe": "cpe:2.3:a:pivotal-software\\,-inc-:spring-rabbit:2.1.6.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.springframework.amqp/spring-rabbit@2.1.6.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "8e9e1ad93bb39d4ffeccf374636f34a6d6a8c4bb" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.springframework.retry/spring-retry@1.2.3.BUILD-SNAPSHOT?package-id=a29549912e50940c", + "group": "org.springframework.retry", + "name": "spring-retry", + "version": "1.2.3.BUILD-SNAPSHOT", + "cpe": "cpe:2.3:a:springframework:spring-retry:1.2.3.BUILD-SNAPSHOT:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.springframework.retry/spring-retry@1.2.3.BUILD-SNAPSHOT", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "e5a1e629b2743dc7bbe4a8d07ebe9ff6c3b816ce" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-security-config/spring-security-config@5.1.5.RELEASE?package-id=d5ffa1e8a9a00297", + "name": "spring-security-config", + "version": "5.1.5.RELEASE", + "cpe": "cpe:2.3:a:spring-security-config:spring-security-config:5.1.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-security-config/spring-security-config@5.1.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "5b2b4421b0440683f4c253804a1f430094cc2980" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-security-core/spring-security-core@5.1.5.RELEASE?package-id=dddbe07ab3e84b52", + "name": "spring-security-core", + "version": "5.1.5.RELEASE", + "cpe": "cpe:2.3:a:spring-security-core:spring-security-core:5.1.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-security-core/spring-security-core@5.1.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "574d3da85383c09bd5970fe8a3b42756755702bf" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.springframework.security/spring-security-jwt@1.0.10.RELEASE?package-id=f791dcbcca14cdfe", + "group": "org.springframework.security", + "name": "spring-security-jwt", + "version": "1.0.10.RELEASE", + "cpe": "cpe:2.3:a:spring-security-jwt:spring-security-jwt:1.0.10.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.springframework.security/spring-security-jwt@1.0.10.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "19a1ca7a83e9d263a31af5f529da460f8f863451" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-security-ldap/spring-security-ldap@5.1.5.RELEASE?package-id=24639cc141b1114e", + "name": "spring-security-ldap", + "version": "5.1.5.RELEASE", + "cpe": "cpe:2.3:a:spring-security-ldap:spring-security-ldap:5.1.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-security-ldap/spring-security-ldap@5.1.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "ca4c3cc0583a61d8628638df11f34ad1d6b080cd" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.5.RELEASE?package-id=11c49786f6c6b18f", + "group": "org.springframework.security.oauth", + "name": "spring-security-oauth2", + "version": "2.3.5.RELEASE", + "cpe": "cpe:2.3:a:spring-security-oauth2:spring-security-oauth2:2.3.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "7969f5363398d6d3788bef1740b2ab9509043d51" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-security-saml2-core/spring-security-saml2-core@1.0.10.RELEASE?package-id=d147a4f6dd7f603f", + "name": "spring-security-saml2-core", + "version": "1.0.10.RELEASE", + "cpe": "cpe:2.3:a:spring-security-saml2-core:spring-security-saml2-core:1.0.10.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-security-saml2-core/spring-security-saml2-core@1.0.10.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "875e3d97cdab9169b2b2318d3f9f2ff587f31b09" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-security-web/spring-security-web@5.1.5.RELEASE?package-id=517e3a2cb3946d05", + "name": "spring-security-web", + "version": "5.1.5.RELEASE", + "cpe": "cpe:2.3:a:spring-security-web:spring-security-web:5.1.5.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-security-web/spring-security-web@5.1.5.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "6183275812460a301a31216e2061afa4929a5f39" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-tx/spring-tx@5.1.7.RELEASE?package-id=560e8f8126caab11", + "name": "spring-tx", + "version": "5.1.7.RELEASE", + "cpe": "cpe:2.3:a:spring-tx:spring-tx:5.1.7.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-tx/spring-tx@5.1.7.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "d437d5d353312d94206b469b43e203eba1bdcec6" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-web/spring-web@5.1.7.RELEASE?package-id=93d105a2f610168a", + "name": "spring-web", + "version": "5.1.7.RELEASE", + "cpe": "cpe:2.3:a:spring-web:spring-web:5.1.7.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-web/spring-web@5.1.7.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "595dd528ec66eccc6cf4375ea3b56f3605fa1d1f" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-webmvc/spring-webmvc@5.1.7.RELEASE?package-id=9db104f3357e6737", + "name": "spring-webmvc", + "version": "5.1.7.RELEASE", + "cpe": "cpe:2.3:a:spring-webmvc:spring-webmvc:5.1.7.RELEASE:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-webmvc/spring-webmvc@5.1.7.RELEASE", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "686326ff513bf4e852b3ee359cf741d92ab82cfe" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/springfox-bean-validators/springfox-bean-validators@2.9.2?package-id=f488eb90adc06a0d", + "name": "springfox-bean-validators", + "version": "2.9.2", + "cpe": "cpe:2.3:a:springfox-bean-validators:springfox-bean-validators:2.9.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/springfox-bean-validators/springfox-bean-validators@2.9.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "b3faf1ce16918ffc9c3b9932855dd667ab390b95" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/springfox-core/springfox-core@2.9.2?package-id=25c2843a60149cea", + "name": "springfox-core", + "version": "2.9.2", + "cpe": "cpe:2.3:a:springfox-core:springfox-core:2.9.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/springfox-core/springfox-core@2.9.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "2e26f58939c594fb5c958c3a1c7bedf83d2f2702" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/springfox-schema/springfox-schema@2.9.2?package-id=68ccc25090bbe7c1", + "name": "springfox-schema", + "version": "2.9.2", + "cpe": "cpe:2.3:a:springfox-schema:springfox-schema:2.9.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/springfox-schema/springfox-schema@2.9.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "e268f38774b16bb51a92ccaef0dcf3dc651c0cee" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/springfox-spi/springfox-spi@2.9.2?package-id=10b131435db493c9", + "name": "springfox-spi", + "version": "2.9.2", + "cpe": "cpe:2.3:a:springfox-spi:springfox-spi:2.9.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/springfox-spi/springfox-spi@2.9.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "6ac686190a6ceaccdae8b50d03b0501d144a6666" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/springfox-spring-web/springfox-spring-web@2.9.2?package-id=7a092b4ce21c62e1", + "name": "springfox-spring-web", + "version": "2.9.2", + "cpe": "cpe:2.3:a:springfox-spring-web:springfox-spring-web:2.9.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/springfox-spring-web/springfox-spring-web@2.9.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "ed2ed714a6cba8804d00f80f0534901e4c7a3211" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/springfox-swagger-common/springfox-swagger-common@2.9.2?package-id=9451fca5755a6504", + "name": "springfox-swagger-common", + "version": "2.9.2", + "cpe": "cpe:2.3:a:springfox-swagger-common:springfox-swagger-common:2.9.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/springfox-swagger-common/springfox-swagger-common@2.9.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "b38a41b3044af80cb7f41f67be5d158c9f6491ec" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/springfox-swagger-ui/springfox-swagger-ui@2.9.2?package-id=474ec0947481ed6f", + "name": "springfox-swagger-ui", + "version": "2.9.2", + "cpe": "cpe:2.3:a:springfox-swagger-ui:springfox-swagger-ui:2.9.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/springfox-swagger-ui/springfox-swagger-ui@2.9.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "d542382a88ff3ea8d4032c28b2b0325797fada7d" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/springfox-swagger2/springfox-swagger2@2.9.2?package-id=d5191f533c474b8b", + "name": "springfox-swagger2", + "version": "2.9.2", + "cpe": "cpe:2.3:a:springfox-swagger2:springfox-swagger2:2.9.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/springfox-swagger2/springfox-swagger2@2.9.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "362676bc7f4c6f9f1d568741becab0dfc198c898" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.sshd/sshd-common@2.9.2?package-id=958c6545f196a307", + "group": "org.apache.sshd", + "name": "sshd-common", + "version": "2.9.2", + "cpe": "cpe:2.3:a:apache:sshd-common:2.9.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.sshd/sshd-common@2.9.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "9671e971cf1f05d221c0a86cecc165d88156c8ed" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.sshd/sshd-core@2.9.2?package-id=b55bf3b984df053f", + "group": "org.apache.sshd", + "name": "sshd-core", + "version": "2.9.2", + "cpe": "cpe:2.3:a:apache:sshd-core:2.9.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.sshd/sshd-core@2.9.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "cca012d0214f0540dc00903b8f5f731280ca6dfc" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.sshd/sshd-sftp@2.7.0?package-id=93e0d7e052b9e284", + "group": "org.apache.sshd", + "name": "sshd-sftp", + "version": "2.7.0", + "licenses": [ + { + "license": { + "name": "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "cpe": "cpe:2.3:a:apache:sshd-sftp:2.7.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.sshd/sshd-sftp@2.7.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "0c9eff7145e20b338c1dd6aca36ba93ed7c0147c" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.3&package-id=b15247aafcd4a647", + "publisher": "Sören Tempel ", + "name": "ssl_client", + "version": "1.35.0-r29", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.35.0-r29:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun/sunec@1.8.0_362?package-id=514c2349426dbec0", + "name": "sunec", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:sunec:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.sun/sunec@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "0a226bea7cf5d3f5bc9ab678f9a0abbbf2836ced" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun/sunjce_provider@1.8.0_362?package-id=216feec33fd91c68", + "name": "sunjce_provider", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:sunjce-provider:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.sun/sunjce_provider@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "5d8e01ee58b00457ce81b3ab7641c7cf49c41fe4" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun/sunpkcs11@1.8.0_362?package-id=9814d36df586abb0", + "name": "sunpkcs11", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:sunpkcs11:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.sun/sunpkcs11@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "bcf85f75350c04e0abc12a15ea7a0325d8131599" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.swagger/swagger-annotations@1.5.20?package-id=e89aa63cc87f8d71", + "group": "io.swagger", + "name": "swagger-annotations", + "version": "1.5.20", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.html" + } + } + ], + "cpe": "cpe:2.3:a:swagger-annotations:swagger-annotations:1.5.20:*:*:*:*:*:*:*", + "purl": "pkg:maven/io.swagger/swagger-annotations@1.5.20", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "16051f93ce11ca489a5313775d825f82fcc2cd6c" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.swagger/swagger-models@1.5.20?package-id=15018d9ee70a1a6a", + "group": "io.swagger", + "name": "swagger-models", + "version": "1.5.20", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.html" + } + } + ], + "cpe": "cpe:2.3:a:swagger-models:swagger-models:1.5.20:*:*:*:*:*:*:*", + "purl": "pkg:maven/io.swagger/swagger-models@1.5.20", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "fb3a23bad80c5ed84db9dd150db2cba699531458" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.cloudbees/syslog-java-client@1.1.7?package-id=fe5f0f7fb5c74ceb", + "group": "com.cloudbees", + "name": "syslog-java-client", + "version": "1.1.7", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:syslog-java-client:syslog-java-client:1.1.7:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.cloudbees/syslog-java-client@1.1.7", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "6ba4901c24dca556168bffb0901d694ac50ec001" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/tomcat-embed-core/tomcat-embed-core@9.0.19?package-id=33d2dac97873d51b", + "name": "tomcat-embed-core", + "version": "9.0.19", + "cpe": "cpe:2.3:a:apache-software-foundation:tomcat-embed-core:9.0.19:*:*:*:*:*:*:*", + "purl": "pkg:maven/tomcat-embed-core/tomcat-embed-core@9.0.19", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "56e42e12bf92b713befd0700430f7c5c0af68d49" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/tomcat-embed-el/tomcat-embed-el@9.0.19?package-id=cd2853c430aec202", + "name": "tomcat-embed-el", + "version": "9.0.19", + "cpe": "cpe:2.3:a:apache-software-foundation:tomcat-embed-el:9.0.19:*:*:*:*:*:*:*", + "purl": "pkg:maven/tomcat-embed-el/tomcat-embed-el@9.0.19", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "6145f2cd11c7df4ad9463637087c0f7e8e673394" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/tomcat-embed-websocket/tomcat-embed-websocket@9.0.19?package-id=e5ccc678a9e73aa6", + "name": "tomcat-embed-websocket", + "version": "9.0.19", + "cpe": "cpe:2.3:a:apache-software-foundation:tomcat-embed-websocket:9.0.19:*:*:*:*:*:*:*", + "purl": "pkg:maven/tomcat-embed-websocket/tomcat-embed-websocket@9.0.19", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "dee79022818f490203f4901f5651f3233aee14db" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/tzdata@2023c-r0?arch=x86_64&distro=alpine-3.17.3&package-id=7443bdf13c73d18c", + "publisher": "Natanael Copa ", + "name": "tzdata", + "version": "2023c-r0", + "description": "Timezone data", + "licenses": [ + { + "license": { + "name": "Public-Domain" + } + } + ], + "cpe": "cpe:2.3:a:tzdata:tzdata:2023c-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/tzdata@2023c-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.iana.org/time-zones", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.github.fge.uri-template/uri-template@0.9?package-id=3efcc5659df7c3df", + "name": "uri-template", + "version": "0.9", + "cpe": "cpe:2.3:a:uri-template:uri-template:0.9:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.github.fge.uri-template/uri-template@0.9", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "ab1ad5804d3c7d640f21059085df5be340e97929" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/validation-api/validation-api@2.0.1.Final?package-id=4129ab5791a4fb3", + "group": "javax.validation", + "name": "validation-api", + "version": "2.0.1.Final", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:validation-api:validation-api:2.0.1.Final:*:*:*:*:*:*:*", + "purl": "pkg:maven/validation-api/validation-api@2.0.1.Final", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "cb855558e6271b1b32e716d24cb85c7f583ce09e" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.velocity/velocity-engine-core@2.0?package-id=465873a66ccbe167", + "group": "org.apache.velocity", + "name": "velocity-engine-core", + "version": "2.0", + "cpe": "cpe:2.3:a:apache:velocity-engine-core:2.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.velocity/velocity-engine-core@2.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "6e5f29e1237b1764a4ce769feeffb85b0b19cfa7" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.regexp/xalan@2.7.2?package-id=94d309c35f3c271f", + "name": "xalan", + "version": "2.7.2", + "cpe": "cpe:2.3:a:apache:regexp:2.7.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.regexp/xalan@2.7.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "d55d3f02a56ec4c25695fe67e1334ff8c2ecea23" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.xerces.xni/xercesImpl@2.12.0?package-id=645b9f1316e533ef", + "name": "xercesImpl", + "version": "2.12.0", + "cpe": "cpe:2.3:a:apache:xercesImpl:2.12.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.xerces.xni/xercesImpl@2.12.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "f02c844149fd306601f20e0b34853a670bef7fa2" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.xmlcommons.Version/xml-apis@1.4.01?package-id=c149efa9295bd2ad", + "name": "xml-apis", + "version": "1.4.01", + "cpe": "cpe:2.3:a:apache:xmlcommons:1.4.01:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.xmlcommons.Version/xml-apis@1.4.01", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "3789d9fada2d3d458c4ba2de349d48780f381ee3" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.santuario/xmlsec@1.5.8?package-id=21c5f40e8df93bae", + "group": "org.apache.santuario", + "name": "xmlsec", + "version": "1.5.8", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:apache:xmlsec:1.5.8:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.santuario/xmlsec@1.5.8", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "d0b5e51f571069a86c9578ec15d6d7f9da8c0e76" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.opensaml/xmltooling@1.4.6?package-id=2984577e743bd1d7", + "group": "org.opensaml", + "name": "xmltooling", + "version": "1.4.6", + "cpe": "cpe:2.3:a:world-wide-web-consortium-\\(w3c\\):xmltooling:1.4.6:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.opensaml/xmltooling@1.4.6", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "6fd85523ede1bd431de1099b822ee55d4d08b7ea" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jaxen/xom@1.2.10?package-id=870b998e44787398", + "name": "xom", + "version": "1.2.10", + "cpe": "cpe:2.3:a:elliotte-rusty-harold:xom:1.2.10:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.jaxen/xom@1.2.10", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "4165e25bef19aad134f6498cc277110b9bc5e52b" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/xpp3/xpp3@1.1.4c?package-id=8468e86ac9b50905", + "name": "xpp3", + "version": "1.1.4c", + "cpe": "cpe:2.3:a:xpp3:xpp3:1.1.4c:*:*:*:*:*:*:*", + "purl": "pkg:maven/xpp3/xpp3@1.1.4c", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "9b988ea84b9e4e9f1874e390ce099b8ac12cfff5" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/zipfs/zipfs@1.8.0_362?package-id=649443e35eb779e0", + "name": "zipfs", + "version": "1.8.0_362", + "cpe": "cpe:2.3:a:oracle-corporation:zipfs:1.8.0_362:*:*:*:*:*:*:*", + "purl": "pkg:maven/zipfs/zipfs@1.8.0_362", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "8826341a6c075308576e50fa5f97c0cdbea0b844" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.13-r0?arch=x86_64&distro=alpine-3.17.3&package-id=94014313cfcd2b71", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.13-r0", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.13-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.13-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.17.3", + "description": "Alpine Linux v3.17", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.17.3" + }, + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.2.0-r7?arch=x86_64&distro=alpine-3.12.3&package-id=67989f19e27ea0ca", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.2.0-r7", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.2.0-r7:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.2.0-r7?arch=x86_64&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.2-r0?arch=x86_64&distro=alpine-3.12.3&package-id=6e76b2cc6bf8236", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.2-r0", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.2-r0?arch=x86_64&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.10.5-r1?arch=x86_64&distro=alpine-3.12.3&package-id=4c5552e9bb4204e", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.10.5-r1", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.10.5-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.10.5-r1?arch=x86_64&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/bash@5.0.17-r0?arch=x86_64&distro=alpine-3.12.3&package-id=9550803fa7ca62f3", + "publisher": "Natanael Copa ", + "name": "bash", + "version": "5.0.17-r0", + "description": "The GNU Bourne Again shell", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:bash:bash:5.0.17-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/bash@5.0.17-r0?arch=x86_64&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/bash/bash.html", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "789317c78087a0ae", + "name": "busybox", + "version": "1.31.1", + "cpe": "cpe:2.3:a:busybox:busybox:1.31.1:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.31.1-r19?arch=x86_64&distro=alpine-3.12.3&package-id=9d15fb154d2c566a", + "publisher": "Natanael Copa ", + "name": "busybox", + "version": "1.31.1-r19", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.31.1-r19:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.31.1-r19?arch=x86_64&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates@20191127-r4?arch=x86_64&distro=alpine-3.12.3&package-id=4bb545c9ae4f6af6", + "publisher": "Natanael Copa ", + "name": "ca-certificates", + "version": "20191127-r4", + "description": "Common CA certificates PEM files from Mozilla", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20191127-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates@20191127-r4?arch=x86_64&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20191127-r4?arch=x86_64&upstream=ca-certificates&distro=alpine-3.12.3&package-id=6e690f8d65703244", + "publisher": "Natanael Copa ", + "name": "ca-certificates-bundle", + "version": "20191127-r4", + "description": "Pre generated bundle of Mozilla certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20191127-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-bundle@20191127-r4?arch=x86_64&upstream=ca-certificates&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:golang/cloud.google.com/go@v0.38.0?package-id=e20e033881c587a7", + "name": "cloud.google.com/go", + "version": "v0.38.0", + "purl": "pkg:golang/cloud.google.com/go@v0.38.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/expat@2.2.9-r1?arch=x86_64&distro=alpine-3.12.3&package-id=bf0a72cfd53a89d5", + "publisher": "Carlo Landmeter ", + "name": "expat", + "version": "2.2.9-r1", + "description": "An XML Parser library written in C", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:expat:expat:2.2.9-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/expat@2.2.9-r1?arch=x86_64&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "http://www.libexpat.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/git@2.26.2-r0?arch=x86_64&distro=alpine-3.12.3&package-id=33bb492f7dd7f2c5", + "publisher": "Natanael Copa ", + "name": "git", + "version": "2.26.2-r0", + "description": "Distributed version control system", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:git-scm:git:2.26.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/git@2.26.2-r0?arch=x86_64&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://www.git-scm.com/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest@v0.9.0?package-id=8b4c0a92645ae94", + "name": "github.com/Azure/go-autorest/autorest", + "version": "v0.9.0", + "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest:v0.9.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/go-autorest/autorest@v0.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.5.0?package-id=d50ecb2d6ee87a06", + "name": "github.com/Azure/go-autorest/autorest/adal", + "version": "v0.5.0", + "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/adal:v0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/adal@v0.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/date@v0.1.0?package-id=51fcd7a77b4fb4fc", + "name": "github.com/Azure/go-autorest/autorest/date", + "version": "v0.1.0", + "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/date:v0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/date@v0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/go-autorest/logger@v0.1.0?package-id=18dca5cc653b488f", + "name": "github.com/Azure/go-autorest/logger", + "version": "v0.1.0", + "cpe": "cpe:2.3:a:Azure:go-autorest\\/logger:v0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/go-autorest/logger@v0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/go-autorest/tracing@v0.5.0?package-id=146b9cf7ca1bec51", + "name": "github.com/Azure/go-autorest/tracing", + "version": "v0.5.0", + "cpe": "cpe:2.3:a:Azure:go-autorest\\/tracing:v0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/go-autorest/tracing@v0.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/burntsushi/toml@v0.3.1?package-id=bfc5dd2c6ff230d4", + "name": "github.com/BurntSushi/toml", + "version": "v0.3.1", + "cpe": "cpe:2.3:a:BurntSushi:toml:v0.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/BurntSushi/toml@v0.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/makenowjust/heredoc@v0.0.0-20170808103936-bb23615498cd?package-id=2510362caece34ad", + "name": "github.com/MakeNowJust/heredoc", + "version": "v0.0.0-20170808103936-bb23615498cd", + "cpe": "cpe:2.3:a:MakeNowJust:heredoc:v0.0.0-20170808103936-bb23615498cd:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/MakeNowJust/heredoc@v0.0.0-20170808103936-bb23615498cd" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/masterminds/goutils@v1.1.0?package-id=6ece83c3ae6f761", + "name": "github.com/Masterminds/goutils", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:Masterminds:goutils:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Masterminds/goutils@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/masterminds/semver/v3@v3.1.0?package-id=a55f077566d53cb9", + "name": "github.com/Masterminds/semver/v3", + "version": "v3.1.0", + "cpe": "cpe:2.3:a:Masterminds:semver\\/v3:v3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Masterminds/semver/v3@v3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/masterminds/sprig/v3@v3.1.0?package-id=83a05b6428fe7e40", + "name": "github.com/Masterminds/sprig/v3", + "version": "v3.1.0", + "cpe": "cpe:2.3:a:Masterminds:sprig\\/v3:v3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Masterminds/sprig/v3@v3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/masterminds/squirrel@v1.4.0?package-id=6867cd48f0d701da", + "name": "github.com/Masterminds/squirrel", + "version": "v1.4.0", + "cpe": "cpe:2.3:a:Masterminds:squirrel:v1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Masterminds/squirrel@v1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/masterminds/vcs@v1.13.1?package-id=870356f01e890aa5", + "name": "github.com/Masterminds/vcs", + "version": "v1.13.1", + "cpe": "cpe:2.3:a:Masterminds:vcs:v1.13.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Masterminds/vcs@v1.13.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/puerkitobio/purell@v1.1.1?package-id=f009bfc549ddfa6c", + "name": "github.com/PuerkitoBio/purell", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:PuerkitoBio:purell:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/PuerkitoBio/purell@v1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/puerkitobio/urlesc@v0.0.0-20170810143723-de5bf2ad4578?package-id=22da1df624ef85e3", + "name": "github.com/PuerkitoBio/urlesc", + "version": "v0.0.0-20170810143723-de5bf2ad4578", + "cpe": "cpe:2.3:a:PuerkitoBio:urlesc:v0.0.0-20170810143723-de5bf2ad4578:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/PuerkitoBio/urlesc@v0.0.0-20170810143723-de5bf2ad4578" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20200428143746-21a406dcc535?package-id=5ea52d6cfa29edb8", + "name": "github.com/asaskevich/govalidator", + "version": "v0.0.0-20200428143746-21a406dcc535", + "cpe": "cpe:2.3:a:asaskevich:govalidator:v0.0.0-20200428143746-21a406dcc535:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20200428143746-21a406dcc535" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=24183bb6fe49950", + "name": "github.com/beorn7/perks", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/beorn7/perks@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.1.1?package-id=7a09deaf9d6568f1", + "name": "github.com/cespare/xxhash/v2", + "version": "v2.1.1", + "cpe": "cpe:2.3:a:cespare:xxhash\\/v2:v2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/containerd/containerd@v1.3.4?package-id=4def39645041d506", + "name": "github.com/containerd/containerd", + "version": "v1.3.4", + "cpe": "cpe:2.3:a:containerd:containerd:v1.3.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/containerd/containerd@v1.3.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0?package-id=11dcc47f71d038e4", + "name": "github.com/cpuguy83/go-md2man/v2", + "version": "v2.0.0", + "cpe": "cpe:2.3:a:cpuguy83:go-md2man\\/v2:v2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.2.2?package-id=4191bfc18707f31f", + "name": "github.com/cyphar/filepath-securejoin", + "version": "v0.2.2", + "cpe": "cpe:2.3:a:cyphar:filepath-securejoin:v0.2.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1?package-id=c4c6917d3797faef", + "name": "github.com/davecgh/go-spew", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:davecgh:go-spew:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/deislabs/oras@v0.8.1?package-id=5a04878e7de4c48b", + "name": "github.com/deislabs/oras", + "version": "v0.8.1", + "cpe": "cpe:2.3:a:deislabs:oras:v0.8.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/deislabs/oras@v0.8.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/dgrijalva/jwt-go@v3.2.0+incompatible?package-id=5edf16c6160c9a8f", + "name": "github.com/dgrijalva/jwt-go", + "version": "v3.2.0+incompatible", + "cpe": "cpe:2.3:a:dgrijalva:jwt-go:v3.2.0\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/dgrijalva/jwt-go@v3.2.0+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/docker/cli@v0.0.0-20200130152716-5d0cf8839492?package-id=476ec4b51514b0de", + "name": "github.com/docker/cli", + "version": "v0.0.0-20200130152716-5d0cf8839492", + "cpe": "cpe:2.3:a:docker:cli:v0.0.0-20200130152716-5d0cf8839492:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/cli@v0.0.0-20200130152716-5d0cf8839492" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d?package-id=aefc6d8d0d675f44", + "name": "github.com/docker/distribution", + "version": "v0.0.0-20191216044856-a8371794149d", + "cpe": "cpe:2.3:a:docker:distribution:v0.0.0-20191216044856-a8371794149d:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce?package-id=6f4fd2008b841991", + "name": "github.com/docker/docker", + "version": "v1.4.2-0.20200203170920-46ec8731fbce", + "cpe": "cpe:2.3:a:docker:docker:v1.4.2-0.20200203170920-46ec8731fbce:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/docker/docker-credential-helpers@v0.6.3?package-id=adfc4339fbc7737d", + "name": "github.com/docker/docker-credential-helpers", + "version": "v0.6.3", + "cpe": "cpe:2.3:a:docker:docker-credential-helpers:v0.6.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/docker-credential-helpers@v0.6.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/docker/go-connections@v0.4.0?package-id=401377c8001f1b9d", + "name": "github.com/docker/go-connections", + "version": "v0.4.0", + "cpe": "cpe:2.3:a:docker:go-connections:v0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/go-connections@v0.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/docker/go-metrics@v0.0.0-20180209012529-399ea8c73916?package-id=a8f9f0c8861f087", + "name": "github.com/docker/go-metrics", + "version": "v0.0.0-20180209012529-399ea8c73916", + "cpe": "cpe:2.3:a:docker:go-metrics:v0.0.0-20180209012529-399ea8c73916:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/go-metrics@v0.0.0-20180209012529-399ea8c73916" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/docker/go-units@v0.4.0?package-id=a544384c6c9cf30a", + "name": "github.com/docker/go-units", + "version": "v0.4.0", + "cpe": "cpe:2.3:a:docker:go-units:v0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/go-units@v0.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/docker/spdystream@v0.0.0-20160310174837-449fdfce4d96?package-id=e2a4b0b454263f38", + "name": "github.com/docker/spdystream", + "version": "v0.0.0-20160310174837-449fdfce4d96", + "cpe": "cpe:2.3:a:docker:spdystream:v0.0.0-20160310174837-449fdfce4d96:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/spdystream@v0.0.0-20160310174837-449fdfce4d96" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/emicklei/go-restful@v2.9.5+incompatible?package-id=99766c751f0d17f5", + "name": "github.com/emicklei/go-restful", + "version": "v2.9.5+incompatible", + "cpe": "cpe:2.3:a:emicklei:go-restful:v2.9.5\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/emicklei/go-restful@v2.9.5+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/evanphx/json-patch@v0.0.0-20200808040245-162e5629780b?package-id=11410e4b9242bbe9", + "name": "github.com/evanphx/json-patch", + "version": "v0.0.0-20200808040245-162e5629780b", + "cpe": "cpe:2.3:a:evanphx:json-patch:v0.0.0-20200808040245-162e5629780b:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/evanphx/json-patch@v0.0.0-20200808040245-162e5629780b" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/exponent-io/jsonpath@v0.0.0-20151013193312-d6023ce2651d?package-id=855ca912711649f9", + "name": "github.com/exponent-io/jsonpath", + "version": "v0.0.0-20151013193312-d6023ce2651d", + "cpe": "cpe:2.3:a:exponent-io:jsonpath:v0.0.0-20151013193312-d6023ce2651d:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/exponent-io/jsonpath@v0.0.0-20151013193312-d6023ce2651d" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/fatih/color@v1.7.0?package-id=46ba6fbdd76d34a2", + "name": "github.com/fatih/color", + "version": "v1.7.0", + "cpe": "cpe:2.3:a:fatih:color:v1.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fatih/color@v1.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/ghodss/yaml@v1.0.0?package-id=37e43c3bde928ffe", + "name": "github.com/ghodss/yaml", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:ghodss:yaml:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/ghodss/yaml@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.3?package-id=c374975e46504249", + "name": "github.com/go-openapi/jsonpointer", + "version": "v0.19.3", + "cpe": "cpe:2.3:a:go-openapi:jsonpointer:v0.19.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.19.3?package-id=37a7bef783d238fc", + "name": "github.com/go-openapi/jsonreference", + "version": "v0.19.3", + "cpe": "cpe:2.3:a:go-openapi:jsonreference:v0.19.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-openapi/jsonreference@v0.19.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/spec@v0.19.3?package-id=fd40c51903e65e35", + "name": "github.com/go-openapi/spec", + "version": "v0.19.3", + "cpe": "cpe:2.3:a:go-openapi:spec:v0.19.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-openapi/spec@v0.19.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.19.5?package-id=64dc8e89beecf1b7", + "name": "github.com/go-openapi/swag", + "version": "v0.19.5", + "cpe": "cpe:2.3:a:go-openapi:swag:v0.19.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-openapi/swag@v0.19.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gobwas/glob@v0.2.3?package-id=15bb363964d5523b", + "name": "github.com/gobwas/glob", + "version": "v0.2.3", + "cpe": "cpe:2.3:a:gobwas:glob:v0.2.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gobwas/glob@v0.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gofrs/flock@v0.7.1?package-id=6e91c07413be5ce4", + "name": "github.com/gofrs/flock", + "version": "v0.7.1", + "cpe": "cpe:2.3:a:gofrs:flock:v0.7.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gofrs/flock@v0.7.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.1?package-id=f2ddbb14d4f5b4f0", + "name": "github.com/gogo/protobuf", + "version": "v1.3.1", + "cpe": "cpe:2.3:a:gogo:protobuf:v1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.3.2?package-id=693ebcbd80943130", + "name": "github.com/golang/protobuf", + "version": "v1.3.2", + "cpe": "cpe:2.3:a:golang:protobuf:v1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/btree@v1.0.0?package-id=24537bef0c70e5f2", + "name": "github.com/google/btree", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:google:btree:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/btree@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.4.0?package-id=6edc5edf6ea64449", + "name": "github.com/google/go-cmp", + "version": "v0.4.0", + "cpe": "cpe:2.3:a:google:go-cmp:v0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-cmp@v0.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/gofuzz@v1.1.0?package-id=e8cb1e4783d145f4", + "name": "github.com/google/gofuzz", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:google:gofuzz:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/gofuzz@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/uuid@v1.1.1?package-id=d749125f8f9c7f66", + "name": "github.com/google/uuid", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:google:uuid:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/uuid@v1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/googleapis/gnostic@v0.1.0?package-id=2f032810c1efc912", + "name": "github.com/googleapis/gnostic", + "version": "v0.1.0", + "cpe": "cpe:2.3:a:googleapis:gnostic:v0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/googleapis/gnostic@v0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gophercloud/gophercloud@v0.1.0?package-id=545e01323ba9d0a6", + "name": "github.com/gophercloud/gophercloud", + "version": "v0.1.0", + "cpe": "cpe:2.3:a:gophercloud:gophercloud:v0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gophercloud/gophercloud@v0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gorilla/mux@v1.7.3?package-id=3ed8f77a1ef65bb2", + "name": "github.com/gorilla/mux", + "version": "v1.7.3", + "cpe": "cpe:2.3:a:gorilla:mux:v1.7.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gorilla/mux@v1.7.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gosuri/uitable@v0.0.4?package-id=4e15baaa10211d28", + "name": "github.com/gosuri/uitable", + "version": "v0.0.4", + "cpe": "cpe:2.3:a:gosuri:uitable:v0.0.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gosuri/uitable@v0.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20180305231024-9cad4c3443a7?package-id=b34b5e371f2a7e13", + "name": "github.com/gregjones/httpcache", + "version": "v0.0.0-20180305231024-9cad4c3443a7", + "cpe": "cpe:2.3:a:gregjones:httpcache:v0.0.0-20180305231024-9cad4c3443a7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20180305231024-9cad4c3443a7" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/hashicorp/golang-lru@v0.5.1?package-id=955d2379ea653ab2", + "name": "github.com/hashicorp/golang-lru", + "version": "v0.5.1", + "cpe": "cpe:2.3:a:hashicorp:golang-lru:v0.5.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/golang-lru@v0.5.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/huandu/xstrings@v1.3.1?package-id=e0d67433ced7504c", + "name": "github.com/huandu/xstrings", + "version": "v1.3.1", + "cpe": "cpe:2.3:a:huandu:xstrings:v1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/huandu/xstrings@v1.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.8?package-id=4c6a073ec69b1f51", + "name": "github.com/imdario/mergo", + "version": "v0.3.8", + "cpe": "cpe:2.3:a:imdario:mergo:v0.3.8:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/imdario/mergo@v0.3.8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/jmoiron/sqlx@v1.2.0?package-id=950cef018bb65ca1", + "name": "github.com/jmoiron/sqlx", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:jmoiron:sqlx:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jmoiron/sqlx@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.8?package-id=90b3fb402ed6cac5", + "name": "github.com/json-iterator/go", + "version": "v1.1.8", + "cpe": "cpe:2.3:a:json-iterator:go:v1.1.8:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/json-iterator/go@v1.1.8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/lann/builder@v0.0.0-20180802200727-47ae307949d0?package-id=3ba0378987ce6b3c", + "name": "github.com/lann/builder", + "version": "v0.0.0-20180802200727-47ae307949d0", + "cpe": "cpe:2.3:a:lann:builder:v0.0.0-20180802200727-47ae307949d0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/lann/builder@v0.0.0-20180802200727-47ae307949d0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/lann/ps@v0.0.0-20150810152359-62de8c46ede0?package-id=94ee67d53405b20e", + "name": "github.com/lann/ps", + "version": "v0.0.0-20150810152359-62de8c46ede0", + "cpe": "cpe:2.3:a:lann:ps:v0.0.0-20150810152359-62de8c46ede0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/lann/ps@v0.0.0-20150810152359-62de8c46ede0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/lib/pq@v1.7.0?package-id=29048bcaa06fd5cb", + "name": "github.com/lib/pq", + "version": "v1.7.0", + "cpe": "cpe:2.3:a:lib:pq:v1.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/lib/pq@v1.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/liggitt/tabwriter@v0.0.0-20181228230101-89fcab3d43de?package-id=4284a02581000966", + "name": "github.com/liggitt/tabwriter", + "version": "v0.0.0-20181228230101-89fcab3d43de", + "cpe": "cpe:2.3:a:liggitt:tabwriter:v0.0.0-20181228230101-89fcab3d43de:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/liggitt/tabwriter@v0.0.0-20181228230101-89fcab3d43de" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mailru/easyjson@v0.7.0?package-id=5bc9458db0d5883d", + "name": "github.com/mailru/easyjson", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:mailru:easyjson:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mailru/easyjson@v0.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mattn/go-colorable@v0.0.9?package-id=338523bb3704243b", + "name": "github.com/mattn/go-colorable", + "version": "v0.0.9", + "cpe": "cpe:2.3:a:mattn:go-colorable:v0.0.9:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-colorable@v0.0.9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.4?package-id=f4e9143a2a1f9767", + "name": "github.com/mattn/go-isatty", + "version": "v0.0.4", + "cpe": "cpe:2.3:a:mattn:go-isatty:v0.0.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.4?package-id=603d5436319dff06", + "name": "github.com/mattn/go-runewidth", + "version": "v0.0.4", + "cpe": "cpe:2.3:a:mattn:go-runewidth:v0.0.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.1?package-id=e4e57eb52e73e4bc", + "name": "github.com/matttproud/golang_protobuf_extensions", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:matttproud:golang-protobuf-extensions:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mitchellh/copystructure@v1.0.0?package-id=b79db778880a7e5e", + "name": "github.com/mitchellh/copystructure", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:mitchellh:copystructure:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/copystructure@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.0?package-id=c2e2d654d01da6d1", + "name": "github.com/mitchellh/go-wordwrap", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.0?package-id=7c2eeff12b9815b8", + "name": "github.com/mitchellh/reflectwalk", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:mitchellh:reflectwalk:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=d4063210c47eb7c9", + "name": "github.com/modern-go/concurrent", + "version": "v0.0.0-20180306012644-bacd9c7ef1dd", + "cpe": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.1?package-id=6525366eee7f697a", + "name": "github.com/modern-go/reflect2", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:modern-go:reflect2:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/morikuni/aec@v1.0.0?package-id=4c26cd5dbd10e995", + "name": "github.com/morikuni/aec", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:morikuni:aec:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/morikuni/aec@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=3d395124c43fbb1c", + "name": "github.com/opencontainers/go-digest", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/opencontainers/image-spec@v1.0.1?package-id=608cc80b44552a2f", + "name": "github.com/opencontainers/image-spec", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:opencontainers:image-spec:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/opencontainers/image-spec@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/opencontainers/runc@v0.1.1?package-id=6e68f8f14ba49e6d", + "name": "github.com/opencontainers/runc", + "version": "v0.1.1", + "cpe": "cpe:2.3:a:opencontainers:runc:v0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/opencontainers/runc@v0.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1+incompatible?package-id=f180f8d475b1762a", + "name": "github.com/peterbourgon/diskv", + "version": "v2.0.1+incompatible", + "cpe": "cpe:2.3:a:peterbourgon:diskv:v2.0.1\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=102b1c5e6aa8e52c", + "name": "github.com/pkg/errors", + "version": "v0.9.1", + "cpe": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pkg/errors@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/client_golang@v1.3.0?package-id=4ce5afa6e17e6a4b", + "name": "github.com/prometheus/client_golang", + "version": "v1.3.0", + "cpe": "cpe:2.3:a:prometheus:client-golang:v1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_golang@v1.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/client_model@v0.2.0?package-id=9c09ccb8224905fd", + "name": "github.com/prometheus/client_model", + "version": "v0.2.0", + "cpe": "cpe:2.3:a:prometheus:client-model:v0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_model@v0.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/common@v0.7.0?package-id=97929d5ab3d4069a", + "name": "github.com/prometheus/common", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:prometheus:common:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/common@v0.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/procfs@v0.0.8?package-id=f8d659e140f23dbb", + "name": "github.com/prometheus/procfs", + "version": "v0.0.8", + "cpe": "cpe:2.3:a:prometheus:procfs:v0.0.8:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/procfs@v0.0.8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/rubenv/sql-migrate@v0.0.0-20200616145509-8d140a17f351?package-id=fbda4ca2903bee0b", + "name": "github.com/rubenv/sql-migrate", + "version": "v0.0.0-20200616145509-8d140a17f351", + "cpe": "cpe:2.3:a:rubenv:sql-migrate:v0.0.0-20200616145509-8d140a17f351:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rubenv/sql-migrate@v0.0.0-20200616145509-8d140a17f351" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/russross/blackfriday@v1.5.2?package-id=fc0b3d6163405b4f", + "name": "github.com/russross/blackfriday", + "version": "v1.5.2", + "cpe": "cpe:2.3:a:russross:blackfriday:v1.5.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/russross/blackfriday@v1.5.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/russross/blackfriday/v2@v2.0.1?package-id=1df03569e90eeca", + "name": "github.com/russross/blackfriday/v2", + "version": "v2.0.1", + "cpe": "cpe:2.3:a:russross:blackfriday\\/v2:v2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/russross/blackfriday/v2@v2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/shurcool/sanitized_anchor_name@v1.0.0?package-id=824c8bf29aaa0bf", + "name": "github.com/shurcooL/sanitized_anchor_name", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:shurcooL:sanitized-anchor-name:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/shurcooL/sanitized_anchor_name@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.6.0?package-id=5c9e749be42cd006", + "name": "github.com/sirupsen/logrus", + "version": "v1.6.0", + "cpe": "cpe:2.3:a:sirupsen:logrus:v1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/sirupsen/logrus@v1.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/cast@v1.3.1?package-id=806d619579bf025c", + "name": "github.com/spf13/cast", + "version": "v1.3.1", + "cpe": "cpe:2.3:a:spf13:cast:v1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/spf13/cast@v1.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/cobra@v1.0.0?package-id=21d3cbdd4f97b2ac", + "name": "github.com/spf13/cobra", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:spf13:cobra:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/spf13/cobra@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5?package-id=cc02bb94a228303", + "name": "github.com/spf13/pflag", + "version": "v1.0.5", + "cpe": "cpe:2.3:a:spf13:pflag:v1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20180127040702-4e3ac2762d5f?package-id=6ca8572748c57f09", + "name": "github.com/xeipuuv/gojsonpointer", + "version": "v0.0.0-20180127040702-4e3ac2762d5f", + "cpe": "cpe:2.3:a:xeipuuv:gojsonpointer:v0.0.0-20180127040702-4e3ac2762d5f:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20180127040702-4e3ac2762d5f" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?package-id=c4c6001829e8943d", + "name": "github.com/xeipuuv/gojsonreference", + "version": "v0.0.0-20180127040603-bd5ef7bd5415", + "cpe": "cpe:2.3:a:xeipuuv:gojsonreference:v0.0.0-20180127040603-bd5ef7bd5415:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0?package-id=31cea7f4e379e9ad", + "name": "github.com/xeipuuv/gojsonschema", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:xeipuuv:gojsonschema:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9?package-id=6f16680a8e939f14", + "name": "golang.org/x/crypto", + "version": "v0.0.0-20200622213623-75b288015ac9", + "cpe": "cpe:2.3:a:golang:x\\/crypto:v0.0.0-20200622213623-75b288015ac9:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9?package-id=df6af06ebba77f9a", + "name": "golang.org/x/net", + "version": "v0.0.0-20191004110552-13f9640d40b9", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.0.0-20191004110552-13f9640d40b9:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45?package-id=864fef5fbb9e7778", + "name": "golang.org/x/oauth2", + "version": "v0.0.0-20190604053449-0f29369cfe45", + "cpe": "cpe:2.3:a:golang:x\\/oauth2:v0.0.0-20190604053449-0f29369cfe45:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sync@v0.0.0-20190911185100-cd5d95a43a6e?package-id=3a999ee2cbc90b4d", + "name": "golang.org/x/sync", + "version": "v0.0.0-20190911185100-cd5d95a43a6e", + "cpe": "cpe:2.3:a:golang:x\\/sync:v0.0.0-20190911185100-cd5d95a43a6e:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sync@v0.0.0-20190911185100-cd5d95a43a6e" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20191220142924-d4481acd189f?package-id=f220849ef208274c", + "name": "golang.org/x/sys", + "version": "v0.0.0-20191220142924-d4481acd189f", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20191220142924-d4481acd189f:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20191220142924-d4481acd189f" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/text@v0.3.2?package-id=72619b0ef5d4cc04", + "name": "golang.org/x/text", + "version": "v0.3.2", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.3.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20191024005414-555d28b269f0?package-id=68947e4210d05ce0", + "name": "golang.org/x/time", + "version": "v0.0.0-20191024005414-555d28b269f0", + "cpe": "cpe:2.3:a:golang:x\\/time:v0.0.0-20191024005414-555d28b269f0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/time@v0.0.0-20191024005414-555d28b269f0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20190819201941-24fa4b261c55?package-id=6c5380edc7772a97", + "name": "google.golang.org/genproto", + "version": "v0.0.0-20190819201941-24fa4b261c55", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20190819201941-24fa4b261c55:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20190819201941-24fa4b261c55" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.27.0?package-id=8cff90cd28a7d631", + "name": "google.golang.org/grpc", + "version": "v1.27.0", + "cpe": "cpe:2.3:a:google:grpc:v1.27.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.27.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/gorp.v1@v1.7.2?package-id=e28a0d024b534fe5", + "name": "gopkg.in/gorp.v1", + "version": "v1.7.2", + "purl": "pkg:golang/gopkg.in/gorp.v1@v1.7.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=c5d35fbd347bd49c", + "name": "gopkg.in/inf.v0", + "version": "v0.9.1", + "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/yaml.v2@v2.2.8?package-id=5697cb299b21a70a", + "name": "gopkg.in/yaml.v2", + "version": "v2.2.8", + "purl": "pkg:golang/gopkg.in/yaml.v2@v2.2.8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/helm.sh/helm/v3@(devel)?package-id=8cca756e0b9d3751", + "name": "helm.sh/helm/v3", + "version": "(devel)", + "cpe": "cpe:2.3:a:helm:v3:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/helm.sh/helm/v3@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/jq@1.6-r1?arch=x86_64&distro=alpine-3.12.3&package-id=dd4b3b7bf6f7ade6", + "publisher": "Johannes Matheis ", + "name": "jq", + "version": "1.6-r1", + "description": "A lightweight and flexible command-line JSON processor", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jq:jq:1.6-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/jq@1.6-r1?arch=x86_64&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://stedolan.github.io/jq/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/api@v0.18.8?package-id=b0698b0101c356c5", + "name": "k8s.io/api", + "version": "v0.18.8", + "purl": "pkg:golang/k8s.io/api@v0.18.8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/apiextensions-apiserver@v0.18.8?package-id=17671b73f5e1045e", + "name": "k8s.io/apiextensions-apiserver", + "version": "v0.18.8", + "purl": "pkg:golang/k8s.io/apiextensions-apiserver@v0.18.8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.18.8?package-id=18ff1b6b83d3407f", + "name": "k8s.io/apimachinery", + "version": "v0.18.8", + "purl": "pkg:golang/k8s.io/apimachinery@v0.18.8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/cli-runtime@v0.18.8?package-id=9893070409893d83", + "name": "k8s.io/cli-runtime", + "version": "v0.18.8", + "purl": "pkg:golang/k8s.io/cli-runtime@v0.18.8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/client-go@v0.18.8?package-id=7e25bd763452932c", + "name": "k8s.io/client-go", + "version": "v0.18.8", + "purl": "pkg:golang/k8s.io/client-go@v0.18.8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/component-base@v0.18.8?package-id=bb2e5c0357bcfba0", + "name": "k8s.io/component-base", + "version": "v0.18.8", + "purl": "pkg:golang/k8s.io/component-base@v0.18.8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/klog@v1.0.0?package-id=2613f10a60c8aa02", + "name": "k8s.io/klog", + "version": "v1.0.0", + "purl": "pkg:golang/k8s.io/klog@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20200410145947-61e04a5be9a6?package-id=564031336a193a1d", + "name": "k8s.io/kube-openapi", + "version": "v0.0.0-20200410145947-61e04a5be9a6", + "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20200410145947-61e04a5be9a6" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/kubectl@v0.18.8?package-id=2a37badb4c76f7d8", + "name": "k8s.io/kubectl", + "version": "v0.18.8", + "purl": "pkg:golang/k8s.io/kubectl@v0.18.8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20200324210504-a9aa75ae1b89?package-id=c23ec0a50a56a2cc", + "name": "k8s.io/utils", + "version": "v0.0.0-20200324210504-a9aa75ae1b89", + "purl": "pkg:golang/k8s.io/utils@v0.0.0-20200324210504-a9aa75ae1b89" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.12.3&package-id=cf75e8a6d9cf09fc", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r3", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=x86_64&upstream=openssl&distro=alpine-3.12.3&package-id=6271821c8b7c7c09", + "publisher": "Timo Teras ", + "name": "libcrypto1.1", + "version": "1.1.1i-r0", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1i-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1i-r0?arch=x86_64&upstream=openssl&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcurl@7.69.1-r3?arch=x86_64&upstream=curl&distro=alpine-3.12.3&package-id=6ce8e0dea97be3aa", + "publisher": "Natanael Copa ", + "name": "libcurl", + "version": "7.69.1-r3", + "description": "The multiprotocol file transfer library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libcurl:libcurl:7.69.1-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcurl@7.69.1-r3?arch=x86_64&upstream=curl&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://curl.haxx.se/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=x86_64&upstream=openssl&distro=alpine-3.12.3&package-id=c069963e74f2daaf", + "publisher": "Timo Teras ", + "name": "libssl1.1", + "version": "1.1.1i-r0", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1i-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl1.1@1.1.1i-r0?arch=x86_64&upstream=openssl&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libtls-standalone@2.9.1-r1?arch=x86_64&distro=alpine-3.12.3&package-id=9af7ecda8019fe5b", + "name": "libtls-standalone", + "version": "2.9.1-r1", + "description": "libtls extricated from libressl sources", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libtls-standalone:libtls-standalone:2.9.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libtls-standalone@2.9.1-r1?arch=x86_64&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://www.libressl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.1.24-r10?arch=x86_64&distro=alpine-3.12.3&package-id=b175c867938729b3", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.1.24-r10", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.1.24-r10:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.1.24-r10?arch=x86_64&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.1.24-r10?arch=x86_64&upstream=musl&distro=alpine-3.12.3&package-id=c72909332d6dca2b", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.1.24-r10", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.1.24-r10:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.1.24-r10?arch=x86_64&upstream=musl&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ncurses-libs@6.2_p20200523-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.12.3&package-id=3cee05dd78fd3a9", + "publisher": "Natanael Copa ", + "name": "ncurses-libs", + "version": "6.2_p20200523-r0", + "description": "Ncurses libraries", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-libs:ncurses-libs:6.2_p20200523-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ncurses-libs@6.2_p20200523-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://invisible-island.net/ncurses/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ncurses-terminfo-base@6.2_p20200523-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.12.3&package-id=547b64a20933491c", + "publisher": "Natanael Copa ", + "name": "ncurses-terminfo-base", + "version": "6.2_p20200523-r0", + "description": "Descriptions of common terminals", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-terminfo-base:ncurses-terminfo-base:6.2_p20200523-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ncurses-terminfo-base@6.2_p20200523-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://invisible-island.net/ncurses/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/nghttp2-libs@1.41.0-r0?arch=x86_64&upstream=nghttp2&distro=alpine-3.12.3&package-id=320f51b358072602", + "publisher": "Francesco Colista ", + "name": "nghttp2-libs", + "version": "1.41.0-r0", + "description": "Experimental HTTP/2 client, server and proxy (libraries)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nghttp2-libs:nghttp2-libs:1.41.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/nghttp2-libs@1.41.0-r0?arch=x86_64&upstream=nghttp2&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://nghttp2.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/oniguruma@6.9.5-r2?arch=x86_64&distro=alpine-3.12.3&package-id=653325f1f2f055c3", + "publisher": "Francesco Colista ", + "name": "oniguruma", + "version": "6.9.5-r2", + "description": "a regular expressions library", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:oniguruma:oniguruma:6.9.5-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/oniguruma@6.9.5-r2?arch=x86_64&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://github.com/kkos/oniguruma", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/pcre2@10.35-r0?arch=x86_64&distro=alpine-3.12.3&package-id=b6ee8aeafd6e35c1", + "publisher": "Jakub Jirutka ", + "name": "pcre2", + "version": "10.35-r0", + "description": "Perl-compatible regular expression library", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:pcre2:pcre2:10.35-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/pcre2@10.35-r0?arch=x86_64&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://pcre.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/readline@8.0.4-r0?arch=x86_64&distro=alpine-3.12.3&package-id=e9edfd215d1e9b8a", + "publisher": "Natanael Copa ", + "name": "readline", + "version": "8.0.4-r0", + "description": "GNU readline library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:readline:readline:8.0.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/readline@8.0.4-r0?arch=x86_64&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://tiswww.cwru.edu/php/chet/readline/rltop.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.2.6-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.12.3&package-id=6bb4b607de5648aa", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.2.6-r0", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.2.6-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.2.6-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/kustomize@v2.0.3+incompatible?package-id=5e86a13cfd22449c", + "name": "sigs.k8s.io/kustomize", + "version": "v2.0.3+incompatible", + "purl": "pkg:golang/sigs.k8s.io/kustomize@v2.0.3+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v3@v3.0.0?package-id=7f68668ec95d7d9f", + "name": "sigs.k8s.io/structured-merge-diff/v3", + "version": "v3.0.0", + "cpe": "cpe:2.3:a:structured-merge-diff:v3:v3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v3@v3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.2.0?package-id=15e61f12fee92a76", + "name": "sigs.k8s.io/yaml", + "version": "v1.2.0", + "purl": "pkg:golang/sigs.k8s.io/yaml@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86_64&upstream=busybox&distro=alpine-3.12.3&package-id=4c890ecde6fd366f", + "publisher": "Natanael Copa ", + "name": "ssl_client", + "version": "1.31.1-r19", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.31.1-r19:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.31.1-r19?arch=x86_64&upstream=busybox&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=alpine-3.12.3&package-id=e5b843eacba99f13", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.11-r3", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.11-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=alpine-3.12.3", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.12.3", + "description": "Alpine Linux v3.12", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.12.3" + }, + "externalReferences": [ + { + "url": "https://bugs.alpinelinux.org/", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.2.0-r8?arch=x86_64&distro=alpine-3.13.5&package-id=c5e44a14019195cd", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.2.0-r8", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.2.0-r8:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.2.0-r8?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.2-r0?arch=x86_64&distro=alpine-3.13.5&package-id=aadfc7a0590baa16", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.2-r0", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.2-r0?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.5-r0?arch=x86_64&distro=alpine-3.13.5&package-id=e7f0e3239fffe6f9", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.12.5-r0", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.12.5-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.12.5-r0?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.7-r0?arch=x86_64&distro=alpine-3.13.5&package-id=81ec58d624db5659", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.12.7-r0", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.12.7-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.12.7-r0?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/bash@5.1.0-r0?arch=x86_64&distro=alpine-3.13.5&package-id=c8f196fb75899b15", + "publisher": "Natanael Copa ", + "name": "bash", + "version": "5.1.0-r0", + "description": "The GNU Bourne Again shell", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:bash:bash:5.1.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/bash@5.1.0-r0?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/bash/bash.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/brotli-libs@1.0.9-r3?arch=x86_64&upstream=brotli&distro=alpine-3.13.5&package-id=f8b723be9d28adf0", + "publisher": "prspkt ", + "name": "brotli-libs", + "version": "1.0.9-r3", + "description": "Generic lossless compressor (libraries)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brotli-libs:brotli-libs:1.0.9-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/brotli-libs@1.0.9-r3?arch=x86_64&upstream=brotli&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://github.com/google/brotli", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "6049906247657ef3", + "name": "busybox", + "version": "1.32.1", + "cpe": "cpe:2.3:a:busybox:busybox:1.32.1:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.32.1-r6?arch=x86_64&distro=alpine-3.13.5&package-id=84555abe7eb6a0e6", + "publisher": "Natanael Copa ", + "name": "busybox", + "version": "1.32.1-r6", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.32.1-r6:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.32.1-r6?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates@20191127-r5?arch=x86_64&distro=alpine-3.13.5&package-id=afdd3bf86bcfaf05", + "publisher": "Natanael Copa ", + "name": "ca-certificates", + "version": "20191127-r5", + "description": "Common CA certificates PEM files from Mozilla", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20191127-r5:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates@20191127-r5?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20191127-r5?arch=x86_64&upstream=ca-certificates&distro=alpine-3.13.5&package-id=4ae90c75dcbc0a45", + "publisher": "Natanael Copa ", + "name": "ca-certificates-bundle", + "version": "20191127-r5", + "description": "Pre generated bundle of Mozilla certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20191127-r5:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-bundle@20191127-r5?arch=x86_64&upstream=ca-certificates&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/curl@7.76.1-r0?arch=x86_64&distro=alpine-3.13.5&package-id=594f8252b125e54b", + "publisher": "Natanael Copa ", + "name": "curl", + "version": "7.76.1-r0", + "description": "URL retrival utility and library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:curl:curl:7.76.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/curl@7.76.1-r0?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://curl.se/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/curl@7.78.0-r0?arch=x86_64&distro=alpine-3.13.5&package-id=6bc80f31aae45fed", + "publisher": "Natanael Copa ", + "name": "curl", + "version": "7.78.0-r0", + "description": "URL retrival utility and library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:curl:curl:7.78.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/curl@7.78.0-r0?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://curl.se/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/freetype@2.10.4-r1?arch=x86_64&distro=alpine-3.13.5&package-id=ef1c7a11954e1490", + "publisher": "Carlo Landmeter ", + "name": "freetype", + "version": "2.10.4-r1", + "description": "TrueType font rendering library", + "licenses": [ + { + "license": { + "id": "FTL" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:freetype:freetype:2.10.4-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/freetype@2.10.4-r1?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://www.freetype.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/geoip@1.6.12-r1?arch=x86_64&distro=alpine-3.13.5&package-id=b5366200f228bcce", + "publisher": "Leonardo Arena ", + "name": "geoip", + "version": "1.6.12-r1", + "description": "Lookup countries by IP addresses", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:geoip:geoip:1.6.12-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/geoip@1.6.12-r1?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "http://www.maxmind.com/app/ip-location", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/gettext@0.20.2-r2?arch=x86_64&distro=alpine-3.13.5&package-id=5ea95df7371cfb98", + "publisher": "Carlo Landmeter ", + "name": "gettext", + "version": "0.20.2-r2", + "description": "GNU locale utilities", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:gettext:gettext:0.20.2-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/gettext@0.20.2-r2?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/gettext/gettext.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/gettext-libs@0.20.2-r2?arch=x86_64&upstream=gettext&distro=alpine-3.13.5&package-id=13207aee5960055b", + "publisher": "Carlo Landmeter ", + "name": "gettext-libs", + "version": "0.20.2-r2", + "description": "GNU locale utilities (libraries)", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:gettext-libs:gettext-libs:0.20.2-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/gettext-libs@0.20.2-r2?arch=x86_64&upstream=gettext&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/gettext/gettext.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libbz2@1.0.8-r1?arch=x86_64&upstream=bzip2&distro=alpine-3.13.5&package-id=bc796917d10753a0", + "publisher": "Natanael Copa ", + "name": "libbz2", + "version": "1.0.8-r1", + "description": "Shared library for bz2", + "licenses": [ + { + "license": { + "id": "bzip2-1.0.6" + } + } + ], + "cpe": "cpe:2.3:a:libbz2:libbz2:1.0.8-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libbz2@1.0.8-r1?arch=x86_64&upstream=bzip2&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "http://sources.redhat.com/bzip2", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.13.5&package-id=53ae97b3879b4d06", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r3", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86_64&upstream=openssl&distro=alpine-3.13.5&package-id=37f45c75d121652e", + "publisher": "Timo Teras ", + "name": "libcrypto1.1", + "version": "1.1.1k-r0", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1k-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86_64&upstream=openssl&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&upstream=openssl&distro=alpine-3.13.5&package-id=b051a1265f1942a", + "publisher": "Timo Teras ", + "name": "libcrypto1.1", + "version": "1.1.1l-r0", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1l-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&upstream=openssl&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcurl@7.76.1-r0?arch=x86_64&upstream=curl&distro=alpine-3.13.5&package-id=f2f368fb77e616a0", + "publisher": "Natanael Copa ", + "name": "libcurl", + "version": "7.76.1-r0", + "description": "The multiprotocol file transfer library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libcurl:libcurl:7.76.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcurl@7.76.1-r0?arch=x86_64&upstream=curl&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://curl.se/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcurl@7.78.0-r0?arch=x86_64&upstream=curl&distro=alpine-3.13.5&package-id=7f8ba0e9b7d85bc1", + "publisher": "Natanael Copa ", + "name": "libcurl", + "version": "7.78.0-r0", + "description": "The multiprotocol file transfer library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libcurl:libcurl:7.78.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcurl@7.78.0-r0?arch=x86_64&upstream=curl&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://curl.se/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libedit@20191231.3.1-r1?arch=x86_64&distro=alpine-3.13.5&package-id=c65a8cacb0933cde", + "publisher": "Drew DeVault ", + "name": "libedit", + "version": "20191231.3.1-r1", + "description": "BSD line editing library", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libedit:libedit:20191231.3.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libedit@20191231.3.1-r1?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://www.thrysoee.dk/editline", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgcrypt@1.8.7-r0?arch=x86_64&distro=alpine-3.13.5&package-id=758c7d9c858219e1", + "publisher": "Natanael Copa ", + "name": "libgcrypt", + "version": "1.8.7-r0", + "description": "general purpose crypto library based on the code used in GnuPG", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgcrypt:libgcrypt:1.8.7-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgcrypt@1.8.7-r0?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://www.gnupg.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgcrypt@1.8.8-r0?arch=x86_64&distro=alpine-3.13.5&package-id=f1f39defa21c00dd", + "publisher": "Natanael Copa ", + "name": "libgcrypt", + "version": "1.8.8-r0", + "description": "general purpose crypto library based on the code used in GnuPG", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgcrypt:libgcrypt:1.8.8-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgcrypt@1.8.8-r0?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://www.gnupg.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgd@2.3.0-r2?arch=x86_64&upstream=gd&distro=alpine-3.13.5&package-id=dca5ab210643b806", + "publisher": "Carlo Landmeter ", + "name": "libgd", + "version": "2.3.0-r2", + "description": "Library for the dynamic creation of images by programmers (libraries)", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libgd:libgd:2.3.0-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgd@2.3.0-r2?arch=x86_64&upstream=gd&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://libgd.github.io/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgomp@10.2.1_pre1-r3?arch=x86_64&upstream=gcc&distro=alpine-3.13.5&package-id=fd2b68ad9f457c2c", + "publisher": "Natanael Copa ", + "name": "libgomp", + "version": "10.2.1_pre1-r3", + "description": "GCC shared-memory parallel programming API library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgomp:libgomp:10.2.1_pre1-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgomp@10.2.1_pre1-r3?arch=x86_64&upstream=gcc&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgpg-error@1.41-r0?arch=x86_64&distro=alpine-3.13.5&package-id=d702c6bc3dfae7cc", + "publisher": "Natanael Copa ", + "name": "libgpg-error", + "version": "1.41-r0", + "description": "Support library for libgcrypt", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgpg-error:libgpg-error:1.41-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgpg-error@1.41-r0?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://www.gnupg.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libintl@0.20.2-r2?arch=x86_64&upstream=gettext&distro=alpine-3.13.5&package-id=1e6aa12e29b590cd", + "publisher": "Carlo Landmeter ", + "name": "libintl", + "version": "0.20.2-r2", + "description": "GNU gettext runtime library", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libintl:libintl:0.20.2-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libintl@0.20.2-r2?arch=x86_64&upstream=gettext&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/gettext/gettext.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libjpeg-turbo@2.1.0-r0?arch=x86_64&distro=alpine-3.13.5&package-id=4e1707d434b328ac", + "publisher": "Natanael Copa ", + "name": "libjpeg-turbo", + "version": "2.1.0-r0", + "description": "Accelerated baseline JPEG compression and decompression library", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "IJG" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libjpeg-turbo:libjpeg-turbo:2.1.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libjpeg-turbo@2.1.0-r0?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://libjpeg-turbo.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libpng@1.6.37-r1?arch=x86_64&distro=alpine-3.13.5&package-id=c4241db8c2dcd1d1", + "publisher": "Natanael Copa ", + "name": "libpng", + "version": "1.6.37-r1", + "description": "Portable Network Graphics library", + "licenses": [ + { + "license": { + "id": "Libpng" + } + } + ], + "cpe": "cpe:2.3:a:libpng:libpng:1.6.37-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libpng@1.6.37-r1?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "http://www.libpng.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86_64&upstream=openssl&distro=alpine-3.13.5&package-id=d2e66149161a385f", + "publisher": "Timo Teras ", + "name": "libssl1.1", + "version": "1.1.1k-r0", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1k-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86_64&upstream=openssl&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&upstream=openssl&distro=alpine-3.13.5&package-id=1546b930bc3e40b5", + "publisher": "Timo Teras ", + "name": "libssl1.1", + "version": "1.1.1l-r0", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1l-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&upstream=openssl&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libtls-standalone@2.9.1-r1?arch=x86_64&distro=alpine-3.13.5&package-id=d76a1512572882c1", + "name": "libtls-standalone", + "version": "2.9.1-r1", + "description": "libtls extricated from libressl sources", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libtls-standalone:libtls-standalone:2.9.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libtls-standalone@2.9.1-r1?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://www.libressl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libunistring@0.9.10-r0?arch=x86_64&distro=alpine-3.13.5&package-id=7914eb2e08b1511b", + "publisher": "Natanael Copa ", + "name": "libunistring", + "version": "0.9.10-r0", + "description": "Library for manipulating Unicode strings and C strings", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "OR" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libunistring:libunistring:0.9.10-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libunistring@0.9.10-r0?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/libunistring/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libwebp@1.1.0-r0?arch=x86_64&distro=alpine-3.13.5&package-id=1dc7c42adcfa771a", + "publisher": "Natanael Copa ", + "name": "libwebp", + "version": "1.1.0-r0", + "description": "Libraries for working with WebP images", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libwebp:libwebp:1.1.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libwebp@1.1.0-r0?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://developers.google.com/speed/webp", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxml2@2.9.10-r6?arch=x86_64&distro=alpine-3.13.5&package-id=24e0d1d6f8c7e64c", + "publisher": "Carlo Landmeter ", + "name": "libxml2", + "version": "2.9.10-r6", + "description": "XML parsing library, version 2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libxml2:libxml2:2.9.10-r6:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxml2@2.9.10-r6?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "http://www.xmlsoft.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxml2@2.9.12-r0?arch=x86_64&distro=alpine-3.13.5&package-id=e316c933dcb97f36", + "publisher": "Carlo Landmeter ", + "name": "libxml2", + "version": "2.9.12-r0", + "description": "XML parsing library, version 2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libxml2:libxml2:2.9.12-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxml2@2.9.12-r0?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "http://www.xmlsoft.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxslt@1.1.34-r0?arch=x86_64&distro=alpine-3.13.5&package-id=95149928a7bb02e3", + "publisher": "Natanael Copa ", + "name": "libxslt", + "version": "1.1.34-r0", + "description": "XML stylesheet transformation library", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libxslt:libxslt:1.1.34-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxslt@1.1.34-r0?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "http://xmlsoft.org/XSLT/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/linux-pam@1.5.1-r0?arch=x86_64&distro=alpine-3.13.5&package-id=85a1c23d2cf80298", + "publisher": "Rasmus Thomsen ", + "name": "linux-pam", + "version": "1.5.1-r0", + "description": "Linux PAM (Pluggable Authentication Modules for Linux)", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:linux-pam:linux-pam:1.5.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/linux-pam@1.5.1-r0?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://www.kernel.org/pub/linux/libs/pam", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=alpine-3.13.5&package-id=ebf0aac8ad7bc0ad", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.2.2-r0", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.2.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.2.2-r1?arch=x86_64&distro=alpine-3.13.5&package-id=eab82b935703f0f8", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.2.2-r1", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.2.2-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.2.2-r1?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.2-r0?arch=x86_64&upstream=musl&distro=alpine-3.13.5&package-id=759b8e0aaa865907", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.2.2-r0", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.2.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.2.2-r0?arch=x86_64&upstream=musl&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.2-r1?arch=x86_64&upstream=musl&distro=alpine-3.13.5&package-id=bb0380eaa3ae2379", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.2.2-r1", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.2.2-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.2.2-r1?arch=x86_64&upstream=musl&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ncurses-libs@6.2_p20210109-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.13.5&package-id=9e4fff99afda3647", + "publisher": "Natanael Copa ", + "name": "ncurses-libs", + "version": "6.2_p20210109-r0", + "description": "Ncurses libraries", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-libs:ncurses-libs:6.2_p20210109-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ncurses-libs@6.2_p20210109-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://invisible-island.net/ncurses/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ncurses-terminfo-base@6.2_p20210109-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.13.5&package-id=45a9204a753c7aa", + "publisher": "Natanael Copa ", + "name": "ncurses-terminfo-base", + "version": "6.2_p20210109-r0", + "description": "Descriptions of common terminals", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-terminfo-base:ncurses-terminfo-base:6.2_p20210109-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ncurses-terminfo-base@6.2_p20210109-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://invisible-island.net/ncurses/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/nghttp2-libs@1.42.0-r1?arch=x86_64&upstream=nghttp2&distro=alpine-3.13.5&package-id=717b6d07573df96a", + "publisher": "Francesco Colista ", + "name": "nghttp2-libs", + "version": "1.42.0-r1", + "description": "Experimental HTTP/2 client, server and proxy (libraries)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nghttp2-libs:nghttp2-libs:1.42.0-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/nghttp2-libs@1.42.0-r1?arch=x86_64&upstream=nghttp2&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://nghttp2.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/nginx@1.20.1-r1?arch=x86_64&distro=alpine-3.13.5&package-id=b521f5e7843d593a", + "publisher": "NGINX Packaging ", + "name": "nginx", + "version": "1.20.1-r1", + "description": "High performance web server", + "licenses": [ + { + "license": { + "name": "2-clause" + } + }, + { + "license": { + "name": "BSD-like" + } + }, + { + "license": { + "name": "license" + } + } + ], + "cpe": "cpe:2.3:a:nginx:nginx:1.20.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/nginx@1.20.1-r1?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://nginx.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/nginx-module-geoip@1.20.1-r1?arch=x86_64&distro=alpine-3.13.5&package-id=23c0e193c6cd0fe9", + "publisher": "NGINX Packaging ", + "name": "nginx-module-geoip", + "version": "1.20.1-r1", + "description": "nginx GeoIP dynamic modules", + "licenses": [ + { + "license": { + "name": "2-clause" + } + }, + { + "license": { + "name": "BSD-like" + } + }, + { + "license": { + "name": "license" + } + } + ], + "cpe": "cpe:2.3:a:nginx-module-geoip:nginx-module-geoip:1.20.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/nginx-module-geoip@1.20.1-r1?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://nginx.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/nginx-module-image-filter@1.20.1-r1?arch=x86_64&distro=alpine-3.13.5&package-id=3bde08feb00296da", + "publisher": "NGINX Packaging ", + "name": "nginx-module-image-filter", + "version": "1.20.1-r1", + "description": "nginx image filter dynamic module", + "licenses": [ + { + "license": { + "name": "2-clause" + } + }, + { + "license": { + "name": "BSD-like" + } + }, + { + "license": { + "name": "license" + } + } + ], + "cpe": "cpe:2.3:a:nginx-module-image-filter:nginx-module-image-filter:1.20.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/nginx-module-image-filter@1.20.1-r1?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://nginx.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/nginx-module-njs@1.20.1.0.5.3-r1?arch=x86_64&distro=alpine-3.13.5&package-id=53146381f90120c3", + "publisher": "NGINX Packaging ", + "name": "nginx-module-njs", + "version": "1.20.1.0.5.3-r1", + "description": "nginx njs dynamic modules", + "licenses": [ + { + "license": { + "name": "2-clause" + } + }, + { + "license": { + "name": "BSD-like" + } + }, + { + "license": { + "name": "license" + } + } + ], + "cpe": "cpe:2.3:a:nginx-module-njs:nginx-module-njs:1.20.1.0.5.3-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/nginx-module-njs@1.20.1.0.5.3-r1?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://nginx.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/nginx-module-xslt@1.20.1-r1?arch=x86_64&distro=alpine-3.13.5&package-id=9d551094455adebc", + "publisher": "NGINX Packaging ", + "name": "nginx-module-xslt", + "version": "1.20.1-r1", + "description": "nginx xslt dynamic module", + "licenses": [ + { + "license": { + "name": "2-clause" + } + }, + { + "license": { + "name": "BSD-like" + } + }, + { + "license": { + "name": "license" + } + } + ], + "cpe": "cpe:2.3:a:nginx-module-xslt:nginx-module-xslt:1.20.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/nginx-module-xslt@1.20.1-r1?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://nginx.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/pcre@8.44-r0?arch=x86_64&distro=alpine-3.13.5&package-id=2e6863ba37b5e6d0", + "publisher": "Natanael Copa ", + "name": "pcre", + "version": "8.44-r0", + "description": "Perl-compatible regular expression library", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:pcre:pcre:8.44-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/pcre@8.44-r0?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "http://pcre.sourceforge.net", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/readline@8.1.0-r0?arch=x86_64&distro=alpine-3.13.5&package-id=650143688d8c6f53", + "publisher": "Natanael Copa ", + "name": "readline", + "version": "8.1.0-r0", + "description": "GNU readline library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:readline:readline:8.1.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/readline@8.1.0-r0?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://tiswww.cwru.edu/php/chet/readline/rltop.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.2.8-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.13.5&package-id=4b489a34e8162952", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.2.8-r0", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.2.8-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.2.8-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/shadow@4.8.1-r0?arch=x86_64&distro=alpine-3.13.5&package-id=61f7be8e0de9f105", + "publisher": "Stuart Cardall ", + "name": "shadow", + "version": "4.8.1-r0", + "description": "PAM-using login and passwd utilities (usermod, useradd, ...)", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:shadow:shadow:4.8.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/shadow@4.8.1-r0?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "http://pkg-shadow.alioth.debian.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86_64&upstream=busybox&distro=alpine-3.13.5&package-id=be9d756fc1c9db07", + "publisher": "Natanael Copa ", + "name": "ssl_client", + "version": "1.32.1-r6", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.32.1-r6:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.32.1-r6?arch=x86_64&upstream=busybox&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/tzdata@2021a-r0?arch=x86_64&distro=alpine-3.13.5&package-id=78f80616fe162871", + "publisher": "Natanael Copa ", + "name": "tzdata", + "version": "2021a-r0", + "description": "Timezone data", + "licenses": [ + { + "license": { + "name": "Public-Domain" + } + } + ], + "cpe": "cpe:2.3:a:tzdata:tzdata:2021a-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/tzdata@2021a-r0?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://www.iana.org/time-zones", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/xz-libs@5.2.5-r0?arch=x86_64&upstream=xz&distro=alpine-3.13.5&package-id=6df0db01fa27b2da", + "publisher": "Natanael Copa ", + "name": "xz-libs", + "version": "5.2.5-r0", + "description": "Library and CLI tools for XZ and LZMA compressed files (libraries)", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "name": "Public-Domain" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:xz-libs:xz-libs:5.2.5-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/xz-libs@5.2.5-r0?arch=x86_64&upstream=xz&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://tukaani.org/xz", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=alpine-3.13.5&package-id=573d473e139c9775", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.11-r3", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.11-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=alpine-3.13.5", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.13.5", + "description": "Alpine Linux v3.13", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.13.5" + }, + "externalReferences": [ + { + "url": "https://bugs.alpinelinux.org/", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40colors/colors@1.5.0?package-id=1e63eea14f4d61ef", + "author": "DABH", + "name": "@colors/colors", + "version": "1.5.0", + "description": "get colors in your node.js console", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@colors\\/colors:\\@colors\\/colors:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40colors/colors@1.5.0", + "externalReferences": [ + { + "url": "http://github.com/DABH/colors.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/DABH/colors.js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40gar/promisify@1.1.3?package-id=6fab079a7c06c1de", + "author": "Gar ", + "name": "@gar/promisify", + "version": "1.1.3", + "description": "Promisify an entire class or object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@gar\\/promisify:\\@gar\\/promisify:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40gar/promisify@1.1.3", + "externalReferences": [ + { + "url": "https://github.com/wraithgar/gar-promisify.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40isaacs/string-locale-compare@1.1.0?package-id=fbe0dcb344723a67", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "@isaacs/string-locale-compare", + "version": "1.1.0", + "description": "Compare strings with Intl.Collator if available, falling back to String.localeCompare otherwise", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@isaacs\\/string-locale-compare:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40isaacs/string-locale-compare@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/string-locale-compare", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40my-scope/package-a@0.0.0?package-id=9e7e5553c3ebce03", + "name": "@my-scope/package-a", + "version": "0.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@my-scope\\/package-a:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40my-scope/package-a@0.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40my-scope/package-b@0.0.0?package-id=9abfa6541a414f95", + "name": "@my-scope/package-b", + "version": "0.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@my-scope\\/package-b:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40my-scope/package-b@0.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/arborist@5.6.3?package-id=60e008e2ceb94218", + "author": "GitHub Inc.", + "name": "@npmcli/arborist", + "version": "5.6.3", + "description": "Manage node_modules trees", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/arborist:\\@npmcli\\/arborist:5.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/arborist@5.6.3", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/ci-detect@2.0.0?package-id=8a40a38b900bcf1d", + "author": "GitHub Inc.", + "name": "@npmcli/ci-detect", + "version": "2.0.0", + "description": "Detect what kind of CI environment the program is in", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/ci-detect:\\@npmcli\\/ci-detect:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/ci-detect@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/ci-detect.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/config@4.2.2?package-id=a02559bafd837882", + "author": "GitHub Inc.", + "name": "@npmcli/config", + "version": "4.2.2", + "description": "Configuration management for the npm cli", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/config:\\@npmcli\\/config:4.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/config@4.2.2", + "externalReferences": [ + { + "url": "https://github.com/npm/config.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/disparity-colors@2.0.0?package-id=3e63715f5300a753", + "author": "GitHub Inc.", + "name": "@npmcli/disparity-colors", + "version": "2.0.0", + "description": "Colorizes unified diff output", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/disparity-colors:\\@npmcli\\/disparity-colors:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/disparity-colors@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/disparity-colors.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/fs@2.1.2?package-id=cd19a20b4774187f", + "author": "GitHub Inc.", + "name": "@npmcli/fs", + "version": "2.1.2", + "description": "filesystem utilities for the npm cli", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/fs:\\@npmcli\\/fs:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/fs@2.1.2", + "externalReferences": [ + { + "url": "https://github.com/npm/fs.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/git@3.0.2?package-id=34b16cf601f612a9", + "author": "GitHub Inc.", + "name": "@npmcli/git", + "version": "3.0.2", + "description": "a util for spawning git from npm CLI contexts", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/git:\\@npmcli\\/git:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/git@3.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/git.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/installed-package-contents@1.0.7?package-id=8562f58f85ba40df", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "@npmcli/installed-package-contents", + "version": "1.0.7", + "description": "Get the list of files installed in a package in node_modules, including bundled dependencies", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/installed-package-contents:\\@npmcli\\/installed-package-contents:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/installed-package-contents@1.0.7", + "externalReferences": [ + { + "url": "git+https://github.com/npm/installed-package-contents", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/map-workspaces@2.0.4?package-id=471052449bb417cb", + "author": "GitHub Inc.", + "name": "@npmcli/map-workspaces", + "version": "2.0.4", + "description": "Retrieves a name:pathname Map for a given workspaces config", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/map-workspaces:\\@npmcli\\/map-workspaces:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/map-workspaces@2.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/map-workspaces.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/metavuln-calculator@3.1.1?package-id=5a94ed44a78625cd", + "author": "GitHub Inc.", + "name": "@npmcli/metavuln-calculator", + "version": "3.1.1", + "description": "Calculate meta-vulnerabilities from package security advisories", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/metavuln-calculator:\\@npmcli\\/metavuln-calculator:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/metavuln-calculator@3.1.1", + "externalReferences": [ + { + "url": "https://github.com/npm/metavuln-calculator.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/move-file@2.0.1?package-id=76e6ffad7033dea3", + "author": "GitHub Inc.", + "name": "@npmcli/move-file", + "version": "2.0.1", + "description": "move a file (fork of move-file)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/move-file:\\@npmcli\\/move-file:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/move-file@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/move-file.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/name-from-folder@1.0.1?package-id=bda8c8030d6b515f", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "@npmcli/name-from-folder", + "version": "1.0.1", + "description": "Get the package name from a folder path", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/name-from-folder:\\@npmcli\\/name-from-folder:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/name-from-folder@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/name-from-folder", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/node-gyp@2.0.0?package-id=c9fb094d61d2ac04", + "author": "GitHub Inc.", + "name": "@npmcli/node-gyp", + "version": "2.0.0", + "description": "Tools for dealing with node-gyp packages", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/node-gyp:\\@npmcli\\/node-gyp:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/node-gyp@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/node-gyp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/package-json@2.0.0?package-id=63189c571859bb1a", + "author": "GitHub Inc.", + "name": "@npmcli/package-json", + "version": "2.0.0", + "description": "Programmatic API to update package.json", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/package-json:\\@npmcli\\/package-json:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/package-json@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/package-json.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/promise-spawn@3.0.0?package-id=426c6e033be010cb", + "author": "GitHub Inc.", + "name": "@npmcli/promise-spawn", + "version": "3.0.0", + "description": "spawn processes the way the npm cli likes to do", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/promise-spawn:\\@npmcli\\/promise-spawn:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/promise-spawn@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/promise-spawn.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/query@1.2.0?package-id=e71e78476048755c", + "author": "GitHub Inc.", + "name": "@npmcli/query", + "version": "1.2.0", + "description": "npm query parser and tools", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/query:\\@npmcli\\/query:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/query@1.2.0", + "externalReferences": [ + { + "url": "https://github.com/npm/query.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/run-script@4.2.1?package-id=a13d191f5a0789d1", + "author": "GitHub Inc.", + "name": "@npmcli/run-script", + "version": "4.2.1", + "description": "Run a lifecycle script for a package (descendant of npm-lifecycle)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/run-script:\\@npmcli\\/run-script:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/run-script@4.2.1", + "externalReferences": [ + { + "url": "https://github.com/npm/run-script.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40tootallnate/once@2.0.0?package-id=5edbc75b01ae9167", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "@tootallnate/once", + "version": "2.0.0", + "description": "Creates a Promise that waits for a single event", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@tootallnate\\/once:\\@tootallnate\\/once:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40tootallnate/once@2.0.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/once.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40yarnpkg/lockfile@1.1.0?package-id=1791c7462cb920e", + "name": "@yarnpkg/lockfile", + "version": "1.1.0", + "description": "The parser/stringifier for Yarn lockfiles.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@yarnpkg\\/lockfile:\\@yarnpkg\\/lockfile:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40yarnpkg/lockfile@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/yarnpkg/yarn/blob/master/packages/lockfile", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40zxing/text-encoding@0.9.0?package-id=25493195cc8981a3", + "author": "Joshua Bell ", + "name": "@zxing/text-encoding", + "version": "0.9.0", + "description": "Polyfill for the Encoding Living Standard's API.", + "licenses": [ + { + "license": { + "name": "(Unlicense OR Apache-2.0)" + } + } + ], + "cpe": "cpe:2.3:a:\\@zxing\\/text-encoding:\\@zxing\\/text-encoding:0.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40zxing/text-encoding@0.9.0", + "externalReferences": [ + { + "url": "https://github.com/zxing-js/text-encoding.git", + "type": "distribution" + }, + { + "url": "https://github.com/inexorabletash/text-encoding", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/abbrev@1.1.1?package-id=98be1cad3f4d1d11", + "author": "Isaac Z. Schlueter ", + "name": "abbrev", + "version": "1.1.1", + "description": "Like ruby's abbrev module, but in js", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:abbrev:abbrev:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/abbrev@1.1.1", + "externalReferences": [ + { + "url": "http://github.com/isaacs/abbrev-js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/accepts@1.3.8?package-id=b001a70346b0612b", + "name": "accepts", + "version": "1.3.8", + "description": "Higher-level content negotiation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:accepts:accepts:1.3.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/accepts@1.3.8", + "externalReferences": [ + { + "url": "jshttp/accepts", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/agent-base@6.0.2?package-id=4b0b5c9ee7d8fc08", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "agent-base", + "version": "6.0.2", + "description": "Turn a function into an `http.Agent` instance", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:TooTallNate:agent-base:6.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/agent-base@6.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/agentkeepalive@4.2.1?package-id=37fa9bcd67324d6e", + "author": "fengmk2 (https://fengmk2.com)", + "name": "agentkeepalive", + "version": "4.2.1", + "description": "Missing keepalive http.Agent", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:agentkeepalive:agentkeepalive:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/agentkeepalive@4.2.1", + "externalReferences": [ + { + "url": "git://github.com/node-modules/agentkeepalive.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aggregate-error@3.1.0?package-id=b1b74a520919b83f", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "aggregate-error", + "version": "3.1.0", + "description": "Create an error from multiple errors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:aggregate-error:aggregate-error:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aggregate-error@3.1.0", + "externalReferences": [ + { + "url": "sindresorhus/aggregate-error", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.2.0-r23?arch=x86_64&distro=alpine-3.16.5&package-id=61eac5ce8105d394", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.2.0-r23", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.2.0-r23:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.2.0-r23?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout-data@3.2.0-r23?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.16.5&package-id=e8c6fcc3a282ed4f", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout-data", + "version": "3.2.0-r23", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.2.0-r23:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout-data@3.2.0-r23?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.16.5&package-id=82d183eb300978cc", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.4-r1", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@5.0.1?package-id=fe78ee8372cda3ef", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "5.0.1", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@5.0.1", + "externalReferences": [ + { + "url": "chalk/ansi-regex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-styles@4.3.0?package-id=e3f310fd74532509", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-styles", + "version": "4.3.0", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@4.3.0", + "externalReferences": [ + { + "url": "chalk/ansi-styles", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-styles@4.3.0?package-id=6fa84f08aad36ac8", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-styles", + "version": "4.3.0", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@4.3.0", + "externalReferences": [ + { + "url": "chalk/ansi-styles", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.9-r3?arch=x86_64&distro=alpine-3.16.5&package-id=42d502b764a37310", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.12.9-r3", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.12.9-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.12.9-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aproba@2.0.0?package-id=d11111a04d810227", + "author": "Rebecca Turner ", + "name": "aproba", + "version": "2.0.0", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:aproba:aproba:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aproba@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/iarna/aproba", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/archy@1.0.0?package-id=a1e7fd77fec54095", + "author": "James Halliday (http://substack.net)", + "name": "archy", + "version": "1.0.0", + "description": "render nested hierarchies `npm ls` style with unicode pipes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:substack:archy:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/archy@1.0.0", + "externalReferences": [ + { + "url": "http://github.com/substack/node-archy.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/are-we-there-yet@3.0.1?package-id=d7ea73c2e385c95d", + "author": "GitHub Inc.", + "name": "are-we-there-yet", + "version": "3.0.1", + "description": "Keep track of the overall completion of many disparate processes", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:are-we-there-yet:are-we-there-yet:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/are-we-there-yet@3.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/are-we-there-yet.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/are-we-there-yet", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/array-flatten@1.1.1?package-id=169fa984c33ff9f6", + "author": "Blake Embrey (http://blakeembrey.me)", + "name": "array-flatten", + "version": "1.1.1", + "description": "Flatten an array of nested arrays into a single flat array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:array-flatten:array-flatten:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/array-flatten@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/blakeembrey/array-flatten.git", + "type": "distribution" + }, + { + "url": "https://github.com/blakeembrey/array-flatten", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asap@2.0.6?package-id=4069b89e24646503", + "name": "asap", + "version": "2.0.6", + "description": "High-priority task queue for Node.js and browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:kriskowal:asap:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/asap@2.0.6", + "externalReferences": [ + { + "url": "https://github.com/kriskowal/asap.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asn1.js@5.4.1?package-id=e24b6ffc41aa39e5", + "author": "Fedor Indutny", + "name": "asn1.js", + "version": "5.4.1", + "description": "ASN.1 encoder and decoder", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:asn1.js:asn1.js:5.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/asn1.js@5.4.1", + "externalReferences": [ + { + "url": "git@github.com:indutny/asn1.js", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/asn1.js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/async@3.2.4?package-id=231b7b86b151b693", + "author": "Caolan McMahon", + "name": "async", + "version": "3.2.4", + "description": "Higher-order functions and common patterns for asynchronous code", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:caolan:async:3.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/async@3.2.4", + "externalReferences": [ + { + "url": "https://github.com/caolan/async.git", + "type": "distribution" + }, + { + "url": "https://caolan.github.io/async/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/at-least-node@1.0.0?package-id=f0f009eb01eee759", + "author": "Ryan Zimmerman ", + "name": "at-least-node", + "version": "1.0.0", + "description": "Lightweight Node.js version sniffing/comparison", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:at-least-node:at-least-node:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/at-least-node@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/RyanZim/at-least-node.git", + "type": "distribution" + }, + { + "url": "https://github.com/RyanZim/at-least-node#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/available-typed-arrays@1.0.5?package-id=8a70c8639b21c4d5", + "author": "Jordan Harband ", + "name": "available-typed-arrays", + "version": "1.0.5", + "description": "Returns an array of Typed Array names that are available in the current environment", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:available-typed-arrays:available-typed-arrays:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/available-typed-arrays@1.0.5", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/available-typed-arrays.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/available-typed-arrays#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/balanced-match@1.0.2?package-id=c15b2106d0ae19d4", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "balanced-match", + "version": "1.0.2", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/balanced-match@1.0.2?package-id=6ce660a02f86f891", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "balanced-match", + "version": "1.0.2", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/balanced-match@1.0.2?package-id=8db1f18b661f67ae", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "balanced-match", + "version": "1.0.2", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/basic-auth@2.0.1?package-id=b97bc397c5348d06", + "name": "basic-auth", + "version": "2.0.1", + "description": "node.js basic auth parser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:basic-auth:basic-auth:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/basic-auth@2.0.1", + "externalReferences": [ + { + "url": "jshttp/basic-auth", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bin-links@3.0.3?package-id=605ade84572e7fb", + "author": "GitHub Inc.", + "name": "bin-links", + "version": "3.0.3", + "description": "JavaScript package binary linker", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:bin-links:bin-links:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/bin-links@3.0.3", + "externalReferences": [ + { + "url": "https://github.com/npm/bin-links.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/binary-extensions@2.2.0?package-id=2ddda84d3ad7f3e1", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "binary-extensions", + "version": "2.2.0", + "description": "List of binary file extensions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:binary-extensions:binary-extensions:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/binary-extensions@2.2.0", + "externalReferences": [ + { + "url": "sindresorhus/binary-extensions", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/block-stream2@2.1.0?package-id=d2c19c703777584a", + "author": "James Halliday (http://substack.net)", + "name": "block-stream2", + "version": "2.1.0", + "description": "transform input into equally-sized blocks of output", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:block-stream2:block-stream2:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/block-stream2@2.1.0", + "externalReferences": [ + { + "url": "git://github.com/substack/block-stream2.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/block-stream2", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bn.js@4.12.0?package-id=b7cc9dec877d11de", + "author": "Fedor Indutny ", + "name": "bn.js", + "version": "4.12.0", + "description": "Big number implementation in pure javascript", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indutny:bn.js:4.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/bn.js@4.12.0", + "externalReferences": [ + { + "url": "git@github.com:indutny/bn.js", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/bn.js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bn.js@4.12.0?package-id=9a6181db4cf59c1b", + "author": "Fedor Indutny ", + "name": "bn.js", + "version": "4.12.0", + "description": "Big number implementation in pure javascript", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indutny:bn.js:4.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/bn.js@4.12.0", + "externalReferences": [ + { + "url": "git@github.com:indutny/bn.js", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/bn.js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bn.js@4.12.0?package-id=ef164bc414528c24", + "author": "Fedor Indutny ", + "name": "bn.js", + "version": "4.12.0", + "description": "Big number implementation in pure javascript", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indutny:bn.js:4.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/bn.js@4.12.0", + "externalReferences": [ + { + "url": "git@github.com:indutny/bn.js", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/bn.js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bn.js@4.12.0?package-id=1812fdbf5163e0d8", + "author": "Fedor Indutny ", + "name": "bn.js", + "version": "4.12.0", + "description": "Big number implementation in pure javascript", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indutny:bn.js:4.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/bn.js@4.12.0", + "externalReferences": [ + { + "url": "git@github.com:indutny/bn.js", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/bn.js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bn.js@4.12.0?package-id=56b497d806150816", + "author": "Fedor Indutny ", + "name": "bn.js", + "version": "4.12.0", + "description": "Big number implementation in pure javascript", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indutny:bn.js:4.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/bn.js@4.12.0", + "externalReferences": [ + { + "url": "git@github.com:indutny/bn.js", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/bn.js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bn.js@4.12.0?package-id=e3d9363f1d2c98ee", + "author": "Fedor Indutny ", + "name": "bn.js", + "version": "4.12.0", + "description": "Big number implementation in pure javascript", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indutny:bn.js:4.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/bn.js@4.12.0", + "externalReferences": [ + { + "url": "git@github.com:indutny/bn.js", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/bn.js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bn.js@5.2.1?package-id=8f983475c76cf9b2", + "author": "Fedor Indutny ", + "name": "bn.js", + "version": "5.2.1", + "description": "Big number implementation in pure javascript", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indutny:bn.js:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/bn.js@5.2.1", + "externalReferences": [ + { + "url": "git@github.com:indutny/bn.js", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/bn.js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/body-parser@1.18.3?package-id=b284a1ea89619936", + "name": "body-parser", + "version": "1.18.3", + "description": "Node.js body parsing middleware", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:body-parser:body-parser:1.18.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/body-parser@1.18.3", + "externalReferences": [ + { + "url": "expressjs/body-parser", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=a36ca63616a6d457", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "1.1.11", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=8aefa0d5bf7ea5ce", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "1.1.11", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=72bb9632b6da1747", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "1.1.11", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=1bc35b4fad6ec801", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "1.1.11", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@2.0.1?package-id=70d44e2ab0a06da3", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "2.0.1", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@2.0.1", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/braces@3.0.2?package-id=6296411936542cc5", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "braces", + "version": "3.0.2", + "description": "Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:micromatch:braces:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/braces@3.0.2", + "externalReferences": [ + { + "url": "micromatch/braces", + "type": "distribution" + }, + { + "url": "https://github.com/micromatch/braces", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brorand@1.1.0?package-id=f48182ca4553c290", + "author": "Fedor Indutny ", + "name": "brorand", + "version": "1.1.0", + "description": "Random number generator for browsers and node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brorand:brorand:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/brorand@1.1.0", + "externalReferences": [ + { + "url": "git@github.com:indutny/brorand", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/brorand", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/browser-or-node@1.3.0?package-id=871fc8e9e0f20338", + "author": "Dineshkumar Pandiyan ", + "name": "browser-or-node", + "version": "1.3.0", + "description": "Check where the code is running in the browser or node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:browser-or-node:browser-or-node:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/browser-or-node@1.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/flexdinesh/browser-or-node.git", + "type": "distribution" + }, + { + "url": "https://github.com/flexdinesh/browser-or-node#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/browserify-aes@1.2.0?package-id=5e801493623d1f3c", + "name": "browserify-aes", + "version": "1.2.0", + "description": "aes, for browserify", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crypto-browserify:browserify-aes:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/browserify-aes@1.2.0", + "externalReferences": [ + { + "url": "git://github.com/crypto-browserify/browserify-aes.git", + "type": "distribution" + }, + { + "url": "https://github.com/crypto-browserify/browserify-aes", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/browserify-cipher@1.0.1?package-id=df1417ae7c08da05", + "author": "Calvin Metcalf ", + "name": "browserify-cipher", + "version": "1.0.1", + "description": "ciphers for the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:browserify-cipher:browserify-cipher:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/browserify-cipher@1.0.1", + "externalReferences": [ + { + "url": "git@github.com:crypto-browserify/browserify-cipher.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/browserify-des@1.0.2?package-id=bd4a1c66d02aab0a", + "author": "Calvin Metcalf ", + "name": "browserify-des", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crypto-browserify:browserify-des:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/browserify-des@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/crypto-browserify/browserify-des.git", + "type": "distribution" + }, + { + "url": "https://github.com/crypto-browserify/browserify-des#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/browserify-rsa@4.1.0?package-id=b4e2a75bbccfc0c5", + "name": "browserify-rsa", + "version": "4.1.0", + "description": "RSA for browserify", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:browserify-rsa:browserify-rsa:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/browserify-rsa@4.1.0", + "externalReferences": [ + { + "url": "https://github.com:crypto-browserify/browserify-rsa.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/browserify-sign@4.2.1?package-id=1368dcd508361dfe", + "name": "browserify-sign", + "version": "4.2.1", + "description": "adds node crypto signing for browsers", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:crypto-browserify:browserify-sign:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/browserify-sign@4.2.1", + "externalReferences": [ + { + "url": "https://github.com/crypto-browserify/browserify-sign.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-crc32@0.2.13?package-id=4fd48942dbfa2289", + "author": "Brian J. Brennan ", + "name": "buffer-crc32", + "version": "0.2.13", + "description": "A pure javascript CRC32 algorithm that plays nice with binary data", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brianloveswords:buffer-crc32:0.2.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-crc32@0.2.13", + "externalReferences": [ + { + "url": "git://github.com/brianloveswords/buffer-crc32.git", + "type": "distribution" + }, + { + "url": "https://github.com/brianloveswords/buffer-crc32", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-xor@1.0.3?package-id=daae2522a22e7a4b", + "author": "Daniel Cousens", + "name": "buffer-xor", + "version": "1.0.3", + "description": "A simple module for bitwise-xor on buffers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crypto-browserify:buffer-xor:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-xor@1.0.3", + "externalReferences": [ + { + "url": "https://github.com/crypto-browserify/buffer-xor.git", + "type": "distribution" + }, + { + "url": "https://github.com/crypto-browserify/buffer-xor", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/builtins@5.0.1?package-id=af6ac207a0c6926d", + "name": "builtins", + "version": "5.0.1", + "description": "List of node.js builtin modules", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:builtins:builtins:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/builtins@5.0.1", + "externalReferences": [ + { + "url": "juliangruber/builtins", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "e14718c64f5147f4", + "name": "busybox", + "version": "1.35.0", + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=alpine-3.16.5&package-id=4b48ef6f6b983526", + "publisher": "Sören Tempel ", + "name": "busybox", + "version": "1.35.0-r17", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0-r17:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bytes@3.0.0?package-id=576903a3803d92be", + "author": "TJ Holowaychuk (http://tjholowaychuk.com)", + "name": "bytes", + "version": "3.0.0", + "description": "Utility to parse a string bytes to bytes and vice-versa", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bytes:bytes:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/bytes@3.0.0", + "externalReferences": [ + { + "url": "visionmedia/bytes.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20220614-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.16.5&package-id=30622a1848b22bca", + "publisher": "Natanael Copa ", + "name": "ca-certificates-bundle", + "version": "20220614-r0", + "description": "Pre generated bundle of Mozilla certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20220614-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-bundle@20220614-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cacache@16.1.3?package-id=4e055fb1e595c11", + "author": "GitHub Inc.", + "name": "cacache", + "version": "16.1.3", + "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cacache:cacache:16.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/cacache@16.1.3", + "externalReferences": [ + { + "url": "https://github.com/npm/cacache.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/call-bind@1.0.2?package-id=6c35bdb69bd830b5", + "author": "Jordan Harband ", + "name": "call-bind", + "version": "1.0.2", + "description": "Robustly `.call.bind()` a function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:call-bind:call-bind:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/call-bind@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/call-bind.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/call-bind#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chalk@4.1.2?package-id=b12178723b56594f", + "name": "chalk", + "version": "4.1.2", + "description": "Terminal string styling done right", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chalk:chalk:4.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/chalk@4.1.2", + "externalReferences": [ + { + "url": "chalk/chalk", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chalk@4.1.2?package-id=c4d02229c2164ed6", + "name": "chalk", + "version": "4.1.2", + "description": "Terminal string styling done right", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chalk:chalk:4.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/chalk@4.1.2", + "externalReferences": [ + { + "url": "chalk/chalk", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chownr@1.1.4?package-id=332c2f28052efe07", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "chownr", + "version": "1.1.4", + "description": "like `chown -R`", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:chownr:chownr:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/chownr@1.1.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/chownr.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chownr@2.0.0?package-id=b5088c57ceda122f", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "chownr", + "version": "2.0.0", + "description": "like `chown -R`", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:chownr:chownr:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/chownr@2.0.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/chownr.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ci-info@2.0.0?package-id=18501884f4a6d64c", + "author": "Thomas Watson Steen (https://twitter.com/wa7son)", + "name": "ci-info", + "version": "2.0.0", + "description": "Get details about the current Continuous Integration environment", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ci-info:ci-info:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ci-info@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/watson/ci-info.git", + "type": "distribution" + }, + { + "url": "https://github.com/watson/ci-info", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cidr-regex@3.1.1?package-id=be2d165b38649e26", + "author": "silverwind ", + "name": "cidr-regex", + "version": "3.1.1", + "description": "Regular expression for matching IP addresses in CIDR notation", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:cidr-regex:cidr-regex:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/cidr-regex@3.1.1", + "externalReferences": [ + { + "url": "silverwind/cidr-regex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cipher-base@1.0.4?package-id=6346d0af22616b20", + "author": "Calvin Metcalf ", + "name": "cipher-base", + "version": "1.0.4", + "description": "abstract base class for crypto-streams", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crypto-browserify:cipher-base:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/cipher-base@1.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/crypto-browserify/cipher-base.git", + "type": "distribution" + }, + { + "url": "https://github.com/crypto-browserify/cipher-base#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/clean-stack@2.2.0?package-id=9a5c51e7acb4b115", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "clean-stack", + "version": "2.2.0", + "description": "Clean up error stack traces", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clean-stack:clean-stack:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/clean-stack@2.2.0", + "externalReferences": [ + { + "url": "sindresorhus/clean-stack", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-columns@4.0.0?package-id=61a1dfb277c2e6f7", + "author": "Shannon Moeller (http://shannonmoeller.com)", + "name": "cli-columns", + "version": "4.0.0", + "description": "Columnated lists for the CLI.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shannonmoeller:cli-columns:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-columns@4.0.0", + "externalReferences": [ + { + "url": "shannonmoeller/cli-columns", + "type": "distribution" + }, + { + "url": "https://github.com/shannonmoeller/cli-columns#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-table3@0.6.2?package-id=c77ee2194bd52f3d", + "author": "James Talmage", + "name": "cli-table3", + "version": "0.6.2", + "description": "Pretty unicode tables for the command line. Based on the original cli-table.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cli-table3:cli-table3:0.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-table3@0.6.2", + "externalReferences": [ + { + "url": "https://github.com/cli-table/cli-table3.git", + "type": "distribution" + }, + { + "url": "https://github.com/cli-table/cli-table3", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/clone@1.0.4?package-id=44b571b36478d30c", + "author": "Paul Vorbach (http://paul.vorba.ch/)", + "name": "clone", + "version": "1.0.4", + "description": "deep cloning of objects and arrays", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clone:clone:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/clone@1.0.4", + "externalReferences": [ + { + "url": "git://github.com/pvorb/node-clone.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cmd-shim@5.0.0?package-id=6701e31fdf422502", + "author": "GitHub Inc.", + "name": "cmd-shim", + "version": "5.0.0", + "description": "Used in npm for command line application support", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cmd-shim:cmd-shim:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cmd-shim@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/cmd-shim.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-convert@2.0.1?package-id=2be936aafe32cf82", + "author": "Heather Arthur ", + "name": "color-convert", + "version": "2.0.1", + "description": "Plain color conversion functions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@2.0.1", + "externalReferences": [ + { + "url": "Qix-/color-convert", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-convert@2.0.1?package-id=1c1920af9ce590", + "author": "Heather Arthur ", + "name": "color-convert", + "version": "2.0.1", + "description": "Plain color conversion functions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@2.0.1", + "externalReferences": [ + { + "url": "Qix-/color-convert", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-name@1.1.4?package-id=b14fd2e37cdab40f", + "author": "DY ", + "name": "color-name", + "version": "1.1.4", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.4", + "externalReferences": [ + { + "url": "git@github.com:colorjs/color-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/colorjs/color-name", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-name@1.1.4?package-id=c3dbe87bc1017b67", + "author": "DY ", + "name": "color-name", + "version": "1.1.4", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.4", + "externalReferences": [ + { + "url": "git@github.com:colorjs/color-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/colorjs/color-name", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-support@1.1.3?package-id=33c3f3c0dd43aff8", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "color-support", + "version": "1.1.3", + "description": "A module which will endeavor to guess your terminal's level of color support.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:color-support:color-support:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-support@1.1.3", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/color-support.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/columnify@1.6.0?package-id=fc90187aad4a6027", + "author": "Tim Oxley", + "name": "columnify", + "version": "1.6.0", + "description": "Render data in text columns. Supports in-column text-wrap.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:columnify:columnify:1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/columnify@1.6.0", + "externalReferences": [ + { + "url": "git://github.com/timoxley/columnify.git", + "type": "distribution" + }, + { + "url": "https://github.com/timoxley/columnify", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/common-ancestor-path@1.0.1?package-id=4296edf5ae5437c0", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "common-ancestor-path", + "version": "1.0.1", + "description": "Find the common ancestor of 2 or more paths on Windows or Unix", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:common-ancestor-path:common-ancestor-path:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/common-ancestor-path@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/common-ancestor-path", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=bdf14b65a5715b98", + "author": "James Halliday (http://substack.net)", + "name": "concat-map", + "version": "0.0.1", + "description": "concatenative mapdashery", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=c15f78c7f9b9bab", + "author": "James Halliday (http://substack.net)", + "name": "concat-map", + "version": "0.0.1", + "description": "concatenative mapdashery", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=c45208cf5ec4e0c1", + "author": "James Halliday (http://substack.net)", + "name": "concat-map", + "version": "0.0.1", + "description": "concatenative mapdashery", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/console-control-strings@1.1.0?package-id=f5b1c468fcf0a37a", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "console-control-strings", + "version": "1.1.0", + "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:console-control-strings:console-control-strings:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/console-control-strings@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/iarna/console-control-strings", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/content-disposition@0.5.2?package-id=78de68818c5e5be7", + "name": "content-disposition", + "version": "0.5.2", + "description": "Create and parse Content-Disposition header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:content-disposition:content-disposition:0.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/content-disposition@0.5.2", + "externalReferences": [ + { + "url": "jshttp/content-disposition", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/content-type@1.0.5?package-id=adbc2d3e176aeaa7", + "author": "Douglas Christopher Wilson ", + "name": "content-type", + "version": "1.0.5", + "description": "Create and parse HTTP Content-Type header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:content-type:content-type:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/content-type@1.0.5", + "externalReferences": [ + { + "url": "jshttp/content-type", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cookie@0.3.1?package-id=b346f101b9b48dd3", + "author": "Roman Shtylman ", + "name": "cookie", + "version": "0.3.1", + "description": "HTTP server cookie parsing and serialization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie:cookie:0.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie@0.3.1", + "externalReferences": [ + { + "url": "jshttp/cookie", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cookie-signature@1.0.6?package-id=679e26b17ad72290", + "author": "TJ Holowaychuk ", + "name": "cookie-signature", + "version": "1.0.6", + "description": "Sign and unsign cookies", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie-signature:cookie-signature:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie-signature@1.0.6", + "externalReferences": [ + { + "url": "https://github.com/visionmedia/node-cookie-signature.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/corepack@0.17.0?package-id=9d78c3bef9c05db3", + "name": "corepack", + "version": "0.17.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:corepack:corepack:0.17.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/corepack@0.17.0", + "externalReferences": [ + { + "url": "https://github.com/nodejs/corepack.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/corepack#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/create-ecdh@4.0.4?package-id=b45460e0331583b4", + "author": "Calvin Metcalf", + "name": "create-ecdh", + "version": "4.0.4", + "description": "createECDH but browserifiable", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crypto-browserify:create-ecdh:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/create-ecdh@4.0.4", + "externalReferences": [ + { + "url": "https://github.com/crypto-browserify/createECDH.git", + "type": "distribution" + }, + { + "url": "https://github.com/crypto-browserify/createECDH", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/create-hash@1.2.0?package-id=f28df9aa357fdb38", + "name": "create-hash", + "version": "1.2.0", + "description": "create hashes for browserify", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crypto-browserify:create-hash:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/create-hash@1.2.0", + "externalReferences": [ + { + "url": "git@github.com:crypto-browserify/createHash.git", + "type": "distribution" + }, + { + "url": "https://github.com/crypto-browserify/createHash", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/create-hmac@1.1.7?package-id=71a8c4e54b7ee449", + "name": "create-hmac", + "version": "1.1.7", + "description": "node style hmacs in the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crypto-browserify:create-hmac:1.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/create-hmac@1.1.7", + "externalReferences": [ + { + "url": "https://github.com/crypto-browserify/createHmac.git", + "type": "distribution" + }, + { + "url": "https://github.com/crypto-browserify/createHmac", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cross-spawn@6.0.5?package-id=31d0427bcaf3eed4", + "author": "André Cruz ", + "name": "cross-spawn", + "version": "6.0.5", + "description": "Cross platform child_process#spawn and child_process#spawnSync", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cross-spawn:cross-spawn:6.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/cross-spawn@6.0.5", + "externalReferences": [ + { + "url": "git@github.com:moxystudio/node-cross-spawn.git", + "type": "distribution" + }, + { + "url": "https://github.com/moxystudio/node-cross-spawn", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/crypto-browserify@3.12.0?package-id=ec5ba9013e6e2fd2", + "author": "Dominic Tarr (dominictarr.com)", + "name": "crypto-browserify", + "version": "3.12.0", + "description": "implementation of crypto for the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crypto-browserify:crypto-browserify:3.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/crypto-browserify@3.12.0", + "externalReferences": [ + { + "url": "git://github.com/crypto-browserify/crypto-browserify.git", + "type": "distribution" + }, + { + "url": "https://github.com/crypto-browserify/crypto-browserify", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cssesc@3.0.0?package-id=91a6a74efc4b88ba", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "cssesc", + "version": "3.0.0", + "description": "A JavaScript library for escaping CSS strings and identifiers while generating the shortest possible ASCII-only output.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mathiasbynens:cssesc:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cssesc@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/mathiasbynens/cssesc.git", + "type": "distribution" + }, + { + "url": "https://mths.be/cssesc", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@2.6.9?package-id=189dbf0c8c397194", + "author": "TJ Holowaychuk ", + "name": "debug", + "version": "2.6.9", + "description": "small debugging utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:visionmedia:debug:2.6.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@2.6.9", + "externalReferences": [ + { + "url": "git://github.com/visionmedia/debug.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@4.3.4?package-id=744fe4d31961f128", + "author": "Josh Junon ", + "name": "debug", + "version": "4.3.4", + "description": "Lightweight debugging utility for Node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debug-js:debug:4.3.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@4.3.4", + "externalReferences": [ + { + "url": "git://github.com/debug-js/debug.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debuglog@1.0.1?package-id=de8cab91bb3727ee", + "author": "Sam Roberts ", + "name": "debuglog", + "version": "1.0.1", + "description": "backport of util.debuglog from node v0.11", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sam-github:debuglog:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/debuglog@1.0.1", + "externalReferences": [ + { + "url": "https://github.com/sam-github/node-debuglog.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/decode-uri-component@0.2.2?package-id=31befa3a8dff8fe1", + "author": "Sam Verschueren (github.com/SamVerschueren)", + "name": "decode-uri-component", + "version": "0.2.2", + "description": "A better decodeURIComponent", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decode-uri-component:decode-uri-component:0.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/decode-uri-component@0.2.2", + "externalReferences": [ + { + "url": "SamVerschueren/decode-uri-component", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/defaults@1.0.3?package-id=539a687773af61fe", + "author": "Elijah Insua ", + "name": "defaults", + "version": "1.0.3", + "description": "merge single level defaults over a config object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:defaults:defaults:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/defaults@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/tmpvar/defaults.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/delegates@1.0.0?package-id=ed0c22d60c260f5c", + "name": "delegates", + "version": "1.0.0", + "description": "delegate methods and accessors to another property", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:delegates:delegates:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/delegates@1.0.0", + "externalReferences": [ + { + "url": "visionmedia/node-delegates", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/depd@1.1.2?package-id=8f51ca0c72f74b81", + "author": "Douglas Christopher Wilson ", + "name": "depd", + "version": "1.1.2", + "description": "Deprecate all the things", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:depd:depd:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/depd@1.1.2", + "externalReferences": [ + { + "url": "dougwilson/nodejs-depd", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/depd@1.1.2?package-id=88f59320de2b0d4a", + "author": "Douglas Christopher Wilson ", + "name": "depd", + "version": "1.1.2", + "description": "Deprecate all the things", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:depd:depd:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/depd@1.1.2", + "externalReferences": [ + { + "url": "dougwilson/nodejs-depd", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/des.js@1.0.1?package-id=c07ba0bda793e86e", + "author": "Fedor Indutny ", + "name": "des.js", + "version": "1.0.1", + "description": "DES implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indutny:des.js:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/des.js@1.0.1", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/indutny/des.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/des.js#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/destroy@1.0.4?package-id=7a46d2c188b90042", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "destroy", + "version": "1.0.4", + "description": "destroy a stream if possible", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:destroy:destroy:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/destroy@1.0.4", + "externalReferences": [ + { + "url": "stream-utils/destroy", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dezalgo@1.0.4?package-id=d8ccca0e738815bf", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "dezalgo", + "version": "1.0.4", + "description": "Contain async insanity so that the dark pony lord doesn't eat souls", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:dezalgo:dezalgo:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/dezalgo@1.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/dezalgo", + "type": "distribution" + }, + { + "url": "https://github.com/npm/dezalgo", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/diff@5.1.0?package-id=d6e2c2128602c71d", + "name": "diff", + "version": "5.1.0", + "description": "A javascript text diff implementation.", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:kpdecker:diff:5.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/diff@5.1.0", + "externalReferences": [ + { + "url": "git://github.com/kpdecker/jsdiff.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/diffie-hellman@5.0.3?package-id=62f60ea67b969d1c", + "author": "Calvin Metcalf", + "name": "diffie-hellman", + "version": "5.0.3", + "description": "pure js diffie-hellman", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crypto-browserify:diffie-hellman:5.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/diffie-hellman@5.0.3", + "externalReferences": [ + { + "url": "https://github.com/crypto-browserify/diffie-hellman.git", + "type": "distribution" + }, + { + "url": "https://github.com/crypto-browserify/diffie-hellman", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ee-first@1.1.1?package-id=e237c873e14ffd47", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "ee-first", + "version": "1.1.1", + "description": "return the first event in a set of ee/event pairs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ee-first:ee-first:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ee-first@1.1.1", + "externalReferences": [ + { + "url": "jonathanong/ee-first", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/elliptic@6.5.4?package-id=8a118c20590b0861", + "author": "Fedor Indutny ", + "name": "elliptic", + "version": "6.5.4", + "description": "EC cryptography", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:elliptic:elliptic:6.5.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/elliptic@6.5.4", + "externalReferences": [ + { + "url": "git@github.com:indutny/elliptic", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/elliptic", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/emoji-regex@8.0.0?package-id=6bb38678688ed46f", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "emoji-regex", + "version": "8.0.0", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mathiasbynens:emoji-regex:8.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/emoji-regex@8.0.0", + "externalReferences": [ + { + "url": "https://github.com/mathiasbynens/emoji-regex.git", + "type": "distribution" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/encodeurl@1.0.2?package-id=ca5122f9d292a60f", + "name": "encodeurl", + "version": "1.0.2", + "description": "Encode a URL to a percent-encoded form, excluding already-encoded sequences", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:encodeurl:encodeurl:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/encodeurl@1.0.2", + "externalReferences": [ + { + "url": "pillarjs/encodeurl", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/encoding@0.1.13?package-id=e65b6a429cd40212", + "author": "Andris Reinman", + "name": "encoding", + "version": "0.1.13", + "description": "Convert encodings, uses iconv-lite", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:encoding:encoding:0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/encoding@0.1.13", + "externalReferences": [ + { + "url": "https://github.com/andris9/encoding.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/env-paths@2.2.1?package-id=d14634fe75802cac", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "env-paths", + "version": "2.2.1", + "description": "Get paths for storing things like data, config, cache, etc", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:env-paths:env-paths:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/env-paths@2.2.1", + "externalReferences": [ + { + "url": "sindresorhus/env-paths", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/err-code@2.0.3?package-id=60b62094686938a4", + "author": "IndigoUnited (http://indigounited.com)", + "name": "err-code", + "version": "2.0.3", + "description": "Create an error with a code", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:IndigoUnited:err-code:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/err-code@2.0.3", + "externalReferences": [ + { + "url": "git://github.com/IndigoUnited/js-err-code.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/es6-error@4.1.1?package-id=816b6827010746b5", + "author": "Ben Youngblood", + "name": "es6-error", + "version": "4.1.1", + "description": "Easily-extendable error for use with ES6 classes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bjyoungblood:es6-error:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/es6-error@4.1.1", + "externalReferences": [ + { + "url": "https://github.com/bjyoungblood/es6-error.git", + "type": "distribution" + }, + { + "url": "https://github.com/bjyoungblood/es6-error", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/escape-html@1.0.3?package-id=29b06dd1d0ba635a", + "name": "escape-html", + "version": "1.0.3", + "description": "Escape string for use in HTML", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:escape-html:escape-html:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/escape-html@1.0.3", + "externalReferences": [ + { + "url": "component/escape-html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/etag@1.8.1?package-id=9151d174424b86ef", + "name": "etag", + "version": "1.8.1", + "description": "Create simple HTTP ETags", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:etag:etag:1.8.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/etag@1.8.1", + "externalReferences": [ + { + "url": "jshttp/etag", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/evp_bytestokey@1.0.3?package-id=bde275f3f158817", + "author": "Calvin Metcalf ", + "name": "evp_bytestokey", + "version": "1.0.3", + "description": "The insecure key derivation algorithm from OpenSSL", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crypto-browserify:evp-bytestokey:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/evp_bytestokey@1.0.3", + "externalReferences": [ + { + "url": "https://github.com/crypto-browserify/EVP_BytesToKey.git", + "type": "distribution" + }, + { + "url": "https://github.com/crypto-browserify/EVP_BytesToKey", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/express@4.16.4?package-id=7d091d958d9b922e", + "author": "TJ Holowaychuk ", + "name": "express", + "version": "4.16.4", + "description": "Fast, unopinionated, minimalist web framework", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:express:express:4.16.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/express@4.16.4", + "externalReferences": [ + { + "url": "expressjs/express", + "type": "distribution" + }, + { + "url": "http://expressjs.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-xml-parser@4.2.2?package-id=5ddb8e3ae31f723e", + "author": "Amit Gupta (https://amitkumargupta.work/)", + "name": "fast-xml-parser", + "version": "4.2.2", + "description": "Validate XML, Parse XML, Build XML without C/C++ based libraries", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:NaturalIntelligence:fast-xml-parser:4.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-xml-parser@4.2.2", + "externalReferences": [ + { + "url": "https://github.com/NaturalIntelligence/fast-xml-parser", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fastest-levenshtein@1.0.12?package-id=f703cf6832613e31", + "author": "Kasper U. Weihe", + "name": "fastest-levenshtein", + "version": "1.0.12", + "description": "Fastest Levenshtein distance implementation in JS.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fastest-levenshtein:fastest-levenshtein:1.0.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/fastest-levenshtein@1.0.12", + "externalReferences": [ + { + "url": "git+https://github.com/ka-weihe/fastest-levenshtein.git", + "type": "distribution" + }, + { + "url": "https://github.com/ka-weihe/fastest-levenshtein#README", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fill-range@7.0.1?package-id=a4b7b1d7cebfd2b1", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "fill-range", + "version": "7.0.1", + "description": "Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:fill-range:7.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/fill-range@7.0.1", + "externalReferences": [ + { + "url": "jonschlinkert/fill-range", + "type": "distribution" + }, + { + "url": "https://github.com/jonschlinkert/fill-range", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/filter-obj@1.1.0?package-id=213a98227edaa009", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "filter-obj", + "version": "1.1.0", + "description": "Filter object keys and values into a new object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:filter-obj:filter-obj:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/filter-obj@1.1.0", + "externalReferences": [ + { + "url": "sindresorhus/filter-obj", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/finalhandler@1.1.1?package-id=f0968412c48fe760", + "author": "Douglas Christopher Wilson ", + "name": "finalhandler", + "version": "1.1.1", + "description": "Node.js final http responder", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:finalhandler:finalhandler:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/finalhandler@1.1.1", + "externalReferences": [ + { + "url": "pillarjs/finalhandler", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/find-yarn-workspace-root@2.0.0?package-id=a79b79a711a6c960", + "author": "Square, Inc.", + "name": "find-yarn-workspace-root", + "version": "2.0.0", + "description": "Algorithm for finding the root of a yarn workspace, extracted from yarnpkg.com", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:find-yarn-workspace-root:find-yarn-workspace-root:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/find-yarn-workspace-root@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/square/find-yarn-workspace-root.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/for-each@0.3.3?package-id=a909d4a653a0711c", + "author": "Raynos ", + "name": "for-each", + "version": "0.3.3", + "description": "A better forEach", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:for-each:for-each:0.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/for-each@0.3.3", + "externalReferences": [ + { + "url": "git://github.com/Raynos/for-each.git", + "type": "distribution" + }, + { + "url": "https://github.com/Raynos/for-each", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/forwarded@0.2.0?package-id=e2cd353a11409247", + "name": "forwarded", + "version": "0.2.0", + "description": "Parse HTTP X-Forwarded-For header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:forwarded:forwarded:0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/forwarded@0.2.0", + "externalReferences": [ + { + "url": "jshttp/forwarded", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fresh@0.5.2?package-id=7080d1485688188f", + "author": "TJ Holowaychuk (http://tjholowaychuk.com)", + "name": "fresh", + "version": "0.5.2", + "description": "HTTP response freshness testing", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fresh:fresh:0.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/fresh@0.5.2", + "externalReferences": [ + { + "url": "jshttp/fresh", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-extra@8.1.0?package-id=fd32f6ef9252a576", + "author": "JP Richardson ", + "name": "fs-extra", + "version": "8.1.0", + "description": "fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as mkdir -p, cp -r, and rm -rf.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jprichardson:fs-extra:8.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-extra@8.1.0", + "externalReferences": [ + { + "url": "https://github.com/jprichardson/node-fs-extra", + "type": "distribution" + }, + { + "url": "https://github.com/jprichardson/node-fs-extra", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-extra@9.1.0?package-id=c7b63630e3cca57a", + "author": "JP Richardson ", + "name": "fs-extra", + "version": "9.1.0", + "description": "fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as recursive mkdir, copy, and remove.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jprichardson:fs-extra:9.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-extra@9.1.0", + "externalReferences": [ + { + "url": "https://github.com/jprichardson/node-fs-extra", + "type": "distribution" + }, + { + "url": "https://github.com/jprichardson/node-fs-extra", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-minipass@2.1.0?package-id=398fbbb28fb7e1f4", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs-minipass", + "version": "2.1.0", + "description": "fs read and write streams based on minipass", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-minipass@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-minipass@2.1.0?package-id=f1b7ae0257cf54f0", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs-minipass", + "version": "2.1.0", + "description": "fs read and write streams based on minipass", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-minipass@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=21800424481533b1", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs.realpath", + "version": "1.0.0", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=816b388b95d77c82", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs.realpath", + "version": "1.0.0", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=65729748c227165e", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs.realpath", + "version": "1.0.0", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/function-bind@1.1.1?package-id=44648bf09db15f6c", + "author": "Raynos ", + "name": "function-bind", + "version": "1.1.1", + "description": "Implementation of Function.prototype.bind", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:function-bind:function-bind:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/function-bind@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/Raynos/function-bind.git", + "type": "distribution" + }, + { + "url": "https://github.com/Raynos/function-bind", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/function-bind@1.1.1?package-id=7bd79c8f88820292", + "author": "Raynos ", + "name": "function-bind", + "version": "1.1.1", + "description": "Implementation of Function.prototype.bind", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:function-bind:function-bind:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/function-bind@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/Raynos/function-bind.git", + "type": "distribution" + }, + { + "url": "https://github.com/Raynos/function-bind", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/gauge@4.0.4?package-id=fc4632a6e143d550", + "author": "GitHub Inc.", + "name": "gauge", + "version": "4.0.4", + "description": "A terminal based horizontal gauge", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:gauge:gauge:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/gauge@4.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/gauge.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/gauge", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-intrinsic@1.2.0?package-id=6ad275eae612456f", + "author": "Jordan Harband ", + "name": "get-intrinsic", + "version": "1.2.0", + "description": "Get and robustly cache all JS language-level intrinsics at first require time", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:get-intrinsic:get-intrinsic:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-intrinsic@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/get-intrinsic.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/get-intrinsic#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.2.3?package-id=b961e222f6e54786", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.2.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.2.3?package-id=37af2473a85a6fa0", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.2.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.2.3?package-id=93342fc8b69cf007", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.2.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.2.3?package-id=27f74d4e19b8aa02", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.2.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@8.0.3?package-id=f9282babaa70cabf", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "8.0.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:8.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@8.0.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/gopd@1.0.1?package-id=6a8f68198c946199", + "author": "Jordan Harband ", + "name": "gopd", + "version": "1.0.1", + "description": "`Object.getOwnPropertyDescriptor`, but accounts for IE's broken implementation.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ljharb:gopd:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/gopd@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/gopd.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/gopd#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/graceful-fs@4.2.10?package-id=9591c6b5bd9602cc", + "name": "graceful-fs", + "version": "4.2.10", + "description": "A drop-in replacement for fs, making various improvements.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/graceful-fs@4.2.10", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-graceful-fs", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/graceful-fs@4.2.11?package-id=6884b756b75e8e9c", + "name": "graceful-fs", + "version": "4.2.11", + "description": "A drop-in replacement for fs, making various improvements.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/graceful-fs@4.2.11", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-graceful-fs", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/graceful-fs@4.2.11?package-id=bef9b71aa253a928", + "name": "graceful-fs", + "version": "4.2.11", + "description": "A drop-in replacement for fs, making various improvements.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/graceful-fs@4.2.11", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-graceful-fs", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has@1.0.3?package-id=57072cf8ae347274", + "author": "Thiago de Arruda ", + "name": "has", + "version": "1.0.3", + "description": "Object.prototype.hasOwnProperty.call shortcut", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tarruda:has:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/has@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/tarruda/has.git", + "type": "distribution" + }, + { + "url": "https://github.com/tarruda/has", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has@1.0.3?package-id=63cdb16663093af0", + "author": "Thiago de Arruda ", + "name": "has", + "version": "1.0.3", + "description": "Object.prototype.hasOwnProperty.call shortcut", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tarruda:has:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/has@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/tarruda/has.git", + "type": "distribution" + }, + { + "url": "https://github.com/tarruda/has", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-flag@4.0.0?package-id=1ac717b55f99f4f2", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "has-flag", + "version": "4.0.0", + "description": "Check if argv has a specific flag", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-flag:has-flag:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-flag@4.0.0", + "externalReferences": [ + { + "url": "sindresorhus/has-flag", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-flag@4.0.0?package-id=1fd68902b403ef41", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "has-flag", + "version": "4.0.0", + "description": "Check if argv has a specific flag", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-flag:has-flag:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-flag@4.0.0", + "externalReferences": [ + { + "url": "sindresorhus/has-flag", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-symbols@1.0.3?package-id=89a634f5c4a5077e", + "author": "Jordan Harband (http://ljharb.codes)", + "name": "has-symbols", + "version": "1.0.3", + "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-symbols:has-symbols:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-symbols@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/inspect-js/has-symbols.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/has-symbols#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-tostringtag@1.0.0?package-id=fac89d8a93be8f61", + "author": "Jordan Harband (http://ljharb.codes)", + "name": "has-tostringtag", + "version": "1.0.0", + "description": "Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-tostringtag:has-tostringtag:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-tostringtag@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/has-tostringtag.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/has-tostringtag#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-unicode@2.0.1?package-id=28dbbd6e7951181f", + "author": "Rebecca Turner ", + "name": "has-unicode", + "version": "2.0.1", + "description": "Try to guess if your terminal supports unicode", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:has-unicode:has-unicode:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-unicode@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/iarna/has-unicode", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/has-unicode", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/hash-base@3.1.0?package-id=2368971ed9141685", + "author": "Kirill Fomichev (https://github.com/fanatid)", + "name": "hash-base", + "version": "3.1.0", + "description": "abstract base class for hash-streams", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crypto-browserify:hash-base:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/hash-base@3.1.0", + "externalReferences": [ + { + "url": "https://github.com/crypto-browserify/hash-base.git", + "type": "distribution" + }, + { + "url": "https://github.com/crypto-browserify/hash-base", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/hash.js@1.1.7?package-id=51265ac9ee812bcd", + "author": "Fedor Indutny ", + "name": "hash.js", + "version": "1.1.7", + "description": "Various hash functions that could be run by both browser and node", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hash.js:hash.js:1.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/hash.js@1.1.7", + "externalReferences": [ + { + "url": "git@github.com:indutny/hash.js", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/hash.js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/hmac-drbg@1.0.1?package-id=c47be7a2219b59a8", + "author": "Fedor Indutny ", + "name": "hmac-drbg", + "version": "1.0.1", + "description": "Deterministic random bit generator (hmac)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hmac-drbg:hmac-drbg:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/hmac-drbg@1.0.1", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/indutny/hmac-drbg.git", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/hmac-drbg#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/hosted-git-info@5.2.1?package-id=daac03af08cd11f6", + "author": "GitHub Inc.", + "name": "hosted-git-info", + "version": "5.2.1", + "description": "Provides metadata and conversions from repository urls for GitHub, Bitbucket and GitLab", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:hosted-git-info:hosted-git-info:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/hosted-git-info@5.2.1", + "externalReferences": [ + { + "url": "https://github.com/npm/hosted-git-info.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/hosted-git-info", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-cache-semantics@4.1.1?package-id=916aa3ebe914a835", + "author": "Kornel Lesiński (https://kornel.ski/)", + "name": "http-cache-semantics", + "version": "4.1.1", + "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:http-cache-semantics:http-cache-semantics:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-cache-semantics@4.1.1", + "externalReferences": [ + { + "url": "https://github.com/kornelski/http-cache-semantics.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-errors@1.6.3?package-id=d1068a65d773e5c4", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "http-errors", + "version": "1.6.3", + "description": "Create HTTP error objects", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-errors:http-errors:1.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-errors@1.6.3", + "externalReferences": [ + { + "url": "jshttp/http-errors", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-proxy-agent@5.0.0?package-id=af3d467415b1e643", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "http-proxy-agent", + "version": "5.0.0", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-proxy-agent:http-proxy-agent:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-proxy-agent@5.0.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-http-proxy-agent.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/https-proxy-agent@5.0.1?package-id=b2694aac4dc305de", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "https-proxy-agent", + "version": "5.0.1", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:https-proxy-agent:https-proxy-agent:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/https-proxy-agent@5.0.1", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-https-proxy-agent.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/humanize-ms@1.2.1?package-id=d773c44dd2f9a86d", + "author": "dead-horse (http://deadhorse.me)", + "name": "humanize-ms", + "version": "1.2.1", + "description": "transform humanize time to ms", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-modules:humanize-ms:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/humanize-ms@1.2.1", + "externalReferences": [ + { + "url": "https://github.com/node-modules/humanize-ms", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iconv-lite@0.4.23?package-id=5056a816beaa3c8b", + "author": "Alexander Shtuchkin ", + "name": "iconv-lite", + "version": "0.4.23", + "description": "Convert character encodings in pure javascript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.4.23:*:*:*:*:*:*:*", + "purl": "pkg:npm/iconv-lite@0.4.23", + "externalReferences": [ + { + "url": "git://github.com/ashtuchkin/iconv-lite.git", + "type": "distribution" + }, + { + "url": "https://github.com/ashtuchkin/iconv-lite", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iconv-lite@0.6.3?package-id=fc4965fa5a86a9c9", + "author": "Alexander Shtuchkin ", + "name": "iconv-lite", + "version": "0.6.3", + "description": "Convert character encodings in pure javascript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/iconv-lite@0.6.3", + "externalReferences": [ + { + "url": "git://github.com/ashtuchkin/iconv-lite.git", + "type": "distribution" + }, + { + "url": "https://github.com/ashtuchkin/iconv-lite", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ignore-walk@5.0.1?package-id=39d6166153eb8a8", + "author": "GitHub Inc.", + "name": "ignore-walk", + "version": "5.0.1", + "description": "Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ignore-walk:ignore-walk:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ignore-walk@5.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/ignore-walk.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/imurmurhash@0.1.4?package-id=6444b4b295dc6bb1", + "author": "Jens Taylor (https://github.com/homebrewing)", + "name": "imurmurhash", + "version": "0.1.4", + "description": "An incremental implementation of MurmurHash3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:imurmurhash:imurmurhash:0.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/imurmurhash@0.1.4", + "externalReferences": [ + { + "url": "https://github.com/jensyt/imurmurhash-js", + "type": "distribution" + }, + { + "url": "https://github.com/jensyt/imurmurhash-js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/indent-string@4.0.0?package-id=9c9aada4281114e7", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "indent-string", + "version": "4.0.0", + "description": "Indent each line in a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indent-string:indent-string:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/indent-string@4.0.0", + "externalReferences": [ + { + "url": "sindresorhus/indent-string", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/infer-owner@1.0.4?package-id=70041214f8f231ae", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "infer-owner", + "version": "1.0.4", + "description": "Infer the owner of a path based on the owner of its nearest existing parent", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:infer-owner:infer-owner:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/infer-owner@1.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/infer-owner", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inflight@1.0.6?package-id=59c3c8a2d2437082", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "inflight", + "version": "1.0.6", + "description": "Add callbacks to requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "https://github.com/npm/inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inflight@1.0.6?package-id=23270e8079f4dffc", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "inflight", + "version": "1.0.6", + "description": "Add callbacks to requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "https://github.com/npm/inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inflight@1.0.6?package-id=f9bd5cf95258dad4", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "inflight", + "version": "1.0.6", + "description": "Add callbacks to requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "https://github.com/npm/inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.3?package-id=1bb44148e405c144", + "name": "inherits", + "version": "2.0.3", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/inherits", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.4?package-id=2aa76eeeb4a32e94", + "name": "inherits", + "version": "2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/inherits", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.4?package-id=87186ec358a4a58b", + "name": "inherits", + "version": "2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/inherits", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.4?package-id=d9fff24231d5d55b", + "name": "inherits", + "version": "2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/inherits", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.4?package-id=cc4e01efa051a048", + "name": "inherits", + "version": "2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/inherits", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.4?package-id=4329afdb061a9b57", + "name": "inherits", + "version": "2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/inherits", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.4?package-id=f84cce1a2468e7", + "name": "inherits", + "version": "2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/inherits", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ini@3.0.1?package-id=143d409d5161792", + "author": "GitHub Inc.", + "name": "ini", + "version": "3.0.1", + "description": "An ini encoder/decoder for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ini:ini:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ini@3.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/ini.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/init-package-json@3.0.2?package-id=6836db1e46d935b6", + "author": "GitHub Inc.", + "name": "init-package-json", + "version": "3.0.2", + "description": "A node module to get your node module started", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:init-package-json:init-package-json:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/init-package-json@3.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/init-package-json.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/interpret@1.4.0?package-id=38cd7b71098275d", + "author": "Gulp Team (http://gulpjs.com/)", + "name": "interpret", + "version": "1.4.0", + "description": "A dictionary of file extensions and associated module loaders.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:interpret:interpret:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/interpret@1.4.0", + "externalReferences": [ + { + "url": "gulpjs/interpret", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ip@2.0.0?package-id=218d1c05ea387b3c", + "author": "Fedor Indutny ", + "name": "ip", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indutny:ip:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ip@2.0.0", + "externalReferences": [ + { + "url": "http://github.com/indutny/node-ip.git", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/node-ip", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ip-regex@4.3.0?package-id=ce63365b733beafc", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ip-regex", + "version": "4.3.0", + "description": "Regular expression for matching IP addresses (IPv4 & IPv6)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ip-regex:ip-regex:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ip-regex@4.3.0", + "externalReferences": [ + { + "url": "sindresorhus/ip-regex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ipaddr.js@1.9.1?package-id=a456707d5d548a77", + "author": "whitequark ", + "name": "ipaddr.js", + "version": "1.9.1", + "description": "A library for manipulating IPv4 and IPv6 addresses in JavaScript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:whitequark:ipaddr.js:1.9.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ipaddr.js@1.9.1", + "externalReferences": [ + { + "url": "git://github.com/whitequark/ipaddr.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ipaddr.js@2.0.1?package-id=53fa4f36e1904499", + "author": "whitequark ", + "name": "ipaddr.js", + "version": "2.0.1", + "description": "A library for manipulating IPv4 and IPv6 addresses in JavaScript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:whitequark:ipaddr.js:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ipaddr.js@2.0.1", + "externalReferences": [ + { + "url": "git://github.com/whitequark/ipaddr.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-arguments@1.1.1?package-id=ad7c195ab0c46bce", + "author": "Jordan Harband (http://ljharb.codes)", + "name": "is-arguments", + "version": "1.1.1", + "description": "Is this an arguments object? It's a harder question than you think.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-arguments:is-arguments:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-arguments@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/inspect-js/is-arguments.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/is-arguments", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-callable@1.2.7?package-id=c4c51f6896fbf70", + "author": "Jordan Harband (http://ljharb.codes)", + "name": "is-callable", + "version": "1.2.7", + "description": "Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-callable:is-callable:1.2.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-callable@1.2.7", + "externalReferences": [ + { + "url": "git://github.com/inspect-js/is-callable.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-ci@2.0.0?package-id=d53a8a10260fddcf", + "author": "Thomas Watson Steen (https://twitter.com/wa7son)", + "name": "is-ci", + "version": "2.0.0", + "description": "Detect if the current environment is a CI server", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:watson:is-ci:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-ci@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/watson/is-ci.git", + "type": "distribution" + }, + { + "url": "https://github.com/watson/is-ci", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-cidr@4.0.2?package-id=b7267695f8ce1238", + "author": "silverwind ", + "name": "is-cidr", + "version": "4.0.2", + "description": "Check if a string is an IP address in CIDR notation", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:is-cidr:is-cidr:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-cidr@4.0.2", + "externalReferences": [ + { + "url": "silverwind/is-cidr", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-core-module@2.10.0?package-id=22642820ec847015", + "author": "Jordan Harband ", + "name": "is-core-module", + "version": "2.10.0", + "description": "Is this specifier a node.js core module?", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-core-module:is-core-module:2.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-core-module@2.10.0", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/is-core-module.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/is-core-module", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-core-module@2.12.0?package-id=29c3156cba89f8b", + "author": "Jordan Harband ", + "name": "is-core-module", + "version": "2.12.0", + "description": "Is this specifier a node.js core module?", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-core-module:is-core-module:2.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-core-module@2.12.0", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/is-core-module.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/is-core-module", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-docker@2.2.1?package-id=209eb400a1af69e7", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "is-docker", + "version": "2.2.1", + "description": "Check if the process is running inside a Docker container", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-docker:is-docker:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-docker@2.2.1", + "externalReferences": [ + { + "url": "sindresorhus/is-docker", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0?package-id=f89f6ce8e80b50d", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/is-fullwidth-code-point", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-generator-function@1.0.10?package-id=bed7e4245a0f50fa", + "author": "Jordan Harband ", + "name": "is-generator-function", + "version": "1.0.10", + "description": "Determine if a function is a native generator function.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-generator-function:is-generator-function:1.0.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-generator-function@1.0.10", + "externalReferences": [ + { + "url": "git://github.com/inspect-js/is-generator-function.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-lambda@1.0.1?package-id=841af64487227951", + "author": "Thomas Watson Steen (https://twitter.com/wa7son)", + "name": "is-lambda", + "version": "1.0.1", + "description": "Detect if your code is running on an AWS Lambda server", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-lambda:is-lambda:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-lambda@1.0.1", + "externalReferences": [ + { + "url": "https://github.com/watson/is-lambda.git", + "type": "distribution" + }, + { + "url": "https://github.com/watson/is-lambda", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-number@7.0.0?package-id=b9bf8faca6627c38", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "is-number", + "version": "7.0.0", + "description": "Returns true if a number or string value is a finite number. Useful for regex matches, parsing, user input, etc.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:is-number:7.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-number@7.0.0", + "externalReferences": [ + { + "url": "jonschlinkert/is-number", + "type": "distribution" + }, + { + "url": "https://github.com/jonschlinkert/is-number", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-typed-array@1.1.10?package-id=d331ef17d0a77286", + "author": "Jordan Harband (http://ljharb.codes)", + "name": "is-typed-array", + "version": "1.1.10", + "description": "Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-typed-array:is-typed-array:1.1.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-typed-array@1.1.10", + "externalReferences": [ + { + "url": "git://github.com/inspect-js/is-typed-array.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-wsl@2.2.0?package-id=d1f1ff9c32e5f112", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-wsl", + "version": "2.2.0", + "description": "Check if the process is running inside Windows Subsystem for Linux (Bash on Windows)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-wsl:is-wsl:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-wsl@2.2.0", + "externalReferences": [ + { + "url": "sindresorhus/is-wsl", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isexe@2.0.0?package-id=cac2857ecac9cad9", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "isexe", + "version": "2.0.0", + "description": "Minimal module to check if a file is executable.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:isexe:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isexe@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/isexe.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/isexe#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isexe@2.0.0?package-id=d6d80f55303e9359", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "isexe", + "version": "2.0.0", + "description": "Minimal module to check if a file is executable.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:isexe:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isexe@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/isexe.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/isexe#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-parse-even-better-errors@2.3.1?package-id=abf07f33abe9247b", + "author": "Kat Marchán ", + "name": "json-parse-even-better-errors", + "version": "2.3.1", + "description": "JSON.parse with context information on error", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-parse-even-better-errors:json-parse-even-better-errors:2.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-parse-even-better-errors@2.3.1", + "externalReferences": [ + { + "url": "https://github.com/npm/json-parse-even-better-errors", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-stream@1.0.0?package-id=1d1cbbfe09ed72b0", + "author": "Maciej Małecki ", + "name": "json-stream", + "version": "1.0.0", + "description": "New line-delimeted JSON parser with a stream interface", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-stream:json-stream:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-stream@1.0.0", + "externalReferences": [ + { + "url": "https://github.com/mmalecki/json-stream.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-stringify-nice@1.1.4?package-id=e53e3b4efad53e7c", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "json-stringify-nice", + "version": "1.1.4", + "description": "Stringify an object sorting scalars before objects, and defaulting to 2-space indent", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:json-stringify-nice:json-stringify-nice:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-stringify-nice@1.1.4", + "externalReferences": [ + { + "url": "https://github.com/isaacs/json-stringify-nice", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonfile@4.0.0?package-id=4cfeca6860892aa8", + "author": "JP Richardson ", + "name": "jsonfile", + "version": "4.0.0", + "description": "Easily read/write JSON files.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jsonfile:jsonfile:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonfile@4.0.0", + "externalReferences": [ + { + "url": "git@github.com:jprichardson/node-jsonfile.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonfile@6.1.0?package-id=614799bcf64038a", + "author": "JP Richardson ", + "name": "jsonfile", + "version": "6.1.0", + "description": "Easily read/write JSON files.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jsonfile:jsonfile:6.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonfile@6.1.0", + "externalReferences": [ + { + "url": "git@github.com:jprichardson/node-jsonfile.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonparse@1.3.1?package-id=4ac9c9dc14c89718", + "author": "Tim Caswell ", + "name": "jsonparse", + "version": "1.3.1", + "description": "This is a pure-js JSON streaming parser for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:creationix:jsonparse:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonparse@1.3.1", + "externalReferences": [ + { + "url": "http://github.com/creationix/jsonparse.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/just-diff@5.1.1?package-id=ce66f628f594c549", + "author": "Angus Croll", + "name": "just-diff", + "version": "5.1.1", + "description": "Return an object representing the diffs between two objects. Supports jsonPatch protocol", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:just-diff:just-diff:5.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/just-diff@5.1.1", + "externalReferences": [ + { + "url": "https://github.com/angus-c/just", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/just-diff-apply@5.4.1?package-id=11dfc45c877cf5ba", + "author": "Angus Croll", + "name": "just-diff-apply", + "version": "5.4.1", + "description": "Apply a diff to an object. Optionally supports jsonPatch protocol", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:just-diff-apply:just-diff-apply:5.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/just-diff-apply@5.4.1", + "externalReferences": [ + { + "url": "https://github.com/angus-c/just", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/klaw-sync@6.0.0?package-id=5665374c65e3d05d", + "author": "Mani Maghsoudlou", + "name": "klaw-sync", + "version": "6.0.0", + "description": "Recursive, synchronous, and fast file system walker", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:klaw-sync:klaw-sync:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/klaw-sync@6.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/manidlou/node-klaw-sync.git", + "type": "distribution" + }, + { + "url": "https://github.com/manidlou/node-klaw-sync#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.16.5&package-id=2abd3b45f6fa4702", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r3", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5&package-id=13bc051822a24e8d", + "publisher": "Timo Teras ", + "name": "libcrypto1.1", + "version": "1.1.1t-r2", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1t-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgcc@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5&package-id=d2886381f1e7cdb2", + "publisher": "Ariadne Conill ", + "name": "libgcc", + "version": "11.2.1_git20220219-r2", + "description": "GNU C compiler runtime libraries", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgcc:libgcc:11.2.1_git20220219-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgcc@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmaccess@6.0.4?package-id=f3410b3d946e1c4d", + "author": "GitHub Inc.", + "name": "libnpmaccess", + "version": "6.0.4", + "description": "programmatic library for `npm access` commands", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmaccess:libnpmaccess:6.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmaccess@6.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmaccess", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmdiff@4.0.5?package-id=ce3262e2c08529ea", + "author": "GitHub Inc.", + "name": "libnpmdiff", + "version": "4.0.5", + "description": "The registry diff", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmdiff:libnpmdiff:4.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmdiff@4.0.5", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmexec@4.0.14?package-id=902cc2f16bb11ffc", + "author": "GitHub Inc.", + "name": "libnpmexec", + "version": "4.0.14", + "description": "npm exec (npx) programmatic API", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmexec:libnpmexec:4.0.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmexec@4.0.14", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmfund@3.0.5?package-id=201ebcb5d992fa75", + "author": "GitHub Inc.", + "name": "libnpmfund", + "version": "3.0.5", + "description": "Programmatic API for npm fund", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmfund:libnpmfund:3.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmfund@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmhook@8.0.4?package-id=5679bee9e2f7003c", + "author": "GitHub Inc.", + "name": "libnpmhook", + "version": "8.0.4", + "description": "programmatic API for managing npm registry hooks", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmhook:libnpmhook:8.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmhook@8.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmorg@4.0.4?package-id=80c945656f22ba9d", + "author": "GitHub Inc.", + "name": "libnpmorg", + "version": "4.0.4", + "description": "Programmatic api for `npm org` commands", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmorg:libnpmorg:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmorg@4.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmorg", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmpack@4.1.3?package-id=62f6985b14d7de3e", + "author": "GitHub Inc.", + "name": "libnpmpack", + "version": "4.1.3", + "description": "Programmatic API for the bits behind npm pack", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmpack:libnpmpack:4.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmpack@4.1.3", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmpack", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmpublish@6.0.5?package-id=a970d9d2bf422a57", + "author": "GitHub Inc.", + "name": "libnpmpublish", + "version": "6.0.5", + "description": "Programmatic API for the bits behind npm publish and unpublish", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmpublish:libnpmpublish:6.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmpublish@6.0.5", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmpublish", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmsearch@5.0.4?package-id=e3666452dd7e585d", + "author": "GitHub Inc.", + "name": "libnpmsearch", + "version": "5.0.4", + "description": "Programmatic API for searching in npm and compatible registries.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmsearch:libnpmsearch:5.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmsearch@5.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmsearch", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmteam@4.0.4?package-id=95c3c29c4dcd60d1", + "author": "GitHub Inc.", + "name": "libnpmteam", + "version": "4.0.4", + "description": "npm Team management APIs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmteam:libnpmteam:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmteam@4.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmteam", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmversion@3.0.7?package-id=9ace162e3f4ca294", + "author": "GitHub Inc.", + "name": "libnpmversion", + "version": "3.0.7", + "description": "library to do the things that 'npm version' does", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmversion:libnpmversion:3.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmversion@3.0.7", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5&package-id=609cb94e63dc06dd", + "publisher": "Timo Teras ", + "name": "libssl1.1", + "version": "1.1.1t-r2", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1t-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libstdc++@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5&package-id=9913678ca8fd323d", + "publisher": "Ariadne Conill ", + "name": "libstdc++", + "version": "11.2.1_git20220219-r2", + "description": "GNU C++ standard runtime library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:11.2.1_git20220219-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libstdc++@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash@4.17.21?package-id=75dfb844472e21c2", + "author": "John-David Dalton ", + "name": "lodash", + "version": "4.17.21", + "description": "Lodash modular utilities.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash:lodash:4.17.21:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash@4.17.21", + "externalReferences": [ + { + "url": "lodash/lodash", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lru-cache@6.0.0?package-id=a9db11b8d6d48a85", + "author": "Isaac Z. Schlueter ", + "name": "lru-cache", + "version": "6.0.0", + "description": "A cache object that deletes the least-recently-used items.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lru-cache:lru-cache:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru-cache@6.0.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-lru-cache.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lru-cache@7.13.2?package-id=be5c7dc6ddace7cd", + "author": "Isaac Z. Schlueter ", + "name": "lru-cache", + "version": "7.13.2", + "description": "A cache object that deletes the least-recently-used items.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lru-cache:lru-cache:7.13.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru-cache@7.13.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-lru-cache.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/make-fetch-happen@10.2.1?package-id=d230079dee920278", + "author": "GitHub Inc.", + "name": "make-fetch-happen", + "version": "10.2.1", + "description": "Opinionated, caching, retrying fetch client", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:make-fetch-happen:make-fetch-happen:10.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-fetch-happen@10.2.1", + "externalReferences": [ + { + "url": "https://github.com/npm/make-fetch-happen.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/md5.js@1.3.5?package-id=ddaf7ffca1d5ef2", + "author": "Kirill Fomichev (https://github.com/fanatid)", + "name": "md5.js", + "version": "1.3.5", + "description": "node style md5 on pure JavaScript", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crypto-browserify:md5.js:1.3.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/md5.js@1.3.5", + "externalReferences": [ + { + "url": "https://github.com/crypto-browserify/md5.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/crypto-browserify/md5.js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/media-typer@0.3.0?package-id=edc1220ee5504fb4", + "author": "Douglas Christopher Wilson ", + "name": "media-typer", + "version": "0.3.0", + "description": "Simple RFC 6838 media type parser and formatter", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:media-typer:media-typer:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/media-typer@0.3.0", + "externalReferences": [ + { + "url": "jshttp/media-typer", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/merge-descriptors@1.0.1?package-id=24f38b1ffa4b7603", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "merge-descriptors", + "version": "1.0.1", + "description": "Merge objects using descriptors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:merge-descriptors:merge-descriptors:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/merge-descriptors@1.0.1", + "externalReferences": [ + { + "url": "component/merge-descriptors", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/methods@1.1.2?package-id=9b85a46f19a1f1aa", + "name": "methods", + "version": "1.1.2", + "description": "HTTP methods that node supports", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:methods:methods:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/methods@1.1.2", + "externalReferences": [ + { + "url": "jshttp/methods", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/micromatch@4.0.5?package-id=b4a84104978015d0", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "micromatch", + "version": "4.0.5", + "description": "Glob matching for javascript/node.js. A replacement and faster alternative to minimatch and multimatch.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:micromatch:micromatch:4.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/micromatch@4.0.5", + "externalReferences": [ + { + "url": "micromatch/micromatch", + "type": "distribution" + }, + { + "url": "https://github.com/micromatch/micromatch", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/miller-rabin@4.0.1?package-id=4b5cf7edde29d056", + "author": "Fedor Indutny ", + "name": "miller-rabin", + "version": "4.0.1", + "description": "Miller Rabin algorithm for primality test", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:miller-rabin:miller-rabin:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/miller-rabin@4.0.1", + "externalReferences": [ + { + "url": "git@github.com:indutny/miller-rabin", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/miller-rabin", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime@1.4.1?package-id=b9a146d2dbc31576", + "author": "Robert Kieffer (http://github.com/broofa)", + "name": "mime", + "version": "1.4.1", + "description": "A comprehensive library for mime-type mapping", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:broofa:mime:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime@1.4.1", + "externalReferences": [ + { + "url": "https://github.com/broofa/node-mime", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-db@1.52.0?package-id=9e5bf4e4d5cc60c1", + "name": "mime-db", + "version": "1.52.0", + "description": "Media Type Database", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-db:mime-db:1.52.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-db@1.52.0", + "externalReferences": [ + { + "url": "jshttp/mime-db", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-types@2.1.35?package-id=32ba3cb42be13b7a", + "name": "mime-types", + "version": "2.1.35", + "description": "The ultimate javascript content-type utility.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-types:mime-types:2.1.35:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-types@2.1.35", + "externalReferences": [ + { + "url": "jshttp/mime-types", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimalistic-assert@1.0.1?package-id=d8672eb71813326d", + "name": "minimalistic-assert", + "version": "1.0.1", + "description": "minimalistic-assert ===", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimalistic-assert:minimalistic-assert:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimalistic-assert@1.0.1", + "externalReferences": [ + { + "url": "https://github.com/calvinmetcalf/minimalistic-assert.git", + "type": "distribution" + }, + { + "url": "https://github.com/calvinmetcalf/minimalistic-assert", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimalistic-crypto-utils@1.0.1?package-id=be5542e945ab4684", + "author": "Fedor Indutny ", + "name": "minimalistic-crypto-utils", + "version": "1.0.1", + "description": "Minimalistic tools for JS crypto modules", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minimalistic-crypto-utils:minimalistic-crypto-utils:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimalistic-crypto-utils@1.0.1", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/indutny/minimalistic-crypto-utils.git", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/minimalistic-crypto-utils#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.1.2?package-id=32b47b032f3721ab", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.1.2", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.1.2?package-id=7392185ecbfd5435", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.1.2", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.1.2?package-id=3a6089330eaf3563", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.1.2", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.1.2?package-id=4a815c2235402e8f", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.1.2", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@5.1.0?package-id=7bf8dbc1a2543e83", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "5.1.0", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:5.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@5.1.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimist@1.2.8?package-id=685b487bfc99270d", + "author": "James Halliday (http://substack.net)", + "name": "minimist", + "version": "1.2.8", + "description": "parse argument options", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minimistjs:minimist:1.2.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimist@1.2.8", + "externalReferences": [ + { + "url": "git://github.com/minimistjs/minimist.git", + "type": "distribution" + }, + { + "url": "https://github.com/minimistjs/minimist", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimist@1.2.8?package-id=b5346d2efe922f83", + "author": "James Halliday (http://substack.net)", + "name": "minimist", + "version": "1.2.8", + "description": "parse argument options", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minimistjs:minimist:1.2.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimist@1.2.8", + "externalReferences": [ + { + "url": "git://github.com/minimistjs/minimist.git", + "type": "distribution" + }, + { + "url": "https://github.com/minimistjs/minimist", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minio@7.0.33?package-id=7f471798ead20140", + "author": "MinIO, Inc. (https://min.io)", + "name": "minio", + "version": "7.0.33", + "description": "S3 Compatible Cloud Storage client", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:minio:minio:7.0.33:*:*:*:*:*:*:*", + "purl": "pkg:npm/minio@7.0.33", + "externalReferences": [ + { + "url": "git+https://github.com/minio/minio-js.git", + "type": "distribution" + }, + { + "url": "https://github.com/minio/minio-js#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass@3.3.4?package-id=b613ca6e3e5e1fdb", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "3.3.4", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:3.3.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@3.3.4", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass@3.3.6?package-id=155d37b12b10bb25", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "3.3.6", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-collect@1.0.2?package-id=48596b1d4dbb4f19", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-collect", + "version": "1.0.2", + "description": "A Minipass stream that collects all the data into a single chunk", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-collect:minipass-collect:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-collect@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-fetch@2.1.1?package-id=1efc5437ba452e1d", + "author": "GitHub Inc.", + "name": "minipass-fetch", + "version": "2.1.1", + "description": "An implementation of window.fetch in Node.js using Minipass streams", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minipass-fetch:minipass-fetch:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-fetch@2.1.1", + "externalReferences": [ + { + "url": "https://github.com/npm/minipass-fetch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-flush@1.0.5?package-id=f00a260926226ede", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-flush", + "version": "1.0.5", + "description": "A Minipass stream that calls a flush function before emitting 'end'", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-flush:minipass-flush:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-flush@1.0.5", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass-flush.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-json-stream@1.0.1?package-id=43ed818882788b6b", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-json-stream", + "version": "1.0.1", + "description": "Like JSONStream, but using Minipass streams", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minipass-json-stream:minipass-json-stream:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-json-stream@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/minipass-json-stream.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-pipeline@1.2.4?package-id=891713a52fe6cc27", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-pipeline", + "version": "1.2.4", + "description": "create a pipeline of streams using Minipass", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-pipeline@1.2.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-sized@1.0.3?package-id=cd4842c35733398b", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-sized", + "version": "1.0.3", + "description": "A Minipass stream that raises an error if you get a different number of bytes than expected", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-sized:minipass-sized:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-sized@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass-sized.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minizlib@2.1.2?package-id=a651644b4f6a3e3", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minizlib", + "version": "2.1.2", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minizlib:minizlib:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minizlib@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minizlib@2.1.2?package-id=7bb75b451bb46790", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minizlib", + "version": "2.1.2", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minizlib:minizlib:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minizlib@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp@0.5.6?package-id=652fb6b912e95935", + "author": "James Halliday (http://substack.net)", + "name": "mkdirp", + "version": "0.5.6", + "description": "Recursively mkdir, like `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:substack:mkdirp:0.5.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp@0.5.6", + "externalReferences": [ + { + "url": "https://github.com/substack/node-mkdirp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp@1.0.4?package-id=9695628e211e131d", + "name": "mkdirp", + "version": "1.0.4", + "description": "Recursively mkdir, like `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:mkdirp:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp@1.0.4", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-mkdirp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp-infer-owner@2.0.0?package-id=cd2840516db98e09", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "mkdirp-infer-owner", + "version": "2.0.0", + "description": "mkdirp, but chown to the owner of the containing folder if possible and necessary", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:mkdirp-infer-owner:mkdirp-infer-owner:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp-infer-owner@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/mkdirp-infer-owner", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/monorepo-symlink-test@0.0.0?package-id=fb8f3eb0b123561e", + "name": "monorepo-symlink-test", + "version": "0.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:monorepo-symlink-test:monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/monorepo-symlink-test@0.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/morgan@1.9.1?package-id=85eceee62a69b591", + "name": "morgan", + "version": "1.9.1", + "description": "HTTP request logger middleware for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:morgan:morgan:1.9.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/morgan@1.9.1", + "externalReferences": [ + { + "url": "expressjs/morgan", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.0.0?package-id=5a1105814fc945d6", + "name": "ms", + "version": "2.0.0", + "description": "Tiny milisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ms:ms:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.0.0", + "externalReferences": [ + { + "url": "zeit/ms", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.2?package-id=baab6160abc8414d", + "name": "ms", + "version": "2.1.2", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ms:ms:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "url": "zeit/ms", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.3?package-id=56db25c219fa0f4e", + "name": "ms", + "version": "2.1.3", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ms:ms:2.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.3", + "externalReferences": [ + { + "url": "vercel/ms", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.2.3-r2?arch=x86_64&distro=alpine-3.16.5&package-id=24c6089b81ca7d19", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.2.3-r2", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.2.3-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.2.3-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.3-r2?arch=x86_64&upstream=musl&distro=alpine-3.16.5&package-id=d33c14d727ae74d1", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.2.3-r2", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.2.3-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.2.3-r2?arch=x86_64&upstream=musl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mute-stream@0.0.8?package-id=b093eec725f75ac9", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "mute-stream", + "version": "0.0.8", + "description": "Bytes go in, but they don't come out (when muted).", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:mute-stream:mute-stream:0.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/mute-stream@0.0.8", + "externalReferences": [ + { + "url": "git://github.com/isaacs/mute-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mylib@0.0.0?package-id=9b8da0f44b3dbc2", + "name": "mylib", + "version": "0.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:mylib:mylib:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mylib@0.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/negotiator@0.6.3?package-id=87cc6cb502ab228a", + "name": "negotiator", + "version": "0.6.3", + "description": "HTTP content negotiation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:negotiator:negotiator:0.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/negotiator@0.6.3", + "externalReferences": [ + { + "url": "jshttp/negotiator", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/negotiator@0.6.3?package-id=9f94722cfe2aef45", + "name": "negotiator", + "version": "0.6.3", + "description": "HTTP content negotiation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:negotiator:negotiator:0.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/negotiator@0.6.3", + "externalReferences": [ + { + "url": "jshttp/negotiator", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/nice-try@1.0.5?package-id=91cc5f7fcf4b2e5a", + "name": "nice-try", + "version": "1.0.5", + "description": "Tries to execute a function and discards any error that occurs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:electerious:nice-try:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/nice-try@1.0.5", + "externalReferences": [ + { + "url": "https://github.com/electerious/nice-try.git", + "type": "distribution" + }, + { + "url": "https://github.com/electerious/nice-try", + "type": "website" + } + ] + }, + { + "type": "application", + "bom-ref": "pkg:generic/node@16.20.0?package-id=c3df0c8aa56599a1", + "name": "node", + "version": "16.20.0", + "cpe": "cpe:2.3:a:nodejs:node.js:16.20.0:*:*:*:*:*:*:*", + "purl": "pkg:generic/node@16.20.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-gyp@9.1.0?package-id=594531fb28fce181", + "author": "Nathan Rajlich (http://tootallnate.net)", + "name": "node-gyp", + "version": "9.1.0", + "description": "Node.js native addon build tool", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-gyp:node-gyp:9.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-gyp@9.1.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/node-gyp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/nopt@5.0.0?package-id=16f8d211f06e4fc1", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "nopt", + "version": "5.0.0", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:nopt:nopt:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/nopt@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/nopt.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/nopt@6.0.0?package-id=2da699f46c59247", + "author": "GitHub Inc.", + "name": "nopt", + "version": "6.0.0", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:nopt:nopt:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/nopt@6.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/nopt.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/normalize-package-data@4.0.1?package-id=f65ac6113e729b71", + "author": "GitHub Inc.", + "name": "normalize-package-data", + "version": "4.0.1", + "description": "Normalizes data that can be found in package.json files.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:normalize-package-data:normalize-package-data:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/normalize-package-data@4.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/normalize-package-data.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm@8.19.4?package-id=3a7215c0f0fd939a", + "author": "GitHub Inc.", + "name": "npm", + "version": "8.19.4", + "description": "a package manager for JavaScript", + "licenses": [ + { + "license": { + "id": "Artistic-2.0" + } + } + ], + "cpe": "cpe:2.3:a:npm:npm:8.19.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm@8.19.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://docs.npmjs.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-audit-report@3.0.0?package-id=838d59a41103d415", + "author": "GitHub Inc.", + "name": "npm-audit-report", + "version": "3.0.0", + "description": "Given a response from the npm security api, render it into a variety of security reports", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-audit-report:npm-audit-report:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-audit-report@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-audit-report.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-audit-report#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-bundled@1.1.2?package-id=d3fc92546524f1a0", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "npm-bundled", + "version": "1.1.2", + "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-bundled:npm-bundled:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-bundled@1.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-bundled.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-bundled@2.0.1?package-id=4342e4ccfcb927ca", + "author": "GitHub Inc.", + "name": "npm-bundled", + "version": "2.0.1", + "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-bundled:npm-bundled:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-bundled@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-bundled.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-init@0.0.0?package-id=e58118b5aaeeedd7", + "name": "npm-init", + "version": "0.0.0", + "description": "an initter you init wit, innit?", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:npm-init:npm-init:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-init@0.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-install-checks@5.0.0?package-id=ea3011565b04383b", + "author": "GitHub Inc.", + "name": "npm-install-checks", + "version": "5.0.0", + "description": "Check the engines and platform fields in package.json", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:npm-install-checks:npm-install-checks:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-install-checks@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-install-checks.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@1.0.1?package-id=7cccc2d8907ef9bb", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "npm-normalize-package-bin", + "version": "1.0.1", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-normalize-package-bin", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=3b502df6a54faf04", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=cb496c88bc54cdd7", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=3675dcedd841f8b6", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=a6c4eec149dbad2b", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=b373bbb7c439b789", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-package-arg@9.1.0?package-id=30ebe98710a08c64", + "author": "GitHub Inc.", + "name": "npm-package-arg", + "version": "9.1.0", + "description": "Parse the things that can be arguments to `npm install`", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-package-arg:npm-package-arg:9.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-package-arg@9.1.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-package-arg.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-package-arg", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-packlist@5.1.3?package-id=e87ec46a213d7a87", + "author": "GitHub Inc.", + "name": "npm-packlist", + "version": "5.1.3", + "description": "Get a list of the files to add from a folder into an npm package", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-packlist:npm-packlist:5.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-packlist@5.1.3", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-packlist.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-pick-manifest@7.0.2?package-id=a9dc194030f7ba31", + "author": "GitHub Inc.", + "name": "npm-pick-manifest", + "version": "7.0.2", + "description": "Resolves a matching manifest from a package metadata document according to standard npm semver resolution rules.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-pick-manifest:npm-pick-manifest:7.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-pick-manifest@7.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-pick-manifest.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-profile@6.2.1?package-id=4b7db9f7ec8bd8ec", + "author": "GitHub Inc.", + "name": "npm-profile", + "version": "6.2.1", + "description": "Library for updating an npmjs.com profile", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-profile:npm-profile:6.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-profile@6.2.1", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-profile.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-registry-fetch@13.3.1?package-id=4a24a52ce2bed90", + "author": "GitHub Inc.", + "name": "npm-registry-fetch", + "version": "13.3.1", + "description": "Fetch-based http client for use with npm registry APIs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-registry-fetch:npm-registry-fetch:13.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-registry-fetch@13.3.1", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-registry-fetch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-user-validate@1.0.1?package-id=6154858fa52c8fec", + "author": "Robert Kowalski ", + "name": "npm-user-validate", + "version": "1.0.1", + "description": "User validations for npm", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:npm-user-validate:npm-user-validate:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-user-validate@1.0.1", + "externalReferences": [ + { + "url": "git://github.com/npm/npm-user-validate.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npmlog@6.0.2?package-id=e1d7f39551f111f", + "author": "GitHub Inc.", + "name": "npmlog", + "version": "6.0.2", + "description": "logger for npm", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npmlog:npmlog:6.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npmlog@6.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/npmlog.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/on-finished@2.3.0?package-id=10e3e142a47fe504", + "name": "on-finished", + "version": "2.3.0", + "description": "Execute a callback when a request closes, finishes, or errors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:on-finished:on-finished:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/on-finished@2.3.0", + "externalReferences": [ + { + "url": "jshttp/on-finished", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/on-headers@1.0.2?package-id=53ef10f5b722581e", + "author": "Douglas Christopher Wilson ", + "name": "on-headers", + "version": "1.0.2", + "description": "Execute a listener when a response is about to write headers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:on-headers:on-headers:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/on-headers@1.0.2", + "externalReferences": [ + { + "url": "jshttp/on-headers", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/once@1.4.0?package-id=2bfb1efabaee8e52", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "once", + "version": "1.4.0", + "description": "Run a function exactly one time", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:once:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/once", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/once@1.4.0?package-id=cb60b60d8364446d", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "once", + "version": "1.4.0", + "description": "Run a function exactly one time", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:once:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/once", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/once@1.4.0?package-id=931b0bd981a31418", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "once", + "version": "1.4.0", + "description": "Run a function exactly one time", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:once:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/once", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/open@7.4.2?package-id=cac9c84b55c0ecbc", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "open", + "version": "7.4.2", + "description": "Open stuff like URLs, files, executables. Cross-platform.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:open:open:7.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/open@7.4.2", + "externalReferences": [ + { + "url": "sindresorhus/open", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/opener@1.5.2?package-id=44a3614f9f359ab5", + "author": "Domenic Denicola (https://domenic.me/)", + "name": "opener", + "version": "1.5.2", + "description": "Opens stuff, like webpages and files and executables, cross-platform", + "licenses": [ + { + "license": { + "name": "(WTFPL OR MIT)" + } + } + ], + "cpe": "cpe:2.3:a:opener:opener:1.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/opener@1.5.2", + "externalReferences": [ + { + "url": "domenic/opener", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/os-tmpdir@1.0.2?package-id=b7a6f5a292a474b9", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "os-tmpdir", + "version": "1.0.2", + "description": "Node.js os.tmpdir() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:os-tmpdir:os-tmpdir:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/os-tmpdir@1.0.2", + "externalReferences": [ + { + "url": "sindresorhus/os-tmpdir", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-map@4.0.0?package-id=1c07a8cbe4bd91d5", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "p-map", + "version": "4.0.0", + "description": "Map over promises concurrently", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-map:p-map:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-map@4.0.0", + "externalReferences": [ + { + "url": "sindresorhus/p-map", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pacote@13.6.2?package-id=481670a57d8719a5", + "author": "GitHub Inc.", + "name": "pacote", + "version": "13.6.2", + "description": "JavaScript package downloader", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:pacote:pacote:13.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/pacote@13.6.2", + "externalReferences": [ + { + "url": "https://github.com/npm/pacote.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/parse-asn1@5.1.6?package-id=5ce85831fd167d7", + "name": "parse-asn1", + "version": "5.1.6", + "description": "utility library for parsing asn1 files for use with browserify-sign.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:crypto-browserify:parse-asn1:5.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/parse-asn1@5.1.6", + "externalReferences": [ + { + "url": "git://github.com/crypto-browserify/parse-asn1.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/parse-conflict-json@2.0.2?package-id=94638d4f43f17ad7", + "author": "GitHub Inc.", + "name": "parse-conflict-json", + "version": "2.0.2", + "description": "Parse a JSON string that has git merge conflicts, resolving if possible", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:parse-conflict-json:parse-conflict-json:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/parse-conflict-json@2.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/parse-conflict-json.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/parseurl@1.3.3?package-id=5a8f19386b323f4b", + "name": "parseurl", + "version": "1.3.3", + "description": "parse a url with memoization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:parseurl:parseurl:1.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/parseurl@1.3.3", + "externalReferences": [ + { + "url": "pillarjs/parseurl", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/patch-package@6.5.1?package-id=a613cee4f6b8f328", + "author": "David Sheldrick", + "name": "patch-package", + "version": "6.5.1", + "description": "Fix broken node modules with no fuss", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:patch-package:patch-package:6.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/patch-package@6.5.1", + "externalReferences": [ + { + "url": "github:ds300/patch-package", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=ed58648f2f773bd9", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-is-absolute", + "version": "1.0.1", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "sindresorhus/path-is-absolute", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=b1cc9415e263e4c1", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-is-absolute", + "version": "1.0.1", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "sindresorhus/path-is-absolute", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=70cf293874d995a2", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-is-absolute", + "version": "1.0.1", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "sindresorhus/path-is-absolute", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-key@2.0.1?package-id=e01a57d830c83983", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-key", + "version": "2.0.1", + "description": "Get the PATH environment variable key cross-platform", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-key:path-key:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-key@2.0.1", + "externalReferences": [ + { + "url": "sindresorhus/path-key", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-parse@1.0.7?package-id=a9f85aa88ec56175", + "author": "Javier Blanco ", + "name": "path-parse", + "version": "1.0.7", + "description": "Node.js path.parse() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jbgutierrez:path-parse:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-parse@1.0.7", + "externalReferences": [ + { + "url": "https://github.com/jbgutierrez/path-parse.git", + "type": "distribution" + }, + { + "url": "https://github.com/jbgutierrez/path-parse#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-to-regexp@0.1.7?package-id=ccbe7b36b309edc1", + "name": "path-to-regexp", + "version": "0.1.7", + "description": "Express style path to RegExp utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-to-regexp:path-to-regexp:0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-to-regexp@0.1.7", + "externalReferences": [ + { + "url": "https://github.com/component/path-to-regexp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pbkdf2@3.1.2?package-id=dd947b9d9f9422f1", + "author": "Daniel Cousens", + "name": "pbkdf2", + "version": "3.1.2", + "description": "This library provides the functionality of PBKDF2 with the ability to use any supported hashing algorithm returned from crypto.getHashes()", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crypto-browserify:pbkdf2:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/pbkdf2@3.1.2", + "externalReferences": [ + { + "url": "https://github.com/crypto-browserify/pbkdf2.git", + "type": "distribution" + }, + { + "url": "https://github.com/crypto-browserify/pbkdf2", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/picomatch@2.3.1?package-id=1fd35f4a1fffa2f7", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "picomatch", + "version": "2.3.1", + "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:micromatch:picomatch:2.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/picomatch@2.3.1", + "externalReferences": [ + { + "url": "micromatch/picomatch", + "type": "distribution" + }, + { + "url": "https://github.com/micromatch/picomatch", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pliant-worker-nodejs-config@0.0.0?package-id=8b53ecded2554ed0", + "name": "pliant-worker-nodejs-config", + "version": "0.0.0", + "cpe": "cpe:2.3:a:pliant-worker-nodejs-config:pliant-worker-nodejs-config:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pliant-worker-nodejs-config@0.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-selector-parser@6.0.10?package-id=29dd6871004e9325", + "name": "postcss-selector-parser", + "version": "6.0.10", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-selector-parser:postcss-selector-parser:6.0.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-selector-parser@6.0.10", + "externalReferences": [ + { + "url": "postcss/postcss-selector-parser", + "type": "distribution" + }, + { + "url": "https://github.com/postcss/postcss-selector-parser", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/proc-log@2.0.1?package-id=a4591425ab5edc60", + "author": "GitHub Inc.", + "name": "proc-log", + "version": "2.0.1", + "description": "just emit 'log' events on the process object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:proc-log:proc-log:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/proc-log@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/proc-log.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-all-reject-late@1.0.1?package-id=7b92ff8460614d4f", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "promise-all-reject-late", + "version": "1.0.1", + "description": "Like Promise.all, but save rejections until all promises are resolved", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promise-all-reject-late:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-all-reject-late@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-call-limit@1.0.1?package-id=2b0b41bd7b0aa502", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "promise-call-limit", + "version": "1.0.1", + "description": "Call an array of promise-returning functions, restricting concurrency to a specified limit.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promise-call-limit:promise-call-limit:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-call-limit@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/promise-call-limit", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-inflight@1.0.1?package-id=8ae6caef1e6290fe", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "promise-inflight", + "version": "1.0.1", + "description": "One promise for multiple requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promise-inflight:promise-inflight:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-inflight@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/promise-inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/promise-inflight#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-retry@2.0.1?package-id=7d483cd4a8ed637e", + "author": "IndigoUnited (http://indigounited.com)", + "name": "promise-retry", + "version": "2.0.1", + "description": "Retries a function that returns a promise, leveraging the power of the retry module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:promise-retry:promise-retry:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-retry@2.0.1", + "externalReferences": [ + { + "url": "git://github.com/IndigoUnited/node-promise-retry.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promzard@0.3.0?package-id=33cefe299422041", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "promzard", + "version": "0.3.0", + "description": "prompting wizardly", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promzard:promzard:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/promzard@0.3.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/promzard", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/proxy-addr@2.0.7?package-id=53c4580aea322e7e", + "author": "Douglas Christopher Wilson ", + "name": "proxy-addr", + "version": "2.0.7", + "description": "Determine address of proxied request", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:proxy-addr:proxy-addr:2.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/proxy-addr@2.0.7", + "externalReferences": [ + { + "url": "jshttp/proxy-addr", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/public-encrypt@4.0.3?package-id=acd9c5c1e4b65dd2", + "author": "Calvin Metcalf", + "name": "public-encrypt", + "version": "4.0.3", + "description": "browserify version of publicEncrypt & privateDecrypt", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crypto-browserify:public-encrypt:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/public-encrypt@4.0.3", + "externalReferences": [ + { + "url": "https://github.com/crypto-browserify/publicEncrypt.git", + "type": "distribution" + }, + { + "url": "https://github.com/crypto-browserify/publicEncrypt", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/qrcode-terminal@0.12.0?package-id=83c91f496595f73", + "name": "qrcode-terminal", + "version": "0.12.0", + "description": "QRCodes, in the terminal", + "licenses": [ + { + "license": { + "name": "Apache 2.0" + } + } + ], + "cpe": "cpe:2.3:a:qrcode-terminal:qrcode-terminal:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/qrcode-terminal@0.12.0", + "externalReferences": [ + { + "url": "https://github.com/gtanner/qrcode-terminal", + "type": "distribution" + }, + { + "url": "https://github.com/gtanner/qrcode-terminal", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/qs@6.5.2?package-id=8a6e990df3bbe823", + "name": "qs", + "version": "6.5.2", + "description": "A querystring parser that supports nesting and arrays, with a depth limit", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:ljharb:qs:6.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/qs@6.5.2", + "externalReferences": [ + { + "url": "https://github.com/ljharb/qs.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/qs", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/query-string@7.1.3?package-id=269bef40e0177f9f", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "query-string", + "version": "7.1.3", + "description": "Parse and stringify URL query strings", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:query-string:query-string:7.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/query-string@7.1.3", + "externalReferences": [ + { + "url": "sindresorhus/query-string", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/randombytes@2.1.0?package-id=e552b57eba8b1bf1", + "name": "randombytes", + "version": "2.1.0", + "description": "random bytes from browserify stand alone", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crypto-browserify:randombytes:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/randombytes@2.1.0", + "externalReferences": [ + { + "url": "git@github.com:crypto-browserify/randombytes.git", + "type": "distribution" + }, + { + "url": "https://github.com/crypto-browserify/randombytes", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/randomfill@1.0.4?package-id=1821ca9f4bd12848", + "name": "randomfill", + "version": "1.0.4", + "description": "random fill from browserify stand alone", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crypto-browserify:randomfill:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/randomfill@1.0.4", + "externalReferences": [ + { + "url": "https://github.com/crypto-browserify/randomfill.git", + "type": "distribution" + }, + { + "url": "https://github.com/crypto-browserify/randomfill", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/range-parser@1.2.1?package-id=4426c7b6b8b9fe0c", + "author": "TJ Holowaychuk (http://tjholowaychuk.com)", + "name": "range-parser", + "version": "1.2.1", + "description": "Range header field string parser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:range-parser:range-parser:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/range-parser@1.2.1", + "externalReferences": [ + { + "url": "jshttp/range-parser", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/raw-body@2.3.3?package-id=c72a71e2075f827c", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "raw-body", + "version": "2.3.3", + "description": "Get and validate the raw body of a readable stream.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:raw-body:raw-body:2.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/raw-body@2.3.3", + "externalReferences": [ + { + "url": "stream-utils/raw-body", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read@1.0.7?package-id=cf65e05575a1a15", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "read", + "version": "1.0.7", + "description": "read(1) for node programs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:read:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/read@1.0.7", + "externalReferences": [ + { + "url": "git://github.com/isaacs/read.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-cmd-shim@3.0.0?package-id=4b927be3f703982b", + "author": "GitHub Inc.", + "name": "read-cmd-shim", + "version": "3.0.0", + "description": "Figure out what a cmd-shim is pointing at. This acts as the equivalent of fs.readlink.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-cmd-shim:read-cmd-shim:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-cmd-shim@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/read-cmd-shim.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/read-cmd-shim#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-package-json@5.0.2?package-id=d15e27cd5cddf2b4", + "author": "GitHub Inc.", + "name": "read-package-json", + "version": "5.0.2", + "description": "The thing npm uses to read package.json files with semantics and defaults and validation", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-package-json:read-package-json:5.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-package-json@5.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/read-package-json.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-package-json-fast@2.0.3?package-id=bb9e08c93f4b4c89", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "read-package-json-fast", + "version": "2.0.3", + "description": "Like read-package-json, but faster", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-package-json-fast:read-package-json-fast:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-package-json-fast@2.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/npm/read-package-json-fast.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@3.6.0?package-id=32d9c32dd3126020", + "name": "readable-stream", + "version": "3.6.0", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:3.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@3.6.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@3.6.2?package-id=58c37a95ac33b693", + "name": "readable-stream", + "version": "3.6.2", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:3.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@3.6.2", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readdir-scoped-modules@1.1.0?package-id=33ac24742869be8b", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "readdir-scoped-modules", + "version": "1.1.0", + "description": "Like `fs.readdir` but handling `@org/module` dirs as if they were a single entry.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:readdir-scoped-modules:readdir-scoped-modules:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/readdir-scoped-modules@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/npm/readdir-scoped-modules", + "type": "distribution" + }, + { + "url": "https://github.com/npm/readdir-scoped-modules", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rechoir@0.6.2?package-id=53838672dfe51f36", + "author": "Tyler Kellen (http://goingslowly.com/)", + "name": "rechoir", + "version": "0.6.2", + "description": "Require any supported file as a node module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:rechoir:rechoir:0.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/rechoir@0.6.2", + "externalReferences": [ + { + "url": "git://github.com/tkellen/node-rechoir.git", + "type": "distribution" + }, + { + "url": "https://github.com/tkellen/node-rechoir", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/resolve@1.22.2?package-id=19b4e65863eb740f", + "author": "James Halliday (http://substack.net)", + "name": "resolve", + "version": "1.22.2", + "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:browserify:resolve:1.22.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/resolve@1.22.2", + "externalReferences": [ + { + "url": "git://github.com/browserify/resolve.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/retry@0.12.0?package-id=c3f319915fd297ec", + "author": "Tim Koschützki (http://debuggable.com/)", + "name": "retry", + "version": "0.12.0", + "description": "Abstraction for exponential and custom retry strategies for failed operations.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tim-kos:retry:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/retry@0.12.0", + "externalReferences": [ + { + "url": "git://github.com/tim-kos/node-retry.git", + "type": "distribution" + }, + { + "url": "https://github.com/tim-kos/node-retry", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rimraf@2.7.1?package-id=bd4097ab94b14450", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "rimraf", + "version": "2.7.1", + "description": "A deep deletion module for node (like `rm -rf`)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:rimraf:2.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/rimraf@2.7.1", + "externalReferences": [ + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rimraf@3.0.2?package-id=92690f32c123c49b", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "rimraf", + "version": "3.0.2", + "description": "A deep deletion module for node (like `rm -rf`)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:rimraf:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/rimraf@3.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ripemd160@2.0.2?package-id=7f7356c79fe65cee", + "name": "ripemd160", + "version": "2.0.2", + "description": "Compute ripemd160 of bytes or strings.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crypto-browserify:ripemd160:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ripemd160@2.0.2", + "externalReferences": [ + { + "url": "https://github.com/crypto-browserify/ripemd160", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=2726b88c81e31063", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=edf513d3ab46bee", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "safe-buffer", + "version": "5.2.1", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=695bd3e67dfc1bca", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "safe-buffer", + "version": "5.2.1", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=61ae351303bc44d5", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "safe-buffer", + "version": "5.2.1", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=e39228a786cd5fee", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "safe-buffer", + "version": "5.2.1", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=4ab2220d3f3f4961", + "author": "Nikita Skovoroda (https://github.com/ChALkeR)", + "name": "safer-buffer", + "version": "2.1.2", + "description": "Modern Buffer API polyfill without footguns", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safer-buffer@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/ChALkeR/safer-buffer.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=cc287d73489b4567", + "author": "Nikita Skovoroda (https://github.com/ChALkeR)", + "name": "safer-buffer", + "version": "2.1.2", + "description": "Modern Buffer API polyfill without footguns", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safer-buffer@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/ChALkeR/safer-buffer.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sax@1.2.4?package-id=d02182db0df4dd12", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "sax", + "version": "1.2.4", + "description": "An evented streaming XML parser in JavaScript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:sax:1.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/sax@1.2.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/sax-js.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.3.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.16.5&package-id=206fdb47b3e980eb", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.3.4-r0", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.3.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.3.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver@5.7.1?package-id=c8156fd8ac442494", + "name": "semver", + "version": "5.7.1", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:semver:semver:5.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver@5.7.1", + "externalReferences": [ + { + "url": "https://github.com/npm/node-semver", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver@7.3.7?package-id=73e16bb8e099774", + "author": "GitHub Inc.", + "name": "semver", + "version": "7.3.7", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:semver:semver:7.3.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver@7.3.7", + "externalReferences": [ + { + "url": "https://github.com/npm/node-semver.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/send@0.16.2?package-id=6aacb6d4db077764", + "author": "TJ Holowaychuk ", + "name": "send", + "version": "0.16.2", + "description": "Better streaming static file server with Range and conditional-GET support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:send:send:0.16.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/send@0.16.2", + "externalReferences": [ + { + "url": "pillarjs/send", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/serve-static@1.13.2?package-id=2085513853dda1c3", + "author": "Douglas Christopher Wilson ", + "name": "serve-static", + "version": "1.13.2", + "description": "Serve static files", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:serve-static:serve-static:1.13.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/serve-static@1.13.2", + "externalReferences": [ + { + "url": "expressjs/serve-static", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/set-blocking@2.0.0?package-id=bac85cbb844de9c9", + "author": "Ben Coe ", + "name": "set-blocking", + "version": "2.0.0", + "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:set-blocking:set-blocking:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/set-blocking@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/yargs/set-blocking.git", + "type": "distribution" + }, + { + "url": "https://github.com/yargs/set-blocking#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/setprototypeof@1.1.0?package-id=5f62b122fce97102", + "author": "Wes Todd", + "name": "setprototypeof", + "version": "1.1.0", + "description": "A small polyfill for Object.setprototypeof", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:setprototypeof:setprototypeof:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/setprototypeof@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/wesleytodd/setprototypeof.git", + "type": "distribution" + }, + { + "url": "https://github.com/wesleytodd/setprototypeof", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sha.js@2.4.11?package-id=a1de2d056381c798", + "author": "Dominic Tarr (dominictarr.com)", + "name": "sha.js", + "version": "2.4.11", + "description": "Streamable SHA hashes in pure javascript", + "licenses": [ + { + "license": { + "name": "(MIT AND BSD-3-Clause)" + } + } + ], + "cpe": "cpe:2.3:a:crypto-browserify:sha.js:2.4.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/sha.js@2.4.11", + "externalReferences": [ + { + "url": "git://github.com/crypto-browserify/sha.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/crypto-browserify/sha.js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/shebang-command@1.2.0?package-id=fffd86fb9033b83c", + "author": "Kevin Martensson (github.com/kevva)", + "name": "shebang-command", + "version": "1.2.0", + "description": "Get the command from a shebang", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shebang-command:shebang-command:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/shebang-command@1.2.0", + "externalReferences": [ + { + "url": "kevva/shebang-command", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/shebang-regex@1.0.0?package-id=2ce4c4e2034ccaff", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "shebang-regex", + "version": "1.0.0", + "description": "Regular expression for matching a shebang", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shebang-regex:shebang-regex:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/shebang-regex@1.0.0", + "externalReferences": [ + { + "url": "sindresorhus/shebang-regex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/shelljs@0.8.5?package-id=52f75ec88cb09ea7", + "name": "shelljs", + "version": "0.8.5", + "description": "Portable Unix shell commands for Node.js", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:shelljs:shelljs:0.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/shelljs@0.8.5", + "externalReferences": [ + { + "url": "git://github.com/shelljs/shelljs.git", + "type": "distribution" + }, + { + "url": "http://github.com/shelljs/shelljs", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/signal-exit@3.0.7?package-id=998659694cba1dfd", + "author": "Ben Coe ", + "name": "signal-exit", + "version": "3.0.7", + "description": "when you want to fire an event no matter how a process exits.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:signal-exit:signal-exit:3.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/signal-exit@3.0.7", + "externalReferences": [ + { + "url": "https://github.com/tapjs/signal-exit.git", + "type": "distribution" + }, + { + "url": "https://github.com/tapjs/signal-exit", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/slash@2.0.0?package-id=eaf393e0f3ea2ae5", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "slash", + "version": "2.0.0", + "description": "Convert Windows backslash paths to slash paths", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:slash:slash:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/slash@2.0.0", + "externalReferences": [ + { + "url": "sindresorhus/slash", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/smart-buffer@4.2.0?package-id=ad322c124ae3043c", + "author": "Josh Glazebrook", + "name": "smart-buffer", + "version": "4.2.0", + "description": "smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:JoshGlazebrook:smart-buffer:4.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/smart-buffer@4.2.0", + "externalReferences": [ + { + "url": "https://github.com/JoshGlazebrook/smart-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/JoshGlazebrook/smart-buffer/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/socks@2.7.0?package-id=267f6eb3d489a8eb", + "author": "Josh Glazebrook", + "name": "socks", + "version": "2.7.0", + "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:JoshGlazebrook:socks:2.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/socks@2.7.0", + "externalReferences": [ + { + "url": "https://github.com/JoshGlazebrook/socks.git", + "type": "distribution" + }, + { + "url": "https://github.com/JoshGlazebrook/socks/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/socks-proxy-agent@7.0.0?package-id=8dc0e605920052a1", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "socks-proxy-agent", + "version": "7.0.0", + "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:socks-proxy-agent:socks-proxy-agent:7.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/socks-proxy-agent@7.0.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-socks-proxy-agent.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/node-socks-proxy-agent#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-correct@3.1.1?package-id=d6b0214947e454eb", + "author": "Kyle E. Mitchell (https://kemitchell.com)", + "name": "spdx-correct", + "version": "3.1.1", + "description": "correct invalid SPDX expressions", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-correct:spdx-correct:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-correct@3.1.1", + "externalReferences": [ + { + "url": "jslicense/spdx-correct.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-exceptions@2.3.0?package-id=22aa1fb7c596c6c7", + "author": "The Linux Foundation", + "name": "spdx-exceptions", + "version": "2.3.0", + "description": "list of SPDX standard license exceptions", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-exceptions:spdx-exceptions:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-exceptions@2.3.0", + "externalReferences": [ + { + "url": "kemitchell/spdx-exceptions.json", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-expression-parse@3.0.1?package-id=78c73c9b189e2783", + "author": "Kyle E. Mitchell (https://kemitchell.com)", + "name": "spdx-expression-parse", + "version": "3.0.1", + "description": "parse SPDX license expressions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:spdx-expression-parse:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-expression-parse@3.0.1", + "externalReferences": [ + { + "url": "jslicense/spdx-expression-parse.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-license-ids@3.0.11?package-id=6530ac28616ec508", + "author": "Shinnosuke Watanabe (https://github.com/shinnn)", + "name": "spdx-license-ids", + "version": "3.0.11", + "description": "A list of SPDX license identifiers", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-license-ids:spdx-license-ids:3.0.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-license-ids@3.0.11", + "externalReferences": [ + { + "url": "jslicense/spdx-license-ids", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/split-on-first@1.1.0?package-id=9078f4eb65562991", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "split-on-first", + "version": "1.1.0", + "description": "Split a string on the first occurance of a given separator", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:split-on-first:split-on-first:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/split-on-first@1.1.0", + "externalReferences": [ + { + "url": "sindresorhus/split-on-first", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&upstream=busybox&distro=alpine-3.16.5&package-id=674d1e2fba4d633a", + "publisher": "Sören Tempel ", + "name": "ssl_client", + "version": "1.35.0-r17", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.35.0-r17:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&upstream=busybox&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ssri@9.0.1?package-id=49986701356bf646", + "author": "GitHub Inc.", + "name": "ssri", + "version": "9.0.1", + "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ssri:ssri:9.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ssri@9.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/ssri.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/statuses@1.4.0?package-id=1492f259b23a7535", + "name": "statuses", + "version": "1.4.0", + "description": "HTTP status utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:statuses:statuses:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/statuses@1.4.0", + "externalReferences": [ + { + "url": "jshttp/statuses", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strict-uri-encode@2.0.0?package-id=b7d67cfb18e7450a", + "author": "Kevin Mårtensson (github.com/kevva)", + "name": "strict-uri-encode", + "version": "2.0.0", + "description": "A stricter URI encode adhering to RFC 3986", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strict-uri-encode:strict-uri-encode:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strict-uri-encode@2.0.0", + "externalReferences": [ + { + "url": "kevva/strict-uri-encode", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@4.2.3?package-id=c50e61a77e3ea809", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "4.2.3", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-width:string-width:4.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@4.2.3", + "externalReferences": [ + { + "url": "sindresorhus/string-width", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.3.0?package-id=ca8af4aa6b41ca75", + "name": "string_decoder", + "version": "1.3.0", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.3.0?package-id=4416d34ed115d469", + "name": "string_decoder", + "version": "1.3.0", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@6.0.1?package-id=5ec73c7d72940ceb", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "6.0.1", + "description": "Strip ANSI escape codes from a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@6.0.1", + "externalReferences": [ + { + "url": "chalk/strip-ansi", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strnum@1.0.5?package-id=c3c9931116de06dd", + "author": "Amit Gupta (https://amitkumargupta.work/)", + "name": "strnum", + "version": "1.0.5", + "description": "Parse String to Number based on configuration", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:NaturalIntelligence:strnum:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/strnum@1.0.5", + "externalReferences": [ + { + "url": "https://github.com/NaturalIntelligence/strnum", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-color@7.2.0?package-id=4c97deb16c788c95", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "supports-color", + "version": "7.2.0", + "description": "Detect whether a terminal supports color", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-color:supports-color:7.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-color@7.2.0", + "externalReferences": [ + { + "url": "chalk/supports-color", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-color@7.2.0?package-id=7fc54f33952b6e18", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "supports-color", + "version": "7.2.0", + "description": "Detect whether a terminal supports color", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-color:supports-color:7.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-color@7.2.0", + "externalReferences": [ + { + "url": "chalk/supports-color", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0?package-id=63de1d09c9944553", + "author": "Jordan Harband ", + "name": "supports-preserve-symlinks-flag", + "version": "1.0.0", + "description": "Determine if the current node version supports the `--preserve-symlinks` flag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-preserve-symlinks-flag:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/node-supports-preserve-symlinks-flag.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/node-supports-preserve-symlinks-flag#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tar@5.0.11?package-id=d8c4bfab58684e14", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "tar", + "version": "5.0.11", + "description": "tar for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm:tar:5.0.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/tar@5.0.11", + "externalReferences": [ + { + "url": "https://github.com/npm/node-tar.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tar@6.1.11?package-id=97823590d9da9c9f", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "tar", + "version": "6.1.11", + "description": "tar for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm:tar:6.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/tar@6.1.11", + "externalReferences": [ + { + "url": "https://github.com/npm/node-tar.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/text-table@0.2.0?package-id=a124be9ad599668f", + "author": "James Halliday (http://substack.net)", + "name": "text-table", + "version": "0.2.0", + "description": "borderless text tables with alignment", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:text-table:text-table:0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/text-table@0.2.0", + "externalReferences": [ + { + "url": "git://github.com/substack/text-table.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/text-table", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/through2@3.0.2?package-id=c9d63645e4d241f4", + "author": "Rod Vagg (https://github.com/rvagg)", + "name": "through2", + "version": "3.0.2", + "description": "A tiny wrapper around Node.js streams.Transform (Streams2/3) to avoid explicit subclassing noise", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:through2:through2:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/through2@3.0.2", + "externalReferences": [ + { + "url": "https://github.com/rvagg/through2.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tiny-relative-date@1.3.0?package-id=bc2a707c455ba496", + "author": "Joseph Wynn (https://wildlyinaccurate.com/)", + "name": "tiny-relative-date", + "version": "1.3.0", + "description": "Tiny function that provides relative, human-readable dates.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tiny-relative-date:tiny-relative-date:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tiny-relative-date@1.3.0", + "externalReferences": [ + { + "url": "https://github.com/wildlyinaccurate/relative-date.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tmp@0.0.33?package-id=2d9105ed84cc1ba8", + "author": "KARASZI István (http://raszi.hu/)", + "name": "tmp", + "version": "0.0.33", + "description": "Temporary file and directory creator", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:raszi:tmp:0.0.33:*:*:*:*:*:*:*", + "purl": "pkg:npm/tmp@0.0.33", + "externalReferences": [ + { + "url": "raszi/node-tmp", + "type": "distribution" + }, + { + "url": "http://github.com/raszi/node-tmp", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/to-regex-range@5.0.1?package-id=c4db027f11f76276", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "to-regex-range", + "version": "5.0.1", + "description": "Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:to-regex-range:to-regex-range:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/to-regex-range@5.0.1", + "externalReferences": [ + { + "url": "micromatch/to-regex-range", + "type": "distribution" + }, + { + "url": "https://github.com/micromatch/to-regex-range", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/treeverse@2.0.0?package-id=283d5c0745aa3ce7", + "author": "GitHub Inc.", + "name": "treeverse", + "version": "2.0.0", + "description": "Walk any kind of tree structure depth- or breadth-first. Supports promises and advanced map-reduce operations with a very small API.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:treeverse:treeverse:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/treeverse@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/treeverse.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/type-is@1.6.18?package-id=5bdf50fc9a89514f", + "name": "type-is", + "version": "1.6.18", + "description": "Infer the content-type of a request.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:type-is:type-is:1.6.18:*:*:*:*:*:*:*", + "purl": "pkg:npm/type-is@1.6.18", + "externalReferences": [ + { + "url": "jshttp/type-is", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unique-filename@2.0.1?package-id=ddbea63cf5bc0343", + "author": "GitHub Inc.", + "name": "unique-filename", + "version": "2.0.1", + "description": "Generate a unique filename for use in temporary directories or caches.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:unique-filename:unique-filename:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-filename@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/unique-filename.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/unique-filename", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unique-slug@3.0.0?package-id=a61e6b90d7850f42", + "author": "GitHub Inc.", + "name": "unique-slug", + "version": "3.0.0", + "description": "Generate a unique character string suitible for use in files and URLs.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:unique-slug:unique-slug:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-slug@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/unique-slug.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/universalify@0.1.2?package-id=69eed8a5747afb4f", + "author": "Ryan Zimmerman ", + "name": "universalify", + "version": "0.1.2", + "description": "Make a callback- or promise-based function support both promises and callbacks.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:universalify:universalify:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/universalify@0.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/RyanZim/universalify.git", + "type": "distribution" + }, + { + "url": "https://github.com/RyanZim/universalify#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/universalify@2.0.0?package-id=3e639cd947ec6ac2", + "author": "Ryan Zimmerman ", + "name": "universalify", + "version": "2.0.0", + "description": "Make a callback- or promise-based function support both promises and callbacks.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:universalify:universalify:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/universalify@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/RyanZim/universalify.git", + "type": "distribution" + }, + { + "url": "https://github.com/RyanZim/universalify#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unpipe@1.0.0?package-id=c584cebc0a9824f4", + "author": "Douglas Christopher Wilson ", + "name": "unpipe", + "version": "1.0.0", + "description": "Unpipe a stream from all destinations", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unpipe:unpipe:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unpipe@1.0.0", + "externalReferences": [ + { + "url": "stream-utils/unpipe", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/util@0.12.5?package-id=c6cd72c14d2409e5", + "author": "Joyent (http://www.joyent.com)", + "name": "util", + "version": "0.12.5", + "description": "Node.js's util module for all engines", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:browserify:util:0.12.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/util@0.12.5", + "externalReferences": [ + { + "url": "git://github.com/browserify/node-util", + "type": "distribution" + }, + { + "url": "https://github.com/browserify/node-util", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=ecf076cf26fe73d0", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "util-deprecate", + "version": "1.0.2", + "description": "The Node.js `util.deprecate()` function with browser support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=78a196ea3de81330", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "util-deprecate", + "version": "1.0.2", + "description": "The Node.js `util.deprecate()` function with browser support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/utils-merge@1.0.1?package-id=62471f9f4fe7cedd", + "author": "Jared Hanson (http://www.jaredhanson.net/)", + "name": "utils-merge", + "version": "1.0.1", + "description": "merge() utility function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jaredhanson:utils-merge:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/utils-merge@1.0.1", + "externalReferences": [ + { + "url": "git://github.com/jaredhanson/utils-merge.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uuid@3.4.0?package-id=3a7981c4b1d9183e", + "name": "uuid", + "version": "3.4.0", + "description": "RFC4122 (v1, v4, and v5) UUIDs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:uuidjs:uuid:3.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/uuid@3.4.0", + "externalReferences": [ + { + "url": "https://github.com/uuidjs/uuid.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4?package-id=fa90b625ec15ead", + "author": "Kyle E. Mitchell (https://kemitchell.com)", + "name": "validate-npm-package-license", + "version": "3.0.4", + "description": "Give me a string and I'll tell you if it's a valid npm package license string", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:validate-npm-package-license:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/validate-npm-package-license@3.0.4", + "externalReferences": [ + { + "url": "kemitchell/validate-npm-package-license.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/validate-npm-package-name@4.0.0?package-id=dc3a9f2b7a700330", + "author": "GitHub Inc.", + "name": "validate-npm-package-name", + "version": "4.0.0", + "description": "Give me a string and I'll tell you if it's a valid npm package name", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:validate-npm-package-name:validate-npm-package-name:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/validate-npm-package-name@4.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/validate-npm-package-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/validate-npm-package-name", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/vary@1.1.2?package-id=7021c84ca0665099", + "author": "Douglas Christopher Wilson ", + "name": "vary", + "version": "1.1.2", + "description": "Manipulate the HTTP Vary header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vary:vary:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/vary@1.1.2", + "externalReferences": [ + { + "url": "jshttp/vary", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/walk-up-path@1.0.0?package-id=9a8dd6f20b12184f", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "walk-up-path", + "version": "1.0.0", + "description": "Given a path string, return a generator that walks up the path, emitting each dirname.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:walk-up-path:walk-up-path:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/walk-up-path@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/walk-up-path", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wcwidth@1.0.1?package-id=ee54c63162090e16", + "author": "Tim Oxley", + "name": "wcwidth", + "version": "1.0.1", + "description": "Port of C's wcwidth() and wcswidth()", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:timoxley:wcwidth:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/wcwidth@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/timoxley/wcwidth.git", + "type": "distribution" + }, + { + "url": "https://github.com/timoxley/wcwidth#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/web-encoding@1.1.5?package-id=b39ba08eff5d79dd", + "author": "Irakli Gozalishvili ", + "name": "web-encoding", + "version": "1.1.5", + "description": "TextEncoder and TextDecoder APIs from Encoding Standard APIs in a universal package", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:web-encoding:web-encoding:1.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/web-encoding@1.1.5", + "externalReferences": [ + { + "url": "https://github.com/gozala/web-encoding", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/which@1.3.1?package-id=8e09a57185e656b5", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "which", + "version": "1.3.1", + "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:which:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/which@1.3.1", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-which.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/which@2.0.2?package-id=1d2beaa974655b97", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "which", + "version": "2.0.2", + "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:which:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/which@2.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-which.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/which-typed-array@1.1.9?package-id=dbe8c85dce455ad6", + "author": "Jordan Harband (http://ljharb.codes)", + "name": "which-typed-array", + "version": "1.1.9", + "description": "Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:which-typed-array:which-typed-array:1.1.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/which-typed-array@1.1.9", + "externalReferences": [ + { + "url": "git://github.com/inspect-js/which-typed-array.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wide-align@1.1.5?package-id=f0bd5200e29a21be", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "wide-align", + "version": "1.1.5", + "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wide-align:wide-align:1.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/wide-align@1.1.5", + "externalReferences": [ + { + "url": "https://github.com/iarna/wide-align", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=88b7c304022dd8b8", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "wrappy", + "version": "1.0.2", + "description": "Callback wrapping utility", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/wrappy", + "type": "distribution" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=76aba5d70ffb4efb", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "wrappy", + "version": "1.0.2", + "description": "Callback wrapping utility", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/wrappy", + "type": "distribution" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=ed5926f6f76e646b", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "wrappy", + "version": "1.0.2", + "description": "Callback wrapping utility", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/wrappy", + "type": "distribution" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/write-file-atomic@4.0.2?package-id=401a0baef0d4f8db", + "author": "GitHub Inc.", + "name": "write-file-atomic", + "version": "4.0.2", + "description": "Write files in an atomic fashion w/configurable ownership", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:write-file-atomic:write-file-atomic:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/write-file-atomic@4.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/write-file-atomic.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/write-file-atomic", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/xml@1.0.1?package-id=e28f883b3dca5ec8", + "author": "Dylan Greene (https://github.com/dylang)", + "name": "xml", + "version": "1.0.1", + "description": "Fast and simple xml generator. Supports attributes, CDATA, etc. Includes tests and examples.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dylang:xml:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/xml@1.0.1", + "externalReferences": [ + { + "url": "http://github.com/dylang/node-xml", + "type": "distribution" + }, + { + "url": "http://github.com/dylang/node-xml", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/xml2js@0.4.23?package-id=cea6836bf65243ea", + "author": "Marek Kubica (https://xivilization.net)", + "name": "xml2js", + "version": "0.4.23", + "description": "Simple XML to JavaScript object converter.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:Leonidas-from-XIV:xml2js:0.4.23:*:*:*:*:*:*:*", + "purl": "pkg:npm/xml2js@0.4.23", + "externalReferences": [ + { + "url": "https://github.com/Leonidas-from-XIV/node-xml2js.git", + "type": "distribution" + }, + { + "url": "https://github.com/Leonidas-from-XIV/node-xml2js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/xmlbuilder@11.0.1?package-id=b2ed598d8a366a07", + "author": "Ozgur Ozcitak ", + "name": "xmlbuilder", + "version": "11.0.1", + "description": "An XML builder for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:xmlbuilder:xmlbuilder:11.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/xmlbuilder@11.0.1", + "externalReferences": [ + { + "url": "git://github.com/oozcitak/xmlbuilder-js.git", + "type": "distribution" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder-js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yallist@4.0.0?package-id=c5b3d2829d8d6201", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "yallist", + "version": "4.0.0", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yallist@4.0.0?package-id=962f7b1d680d2d52", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "yallist", + "version": "4.0.0", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yaml@1.10.2?package-id=b9b443c37bc128d1", + "author": "Eemeli Aro ", + "name": "yaml", + "version": "1.10.2", + "description": "JavaScript parser and stringifier for YAML", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yaml:yaml:1.10.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/yaml@1.10.2", + "externalReferences": [ + { + "url": "github:eemeli/yaml", + "type": "distribution" + }, + { + "url": "https://eemeli.org/yaml/v1/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yarn@1.22.19?package-id=f2b974a78000b26b", + "name": "yarn", + "version": "1.22.19", + "description": "📦🐈 Fast, reliable, and secure dependency management.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:yarn:yarn:1.22.19:*:*:*:*:*:*:*", + "purl": "pkg:npm/yarn@1.22.19", + "externalReferences": [ + { + "url": "yarnpkg/yarn", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.12-r3?arch=x86_64&distro=alpine-3.16.5&package-id=75f0d92f695b4303", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.12-r3", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.12-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.12-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.16.5", + "description": "Alpine Linux v3.16", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.16.5" + }, + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40colors/colors@1.5.0?package-id=1e63eea14f4d61ef", + "author": "DABH", + "name": "@colors/colors", + "version": "1.5.0", + "description": "get colors in your node.js console", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@colors\\/colors:\\@colors\\/colors:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40colors/colors@1.5.0", + "externalReferences": [ + { + "url": "http://github.com/DABH/colors.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/DABH/colors.js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40gar/promisify@1.1.3?package-id=6fab079a7c06c1de", + "author": "Gar ", + "name": "@gar/promisify", + "version": "1.1.3", + "description": "Promisify an entire class or object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@gar\\/promisify:\\@gar\\/promisify:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40gar/promisify@1.1.3", + "externalReferences": [ + { + "url": "https://github.com/wraithgar/gar-promisify.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40isaacs/string-locale-compare@1.1.0?package-id=fbe0dcb344723a67", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "@isaacs/string-locale-compare", + "version": "1.1.0", + "description": "Compare strings with Intl.Collator if available, falling back to String.localeCompare otherwise", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@isaacs\\/string-locale-compare:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40isaacs/string-locale-compare@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/string-locale-compare", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/arborist@5.6.3?package-id=60e008e2ceb94218", + "author": "GitHub Inc.", + "name": "@npmcli/arborist", + "version": "5.6.3", + "description": "Manage node_modules trees", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/arborist:\\@npmcli\\/arborist:5.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/arborist@5.6.3", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/ci-detect@2.0.0?package-id=8a40a38b900bcf1d", + "author": "GitHub Inc.", + "name": "@npmcli/ci-detect", + "version": "2.0.0", + "description": "Detect what kind of CI environment the program is in", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/ci-detect:\\@npmcli\\/ci-detect:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/ci-detect@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/ci-detect.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/config@4.2.2?package-id=a02559bafd837882", + "author": "GitHub Inc.", + "name": "@npmcli/config", + "version": "4.2.2", + "description": "Configuration management for the npm cli", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/config:\\@npmcli\\/config:4.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/config@4.2.2", + "externalReferences": [ + { + "url": "https://github.com/npm/config.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/disparity-colors@2.0.0?package-id=3e63715f5300a753", + "author": "GitHub Inc.", + "name": "@npmcli/disparity-colors", + "version": "2.0.0", + "description": "Colorizes unified diff output", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/disparity-colors:\\@npmcli\\/disparity-colors:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/disparity-colors@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/disparity-colors.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/fs@2.1.2?package-id=cd19a20b4774187f", + "author": "GitHub Inc.", + "name": "@npmcli/fs", + "version": "2.1.2", + "description": "filesystem utilities for the npm cli", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/fs:\\@npmcli\\/fs:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/fs@2.1.2", + "externalReferences": [ + { + "url": "https://github.com/npm/fs.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/git@3.0.2?package-id=34b16cf601f612a9", + "author": "GitHub Inc.", + "name": "@npmcli/git", + "version": "3.0.2", + "description": "a util for spawning git from npm CLI contexts", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/git:\\@npmcli\\/git:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/git@3.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/git.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/installed-package-contents@1.0.7?package-id=8562f58f85ba40df", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "@npmcli/installed-package-contents", + "version": "1.0.7", + "description": "Get the list of files installed in a package in node_modules, including bundled dependencies", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/installed-package-contents:\\@npmcli\\/installed-package-contents:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/installed-package-contents@1.0.7", + "externalReferences": [ + { + "url": "git+https://github.com/npm/installed-package-contents", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/map-workspaces@2.0.4?package-id=471052449bb417cb", + "author": "GitHub Inc.", + "name": "@npmcli/map-workspaces", + "version": "2.0.4", + "description": "Retrieves a name:pathname Map for a given workspaces config", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/map-workspaces:\\@npmcli\\/map-workspaces:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/map-workspaces@2.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/map-workspaces.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/metavuln-calculator@3.1.1?package-id=5a94ed44a78625cd", + "author": "GitHub Inc.", + "name": "@npmcli/metavuln-calculator", + "version": "3.1.1", + "description": "Calculate meta-vulnerabilities from package security advisories", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/metavuln-calculator:\\@npmcli\\/metavuln-calculator:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/metavuln-calculator@3.1.1", + "externalReferences": [ + { + "url": "https://github.com/npm/metavuln-calculator.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/move-file@2.0.1?package-id=76e6ffad7033dea3", + "author": "GitHub Inc.", + "name": "@npmcli/move-file", + "version": "2.0.1", + "description": "move a file (fork of move-file)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/move-file:\\@npmcli\\/move-file:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/move-file@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/move-file.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/name-from-folder@1.0.1?package-id=bda8c8030d6b515f", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "@npmcli/name-from-folder", + "version": "1.0.1", + "description": "Get the package name from a folder path", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/name-from-folder:\\@npmcli\\/name-from-folder:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/name-from-folder@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/name-from-folder", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/node-gyp@2.0.0?package-id=c9fb094d61d2ac04", + "author": "GitHub Inc.", + "name": "@npmcli/node-gyp", + "version": "2.0.0", + "description": "Tools for dealing with node-gyp packages", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/node-gyp:\\@npmcli\\/node-gyp:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/node-gyp@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/node-gyp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/package-json@2.0.0?package-id=63189c571859bb1a", + "author": "GitHub Inc.", + "name": "@npmcli/package-json", + "version": "2.0.0", + "description": "Programmatic API to update package.json", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/package-json:\\@npmcli\\/package-json:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/package-json@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/package-json.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/promise-spawn@3.0.0?package-id=426c6e033be010cb", + "author": "GitHub Inc.", + "name": "@npmcli/promise-spawn", + "version": "3.0.0", + "description": "spawn processes the way the npm cli likes to do", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/promise-spawn:\\@npmcli\\/promise-spawn:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/promise-spawn@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/promise-spawn.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/query@1.2.0?package-id=e71e78476048755c", + "author": "GitHub Inc.", + "name": "@npmcli/query", + "version": "1.2.0", + "description": "npm query parser and tools", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/query:\\@npmcli\\/query:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/query@1.2.0", + "externalReferences": [ + { + "url": "https://github.com/npm/query.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/run-script@4.2.1?package-id=a13d191f5a0789d1", + "author": "GitHub Inc.", + "name": "@npmcli/run-script", + "version": "4.2.1", + "description": "Run a lifecycle script for a package (descendant of npm-lifecycle)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/run-script:\\@npmcli\\/run-script:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/run-script@4.2.1", + "externalReferences": [ + { + "url": "https://github.com/npm/run-script.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40tootallnate/once@2.0.0?package-id=5edbc75b01ae9167", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "@tootallnate/once", + "version": "2.0.0", + "description": "Creates a Promise that waits for a single event", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@tootallnate\\/once:\\@tootallnate\\/once:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40tootallnate/once@2.0.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/once.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/abbrev@1.1.1?package-id=98be1cad3f4d1d11", + "author": "Isaac Z. Schlueter ", + "name": "abbrev", + "version": "1.1.1", + "description": "Like ruby's abbrev module, but in js", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:abbrev:abbrev:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/abbrev@1.1.1", + "externalReferences": [ + { + "url": "http://github.com/isaacs/abbrev-js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/addon-mqws@1.0.0?package-id=fa085fd946d6629c", + "name": "addon-mqws", + "version": "1.0.0", + "description": "addon-mqws", + "cpe": "cpe:2.3:a:addon-mqws:addon-mqws:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/addon-mqws@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/agent-base@6.0.2?package-id=4b0b5c9ee7d8fc08", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "agent-base", + "version": "6.0.2", + "description": "Turn a function into an `http.Agent` instance", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:TooTallNate:agent-base:6.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/agent-base@6.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/agentkeepalive@4.2.1?package-id=37fa9bcd67324d6e", + "author": "fengmk2 (https://fengmk2.com)", + "name": "agentkeepalive", + "version": "4.2.1", + "description": "Missing keepalive http.Agent", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:agentkeepalive:agentkeepalive:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/agentkeepalive@4.2.1", + "externalReferences": [ + { + "url": "git://github.com/node-modules/agentkeepalive.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aggregate-error@3.1.0?package-id=b1b74a520919b83f", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "aggregate-error", + "version": "3.1.0", + "description": "Create an error from multiple errors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:aggregate-error:aggregate-error:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aggregate-error@3.1.0", + "externalReferences": [ + { + "url": "sindresorhus/aggregate-error", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.2.0-r23?arch=x86_64&distro=alpine-3.16.5&package-id=61eac5ce8105d394", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.2.0-r23", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.2.0-r23:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.2.0-r23?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout-data@3.2.0-r23?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.16.5&package-id=e8c6fcc3a282ed4f", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout-data", + "version": "3.2.0-r23", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.2.0-r23:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout-data@3.2.0-r23?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.16.5&package-id=82d183eb300978cc", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.4-r1", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@5.0.1?package-id=fe78ee8372cda3ef", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "5.0.1", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@5.0.1", + "externalReferences": [ + { + "url": "chalk/ansi-regex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-styles@4.3.0?package-id=e3f310fd74532509", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-styles", + "version": "4.3.0", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@4.3.0", + "externalReferences": [ + { + "url": "chalk/ansi-styles", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.9-r3?arch=x86_64&distro=alpine-3.16.5&package-id=42d502b764a37310", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.12.9-r3", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.12.9-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.12.9-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aproba@2.0.0?package-id=d11111a04d810227", + "author": "Rebecca Turner ", + "name": "aproba", + "version": "2.0.0", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:aproba:aproba:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aproba@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/iarna/aproba", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/archy@1.0.0?package-id=a1e7fd77fec54095", + "author": "James Halliday (http://substack.net)", + "name": "archy", + "version": "1.0.0", + "description": "render nested hierarchies `npm ls` style with unicode pipes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:substack:archy:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/archy@1.0.0", + "externalReferences": [ + { + "url": "http://github.com/substack/node-archy.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/are-we-there-yet@3.0.1?package-id=d7ea73c2e385c95d", + "author": "GitHub Inc.", + "name": "are-we-there-yet", + "version": "3.0.1", + "description": "Keep track of the overall completion of many disparate processes", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:are-we-there-yet:are-we-there-yet:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/are-we-there-yet@3.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/are-we-there-yet.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/are-we-there-yet", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asap@2.0.6?package-id=4069b89e24646503", + "name": "asap", + "version": "2.0.6", + "description": "High-priority task queue for Node.js and browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:kriskowal:asap:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/asap@2.0.6", + "externalReferences": [ + { + "url": "https://github.com/kriskowal/asap.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/async-limiter@1.0.1?package-id=4f5d33b9cb28984b", + "name": "async-limiter", + "version": "1.0.1", + "description": "asynchronous function queue with adjustable concurrency", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:async-limiter:async-limiter:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/async-limiter@1.0.1", + "externalReferences": [ + { + "url": "https://github.com/strml/async-limiter.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/balanced-match@1.0.2?package-id=c15b2106d0ae19d4", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "balanced-match", + "version": "1.0.2", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bin-links@3.0.3?package-id=605ade84572e7fb", + "author": "GitHub Inc.", + "name": "bin-links", + "version": "3.0.3", + "description": "JavaScript package binary linker", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:bin-links:bin-links:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/bin-links@3.0.3", + "externalReferences": [ + { + "url": "https://github.com/npm/bin-links.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/binary-extensions@2.2.0?package-id=2ddda84d3ad7f3e1", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "binary-extensions", + "version": "2.2.0", + "description": "List of binary file extensions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:binary-extensions:binary-extensions:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/binary-extensions@2.2.0", + "externalReferences": [ + { + "url": "sindresorhus/binary-extensions", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=a36ca63616a6d457", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "1.1.11", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=8aefa0d5bf7ea5ce", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "1.1.11", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@2.0.1?package-id=70d44e2ab0a06da3", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "2.0.1", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@2.0.1", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-equal-constant-time@1.0.1?package-id=10d782a173248da8", + "author": "GoInstant Inc., a salesforce.com company", + "name": "buffer-equal-constant-time", + "version": "1.0.1", + "description": "Constant-time comparison of Buffers", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:buffer-equal-constant-time:buffer-equal-constant-time:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-equal-constant-time@1.0.1", + "externalReferences": [ + { + "url": "git@github.com:goinstant/buffer-equal-constant-time.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/builtins@5.0.1?package-id=af6ac207a0c6926d", + "name": "builtins", + "version": "5.0.1", + "description": "List of node.js builtin modules", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:builtins:builtins:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/builtins@5.0.1", + "externalReferences": [ + { + "url": "juliangruber/builtins", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "e14718c64f5147f4", + "name": "busybox", + "version": "1.35.0", + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=alpine-3.16.5&package-id=4b48ef6f6b983526", + "publisher": "Sören Tempel ", + "name": "busybox", + "version": "1.35.0-r17", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0-r17:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20220614-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.16.5&package-id=30622a1848b22bca", + "publisher": "Natanael Copa ", + "name": "ca-certificates-bundle", + "version": "20220614-r0", + "description": "Pre generated bundle of Mozilla certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20220614-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-bundle@20220614-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cacache@16.1.3?package-id=4e055fb1e595c11", + "author": "GitHub Inc.", + "name": "cacache", + "version": "16.1.3", + "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cacache:cacache:16.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/cacache@16.1.3", + "externalReferences": [ + { + "url": "https://github.com/npm/cacache.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chalk@4.1.2?package-id=b12178723b56594f", + "name": "chalk", + "version": "4.1.2", + "description": "Terminal string styling done right", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chalk:chalk:4.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/chalk@4.1.2", + "externalReferences": [ + { + "url": "chalk/chalk", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chownr@2.0.0?package-id=b5088c57ceda122f", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "chownr", + "version": "2.0.0", + "description": "like `chown -R`", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:chownr:chownr:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/chownr@2.0.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/chownr.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cidr-regex@3.1.1?package-id=be2d165b38649e26", + "author": "silverwind ", + "name": "cidr-regex", + "version": "3.1.1", + "description": "Regular expression for matching IP addresses in CIDR notation", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:cidr-regex:cidr-regex:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/cidr-regex@3.1.1", + "externalReferences": [ + { + "url": "silverwind/cidr-regex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/clean-stack@2.2.0?package-id=9a5c51e7acb4b115", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "clean-stack", + "version": "2.2.0", + "description": "Clean up error stack traces", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clean-stack:clean-stack:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/clean-stack@2.2.0", + "externalReferences": [ + { + "url": "sindresorhus/clean-stack", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-columns@4.0.0?package-id=61a1dfb277c2e6f7", + "author": "Shannon Moeller (http://shannonmoeller.com)", + "name": "cli-columns", + "version": "4.0.0", + "description": "Columnated lists for the CLI.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shannonmoeller:cli-columns:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-columns@4.0.0", + "externalReferences": [ + { + "url": "shannonmoeller/cli-columns", + "type": "distribution" + }, + { + "url": "https://github.com/shannonmoeller/cli-columns#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-table3@0.6.2?package-id=c77ee2194bd52f3d", + "author": "James Talmage", + "name": "cli-table3", + "version": "0.6.2", + "description": "Pretty unicode tables for the command line. Based on the original cli-table.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cli-table3:cli-table3:0.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-table3@0.6.2", + "externalReferences": [ + { + "url": "https://github.com/cli-table/cli-table3.git", + "type": "distribution" + }, + { + "url": "https://github.com/cli-table/cli-table3", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/clone@1.0.4?package-id=44b571b36478d30c", + "author": "Paul Vorbach (http://paul.vorba.ch/)", + "name": "clone", + "version": "1.0.4", + "description": "deep cloning of objects and arrays", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clone:clone:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/clone@1.0.4", + "externalReferences": [ + { + "url": "git://github.com/pvorb/node-clone.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cmd-shim@5.0.0?package-id=6701e31fdf422502", + "author": "GitHub Inc.", + "name": "cmd-shim", + "version": "5.0.0", + "description": "Used in npm for command line application support", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cmd-shim:cmd-shim:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cmd-shim@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/cmd-shim.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-convert@2.0.1?package-id=2be936aafe32cf82", + "author": "Heather Arthur ", + "name": "color-convert", + "version": "2.0.1", + "description": "Plain color conversion functions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@2.0.1", + "externalReferences": [ + { + "url": "Qix-/color-convert", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-name@1.1.4?package-id=b14fd2e37cdab40f", + "author": "DY ", + "name": "color-name", + "version": "1.1.4", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.4", + "externalReferences": [ + { + "url": "git@github.com:colorjs/color-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/colorjs/color-name", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-support@1.1.3?package-id=33c3f3c0dd43aff8", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "color-support", + "version": "1.1.3", + "description": "A module which will endeavor to guess your terminal's level of color support.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:color-support:color-support:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-support@1.1.3", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/color-support.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/columnify@1.6.0?package-id=fc90187aad4a6027", + "author": "Tim Oxley", + "name": "columnify", + "version": "1.6.0", + "description": "Render data in text columns. Supports in-column text-wrap.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:columnify:columnify:1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/columnify@1.6.0", + "externalReferences": [ + { + "url": "git://github.com/timoxley/columnify.git", + "type": "distribution" + }, + { + "url": "https://github.com/timoxley/columnify", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/common-ancestor-path@1.0.1?package-id=4296edf5ae5437c0", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "common-ancestor-path", + "version": "1.0.1", + "description": "Find the common ancestor of 2 or more paths on Windows or Unix", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:common-ancestor-path:common-ancestor-path:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/common-ancestor-path@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/common-ancestor-path", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=bdf14b65a5715b98", + "author": "James Halliday (http://substack.net)", + "name": "concat-map", + "version": "0.0.1", + "description": "concatenative mapdashery", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/console-control-strings@1.1.0?package-id=f5b1c468fcf0a37a", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "console-control-strings", + "version": "1.1.0", + "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:console-control-strings:console-control-strings:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/console-control-strings@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/iarna/console-control-strings", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/core-util-is@1.0.2?package-id=b29494ec5df233dd", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "core-util-is", + "version": "1.0.2", + "description": "The `util.is*` functions introduced in Node v0.12.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:core-util-is:core-util-is:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/core-util-is@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/core-util-is", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/corepack@0.17.0?package-id=9d78c3bef9c05db3", + "name": "corepack", + "version": "0.17.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:corepack:corepack:0.17.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/corepack@0.17.0", + "externalReferences": [ + { + "url": "https://github.com/nodejs/corepack.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/corepack#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cssesc@3.0.0?package-id=91a6a74efc4b88ba", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "cssesc", + "version": "3.0.0", + "description": "A JavaScript library for escaping CSS strings and identifiers while generating the shortest possible ASCII-only output.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mathiasbynens:cssesc:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cssesc@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/mathiasbynens/cssesc.git", + "type": "distribution" + }, + { + "url": "https://mths.be/cssesc", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@4.3.4?package-id=744fe4d31961f128", + "author": "Josh Junon ", + "name": "debug", + "version": "4.3.4", + "description": "Lightweight debugging utility for Node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debug-js:debug:4.3.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@4.3.4", + "externalReferences": [ + { + "url": "git://github.com/debug-js/debug.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debuglog@1.0.1?package-id=de8cab91bb3727ee", + "author": "Sam Roberts ", + "name": "debuglog", + "version": "1.0.1", + "description": "backport of util.debuglog from node v0.11", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sam-github:debuglog:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/debuglog@1.0.1", + "externalReferences": [ + { + "url": "https://github.com/sam-github/node-debuglog.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/defaults@1.0.3?package-id=539a687773af61fe", + "author": "Elijah Insua ", + "name": "defaults", + "version": "1.0.3", + "description": "merge single level defaults over a config object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:defaults:defaults:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/defaults@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/tmpvar/defaults.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/delegates@1.0.0?package-id=ed0c22d60c260f5c", + "name": "delegates", + "version": "1.0.0", + "description": "delegate methods and accessors to another property", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:delegates:delegates:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/delegates@1.0.0", + "externalReferences": [ + { + "url": "visionmedia/node-delegates", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/depd@1.1.2?package-id=8f51ca0c72f74b81", + "author": "Douglas Christopher Wilson ", + "name": "depd", + "version": "1.1.2", + "description": "Deprecate all the things", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:depd:depd:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/depd@1.1.2", + "externalReferences": [ + { + "url": "dougwilson/nodejs-depd", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dezalgo@1.0.4?package-id=d8ccca0e738815bf", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "dezalgo", + "version": "1.0.4", + "description": "Contain async insanity so that the dark pony lord doesn't eat souls", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:dezalgo:dezalgo:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/dezalgo@1.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/dezalgo", + "type": "distribution" + }, + { + "url": "https://github.com/npm/dezalgo", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/diff@5.1.0?package-id=d6e2c2128602c71d", + "name": "diff", + "version": "5.1.0", + "description": "A javascript text diff implementation.", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:kpdecker:diff:5.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/diff@5.1.0", + "externalReferences": [ + { + "url": "git://github.com/kpdecker/jsdiff.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/duplexify@3.7.1?package-id=b65a8a6ad2a9c8bb", + "author": "Mathias Buus", + "name": "duplexify", + "version": "3.7.1", + "description": "Turn a writable and readable stream into a streams2 duplex stream with support for async initialization and streams1/streams2 input", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:duplexify:duplexify:3.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/duplexify@3.7.1", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/duplexify", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/duplexify", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ecdsa-sig-formatter@1.0.11?package-id=641fb1a75989c2b9", + "author": "D2L Corporation", + "name": "ecdsa-sig-formatter", + "version": "1.0.11", + "description": "Translate ECDSA signatures between ASN.1/DER and JOSE-style concatenation", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:ecdsa-sig-formatter:ecdsa-sig-formatter:1.0.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/ecdsa-sig-formatter@1.0.11", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/Brightspace/node-ecdsa-sig-formatter.git", + "type": "distribution" + }, + { + "url": "https://github.com/Brightspace/node-ecdsa-sig-formatter#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/emoji-regex@8.0.0?package-id=6bb38678688ed46f", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "emoji-regex", + "version": "8.0.0", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mathiasbynens:emoji-regex:8.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/emoji-regex@8.0.0", + "externalReferences": [ + { + "url": "https://github.com/mathiasbynens/emoji-regex.git", + "type": "distribution" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/encoding@0.1.13?package-id=e65b6a429cd40212", + "author": "Andris Reinman", + "name": "encoding", + "version": "0.1.13", + "description": "Convert encodings, uses iconv-lite", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:encoding:encoding:0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/encoding@0.1.13", + "externalReferences": [ + { + "url": "https://github.com/andris9/encoding.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/end-of-stream@1.4.4?package-id=aad6fd45daea5639", + "author": "Mathias Buus ", + "name": "end-of-stream", + "version": "1.4.4", + "description": "Call a callback when a readable/writable/duplex stream has completed or failed.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:end-of-stream:end-of-stream:1.4.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/end-of-stream@1.4.4", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/end-of-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/end-of-stream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/env-paths@2.2.1?package-id=d14634fe75802cac", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "env-paths", + "version": "2.2.1", + "description": "Get paths for storing things like data, config, cache, etc", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:env-paths:env-paths:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/env-paths@2.2.1", + "externalReferences": [ + { + "url": "sindresorhus/env-paths", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/err-code@2.0.3?package-id=60b62094686938a4", + "author": "IndigoUnited (http://indigounited.com)", + "name": "err-code", + "version": "2.0.3", + "description": "Create an error with a code", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:IndigoUnited:err-code:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/err-code@2.0.3", + "externalReferences": [ + { + "url": "git://github.com/IndigoUnited/js-err-code.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fastest-levenshtein@1.0.12?package-id=f703cf6832613e31", + "author": "Kasper U. Weihe", + "name": "fastest-levenshtein", + "version": "1.0.12", + "description": "Fastest Levenshtein distance implementation in JS.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fastest-levenshtein:fastest-levenshtein:1.0.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/fastest-levenshtein@1.0.12", + "externalReferences": [ + { + "url": "git+https://github.com/ka-weihe/fastest-levenshtein.git", + "type": "distribution" + }, + { + "url": "https://github.com/ka-weihe/fastest-levenshtein#README", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-minipass@2.1.0?package-id=398fbbb28fb7e1f4", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs-minipass", + "version": "2.1.0", + "description": "fs read and write streams based on minipass", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-minipass@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=21800424481533b1", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs.realpath", + "version": "1.0.0", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/function-bind@1.1.1?package-id=44648bf09db15f6c", + "author": "Raynos ", + "name": "function-bind", + "version": "1.1.1", + "description": "Implementation of Function.prototype.bind", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:function-bind:function-bind:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/function-bind@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/Raynos/function-bind.git", + "type": "distribution" + }, + { + "url": "https://github.com/Raynos/function-bind", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/gauge@4.0.4?package-id=fc4632a6e143d550", + "author": "GitHub Inc.", + "name": "gauge", + "version": "4.0.4", + "description": "A terminal based horizontal gauge", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:gauge:gauge:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/gauge@4.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/gauge.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/gauge", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.2.3?package-id=b961e222f6e54786", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.2.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.2.3?package-id=37af2473a85a6fa0", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.2.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@8.0.3?package-id=f9282babaa70cabf", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "8.0.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:8.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@8.0.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/graceful-fs@4.2.10?package-id=9591c6b5bd9602cc", + "name": "graceful-fs", + "version": "4.2.10", + "description": "A drop-in replacement for fs, making various improvements.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/graceful-fs@4.2.10", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-graceful-fs", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has@1.0.3?package-id=57072cf8ae347274", + "author": "Thiago de Arruda ", + "name": "has", + "version": "1.0.3", + "description": "Object.prototype.hasOwnProperty.call shortcut", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tarruda:has:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/has@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/tarruda/has.git", + "type": "distribution" + }, + { + "url": "https://github.com/tarruda/has", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-flag@4.0.0?package-id=1ac717b55f99f4f2", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "has-flag", + "version": "4.0.0", + "description": "Check if argv has a specific flag", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-flag:has-flag:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-flag@4.0.0", + "externalReferences": [ + { + "url": "sindresorhus/has-flag", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-unicode@2.0.1?package-id=28dbbd6e7951181f", + "author": "Rebecca Turner ", + "name": "has-unicode", + "version": "2.0.1", + "description": "Try to guess if your terminal supports unicode", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:has-unicode:has-unicode:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-unicode@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/iarna/has-unicode", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/has-unicode", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/hosted-git-info@5.2.1?package-id=daac03af08cd11f6", + "author": "GitHub Inc.", + "name": "hosted-git-info", + "version": "5.2.1", + "description": "Provides metadata and conversions from repository urls for GitHub, Bitbucket and GitLab", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:hosted-git-info:hosted-git-info:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/hosted-git-info@5.2.1", + "externalReferences": [ + { + "url": "https://github.com/npm/hosted-git-info.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/hosted-git-info", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-cache-semantics@4.1.1?package-id=916aa3ebe914a835", + "author": "Kornel Lesiński (https://kornel.ski/)", + "name": "http-cache-semantics", + "version": "4.1.1", + "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:http-cache-semantics:http-cache-semantics:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-cache-semantics@4.1.1", + "externalReferences": [ + { + "url": "https://github.com/kornelski/http-cache-semantics.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-proxy-agent@5.0.0?package-id=af3d467415b1e643", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "http-proxy-agent", + "version": "5.0.0", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-proxy-agent:http-proxy-agent:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-proxy-agent@5.0.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-http-proxy-agent.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/https-proxy-agent@5.0.1?package-id=b2694aac4dc305de", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "https-proxy-agent", + "version": "5.0.1", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:https-proxy-agent:https-proxy-agent:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/https-proxy-agent@5.0.1", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-https-proxy-agent.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/humanize-ms@1.2.1?package-id=d773c44dd2f9a86d", + "author": "dead-horse (http://deadhorse.me)", + "name": "humanize-ms", + "version": "1.2.1", + "description": "transform humanize time to ms", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-modules:humanize-ms:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/humanize-ms@1.2.1", + "externalReferences": [ + { + "url": "https://github.com/node-modules/humanize-ms", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iconv-lite@0.6.3?package-id=fc4965fa5a86a9c9", + "author": "Alexander Shtuchkin ", + "name": "iconv-lite", + "version": "0.6.3", + "description": "Convert character encodings in pure javascript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/iconv-lite@0.6.3", + "externalReferences": [ + { + "url": "git://github.com/ashtuchkin/iconv-lite.git", + "type": "distribution" + }, + { + "url": "https://github.com/ashtuchkin/iconv-lite", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ignore-walk@5.0.1?package-id=39d6166153eb8a8", + "author": "GitHub Inc.", + "name": "ignore-walk", + "version": "5.0.1", + "description": "Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ignore-walk:ignore-walk:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ignore-walk@5.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/ignore-walk.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/imurmurhash@0.1.4?package-id=6444b4b295dc6bb1", + "author": "Jens Taylor (https://github.com/homebrewing)", + "name": "imurmurhash", + "version": "0.1.4", + "description": "An incremental implementation of MurmurHash3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:imurmurhash:imurmurhash:0.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/imurmurhash@0.1.4", + "externalReferences": [ + { + "url": "https://github.com/jensyt/imurmurhash-js", + "type": "distribution" + }, + { + "url": "https://github.com/jensyt/imurmurhash-js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/indent-string@4.0.0?package-id=9c9aada4281114e7", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "indent-string", + "version": "4.0.0", + "description": "Indent each line in a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indent-string:indent-string:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/indent-string@4.0.0", + "externalReferences": [ + { + "url": "sindresorhus/indent-string", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/infer-owner@1.0.4?package-id=70041214f8f231ae", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "infer-owner", + "version": "1.0.4", + "description": "Infer the owner of a path based on the owner of its nearest existing parent", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:infer-owner:infer-owner:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/infer-owner@1.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/infer-owner", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inflight@1.0.6?package-id=59c3c8a2d2437082", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "inflight", + "version": "1.0.6", + "description": "Add callbacks to requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "https://github.com/npm/inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.3?package-id=8f61c802178ab66a", + "name": "inherits", + "version": "2.0.3", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/inherits", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.4?package-id=2aa76eeeb4a32e94", + "name": "inherits", + "version": "2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/inherits", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ini@3.0.1?package-id=143d409d5161792", + "author": "GitHub Inc.", + "name": "ini", + "version": "3.0.1", + "description": "An ini encoder/decoder for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ini:ini:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ini@3.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/ini.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/init-package-json@3.0.2?package-id=6836db1e46d935b6", + "author": "GitHub Inc.", + "name": "init-package-json", + "version": "3.0.2", + "description": "A node module to get your node module started", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:init-package-json:init-package-json:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/init-package-json@3.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/init-package-json.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ip@2.0.0?package-id=218d1c05ea387b3c", + "author": "Fedor Indutny ", + "name": "ip", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indutny:ip:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ip@2.0.0", + "externalReferences": [ + { + "url": "http://github.com/indutny/node-ip.git", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/node-ip", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ip-regex@4.3.0?package-id=ce63365b733beafc", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ip-regex", + "version": "4.3.0", + "description": "Regular expression for matching IP addresses (IPv4 & IPv6)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ip-regex:ip-regex:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ip-regex@4.3.0", + "externalReferences": [ + { + "url": "sindresorhus/ip-regex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-cidr@4.0.2?package-id=b7267695f8ce1238", + "author": "silverwind ", + "name": "is-cidr", + "version": "4.0.2", + "description": "Check if a string is an IP address in CIDR notation", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:is-cidr:is-cidr:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-cidr@4.0.2", + "externalReferences": [ + { + "url": "silverwind/is-cidr", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-core-module@2.10.0?package-id=22642820ec847015", + "author": "Jordan Harband ", + "name": "is-core-module", + "version": "2.10.0", + "description": "Is this specifier a node.js core module?", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-core-module:is-core-module:2.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-core-module@2.10.0", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/is-core-module.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/is-core-module", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0?package-id=f89f6ce8e80b50d", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/is-fullwidth-code-point", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-lambda@1.0.1?package-id=841af64487227951", + "author": "Thomas Watson Steen (https://twitter.com/wa7son)", + "name": "is-lambda", + "version": "1.0.1", + "description": "Detect if your code is running on an AWS Lambda server", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-lambda:is-lambda:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-lambda@1.0.1", + "externalReferences": [ + { + "url": "https://github.com/watson/is-lambda.git", + "type": "distribution" + }, + { + "url": "https://github.com/watson/is-lambda", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isarray@1.0.0?package-id=8c6bff07fe7d51b4", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "isarray", + "version": "1.0.0", + "description": "Array#isArray for older browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juliangruber:isarray:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isarray@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/isarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/isarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isarray@1.0.0?package-id=b58983cda03515a", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "isarray", + "version": "1.0.0", + "description": "Array#isArray for older browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juliangruber:isarray:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isarray@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/isarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/isarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isexe@2.0.0?package-id=cac2857ecac9cad9", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "isexe", + "version": "2.0.0", + "description": "Minimal module to check if a file is executable.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:isexe:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isexe@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/isexe.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/isexe#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-parse-even-better-errors@2.3.1?package-id=abf07f33abe9247b", + "author": "Kat Marchán ", + "name": "json-parse-even-better-errors", + "version": "2.3.1", + "description": "JSON.parse with context information on error", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-parse-even-better-errors:json-parse-even-better-errors:2.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-parse-even-better-errors@2.3.1", + "externalReferences": [ + { + "url": "https://github.com/npm/json-parse-even-better-errors", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-stringify-nice@1.1.4?package-id=e53e3b4efad53e7c", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "json-stringify-nice", + "version": "1.1.4", + "description": "Stringify an object sorting scalars before objects, and defaulting to 2-space indent", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:json-stringify-nice:json-stringify-nice:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-stringify-nice@1.1.4", + "externalReferences": [ + { + "url": "https://github.com/isaacs/json-stringify-nice", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonparse@1.3.1?package-id=4ac9c9dc14c89718", + "author": "Tim Caswell ", + "name": "jsonparse", + "version": "1.3.1", + "description": "This is a pure-js JSON streaming parser for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:creationix:jsonparse:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonparse@1.3.1", + "externalReferences": [ + { + "url": "http://github.com/creationix/jsonparse.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonwebtoken@8.5.1?package-id=92b793e78f1f6688", + "author": "auth0", + "name": "jsonwebtoken", + "version": "8.5.1", + "description": "JSON Web Token implementation (symmetric and asymmetric)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jsonwebtoken:jsonwebtoken:8.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonwebtoken@8.5.1", + "externalReferences": [ + { + "url": "https://github.com/auth0/node-jsonwebtoken", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/just-diff@5.1.1?package-id=ce66f628f594c549", + "author": "Angus Croll", + "name": "just-diff", + "version": "5.1.1", + "description": "Return an object representing the diffs between two objects. Supports jsonPatch protocol", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:just-diff:just-diff:5.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/just-diff@5.1.1", + "externalReferences": [ + { + "url": "https://github.com/angus-c/just", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/just-diff-apply@5.4.1?package-id=11dfc45c877cf5ba", + "author": "Angus Croll", + "name": "just-diff-apply", + "version": "5.4.1", + "description": "Apply a diff to an object. Optionally supports jsonPatch protocol", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:just-diff-apply:just-diff-apply:5.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/just-diff-apply@5.4.1", + "externalReferences": [ + { + "url": "https://github.com/angus-c/just", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jwa@1.4.1?package-id=d5fbc3744196211c", + "author": "Brian J. Brennan ", + "name": "jwa", + "version": "1.4.1", + "description": "JWA implementation (supports all JWS algorithms)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brianloveswords:jwa:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jwa@1.4.1", + "externalReferences": [ + { + "url": "git://github.com/brianloveswords/node-jwa.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jws@3.2.2?package-id=21bd84daa035d836", + "author": "Brian J Brennan", + "name": "jws", + "version": "3.2.2", + "description": "Implementation of JSON Web Signatures", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brianloveswords:jws:3.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/jws@3.2.2", + "externalReferences": [ + { + "url": "git://github.com/brianloveswords/node-jws.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.16.5&package-id=2abd3b45f6fa4702", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r3", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5&package-id=13bc051822a24e8d", + "publisher": "Timo Teras ", + "name": "libcrypto1.1", + "version": "1.1.1t-r2", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1t-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgcc@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5&package-id=d2886381f1e7cdb2", + "publisher": "Ariadne Conill ", + "name": "libgcc", + "version": "11.2.1_git20220219-r2", + "description": "GNU C compiler runtime libraries", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgcc:libgcc:11.2.1_git20220219-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgcc@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmaccess@6.0.4?package-id=f3410b3d946e1c4d", + "author": "GitHub Inc.", + "name": "libnpmaccess", + "version": "6.0.4", + "description": "programmatic library for `npm access` commands", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmaccess:libnpmaccess:6.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmaccess@6.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmaccess", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmdiff@4.0.5?package-id=ce3262e2c08529ea", + "author": "GitHub Inc.", + "name": "libnpmdiff", + "version": "4.0.5", + "description": "The registry diff", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmdiff:libnpmdiff:4.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmdiff@4.0.5", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmexec@4.0.14?package-id=902cc2f16bb11ffc", + "author": "GitHub Inc.", + "name": "libnpmexec", + "version": "4.0.14", + "description": "npm exec (npx) programmatic API", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmexec:libnpmexec:4.0.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmexec@4.0.14", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmfund@3.0.5?package-id=201ebcb5d992fa75", + "author": "GitHub Inc.", + "name": "libnpmfund", + "version": "3.0.5", + "description": "Programmatic API for npm fund", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmfund:libnpmfund:3.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmfund@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmhook@8.0.4?package-id=5679bee9e2f7003c", + "author": "GitHub Inc.", + "name": "libnpmhook", + "version": "8.0.4", + "description": "programmatic API for managing npm registry hooks", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmhook:libnpmhook:8.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmhook@8.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmorg@4.0.4?package-id=80c945656f22ba9d", + "author": "GitHub Inc.", + "name": "libnpmorg", + "version": "4.0.4", + "description": "Programmatic api for `npm org` commands", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmorg:libnpmorg:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmorg@4.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmorg", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmpack@4.1.3?package-id=62f6985b14d7de3e", + "author": "GitHub Inc.", + "name": "libnpmpack", + "version": "4.1.3", + "description": "Programmatic API for the bits behind npm pack", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmpack:libnpmpack:4.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmpack@4.1.3", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmpack", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmpublish@6.0.5?package-id=a970d9d2bf422a57", + "author": "GitHub Inc.", + "name": "libnpmpublish", + "version": "6.0.5", + "description": "Programmatic API for the bits behind npm publish and unpublish", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmpublish:libnpmpublish:6.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmpublish@6.0.5", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmpublish", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmsearch@5.0.4?package-id=e3666452dd7e585d", + "author": "GitHub Inc.", + "name": "libnpmsearch", + "version": "5.0.4", + "description": "Programmatic API for searching in npm and compatible registries.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmsearch:libnpmsearch:5.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmsearch@5.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmsearch", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmteam@4.0.4?package-id=95c3c29c4dcd60d1", + "author": "GitHub Inc.", + "name": "libnpmteam", + "version": "4.0.4", + "description": "npm Team management APIs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmteam:libnpmteam:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmteam@4.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmteam", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmversion@3.0.7?package-id=9ace162e3f4ca294", + "author": "GitHub Inc.", + "name": "libnpmversion", + "version": "3.0.7", + "description": "library to do the things that 'npm version' does", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmversion:libnpmversion:3.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmversion@3.0.7", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5&package-id=609cb94e63dc06dd", + "publisher": "Timo Teras ", + "name": "libssl1.1", + "version": "1.1.1t-r2", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1t-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libstdc++@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5&package-id=9913678ca8fd323d", + "publisher": "Ariadne Conill ", + "name": "libstdc++", + "version": "11.2.1_git20220219-r2", + "description": "GNU C++ standard runtime library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:11.2.1_git20220219-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libstdc++@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.includes@4.3.0?package-id=e642ed7dc69687c", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.includes", + "version": "4.3.0", + "description": "The lodash method `_.includes` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.includes:lodash.includes:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.includes@4.3.0", + "externalReferences": [ + { + "url": "lodash/lodash", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.isboolean@3.0.3?package-id=9c5c8366ab928120", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.isboolean", + "version": "3.0.3", + "description": "The lodash method `_.isBoolean` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.isboolean:lodash.isboolean:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.isboolean@3.0.3", + "externalReferences": [ + { + "url": "lodash/lodash", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.isinteger@4.0.4?package-id=aa92f56128804239", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.isinteger", + "version": "4.0.4", + "description": "The lodash method `_.isInteger` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.isinteger:lodash.isinteger:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.isinteger@4.0.4", + "externalReferences": [ + { + "url": "lodash/lodash", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.isnumber@3.0.3?package-id=963f9beea645577e", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.isnumber", + "version": "3.0.3", + "description": "The lodash method `_.isNumber` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.isnumber:lodash.isnumber:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.isnumber@3.0.3", + "externalReferences": [ + { + "url": "lodash/lodash", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.isplainobject@4.0.6?package-id=523afc7470c06d90", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.isplainobject", + "version": "4.0.6", + "description": "The lodash method `_.isPlainObject` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.isplainobject:lodash.isplainobject:4.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.isplainobject@4.0.6", + "externalReferences": [ + { + "url": "lodash/lodash", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.isstring@4.0.1?package-id=8d274551fef91ebf", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.isstring", + "version": "4.0.1", + "description": "The lodash method `_.isString` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.isstring:lodash.isstring:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.isstring@4.0.1", + "externalReferences": [ + { + "url": "lodash/lodash", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.once@4.1.1?package-id=69698aaf59fc8049", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.once", + "version": "4.1.1", + "description": "The lodash method `_.once` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.once:lodash.once:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.once@4.1.1", + "externalReferences": [ + { + "url": "lodash/lodash", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lru-cache@6.0.0?package-id=a9db11b8d6d48a85", + "author": "Isaac Z. Schlueter ", + "name": "lru-cache", + "version": "6.0.0", + "description": "A cache object that deletes the least-recently-used items.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lru-cache:lru-cache:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru-cache@6.0.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-lru-cache.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lru-cache@7.13.2?package-id=be5c7dc6ddace7cd", + "author": "Isaac Z. Schlueter ", + "name": "lru-cache", + "version": "7.13.2", + "description": "A cache object that deletes the least-recently-used items.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lru-cache:lru-cache:7.13.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru-cache@7.13.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-lru-cache.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/make-fetch-happen@10.2.1?package-id=d230079dee920278", + "author": "GitHub Inc.", + "name": "make-fetch-happen", + "version": "10.2.1", + "description": "Opinionated, caching, retrying fetch client", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:make-fetch-happen:make-fetch-happen:10.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-fetch-happen@10.2.1", + "externalReferences": [ + { + "url": "https://github.com/npm/make-fetch-happen.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.1.2?package-id=32b47b032f3721ab", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.1.2", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.1.2?package-id=7392185ecbfd5435", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.1.2", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@5.1.0?package-id=7bf8dbc1a2543e83", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "5.1.0", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:5.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@5.1.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass@3.3.4?package-id=b613ca6e3e5e1fdb", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "3.3.4", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:3.3.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@3.3.4", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-collect@1.0.2?package-id=48596b1d4dbb4f19", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-collect", + "version": "1.0.2", + "description": "A Minipass stream that collects all the data into a single chunk", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-collect:minipass-collect:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-collect@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-fetch@2.1.1?package-id=1efc5437ba452e1d", + "author": "GitHub Inc.", + "name": "minipass-fetch", + "version": "2.1.1", + "description": "An implementation of window.fetch in Node.js using Minipass streams", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minipass-fetch:minipass-fetch:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-fetch@2.1.1", + "externalReferences": [ + { + "url": "https://github.com/npm/minipass-fetch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-flush@1.0.5?package-id=f00a260926226ede", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-flush", + "version": "1.0.5", + "description": "A Minipass stream that calls a flush function before emitting 'end'", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-flush:minipass-flush:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-flush@1.0.5", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass-flush.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-json-stream@1.0.1?package-id=43ed818882788b6b", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-json-stream", + "version": "1.0.1", + "description": "Like JSONStream, but using Minipass streams", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minipass-json-stream:minipass-json-stream:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-json-stream@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/minipass-json-stream.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-pipeline@1.2.4?package-id=891713a52fe6cc27", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-pipeline", + "version": "1.2.4", + "description": "create a pipeline of streams using Minipass", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-pipeline@1.2.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-sized@1.0.3?package-id=cd4842c35733398b", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-sized", + "version": "1.0.3", + "description": "A Minipass stream that raises an error if you get a different number of bytes than expected", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-sized:minipass-sized:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-sized@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass-sized.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minizlib@2.1.2?package-id=a651644b4f6a3e3", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minizlib", + "version": "2.1.2", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minizlib:minizlib:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minizlib@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp@1.0.4?package-id=9695628e211e131d", + "name": "mkdirp", + "version": "1.0.4", + "description": "Recursively mkdir, like `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:mkdirp:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp@1.0.4", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-mkdirp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp-infer-owner@2.0.0?package-id=cd2840516db98e09", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "mkdirp-infer-owner", + "version": "2.0.0", + "description": "mkdirp, but chown to the owner of the containing folder if possible and necessary", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:mkdirp-infer-owner:mkdirp-infer-owner:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp-infer-owner@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/mkdirp-infer-owner", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.2?package-id=baab6160abc8414d", + "name": "ms", + "version": "2.1.2", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ms:ms:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "url": "zeit/ms", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.3?package-id=b589e0f87d3cac5b", + "name": "ms", + "version": "2.1.3", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ms:ms:2.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.3", + "externalReferences": [ + { + "url": "vercel/ms", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.3?package-id=56db25c219fa0f4e", + "name": "ms", + "version": "2.1.3", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ms:ms:2.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.3", + "externalReferences": [ + { + "url": "vercel/ms", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.2.3-r2?arch=x86_64&distro=alpine-3.16.5&package-id=24c6089b81ca7d19", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.2.3-r2", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.2.3-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.2.3-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.3-r2?arch=x86_64&upstream=musl&distro=alpine-3.16.5&package-id=d33c14d727ae74d1", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.2.3-r2", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.2.3-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.2.3-r2?arch=x86_64&upstream=musl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mute-stream@0.0.8?package-id=b093eec725f75ac9", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "mute-stream", + "version": "0.0.8", + "description": "Bytes go in, but they don't come out (when muted).", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:mute-stream:mute-stream:0.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/mute-stream@0.0.8", + "externalReferences": [ + { + "url": "git://github.com/isaacs/mute-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/negotiator@0.6.3?package-id=87cc6cb502ab228a", + "name": "negotiator", + "version": "0.6.3", + "description": "HTTP content negotiation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:negotiator:negotiator:0.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/negotiator@0.6.3", + "externalReferences": [ + { + "url": "jshttp/negotiator", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "pkg:generic/node@16.20.0?package-id=c3df0c8aa56599a1", + "name": "node", + "version": "16.20.0", + "cpe": "cpe:2.3:a:nodejs:node.js:16.20.0:*:*:*:*:*:*:*", + "purl": "pkg:generic/node@16.20.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-gyp@9.1.0?package-id=594531fb28fce181", + "author": "Nathan Rajlich (http://tootallnate.net)", + "name": "node-gyp", + "version": "9.1.0", + "description": "Node.js native addon build tool", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-gyp:node-gyp:9.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-gyp@9.1.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/node-gyp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/nopt@5.0.0?package-id=16f8d211f06e4fc1", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "nopt", + "version": "5.0.0", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:nopt:nopt:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/nopt@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/nopt.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/nopt@6.0.0?package-id=2da699f46c59247", + "author": "GitHub Inc.", + "name": "nopt", + "version": "6.0.0", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:nopt:nopt:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/nopt@6.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/nopt.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/normalize-package-data@4.0.1?package-id=f65ac6113e729b71", + "author": "GitHub Inc.", + "name": "normalize-package-data", + "version": "4.0.1", + "description": "Normalizes data that can be found in package.json files.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:normalize-package-data:normalize-package-data:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/normalize-package-data@4.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/normalize-package-data.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm@8.19.4?package-id=3a7215c0f0fd939a", + "author": "GitHub Inc.", + "name": "npm", + "version": "8.19.4", + "description": "a package manager for JavaScript", + "licenses": [ + { + "license": { + "id": "Artistic-2.0" + } + } + ], + "cpe": "cpe:2.3:a:npm:npm:8.19.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm@8.19.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://docs.npmjs.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-audit-report@3.0.0?package-id=838d59a41103d415", + "author": "GitHub Inc.", + "name": "npm-audit-report", + "version": "3.0.0", + "description": "Given a response from the npm security api, render it into a variety of security reports", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-audit-report:npm-audit-report:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-audit-report@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-audit-report.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-audit-report#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-bundled@1.1.2?package-id=d3fc92546524f1a0", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "npm-bundled", + "version": "1.1.2", + "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-bundled:npm-bundled:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-bundled@1.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-bundled.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-bundled@2.0.1?package-id=4342e4ccfcb927ca", + "author": "GitHub Inc.", + "name": "npm-bundled", + "version": "2.0.1", + "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-bundled:npm-bundled:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-bundled@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-bundled.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-init@0.0.0?package-id=e58118b5aaeeedd7", + "name": "npm-init", + "version": "0.0.0", + "description": "an initter you init wit, innit?", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:npm-init:npm-init:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-init@0.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-install-checks@5.0.0?package-id=ea3011565b04383b", + "author": "GitHub Inc.", + "name": "npm-install-checks", + "version": "5.0.0", + "description": "Check the engines and platform fields in package.json", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:npm-install-checks:npm-install-checks:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-install-checks@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-install-checks.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@1.0.1?package-id=7cccc2d8907ef9bb", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "npm-normalize-package-bin", + "version": "1.0.1", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-normalize-package-bin", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=3b502df6a54faf04", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=cb496c88bc54cdd7", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=3675dcedd841f8b6", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=a6c4eec149dbad2b", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=b373bbb7c439b789", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-package-arg@9.1.0?package-id=30ebe98710a08c64", + "author": "GitHub Inc.", + "name": "npm-package-arg", + "version": "9.1.0", + "description": "Parse the things that can be arguments to `npm install`", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-package-arg:npm-package-arg:9.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-package-arg@9.1.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-package-arg.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-package-arg", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-packlist@5.1.3?package-id=e87ec46a213d7a87", + "author": "GitHub Inc.", + "name": "npm-packlist", + "version": "5.1.3", + "description": "Get a list of the files to add from a folder into an npm package", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-packlist:npm-packlist:5.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-packlist@5.1.3", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-packlist.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-pick-manifest@7.0.2?package-id=a9dc194030f7ba31", + "author": "GitHub Inc.", + "name": "npm-pick-manifest", + "version": "7.0.2", + "description": "Resolves a matching manifest from a package metadata document according to standard npm semver resolution rules.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-pick-manifest:npm-pick-manifest:7.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-pick-manifest@7.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-pick-manifest.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-profile@6.2.1?package-id=4b7db9f7ec8bd8ec", + "author": "GitHub Inc.", + "name": "npm-profile", + "version": "6.2.1", + "description": "Library for updating an npmjs.com profile", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-profile:npm-profile:6.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-profile@6.2.1", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-profile.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-registry-fetch@13.3.1?package-id=4a24a52ce2bed90", + "author": "GitHub Inc.", + "name": "npm-registry-fetch", + "version": "13.3.1", + "description": "Fetch-based http client for use with npm registry APIs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-registry-fetch:npm-registry-fetch:13.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-registry-fetch@13.3.1", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-registry-fetch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-user-validate@1.0.1?package-id=6154858fa52c8fec", + "author": "Robert Kowalski ", + "name": "npm-user-validate", + "version": "1.0.1", + "description": "User validations for npm", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:npm-user-validate:npm-user-validate:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-user-validate@1.0.1", + "externalReferences": [ + { + "url": "git://github.com/npm/npm-user-validate.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npmlog@6.0.2?package-id=e1d7f39551f111f", + "author": "GitHub Inc.", + "name": "npmlog", + "version": "6.0.2", + "description": "logger for npm", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npmlog:npmlog:6.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npmlog@6.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/npmlog.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/once@1.4.0?package-id=6a66d209255e8adb", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "once", + "version": "1.4.0", + "description": "Run a function exactly one time", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:once:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/once", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/once@1.4.0?package-id=2bfb1efabaee8e52", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "once", + "version": "1.4.0", + "description": "Run a function exactly one time", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:once:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/once", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/opener@1.5.2?package-id=44a3614f9f359ab5", + "author": "Domenic Denicola (https://domenic.me/)", + "name": "opener", + "version": "1.5.2", + "description": "Opens stuff, like webpages and files and executables, cross-platform", + "licenses": [ + { + "license": { + "name": "(WTFPL OR MIT)" + } + } + ], + "cpe": "cpe:2.3:a:opener:opener:1.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/opener@1.5.2", + "externalReferences": [ + { + "url": "domenic/opener", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-map@4.0.0?package-id=1c07a8cbe4bd91d5", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "p-map", + "version": "4.0.0", + "description": "Map over promises concurrently", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-map:p-map:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-map@4.0.0", + "externalReferences": [ + { + "url": "sindresorhus/p-map", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pacote@13.6.2?package-id=481670a57d8719a5", + "author": "GitHub Inc.", + "name": "pacote", + "version": "13.6.2", + "description": "JavaScript package downloader", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:pacote:pacote:13.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/pacote@13.6.2", + "externalReferences": [ + { + "url": "https://github.com/npm/pacote.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/parse-conflict-json@2.0.2?package-id=94638d4f43f17ad7", + "author": "GitHub Inc.", + "name": "parse-conflict-json", + "version": "2.0.2", + "description": "Parse a JSON string that has git merge conflicts, resolving if possible", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:parse-conflict-json:parse-conflict-json:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/parse-conflict-json@2.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/parse-conflict-json.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=ed58648f2f773bd9", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-is-absolute", + "version": "1.0.1", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "sindresorhus/path-is-absolute", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-selector-parser@6.0.10?package-id=29dd6871004e9325", + "name": "postcss-selector-parser", + "version": "6.0.10", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-selector-parser:postcss-selector-parser:6.0.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-selector-parser@6.0.10", + "externalReferences": [ + { + "url": "postcss/postcss-selector-parser", + "type": "distribution" + }, + { + "url": "https://github.com/postcss/postcss-selector-parser", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/proc-log@2.0.1?package-id=a4591425ab5edc60", + "author": "GitHub Inc.", + "name": "proc-log", + "version": "2.0.1", + "description": "just emit 'log' events on the process object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:proc-log:proc-log:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/proc-log@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/proc-log.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/process-nextick-args@2.0.1?package-id=e40e9e1f49dce12f", + "name": "process-nextick-args", + "version": "2.0.1", + "description": "process.nextTick but always with args", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:process-nextick-args:process-nextick-args:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/process-nextick-args@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/calvinmetcalf/process-nextick-args.git", + "type": "distribution" + }, + { + "url": "https://github.com/calvinmetcalf/process-nextick-args", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-all-reject-late@1.0.1?package-id=7b92ff8460614d4f", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "promise-all-reject-late", + "version": "1.0.1", + "description": "Like Promise.all, but save rejections until all promises are resolved", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promise-all-reject-late:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-all-reject-late@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-call-limit@1.0.1?package-id=2b0b41bd7b0aa502", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "promise-call-limit", + "version": "1.0.1", + "description": "Call an array of promise-returning functions, restricting concurrency to a specified limit.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promise-call-limit:promise-call-limit:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-call-limit@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/promise-call-limit", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-inflight@1.0.1?package-id=8ae6caef1e6290fe", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "promise-inflight", + "version": "1.0.1", + "description": "One promise for multiple requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promise-inflight:promise-inflight:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-inflight@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/promise-inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/promise-inflight#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-retry@2.0.1?package-id=7d483cd4a8ed637e", + "author": "IndigoUnited (http://indigounited.com)", + "name": "promise-retry", + "version": "2.0.1", + "description": "Retries a function that returns a promise, leveraging the power of the retry module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:promise-retry:promise-retry:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-retry@2.0.1", + "externalReferences": [ + { + "url": "git://github.com/IndigoUnited/node-promise-retry.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promzard@0.3.0?package-id=33cefe299422041", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "promzard", + "version": "0.3.0", + "description": "prompting wizardly", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promzard:promzard:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/promzard@0.3.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/promzard", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pump@3.0.0?package-id=42f972f5e9e52299", + "author": "Mathias Buus Madsen ", + "name": "pump", + "version": "3.0.0", + "description": "pipe streams together and close all of them if one of them closes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mafintosh:pump:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pump@3.0.0", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/pump.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/qrcode-terminal@0.12.0?package-id=83c91f496595f73", + "name": "qrcode-terminal", + "version": "0.12.0", + "description": "QRCodes, in the terminal", + "licenses": [ + { + "license": { + "name": "Apache 2.0" + } + } + ], + "cpe": "cpe:2.3:a:qrcode-terminal:qrcode-terminal:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/qrcode-terminal@0.12.0", + "externalReferences": [ + { + "url": "https://github.com/gtanner/qrcode-terminal", + "type": "distribution" + }, + { + "url": "https://github.com/gtanner/qrcode-terminal", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read@1.0.7?package-id=cf65e05575a1a15", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "read", + "version": "1.0.7", + "description": "read(1) for node programs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:read:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/read@1.0.7", + "externalReferences": [ + { + "url": "git://github.com/isaacs/read.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-cmd-shim@3.0.0?package-id=4b927be3f703982b", + "author": "GitHub Inc.", + "name": "read-cmd-shim", + "version": "3.0.0", + "description": "Figure out what a cmd-shim is pointing at. This acts as the equivalent of fs.readlink.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-cmd-shim:read-cmd-shim:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-cmd-shim@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/read-cmd-shim.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/read-cmd-shim#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-package-json@5.0.2?package-id=d15e27cd5cddf2b4", + "author": "GitHub Inc.", + "name": "read-package-json", + "version": "5.0.2", + "description": "The thing npm uses to read package.json files with semantics and defaults and validation", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-package-json:read-package-json:5.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-package-json@5.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/read-package-json.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-package-json-fast@2.0.3?package-id=bb9e08c93f4b4c89", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "read-package-json-fast", + "version": "2.0.3", + "description": "Like read-package-json, but faster", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-package-json-fast:read-package-json-fast:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-package-json-fast@2.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/npm/read-package-json-fast.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.7?package-id=515a8af3a698c35", + "name": "readable-stream", + "version": "2.3.7", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.7", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.7?package-id=2379aec81d6162c3", + "name": "readable-stream", + "version": "2.3.7", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.7", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@3.6.0?package-id=32d9c32dd3126020", + "name": "readable-stream", + "version": "3.6.0", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:3.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@3.6.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readdir-scoped-modules@1.1.0?package-id=33ac24742869be8b", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "readdir-scoped-modules", + "version": "1.1.0", + "description": "Like `fs.readdir` but handling `@org/module` dirs as if they were a single entry.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:readdir-scoped-modules:readdir-scoped-modules:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/readdir-scoped-modules@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/npm/readdir-scoped-modules", + "type": "distribution" + }, + { + "url": "https://github.com/npm/readdir-scoped-modules", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/retry@0.12.0?package-id=c3f319915fd297ec", + "author": "Tim Koschützki (http://debuggable.com/)", + "name": "retry", + "version": "0.12.0", + "description": "Abstraction for exponential and custom retry strategies for failed operations.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tim-kos:retry:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/retry@0.12.0", + "externalReferences": [ + { + "url": "git://github.com/tim-kos/node-retry.git", + "type": "distribution" + }, + { + "url": "https://github.com/tim-kos/node-retry", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rimraf@3.0.2?package-id=92690f32c123c49b", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "rimraf", + "version": "3.0.2", + "description": "A deep deletion module for node (like `rm -rf`)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:rimraf:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/rimraf@3.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=ad8e4b783ec0cc69", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=17b89784efaad79e", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=37bd52a7cabd5921", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=84f64b73f6fc2a9b", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "safe-buffer", + "version": "5.2.1", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=edf513d3ab46bee", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "safe-buffer", + "version": "5.2.1", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=4ab2220d3f3f4961", + "author": "Nikita Skovoroda (https://github.com/ChALkeR)", + "name": "safer-buffer", + "version": "2.1.2", + "description": "Modern Buffer API polyfill without footguns", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safer-buffer@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/ChALkeR/safer-buffer.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.3.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.16.5&package-id=206fdb47b3e980eb", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.3.4-r0", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.3.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.3.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver@5.7.1?package-id=ea0de706714a055e", + "name": "semver", + "version": "5.7.1", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:semver:semver:5.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver@5.7.1", + "externalReferences": [ + { + "url": "https://github.com/npm/node-semver", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver@7.3.7?package-id=73e16bb8e099774", + "author": "GitHub Inc.", + "name": "semver", + "version": "7.3.7", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:semver:semver:7.3.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver@7.3.7", + "externalReferences": [ + { + "url": "https://github.com/npm/node-semver.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/set-blocking@2.0.0?package-id=bac85cbb844de9c9", + "author": "Ben Coe ", + "name": "set-blocking", + "version": "2.0.0", + "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:set-blocking:set-blocking:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/set-blocking@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/yargs/set-blocking.git", + "type": "distribution" + }, + { + "url": "https://github.com/yargs/set-blocking#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/signal-exit@3.0.7?package-id=998659694cba1dfd", + "author": "Ben Coe ", + "name": "signal-exit", + "version": "3.0.7", + "description": "when you want to fire an event no matter how a process exits.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:signal-exit:signal-exit:3.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/signal-exit@3.0.7", + "externalReferences": [ + { + "url": "https://github.com/tapjs/signal-exit.git", + "type": "distribution" + }, + { + "url": "https://github.com/tapjs/signal-exit", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/smart-buffer@4.2.0?package-id=ad322c124ae3043c", + "author": "Josh Glazebrook", + "name": "smart-buffer", + "version": "4.2.0", + "description": "smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:JoshGlazebrook:smart-buffer:4.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/smart-buffer@4.2.0", + "externalReferences": [ + { + "url": "https://github.com/JoshGlazebrook/smart-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/JoshGlazebrook/smart-buffer/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/socks@2.7.0?package-id=267f6eb3d489a8eb", + "author": "Josh Glazebrook", + "name": "socks", + "version": "2.7.0", + "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:JoshGlazebrook:socks:2.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/socks@2.7.0", + "externalReferences": [ + { + "url": "https://github.com/JoshGlazebrook/socks.git", + "type": "distribution" + }, + { + "url": "https://github.com/JoshGlazebrook/socks/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/socks-proxy-agent@7.0.0?package-id=8dc0e605920052a1", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "socks-proxy-agent", + "version": "7.0.0", + "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:socks-proxy-agent:socks-proxy-agent:7.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/socks-proxy-agent@7.0.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-socks-proxy-agent.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/node-socks-proxy-agent#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-correct@3.1.1?package-id=d6b0214947e454eb", + "author": "Kyle E. Mitchell (https://kemitchell.com)", + "name": "spdx-correct", + "version": "3.1.1", + "description": "correct invalid SPDX expressions", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-correct:spdx-correct:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-correct@3.1.1", + "externalReferences": [ + { + "url": "jslicense/spdx-correct.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-exceptions@2.3.0?package-id=22aa1fb7c596c6c7", + "author": "The Linux Foundation", + "name": "spdx-exceptions", + "version": "2.3.0", + "description": "list of SPDX standard license exceptions", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-exceptions:spdx-exceptions:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-exceptions@2.3.0", + "externalReferences": [ + { + "url": "kemitchell/spdx-exceptions.json", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-expression-parse@3.0.1?package-id=78c73c9b189e2783", + "author": "Kyle E. Mitchell (https://kemitchell.com)", + "name": "spdx-expression-parse", + "version": "3.0.1", + "description": "parse SPDX license expressions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:spdx-expression-parse:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-expression-parse@3.0.1", + "externalReferences": [ + { + "url": "jslicense/spdx-expression-parse.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-license-ids@3.0.11?package-id=6530ac28616ec508", + "author": "Shinnosuke Watanabe (https://github.com/shinnn)", + "name": "spdx-license-ids", + "version": "3.0.11", + "description": "A list of SPDX license identifiers", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-license-ids:spdx-license-ids:3.0.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-license-ids@3.0.11", + "externalReferences": [ + { + "url": "jslicense/spdx-license-ids", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&upstream=busybox&distro=alpine-3.16.5&package-id=674d1e2fba4d633a", + "publisher": "Sören Tempel ", + "name": "ssl_client", + "version": "1.35.0-r17", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.35.0-r17:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&upstream=busybox&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ssri@9.0.1?package-id=49986701356bf646", + "author": "GitHub Inc.", + "name": "ssri", + "version": "9.0.1", + "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ssri:ssri:9.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ssri@9.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/ssri.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/stream-shift@1.0.1?package-id=b27a016b7ab367a8", + "author": "Mathias Buus (@mafintosh)", + "name": "stream-shift", + "version": "1.0.1", + "description": "Returns the next buffer/object in a stream's readable queue", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stream-shift:stream-shift:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/stream-shift@1.0.1", + "externalReferences": [ + { + "url": "https://github.com/mafintosh/stream-shift.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/stream-shift", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@4.2.3?package-id=c50e61a77e3ea809", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "4.2.3", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-width:string-width:4.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@4.2.3", + "externalReferences": [ + { + "url": "sindresorhus/string-width", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=b92fbc6f9b574fb4", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=6f9f2f60fec7ea8b", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.3.0?package-id=ca8af4aa6b41ca75", + "name": "string_decoder", + "version": "1.3.0", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@6.0.1?package-id=5ec73c7d72940ceb", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "6.0.1", + "description": "Strip ANSI escape codes from a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@6.0.1", + "externalReferences": [ + { + "url": "chalk/strip-ansi", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-color@7.2.0?package-id=4c97deb16c788c95", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "supports-color", + "version": "7.2.0", + "description": "Detect whether a terminal supports color", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-color:supports-color:7.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-color@7.2.0", + "externalReferences": [ + { + "url": "chalk/supports-color", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tar@6.1.11?package-id=97823590d9da9c9f", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "tar", + "version": "6.1.11", + "description": "tar for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm:tar:6.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/tar@6.1.11", + "externalReferences": [ + { + "url": "https://github.com/npm/node-tar.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/text-table@0.2.0?package-id=a124be9ad599668f", + "author": "James Halliday (http://substack.net)", + "name": "text-table", + "version": "0.2.0", + "description": "borderless text tables with alignment", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:text-table:text-table:0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/text-table@0.2.0", + "externalReferences": [ + { + "url": "git://github.com/substack/text-table.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/text-table", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tiny-relative-date@1.3.0?package-id=bc2a707c455ba496", + "author": "Joseph Wynn (https://wildlyinaccurate.com/)", + "name": "tiny-relative-date", + "version": "1.3.0", + "description": "Tiny function that provides relative, human-readable dates.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tiny-relative-date:tiny-relative-date:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tiny-relative-date@1.3.0", + "externalReferences": [ + { + "url": "https://github.com/wildlyinaccurate/relative-date.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/treeverse@2.0.0?package-id=283d5c0745aa3ce7", + "author": "GitHub Inc.", + "name": "treeverse", + "version": "2.0.0", + "description": "Walk any kind of tree structure depth- or breadth-first. Supports promises and advanced map-reduce operations with a very small API.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:treeverse:treeverse:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/treeverse@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/treeverse.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ultron@1.1.1?package-id=ae7d41536eb1a830", + "author": "Arnout Kazemier", + "name": "ultron", + "version": "1.1.1", + "description": "Ultron is high-intelligence robot. It gathers intel so it can start improving upon his rudimentary design", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unshiftio:ultron:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ultron@1.1.1", + "externalReferences": [ + { + "url": "https://github.com/unshiftio/ultron", + "type": "distribution" + }, + { + "url": "https://github.com/unshiftio/ultron", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unique-filename@2.0.1?package-id=ddbea63cf5bc0343", + "author": "GitHub Inc.", + "name": "unique-filename", + "version": "2.0.1", + "description": "Generate a unique filename for use in temporary directories or caches.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:unique-filename:unique-filename:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-filename@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/unique-filename.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/unique-filename", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unique-slug@3.0.0?package-id=a61e6b90d7850f42", + "author": "GitHub Inc.", + "name": "unique-slug", + "version": "3.0.0", + "description": "Generate a unique character string suitible for use in files and URLs.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:unique-slug:unique-slug:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-slug@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/unique-slug.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=adcfe60f42b3bf40", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "util-deprecate", + "version": "1.0.2", + "description": "The Node.js `util.deprecate()` function with browser support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=ecf076cf26fe73d0", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "util-deprecate", + "version": "1.0.2", + "description": "The Node.js `util.deprecate()` function with browser support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4?package-id=fa90b625ec15ead", + "author": "Kyle E. Mitchell (https://kemitchell.com)", + "name": "validate-npm-package-license", + "version": "3.0.4", + "description": "Give me a string and I'll tell you if it's a valid npm package license string", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:validate-npm-package-license:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/validate-npm-package-license@3.0.4", + "externalReferences": [ + { + "url": "kemitchell/validate-npm-package-license.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/validate-npm-package-name@4.0.0?package-id=dc3a9f2b7a700330", + "author": "GitHub Inc.", + "name": "validate-npm-package-name", + "version": "4.0.0", + "description": "Give me a string and I'll tell you if it's a valid npm package name", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:validate-npm-package-name:validate-npm-package-name:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/validate-npm-package-name@4.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/validate-npm-package-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/validate-npm-package-name", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/walk-up-path@1.0.0?package-id=9a8dd6f20b12184f", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "walk-up-path", + "version": "1.0.0", + "description": "Given a path string, return a generator that walks up the path, emitting each dirname.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:walk-up-path:walk-up-path:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/walk-up-path@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/walk-up-path", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wcwidth@1.0.1?package-id=ee54c63162090e16", + "author": "Tim Oxley", + "name": "wcwidth", + "version": "1.0.1", + "description": "Port of C's wcwidth() and wcswidth()", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:timoxley:wcwidth:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/wcwidth@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/timoxley/wcwidth.git", + "type": "distribution" + }, + { + "url": "https://github.com/timoxley/wcwidth#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/websocket-stream@5.5.2?package-id=7fdacabad23a7eaa", + "name": "websocket-stream", + "version": "5.5.2", + "description": "Use websockets with the node streams API. Works in browser and node", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:websocket-stream:websocket-stream:5.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/websocket-stream@5.5.2", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/maxogden/websocket-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/maxogden/websocket-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/which@2.0.2?package-id=1d2beaa974655b97", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "which", + "version": "2.0.2", + "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:which:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/which@2.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-which.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wide-align@1.1.5?package-id=f0bd5200e29a21be", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "wide-align", + "version": "1.1.5", + "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wide-align:wide-align:1.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/wide-align@1.1.5", + "externalReferences": [ + { + "url": "https://github.com/iarna/wide-align", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=ce6ead4039a1b1e8", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "wrappy", + "version": "1.0.2", + "description": "Callback wrapping utility", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/wrappy", + "type": "distribution" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=88b7c304022dd8b8", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "wrappy", + "version": "1.0.2", + "description": "Callback wrapping utility", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/wrappy", + "type": "distribution" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/write-file-atomic@4.0.2?package-id=401a0baef0d4f8db", + "author": "GitHub Inc.", + "name": "write-file-atomic", + "version": "4.0.2", + "description": "Write files in an atomic fashion w/configurable ownership", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:write-file-atomic:write-file-atomic:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/write-file-atomic@4.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/write-file-atomic.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/write-file-atomic", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ws@3.3.3?package-id=efcc73cb0f0d4333", + "author": "Einar Otto Stangvik (http://2x.io)", + "name": "ws", + "version": "3.3.3", + "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:websockets:ws:3.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/ws@3.3.3", + "externalReferences": [ + { + "url": "websockets/ws", + "type": "distribution" + }, + { + "url": "https://github.com/websockets/ws", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/xtend@4.0.2?package-id=806268954298f9d0", + "author": "Raynos ", + "name": "xtend", + "version": "4.0.2", + "description": "extend like a boss", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:Raynos:xtend:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/xtend@4.0.2", + "externalReferences": [ + { + "url": "git://github.com/Raynos/xtend.git", + "type": "distribution" + }, + { + "url": "https://github.com/Raynos/xtend", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yallist@4.0.0?package-id=c5b3d2829d8d6201", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "yallist", + "version": "4.0.0", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yarn@1.22.19?package-id=f2b974a78000b26b", + "name": "yarn", + "version": "1.22.19", + "description": "📦🐈 Fast, reliable, and secure dependency management.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:yarn:yarn:1.22.19:*:*:*:*:*:*:*", + "purl": "pkg:npm/yarn@1.22.19", + "externalReferences": [ + { + "url": "yarnpkg/yarn", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.12-r3?arch=x86_64&distro=alpine-3.16.5&package-id=75f0d92f695b4303", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.12-r3", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.12-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.12-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.16.5", + "description": "Alpine Linux v3.16", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.16.5" + }, + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/US_export_policy/US_export_policy?package-id=6b95b2812763991f", + "name": "US_export_policy", + "cpe": "cpe:2.3:a:US-export-policy:US-export-policy:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/US_export_policy/US_export_policy", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "8e0a479b10f5d9ff8cb1c42e597b1f2be67e529e" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/US_export_policy/US_export_policy?package-id=870c14eda8614328", + "name": "US_export_policy", + "cpe": "cpe:2.3:a:US-export-policy:US-export-policy:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/US_export_policy/US_export_policy", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "8e0a479b10f5d9ff8cb1c42e597b1f2be67e529e" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.1.0-r3?arch=x86_64&distro=alpine-3.9.4&package-id=c1681612500d2a5f", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.1.0-r3", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.1.0-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.1.0-r3?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.1-r1?arch=x86_64&distro=alpine-3.9.4&package-id=97e2cc5f95031f4f", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.1-r1", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.1-r1?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alsa-lib@1.1.8-r0?arch=x86_64&distro=alpine-3.9.4&package-id=3d9fdb578832e1cb", + "publisher": "Natanael Copa ", + "name": "alsa-lib", + "version": "1.1.8-r0", + "description": "Advanced Linux Sound Architecture (ALSA) library", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:alsa-project:alsa-lib:1.1.8-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alsa-lib@1.1.8-r0?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://www.alsa-project.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.10.3-r1?arch=x86_64&distro=alpine-3.9.4&package-id=4304c9827dad66db", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.10.3-r1", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.10.3-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.10.3-r1?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/apk-tools/", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "a8f085f759193e56", + "name": "busybox", + "version": "1.29.3", + "cpe": "cpe:2.3:a:busybox:busybox:1.29.3:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.29.3-r10?arch=x86_64&distro=alpine-3.9.4&package-id=731a07abb126ae58", + "publisher": "Natanael Copa ", + "name": "busybox", + "version": "1.29.3-r10", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.29.3-r10:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.29.3-r10?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://busybox.net", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates@20190108-r0?arch=x86_64&distro=alpine-3.9.4&package-id=8968181f62df7bf4", + "publisher": "Natanael Copa ", + "name": "ca-certificates", + "version": "20190108-r0", + "description": "Common CA certificates PEM files", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20190108-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates@20190108-r0?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-cacert@20190108-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.9.4&package-id=ae8340d6e803e072", + "publisher": "Natanael Copa ", + "name": "ca-certificates-cacert", + "version": "20190108-r0", + "description": "Mozilla bundled certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-cacert:ca-certificates-cacert:20190108-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-cacert@20190108-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/charsets/charsets?package-id=cb237d1b56b1b665", + "name": "charsets", + "cpe": "cpe:2.3:a:charsets:charsets:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/charsets/charsets", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "01bd4339bc27a8b7adaee968edfc646b925b2e0a" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/cldrdata/cldrdata?package-id=2d74d1551f63c0cf", + "name": "cldrdata", + "cpe": "cpe:2.3:a:cldrdata:cldrdata:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/cldrdata/cldrdata", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "65ef04845378cbb6bbd9eaa931292740726be866" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/dnsns/dnsns?package-id=ff95cfa383074613", + "name": "dnsns", + "cpe": "cpe:2.3:a:dnsns:dnsns:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/dnsns/dnsns", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "f892124957b83136a583b95b20dd453a0cce8bd2" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/freetype@2.9.1-r2?arch=x86_64&distro=alpine-3.9.4&package-id=7ddcfcaf98877e24", + "publisher": "Carlo Landmeter ", + "name": "freetype", + "version": "2.9.1-r2", + "description": "TrueType font rendering library", + "licenses": [ + { + "license": { + "id": "FTL" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:freetype:freetype:2.9.1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/freetype@2.9.1-r2?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://www.freetype.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/giflib@5.1.4-r2?arch=x86_64&distro=alpine-3.9.4&package-id=2983f9fe6daa7f20", + "publisher": "Natanael Copa ", + "name": "giflib", + "version": "5.1.4-r2", + "description": "A library for reading and writing GIF images", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:giflib:giflib:5.1.4-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/giflib@5.1.4-r2?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://sourceforge.net/projects/giflib/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/jaccess/jaccess?package-id=20bd4d803cf4322c", + "name": "jaccess", + "cpe": "cpe:2.3:a:jaccess:jaccess:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/jaccess/jaccess", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "a3947729ad5538131e3b75810c455584e327c5d3" + } + ] + } + ] + }, + { + "type": "application", + "bom-ref": "pkg:generic/java@1.8.0_212-b04?package-id=e71647f6945b3d8e", + "name": "java", + "version": "1.8.0_212-b04", + "cpe": "cpe:2.3:a:oracle:openjdk:1.8.0_212-b04:*:*:*:*:*:*:*", + "purl": "pkg:generic/java@1.8.0_212-b04" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/java-cacerts@1.0-r0?arch=x86_64&distro=alpine-3.9.4&package-id=602ec058807ecf4f", + "publisher": "Natanael Copa ", + "name": "java-cacerts", + "version": "1.0-r0", + "description": "Script to update java cacerts store", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:java-cacerts:java-cacerts:1.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/java-cacerts@1.0-r0?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/community/java-cacerts", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/java-common@0.1-r0?arch=x86_64&distro=alpine-3.9.4&package-id=1f640b6e5c188d45", + "publisher": "Timo Teras ", + "name": "java-common", + "version": "0.1-r0", + "description": "Java common (updates java links)", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:java-common:java-common:0.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/java-common@0.1-r0?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/aports.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun/jce@1.8.0_212?package-id=bca18fa6ca29dd47", + "name": "jce", + "version": "1.8.0_212", + "cpe": "cpe:2.3:a:oracle-corporation:jce:1.8.0_212:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.sun/jce@1.8.0_212", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "fd8cc24a0f2ccf1359dbb80d48f3a2a5cc603fbb" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/jsse/jsse@1.8.0_212?package-id=5a5b44bff4a943d3", + "name": "jsse", + "version": "1.8.0_212", + "cpe": "cpe:2.3:a:oracle-corporation:jsse:1.8.0_212:*:*:*:*:*:*:*", + "purl": "pkg:maven/jsse/jsse@1.8.0_212", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "95fe87433761cca9087bbbb35f3ab201ec7dc73a" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/keyutils-libs@1.6-r0?arch=x86_64&upstream=keyutils&distro=alpine-3.9.4&package-id=82adc21a98dd93f8", + "publisher": "Natanael Copa ", + "name": "keyutils-libs", + "version": "1.6-r0", + "description": "Key utilities library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:keyutils-libs:keyutils-libs:1.6-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/keyutils-libs@1.6-r0?arch=x86_64&upstream=keyutils&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://people.redhat.com/~dhowells/keyutils/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/krb5-conf@1.0-r1?arch=x86_64&distro=alpine-3.9.4&package-id=d9a373b63e1d7760", + "publisher": "Natanael Copa ", + "name": "krb5-conf", + "version": "1.0-r1", + "description": "Shared krb5.conf for both MIT krb5 and heimdal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:krb5-conf:krb5-conf:1.0-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/krb5-conf@1.0-r1?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://web.mit.edu/kerberos/www/ http://h5l.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/krb5-libs@1.15.5-r0?arch=x86_64&upstream=krb5&distro=alpine-3.9.4&package-id=1b490c6a76e8de9e", + "publisher": "Natanael Copa ", + "name": "krb5-libs", + "version": "1.15.5-r0", + "description": "The shared libraries used by Kerberos 5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:krb5-libs:krb5-libs:1.15.5-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/krb5-libs@1.15.5-r0?arch=x86_64&upstream=krb5&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://web.mit.edu/kerberos/www/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/lcms2@2.9-r1?arch=x86_64&distro=alpine-3.9.4&package-id=715865191ba47afc", + "publisher": "Natanael Copa ", + "name": "lcms2", + "version": "2.9-r1", + "description": "Color Management Engine", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lcms2:lcms2:2.9-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/lcms2@2.9-r1?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://www.littlecms.com", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libbsd@0.8.6-r2?arch=x86_64&distro=alpine-3.9.4&package-id=fba3949810bbcaa6", + "publisher": "William Pitcock ", + "name": "libbsd", + "version": "0.8.6-r2", + "description": "commonly-used BSD functions not implemented by all libcs", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:libbsd:libbsd:0.8.6-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libbsd@0.8.6-r2?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://libbsd.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libbz2@1.0.6-r6?arch=x86_64&upstream=bzip2&distro=alpine-3.9.4&package-id=7abefaac69512737", + "publisher": "Natanael Copa ", + "name": "libbz2", + "version": "1.0.6-r6", + "description": "Shared library for bz2", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:libbz2:libbz2:1.0.6-r6:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libbz2@1.0.6-r6?arch=x86_64&upstream=bzip2&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://sources.redhat.com/bzip2", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.1-r0?arch=x86_64&upstream=libc-dev&distro=alpine-3.9.4&package-id=f1efc120e7d9e31b", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.1-r0", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.1-r0?arch=x86_64&upstream=libc-dev&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcom_err@1.44.5-r0?arch=x86_64&upstream=e2fsprogs&distro=alpine-3.9.4&package-id=57a9cac52abf811f", + "publisher": "Natanael Copa ", + "name": "libcom_err", + "version": "1.44.5-r0", + "description": "Common error description library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libcom-err:libcom-err:1.44.5-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcom_err@1.44.5-r0?arch=x86_64&upstream=e2fsprogs&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://e2fsprogs.sourceforge.net", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto1.1@1.1.1b-r1?arch=x86_64&upstream=openssl&distro=alpine-3.9.4&package-id=40f51ac175781d2d", + "publisher": "Timo Teras ", + "name": "libcrypto1.1", + "version": "1.1.1b-r1", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1b-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1b-r1?arch=x86_64&upstream=openssl&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://www.openssl.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libffi@3.2.1-r6?arch=x86_64&distro=alpine-3.9.4&package-id=8075dee98777280", + "publisher": "Natanael Copa ", + "name": "libffi", + "version": "3.2.1-r6", + "description": "A portable, high level programming interface to various calling conventions.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libffi:libffi:3.2.1-r6:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libffi@3.2.1-r6?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://sourceware.org/libffi", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgcc@8.3.0-r0?arch=x86_64&upstream=gcc&distro=alpine-3.9.4&package-id=8a3b62229918f6f4", + "publisher": "Natanael Copa ", + "name": "libgcc", + "version": "8.3.0-r0", + "description": "GNU C compiler runtime libraries", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcc:libgcc:8.3.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgcc@8.3.0-r0?arch=x86_64&upstream=gcc&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libjpeg-turbo@1.5.3-r4?arch=x86_64&distro=alpine-3.9.4&package-id=be7d740544f70578", + "publisher": "Natanael Copa ", + "name": "libjpeg-turbo", + "version": "1.5.3-r4", + "description": "accelerated baseline JPEG compression and decompression library", + "licenses": [ + { + "license": { + "id": "IJG" + } + } + ], + "cpe": "cpe:2.3:a:libjpeg-turbo:libjpeg-turbo:1.5.3-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libjpeg-turbo@1.5.3-r4?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://libjpeg-turbo.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libpng@1.6.37-r0?arch=x86_64&distro=alpine-3.9.4&package-id=80d3f1682193c07b", + "publisher": "Natanael Copa ", + "name": "libpng", + "version": "1.6.37-r0", + "description": "Portable Network Graphics library", + "licenses": [ + { + "license": { + "id": "Libpng" + } + } + ], + "cpe": "cpe:2.3:a:libpng:libpng:1.6.37-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libpng@1.6.37-r0?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://www.libpng.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl1.1@1.1.1b-r1?arch=x86_64&upstream=openssl&distro=alpine-3.9.4&package-id=5476af5bb147929d", + "publisher": "Timo Teras ", + "name": "libssl1.1", + "version": "1.1.1b-r1", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1b-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl1.1@1.1.1b-r1?arch=x86_64&upstream=openssl&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://www.openssl.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libstdc++@8.3.0-r0?arch=x86_64&upstream=gcc&distro=alpine-3.9.4&package-id=3f67f6b0d2dd7b69", + "publisher": "Natanael Copa ", + "name": "libstdc++", + "version": "8.3.0-r0", + "description": "GNU C++ standard runtime library", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:8.3.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libstdc++@8.3.0-r0?arch=x86_64&upstream=gcc&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libtasn1@4.13-r0?arch=x86_64&distro=alpine-3.9.4&package-id=9c38e06d5284c2dd", + "publisher": "Natanael Copa ", + "name": "libtasn1", + "version": "4.13-r0", + "description": "The ASN.1 library used in GNUTLS", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libtasn1:libtasn1:4.13-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libtasn1@4.13-r0?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/gnutls/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libtls-standalone@2.7.4-r6?arch=x86_64&distro=alpine-3.9.4&package-id=ae20bd0a3178821a", + "publisher": "William Pitcock ", + "name": "libtls-standalone", + "version": "2.7.4-r6", + "description": "libtls extricated from libressl sources", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libtls-standalone:libtls-standalone:2.7.4-r6:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libtls-standalone@2.7.4-r6?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://www.libressl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libverto@0.3.0-r1?arch=x86_64&distro=alpine-3.9.4&package-id=7edf9b3d753fa296", + "publisher": "Francesco Colista ", + "name": "libverto", + "version": "0.3.0-r1", + "description": "Main loop abstraction library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:npmccallum:libverto:0.3.0-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libverto@0.3.0-r1?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://github.com/npmccallum/libverto", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libx11@1.6.7-r0?arch=x86_64&distro=alpine-3.9.4&package-id=baabf61763795057", + "publisher": "Natanael Copa ", + "name": "libx11", + "version": "1.6.7-r0", + "description": "X11 client-side library", + "licenses": [ + { + "license": { + "name": "custom:XFREE86" + } + } + ], + "cpe": "cpe:2.3:a:libx11:libx11:1.6.7-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libx11@1.6.7-r0?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxau@1.0.8-r3?arch=x86_64&distro=alpine-3.9.4&package-id=9ca8d6221fa823da", + "publisher": "Natanael Copa ", + "name": "libxau", + "version": "1.0.8-r3", + "description": "X11 authorisation library", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libxau:libxau:1.0.8-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxau@1.0.8-r3?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxcb@1.13-r2?arch=x86_64&distro=alpine-3.9.4&package-id=83d685c2793c57b4", + "publisher": "Natanael Copa ", + "name": "libxcb", + "version": "1.13-r2", + "description": "X11 client-side library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libxcb:libxcb:1.13-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxcb@1.13-r2?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://xcb.freedesktop.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxcomposite@0.4.4-r2?arch=x86_64&distro=alpine-3.9.4&package-id=7cab3834fb38c41d", + "publisher": "Natanael Copa ", + "name": "libxcomposite", + "version": "0.4.4-r2", + "description": "X11 Composite extension library", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libxcomposite:libxcomposite:0.4.4-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxcomposite@0.4.4-r2?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxdmcp@1.1.2-r5?arch=x86_64&distro=alpine-3.9.4&package-id=111ec23c46f34c19", + "publisher": "Natanael Copa ", + "name": "libxdmcp", + "version": "1.1.2-r5", + "description": "X11 Display Manager Control Protocol library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libxdmcp:libxdmcp:1.1.2-r5:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxdmcp@1.1.2-r5?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxext@1.3.3-r3?arch=x86_64&distro=alpine-3.9.4&package-id=fb98d23c55553290", + "publisher": "Natanael Copa ", + "name": "libxext", + "version": "1.3.3-r3", + "description": "X11 miscellaneous extensions library", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libxext:libxext:1.3.3-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxext@1.3.3-r3?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxi@1.7.9-r2?arch=x86_64&distro=alpine-3.9.4&package-id=f71fe5e8b4d26aa0", + "publisher": "Natanael Copa ", + "name": "libxi", + "version": "1.7.9-r2", + "description": "X11 Input extension library", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libxi:libxi:1.7.9-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxi@1.7.9-r2?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxrender@0.9.10-r3?arch=x86_64&distro=alpine-3.9.4&package-id=fdca5d3c6e7fd6f9", + "publisher": "Natanael Copa ", + "name": "libxrender", + "version": "0.9.10-r3", + "description": "X Rendering Extension client library", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libxrender:libxrender:0.9.10-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxrender@0.9.10-r3?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxtst@1.2.3-r2?arch=x86_64&distro=alpine-3.9.4&package-id=e3be10bbfccda5b4", + "publisher": "Natanael Copa ", + "name": "libxtst", + "version": "1.2.3-r2", + "description": "X11 Testing -- Resource extension library", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libxtst:libxtst:1.2.3-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxtst@1.2.3-r2?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/lksctp-tools@1.0.17-r0?arch=x86_64&distro=alpine-3.9.4&package-id=4354c714b3b998af", + "publisher": "Natanael Copa ", + "name": "lksctp-tools", + "version": "1.0.17-r0", + "description": "User-space access to Linux Kernel SCTP", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "and" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "and" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "name": "and" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lksctp-tools:lksctp-tools:1.0.17-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/lksctp-tools@1.0.17-r0?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://lksctp.sourceforge.net", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/local_policy/local_policy?package-id=ce32d805bb8dfe2d", + "name": "local_policy", + "cpe": "cpe:2.3:a:local-policy:local-policy:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/local_policy/local_policy", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "ab8c2f861765669b32140efd655941d4e7c07686" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/local_policy/local_policy?package-id=93c833e485d52707", + "name": "local_policy", + "cpe": "cpe:2.3:a:local-policy:local-policy:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/local_policy/local_policy", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "b58059aa9d47f1e2d6825e1ca692a3e3927b85cc" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/localedata/localedata?package-id=e1c81a9e51e17f2a", + "name": "localedata", + "cpe": "cpe:2.3:a:localedata:localedata:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/localedata/localedata", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "2ddb20ac95c78b9b99b7ed1f3761bfb740c37d8f" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/management-agent/management-agent?package-id=ee2660a251230db6", + "name": "management-agent", + "cpe": "cpe:2.3:a:management-agent:management-agent:*:*:*:*:*:*:*:*", + "purl": "pkg:maven/management-agent/management-agent", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "5ad935729a468d94baf71680381a6771ec32ed4b" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.1.20-r4?arch=x86_64&distro=alpine-3.9.4&package-id=da77d7b818dcca83", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.1.20-r4", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.1.20-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.1.20-r4?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://www.musl-libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.1.20-r4?arch=x86_64&upstream=musl&distro=alpine-3.9.4&package-id=f4c28b86d9856cfc", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.1.20-r4", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.1.20-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.1.20-r4?arch=x86_64&upstream=musl&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://www.musl-libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/nashorn/nashorn@1.8.0_212-b04?package-id=606955922ee09a52", + "name": "nashorn", + "version": "1.8.0_212-b04", + "cpe": "cpe:2.3:a:oracle-corporation:nashorn:1.8.0_212-b04:*:*:*:*:*:*:*", + "purl": "pkg:maven/nashorn/nashorn@1.8.0_212-b04", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "fbe08ca5288808c2d51b7b21dfa83033d530e49b" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/nspr@4.20-r0?arch=x86_64&distro=alpine-3.9.4&package-id=722c83ce60fccd1a", + "publisher": "Natanael Copa ", + "name": "nspr", + "version": "4.20-r0", + "description": "Netscape Portable Runtime", + "licenses": [ + { + "license": { + "id": "MPL-1.1" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:nspr:nspr:4.20-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/nspr@4.20-r0?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://www.mozilla.org/projects/nspr/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/nss@3.41-r0?arch=x86_64&distro=alpine-3.9.4&package-id=eccfe151a68528f2", + "publisher": "Natanael Copa ", + "name": "nss", + "version": "3.41-r0", + "description": "Mozilla Network Security Services", + "licenses": [ + { + "license": { + "name": "MPL" + } + }, + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:nss:nss:3.41-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/nss@3.41-r0?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://www.mozilla.org/projects/security/pki/nss/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/openjdk8-jre@8.212.04-r0?arch=x86_64&upstream=openjdk8&distro=alpine-3.9.4&package-id=8d1763f1e329f423", + "publisher": "Timo Teras ", + "name": "openjdk8-jre", + "version": "8.212.04-r0", + "description": "OpenJDK 8 Java Runtime", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:openjdk8-jre:openjdk8-jre:8.212.04-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/openjdk8-jre@8.212.04-r0?arch=x86_64&upstream=openjdk8&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://icedtea.classpath.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/openjdk8-jre-base@8.212.04-r0?arch=x86_64&upstream=openjdk8&distro=alpine-3.9.4&package-id=7f93e18ec5e9327e", + "publisher": "Timo Teras ", + "name": "openjdk8-jre-base", + "version": "8.212.04-r0", + "description": "OpenJDK 8 Java Runtime (no GUI support)", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:openjdk8-jre-base:openjdk8-jre-base:8.212.04-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/openjdk8-jre-base@8.212.04-r0?arch=x86_64&upstream=openjdk8&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://icedtea.classpath.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/openjdk8-jre-lib@8.212.04-r0?arch=x86_64&upstream=openjdk8&distro=alpine-3.9.4&package-id=e3fa1d68ed731a25", + "publisher": "Timo Teras ", + "name": "openjdk8-jre-lib", + "version": "8.212.04-r0", + "description": "OpenJDK 8 Java Runtime (class libraries)", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:openjdk8-jre-lib:openjdk8-jre-lib:8.212.04-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/openjdk8-jre-lib@8.212.04-r0?arch=x86_64&upstream=openjdk8&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://icedtea.classpath.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/p11-kit@0.23.14-r0?arch=x86_64&distro=alpine-3.9.4&package-id=407a5ed3debd16f7", + "publisher": "Fabian Affolter ", + "name": "p11-kit", + "version": "0.23.14-r0", + "description": "Library for loading and sharing PKCS#11 modules", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:p11-kit:p11-kit:0.23.14-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/p11-kit@0.23.14-r0?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://p11-glue.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/p11-kit-trust@0.23.14-r0?arch=x86_64&upstream=p11-kit&distro=alpine-3.9.4&package-id=c33bbbefa20e1e9b", + "publisher": "Fabian Affolter ", + "name": "p11-kit-trust", + "version": "0.23.14-r0", + "description": "System trust module from p11-kit", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:p11-kit-trust:p11-kit-trust:0.23.14-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/p11-kit-trust@0.23.14-r0?arch=x86_64&upstream=p11-kit&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://p11-glue.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/pcsc-lite-libs@1.8.24-r1?arch=x86_64&upstream=pcsc-lite&distro=alpine-3.9.4&package-id=d0a4cb0758393878", + "publisher": "Timo Teräs ", + "name": "pcsc-lite-libs", + "version": "1.8.24-r1", + "description": "Middleware to access a smart card using SCard API (PC/SC) (libraries)", + "licenses": [ + { + "license": { + "name": "Custom" + } + } + ], + "cpe": "cpe:2.3:a:pcsc-lite-libs:pcsc-lite-libs:1.8.24-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/pcsc-lite-libs@1.8.24-r1?arch=x86_64&upstream=pcsc-lite&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://pcsclite.apdu.fr/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/resources/resources@1.8.0_212?package-id=6892c0c1953b226d", + "name": "resources", + "version": "1.8.0_212", + "cpe": "cpe:2.3:a:oracle-corporation:resources:1.8.0_212:*:*:*:*:*:*:*", + "purl": "pkg:maven/resources/resources@1.8.0_212", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "058b0b5d2fa4d1c6e861077f9b505d18784c54dd" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/rt/rt@1.8.0_212?package-id=504c24e42b62eb5f", + "name": "rt", + "version": "1.8.0_212", + "cpe": "cpe:2.3:a:oracle-corporation:rt:1.8.0_212:*:*:*:*:*:*:*", + "purl": "pkg:maven/rt/rt@1.8.0_212", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "8bfb18575ade5c7352c449326354426a97e99eff" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.2.3-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.9.4&package-id=a04b4c0278a4015c", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.2.3-r0", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.2.3-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.2.3-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/sqlite-libs@3.26.0-r3?arch=x86_64&upstream=sqlite&distro=alpine-3.9.4&package-id=25c740fcd85e3d6c", + "publisher": "Carlo Landmeter ", + "name": "sqlite-libs", + "version": "3.26.0-r3", + "description": "Sqlite3 library", + "licenses": [ + { + "license": { + "name": "Public-Domain" + } + } + ], + "cpe": "cpe:2.3:a:sqlite-libs:sqlite-libs:3.26.0-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/sqlite-libs@3.26.0-r3?arch=x86_64&upstream=sqlite&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://www.sqlite.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.29.3-r10?arch=x86_64&upstream=busybox&distro=alpine-3.9.4&package-id=d77875e77b763cf9", + "publisher": "Natanael Copa ", + "name": "ssl_client", + "version": "1.29.3-r10", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.29.3-r10:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.29.3-r10?arch=x86_64&upstream=busybox&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://busybox.net", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun/sunec@1.8.0_212?package-id=3a6bfbe372f66229", + "name": "sunec", + "version": "1.8.0_212", + "cpe": "cpe:2.3:a:oracle-corporation:sunec:1.8.0_212:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.sun/sunec@1.8.0_212", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "28b0b4b73a2e3ad2d1ba948859d61614be535496" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun/sunjce_provider@1.8.0_212?package-id=671357c13741117b", + "name": "sunjce_provider", + "version": "1.8.0_212", + "cpe": "cpe:2.3:a:oracle-corporation:sunjce-provider:1.8.0_212:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.sun/sunjce_provider@1.8.0_212", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "9ee8b3a1deadc99d937a99436e28d2165526dc52" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun/sunpkcs11@1.8.0_212?package-id=3daf763897494509", + "name": "sunpkcs11", + "version": "1.8.0_212", + "cpe": "cpe:2.3:a:oracle-corporation:sunpkcs11:1.8.0_212:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.sun/sunpkcs11@1.8.0_212", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "3336e4ed99c6af1494984ea8459a600efe43231e" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/zipfs/zipfs@1.8.0_212?package-id=d289699e0ed8cb87", + "name": "zipfs", + "version": "1.8.0_212", + "cpe": "cpe:2.3:a:oracle-corporation:zipfs:1.8.0_212:*:*:*:*:*:*:*", + "purl": "pkg:maven/zipfs/zipfs@1.8.0_212", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "ef8360bb3117276313d0588d71767d44b021d498" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.11-r1?arch=x86_64&distro=alpine-3.9.4&package-id=ef697b2585f09f7f", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.11-r1", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.11-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.11-r1?arch=x86_64&distro=alpine-3.9.4", + "externalReferences": [ + { + "url": "http://zlib.net", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.9.4", + "description": "Alpine Linux v3.9", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.9.4" + }, + "externalReferences": [ + { + "url": "https://bugs.alpinelinux.org/", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/audit-libs@3.0.7-2.el8.2?arch=x86_64&upstream=audit-3.0.7-2.el8.2.src.rpm&distro=rhel-8.6&package-id=66e683a1875601a6", + "publisher": "Red Hat, Inc.", + "name": "audit-libs", + "version": "3.0.7-2.el8.2", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:audit-libs:audit-libs:3.0.7-2.el8.2:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/audit-libs@3.0.7-2.el8.2?arch=x86_64&upstream=audit-3.0.7-2.el8.2.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/basesystem@11-5.el8?arch=noarch&upstream=basesystem-11-5.el8.src.rpm&distro=rhel-8.6&package-id=32ab6ec64951c2f9", + "publisher": "Red Hat, Inc.", + "name": "basesystem", + "version": "11-5.el8", + "licenses": [ + { + "license": { + "name": "Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:basesystem:basesystem:11-5.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/basesystem@11-5.el8?arch=noarch&upstream=basesystem-11-5.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/bash@4.4.20-4.el8_6?arch=x86_64&upstream=bash-4.4.20-4.el8_6.src.rpm&distro=rhel-8.6&package-id=3a3e27ed335150ba", + "publisher": "Red Hat, Inc.", + "name": "bash", + "version": "4.4.20-4.el8_6", + "licenses": [ + { + "license": { + "name": "GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:redhat:bash:4.4.20-4.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/bash@4.4.20-4.el8_6?arch=x86_64&upstream=bash-4.4.20-4.el8_6.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/brotli@1.0.6-3.el8?arch=x86_64&upstream=brotli-1.0.6-3.el8.src.rpm&distro=rhel-8.6&package-id=f870f5a4c3c9509e", + "publisher": "Red Hat, Inc.", + "name": "brotli", + "version": "1.0.6-3.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brotli:brotli:1.0.6-3.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/brotli@1.0.6-3.el8?arch=x86_64&upstream=brotli-1.0.6-3.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/bzip2-libs@1.0.6-26.el8?arch=x86_64&upstream=bzip2-1.0.6-26.el8.src.rpm&distro=rhel-8.6&package-id=bac3b5b8910ea8", + "publisher": "Red Hat, Inc.", + "name": "bzip2-libs", + "version": "1.0.6-26.el8", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:bzip2-libs:bzip2-libs:1.0.6-26.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/bzip2-libs@1.0.6-26.el8?arch=x86_64&upstream=bzip2-1.0.6-26.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/ca-certificates@2022.2.54-80.2.el8_6?arch=noarch&upstream=ca-certificates-2022.2.54-80.2.el8_6.src.rpm&distro=rhel-8.6&package-id=a9ae7ff2ca0aefda", + "publisher": "Red Hat, Inc.", + "name": "ca-certificates", + "version": "2022.2.54-80.2.el8_6", + "licenses": [ + { + "license": { + "name": "Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:2022.2.54-80.2.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/ca-certificates@2022.2.54-80.2.el8_6?arch=noarch&upstream=ca-certificates-2022.2.54-80.2.el8_6.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/chkconfig@1.19.1-1.el8?arch=x86_64&upstream=chkconfig-1.19.1-1.el8.src.rpm&distro=rhel-8.6&package-id=43d15da7260fb61b", + "publisher": "Red Hat, Inc.", + "name": "chkconfig", + "version": "1.19.1-1.el8", + "licenses": [ + { + "license": { + "name": "GPLv2" + } + } + ], + "cpe": "cpe:2.3:a:chkconfig:chkconfig:1.19.1-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/chkconfig@1.19.1-1.el8?arch=x86_64&upstream=chkconfig-1.19.1-1.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:golang/cloud.google.com/go@v0.104.0?package-id=e5fa38b4cb58bd44", + "name": "cloud.google.com/go", + "version": "v0.104.0", + "purl": "pkg:golang/cloud.google.com/go@v0.104.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/cloud.google.com/go/compute@v1.10.0?package-id=76b0548566928b7a", + "name": "cloud.google.com/go/compute", + "version": "v1.10.0", + "cpe": "cpe:2.3:a:go:compute:v1.10.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/cloud.google.com/go/compute@v1.10.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/cloud.google.com/go/iam@v0.4.0?package-id=7548bc9844825eb8", + "name": "cloud.google.com/go/iam", + "version": "v0.4.0", + "cpe": "cpe:2.3:a:go:iam:v0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/cloud.google.com/go/iam@v0.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/cloud.google.com/go/storage@v1.26.0?package-id=a022debfe49630be", + "name": "cloud.google.com/go/storage", + "version": "v1.26.0", + "cpe": "cpe:2.3:a:go:storage:v1.26.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/cloud.google.com/go/storage@v1.26.0" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/coreutils-single@8.30-12.el8?arch=x86_64&upstream=coreutils-8.30-12.el8.src.rpm&distro=rhel-8.6&package-id=7540137126f39d71", + "publisher": "Red Hat, Inc.", + "name": "coreutils-single", + "version": "8.30-12.el8", + "licenses": [ + { + "license": { + "name": "GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:coreutils-single:coreutils-single:8.30-12.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/coreutils-single@8.30-12.el8?arch=x86_64&upstream=coreutils-8.30-12.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/cracklib@2.9.6-15.el8?arch=x86_64&upstream=cracklib-2.9.6-15.el8.src.rpm&distro=rhel-8.6&package-id=fbcbd1b8e9d6c609", + "publisher": "Red Hat, Inc.", + "name": "cracklib", + "version": "2.9.6-15.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:cracklib:cracklib:2.9.6-15.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/cracklib@2.9.6-15.el8?arch=x86_64&upstream=cracklib-2.9.6-15.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/cracklib-dicts@2.9.6-15.el8?arch=x86_64&upstream=cracklib-2.9.6-15.el8.src.rpm&distro=rhel-8.6&package-id=5583133586aef509", + "publisher": "Red Hat, Inc.", + "name": "cracklib-dicts", + "version": "2.9.6-15.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:cracklib-dicts:cracklib-dicts:2.9.6-15.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/cracklib-dicts@2.9.6-15.el8?arch=x86_64&upstream=cracklib-2.9.6-15.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/crypto-policies@20211116-1.gitae470d6.el8?arch=noarch&upstream=crypto-policies-20211116-1.gitae470d6.el8.src.rpm&distro=rhel-8.6&package-id=d0c79ee3e4914c6a", + "publisher": "Red Hat, Inc.", + "name": "crypto-policies", + "version": "20211116-1.gitae470d6.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:crypto-policies:crypto-policies:20211116-1.gitae470d6.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/crypto-policies@20211116-1.gitae470d6.el8?arch=noarch&upstream=crypto-policies-20211116-1.gitae470d6.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/curl@7.61.1-22.el8_6.4?arch=x86_64&upstream=curl-7.61.1-22.el8_6.4.src.rpm&distro=rhel-8.6&package-id=a2890d13e930db6a", + "publisher": "Red Hat, Inc.", + "name": "curl", + "version": "7.61.1-22.el8_6.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:redhat:curl:7.61.1-22.el8_6.4:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/curl@7.61.1-22.el8_6.4?arch=x86_64&upstream=curl-7.61.1-22.el8_6.4.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/cyrus-sasl-lib@2.1.27-6.el8_5?arch=x86_64&upstream=cyrus-sasl-2.1.27-6.el8_5.src.rpm&distro=rhel-8.6&package-id=b8eb1522e7ef9f09", + "publisher": "Red Hat, Inc.", + "name": "cyrus-sasl-lib", + "version": "2.1.27-6.el8_5", + "licenses": [ + { + "license": { + "name": "BSD with advertising" + } + } + ], + "cpe": "cpe:2.3:a:cyrus-sasl-lib:cyrus-sasl-lib:2.1.27-6.el8_5:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/cyrus-sasl-lib@2.1.27-6.el8_5?arch=x86_64&upstream=cyrus-sasl-2.1.27-6.el8_5.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/elfutils-libelf@0.186-1.el8?arch=x86_64&upstream=elfutils-0.186-1.el8.src.rpm&distro=rhel-8.6&package-id=185c0ed992424df9", + "publisher": "Red Hat, Inc.", + "name": "elfutils-libelf", + "version": "0.186-1.el8", + "licenses": [ + { + "license": { + "name": "GPLv2+ or LGPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:elfutils-libelf:elfutils-libelf:0.186-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/elfutils-libelf@0.186-1.el8?arch=x86_64&upstream=elfutils-0.186-1.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/epel-release@8-17.el8?arch=noarch&upstream=epel-release-8-17.el8.src.rpm&distro=rhel-8.6&package-id=3b935f3cb36bec5c", + "publisher": "Fedora Project", + "name": "epel-release", + "version": "8-17.el8", + "licenses": [ + { + "license": { + "name": "GPLv2" + } + } + ], + "cpe": "cpe:2.3:a:fedoraproject:epel-release:8-17.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/epel-release@8-17.el8?arch=noarch&upstream=epel-release-8-17.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/file-libs@5.33-20.el8?arch=x86_64&upstream=file-5.33-20.el8.src.rpm&distro=rhel-8.6&package-id=e27c01b0a8977c13", + "publisher": "Red Hat, Inc.", + "name": "file-libs", + "version": "5.33-20.el8", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:file-libs:file-libs:5.33-20.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/file-libs@5.33-20.el8?arch=x86_64&upstream=file-5.33-20.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/filesystem@3.8-6.el8?arch=x86_64&upstream=filesystem-3.8-6.el8.src.rpm&distro=rhel-8.6&package-id=240b338f77f520be", + "publisher": "Red Hat, Inc.", + "name": "filesystem", + "version": "3.8-6.el8", + "licenses": [ + { + "license": { + "name": "Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:filesystem:filesystem:3.8-6.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/filesystem@3.8-6.el8?arch=x86_64&upstream=filesystem-3.8-6.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/gawk@4.2.1-4.el8?arch=x86_64&upstream=gawk-4.2.1-4.el8.src.rpm&distro=rhel-8.6&package-id=ff58f12bc5f8f7ba", + "publisher": "Red Hat, Inc.", + "name": "gawk", + "version": "4.2.1-4.el8", + "licenses": [ + { + "license": { + "name": "GPLv3+ and GPLv2+ and LGPLv2+ and BSD" + } + } + ], + "cpe": "cpe:2.3:a:redhat:gawk:4.2.1-4.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/gawk@4.2.1-4.el8?arch=x86_64&upstream=gawk-4.2.1-4.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/azure-pipeline-go@v0.2.3?package-id=d7dc018b2e73b988", + "name": "github.com/Azure/azure-pipeline-go", + "version": "v0.2.3", + "cpe": "cpe:2.3:a:Azure:azure-pipeline-go:v0.2.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/azure-pipeline-go@v0.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/azure-storage-blob-go@v0.15.0?package-id=61566e3901526712", + "name": "github.com/Azure/azure-storage-blob-go", + "version": "v0.15.0", + "cpe": "cpe:2.3:a:Azure:azure-storage-blob-go:v0.15.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/azure-storage-blob-go@v0.15.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/go-ntlmssp@v0.0.0-20220621081337-cb9428e4ac1e?package-id=de6fcfb91e74d692", + "name": "github.com/Azure/go-ntlmssp", + "version": "v0.0.0-20220621081337-cb9428e4ac1e", + "cpe": "cpe:2.3:a:Azure:go-ntlmssp:v0.0.0-20220621081337-cb9428e4ac1e:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/go-ntlmssp@v0.0.0-20220621081337-cb9428e4ac1e" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/shopify/sarama@v1.36.0?package-id=5432bbbb95e3bc6", + "name": "github.com/Shopify/sarama", + "version": "v1.36.0", + "cpe": "cpe:2.3:a:Shopify:sarama:v1.36.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Shopify/sarama@v1.36.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/alecthomas/participle@v0.7.1?package-id=8eaa9ff66ac98731", + "name": "github.com/alecthomas/participle", + "version": "v0.7.1", + "cpe": "cpe:2.3:a:alecthomas:participle:v0.7.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/alecthomas/participle@v0.7.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/apache/thrift@v0.16.0?package-id=10a5a82e0846fbb5", + "name": "github.com/apache/thrift", + "version": "v0.16.0", + "cpe": "cpe:2.3:a:apache:thrift:v0.16.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/apache/thrift@v0.16.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20210307081110-f21760c49a8d?package-id=c2a6f429564cfc33", + "name": "github.com/asaskevich/govalidator", + "version": "v0.0.0-20210307081110-f21760c49a8d", + "cpe": "cpe:2.3:a:asaskevich:govalidator:v0.0.0-20210307081110-f21760c49a8d:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20210307081110-f21760c49a8d" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/aymanbagabas/go-osc52@v1.2.1?package-id=b65191faeeac88b", + "name": "github.com/aymanbagabas/go-osc52", + "version": "v1.2.1", + "cpe": "cpe:2.3:a:aymanbagabas:go-osc52:v1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aymanbagabas/go-osc52@v1.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/bcicen/jstream@v1.0.1?package-id=f967db1d4fc27678", + "name": "github.com/bcicen/jstream", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:bcicen:jstream:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/bcicen/jstream@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/beevik/ntp@v0.3.0?package-id=d5bb5fceb82dd575", + "name": "github.com/beevik/ntp", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:beevik:ntp:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/beevik/ntp@v0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=1c6269c6bdce2a46", + "name": "github.com/beorn7/perks", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/beorn7/perks@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/bits-and-blooms/bitset@v1.3.3?package-id=6a3d99472e8049fb", + "name": "github.com/bits-and-blooms/bitset", + "version": "v1.3.3", + "cpe": "cpe:2.3:a:bits-and-blooms:bitset:v1.3.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/bits-and-blooms/bitset@v1.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/bits-and-blooms/bloom/v3@v3.3.1?package-id=ee8382cd38aa897d", + "name": "github.com/bits-and-blooms/bloom/v3", + "version": "v3.3.1", + "cpe": "cpe:2.3:a:bits-and-blooms:bloom\\/v3:v3.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/bits-and-blooms/bloom/v3@v3.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/buger/jsonparser@v1.1.1?package-id=d82df197fc7f7aea", + "name": "github.com/buger/jsonparser", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:buger:jsonparser:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/buger/jsonparser@v1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.1.2?package-id=7bfd1b1b69a3c200", + "name": "github.com/cespare/xxhash/v2", + "version": "v2.1.2", + "cpe": "cpe:2.3:a:cespare:xxhash\\/v2:v2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/charmbracelet/bubbles@v0.14.0?package-id=a8010010fa34eb", + "name": "github.com/charmbracelet/bubbles", + "version": "v0.14.0", + "cpe": "cpe:2.3:a:charmbracelet:bubbles:v0.14.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/charmbracelet/bubbles@v0.14.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/charmbracelet/bubbletea@v0.22.1?package-id=59cc4784dc7fffc5", + "name": "github.com/charmbracelet/bubbletea", + "version": "v0.22.1", + "cpe": "cpe:2.3:a:charmbracelet:bubbletea:v0.22.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/charmbracelet/bubbletea@v0.22.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/charmbracelet/lipgloss@v0.6.0?package-id=c44f9620fcfbc0b0", + "name": "github.com/charmbracelet/lipgloss", + "version": "v0.6.0", + "cpe": "cpe:2.3:a:charmbracelet:lipgloss:v0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/charmbracelet/lipgloss@v0.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/cheggaaa/pb@v1.0.29?package-id=361c9996c84d511e", + "name": "github.com/cheggaaa/pb", + "version": "v1.0.29", + "cpe": "cpe:2.3:a:cheggaaa:pb:v1.0.29:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cheggaaa/pb@v1.0.29" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/containerd/console@v1.0.3?package-id=263e1f82d13ec9d5", + "name": "github.com/containerd/console", + "version": "v1.0.3", + "cpe": "cpe:2.3:a:containerd:console:v1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/containerd/console@v1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/coredns/coredns@v1.9.4?package-id=5585ad513e0f260f", + "name": "github.com/coredns/coredns", + "version": "v1.9.4", + "cpe": "cpe:2.3:a:coredns:coredns:v1.9.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/coredns/coredns@v1.9.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/coreos/go-oidc@v2.2.1+incompatible?package-id=dfbd96e12b86f3d2", + "name": "github.com/coreos/go-oidc", + "version": "v2.2.1+incompatible", + "cpe": "cpe:2.3:a:coreos:go-oidc:v2.2.1\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/coreos/go-oidc@v2.2.1+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/coreos/go-semver@v0.3.0?package-id=be57b11a62f6251c", + "name": "github.com/coreos/go-semver", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:coreos:go-semver:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/coreos/go-semver@v0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/coreos/go-systemd/v22@v22.4.0?package-id=552c1614a0f0fd5d", + "name": "github.com/coreos/go-systemd/v22", + "version": "v22.4.0", + "cpe": "cpe:2.3:a:coreos:go-systemd\\/v22:v22.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/coreos/go-systemd/v22@v22.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/cosnicolaou/pbzip2@v1.0.1?package-id=c0bfa7e7cdcda5bf", + "name": "github.com/cosnicolaou/pbzip2", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:cosnicolaou:pbzip2:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cosnicolaou/pbzip2@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1?package-id=927396c4895d00f1", + "name": "github.com/davecgh/go-spew", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:davecgh:go-spew:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/dchest/siphash@v1.2.3?package-id=837e1d7944105e4f", + "name": "github.com/dchest/siphash", + "version": "v1.2.3", + "cpe": "cpe:2.3:a:dchest:siphash:v1.2.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/dchest/siphash@v1.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/djherbis/atime@v1.1.0?package-id=7b2948b994d1eef0", + "name": "github.com/djherbis/atime", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:djherbis:atime:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/djherbis/atime@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/docker/go-units@v0.5.0?package-id=3aa2eb4bd49f7460", + "name": "github.com/docker/go-units", + "version": "v0.5.0", + "cpe": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/go-units@v0.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/dustin/go-humanize@v1.0.0?package-id=3632ad8766e42b06", + "name": "github.com/dustin/go-humanize", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:dustin:go-humanize:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/dustin/go-humanize@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/eapache/go-resiliency@v1.3.0?package-id=8fca6519a6726253", + "name": "github.com/eapache/go-resiliency", + "version": "v1.3.0", + "cpe": "cpe:2.3:a:eapache:go-resiliency:v1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/eapache/go-resiliency@v1.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/eapache/go-xerial-snappy@v0.0.0-20180814174437-776d5712da21?package-id=5acef2cce95e2ef", + "name": "github.com/eapache/go-xerial-snappy", + "version": "v0.0.0-20180814174437-776d5712da21", + "cpe": "cpe:2.3:a:eapache:go-xerial-snappy:v0.0.0-20180814174437-776d5712da21:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/eapache/go-xerial-snappy@v0.0.0-20180814174437-776d5712da21" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/eapache/queue@v1.1.0?package-id=4484a80d58f0da4d", + "name": "github.com/eapache/queue", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:eapache:queue:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/eapache/queue@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/eclipse/paho.mqtt.golang@v1.4.1?package-id=81f319389b923572", + "name": "github.com/eclipse/paho.mqtt.golang", + "version": "v1.4.1", + "cpe": "cpe:2.3:a:eclipse:paho.mqtt.golang:v1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/eclipse/paho.mqtt.golang@v1.4.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/elastic/go-elasticsearch/v7@v7.17.1?package-id=caadefbcfcdd6f77", + "name": "github.com/elastic/go-elasticsearch/v7", + "version": "v7.17.1", + "cpe": "cpe:2.3:a:elastic:go-elasticsearch\\/v7:v7.17.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/elastic/go-elasticsearch/v7@v7.17.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/fatih/color@v1.13.0?package-id=d41416611fb3fee2", + "name": "github.com/fatih/color", + "version": "v1.13.0", + "cpe": "cpe:2.3:a:fatih:color:v1.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fatih/color@v1.13.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/fatih/structs@v1.1.0?package-id=f99c0c57a96ba34d", + "name": "github.com/fatih/structs", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:fatih:structs:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fatih/structs@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/felixge/fgprof@v0.9.3?package-id=c55534641e7d5703", + "name": "github.com/felixge/fgprof", + "version": "v0.9.3", + "cpe": "cpe:2.3:a:felixge:fgprof:v0.9.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/felixge/fgprof@v0.9.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/fraugster/parquet-go@v0.12.0?package-id=8e1fc2b4ffa20c6a", + "name": "github.com/fraugster/parquet-go", + "version": "v0.12.0", + "cpe": "cpe:2.3:a:fraugster:parquet-go:v0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fraugster/parquet-go@v0.12.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gdamore/encoding@v1.0.0?package-id=fa7dcd88f81282a9", + "name": "github.com/gdamore/encoding", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:gdamore:encoding:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gdamore/encoding@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gdamore/tcell/v2@v2.5.3?package-id=8f5daabd8eb8c830", + "name": "github.com/gdamore/tcell/v2", + "version": "v2.5.3", + "cpe": "cpe:2.3:a:gdamore:tcell\\/v2:v2.5.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gdamore/tcell/v2@v2.5.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-asn1-ber/asn1-ber@v1.5.4?package-id=5885a2bf68b15db5", + "name": "github.com/go-asn1-ber/asn1-ber", + "version": "v1.5.4", + "cpe": "cpe:2.3:a:go-asn1-ber:asn1-ber:v1.5.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-asn1-ber/asn1-ber@v1.5.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-ldap/ldap/v3@v3.4.4?package-id=3896b73efd8264c1", + "name": "github.com/go-ldap/ldap/v3", + "version": "v3.4.4", + "cpe": "cpe:2.3:a:go-ldap:ldap\\/v3:v3.4.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-ldap/ldap/v3@v3.4.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/analysis@v0.21.4?package-id=e7804cdc7771653a", + "name": "github.com/go-openapi/analysis", + "version": "v0.21.4", + "cpe": "cpe:2.3:a:go-openapi:analysis:v0.21.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-openapi/analysis@v0.21.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/errors@v0.20.3?package-id=a3e76da594f47b48", + "name": "github.com/go-openapi/errors", + "version": "v0.20.3", + "cpe": "cpe:2.3:a:go-openapi:errors:v0.20.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-openapi/errors@v0.20.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5?package-id=183770eb28bbc47a", + "name": "github.com/go-openapi/jsonpointer", + "version": "v0.19.5", + "cpe": "cpe:2.3:a:go-openapi:jsonpointer:v0.19.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0?package-id=f855372317a5acd0", + "name": "github.com/go-openapi/jsonreference", + "version": "v0.20.0", + "cpe": "cpe:2.3:a:go-openapi:jsonreference:v0.20.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/loads@v0.21.2?package-id=374b00618c794b75", + "name": "github.com/go-openapi/loads", + "version": "v0.21.2", + "cpe": "cpe:2.3:a:go-openapi:loads:v0.21.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-openapi/loads@v0.21.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/runtime@v0.24.2?package-id=936321d3ce31e7cf", + "name": "github.com/go-openapi/runtime", + "version": "v0.24.2", + "cpe": "cpe:2.3:a:go-openapi:runtime:v0.24.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-openapi/runtime@v0.24.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/spec@v0.20.7?package-id=b828acf7acc0dd33", + "name": "github.com/go-openapi/spec", + "version": "v0.20.7", + "cpe": "cpe:2.3:a:go-openapi:spec:v0.20.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-openapi/spec@v0.20.7" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/strfmt@v0.21.3?package-id=b675f875831b17f7", + "name": "github.com/go-openapi/strfmt", + "version": "v0.21.3", + "cpe": "cpe:2.3:a:go-openapi:strfmt:v0.21.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-openapi/strfmt@v0.21.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.22.3?package-id=710fc982226514d3", + "name": "github.com/go-openapi/swag", + "version": "v0.22.3", + "cpe": "cpe:2.3:a:go-openapi:swag:v0.22.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-openapi/swag@v0.22.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/validate@v0.22.0?package-id=a02d45f4e7b2caf8", + "name": "github.com/go-openapi/validate", + "version": "v0.22.0", + "cpe": "cpe:2.3:a:go-openapi:validate:v0.22.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-openapi/validate@v0.22.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-sql-driver/mysql@v1.6.0?package-id=d12dbb7a797ac8d3", + "name": "github.com/go-sql-driver/mysql", + "version": "v1.6.0", + "cpe": "cpe:2.3:a:go-sql-driver:mysql:v1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-sql-driver/mysql@v1.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2?package-id=bfb1e9d6a52bce66", + "name": "github.com/gogo/protobuf", + "version": "v1.3.2", + "cpe": "cpe:2.3:a:gogo:protobuf:v1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.4.2?package-id=ae2d80fc87f4a800", + "name": "github.com/golang-jwt/jwt/v4", + "version": "v4.4.2", + "cpe": "cpe:2.3:a:golang-jwt:jwt\\/v4:v4.4.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.4.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da?package-id=49956f71b0a7d4e2", + "name": "github.com/golang/groupcache", + "version": "v0.0.0-20210331224755-41bb18bfe9da", + "cpe": "cpe:2.3:a:golang:groupcache:v0.0.0-20210331224755-41bb18bfe9da:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.2?package-id=9bdee3375a3a07ee", + "name": "github.com/golang/protobuf", + "version": "v1.5.2", + "cpe": "cpe:2.3:a:golang:protobuf:v1.5.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/snappy@v0.0.4?package-id=36673a1e8ea61fc5", + "name": "github.com/golang/snappy", + "version": "v0.0.4", + "cpe": "cpe:2.3:a:golang:snappy:v0.0.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/snappy@v0.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gomodule/redigo@v1.8.9?package-id=95c01f3ff42fcf50", + "name": "github.com/gomodule/redigo", + "version": "v1.8.9", + "cpe": "cpe:2.3:a:gomodule:redigo:v1.8.9:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gomodule/redigo@v1.8.9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.5.9?package-id=a46ac69220db825c", + "name": "github.com/google/go-cmp", + "version": "v0.5.9", + "cpe": "cpe:2.3:a:google:go-cmp:v0.5.9:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-cmp@v0.5.9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/pprof@v0.0.0-20220829040838-70bd9ae97f40?package-id=a12b79b9460022c1", + "name": "github.com/google/pprof", + "version": "v0.0.0-20220829040838-70bd9ae97f40", + "cpe": "cpe:2.3:a:google:pprof:v0.0.0-20220829040838-70bd9ae97f40:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/pprof@v0.0.0-20220829040838-70bd9ae97f40" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510?package-id=c26557299240c0e1", + "name": "github.com/google/shlex", + "version": "v0.0.0-20191202100458-e7afc7fbc510", + "cpe": "cpe:2.3:a:google:shlex:v0.0.0-20191202100458-e7afc7fbc510:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/uuid@v1.3.0?package-id=66470a00f501f2f4", + "name": "github.com/google/uuid", + "version": "v1.3.0", + "cpe": "cpe:2.3:a:google:uuid:v1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/uuid@v1.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.1.0?package-id=a19c6930e8486951", + "name": "github.com/googleapis/enterprise-certificate-proxy", + "version": "v0.1.0", + "cpe": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/googleapis/gax-go/v2@v2.5.1?package-id=1c7a5c362f90456d", + "name": "github.com/googleapis/gax-go/v2", + "version": "v2.5.1", + "cpe": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.5.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/googleapis/gax-go/v2@v2.5.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gorilla/mux@v1.8.0?package-id=b14cdef6a123051a", + "name": "github.com/gorilla/mux", + "version": "v1.8.0", + "cpe": "cpe:2.3:a:gorilla:mux:v1.8.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gorilla/mux@v1.8.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gorilla/websocket@v1.5.0?package-id=e1c7c2b28ad15415", + "name": "github.com/gorilla/websocket", + "version": "v1.5.0", + "cpe": "cpe:2.3:a:gorilla:websocket:v1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gorilla/websocket@v1.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0?package-id=a721303979a608fe", + "name": "github.com/hashicorp/errwrap", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1?package-id=2cacda4d32b2243b", + "name": "github.com/hashicorp/go-multierror", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/hashicorp/go-uuid@v1.0.3?package-id=ac4c833aadbfbdda", + "name": "github.com/hashicorp/go-uuid", + "version": "v1.0.3", + "cpe": "cpe:2.3:a:hashicorp:go-uuid:v1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-uuid@v1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/hashicorp/golang-lru@v0.5.4?package-id=d3995209406f708e", + "name": "github.com/hashicorp/golang-lru", + "version": "v0.5.4", + "cpe": "cpe:2.3:a:hashicorp:golang-lru:v0.5.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/golang-lru@v0.5.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/inconshreveable/mousetrap@v1.0.1?package-id=928c94fac157d9fc", + "name": "github.com/inconshreveable/mousetrap", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:inconshreveable:mousetrap:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/inconshreveable/mousetrap@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/jcmturner/aescts/v2@v2.0.0?package-id=2c8046e49b91841c", + "name": "github.com/jcmturner/aescts/v2", + "version": "v2.0.0", + "cpe": "cpe:2.3:a:jcmturner:aescts\\/v2:v2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jcmturner/aescts/v2@v2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/jcmturner/dnsutils/v2@v2.0.0?package-id=734004c5260db35a", + "name": "github.com/jcmturner/dnsutils/v2", + "version": "v2.0.0", + "cpe": "cpe:2.3:a:jcmturner:dnsutils\\/v2:v2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jcmturner/dnsutils/v2@v2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/jcmturner/gofork@v1.7.6?package-id=af39cbdcc7d69bb6", + "name": "github.com/jcmturner/gofork", + "version": "v1.7.6", + "cpe": "cpe:2.3:a:jcmturner:gofork:v1.7.6:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jcmturner/gofork@v1.7.6" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/jcmturner/gokrb5/v8@v8.4.3?package-id=56957a6f89c2f7ac", + "name": "github.com/jcmturner/gokrb5/v8", + "version": "v8.4.3", + "cpe": "cpe:2.3:a:jcmturner:gokrb5\\/v8:v8.4.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jcmturner/gokrb5/v8@v8.4.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/jcmturner/rpc/v2@v2.0.3?package-id=1b5c6b3b1920dd65", + "name": "github.com/jcmturner/rpc/v2", + "version": "v2.0.3", + "cpe": "cpe:2.3:a:jcmturner:rpc\\/v2:v2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jcmturner/rpc/v2@v2.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/jessevdk/go-flags@v1.5.0?package-id=51fc2b2b88da61f7", + "name": "github.com/jessevdk/go-flags", + "version": "v1.5.0", + "cpe": "cpe:2.3:a:jessevdk:go-flags:v1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jessevdk/go-flags@v1.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/josharian/intern@v1.0.0?package-id=ea9e7c2553383be9", + "name": "github.com/josharian/intern", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:josharian:intern:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/josharian/intern@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.12?package-id=7fd28c3aac80d450", + "name": "github.com/json-iterator/go", + "version": "v1.1.12", + "cpe": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/klauspost/compress@v1.15.11?package-id=ee175857ca80438a", + "name": "github.com/klauspost/compress", + "version": "v1.15.11", + "cpe": "cpe:2.3:a:klauspost:compress:v1.15.11:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/klauspost/compress@v1.15.11" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/klauspost/cpuid/v2@v2.1.2?package-id=f20447fffce06b3a", + "name": "github.com/klauspost/cpuid/v2", + "version": "v2.1.2", + "cpe": "cpe:2.3:a:klauspost:cpuid\\/v2:v2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/klauspost/cpuid/v2@v2.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/klauspost/pgzip@v1.2.5?package-id=da4a68ace11f251d", + "name": "github.com/klauspost/pgzip", + "version": "v1.2.5", + "cpe": "cpe:2.3:a:klauspost:pgzip:v1.2.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/klauspost/pgzip@v1.2.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/klauspost/readahead@v1.4.0?package-id=ed0cfe00830d9e98", + "name": "github.com/klauspost/readahead", + "version": "v1.4.0", + "cpe": "cpe:2.3:a:klauspost:readahead:v1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/klauspost/readahead@v1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/klauspost/reedsolomon@v1.11.0?package-id=d95bad06d6fa589e", + "name": "github.com/klauspost/reedsolomon", + "version": "v1.11.0", + "cpe": "cpe:2.3:a:klauspost:reedsolomon:v1.11.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/klauspost/reedsolomon@v1.11.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/lestrrat-go/backoff/v2@v2.0.8?package-id=acc22d1453a4e115", + "name": "github.com/lestrrat-go/backoff/v2", + "version": "v2.0.8", + "cpe": "cpe:2.3:a:lestrrat-go:backoff\\/v2:v2.0.8:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/lestrrat-go/backoff/v2@v2.0.8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.1?package-id=ae1faff25cace8b1", + "name": "github.com/lestrrat-go/blackmagic", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:lestrrat-go:blackmagic:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1?package-id=19e74708e1d85cb6", + "name": "github.com/lestrrat-go/httpcc", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:lestrrat-go:httpcc:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/lestrrat-go/iter@v1.0.2?package-id=f6de4c4e6c08c682", + "name": "github.com/lestrrat-go/iter", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:lestrrat-go:iter:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/lestrrat-go/iter@v1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/lestrrat-go/jwx@v1.2.25?package-id=d146273868f9dacd", + "name": "github.com/lestrrat-go/jwx", + "version": "v1.2.25", + "cpe": "cpe:2.3:a:lestrrat-go:jwx:v1.2.25:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/lestrrat-go/jwx@v1.2.25" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/lestrrat-go/option@v1.0.0?package-id=3ba2542df482596", + "name": "github.com/lestrrat-go/option", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:lestrrat-go:option:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/lestrrat-go/option@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/lib/pq@v1.10.7?package-id=ff24f498769a3566", + "name": "github.com/lib/pq", + "version": "v1.10.7", + "cpe": "cpe:2.3:a:lib:pq:v1.10.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/lib/pq@v1.10.7" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/lithammer/shortuuid/v4@v4.0.0?package-id=7d618ea87be6d52", + "name": "github.com/lithammer/shortuuid/v4", + "version": "v4.0.0", + "cpe": "cpe:2.3:a:lithammer:shortuuid\\/v4:v4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/lithammer/shortuuid/v4@v4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/lucasb-eyer/go-colorful@v1.2.0?package-id=3c79bb2f645bc5d7", + "name": "github.com/lucasb-eyer/go-colorful", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:lucasb-eyer:go-colorful:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/lucasb-eyer/go-colorful@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mailru/easyjson@v0.7.7?package-id=bb1ae4bbcf553795", + "name": "github.com/mailru/easyjson", + "version": "v0.7.7", + "cpe": "cpe:2.3:a:mailru:easyjson:v0.7.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mailru/easyjson@v0.7.7" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mattn/go-colorable@v0.1.13?package-id=3231c19b1f5749f8", + "name": "github.com/mattn/go-colorable", + "version": "v0.1.13", + "cpe": "cpe:2.3:a:mattn:go-colorable:v0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.13" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mattn/go-ieproxy@v0.0.1?package-id=6baacc2223e137eb", + "name": "github.com/mattn/go-ieproxy", + "version": "v0.0.1", + "cpe": "cpe:2.3:a:mattn:go-ieproxy:v0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-ieproxy@v0.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.16?package-id=6c096753e739c733", + "name": "github.com/mattn/go-isatty", + "version": "v0.0.16", + "cpe": "cpe:2.3:a:mattn:go-isatty:v0.0.16:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.16" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mattn/go-localereader@v0.0.1?package-id=a2af36c63dd1ff23", + "name": "github.com/mattn/go-localereader", + "version": "v0.0.1", + "cpe": "cpe:2.3:a:mattn:go-localereader:v0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-localereader@v0.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.14?package-id=da5f9e2c3233ab0f", + "name": "github.com/mattn/go-runewidth", + "version": "v0.0.14", + "cpe": "cpe:2.3:a:mattn:go-runewidth:v0.0.14:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.14" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.2?package-id=2742bd840d0205d", + "name": "github.com/matttproud/golang_protobuf_extensions", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:matttproud:golang-protobuf-extensions:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/miekg/dns@v1.1.50?package-id=40ea89188ba0bf77", + "name": "github.com/miekg/dns", + "version": "v1.1.50", + "cpe": "cpe:2.3:a:miekg:dns:v1.1.50:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/miekg/dns@v1.1.50" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/minio/cli@v1.24.0?package-id=61898b5a5c23c5aa", + "name": "github.com/minio/cli", + "version": "v1.24.0", + "cpe": "cpe:2.3:a:minio:cli:v1.24.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/minio/cli@v1.24.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/minio/colorjson@v1.0.4?package-id=857d9524ef615546", + "name": "github.com/minio/colorjson", + "version": "v1.0.4", + "cpe": "cpe:2.3:a:minio:colorjson:v1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/minio/colorjson@v1.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/minio/console@v0.21.1?package-id=ab9d7b98ac0ab45b", + "name": "github.com/minio/console", + "version": "v0.21.1", + "cpe": "cpe:2.3:a:minio:console:v0.21.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/minio/console@v0.21.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/minio/csvparser@v1.0.0?package-id=c322b8358047c4b0", + "name": "github.com/minio/csvparser", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:minio:csvparser:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/minio/csvparser@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/minio/dperf@v0.4.2?package-id=9d238d243d88f0e6", + "name": "github.com/minio/dperf", + "version": "v0.4.2", + "cpe": "cpe:2.3:a:minio:dperf:v0.4.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/minio/dperf@v0.4.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/minio/filepath@v1.0.0?package-id=f9233a61bf6864b4", + "name": "github.com/minio/filepath", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:minio:filepath:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/minio/filepath@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/minio/highwayhash@v1.0.2?package-id=7b479c5567f2c9a6", + "name": "github.com/minio/highwayhash", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:minio:highwayhash:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/minio/highwayhash@v1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/minio/kes@v0.21.1?package-id=99339414511e9143", + "name": "github.com/minio/kes", + "version": "v0.21.1", + "cpe": "cpe:2.3:a:minio:kes:v0.21.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/minio/kes@v0.21.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/minio/madmin-go@v1.6.6?package-id=ef0be9560a1efd71", + "name": "github.com/minio/madmin-go", + "version": "v1.6.6", + "cpe": "cpe:2.3:a:minio:madmin-go:v1.6.6:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/minio/madmin-go@v1.6.6" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/minio/mc@v0.0.0-20221019004256-8493f97e042f?package-id=85755c26f844b790", + "name": "github.com/minio/mc", + "version": "v0.0.0-20221019004256-8493f97e042f", + "cpe": "cpe:2.3:a:minio:mc:v0.0.0-20221019004256-8493f97e042f:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/minio/mc@v0.0.0-20221019004256-8493f97e042f" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/minio/md5-simd@v1.1.2?package-id=ac74320a0421a79a", + "name": "github.com/minio/md5-simd", + "version": "v1.1.2", + "cpe": "cpe:2.3:a:minio:md5-simd:v1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/minio/md5-simd@v1.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/minio/minio@v0.0.0-20221024183507-fc6c7949727e?package-id=4b70dfc865a348e1", + "name": "github.com/minio/minio", + "version": "v0.0.0-20221024183507-fc6c7949727e", + "cpe": "cpe:2.3:a:minio:minio:v0.0.0-20221024183507-fc6c7949727e:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/minio/minio@v0.0.0-20221024183507-fc6c7949727e" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/minio/minio-go/v7@v7.0.43-0.20221021202758-c6319beb6b27?package-id=c04a11a63a1cc4f", + "name": "github.com/minio/minio-go/v7", + "version": "v7.0.43-0.20221021202758-c6319beb6b27", + "cpe": "cpe:2.3:a:minio:minio-go\\/v7:v7.0.43-0.20221021202758-c6319beb6b27:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/minio/minio-go/v7@v7.0.43-0.20221021202758-c6319beb6b27" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/minio/pkg@v1.5.4?package-id=7f5d702778d8d160", + "name": "github.com/minio/pkg", + "version": "v1.5.4", + "cpe": "cpe:2.3:a:minio:pkg:v1.5.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/minio/pkg@v1.5.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/minio/selfupdate@v0.5.0?package-id=f191b37fdccb879a", + "name": "github.com/minio/selfupdate", + "version": "v0.5.0", + "cpe": "cpe:2.3:a:minio:selfupdate:v0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/minio/selfupdate@v0.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/minio/sha256-simd@v1.0.0?package-id=185bae10bca96c50", + "name": "github.com/minio/sha256-simd", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:minio:sha256-simd:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/minio/sha256-simd@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/minio/simdjson-go@v0.4.2?package-id=9c63029d0a3e1aa3", + "name": "github.com/minio/simdjson-go", + "version": "v0.4.2", + "cpe": "cpe:2.3:a:minio:simdjson-go:v0.4.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/minio/simdjson-go@v0.4.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/minio/sio@v0.3.0?package-id=9196bd9eb9b0df5d", + "name": "github.com/minio/sio", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:minio:sio:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/minio/sio@v0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/minio/xxml@v0.0.3?package-id=c4864b4e5cbcccfa", + "name": "github.com/minio/xxml", + "version": "v0.0.3", + "cpe": "cpe:2.3:a:minio:xxml:v0.0.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/minio/xxml@v0.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/minio/zipindex@v0.3.0?package-id=754f35738a4d6920", + "name": "github.com/minio/zipindex", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:minio:zipindex:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/minio/zipindex@v0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0?package-id=62a5b9346e6da275", + "name": "github.com/mitchellh/go-homedir", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.0?package-id=253d5a619ee9ba3c", + "name": "github.com/mitchellh/mapstructure", + "version": "v1.5.0", + "cpe": "cpe:2.3:a:mitchellh:mapstructure:v1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=8ce7aeebb9be5b3", + "name": "github.com/modern-go/concurrent", + "version": "v0.0.0-20180306012644-bacd9c7ef1dd", + "cpe": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2?package-id=8e4cb0f6c3e77e1e", + "name": "github.com/modern-go/reflect2", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:modern-go:reflect2:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/montanaflynn/stats@v0.6.6?package-id=12e98f72a5063e8", + "name": "github.com/montanaflynn/stats", + "version": "v0.6.6", + "cpe": "cpe:2.3:a:montanaflynn:stats:v0.6.6:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/montanaflynn/stats@v0.6.6" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/muesli/ansi@v0.0.0-20211031195517-c9f0611b6c70?package-id=a363003beaf807cd", + "name": "github.com/muesli/ansi", + "version": "v0.0.0-20211031195517-c9f0611b6c70", + "cpe": "cpe:2.3:a:muesli:ansi:v0.0.0-20211031195517-c9f0611b6c70:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/muesli/ansi@v0.0.0-20211031195517-c9f0611b6c70" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/muesli/cancelreader@v0.2.2?package-id=748bc09943934c8b", + "name": "github.com/muesli/cancelreader", + "version": "v0.2.2", + "cpe": "cpe:2.3:a:muesli:cancelreader:v0.2.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/muesli/cancelreader@v0.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/muesli/reflow@v0.3.0?package-id=7087648dd3c4e0d5", + "name": "github.com/muesli/reflow", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:muesli:reflow:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/muesli/reflow@v0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/muesli/termenv@v0.13.0?package-id=25129a1d82c81f6f", + "name": "github.com/muesli/termenv", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:muesli:termenv:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/muesli/termenv@v0.13.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/nats-io/nats.go@v1.17.0?package-id=640d5430ff164098", + "name": "github.com/nats-io/nats.go", + "version": "v1.17.0", + "cpe": "cpe:2.3:a:nats-io:nats.go:v1.17.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/nats-io/nats.go@v1.17.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/nats-io/nkeys@v0.3.0?package-id=893eac853a9c985c", + "name": "github.com/nats-io/nkeys", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:nats-io:nkeys:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/nats-io/nkeys@v0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/nats-io/nuid@v1.0.1?package-id=eb7f4076b95a07f1", + "name": "github.com/nats-io/nuid", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:nats-io:nuid:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/nats-io/nuid@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/nats-io/stan.go@v0.10.3?package-id=f17c8472825c9114", + "name": "github.com/nats-io/stan.go", + "version": "v0.10.3", + "cpe": "cpe:2.3:a:nats-io:stan.go:v0.10.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/nats-io/stan.go@v0.10.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/navidys/tvxwidgets@v0.1.1?package-id=5126c2602f9159eb", + "name": "github.com/navidys/tvxwidgets", + "version": "v0.1.1", + "cpe": "cpe:2.3:a:navidys:tvxwidgets:v0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/navidys/tvxwidgets@v0.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/ncw/directio@v1.0.5?package-id=dede4e750f761443", + "name": "github.com/ncw/directio", + "version": "v1.0.5", + "cpe": "cpe:2.3:a:ncw:directio:v1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/ncw/directio@v1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/nsqio/go-nsq@v1.1.0?package-id=5ba1c642f575a1c6", + "name": "github.com/nsqio/go-nsq", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:nsqio:go-nsq:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/nsqio/go-nsq@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/oklog/ulid@v1.3.1?package-id=384d1eb89472b23b", + "name": "github.com/oklog/ulid", + "version": "v1.3.1", + "cpe": "cpe:2.3:a:oklog:ulid:v1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/oklog/ulid@v1.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/olekukonko/tablewriter@v0.0.5?package-id=67f04e6754207444", + "name": "github.com/olekukonko/tablewriter", + "version": "v0.0.5", + "cpe": "cpe:2.3:a:olekukonko:tablewriter:v0.0.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/olekukonko/tablewriter@v0.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/philhofer/fwd@v1.1.2-0.20210722190033-5c56ac6d0bb9?package-id=83e3b2226b39ae9e", + "name": "github.com/philhofer/fwd", + "version": "v1.1.2-0.20210722190033-5c56ac6d0bb9", + "cpe": "cpe:2.3:a:philhofer:fwd:v1.1.2-0.20210722190033-5c56ac6d0bb9:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/philhofer/fwd@v1.1.2-0.20210722190033-5c56ac6d0bb9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/pierrec/lz4@v2.6.1+incompatible?package-id=65e3f6f155289db2", + "name": "github.com/pierrec/lz4", + "version": "v2.6.1+incompatible", + "cpe": "cpe:2.3:a:pierrec:lz4:v2.6.1\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pierrec/lz4@v2.6.1+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.16?package-id=7681fc3e98abb772", + "name": "github.com/pierrec/lz4/v4", + "version": "v4.1.16", + "cpe": "cpe:2.3:a:pierrec:lz4\\/v4:v4.1.16:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.16" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=b59b087b0bcec3cd", + "name": "github.com/pkg/errors", + "version": "v0.9.1", + "cpe": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pkg/errors@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/pkg/xattr@v0.4.9?package-id=e0156666041288e4", + "name": "github.com/pkg/xattr", + "version": "v0.4.9", + "cpe": "cpe:2.3:a:pkg:xattr:v0.4.9:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pkg/xattr@v0.4.9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/posener/complete@v1.2.3?package-id=a7929153b1b58436", + "name": "github.com/posener/complete", + "version": "v1.2.3", + "cpe": "cpe:2.3:a:posener:complete:v1.2.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/posener/complete@v1.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/pquerna/cachecontrol@v0.1.0?package-id=66f9fd0136788fad", + "name": "github.com/pquerna/cachecontrol", + "version": "v0.1.0", + "cpe": "cpe:2.3:a:pquerna:cachecontrol:v0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pquerna/cachecontrol@v0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/client_golang@v1.13.0?package-id=79fe73fdebf06609", + "name": "github.com/prometheus/client_golang", + "version": "v1.13.0", + "cpe": "cpe:2.3:a:prometheus:client-golang:v1.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_golang@v1.13.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/client_model@v0.3.0?package-id=f610d8cc39a3c3f7", + "name": "github.com/prometheus/client_model", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:prometheus:client-model:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_model@v0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/common@v0.37.0?package-id=6952570f7536ecfd", + "name": "github.com/prometheus/common", + "version": "v0.37.0", + "cpe": "cpe:2.3:a:prometheus:common:v0.37.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/common@v0.37.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/procfs@v0.8.0?package-id=f09878d83a91b212", + "name": "github.com/prometheus/procfs", + "version": "v0.8.0", + "cpe": "cpe:2.3:a:prometheus:procfs:v0.8.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/procfs@v0.8.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/prom2json@v1.3.2?package-id=67d1cce2adfb2bd5", + "name": "github.com/prometheus/prom2json", + "version": "v1.3.2", + "cpe": "cpe:2.3:a:prometheus:prom2json:v1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/prom2json@v1.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20201227073835-cf1acfcdf475?package-id=1dae6fa258b736cd", + "name": "github.com/rcrowley/go-metrics", + "version": "v0.0.0-20201227073835-cf1acfcdf475", + "cpe": "cpe:2.3:a:rcrowley:go-metrics:v0.0.0-20201227073835-cf1acfcdf475:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20201227073835-cf1acfcdf475" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/rivo/tview@v0.0.0-20220916081518-2e69b7385a37?package-id=c696487ebea8f484", + "name": "github.com/rivo/tview", + "version": "v0.0.0-20220916081518-2e69b7385a37", + "cpe": "cpe:2.3:a:rivo:tview:v0.0.0-20220916081518-2e69b7385a37:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rivo/tview@v0.0.0-20220916081518-2e69b7385a37" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/rivo/uniseg@v0.4.2?package-id=43bb8239eb813ed6", + "name": "github.com/rivo/uniseg", + "version": "v0.4.2", + "cpe": "cpe:2.3:a:rivo:uniseg:v0.4.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/rjeczalik/notify@v0.9.2?package-id=da0718f2516e3fd6", + "name": "github.com/rjeczalik/notify", + "version": "v0.9.2", + "cpe": "cpe:2.3:a:rjeczalik:notify:v0.9.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rjeczalik/notify@v0.9.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/rs/cors@v1.8.2?package-id=bd20ccd8c9475b31", + "name": "github.com/rs/cors", + "version": "v1.8.2", + "cpe": "cpe:2.3:a:rs:cors:v1.8.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rs/cors@v1.8.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/rs/dnscache@v0.0.0-20211102005908-e0241e321417?package-id=e6111a9b0a034650", + "name": "github.com/rs/dnscache", + "version": "v0.0.0-20211102005908-e0241e321417", + "cpe": "cpe:2.3:a:rs:dnscache:v0.0.0-20211102005908-e0241e321417:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rs/dnscache@v0.0.0-20211102005908-e0241e321417" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/rs/xid@v1.4.0?package-id=81dde1457c97301f", + "name": "github.com/rs/xid", + "version": "v1.4.0", + "cpe": "cpe:2.3:a:rs:xid:v1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rs/xid@v1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/secure-io/sio-go@v0.3.1?package-id=4cb7db61685ad864", + "name": "github.com/secure-io/sio-go", + "version": "v0.3.1", + "cpe": "cpe:2.3:a:secure-io:sio-go:v0.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/secure-io/sio-go@v0.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/shirou/gopsutil/v3@v3.22.9?package-id=1457e1667c521674", + "name": "github.com/shirou/gopsutil/v3", + "version": "v3.22.9", + "cpe": "cpe:2.3:a:shirou:gopsutil\\/v3:v3.22.9:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/shirou/gopsutil/v3@v3.22.9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/streadway/amqp@v1.0.0?package-id=4e1db82c5daa44db", + "name": "github.com/streadway/amqp", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:streadway:amqp:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/streadway/amqp@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/tidwall/gjson@v1.14.3?package-id=a1c2ecd7b6817e0", + "name": "github.com/tidwall/gjson", + "version": "v1.14.3", + "cpe": "cpe:2.3:a:tidwall:gjson:v1.14.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/tidwall/gjson@v1.14.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/tidwall/match@v1.1.1?package-id=6ea60cd9db5c58cb", + "name": "github.com/tidwall/match", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:tidwall:match:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/tidwall/match@v1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/tidwall/pretty@v1.2.1?package-id=a204091cd5a4e6f9", + "name": "github.com/tidwall/pretty", + "version": "v1.2.1", + "cpe": "cpe:2.3:a:tidwall:pretty:v1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/tidwall/pretty@v1.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/tinylib/msgp@v1.1.7-0.20220719154719-f3635b96e483?package-id=5c000c0cab1afbd1", + "name": "github.com/tinylib/msgp", + "version": "v1.1.7-0.20220719154719-f3635b96e483", + "cpe": "cpe:2.3:a:tinylib:msgp:v1.1.7-0.20220719154719-f3635b96e483:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/tinylib/msgp@v1.1.7-0.20220719154719-f3635b96e483" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/tklauser/go-sysconf@v0.3.10?package-id=a15c15c0099921b0", + "name": "github.com/tklauser/go-sysconf", + "version": "v0.3.10", + "cpe": "cpe:2.3:a:tklauser:go-sysconf:v0.3.10:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/tklauser/go-sysconf@v0.3.10" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/tklauser/numcpus@v0.5.0?package-id=8a36de772e52c0ce", + "name": "github.com/tklauser/numcpus", + "version": "v0.5.0", + "cpe": "cpe:2.3:a:tklauser:numcpus:v0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/tklauser/numcpus@v0.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/unrolled/secure@v1.13.0?package-id=f350d5676a6b3004", + "name": "github.com/unrolled/secure", + "version": "v1.13.0", + "cpe": "cpe:2.3:a:unrolled:secure:v1.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/unrolled/secure@v1.13.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/valyala/bytebufferpool@v1.0.0?package-id=c9d6a4f69f00560", + "name": "github.com/valyala/bytebufferpool", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:valyala:bytebufferpool:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/valyala/bytebufferpool@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/xdg/scram@v1.0.5?package-id=a5e952780a4be5dc", + "name": "github.com/xdg/scram", + "version": "v1.0.5", + "cpe": "cpe:2.3:a:xdg:scram:v1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/xdg/scram@v1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/xdg/stringprep@v1.0.3?package-id=6d37402a60f0fd30", + "name": "github.com/xdg/stringprep", + "version": "v1.0.3", + "cpe": "cpe:2.3:a:xdg:stringprep:v1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/xdg/stringprep@v1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/yargevad/filepathx@v1.0.0?package-id=ecf7c443a8746115", + "name": "github.com/yargevad/filepathx", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:yargevad:filepathx:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/yargevad/filepathx@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/zeebo/xxh3@v1.0.2?package-id=44b34c835ed779fc", + "name": "github.com/zeebo/xxh3", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:zeebo:xxh3:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/zeebo/xxh3@v1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/glib2@2.56.4-158.el8?arch=x86_64&upstream=glib2-2.56.4-158.el8.src.rpm&distro=rhel-8.6&package-id=af7039b378a7b223", + "publisher": "Red Hat, Inc.", + "name": "glib2", + "version": "2.56.4-158.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:redhat:glib2:2.56.4-158.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/glib2@2.56.4-158.el8?arch=x86_64&upstream=glib2-2.56.4-158.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/glibc@2.28-189.5.el8_6?arch=x86_64&upstream=glibc-2.28-189.5.el8_6.src.rpm&distro=rhel-8.6&package-id=d7889d606899a182", + "publisher": "Red Hat, Inc.", + "name": "glibc", + "version": "2.28-189.5.el8_6", + "licenses": [ + { + "license": { + "name": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL" + } + } + ], + "cpe": "cpe:2.3:a:redhat:glibc:2.28-189.5.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/glibc@2.28-189.5.el8_6?arch=x86_64&upstream=glibc-2.28-189.5.el8_6.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/glibc-common@2.28-189.5.el8_6?arch=x86_64&upstream=glibc-2.28-189.5.el8_6.src.rpm&distro=rhel-8.6&package-id=60ee28007692aead", + "publisher": "Red Hat, Inc.", + "name": "glibc-common", + "version": "2.28-189.5.el8_6", + "licenses": [ + { + "license": { + "name": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL" + } + } + ], + "cpe": "cpe:2.3:a:glibc-common:glibc-common:2.28-189.5.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/glibc-common@2.28-189.5.el8_6?arch=x86_64&upstream=glibc-2.28-189.5.el8_6.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/glibc-minimal-langpack@2.28-189.5.el8_6?arch=x86_64&upstream=glibc-2.28-189.5.el8_6.src.rpm&distro=rhel-8.6&package-id=1bb320d243991db5", + "publisher": "Red Hat, Inc.", + "name": "glibc-minimal-langpack", + "version": "2.28-189.5.el8_6", + "licenses": [ + { + "license": { + "name": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL" + } + } + ], + "cpe": "cpe:2.3:a:glibc-minimal-langpack:glibc-minimal-langpack:2.28-189.5.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/glibc-minimal-langpack@2.28-189.5.el8_6?arch=x86_64&upstream=glibc-2.28-189.5.el8_6.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/gmp@6.1.2-10.el8?arch=x86_64&epoch=1&upstream=gmp-6.1.2-10.el8.src.rpm&distro=rhel-8.6&package-id=6a36a5dc44564b2d", + "publisher": "Red Hat, Inc.", + "name": "gmp", + "version": "1:6.1.2-10.el8", + "licenses": [ + { + "license": { + "name": "LGPLv3+ or GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:redhat:gmp:1\\:6.1.2-10.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/gmp@6.1.2-10.el8?arch=x86_64&epoch=1&upstream=gmp-6.1.2-10.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/gnupg2@2.2.20-3.el8_6?arch=x86_64&upstream=gnupg2-2.2.20-3.el8_6.src.rpm&distro=rhel-8.6&package-id=1b3663d04bda2281", + "publisher": "Red Hat, Inc.", + "name": "gnupg2", + "version": "2.2.20-3.el8_6", + "licenses": [ + { + "license": { + "name": "GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:gnupg2:gnupg2:2.2.20-3.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/gnupg2@2.2.20-3.el8_6?arch=x86_64&upstream=gnupg2-2.2.20-3.el8_6.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/gnutls@3.6.16-4.el8?arch=x86_64&upstream=gnutls-3.6.16-4.el8.src.rpm&distro=rhel-8.6&package-id=778adf1817cd21ea", + "publisher": "Red Hat, Inc.", + "name": "gnutls", + "version": "3.6.16-4.el8", + "licenses": [ + { + "license": { + "name": "GPLv3+ and LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:gnutls:gnutls:3.6.16-4.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/gnutls@3.6.16-4.el8?arch=x86_64&upstream=gnutls-3.6.16-4.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:golang/go.etcd.io/etcd/api/v3@v3.5.5?package-id=8b1ec1b19b79db56", + "name": "go.etcd.io/etcd/api/v3", + "version": "v3.5.5", + "cpe": "cpe:2.3:a:etcd:api\\/v3:v3.5.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/go.etcd.io/etcd/api/v3@v3.5.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/go.etcd.io/etcd/client/pkg/v3@v3.5.5?package-id=3034d9f13120487b", + "name": "go.etcd.io/etcd/client/pkg/v3", + "version": "v3.5.5", + "cpe": "cpe:2.3:a:etcd:client\\/pkg\\/v3:v3.5.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/go.etcd.io/etcd/client/pkg/v3@v3.5.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/go.etcd.io/etcd/client/v3@v3.5.5?package-id=c82467860259549e", + "name": "go.etcd.io/etcd/client/v3", + "version": "v3.5.5", + "cpe": "cpe:2.3:a:etcd:client\\/v3:v3.5.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/go.etcd.io/etcd/client/v3@v3.5.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/go.mongodb.org/mongo-driver@v1.10.2?package-id=450c0b8e6bc43189", + "name": "go.mongodb.org/mongo-driver", + "version": "v1.10.2", + "purl": "pkg:golang/go.mongodb.org/mongo-driver@v1.10.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/go.opencensus.io@v0.23.0?package-id=e809c5a72ea2b4f7", + "name": "go.opencensus.io", + "version": "v0.23.0", + "purl": "pkg:golang/go.opencensus.io@v0.23.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/go.uber.org/atomic@v1.10.0?package-id=1da106344404fcb2", + "name": "go.uber.org/atomic", + "version": "v1.10.0", + "purl": "pkg:golang/go.uber.org/atomic@v1.10.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/go.uber.org/multierr@v1.8.0?package-id=57bfaf9c3b5fccba", + "name": "go.uber.org/multierr", + "version": "v1.8.0", + "purl": "pkg:golang/go.uber.org/multierr@v1.8.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/go.uber.org/zap@v1.23.0?package-id=288b89a19c0f6e0f", + "name": "go.uber.org/zap", + "version": "v1.23.0", + "purl": "pkg:golang/go.uber.org/zap@v1.23.0" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/gobject-introspection@1.56.1-1.el8?arch=x86_64&upstream=gobject-introspection-1.56.1-1.el8.src.rpm&distro=rhel-8.6&package-id=a22daf0266301db4", + "publisher": "Red Hat, Inc.", + "name": "gobject-introspection", + "version": "1.56.1-1.el8", + "licenses": [ + { + "license": { + "name": "GPLv2+, LGPLv2+, MIT" + } + } + ], + "cpe": "cpe:2.3:a:gobject-introspection:gobject-introspection:1.56.1-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/gobject-introspection@1.56.1-1.el8?arch=x86_64&upstream=gobject-introspection-1.56.1-1.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.1.0?package-id=d97ddf3cd5ce556c", + "name": "golang.org/x/crypto", + "version": "v0.1.0", + "cpe": "cpe:2.3:a:golang:x\\/crypto:v0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/crypto@v0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/net@v0.1.0?package-id=c50871a434248607", + "name": "golang.org/x/net", + "version": "v0.1.0", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.1.0?package-id=a3ed243ba2d9392a", + "name": "golang.org/x/oauth2", + "version": "v0.1.0", + "cpe": "cpe:2.3:a:golang:x\\/oauth2:v0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/oauth2@v0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sync@v0.1.0?package-id=3bbdb99ee7f81f15", + "name": "golang.org/x/sync", + "version": "v0.1.0", + "cpe": "cpe:2.3:a:golang:x\\/sync:v0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sync@v0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.1.0?package-id=cbc9c44c3f61b89c", + "name": "golang.org/x/sys", + "version": "v0.1.0", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/term@v0.1.0?package-id=5fbeaecfd75d284e", + "name": "golang.org/x/term", + "version": "v0.1.0", + "cpe": "cpe:2.3:a:golang:x\\/term:v0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/term@v0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/text@v0.4.0?package-id=acb731cb7bde553", + "name": "golang.org/x/text", + "version": "v0.4.0", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20220722155302-e5dcc9cfc0b9?package-id=6b973a2a5edb54c", + "name": "golang.org/x/time", + "version": "v0.0.0-20220722155302-e5dcc9cfc0b9", + "cpe": "cpe:2.3:a:golang:x\\/time:v0.0.0-20220722155302-e5dcc9cfc0b9:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/time@v0.0.0-20220722155302-e5dcc9cfc0b9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/xerrors@v0.0.0-20220907171357-04be3eba64a2?package-id=d34e8dfdbca73674", + "name": "golang.org/x/xerrors", + "version": "v0.0.0-20220907171357-04be3eba64a2", + "cpe": "cpe:2.3:a:golang:x\\/xerrors:v0.0.0-20220907171357-04be3eba64a2:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/xerrors@v0.0.0-20220907171357-04be3eba64a2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/api@v0.98.0?package-id=c5b02ec985ca4546", + "name": "google.golang.org/api", + "version": "v0.98.0", + "cpe": "cpe:2.3:a:google:api:v0.98.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/api@v0.98.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20221018160656-63c7b68cfc55?package-id=668c3c10f4c75f32", + "name": "google.golang.org/genproto", + "version": "v0.0.0-20221018160656-63c7b68cfc55", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20221018160656-63c7b68cfc55:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20221018160656-63c7b68cfc55" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.50.1?package-id=8de5c594d0677530", + "name": "google.golang.org/grpc", + "version": "v1.50.1", + "cpe": "cpe:2.3:a:google:grpc:v1.50.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.50.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.28.1?package-id=3ef0f448dab9fea4", + "name": "google.golang.org/protobuf", + "version": "v1.28.1", + "cpe": "cpe:2.3:a:google:protobuf:v1.28.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/protobuf@v1.28.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/h2non/filetype.v1@v1.0.5?package-id=93ca5f56d3b49e84", + "name": "gopkg.in/h2non/filetype.v1", + "version": "v1.0.5", + "purl": "pkg:golang/gopkg.in/h2non/filetype.v1@v1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/ini.v1@v1.67.0?package-id=a37eee3a430e8215", + "name": "gopkg.in/ini.v1", + "version": "v1.67.0", + "purl": "pkg:golang/gopkg.in/ini.v1@v1.67.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/square/go-jose.v2@v2.6.0?package-id=f8e4414955179475", + "name": "gopkg.in/square/go-jose.v2", + "version": "v2.6.0", + "purl": "pkg:golang/gopkg.in/square/go-jose.v2@v2.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0?package-id=c718293b9b0a65e3", + "name": "gopkg.in/yaml.v2", + "version": "v2.4.0", + "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=dddab0270cebb717", + "name": "gopkg.in/yaml.v3", + "version": "v3.0.1", + "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/gpg-pubkey@d4082792-5b32db75?distro=rhel-8.6&package-id=79b894b4caa3ac63", + "name": "gpg-pubkey", + "version": "d4082792-5b32db75", + "licenses": [ + { + "license": { + "name": "pubkey" + } + } + ], + "cpe": "cpe:2.3:a:gpg-pubkey:gpg-pubkey:d4082792-5b32db75:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/gpg-pubkey@d4082792-5b32db75?distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/gpg-pubkey@fd431d51-4ae0493b?distro=rhel-8.6&package-id=421b2878b8d9bbd7", + "name": "gpg-pubkey", + "version": "fd431d51-4ae0493b", + "licenses": [ + { + "license": { + "name": "pubkey" + } + } + ], + "cpe": "cpe:2.3:a:gpg-pubkey:gpg-pubkey:fd431d51-4ae0493b:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/gpg-pubkey@fd431d51-4ae0493b?distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/gpgme@1.13.1-11.el8?arch=x86_64&upstream=gpgme-1.13.1-11.el8.src.rpm&distro=rhel-8.6&package-id=e31d80eb6a0c5fd6", + "publisher": "Red Hat, Inc.", + "name": "gpgme", + "version": "1.13.1-11.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+ and GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:redhat:gpgme:1.13.1-11.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/gpgme@1.13.1-11.el8?arch=x86_64&upstream=gpgme-1.13.1-11.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/grep@3.1-6.el8?arch=x86_64&upstream=grep-3.1-6.el8.src.rpm&distro=rhel-8.6&package-id=dcf380266f505a97", + "publisher": "Red Hat, Inc.", + "name": "grep", + "version": "3.1-6.el8", + "licenses": [ + { + "license": { + "name": "GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:redhat:grep:3.1-6.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/grep@3.1-6.el8?arch=x86_64&upstream=grep-3.1-6.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/gzip@1.9-13.el8_5?arch=x86_64&upstream=gzip-1.9-13.el8_5.src.rpm&distro=rhel-8.6&package-id=402935efe4fc330d", + "publisher": "Red Hat, Inc.", + "name": "gzip", + "version": "1.9-13.el8_5", + "licenses": [ + { + "license": { + "name": "GPLv3+ and GFDL" + } + } + ], + "cpe": "cpe:2.3:a:redhat:gzip:1.9-13.el8_5:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/gzip@1.9-13.el8_5?arch=x86_64&upstream=gzip-1.9-13.el8_5.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/info@6.5-7.el8?arch=x86_64&upstream=texinfo-6.5-7.el8.src.rpm&distro=rhel-8.6&package-id=8be22186d57c1627", + "publisher": "Red Hat, Inc.", + "name": "info", + "version": "6.5-7.el8", + "licenses": [ + { + "license": { + "name": "GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:redhat:info:6.5-7.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/info@6.5-7.el8?arch=x86_64&upstream=texinfo-6.5-7.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/json-c@0.13.1-3.el8?arch=x86_64&upstream=json-c-0.13.1-3.el8.src.rpm&distro=rhel-8.6&package-id=e2321487b60479b5", + "publisher": "Red Hat, Inc.", + "name": "json-c", + "version": "0.13.1-3.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-c:json-c:0.13.1-3.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/json-c@0.13.1-3.el8?arch=x86_64&upstream=json-c-0.13.1-3.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/json-glib@1.4.4-1.el8?arch=x86_64&upstream=json-glib-1.4.4-1.el8.src.rpm&distro=rhel-8.6&package-id=f58fc0d9670b7376", + "publisher": "Red Hat, Inc.", + "name": "json-glib", + "version": "1.4.4-1.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:json-glib:json-glib:1.4.4-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/json-glib@1.4.4-1.el8?arch=x86_64&upstream=json-glib-1.4.4-1.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/keyutils-libs@1.5.10-9.el8?arch=x86_64&upstream=keyutils-1.5.10-9.el8.src.rpm&distro=rhel-8.6&package-id=4843e44e4d426358", + "publisher": "Red Hat, Inc.", + "name": "keyutils-libs", + "version": "1.5.10-9.el8", + "licenses": [ + { + "license": { + "name": "GPLv2+ and LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:keyutils-libs:keyutils-libs:1.5.10-9.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/keyutils-libs@1.5.10-9.el8?arch=x86_64&upstream=keyutils-1.5.10-9.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/krb5-libs@1.18.2-14.el8?arch=x86_64&upstream=krb5-1.18.2-14.el8.src.rpm&distro=rhel-8.6&package-id=35fc2060ec0378b3", + "publisher": "Red Hat, Inc.", + "name": "krb5-libs", + "version": "1.18.2-14.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:krb5-libs:krb5-libs:1.18.2-14.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/krb5-libs@1.18.2-14.el8?arch=x86_64&upstream=krb5-1.18.2-14.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/langpacks-en@1.0-12.el8?arch=noarch&upstream=langpacks-1.0-12.el8.src.rpm&distro=rhel-8.6&package-id=6a756e34249d314a", + "publisher": "Red Hat, Inc.", + "name": "langpacks-en", + "version": "1.0-12.el8", + "licenses": [ + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:langpacks-en:langpacks-en:1.0-12.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/langpacks-en@1.0-12.el8?arch=noarch&upstream=langpacks-1.0-12.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libacl@2.2.53-1.el8?arch=x86_64&upstream=acl-2.2.53-1.el8.src.rpm&distro=rhel-8.6&package-id=8d0e2ddb3a76c2e3", + "publisher": "Red Hat, Inc.", + "name": "libacl", + "version": "2.2.53-1.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libacl:libacl:2.2.53-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libacl@2.2.53-1.el8?arch=x86_64&upstream=acl-2.2.53-1.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libarchive@3.3.3-3.el8_5?arch=x86_64&upstream=libarchive-3.3.3-3.el8_5.src.rpm&distro=rhel-8.6&package-id=884bcc48382677ea", + "publisher": "Red Hat, Inc.", + "name": "libarchive", + "version": "3.3.3-3.el8_5", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:libarchive:libarchive:3.3.3-3.el8_5:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libarchive@3.3.3-3.el8_5?arch=x86_64&upstream=libarchive-3.3.3-3.el8_5.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libassuan@2.5.1-3.el8?arch=x86_64&upstream=libassuan-2.5.1-3.el8.src.rpm&distro=rhel-8.6&package-id=f49e816e114b317", + "publisher": "Red Hat, Inc.", + "name": "libassuan", + "version": "2.5.1-3.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+ and GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:libassuan:libassuan:2.5.1-3.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libassuan@2.5.1-3.el8?arch=x86_64&upstream=libassuan-2.5.1-3.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libattr@2.4.48-3.el8?arch=x86_64&upstream=attr-2.4.48-3.el8.src.rpm&distro=rhel-8.6&package-id=1dfb79cdce2c79df", + "publisher": "Red Hat, Inc.", + "name": "libattr", + "version": "2.4.48-3.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libattr:libattr:2.4.48-3.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libattr@2.4.48-3.el8?arch=x86_64&upstream=attr-2.4.48-3.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libblkid@2.32.1-35.el8?arch=x86_64&upstream=util-linux-2.32.1-35.el8.src.rpm&distro=rhel-8.6&package-id=b42771a3f27629d0", + "publisher": "Red Hat, Inc.", + "name": "libblkid", + "version": "2.32.1-35.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libblkid:libblkid:2.32.1-35.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libblkid@2.32.1-35.el8?arch=x86_64&upstream=util-linux-2.32.1-35.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libcap@2.48-2.el8?arch=x86_64&upstream=libcap-2.48-2.el8.src.rpm&distro=rhel-8.6&package-id=50b24d19d2895760", + "publisher": "Red Hat, Inc.", + "name": "libcap", + "version": "2.48-2.el8", + "licenses": [ + { + "license": { + "name": "BSD or GPLv2" + } + } + ], + "cpe": "cpe:2.3:a:libcap:libcap:2.48-2.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libcap@2.48-2.el8?arch=x86_64&upstream=libcap-2.48-2.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libcap-ng@0.7.11-1.el8?arch=x86_64&upstream=libcap-ng-0.7.11-1.el8.src.rpm&distro=rhel-8.6&package-id=38a5e4ba1e6410f5", + "publisher": "Red Hat, Inc.", + "name": "libcap-ng", + "version": "0.7.11-1.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libcap-ng:libcap-ng:0.7.11-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libcap-ng@0.7.11-1.el8?arch=x86_64&upstream=libcap-ng-0.7.11-1.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libcom_err@1.45.6-4.el8?arch=x86_64&upstream=e2fsprogs-1.45.6-4.el8.src.rpm&distro=rhel-8.6&package-id=f169b3a1502aae2e", + "publisher": "Red Hat, Inc.", + "name": "libcom_err", + "version": "1.45.6-4.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libcom-err:libcom-err:1.45.6-4.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libcom_err@1.45.6-4.el8?arch=x86_64&upstream=e2fsprogs-1.45.6-4.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libcurl@7.61.1-22.el8_6.4?arch=x86_64&upstream=curl-7.61.1-22.el8_6.4.src.rpm&distro=rhel-8.6&package-id=8d84eb64bd8655f3", + "publisher": "Red Hat, Inc.", + "name": "libcurl", + "version": "7.61.1-22.el8_6.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libcurl:libcurl:7.61.1-22.el8_6.4:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libcurl@7.61.1-22.el8_6.4?arch=x86_64&upstream=curl-7.61.1-22.el8_6.4.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libdb@5.3.28-42.el8_4?arch=x86_64&upstream=libdb-5.3.28-42.el8_4.src.rpm&distro=rhel-8.6&package-id=aa9ac1b53ca22450", + "publisher": "Red Hat, Inc.", + "name": "libdb", + "version": "5.3.28-42.el8_4", + "licenses": [ + { + "license": { + "name": "BSD and LGPLv2 and Sleepycat" + } + } + ], + "cpe": "cpe:2.3:a:redhat:libdb:5.3.28-42.el8_4:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libdb@5.3.28-42.el8_4?arch=x86_64&upstream=libdb-5.3.28-42.el8_4.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libdb-utils@5.3.28-42.el8_4?arch=x86_64&upstream=libdb-5.3.28-42.el8_4.src.rpm&distro=rhel-8.6&package-id=c05e0e0d0c33b43f", + "publisher": "Red Hat, Inc.", + "name": "libdb-utils", + "version": "5.3.28-42.el8_4", + "licenses": [ + { + "license": { + "name": "BSD and LGPLv2 and Sleepycat" + } + } + ], + "cpe": "cpe:2.3:a:libdb-utils:libdb-utils:5.3.28-42.el8_4:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libdb-utils@5.3.28-42.el8_4?arch=x86_64&upstream=libdb-5.3.28-42.el8_4.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libdnf@0.63.0-8.2.el8_6?arch=x86_64&upstream=libdnf-0.63.0-8.2.el8_6.src.rpm&distro=rhel-8.6&package-id=e910aae5404bf2ce", + "publisher": "Red Hat, Inc.", + "name": "libdnf", + "version": "0.63.0-8.2.el8_6", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libdnf:libdnf:0.63.0-8.2.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libdnf@0.63.0-8.2.el8_6?arch=x86_64&upstream=libdnf-0.63.0-8.2.el8_6.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libfdisk@2.32.1-35.el8?arch=x86_64&upstream=util-linux-2.32.1-35.el8.src.rpm&distro=rhel-8.6&package-id=57375ea754a066f5", + "publisher": "Red Hat, Inc.", + "name": "libfdisk", + "version": "2.32.1-35.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libfdisk:libfdisk:2.32.1-35.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libfdisk@2.32.1-35.el8?arch=x86_64&upstream=util-linux-2.32.1-35.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libffi@3.1-23.el8?arch=x86_64&upstream=libffi-3.1-23.el8.src.rpm&distro=rhel-8.6&package-id=c5672d2a9bd45225", + "publisher": "Red Hat, Inc.", + "name": "libffi", + "version": "3.1-23.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libffi:libffi:3.1-23.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libffi@3.1-23.el8?arch=x86_64&upstream=libffi-3.1-23.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libgcc@8.5.0-10.1.el8_6?arch=x86_64&upstream=gcc-8.5.0-10.1.el8_6.src.rpm&distro=rhel-8.6&package-id=8a0c4419338c2e5e", + "publisher": "Red Hat, Inc.", + "name": "libgcc", + "version": "8.5.0-10.1.el8_6", + "licenses": [ + { + "license": { + "name": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD" + } + } + ], + "cpe": "cpe:2.3:a:libgcc:libgcc:8.5.0-10.1.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libgcc@8.5.0-10.1.el8_6?arch=x86_64&upstream=gcc-8.5.0-10.1.el8_6.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libgcrypt@1.8.5-7.el8_6?arch=x86_64&upstream=libgcrypt-1.8.5-7.el8_6.src.rpm&distro=rhel-8.6&package-id=b029a2bca644cc7a", + "publisher": "Red Hat, Inc.", + "name": "libgcrypt", + "version": "1.8.5-7.el8_6", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libgcrypt:libgcrypt:1.8.5-7.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libgcrypt@1.8.5-7.el8_6?arch=x86_64&upstream=libgcrypt-1.8.5-7.el8_6.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libgpg-error@1.31-1.el8?arch=x86_64&upstream=libgpg-error-1.31-1.el8.src.rpm&distro=rhel-8.6&package-id=b00b5e1ee55ac62", + "publisher": "Red Hat, Inc.", + "name": "libgpg-error", + "version": "1.31-1.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libgpg-error:libgpg-error:1.31-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libgpg-error@1.31-1.el8?arch=x86_64&upstream=libgpg-error-1.31-1.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libidn2@2.2.0-1.el8?arch=x86_64&upstream=libidn2-2.2.0-1.el8.src.rpm&distro=rhel-8.6&package-id=7f4404b324b19931", + "publisher": "Red Hat, Inc.", + "name": "libidn2", + "version": "2.2.0-1.el8", + "licenses": [ + { + "license": { + "name": "(GPLv2+ or LGPLv3+) and GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:libidn2:libidn2:2.2.0-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libidn2@2.2.0-1.el8?arch=x86_64&upstream=libidn2-2.2.0-1.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libksba@1.3.5-7.el8?arch=x86_64&upstream=libksba-1.3.5-7.el8.src.rpm&distro=rhel-8.6&package-id=e80c3032e7b93321", + "publisher": "Red Hat, Inc.", + "name": "libksba", + "version": "1.3.5-7.el8", + "licenses": [ + { + "license": { + "name": "(LGPLv3+ or GPLv2+) and GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:libksba:libksba:1.3.5-7.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libksba@1.3.5-7.el8?arch=x86_64&upstream=libksba-1.3.5-7.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libksba@1.3.5-8.el8_6?arch=x86_64&upstream=libksba-1.3.5-8.el8_6.src.rpm&distro=rhel-8.6&package-id=a48aeeecdff2040a", + "publisher": "Red Hat, Inc.", + "name": "libksba", + "version": "1.3.5-8.el8_6", + "licenses": [ + { + "license": { + "name": "(LGPLv3+ or GPLv2+) and GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:libksba:libksba:1.3.5-8.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libksba@1.3.5-8.el8_6?arch=x86_64&upstream=libksba-1.3.5-8.el8_6.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libmodulemd@2.13.0-1.el8?arch=x86_64&upstream=libmodulemd-2.13.0-1.el8.src.rpm&distro=rhel-8.6&package-id=eff3a2ff49c573e9", + "publisher": "Red Hat, Inc.", + "name": "libmodulemd", + "version": "2.13.0-1.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libmodulemd:libmodulemd:2.13.0-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libmodulemd@2.13.0-1.el8?arch=x86_64&upstream=libmodulemd-2.13.0-1.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libmount@2.32.1-35.el8?arch=x86_64&upstream=util-linux-2.32.1-35.el8.src.rpm&distro=rhel-8.6&package-id=ed7e2c140ba9603d", + "publisher": "Red Hat, Inc.", + "name": "libmount", + "version": "2.32.1-35.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libmount:libmount:2.32.1-35.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libmount@2.32.1-35.el8?arch=x86_64&upstream=util-linux-2.32.1-35.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libnghttp2@1.33.0-3.el8_2.1?arch=x86_64&upstream=nghttp2-1.33.0-3.el8_2.1.src.rpm&distro=rhel-8.6&package-id=e18e17e678c6285a", + "publisher": "Red Hat, Inc.", + "name": "libnghttp2", + "version": "1.33.0-3.el8_2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libnghttp2:libnghttp2:1.33.0-3.el8_2.1:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libnghttp2@1.33.0-3.el8_2.1?arch=x86_64&upstream=nghttp2-1.33.0-3.el8_2.1.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libnsl2@1.2.0-2.20180605git4a062cf.el8?arch=x86_64&upstream=libnsl2-1.2.0-2.20180605git4a062cf.el8.src.rpm&distro=rhel-8.6&package-id=d41b62920a081480", + "publisher": "Red Hat, Inc.", + "name": "libnsl2", + "version": "1.2.0-2.20180605git4a062cf.el8", + "licenses": [ + { + "license": { + "name": "BSD and LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libnsl2:libnsl2:1.2.0-2.20180605git4a062cf.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libnsl2@1.2.0-2.20180605git4a062cf.el8?arch=x86_64&upstream=libnsl2-1.2.0-2.20180605git4a062cf.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libpeas@1.22.0-6.el8?arch=x86_64&upstream=libpeas-1.22.0-6.el8.src.rpm&distro=rhel-8.6&package-id=67d4a12e0310f9b7", + "publisher": "Red Hat, Inc.", + "name": "libpeas", + "version": "1.22.0-6.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libpeas:libpeas:1.22.0-6.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libpeas@1.22.0-6.el8?arch=x86_64&upstream=libpeas-1.22.0-6.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libpsl@0.20.2-6.el8?arch=x86_64&upstream=libpsl-0.20.2-6.el8.src.rpm&distro=rhel-8.6&package-id=2371ea567af586ed", + "publisher": "Red Hat, Inc.", + "name": "libpsl", + "version": "0.20.2-6.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libpsl:libpsl:0.20.2-6.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libpsl@0.20.2-6.el8?arch=x86_64&upstream=libpsl-0.20.2-6.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libpwquality@1.4.4-3.el8?arch=x86_64&upstream=libpwquality-1.4.4-3.el8.src.rpm&distro=rhel-8.6&package-id=ece84021fc5f51fe", + "publisher": "Red Hat, Inc.", + "name": "libpwquality", + "version": "1.4.4-3.el8", + "licenses": [ + { + "license": { + "name": "BSD or GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libpwquality:libpwquality:1.4.4-3.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libpwquality@1.4.4-3.el8?arch=x86_64&upstream=libpwquality-1.4.4-3.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/librepo@1.14.2-1.el8?arch=x86_64&upstream=librepo-1.14.2-1.el8.src.rpm&distro=rhel-8.6&package-id=f75a7bac253d6105", + "publisher": "Red Hat, Inc.", + "name": "librepo", + "version": "1.14.2-1.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:librepo:librepo:1.14.2-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/librepo@1.14.2-1.el8?arch=x86_64&upstream=librepo-1.14.2-1.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/librhsm@0.0.3-4.el8?arch=x86_64&upstream=librhsm-0.0.3-4.el8.src.rpm&distro=rhel-8.6&package-id=c46786473351d412", + "publisher": "Red Hat, Inc.", + "name": "librhsm", + "version": "0.0.3-4.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:librhsm:librhsm:0.0.3-4.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/librhsm@0.0.3-4.el8?arch=x86_64&upstream=librhsm-0.0.3-4.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libselinux@2.9-5.el8?arch=x86_64&upstream=libselinux-2.9-5.el8.src.rpm&distro=rhel-8.6&package-id=a09f64b9b7008311", + "publisher": "Red Hat, Inc.", + "name": "libselinux", + "version": "2.9-5.el8", + "licenses": [ + { + "license": { + "name": "Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:libselinux:libselinux:2.9-5.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libselinux@2.9-5.el8?arch=x86_64&upstream=libselinux-2.9-5.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libsemanage@2.9-8.el8?arch=x86_64&upstream=libsemanage-2.9-8.el8.src.rpm&distro=rhel-8.6&package-id=bdaa918f9e014ce3", + "publisher": "Red Hat, Inc.", + "name": "libsemanage", + "version": "2.9-8.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage:libsemanage:2.9-8.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libsemanage@2.9-8.el8?arch=x86_64&upstream=libsemanage-2.9-8.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libsepol@2.9-3.el8?arch=x86_64&upstream=libsepol-2.9-3.el8.src.rpm&distro=rhel-8.6&package-id=7998489dcc1a2869", + "publisher": "Red Hat, Inc.", + "name": "libsepol", + "version": "2.9-3.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libsepol:libsepol:2.9-3.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libsepol@2.9-3.el8?arch=x86_64&upstream=libsepol-2.9-3.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libsigsegv@2.11-5.el8?arch=x86_64&upstream=libsigsegv-2.11-5.el8.src.rpm&distro=rhel-8.6&package-id=bb2a5d4309598888", + "publisher": "Red Hat, Inc.", + "name": "libsigsegv", + "version": "2.11-5.el8", + "licenses": [ + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libsigsegv:libsigsegv:2.11-5.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libsigsegv@2.11-5.el8?arch=x86_64&upstream=libsigsegv-2.11-5.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libsmartcols@2.32.1-35.el8?arch=x86_64&upstream=util-linux-2.32.1-35.el8.src.rpm&distro=rhel-8.6&package-id=181567a951582f08", + "publisher": "Red Hat, Inc.", + "name": "libsmartcols", + "version": "2.32.1-35.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libsmartcols:libsmartcols:2.32.1-35.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libsmartcols@2.32.1-35.el8?arch=x86_64&upstream=util-linux-2.32.1-35.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libsodium@1.0.18-2.el8?arch=x86_64&upstream=libsodium-1.0.18-2.el8.src.rpm&distro=rhel-8.6&package-id=79fb2ddd16d88d74", + "publisher": "Fedora Project", + "name": "libsodium", + "version": "1.0.18-2.el8", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fedoraproject:libsodium:1.0.18-2.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libsodium@1.0.18-2.el8?arch=x86_64&upstream=libsodium-1.0.18-2.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libsolv@0.7.20-1.el8?arch=x86_64&upstream=libsolv-0.7.20-1.el8.src.rpm&distro=rhel-8.6&package-id=22941cca64818882", + "publisher": "Red Hat, Inc.", + "name": "libsolv", + "version": "0.7.20-1.el8", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:libsolv:libsolv:0.7.20-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libsolv@0.7.20-1.el8?arch=x86_64&upstream=libsolv-0.7.20-1.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libssh@0.9.6-3.el8?arch=x86_64&upstream=libssh-0.9.6-3.el8.src.rpm&distro=rhel-8.6&package-id=14db8c66be68bde7", + "publisher": "Red Hat, Inc.", + "name": "libssh", + "version": "0.9.6-3.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libssh:libssh:0.9.6-3.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libssh@0.9.6-3.el8?arch=x86_64&upstream=libssh-0.9.6-3.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libssh-config@0.9.6-3.el8?arch=noarch&upstream=libssh-0.9.6-3.el8.src.rpm&distro=rhel-8.6&package-id=e21003e880ba05ec", + "publisher": "Red Hat, Inc.", + "name": "libssh-config", + "version": "0.9.6-3.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libssh-config:libssh-config:0.9.6-3.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libssh-config@0.9.6-3.el8?arch=noarch&upstream=libssh-0.9.6-3.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libstdc++@8.5.0-10.1.el8_6?arch=x86_64&upstream=gcc-8.5.0-10.1.el8_6.src.rpm&distro=rhel-8.6&package-id=e7b45ccd55c431a4", + "publisher": "Red Hat, Inc.", + "name": "libstdc++", + "version": "8.5.0-10.1.el8_6", + "licenses": [ + { + "license": { + "name": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:8.5.0-10.1.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libstdc++@8.5.0-10.1.el8_6?arch=x86_64&upstream=gcc-8.5.0-10.1.el8_6.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libtasn1@4.13-3.el8?arch=x86_64&upstream=libtasn1-4.13-3.el8.src.rpm&distro=rhel-8.6&package-id=159c2b10da56c5c7", + "publisher": "Red Hat, Inc.", + "name": "libtasn1", + "version": "4.13-3.el8", + "licenses": [ + { + "license": { + "name": "GPLv3+ and LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libtasn1:libtasn1:4.13-3.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libtasn1@4.13-3.el8?arch=x86_64&upstream=libtasn1-4.13-3.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libtirpc@1.1.4-6.el8?arch=x86_64&upstream=libtirpc-1.1.4-6.el8.src.rpm&distro=rhel-8.6&package-id=62a22749dc595cd2", + "publisher": "Red Hat, Inc.", + "name": "libtirpc", + "version": "1.1.4-6.el8", + "licenses": [ + { + "license": { + "name": "SISSL and BSD" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc:libtirpc:1.1.4-6.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libtirpc@1.1.4-6.el8?arch=x86_64&upstream=libtirpc-1.1.4-6.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libunistring@0.9.9-3.el8?arch=x86_64&upstream=libunistring-0.9.9-3.el8.src.rpm&distro=rhel-8.6&package-id=42de6e635746f2bb", + "publisher": "Red Hat, Inc.", + "name": "libunistring", + "version": "0.9.9-3.el8", + "licenses": [ + { + "license": { + "name": "GPLv2+ or LGPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:libunistring:libunistring:0.9.9-3.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libunistring@0.9.9-3.el8?arch=x86_64&upstream=libunistring-0.9.9-3.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libusbx@1.0.23-4.el8?arch=x86_64&upstream=libusbx-1.0.23-4.el8.src.rpm&distro=rhel-8.6&package-id=6d44b14cda1496c6", + "publisher": "Red Hat, Inc.", + "name": "libusbx", + "version": "1.0.23-4.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libusbx:libusbx:1.0.23-4.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libusbx@1.0.23-4.el8?arch=x86_64&upstream=libusbx-1.0.23-4.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libutempter@1.1.6-14.el8?arch=x86_64&upstream=libutempter-1.1.6-14.el8.src.rpm&distro=rhel-8.6&package-id=ce0c3a72536371a6", + "publisher": "Red Hat, Inc.", + "name": "libutempter", + "version": "1.1.6-14.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libutempter:libutempter:1.1.6-14.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libutempter@1.1.6-14.el8?arch=x86_64&upstream=libutempter-1.1.6-14.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libuuid@2.32.1-35.el8?arch=x86_64&upstream=util-linux-2.32.1-35.el8.src.rpm&distro=rhel-8.6&package-id=7f5abf7a05bbadc6", + "publisher": "Red Hat, Inc.", + "name": "libuuid", + "version": "2.32.1-35.el8", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:libuuid:libuuid:2.32.1-35.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libuuid@2.32.1-35.el8?arch=x86_64&upstream=util-linux-2.32.1-35.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libverto@0.3.0-5.el8?arch=x86_64&upstream=libverto-0.3.0-5.el8.src.rpm&distro=rhel-8.6&package-id=afbcf425a13df06e", + "publisher": "Red Hat, Inc.", + "name": "libverto", + "version": "0.3.0-5.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libverto:libverto:0.3.0-5.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libverto@0.3.0-5.el8?arch=x86_64&upstream=libverto-0.3.0-5.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libxcrypt@4.1.1-6.el8?arch=x86_64&upstream=libxcrypt-4.1.1-6.el8.src.rpm&distro=rhel-8.6&package-id=c9f4cb90f1d9fdb7", + "publisher": "Red Hat, Inc.", + "name": "libxcrypt", + "version": "4.1.1-6.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+ and BSD and Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:libxcrypt:libxcrypt:4.1.1-6.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libxcrypt@4.1.1-6.el8?arch=x86_64&upstream=libxcrypt-4.1.1-6.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libxml2@2.9.7-13.el8_6.1?arch=x86_64&upstream=libxml2-2.9.7-13.el8_6.1.src.rpm&distro=rhel-8.6&package-id=d50d7a1e9d9caa9", + "publisher": "Red Hat, Inc.", + "name": "libxml2", + "version": "2.9.7-13.el8_6.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libxml2:libxml2:2.9.7-13.el8_6.1:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libxml2@2.9.7-13.el8_6.1?arch=x86_64&upstream=libxml2-2.9.7-13.el8_6.1.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libyaml@0.1.7-5.el8?arch=x86_64&upstream=libyaml-0.1.7-5.el8.src.rpm&distro=rhel-8.6&package-id=95655bb43e12fc9b", + "publisher": "Red Hat, Inc.", + "name": "libyaml", + "version": "0.1.7-5.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libyaml:libyaml:0.1.7-5.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libyaml@0.1.7-5.el8?arch=x86_64&upstream=libyaml-0.1.7-5.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/libzstd@1.4.4-1.el8?arch=x86_64&upstream=zstd-1.4.4-1.el8.src.rpm&distro=rhel-8.6&package-id=715b9b1896e70710", + "publisher": "Red Hat, Inc.", + "name": "libzstd", + "version": "1.4.4-1.el8", + "licenses": [ + { + "license": { + "name": "BSD and GPLv2" + } + } + ], + "cpe": "cpe:2.3:a:libzstd:libzstd:1.4.4-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/libzstd@1.4.4-1.el8?arch=x86_64&upstream=zstd-1.4.4-1.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/lua-libs@5.3.4-12.el8?arch=x86_64&upstream=lua-5.3.4-12.el8.src.rpm&distro=rhel-8.6&package-id=7197ebf16b3fe587", + "publisher": "Red Hat, Inc.", + "name": "lua-libs", + "version": "5.3.4-12.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lua-libs:lua-libs:5.3.4-12.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/lua-libs@5.3.4-12.el8?arch=x86_64&upstream=lua-5.3.4-12.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/lz4-libs@1.8.3-3.el8_4?arch=x86_64&upstream=lz4-1.8.3-3.el8_4.src.rpm&distro=rhel-8.6&package-id=ca403e7013eee117", + "publisher": "Red Hat, Inc.", + "name": "lz4-libs", + "version": "1.8.3-3.el8_4", + "licenses": [ + { + "license": { + "name": "GPLv2+ and BSD" + } + } + ], + "cpe": "cpe:2.3:a:lz4-libs:lz4-libs:1.8.3-3.el8_4:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/lz4-libs@1.8.3-3.el8_4?arch=x86_64&upstream=lz4-1.8.3-3.el8_4.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/microdnf@3.8.0-2.el8?arch=x86_64&upstream=microdnf-3.8.0-2.el8.src.rpm&distro=rhel-8.6&package-id=b1d1c82094fb041e", + "publisher": "Red Hat, Inc.", + "name": "microdnf", + "version": "3.8.0-2.el8", + "licenses": [ + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:microdnf:microdnf:3.8.0-2.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/microdnf@3.8.0-2.el8?arch=x86_64&upstream=microdnf-3.8.0-2.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/minisign@0.9-1.el8?arch=x86_64&upstream=minisign-0.9-1.el8.src.rpm&distro=rhel-8.6&package-id=aceef44d7a0b7eb7", + "publisher": "Fedora Project", + "name": "minisign", + "version": "0.9-1.el8", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fedoraproject:minisign:0.9-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/minisign@0.9-1.el8?arch=x86_64&upstream=minisign-0.9-1.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/mpfr@3.1.6-1.el8?arch=x86_64&upstream=mpfr-3.1.6-1.el8.src.rpm&distro=rhel-8.6&package-id=c515ebd09bbbee10", + "publisher": "Red Hat, Inc.", + "name": "mpfr", + "version": "3.1.6-1.el8", + "licenses": [ + { + "license": { + "name": "LGPLv3+ and GPLv3+ and GFDL" + } + } + ], + "cpe": "cpe:2.3:a:redhat:mpfr:3.1.6-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/mpfr@3.1.6-1.el8?arch=x86_64&upstream=mpfr-3.1.6-1.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/ncurses-base@6.1-9.20180224.el8?arch=noarch&upstream=ncurses-6.1-9.20180224.el8.src.rpm&distro=rhel-8.6&package-id=e5ad8a54f0da4576", + "publisher": "Red Hat, Inc.", + "name": "ncurses-base", + "version": "6.1-9.20180224.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-base:ncurses-base:6.1-9.20180224.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/ncurses-base@6.1-9.20180224.el8?arch=noarch&upstream=ncurses-6.1-9.20180224.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/ncurses-libs@6.1-9.20180224.el8?arch=x86_64&upstream=ncurses-6.1-9.20180224.el8.src.rpm&distro=rhel-8.6&package-id=92f6d17e993a156c", + "publisher": "Red Hat, Inc.", + "name": "ncurses-libs", + "version": "6.1-9.20180224.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-libs:ncurses-libs:6.1-9.20180224.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/ncurses-libs@6.1-9.20180224.el8?arch=x86_64&upstream=ncurses-6.1-9.20180224.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/nettle@3.4.1-7.el8?arch=x86_64&upstream=nettle-3.4.1-7.el8.src.rpm&distro=rhel-8.6&package-id=addc7521b8c9e5f", + "publisher": "Red Hat, Inc.", + "name": "nettle", + "version": "3.4.1-7.el8", + "licenses": [ + { + "license": { + "name": "LGPLv3+ or GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:nettle:nettle:3.4.1-7.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/nettle@3.4.1-7.el8?arch=x86_64&upstream=nettle-3.4.1-7.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/npth@1.5-4.el8?arch=x86_64&upstream=npth-1.5-4.el8.src.rpm&distro=rhel-8.6&package-id=10169dc5c8cd1ebc", + "publisher": "Red Hat, Inc.", + "name": "npth", + "version": "1.5-4.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:redhat:npth:1.5-4.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/npth@1.5-4.el8?arch=x86_64&upstream=npth-1.5-4.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/openldap@2.4.46-18.el8?arch=x86_64&upstream=openldap-2.4.46-18.el8.src.rpm&distro=rhel-8.6&package-id=25e75ae945384d69", + "publisher": "Red Hat, Inc.", + "name": "openldap", + "version": "2.4.46-18.el8", + "licenses": [ + { + "license": { + "name": "OpenLDAP" + } + } + ], + "cpe": "cpe:2.3:a:openldap:openldap:2.4.46-18.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/openldap@2.4.46-18.el8?arch=x86_64&upstream=openldap-2.4.46-18.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/openssl-libs@1.1.1k-7.el8_6?arch=x86_64&epoch=1&upstream=openssl-1.1.1k-7.el8_6.src.rpm&distro=rhel-8.6&package-id=9040df89ae0d557c", + "publisher": "Red Hat, Inc.", + "name": "openssl-libs", + "version": "1:1.1.1k-7.el8_6", + "licenses": [ + { + "license": { + "name": "OpenSSL and ASL 2.0" + } + } + ], + "cpe": "cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.1.1k-7.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/openssl-libs@1.1.1k-7.el8_6?arch=x86_64&epoch=1&upstream=openssl-1.1.1k-7.el8_6.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/p11-kit@0.23.22-1.el8?arch=x86_64&upstream=p11-kit-0.23.22-1.el8.src.rpm&distro=rhel-8.6&package-id=b254c77cacc73abc", + "publisher": "Red Hat, Inc.", + "name": "p11-kit", + "version": "0.23.22-1.el8", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:p11-kit:p11-kit:0.23.22-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/p11-kit@0.23.22-1.el8?arch=x86_64&upstream=p11-kit-0.23.22-1.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/p11-kit-trust@0.23.22-1.el8?arch=x86_64&upstream=p11-kit-0.23.22-1.el8.src.rpm&distro=rhel-8.6&package-id=9bbc280cfc6925b2", + "publisher": "Red Hat, Inc.", + "name": "p11-kit-trust", + "version": "0.23.22-1.el8", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:p11-kit-trust:p11-kit-trust:0.23.22-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/p11-kit-trust@0.23.22-1.el8?arch=x86_64&upstream=p11-kit-0.23.22-1.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/pam@1.3.1-16.el8_6.1?arch=x86_64&upstream=pam-1.3.1-16.el8_6.1.src.rpm&distro=rhel-8.6&package-id=3fb1665d41bc6d49", + "publisher": "Red Hat, Inc.", + "name": "pam", + "version": "1.3.1-16.el8_6.1", + "licenses": [ + { + "license": { + "name": "BSD and GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:redhat:pam:1.3.1-16.el8_6.1:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/pam@1.3.1-16.el8_6.1?arch=x86_64&upstream=pam-1.3.1-16.el8_6.1.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/pcre@8.42-6.el8?arch=x86_64&upstream=pcre-8.42-6.el8.src.rpm&distro=rhel-8.6&package-id=3d22a919de1209fc", + "publisher": "Red Hat, Inc.", + "name": "pcre", + "version": "8.42-6.el8", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:redhat:pcre:8.42-6.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/pcre@8.42-6.el8?arch=x86_64&upstream=pcre-8.42-6.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/pcre2@10.32-3.el8_6?arch=x86_64&upstream=pcre2-10.32-3.el8_6.src.rpm&distro=rhel-8.6&package-id=239777e88c48f2ef", + "publisher": "Red Hat, Inc.", + "name": "pcre2", + "version": "10.32-3.el8_6", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:redhat:pcre2:10.32-3.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/pcre2@10.32-3.el8_6?arch=x86_64&upstream=pcre2-10.32-3.el8_6.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/popt@1.18-1.el8?arch=x86_64&upstream=popt-1.18-1.el8.src.rpm&distro=rhel-8.6&package-id=5e4c6fe5d94c33be", + "publisher": "Red Hat, Inc.", + "name": "popt", + "version": "1.18-1.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:redhat:popt:1.18-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/popt@1.18-1.el8?arch=x86_64&upstream=popt-1.18-1.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/publicsuffix-list-dafsa@20180723-1.el8?arch=noarch&upstream=publicsuffix-list-20180723-1.el8.src.rpm&distro=rhel-8.6&package-id=82573d5ccba23d8b", + "publisher": "Red Hat, Inc.", + "name": "publicsuffix-list-dafsa", + "version": "20180723-1.el8", + "licenses": [ + { + "license": { + "name": "MPLv2.0" + } + } + ], + "cpe": "cpe:2.3:a:publicsuffix-list-dafsa:publicsuffix-list-dafsa:20180723-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/publicsuffix-list-dafsa@20180723-1.el8?arch=noarch&upstream=publicsuffix-list-20180723-1.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/readline@7.0-10.el8?arch=x86_64&upstream=readline-7.0-10.el8.src.rpm&distro=rhel-8.6&package-id=cebe4f3f58f38e93", + "publisher": "Red Hat, Inc.", + "name": "readline", + "version": "7.0-10.el8", + "licenses": [ + { + "license": { + "name": "GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:readline:readline:7.0-10.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/readline@7.0-10.el8?arch=x86_64&upstream=readline-7.0-10.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/redhat-release@8.6-0.1.el8?arch=x86_64&upstream=redhat-release-8.6-0.1.el8.src.rpm&distro=rhel-8.6&package-id=7b4f1acb3768e4b0", + "publisher": "Red Hat, Inc.", + "name": "redhat-release", + "version": "8.6-0.1.el8", + "licenses": [ + { + "license": { + "name": "GPLv2" + } + } + ], + "cpe": "cpe:2.3:a:redhat-release:redhat-release:8.6-0.1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/redhat-release@8.6-0.1.el8?arch=x86_64&upstream=redhat-release-8.6-0.1.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/rootfiles@8.1-22.el8?arch=noarch&upstream=rootfiles-8.1-22.el8.src.rpm&distro=rhel-8.6&package-id=e258779ba67e6208", + "publisher": "Red Hat, Inc.", + "name": "rootfiles", + "version": "8.1-22.el8", + "licenses": [ + { + "license": { + "name": "Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:rootfiles:rootfiles:8.1-22.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/rootfiles@8.1-22.el8?arch=noarch&upstream=rootfiles-8.1-22.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/rpm@4.14.3-23.el8?arch=x86_64&upstream=rpm-4.14.3-23.el8.src.rpm&distro=rhel-8.6&package-id=43018d83462bf75", + "publisher": "Red Hat, Inc.", + "name": "rpm", + "version": "4.14.3-23.el8", + "licenses": [ + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:redhat:rpm:4.14.3-23.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/rpm@4.14.3-23.el8?arch=x86_64&upstream=rpm-4.14.3-23.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/rpm-libs@4.14.3-23.el8?arch=x86_64&upstream=rpm-4.14.3-23.el8.src.rpm&distro=rhel-8.6&package-id=f5c738c4cf69b92f", + "publisher": "Red Hat, Inc.", + "name": "rpm-libs", + "version": "4.14.3-23.el8", + "licenses": [ + { + "license": { + "name": "GPLv2+ and LGPLv2+ with exceptions" + } + } + ], + "cpe": "cpe:2.3:a:rpm-libs:rpm-libs:4.14.3-23.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/rpm-libs@4.14.3-23.el8?arch=x86_64&upstream=rpm-4.14.3-23.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/sed@4.5-5.el8?arch=x86_64&upstream=sed-4.5-5.el8.src.rpm&distro=rhel-8.6&package-id=159d798b8ff085f2", + "publisher": "Red Hat, Inc.", + "name": "sed", + "version": "4.5-5.el8", + "licenses": [ + { + "license": { + "name": "GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:redhat:sed:4.5-5.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/sed@4.5-5.el8?arch=x86_64&upstream=sed-4.5-5.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/setup@2.12.2-6.el8?arch=noarch&upstream=setup-2.12.2-6.el8.src.rpm&distro=rhel-8.6&package-id=a70f2321beee4ac8", + "publisher": "Red Hat, Inc.", + "name": "setup", + "version": "2.12.2-6.el8", + "licenses": [ + { + "license": { + "name": "Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:redhat:setup:2.12.2-6.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/setup@2.12.2-6.el8?arch=noarch&upstream=setup-2.12.2-6.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/shadow-utils@4.6-16.el8?arch=x86_64&epoch=2&upstream=shadow-utils-4.6-16.el8.src.rpm&distro=rhel-8.6&package-id=fa18e2d0e4dcbee0", + "publisher": "Red Hat, Inc.", + "name": "shadow-utils", + "version": "2:4.6-16.el8", + "licenses": [ + { + "license": { + "name": "BSD and GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:shadow-utils:shadow-utils:2\\:4.6-16.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/shadow-utils@4.6-16.el8?arch=x86_64&epoch=2&upstream=shadow-utils-4.6-16.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/sqlite-libs@3.26.0-15.el8?arch=x86_64&upstream=sqlite-3.26.0-15.el8.src.rpm&distro=rhel-8.6&package-id=e29e20bbd4cc3162", + "publisher": "Red Hat, Inc.", + "name": "sqlite-libs", + "version": "3.26.0-15.el8", + "licenses": [ + { + "license": { + "name": "Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:sqlite-libs:sqlite-libs:3.26.0-15.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/sqlite-libs@3.26.0-15.el8?arch=x86_64&upstream=sqlite-3.26.0-15.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/systemd-libs@239-58.el8_6.7?arch=x86_64&upstream=systemd-239-58.el8_6.7.src.rpm&distro=rhel-8.6&package-id=aaa1e024dff8197b", + "publisher": "Red Hat, Inc.", + "name": "systemd-libs", + "version": "239-58.el8_6.7", + "licenses": [ + { + "license": { + "name": "LGPLv2+ and MIT" + } + } + ], + "cpe": "cpe:2.3:a:systemd-libs:systemd-libs:239-58.el8_6.7:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/systemd-libs@239-58.el8_6.7?arch=x86_64&upstream=systemd-239-58.el8_6.7.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/tzdata@2022c-1.el8?arch=noarch&upstream=tzdata-2022c-1.el8.src.rpm&distro=rhel-8.6&package-id=40501185c21edb6d", + "publisher": "Red Hat, Inc.", + "name": "tzdata", + "version": "2022c-1.el8", + "licenses": [ + { + "license": { + "name": "Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:redhat:tzdata:2022c-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/tzdata@2022c-1.el8?arch=noarch&upstream=tzdata-2022c-1.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/tzdata@2022e-1.el8?arch=noarch&upstream=tzdata-2022e-1.el8.src.rpm&distro=rhel-8.6&package-id=a4b858d525f17613", + "publisher": "Red Hat, Inc.", + "name": "tzdata", + "version": "2022e-1.el8", + "licenses": [ + { + "license": { + "name": "Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:redhat:tzdata:2022e-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/tzdata@2022e-1.el8?arch=noarch&upstream=tzdata-2022e-1.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/util-linux@2.32.1-35.el8?arch=x86_64&upstream=util-linux-2.32.1-35.el8.src.rpm&distro=rhel-8.6&package-id=71479b278960efce", + "publisher": "Red Hat, Inc.", + "name": "util-linux", + "version": "2.32.1-35.el8", + "licenses": [ + { + "license": { + "name": "GPLv2 and GPLv2+ and LGPLv2+ and BSD with advertising and Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:util-linux:util-linux:2.32.1-35.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/util-linux@2.32.1-35.el8?arch=x86_64&upstream=util-linux-2.32.1-35.el8.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/xz-libs@5.2.4-4.el8_6?arch=x86_64&upstream=xz-5.2.4-4.el8_6.src.rpm&distro=rhel-8.6&package-id=486833b51e8afb80", + "publisher": "Red Hat, Inc.", + "name": "xz-libs", + "version": "5.2.4-4.el8_6", + "licenses": [ + { + "license": { + "name": "Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:xz-libs:xz-libs:5.2.4-4.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/xz-libs@5.2.4-4.el8_6?arch=x86_64&upstream=xz-5.2.4-4.el8_6.src.rpm&distro=rhel-8.6" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/rhel/zlib@1.2.11-18.el8_5?arch=x86_64&upstream=zlib-1.2.11-18.el8_5.src.rpm&distro=rhel-8.6&package-id=fa33927f0375bac0", + "publisher": "Red Hat, Inc.", + "name": "zlib", + "version": "1.2.11-18.el8_5", + "licenses": [ + { + "license": { + "name": "zlib and Boost" + } + } + ], + "cpe": "cpe:2.3:a:redhat:zlib:1.2.11-18.el8_5:*:*:*:*:*:*:*", + "purl": "pkg:rpm/rhel/zlib@1.2.11-18.el8_5?arch=x86_64&upstream=zlib-1.2.11-18.el8_5.src.rpm&distro=rhel-8.6" + }, + { + "type": "operating-system", + "name": "rhel", + "version": "8.6", + "description": "Red Hat Enterprise Linux 8.6 (Ootpa)", + "cpe": "cpe:2.3:o:redhat:enterprise_linux:8:*:baseos:*:*:*:*:*", + "swid": { + "tagId": "rhel", + "name": "rhel", + "version": "8.6" + }, + "externalReferences": [ + { + "url": "https://bugzilla.redhat.com/", + "type": "issue-tracker" + }, + { + "url": "https://www.redhat.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.2.0-r6?arch=x86_64&distro=alpine-3.12.0&package-id=cb9c936830cdd1b4", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.2.0-r6", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.2.0-r6:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.2.0-r6?arch=x86_64&distro=alpine-3.12.0", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.2-r0?arch=x86_64&distro=alpine-3.12.0&package-id=6e76b2cc6bf8236", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.2-r0", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.2-r0?arch=x86_64&distro=alpine-3.12.0", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.10.5-r1?arch=x86_64&distro=alpine-3.12.0&package-id=4c5552e9bb4204e", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.10.5-r1", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.10.5-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.10.5-r1?arch=x86_64&distro=alpine-3.12.0", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "c7f7fc7e2b76ab25", + "name": "busybox", + "version": "1.31.1", + "cpe": "cpe:2.3:a:busybox:busybox:1.31.1:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.31.1-r16?arch=x86_64&distro=alpine-3.12.0&package-id=5933148412b0c042", + "publisher": "Natanael Copa ", + "name": "busybox", + "version": "1.31.1-r16", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.31.1-r16:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.31.1-r16?arch=x86_64&distro=alpine-3.12.0", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20191127-r2?arch=x86_64&upstream=ca-certificates&distro=alpine-3.12.0&package-id=c5af572d6bab8dd9", + "publisher": "Natanael Copa ", + "name": "ca-certificates-bundle", + "version": "20191127-r2", + "description": "Pre generated bundle of Mozilla certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20191127-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-bundle@20191127-r2?arch=x86_64&upstream=ca-certificates&distro=alpine-3.12.0", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.12.0&package-id=cf75e8a6d9cf09fc", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r3", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.12.0", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto1.1@1.1.1g-r0?arch=x86_64&upstream=openssl&distro=alpine-3.12.0&package-id=2efad31e3aae0b7", + "publisher": "Timo Teras ", + "name": "libcrypto1.1", + "version": "1.1.1g-r0", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1g-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1g-r0?arch=x86_64&upstream=openssl&distro=alpine-3.12.0", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl1.1@1.1.1g-r0?arch=x86_64&upstream=openssl&distro=alpine-3.12.0&package-id=ff9ffd0be98bf531", + "publisher": "Timo Teras ", + "name": "libssl1.1", + "version": "1.1.1g-r0", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1g-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl1.1@1.1.1g-r0?arch=x86_64&upstream=openssl&distro=alpine-3.12.0", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libtls-standalone@2.9.1-r1?arch=x86_64&distro=alpine-3.12.0&package-id=9af7ecda8019fe5b", + "name": "libtls-standalone", + "version": "2.9.1-r1", + "description": "libtls extricated from libressl sources", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libtls-standalone:libtls-standalone:2.9.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libtls-standalone@2.9.1-r1?arch=x86_64&distro=alpine-3.12.0", + "externalReferences": [ + { + "url": "https://www.libressl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.1.24-r8?arch=x86_64&distro=alpine-3.12.0&package-id=8c619fe0fec71f88", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.1.24-r8", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.1.24-r8:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.1.24-r8?arch=x86_64&distro=alpine-3.12.0", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.1.24-r8?arch=x86_64&upstream=musl&distro=alpine-3.12.0&package-id=30c8a6c885b5baa1", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.1.24-r8", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.1.24-r8:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.1.24-r8?arch=x86_64&upstream=musl&distro=alpine-3.12.0", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.2.6-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.12.0&package-id=6bb4b607de5648aa", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.2.6-r0", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.2.6-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.2.6-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.12.0", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.31.1-r16?arch=x86_64&upstream=busybox&distro=alpine-3.12.0&package-id=e7b773e0ca06b456", + "publisher": "Natanael Copa ", + "name": "ssl_client", + "version": "1.31.1-r16", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.31.1-r16:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.31.1-r16?arch=x86_64&upstream=busybox&distro=alpine-3.12.0", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=alpine-3.12.0&package-id=e5b843eacba99f13", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.11-r3", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.11-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=alpine-3.12.0", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.12.0", + "description": "Alpine Linux v3.12", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.12.0" + }, + "externalReferences": [ + { + "url": "https://bugs.alpinelinux.org/", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/base-files@10.3+deb10u9?arch=amd64&distro=debian-10&package-id=5aa6e4929bf16696", + "publisher": "Santiago Vila ", + "name": "base-files", + "version": "10.3+deb10u9", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:10.3\\+deb10u9:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/base-files@10.3+deb10u9?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=2053cbd7487ca8ea", + "name": "github.com/beorn7/perks", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/beorn7/perks@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/blang/semver@v3.5.1+incompatible?package-id=feed8c8267911e82", + "name": "github.com/blang/semver", + "version": "v3.5.1+incompatible", + "cpe": "cpe:2.3:a:blang:semver:v3.5.1\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/blang/semver@v3.5.1+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.1.1?package-id=5f868d1576fdcd11", + "name": "github.com/cespare/xxhash/v2", + "version": "v2.1.1", + "cpe": "cpe:2.3:a:cespare:xxhash\\/v2:v2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/container-storage-interface/spec@v1.4.0?package-id=df466f544a58829f", + "name": "github.com/container-storage-interface/spec", + "version": "v1.4.0", + "cpe": "cpe:2.3:a:container-storage-interface:spec:v1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/container-storage-interface/spec@v1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1?package-id=a66d99cb9a4c2b73", + "name": "github.com/davecgh/go-spew", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:davecgh:go-spew:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/evanphx/json-patch@v4.9.0+incompatible?package-id=c3f3d8d12c2f7337", + "name": "github.com/evanphx/json-patch", + "version": "v4.9.0+incompatible", + "cpe": "cpe:2.3:a:evanphx:json-patch:v4.9.0\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/evanphx/json-patch@v4.9.0+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-logr/logr@v0.4.0?package-id=1de7ef165be7c1a9", + "name": "github.com/go-logr/logr", + "version": "v0.4.0", + "cpe": "cpe:2.3:a:go-logr:logr:v0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-logr/logr@v0.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2?package-id=1f7006f4c2049e6c", + "name": "github.com/gogo/protobuf", + "version": "v1.3.2", + "cpe": "cpe:2.3:a:gogo:protobuf:v1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/groupcache@v0.0.0-20200121045136-8c9f03a8e57e?package-id=ade818ebe0450085", + "name": "github.com/golang/groupcache", + "version": "v0.0.0-20200121045136-8c9f03a8e57e", + "cpe": "cpe:2.3:a:golang:groupcache:v0.0.0-20200121045136-8c9f03a8e57e:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20200121045136-8c9f03a8e57e" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.1?package-id=60da2529107650f9", + "name": "github.com/golang/protobuf", + "version": "v1.5.1", + "cpe": "cpe:2.3:a:golang:protobuf:v1.5.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.5.5?package-id=a0f1cbad3e9f5659", + "name": "github.com/google/go-cmp", + "version": "v0.5.5", + "cpe": "cpe:2.3:a:google:go-cmp:v0.5.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-cmp@v0.5.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/gofuzz@v1.2.0?package-id=a85884e76c725b34", + "name": "github.com/google/gofuzz", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:google:gofuzz:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/gofuzz@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/googleapis/gnostic@v0.5.4?package-id=ad65d61e9224f044", + "name": "github.com/googleapis/gnostic", + "version": "v0.5.4", + "cpe": "cpe:2.3:a:googleapis:gnostic:v0.5.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/googleapis/gnostic@v0.5.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/hashicorp/golang-lru@v0.5.4?package-id=847799a13c8441ca", + "name": "github.com/hashicorp/golang-lru", + "version": "v0.5.4", + "cpe": "cpe:2.3:a:hashicorp:golang-lru:v0.5.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/golang-lru@v0.5.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.12?package-id=8121c4bb67073130", + "name": "github.com/imdario/mergo", + "version": "v0.3.12", + "cpe": "cpe:2.3:a:imdario:mergo:v0.3.12:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/imdario/mergo@v0.3.12" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.10?package-id=f78e766297e3c595", + "name": "github.com/json-iterator/go", + "version": "v1.1.10", + "cpe": "cpe:2.3:a:json-iterator:go:v1.1.10:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/json-iterator/go@v1.1.10" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/kubernetes-csi/csi-lib-utils@v0.9.1?package-id=9abad8b34dcbfbd4", + "name": "github.com/kubernetes-csi/csi-lib-utils", + "version": "v0.9.1", + "cpe": "cpe:2.3:a:kubernetes-csi:csi-lib-utils:v0.9.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/kubernetes-csi/csi-lib-utils@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/kubernetes-csi/external-attacher@(devel)?package-id=c6e7a0e4fd1233bc", + "name": "github.com/kubernetes-csi/external-attacher", + "version": "(devel)", + "cpe": "cpe:2.3:a:kubernetes-csi:external-attacher:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/kubernetes-csi/external-attacher@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.2-0.20181231171920-c182affec369?package-id=9199bffe49d1f2e5", + "name": "github.com/matttproud/golang_protobuf_extensions", + "version": "v1.0.2-0.20181231171920-c182affec369", + "cpe": "cpe:2.3:a:matttproud:golang-protobuf-extensions:v1.0.2-0.20181231171920-c182affec369:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.2-0.20181231171920-c182affec369" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=4b9acff0c68448ee", + "name": "github.com/modern-go/concurrent", + "version": "v0.0.0-20180306012644-bacd9c7ef1dd", + "cpe": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.1?package-id=e81e1f8ca994c1f0", + "name": "github.com/modern-go/reflect2", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:modern-go:reflect2:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=ba043f5f90a9e4e", + "name": "github.com/pkg/errors", + "version": "v0.9.1", + "cpe": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pkg/errors@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/client_golang@v1.9.0?package-id=93c70d21e2c848ac", + "name": "github.com/prometheus/client_golang", + "version": "v1.9.0", + "cpe": "cpe:2.3:a:prometheus:client-golang:v1.9.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_golang@v1.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/client_model@v0.2.0?package-id=5ab3ebc090b83583", + "name": "github.com/prometheus/client_model", + "version": "v0.2.0", + "cpe": "cpe:2.3:a:prometheus:client-model:v0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_model@v0.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/common@v0.19.0?package-id=c4302444a88710ca", + "name": "github.com/prometheus/common", + "version": "v0.19.0", + "cpe": "cpe:2.3:a:prometheus:common:v0.19.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/common@v0.19.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/procfs@v0.6.0?package-id=e9619d77aeba0ea1", + "name": "github.com/prometheus/procfs", + "version": "v0.6.0", + "cpe": "cpe:2.3:a:prometheus:procfs:v0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/procfs@v0.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5?package-id=a246a1efaed3fb16", + "name": "github.com/spf13/pflag", + "version": "v1.0.5", + "cpe": "cpe:2.3:a:spf13:pflag:v1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1?package-id=b22630daeaccdf65", + "name": "golang.org/x/net", + "version": "v0.0.0-20210410081132-afb366fc7cd1", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.0.0-20210410081132-afb366fc7cd1:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20210313182246-cd4f82c27b84?package-id=29dac68ea756a565", + "name": "golang.org/x/oauth2", + "version": "v0.0.0-20210313182246-cd4f82c27b84", + "cpe": "cpe:2.3:a:golang:x\\/oauth2:v0.0.0-20210313182246-cd4f82c27b84:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20210313182246-cd4f82c27b84" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20210330210617-4fbd30eecc44?package-id=ce5e5f7a85470ecd", + "name": "golang.org/x/sys", + "version": "v0.0.0-20210330210617-4fbd30eecc44", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20210330210617-4fbd30eecc44:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20210330210617-4fbd30eecc44" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/term@v0.0.0-20210317153231-de623e64d2a6?package-id=e4c400b96c792f4b", + "name": "golang.org/x/term", + "version": "v0.0.0-20210317153231-de623e64d2a6", + "cpe": "cpe:2.3:a:golang:x\\/term:v0.0.0-20210317153231-de623e64d2a6:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/term@v0.0.0-20210317153231-de623e64d2a6" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/text@v0.3.6?package-id=645547806213a3b0", + "name": "golang.org/x/text", + "version": "v0.3.6", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.3.6:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.3.6" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20210220033141-f8bda1e9f3ba?package-id=573f5a02a903fdcc", + "name": "golang.org/x/time", + "version": "v0.0.0-20210220033141-f8bda1e9f3ba", + "cpe": "cpe:2.3:a:golang:x\\/time:v0.0.0-20210220033141-f8bda1e9f3ba:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/time@v0.0.0-20210220033141-f8bda1e9f3ba" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20210317182105-75c7a8546eb9?package-id=b510145cb00447d4", + "name": "google.golang.org/genproto", + "version": "v0.0.0-20210317182105-75c7a8546eb9", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20210317182105-75c7a8546eb9:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20210317182105-75c7a8546eb9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.36.0?package-id=e21223220bd05443", + "name": "google.golang.org/grpc", + "version": "v1.36.0", + "cpe": "cpe:2.3:a:google:grpc:v1.36.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.36.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.26.0?package-id=9600efcd83b31efb", + "name": "google.golang.org/protobuf", + "version": "v1.26.0", + "cpe": "cpe:2.3:a:google:protobuf:v1.26.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/protobuf@v1.26.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=cc381cd853993d48", + "name": "gopkg.in/inf.v0", + "version": "v0.9.1", + "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0?package-id=34b11fe7b078766a", + "name": "gopkg.in/yaml.v2", + "version": "v2.4.0", + "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b?package-id=372de8538add7377", + "name": "gopkg.in/yaml.v3", + "version": "v3.0.0-20210107192922-496545a6307b", + "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/api@v0.21.0?package-id=6eeceb6836126161", + "name": "k8s.io/api", + "version": "v0.21.0", + "purl": "pkg:golang/k8s.io/api@v0.21.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.21.0?package-id=ee2d2302e4078e15", + "name": "k8s.io/apimachinery", + "version": "v0.21.0", + "purl": "pkg:golang/k8s.io/apimachinery@v0.21.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/client-go@v0.21.0?package-id=3eb5845f9ab3b2ef", + "name": "k8s.io/client-go", + "version": "v0.21.0", + "purl": "pkg:golang/k8s.io/client-go@v0.21.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/component-base@v0.21.0?package-id=52e5855b80da64d0", + "name": "k8s.io/component-base", + "version": "v0.21.0", + "purl": "pkg:golang/k8s.io/component-base@v0.21.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/csi-translation-lib@v0.21.0?package-id=426e4661e3be93d9", + "name": "k8s.io/csi-translation-lib", + "version": "v0.21.0", + "purl": "pkg:golang/k8s.io/csi-translation-lib@v0.21.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/klog/v2@v2.8.0?package-id=7d3d7215ce8142ba", + "name": "k8s.io/klog/v2", + "version": "v2.8.0", + "cpe": "cpe:2.3:a:klog:v2:v2.8.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/k8s.io/klog/v2@v2.8.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20210305164622-f622666832c1?package-id=f60858d6c30d2a5d", + "name": "k8s.io/kube-openapi", + "version": "v0.0.0-20210305164622-f622666832c1", + "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20210305164622-f622666832c1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20210305010621-2afb4311ab10?package-id=8da12d2b98587a53", + "name": "k8s.io/utils", + "version": "v0.0.0-20210305010621-2afb4311ab10", + "purl": "pkg:golang/k8s.io/utils@v0.0.0-20210305010621-2afb4311ab10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/netbase@5.6?arch=all&distro=debian-10&package-id=b55e51dca4eba9a6", + "publisher": "Marco d'Itri ", + "name": "netbase", + "version": "5.6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:netbase:netbase:5.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/netbase@5.6?arch=all&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.1.1?package-id=19aec1903e488487", + "name": "sigs.k8s.io/structured-merge-diff/v4", + "version": "v4.1.1", + "cpe": "cpe:2.3:a:structured-merge-diff:v4:v4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.2.0?package-id=e364b7d517979806", + "name": "sigs.k8s.io/yaml", + "version": "v1.2.0", + "purl": "pkg:golang/sigs.k8s.io/yaml@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tzdata@2021a-0+deb10u1?arch=all&distro=debian-10&package-id=9e5b2198bbbd7fb0", + "publisher": "GNU Libc Maintainers ", + "name": "tzdata", + "version": "2021a-0+deb10u1", + "cpe": "cpe:2.3:a:tzdata:tzdata:2021a-0\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tzdata@2021a-0+deb10u1?arch=all&distro=debian-10" + }, + { + "type": "operating-system", + "name": "debian", + "version": "10", + "description": "Distroless", + "swid": { + "tagId": "debian", + "name": "debian", + "version": "10" + }, + "externalReferences": [ + { + "url": "https://github.com/GoogleContainerTools/distroless/issues/new", + "type": "issue-tracker" + }, + { + "url": "https://github.com/GoogleContainerTools/distroless", + "type": "website" + }, + { + "url": "https://github.com/GoogleContainerTools/distroless/blob/master/README.md", + "comment": "support", + "type": "other" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.2.0-r22?arch=x86_64&distro=alpine-3.16.2&package-id=f6648e0bfefbfa72", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.2.0-r22", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.2.0-r22:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.2.0-r22?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout-data@3.2.0-r22?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.16.2&package-id=f61a63f68bd86d61", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout-data", + "version": "3.2.0-r22", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.2.0-r22:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout-data@3.2.0-r22?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.16.2&package-id=82d183eb300978cc", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.4-r1", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.9-r3?arch=x86_64&distro=alpine-3.16.2&package-id=42d502b764a37310", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.12.9-r3", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.12.9-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.12.9-r3?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/brotli-libs@1.0.9-r6?arch=x86_64&upstream=brotli&distro=alpine-3.16.2&package-id=ce770907e6d64ccd", + "publisher": "prspkt ", + "name": "brotli-libs", + "version": "1.0.9-r6", + "description": "Generic lossless compressor (libraries)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brotli-libs:brotli-libs:1.0.9-r6:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/brotli-libs@1.0.9-r6?arch=x86_64&upstream=brotli&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://github.com/google/brotli", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "d80026167ff6b969", + "name": "busybox", + "version": "1.35.0", + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=alpine-3.16.2&package-id=4b48ef6f6b983526", + "publisher": "Sören Tempel ", + "name": "busybox", + "version": "1.35.0-r17", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0-r17:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates@20220614-r0?arch=x86_64&distro=alpine-3.16.2&package-id=fbb1924ff870cc71", + "publisher": "Natanael Copa ", + "name": "ca-certificates", + "version": "20220614-r0", + "description": "Common CA certificates PEM files from Mozilla", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20220614-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates@20220614-r0?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20220614-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.16.2&package-id=30622a1848b22bca", + "publisher": "Natanael Copa ", + "name": "ca-certificates-bundle", + "version": "20220614-r0", + "description": "Pre generated bundle of Mozilla certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20220614-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-bundle@20220614-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/curl@7.83.1-r3?arch=x86_64&distro=alpine-3.16.2&package-id=80d2f6c52cf9efcc", + "publisher": "Natanael Copa ", + "name": "curl", + "version": "7.83.1-r3", + "description": "URL retrival utility and library", + "licenses": [ + { + "license": { + "id": "curl" + } + } + ], + "cpe": "cpe:2.3:a:curl:curl:7.83.1-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/curl@7.83.1-r3?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://curl.se/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/freetype@2.12.1-r0?arch=x86_64&distro=alpine-3.16.2&package-id=bdcd538a4a36b9b8", + "publisher": "Carlo Landmeter ", + "name": "freetype", + "version": "2.12.1-r0", + "description": "TrueType font rendering library", + "licenses": [ + { + "license": { + "id": "FTL" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:freetype:freetype:2.12.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/freetype@2.12.1-r0?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://www.freetype.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/geoip@1.6.12-r2?arch=x86_64&distro=alpine-3.16.2&package-id=41dd13b32a3e021e", + "publisher": "Leonardo Arena ", + "name": "geoip", + "version": "1.6.12-r2", + "description": "Lookup countries by IP addresses", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:geoip:geoip:1.6.12-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/geoip@1.6.12-r2?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "http://www.maxmind.com/app/ip-location", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libbz2@1.0.8-r1?arch=x86_64&upstream=bzip2&distro=alpine-3.16.2&package-id=b681aee18ae0aa50", + "publisher": "Natanael Copa ", + "name": "libbz2", + "version": "1.0.8-r1", + "description": "Shared library for bz2", + "licenses": [ + { + "license": { + "id": "bzip2-1.0.6" + } + } + ], + "cpe": "cpe:2.3:a:libbz2:libbz2:1.0.8-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libbz2@1.0.8-r1?arch=x86_64&upstream=bzip2&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "http://sources.redhat.com/bzip2", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.16.2&package-id=2abd3b45f6fa4702", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r3", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&upstream=openssl&distro=alpine-3.16.2&package-id=eade7968dddaae93", + "publisher": "Timo Teras ", + "name": "libcrypto1.1", + "version": "1.1.1q-r0", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1q-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1q-r0?arch=x86_64&upstream=openssl&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcurl@7.83.1-r3?arch=x86_64&upstream=curl&distro=alpine-3.16.2&package-id=7c6fae9adae2be46", + "publisher": "Natanael Copa ", + "name": "libcurl", + "version": "7.83.1-r3", + "description": "The multiprotocol file transfer library", + "licenses": [ + { + "license": { + "id": "curl" + } + } + ], + "cpe": "cpe:2.3:a:libcurl:libcurl:7.83.1-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcurl@7.83.1-r3?arch=x86_64&upstream=curl&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://curl.se/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libedit@20210910.3.1-r0?arch=x86_64&distro=alpine-3.16.2&package-id=306ebeb39081e8f5", + "publisher": "Drew DeVault ", + "name": "libedit", + "version": "20210910.3.1-r0", + "description": "BSD line editing library", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libedit:libedit:20210910.3.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libedit@20210910.3.1-r0?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://www.thrysoee.dk/editline", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgcrypt@1.10.1-r0?arch=x86_64&distro=alpine-3.16.2&package-id=8d8621f41a52d13e", + "publisher": "Natanael Copa ", + "name": "libgcrypt", + "version": "1.10.1-r0", + "description": "General purpose crypto library based on the code used in GnuPG", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgcrypt:libgcrypt:1.10.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgcrypt@1.10.1-r0?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://www.gnupg.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgd@2.3.3-r0?arch=x86_64&upstream=gd&distro=alpine-3.16.2&package-id=daf831a88d77055d", + "publisher": "Carlo Landmeter ", + "name": "libgd", + "version": "2.3.3-r0", + "description": "Library for the dynamic creation of images by programmers (libraries)", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libgd:libgd:2.3.3-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgd@2.3.3-r0?arch=x86_64&upstream=gd&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://libgd.github.io/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgpg-error@1.45-r0?arch=x86_64&distro=alpine-3.16.2&package-id=62e461ecf8077e13", + "publisher": "Natanael Copa ", + "name": "libgpg-error", + "version": "1.45-r0", + "description": "Support library for libgcrypt", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgpg-error:libgpg-error:1.45-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgpg-error@1.45-r0?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://www.gnupg.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libintl@0.21-r2?arch=x86_64&upstream=gettext&distro=alpine-3.16.2&package-id=8a4b8fffbba0af61", + "publisher": "Carlo Landmeter ", + "name": "libintl", + "version": "0.21-r2", + "description": "GNU gettext runtime library", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libintl:libintl:0.21-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libintl@0.21-r2?arch=x86_64&upstream=gettext&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/gettext/gettext.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libjpeg-turbo@2.1.3-r1?arch=x86_64&distro=alpine-3.16.2&package-id=429c360bc26d4e41", + "publisher": "Natanael Copa ", + "name": "libjpeg-turbo", + "version": "2.1.3-r1", + "description": "Accelerated baseline JPEG compression and decompression library", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "IJG" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libjpeg-turbo:libjpeg-turbo:2.1.3-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libjpeg-turbo@2.1.3-r1?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://libjpeg-turbo.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libpng@1.6.37-r1?arch=x86_64&distro=alpine-3.16.2&package-id=2934e8314b6cdcc2", + "publisher": "Natanael Copa ", + "name": "libpng", + "version": "1.6.37-r1", + "description": "Portable Network Graphics library", + "licenses": [ + { + "license": { + "id": "Libpng" + } + } + ], + "cpe": "cpe:2.3:a:libpng:libpng:1.6.37-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libpng@1.6.37-r1?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "http://www.libpng.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&upstream=openssl&distro=alpine-3.16.2&package-id=472a3672a587f543", + "publisher": "Timo Teras ", + "name": "libssl1.1", + "version": "1.1.1q-r0", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1q-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl1.1@1.1.1q-r0?arch=x86_64&upstream=openssl&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libwebp@1.2.3-r0?arch=x86_64&distro=alpine-3.16.2&package-id=422b5f9230b7cf0e", + "publisher": "Natanael Copa ", + "name": "libwebp", + "version": "1.2.3-r0", + "description": "Libraries for working with WebP images", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libwebp:libwebp:1.2.3-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libwebp@1.2.3-r0?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://developers.google.com/speed/webp", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxml2@2.9.14-r2?arch=x86_64&distro=alpine-3.16.2&package-id=66abf048c3e1ee7a", + "publisher": "Carlo Landmeter ", + "name": "libxml2", + "version": "2.9.14-r2", + "description": "XML parsing library, version 2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libxml2:libxml2:2.9.14-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxml2@2.9.14-r2?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "http://www.xmlsoft.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxslt@1.1.35-r0?arch=x86_64&distro=alpine-3.16.2&package-id=7861179abda69224", + "publisher": "Natanael Copa ", + "name": "libxslt", + "version": "1.1.35-r0", + "description": "XML stylesheet transformation library", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libxslt:libxslt:1.1.35-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxslt@1.1.35-r0?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "http://xmlsoft.org/XSLT/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.2.3-r0?arch=x86_64&distro=alpine-3.16.2&package-id=ce80c45bcc942859", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.2.3-r0", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.2.3-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.2.3-r0?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.3-r0?arch=x86_64&upstream=musl&distro=alpine-3.16.2&package-id=a4e585b09fc4d514", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.2.3-r0", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.2.3-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.2.3-r0?arch=x86_64&upstream=musl&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ncurses-libs@6.3_p20220521-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.16.2&package-id=c2bd1192d3d60d2c", + "publisher": "Natanael Copa ", + "name": "ncurses-libs", + "version": "6.3_p20220521-r0", + "description": "Ncurses libraries", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-libs:ncurses-libs:6.3_p20220521-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ncurses-libs@6.3_p20220521-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://invisible-island.net/ncurses/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ncurses-terminfo-base@6.3_p20220521-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.16.2&package-id=28679685d0eccfdc", + "publisher": "Natanael Copa ", + "name": "ncurses-terminfo-base", + "version": "6.3_p20220521-r0", + "description": "Descriptions of common terminals", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-terminfo-base:ncurses-terminfo-base:6.3_p20220521-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ncurses-terminfo-base@6.3_p20220521-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://invisible-island.net/ncurses/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/nghttp2-libs@1.47.0-r0?arch=x86_64&upstream=nghttp2&distro=alpine-3.16.2&package-id=3f26eb4be5f62dce", + "publisher": "Francesco Colista ", + "name": "nghttp2-libs", + "version": "1.47.0-r0", + "description": "Experimental HTTP/2 client, server and proxy (libraries)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nghttp2-libs:nghttp2-libs:1.47.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/nghttp2-libs@1.47.0-r0?arch=x86_64&upstream=nghttp2&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://nghttp2.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/nginx@1.22.1-r1?arch=x86_64&distro=alpine-3.16.2&package-id=cc5f00be0a99d8df", + "publisher": "NGINX Packaging ", + "name": "nginx", + "version": "1.22.1-r1", + "description": "High performance web server", + "licenses": [ + { + "license": { + "name": "2-clause" + } + }, + { + "license": { + "name": "BSD-like" + } + }, + { + "license": { + "name": "license" + } + } + ], + "cpe": "cpe:2.3:a:nginx:nginx:1.22.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/nginx@1.22.1-r1?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://nginx.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/nginx-module-geoip@1.22.1-r1?arch=x86_64&distro=alpine-3.16.2&package-id=886ff332093effd3", + "publisher": "NGINX Packaging ", + "name": "nginx-module-geoip", + "version": "1.22.1-r1", + "description": "nginx GeoIP dynamic modules", + "licenses": [ + { + "license": { + "name": "2-clause" + } + }, + { + "license": { + "name": "BSD-like" + } + }, + { + "license": { + "name": "license" + } + } + ], + "cpe": "cpe:2.3:a:nginx-module-geoip:nginx-module-geoip:1.22.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/nginx-module-geoip@1.22.1-r1?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://nginx.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/nginx-module-image-filter@1.22.1-r1?arch=x86_64&distro=alpine-3.16.2&package-id=e1d7de48606524ac", + "publisher": "NGINX Packaging ", + "name": "nginx-module-image-filter", + "version": "1.22.1-r1", + "description": "nginx image filter dynamic module", + "licenses": [ + { + "license": { + "name": "2-clause" + } + }, + { + "license": { + "name": "BSD-like" + } + }, + { + "license": { + "name": "license" + } + } + ], + "cpe": "cpe:2.3:a:nginx-module-image-filter:nginx-module-image-filter:1.22.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/nginx-module-image-filter@1.22.1-r1?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://nginx.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/nginx-module-njs@1.22.1.0.7.7-r1?arch=x86_64&distro=alpine-3.16.2&package-id=a24b9aba93d58482", + "publisher": "NGINX Packaging ", + "name": "nginx-module-njs", + "version": "1.22.1.0.7.7-r1", + "description": "nginx njs dynamic modules", + "licenses": [ + { + "license": { + "name": "2-clause" + } + }, + { + "license": { + "name": "BSD-like" + } + }, + { + "license": { + "name": "license" + } + } + ], + "cpe": "cpe:2.3:a:nginx-module-njs:nginx-module-njs:1.22.1.0.7.7-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/nginx-module-njs@1.22.1.0.7.7-r1?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://nginx.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/nginx-module-xslt@1.22.1-r1?arch=x86_64&distro=alpine-3.16.2&package-id=488cf350ed1d23eb", + "publisher": "NGINX Packaging ", + "name": "nginx-module-xslt", + "version": "1.22.1-r1", + "description": "nginx xslt dynamic module", + "licenses": [ + { + "license": { + "name": "2-clause" + } + }, + { + "license": { + "name": "BSD-like" + } + }, + { + "license": { + "name": "license" + } + } + ], + "cpe": "cpe:2.3:a:nginx-module-xslt:nginx-module-xslt:1.22.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/nginx-module-xslt@1.22.1-r1?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://nginx.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/openssl@1.1.1q-r0?arch=x86_64&distro=alpine-3.16.2&package-id=7e082b51fee5a0ed", + "publisher": "Timo Teras ", + "name": "openssl", + "version": "1.1.1q-r0", + "description": "toolkit for transport layer security (TLS) - version 1.1", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:openssl:openssl:1.1.1q-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/openssl@1.1.1q-r0?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/pcre2@10.40-r0?arch=x86_64&distro=alpine-3.16.2&package-id=2256c35482ac26ef", + "publisher": "Jakub Jirutka ", + "name": "pcre2", + "version": "10.40-r0", + "description": "Perl-compatible regular expression library", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:pcre2:pcre2:10.40-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/pcre2@10.40-r0?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://pcre.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.3.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.16.2&package-id=206fdb47b3e980eb", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.3.4-r0", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.3.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.3.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&upstream=busybox&distro=alpine-3.16.2&package-id=674d1e2fba4d633a", + "publisher": "Sören Tempel ", + "name": "ssl_client", + "version": "1.35.0-r17", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.35.0-r17:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&upstream=busybox&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/tzdata@2022c-r0?arch=x86_64&distro=alpine-3.16.2&package-id=634fcfeb6c22bab6", + "publisher": "Natanael Copa ", + "name": "tzdata", + "version": "2022c-r0", + "description": "Timezone data", + "licenses": [ + { + "license": { + "name": "Public-Domain" + } + } + ], + "cpe": "cpe:2.3:a:tzdata:tzdata:2022c-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/tzdata@2022c-r0?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://www.iana.org/time-zones", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/xz-libs@5.2.5-r1?arch=x86_64&upstream=xz&distro=alpine-3.16.2&package-id=168e14fa822d49a0", + "publisher": "Natanael Copa ", + "name": "xz-libs", + "version": "5.2.5-r1", + "description": "Library and CLI tools for XZ and LZMA compressed files (libraries)", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "name": "Public-Domain" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:xz-libs:xz-libs:5.2.5-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/xz-libs@5.2.5-r1?arch=x86_64&upstream=xz&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://tukaani.org/xz", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.12-r3?arch=x86_64&distro=alpine-3.16.2&package-id=75f0d92f695b4303", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.12-r3", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.12-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.12-r3?arch=x86_64&distro=alpine-3.16.2", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.16.2", + "description": "Alpine Linux v3.16", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.16.2" + }, + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/adduser@3.118ubuntu2?arch=all&distro=ubuntu-20.04&package-id=69d1980477020fa3", + "publisher": "Ubuntu Core Developers ", + "name": "adduser", + "version": "3.118ubuntu2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:adduser:adduser:3.118ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/adduser@3.118ubuntu2?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/apt@2.0.6?arch=amd64&distro=ubuntu-20.04&package-id=55988ea1c6f336e3", + "publisher": "Ubuntu Developers ", + "name": "apt", + "version": "2.0.6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:apt:apt:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/apt@2.0.6?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/base-files@11ubuntu5.3?arch=amd64&distro=ubuntu-20.04&package-id=1c2af4464cd392e1", + "publisher": "Ubuntu Developers ", + "name": "base-files", + "version": "11ubuntu5.3", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:11ubuntu5.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/base-files@11ubuntu5.3?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/base-files@11ubuntu5.4?arch=amd64&distro=ubuntu-20.04&package-id=63c89c28c512e1db", + "publisher": "Ubuntu Developers ", + "name": "base-files", + "version": "11ubuntu5.4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:11ubuntu5.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/base-files@11ubuntu5.4?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/base-passwd@3.5.47?arch=amd64&distro=ubuntu-20.04&package-id=8b6e494dac6dab09", + "publisher": "Colin Watson ", + "name": "base-passwd", + "version": "3.5.47", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "PD" + } + } + ], + "cpe": "cpe:2.3:a:base-passwd:base-passwd:3.5.47:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/base-passwd@3.5.47?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/bash@5.0-6ubuntu1.1?arch=amd64&distro=ubuntu-20.04&package-id=e774a3e87113196b", + "publisher": "Ubuntu Developers ", + "name": "bash", + "version": "5.0-6ubuntu1.1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:bash:bash:5.0-6ubuntu1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/bash@5.0-6ubuntu1.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/bsdutils@1:2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux%402.34-0.1ubuntu9.1&distro=ubuntu-20.04&package-id=20018d8de777eda9", + "publisher": "Ubuntu Developers ", + "name": "bsdutils", + "version": "1:2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:bsdutils:bsdutils:1\\:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/bsdutils@1:2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux%402.34-0.1ubuntu9.1&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/bzip2@1.0.8-2?arch=amd64&distro=ubuntu-20.04&package-id=97dab883cac4c956", + "publisher": "Ubuntu Developers ", + "name": "bzip2", + "version": "1.0.8-2", + "licenses": [ + { + "license": { + "name": "BSD-variant" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:bzip2:bzip2:1.0.8-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/bzip2@1.0.8-2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ca-certificates@20210119~20.04.1?arch=all&distro=ubuntu-20.04&package-id=b34020e11d6f8983", + "publisher": "Ubuntu Developers ", + "name": "ca-certificates", + "version": "20210119~20.04.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20210119\\~20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ca-certificates@20210119~20.04.1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/coreutils@8.30-3ubuntu2?arch=amd64&distro=ubuntu-20.04&package-id=f77283ee51e117fa", + "publisher": "Ubuntu Developers ", + "name": "coreutils", + "version": "8.30-3ubuntu2", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:coreutils:coreutils:8.30-3ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/coreutils@8.30-3ubuntu2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/curl@7.68.0-1ubuntu2.6?arch=amd64&distro=ubuntu-20.04&package-id=123513dd4ae6c6b7", + "publisher": "Ubuntu Developers ", + "name": "curl", + "version": "7.68.0-1ubuntu2.6", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:curl:curl:7.68.0-1ubuntu2.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/curl@7.68.0-1ubuntu2.6?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/dash@0.5.10.2-6?arch=amd64&distro=ubuntu-20.04&package-id=fa0f613df8411b7", + "publisher": "Ubuntu Developers ", + "name": "dash", + "version": "0.5.10.2-6", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:dash:dash:0.5.10.2-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/dash@0.5.10.2-6?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/debconf@1.5.73?arch=all&distro=ubuntu-20.04&package-id=128eb6066f5ec19c", + "publisher": "Ubuntu Developers ", + "name": "debconf", + "version": "1.5.73", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:debconf:debconf:1.5.73:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/debconf@1.5.73?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/debianutils@4.9.1?arch=amd64&distro=ubuntu-20.04&package-id=328b1094024bda26", + "publisher": "Ubuntu Developers ", + "name": "debianutils", + "version": "4.9.1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:debianutils:debianutils:4.9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/debianutils@4.9.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/diffutils@1:3.7-3?arch=amd64&distro=ubuntu-20.04&package-id=d21aefcaf9c9c9b6", + "publisher": "Ubuntu Developers ", + "name": "diffutils", + "version": "1:3.7-3", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:diffutils:diffutils:1\\:3.7-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/diffutils@1:3.7-3?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/dmsetup@2:1.02.167-1ubuntu1?arch=amd64&upstream=lvm2%402.03.07-1ubuntu1&distro=ubuntu-20.04&package-id=c0d6316be2747294", + "publisher": "Ubuntu Developers ", + "name": "dmsetup", + "version": "2:1.02.167-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:dmsetup:dmsetup:2\\:1.02.167-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/dmsetup@2:1.02.167-1ubuntu1?arch=amd64&upstream=lvm2%402.03.07-1ubuntu1&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/dpkg@1.19.7ubuntu3?arch=amd64&distro=ubuntu-20.04&package-id=e28aea5c134a7f8", + "publisher": "Ubuntu Developers ", + "name": "dpkg", + "version": "1.19.7ubuntu3", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain-md5" + } + }, + { + "license": { + "name": "public-domain-s-s-d" + } + } + ], + "cpe": "cpe:2.3:a:dpkg:dpkg:1.19.7ubuntu3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/dpkg@1.19.7ubuntu3?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/e2fsprogs@1.45.5-2ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=6a037357f3ebf47a", + "publisher": "Ubuntu Developers ", + "name": "e2fsprogs", + "version": "1.45.5-2ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:e2fsprogs:e2fsprogs:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/e2fsprogs@1.45.5-2ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/fdisk@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=a57a5f37c7970fe9", + "publisher": "Ubuntu Developers ", + "name": "fdisk", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:fdisk:fdisk:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/fdisk@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/file@1:5.38-4?arch=amd64&distro=ubuntu-20.04&package-id=e7f183ce6dc05cfb", + "publisher": "Ubuntu Developers ", + "name": "file", + "version": "1:5.38-4", + "licenses": [ + { + "license": { + "name": "BSD-2-Clause-alike" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-Clause-regents" + } + }, + { + "license": { + "name": "MIT-Old-Style-with-legal-disclaimer-2" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:file:file:1\\:5.38-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/file@1:5.38-4?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/findutils@4.7.0-1ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=103a5999463b7e08", + "publisher": "Ubuntu Developers ", + "name": "findutils", + "version": "4.7.0-1ubuntu1", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:findutils:findutils:4.7.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/findutils@4.7.0-1ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/fuse@2.9.9-3?arch=amd64&distro=ubuntu-20.04&package-id=3862cd07205c94e", + "publisher": "Ubuntu Developers ", + "name": "fuse", + "version": "2.9.9-3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:fuse:fuse:2.9.9-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/fuse@2.9.9-3?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/gcc-10-base@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04&package-id=a268d6ad2986f239", + "publisher": "Ubuntu Core developers ", + "name": "gcc-10-base", + "version": "10.3.0-1ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:gcc-10-base:gcc-10-base:10.3.0-1ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/gcc-10-base@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/roaringbitmap/roaring@v0.4.18?package-id=2ab78f8b00c7fb23", + "name": "github.com/RoaringBitmap/roaring", + "version": "v0.4.18", + "cpe": "cpe:2.3:a:RoaringBitmap:roaring:v0.4.18:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/RoaringBitmap/roaring@v0.4.18" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/c9s/goprocinfo@v0.0.0-20190309065803-0b2ad9ac246b?package-id=dfa5dd136a97849f", + "name": "github.com/c9s/goprocinfo", + "version": "v0.0.0-20190309065803-0b2ad9ac246b", + "cpe": "cpe:2.3:a:c9s:goprocinfo:v0.0.0-20190309065803-0b2ad9ac246b:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/c9s/goprocinfo@v0.0.0-20190309065803-0b2ad9ac246b" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0-20190314233015-f79a8a8ca69d?package-id=f82b726640827af0", + "name": "github.com/cpuguy83/go-md2man/v2", + "version": "v2.0.0-20190314233015-f79a8a8ca69d", + "cpe": "cpe:2.3:a:cpuguy83:go-md2man\\/v2:v2.0.0-20190314233015-f79a8a8ca69d:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0-20190314233015-f79a8a8ca69d" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/glycerine/go-unsnap-stream@v0.0.0-20181221182339-f9677308dec2?package-id=2220c4d4560c7156", + "name": "github.com/glycerine/go-unsnap-stream", + "version": "v0.0.0-20181221182339-f9677308dec2", + "cpe": "cpe:2.3:a:glycerine:go-unsnap-stream:v0.0.0-20181221182339-f9677308dec2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/glycerine/go-unsnap-stream@v0.0.0-20181221182339-f9677308dec2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.3.3-0.20190920234318-1680a479a2cf?package-id=72803f491048bce8", + "name": "github.com/golang/protobuf", + "version": "v1.3.3-0.20190920234318-1680a479a2cf", + "cpe": "cpe:2.3:a:golang:protobuf:v1.3.3-0.20190920234318-1680a479a2cf:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.3.3-0.20190920234318-1680a479a2cf" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/snappy@v0.0.1?package-id=4faa11db80b31934", + "name": "github.com/golang/snappy", + "version": "v0.0.1", + "cpe": "cpe:2.3:a:golang:snappy:v0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/snappy@v0.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gorilla/handlers@v1.4.2?package-id=a7bae7113c5e41dd", + "name": "github.com/gorilla/handlers", + "version": "v1.4.2", + "cpe": "cpe:2.3:a:gorilla:handlers:v1.4.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gorilla/handlers@v1.4.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gorilla/mux@v1.7.3?package-id=9c8b1c982000a208", + "name": "github.com/gorilla/mux", + "version": "v1.7.3", + "cpe": "cpe:2.3:a:gorilla:mux:v1.7.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gorilla/mux@v1.7.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/longhorn/backing-image-manager@(devel)?package-id=ffc43a69dd95e264", + "name": "github.com/longhorn/backing-image-manager", + "version": "(devel)", + "cpe": "cpe:2.3:a:longhorn:backing-image-manager:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/longhorn/backing-image-manager@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/longhorn/go-iscsi-helper@v0.0.0-20210330030558-49a327fb024e?package-id=1f3ecf015745a713", + "name": "github.com/longhorn/go-iscsi-helper", + "version": "v0.0.0-20210330030558-49a327fb024e", + "cpe": "cpe:2.3:a:longhorn:go-iscsi-helper:v0.0.0-20210330030558-49a327fb024e:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/longhorn/go-iscsi-helper@v0.0.0-20210330030558-49a327fb024e" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/longhorn/longhorn-engine@v1.2.0-preview1.0.20210818142058-32cb7dfd0630?package-id=780fb22e1986ca99", + "name": "github.com/longhorn/longhorn-engine", + "version": "v1.2.0-preview1.0.20210818142058-32cb7dfd0630", + "cpe": "cpe:2.3:a:longhorn:longhorn-engine:v1.2.0-preview1.0.20210818142058-32cb7dfd0630:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/longhorn/longhorn-engine@v1.2.0-preview1.0.20210818142058-32cb7dfd0630" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/longhorn/sparse-tools@v0.0.0-20210729195155-a0fb4226a960?package-id=2e50c4b7e30c80f", + "name": "github.com/longhorn/sparse-tools", + "version": "v0.0.0-20210729195155-a0fb4226a960", + "cpe": "cpe:2.3:a:longhorn:sparse-tools:v0.0.0-20210729195155-a0fb4226a960:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/longhorn/sparse-tools@v0.0.0-20210729195155-a0fb4226a960" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/philhofer/fwd@v1.0.0?package-id=acf87332c4c922e3", + "name": "github.com/philhofer/fwd", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:philhofer:fwd:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/philhofer/fwd@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=548db79e9f4bc26f", + "name": "github.com/pkg/errors", + "version": "v0.9.1", + "cpe": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pkg/errors@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/russross/blackfriday/v2@v2.0.1?package-id=9d56f5a3a013a5ed", + "name": "github.com/russross/blackfriday/v2", + "version": "v2.0.1", + "cpe": "cpe:2.3:a:russross:blackfriday\\/v2:v2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/russross/blackfriday/v2@v2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/satori/go.uuid@v1.2.0?package-id=e9b4eb22cca6b2f2", + "name": "github.com/satori/go.uuid", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:satori:go.uuid:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/satori/go.uuid@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/shurcool/sanitized_anchor_name@v1.0.0?package-id=3c7b58b884111da5", + "name": "github.com/shurcooL/sanitized_anchor_name", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:shurcooL:sanitized-anchor-name:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/shurcooL/sanitized_anchor_name@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.8.1?package-id=9ba83838968aa4e9", + "name": "github.com/sirupsen/logrus", + "version": "v1.8.1", + "cpe": "cpe:2.3:a:sirupsen:logrus:v1.8.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/sirupsen/logrus@v1.8.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/tinylib/msgp@v1.1.1-0.20190612170807-0573788bc2a8?package-id=dbe836d5220404ac", + "name": "github.com/tinylib/msgp", + "version": "v1.1.1-0.20190612170807-0573788bc2a8", + "cpe": "cpe:2.3:a:tinylib:msgp:v1.1.1-0.20190612170807-0573788bc2a8:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/tinylib/msgp@v1.1.1-0.20190612170807-0573788bc2a8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/urfave/cli@v1.22.1?package-id=85cb338d96b8cce5", + "name": "github.com/urfave/cli", + "version": "v1.22.1", + "cpe": "cpe:2.3:a:urfave:cli:v1.22.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/urfave/cli@v1.22.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/net@v0.0.0-20190522155817-f3200d17e092?package-id=3593943397abc098", + "name": "golang.org/x/net", + "version": "v0.0.0-20190522155817-f3200d17e092", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.0.0-20190522155817-f3200d17e092:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.0.0-20190522155817-f3200d17e092" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20210630005230-0f9fa26af87c?package-id=80a6303ad99c8ab1", + "name": "golang.org/x/sys", + "version": "v0.0.0-20210630005230-0f9fa26af87c", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20210630005230-0f9fa26af87c:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20210630005230-0f9fa26af87c" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/text@v0.3.3?package-id=cc890121940b4a2c", + "name": "golang.org/x/text", + "version": "v0.3.3", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.3.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20180817151627-c66870c02cf8?package-id=b71d9d82980960b2", + "name": "google.golang.org/genproto", + "version": "v0.0.0-20180817151627-c66870c02cf8", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20180817151627-c66870c02cf8:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20180817151627-c66870c02cf8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.21.0?package-id=7723f5dcb8390645", + "name": "google.golang.org/grpc", + "version": "v1.21.0", + "cpe": "cpe:2.3:a:google:grpc:v1.21.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.21.0" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/gpgv@2.2.19-3ubuntu2.1?arch=amd64&upstream=gnupg2&distro=ubuntu-20.04&package-id=b3a56223224b45d2", + "publisher": "Ubuntu Developers ", + "name": "gpgv", + "version": "2.2.19-3ubuntu2.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + }, + { + "license": { + "name": "TinySCHEME" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:gpgv:gpgv:2.2.19-3ubuntu2.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/gpgv@2.2.19-3ubuntu2.1?arch=amd64&upstream=gnupg2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/grep@3.4-1?arch=amd64&distro=ubuntu-20.04&package-id=e7af9af4b90473f", + "publisher": "Ubuntu Developers ", + "name": "grep", + "version": "3.4-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:grep:grep:3.4-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/grep@3.4-1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/gzip@1.10-0ubuntu4?arch=amd64&distro=ubuntu-20.04&package-id=a9696917d3b9f9fc", + "publisher": "Ubuntu Developers ", + "name": "gzip", + "version": "1.10-0ubuntu4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:gzip:gzip:1.10-0ubuntu4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/gzip@1.10-0ubuntu4?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/hostname@3.23?arch=amd64&distro=ubuntu-20.04&package-id=263dae70cc8e6a4f", + "publisher": "Ubuntu Developers ", + "name": "hostname", + "version": "3.23", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:hostname:hostname:3.23:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/hostname@3.23?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ibverbs-providers@28.0-1ubuntu1?arch=amd64&upstream=rdma-core&distro=ubuntu-20.04&package-id=8e9d2de3c937ce3c", + "publisher": "Ubuntu Developers ", + "name": "ibverbs-providers", + "version": "28.0-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-MIT" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "id": "CPL-1.0" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ibverbs-providers:ibverbs-providers:28.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ibverbs-providers@28.0-1ubuntu1?arch=amd64&upstream=rdma-core&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/init-system-helpers@1.57?arch=all&distro=ubuntu-20.04&package-id=b0e335d96f12154d", + "publisher": "Ubuntu Developers ", + "name": "init-system-helpers", + "version": "1.57", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:init-system-helpers:init-system-helpers:1.57:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/init-system-helpers@1.57?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/iperf@2.0.13+dfsg1-1build1?arch=amd64&distro=ubuntu-20.04&package-id=52f5841ee19da566", + "publisher": "Ubuntu Developers ", + "name": "iperf", + "version": "2.0.13+dfsg1-1build1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "FSF-something" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-2-WithACException" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPL-3-WithACException" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:iperf:iperf:2.0.13\\+dfsg1-1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/iperf@2.0.13+dfsg1-1build1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/iproute2@5.5.0-1ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=f4afda4dc550367c", + "publisher": "Ubuntu Developers ", + "name": "iproute2", + "version": "5.5.0-1ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:iproute2:iproute2:5.5.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/iproute2@5.5.0-1ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/iputils-ping@3:20190709-3?arch=amd64&upstream=iputils&distro=ubuntu-20.04&package-id=83f284daebd0969f", + "publisher": "Ubuntu Developers ", + "name": "iputils-ping", + "version": "3:20190709-3", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:iputils-ping:iputils-ping:3\\:20190709-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/iputils-ping@3:20190709-3?arch=amd64&upstream=iputils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/keyutils@1.6-6ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=a61b8b47cf58815b", + "publisher": "Ubuntu Developers ", + "name": "keyutils", + "version": "1.6-6ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:keyutils:keyutils:1.6-6ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/keyutils@1.6-6ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/kmod@27-1ubuntu2?arch=amd64&distro=ubuntu-20.04&package-id=e1280bc47493e972", + "publisher": "Ubuntu Developers ", + "name": "kmod", + "version": "27-1ubuntu2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:kmod:kmod:27-1ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/kmod@27-1ubuntu2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/krb5-locales@1.17-6ubuntu4.1?arch=all&upstream=krb5&distro=ubuntu-20.04&package-id=87ea48972fb4adab", + "publisher": "Ubuntu Developers ", + "name": "krb5-locales", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:krb5-locales:krb5-locales:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/krb5-locales@1.17-6ubuntu4.1?arch=all&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libacl1@2.2.53-6?arch=amd64&upstream=acl&distro=ubuntu-20.04&package-id=5cec2c2009596050", + "publisher": "Ubuntu Developers ", + "name": "libacl1", + "version": "2.2.53-6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libacl1:libacl1:2.2.53-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libacl1@2.2.53-6?arch=amd64&upstream=acl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libaio1@0.3.112-5?arch=amd64&upstream=libaio&distro=ubuntu-20.04&package-id=f850a0a77c824c95", + "publisher": "Ubuntu Developers ", + "name": "libaio1", + "version": "0.3.112-5", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libaio1:libaio1:0.3.112-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libaio1@0.3.112-5?arch=amd64&upstream=libaio&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libapt-pkg6.0@2.0.6?arch=amd64&upstream=apt&distro=ubuntu-20.04&package-id=864e143f4c606a6c", + "publisher": "Ubuntu Developers ", + "name": "libapt-pkg6.0", + "version": "2.0.6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libapt-pkg6.0:libapt-pkg6.0:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libapt-pkg6.0@2.0.6?arch=amd64&upstream=apt&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libasn1-8-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=915f8cf154d1b7ce", + "publisher": "Ubuntu Developers ", + "name": "libasn1-8-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libasn1-8-heimdal:libasn1-8-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libasn1-8-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libatm1@1:2.5.1-4?arch=amd64&upstream=linux-atm&distro=ubuntu-20.04&package-id=38fbc3dda7412f50", + "publisher": "Ubuntu Developers ", + "name": "libatm1", + "version": "1:2.5.1-4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libatm1:libatm1:1\\:2.5.1-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libatm1@1:2.5.1-4?arch=amd64&upstream=linux-atm&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libattr1@1:2.4.48-5?arch=amd64&upstream=attr&distro=ubuntu-20.04&package-id=edf8dd62bd537bd5", + "publisher": "Ubuntu Developers ", + "name": "libattr1", + "version": "1:2.4.48-5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libattr1:libattr1:1\\:2.4.48-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libattr1@1:2.4.48-5?arch=amd64&upstream=attr&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libaudit-common@1:2.8.5-2ubuntu6?arch=all&upstream=audit&distro=ubuntu-20.04&package-id=4a463ab850d7c68c", + "publisher": "Ubuntu Developers ", + "name": "libaudit-common", + "version": "1:2.8.5-2ubuntu6", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit-common:libaudit-common:1\\:2.8.5-2ubuntu6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libaudit-common@1:2.8.5-2ubuntu6?arch=all&upstream=audit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libaudit1@1:2.8.5-2ubuntu6?arch=amd64&upstream=audit&distro=ubuntu-20.04&package-id=be9537deb8db616e", + "publisher": "Ubuntu Developers ", + "name": "libaudit1", + "version": "1:2.8.5-2ubuntu6", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit1:libaudit1:1\\:2.8.5-2ubuntu6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libaudit1@1:2.8.5-2ubuntu6?arch=amd64&upstream=audit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libblkid1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=e1d6f2e998332d7d", + "publisher": "Ubuntu Developers ", + "name": "libblkid1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libblkid1:libblkid1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libblkid1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libboost-iostreams1.71.0@1.71.0-6ubuntu6?arch=amd64&upstream=boost1.71&distro=ubuntu-20.04&package-id=c10288fd207d7ab9", + "publisher": "Ubuntu Developers ", + "name": "libboost-iostreams1.71.0", + "version": "1.71.0-6ubuntu6", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "BSD2" + } + }, + { + "license": { + "name": "BSD3_DEShaw" + } + }, + { + "license": { + "name": "BSD3_Google" + } + }, + { + "license": { + "id": "BSL-1.0" + } + }, + { + "license": { + "name": "Caramel" + } + }, + { + "license": { + "name": "CrystalClear" + } + }, + { + "license": { + "name": "HP" + } + }, + { + "license": { + "id": "Jam" + } + }, + { + "license": { + "name": "Kempf" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "NIST" + } + }, + { + "license": { + "name": "OldBoost1" + } + }, + { + "license": { + "name": "OldBoost2" + } + }, + { + "license": { + "name": "OldBoost3" + } + }, + { + "license": { + "name": "Python" + } + }, + { + "license": { + "name": "SGI" + } + }, + { + "license": { + "name": "Spencer" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libboost-iostreams1.71.0:libboost-iostreams1.71.0:1.71.0-6ubuntu6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libboost-iostreams1.71.0@1.71.0-6ubuntu6?arch=amd64&upstream=boost1.71&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libboost-thread1.71.0@1.71.0-6ubuntu6?arch=amd64&upstream=boost1.71&distro=ubuntu-20.04&package-id=7bdbd4008b339d07", + "publisher": "Ubuntu Developers ", + "name": "libboost-thread1.71.0", + "version": "1.71.0-6ubuntu6", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "BSD2" + } + }, + { + "license": { + "name": "BSD3_DEShaw" + } + }, + { + "license": { + "name": "BSD3_Google" + } + }, + { + "license": { + "id": "BSL-1.0" + } + }, + { + "license": { + "name": "Caramel" + } + }, + { + "license": { + "name": "CrystalClear" + } + }, + { + "license": { + "name": "HP" + } + }, + { + "license": { + "id": "Jam" + } + }, + { + "license": { + "name": "Kempf" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "NIST" + } + }, + { + "license": { + "name": "OldBoost1" + } + }, + { + "license": { + "name": "OldBoost2" + } + }, + { + "license": { + "name": "OldBoost3" + } + }, + { + "license": { + "name": "Python" + } + }, + { + "license": { + "name": "SGI" + } + }, + { + "license": { + "name": "Spencer" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libboost-thread1.71.0:libboost-thread1.71.0:1.71.0-6ubuntu6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libboost-thread1.71.0@1.71.0-6ubuntu6?arch=amd64&upstream=boost1.71&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libbrotli1@1.0.7-6ubuntu0.1?arch=amd64&upstream=brotli&distro=ubuntu-20.04&package-id=3cfc22417c2e74ac", + "publisher": "Ubuntu Developers ", + "name": "libbrotli1", + "version": "1.0.7-6ubuntu0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libbrotli1:libbrotli1:1.0.7-6ubuntu0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libbrotli1@1.0.7-6ubuntu0.1?arch=amd64&upstream=brotli&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libbsd0@0.10.0-1?arch=amd64&upstream=libbsd&distro=ubuntu-20.04&package-id=88ee716d66a17869", + "publisher": "Ubuntu Developers ", + "name": "libbsd0", + "version": "0.10.0-1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-clause-author" + } + }, + { + "license": { + "name": "BSD-2-clause-verbatim" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-John-Birrell" + } + }, + { + "license": { + "name": "BSD-3-clause-Regents" + } + }, + { + "license": { + "name": "BSD-3-clause-author" + } + }, + { + "license": { + "name": "BSD-4-clause-Christopher-G-Demetriou" + } + }, + { + "license": { + "name": "BSD-4-clause-Niels-Provos" + } + }, + { + "license": { + "name": "BSD-5-clause-Peter-Wemm" + } + }, + { + "license": { + "id": "Beerware" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "ISC-Original" + } + }, + { + "license": { + "name": "public-domain" + } + }, + { + "license": { + "name": "public-domain-Colin-Plumb" + } + } + ], + "cpe": "cpe:2.3:a:libbsd0:libbsd0:0.10.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libbsd0@0.10.0-1?arch=amd64&upstream=libbsd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libbz2-1.0@1.0.8-2?arch=amd64&upstream=bzip2&distro=ubuntu-20.04&package-id=fd8b0edf257b69b7", + "publisher": "Ubuntu Developers ", + "name": "libbz2-1.0", + "version": "1.0.8-2", + "licenses": [ + { + "license": { + "name": "BSD-variant" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libbz2-1.0:libbz2-1.0:1.0.8-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libbz2-1.0@1.0.8-2?arch=amd64&upstream=bzip2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.2?arch=amd64&upstream=glibc&distro=ubuntu-20.04&package-id=256facf7cbb95a65", + "publisher": "Ubuntu Developers ", + "name": "libc-bin", + "version": "2.31-0ubuntu9.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc-bin:libc-bin:2.31-0ubuntu9.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.2?arch=amd64&upstream=glibc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libc6@2.31-0ubuntu9.2?arch=amd64&upstream=glibc&distro=ubuntu-20.04&package-id=2a96b94fa4db214", + "publisher": "Ubuntu Developers ", + "name": "libc6", + "version": "2.31-0ubuntu9.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc6:libc6:2.31-0ubuntu9.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libc6@2.31-0ubuntu9.2?arch=amd64&upstream=glibc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcap-ng0@0.7.9-2.1build1?arch=amd64&upstream=libcap-ng&distro=ubuntu-20.04&package-id=57ceb68462a99cb4", + "publisher": "Ubuntu Developers ", + "name": "libcap-ng0", + "version": "0.7.9-2.1build1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libcap-ng0:libcap-ng0:0.7.9-2.1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcap-ng0@0.7.9-2.1build1?arch=amd64&upstream=libcap-ng&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcap2@1:2.32-1?arch=amd64&distro=ubuntu-20.04&package-id=682f3e304c127762", + "publisher": "Ubuntu Developers ", + "name": "libcap2", + "version": "1:2.32-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libcap2:libcap2:1\\:2.32-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcap2@1:2.32-1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcap2-bin@1:2.32-1?arch=amd64&upstream=libcap2&distro=ubuntu-20.04&package-id=8f0ae2256856772c", + "publisher": "Ubuntu Developers ", + "name": "libcap2-bin", + "version": "1:2.32-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libcap2-bin:libcap2-bin:1\\:2.32-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcap2-bin@1:2.32-1?arch=amd64&upstream=libcap2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcom-err2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=fbaeb4c3d5d0f976", + "publisher": "Ubuntu Developers ", + "name": "libcom-err2", + "version": "1.45.5-2ubuntu1", + "cpe": "cpe:2.3:a:libcom-err2:libcom-err2:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcom-err2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libconfig-general-perl@2.63-1?arch=all&distro=ubuntu-20.04&package-id=da9c7895b5630089", + "publisher": "Ubuntu Developers ", + "name": "libconfig-general-perl", + "version": "2.63-1", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libconfig-general-perl:libconfig-general-perl:2.63-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libconfig-general-perl@2.63-1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcrypt1@1:4.4.10-10ubuntu4?arch=amd64&upstream=libxcrypt&distro=ubuntu-20.04&package-id=8a4302e2e7027353", + "publisher": "Ubuntu Developers ", + "name": "libcrypt1", + "version": "1:4.4.10-10ubuntu4", + "cpe": "cpe:2.3:a:libcrypt1:libcrypt1:1\\:4.4.10-10ubuntu4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcrypt1@1:4.4.10-10ubuntu4?arch=amd64&upstream=libxcrypt&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcurl3-gnutls@7.68.0-1ubuntu2.6?arch=amd64&upstream=curl&distro=ubuntu-20.04&package-id=823f387cfa54f312", + "publisher": "Ubuntu Developers ", + "name": "libcurl3-gnutls", + "version": "7.68.0-1ubuntu2.6", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.68.0-1ubuntu2.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcurl3-gnutls@7.68.0-1ubuntu2.6?arch=amd64&upstream=curl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcurl4@7.68.0-1ubuntu2.6?arch=amd64&upstream=curl&distro=ubuntu-20.04&package-id=c9dd9bae4f158cd3", + "publisher": "Ubuntu Developers ", + "name": "libcurl4", + "version": "7.68.0-1ubuntu2.6", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libcurl4:libcurl4:7.68.0-1ubuntu2.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcurl4@7.68.0-1ubuntu2.6?arch=amd64&upstream=curl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libdb5.3@5.3.28+dfsg1-0.6ubuntu2?arch=amd64&upstream=db5.3&distro=ubuntu-20.04&package-id=bc84b4da0031640d", + "publisher": "Ubuntu Developers ", + "name": "libdb5.3", + "version": "5.3.28+dfsg1-0.6ubuntu2", + "cpe": "cpe:2.3:a:libdb5.3:libdb5.3:5.3.28\\+dfsg1-0.6ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libdb5.3@5.3.28+dfsg1-0.6ubuntu2?arch=amd64&upstream=db5.3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libdebconfclient0@0.251ubuntu1?arch=amd64&upstream=cdebconf&distro=ubuntu-20.04&package-id=78bbe40d9c2ef9b5", + "publisher": "Ubuntu Developers ", + "name": "libdebconfclient0", + "version": "0.251ubuntu1", + "cpe": "cpe:2.3:a:libdebconfclient0:libdebconfclient0:0.251ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libdebconfclient0@0.251ubuntu1?arch=amd64&upstream=cdebconf&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libdevmapper1.02.1@2:1.02.167-1ubuntu1?arch=amd64&upstream=lvm2%402.03.07-1ubuntu1&distro=ubuntu-20.04&package-id=30b70188951a65f0", + "publisher": "Ubuntu Developers ", + "name": "libdevmapper1.02.1", + "version": "2:1.02.167-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libdevmapper1.02.1:libdevmapper1.02.1:2\\:1.02.167-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libdevmapper1.02.1@2:1.02.167-1ubuntu1?arch=amd64&upstream=lvm2%402.03.07-1ubuntu1&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libelf1@0.176-1.1build1?arch=amd64&upstream=elfutils&distro=ubuntu-20.04&package-id=316daaa294f5e8d8", + "publisher": "Ubuntu Developers ", + "name": "libelf1", + "version": "0.176-1.1build1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL-" + } + } + ], + "cpe": "cpe:2.3:a:libelf1:libelf1:0.176-1.1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libelf1@0.176-1.1build1?arch=amd64&upstream=elfutils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libevent-2.1-7@2.1.11-stable-1?arch=amd64&upstream=libevent&distro=ubuntu-20.04&package-id=6b93a7dccfeb49e0", + "publisher": "Balint Reczey ", + "name": "libevent-2.1-7", + "version": "2.1.11-stable-1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-3-Clause~Kitware" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "FSFUL" + } + }, + { + "license": { + "id": "FSFULLR" + } + }, + { + "license": { + "name": "FSFULLR-No-Warranty" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + } + ], + "cpe": "cpe:2.3:a:libevent-2.1-7:libevent-2.1-7:2.1.11-stable-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libevent-2.1-7@2.1.11-stable-1?arch=amd64&upstream=libevent&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libexpat1@2.2.9-1build1?arch=amd64&upstream=expat&distro=ubuntu-20.04&package-id=f3ac75cd161f13c6", + "publisher": "Ubuntu Developers ", + "name": "libexpat1", + "version": "2.2.9-1build1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libexpat1:libexpat1:2.2.9-1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libexpat1@2.2.9-1build1?arch=amd64&upstream=expat&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libext2fs2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=ec6113f55e73d1fd", + "publisher": "Ubuntu Developers ", + "name": "libext2fs2", + "version": "1.45.5-2ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libext2fs2:libext2fs2:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libext2fs2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libfdisk1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=486ce61647644619", + "publisher": "Ubuntu Developers ", + "name": "libfdisk1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libfdisk1:libfdisk1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libfdisk1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libffi7@3.3-4?arch=amd64&upstream=libffi&distro=ubuntu-20.04&package-id=b43b799d45da9d97", + "publisher": "Ubuntu Developers ", + "name": "libffi7", + "version": "3.3-4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libffi7:libffi7:3.3-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libffi7@3.3-4?arch=amd64&upstream=libffi&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libfuse2@2.9.9-3?arch=amd64&upstream=fuse&distro=ubuntu-20.04&package-id=cb74b48e2705f805", + "publisher": "Ubuntu Developers ", + "name": "libfuse2", + "version": "2.9.9-3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libfuse2:libfuse2:2.9.9-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libfuse2@2.9.9-3?arch=amd64&upstream=fuse&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgcc-s1@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04&package-id=f98ce69fd9e55bb8", + "publisher": "Ubuntu Core developers ", + "name": "libgcc-s1", + "version": "10.3.0-1ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcc-s1:libgcc-s1:10.3.0-1ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgcc-s1@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgcrypt20@1.8.5-5ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=c8a43aa5b28727a1", + "publisher": "Ubuntu Developers ", + "name": "libgcrypt20", + "version": "1.8.5-5ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcrypt20:libgcrypt20:1.8.5-5ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgcrypt20@1.8.5-5ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgdbm-compat4@1.18.1-5?arch=amd64&upstream=gdbm&distro=ubuntu-20.04&package-id=216492c4d03e5a3b", + "publisher": "Ubuntu Developers ", + "name": "libgdbm-compat4", + "version": "1.18.1-5", + "licenses": [ + { + "license": { + "name": "GFDL-NIV-1.3+" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgdbm-compat4:libgdbm-compat4:1.18.1-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgdbm-compat4@1.18.1-5?arch=amd64&upstream=gdbm&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgdbm6@1.18.1-5?arch=amd64&upstream=gdbm&distro=ubuntu-20.04&package-id=e7baa5d6d4faa647", + "publisher": "Ubuntu Developers ", + "name": "libgdbm6", + "version": "1.18.1-5", + "licenses": [ + { + "license": { + "name": "GFDL-NIV-1.3+" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgdbm6:libgdbm6:1.18.1-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgdbm6@1.18.1-5?arch=amd64&upstream=gdbm&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libglib2.0-0@2.64.6-1~ubuntu20.04.4?arch=amd64&upstream=glib2.0&distro=ubuntu-20.04&package-id=173f54b9a4ea5bbf", + "publisher": "Ubuntu Developers ", + "name": "libglib2.0-0", + "version": "2.64.6-1~ubuntu20.04.4", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libglib2.0-0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libglib2.0-0@2.64.6-1~ubuntu20.04.4?arch=amd64&upstream=glib2.0&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libglib2.0-data@2.64.6-1~ubuntu20.04.4?arch=all&upstream=glib2.0&distro=ubuntu-20.04&package-id=84c7d5b71baf104a", + "publisher": "Ubuntu Developers ", + "name": "libglib2.0-data", + "version": "2.64.6-1~ubuntu20.04.4", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libglib2.0-data:libglib2.0-data:2.64.6-1\\~ubuntu20.04.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libglib2.0-data@2.64.6-1~ubuntu20.04.4?arch=all&upstream=glib2.0&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgmp10@2:6.2.0+dfsg-4?arch=amd64&upstream=gmp&distro=ubuntu-20.04&package-id=40fc269dcb8b3369", + "publisher": "Ubuntu Developers ", + "name": "libgmp10", + "version": "2:6.2.0+dfsg-4", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgmp10:libgmp10:2\\:6.2.0\\+dfsg-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgmp10@2:6.2.0+dfsg-4?arch=amd64&upstream=gmp&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.3?arch=amd64&upstream=gnutls28&distro=ubuntu-20.04&package-id=209bb478086322a1", + "publisher": "Ubuntu Developers ", + "name": "libgnutls30", + "version": "3.6.13-2ubuntu1.3", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPLv3+" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "name": "LGPLv2.1+" + } + }, + { + "license": { + "name": "LGPLv3+_or_GPLv2+" + } + }, + { + "license": { + "name": "The" + } + } + ], + "cpe": "cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.3?arch=amd64&upstream=gnutls28&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.6?arch=amd64&upstream=gnutls28&distro=ubuntu-20.04&package-id=7490f76da775c6e", + "publisher": "Ubuntu Developers ", + "name": "libgnutls30", + "version": "3.6.13-2ubuntu1.6", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPLv3+" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "name": "LGPLv2.1+" + } + }, + { + "license": { + "name": "LGPLv3+_or_GPLv2+" + } + }, + { + "license": { + "name": "The" + } + } + ], + "cpe": "cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.6?arch=amd64&upstream=gnutls28&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgpg-error0@1.37-1?arch=amd64&upstream=libgpg-error&distro=ubuntu-20.04&package-id=37ef62d87edfe03", + "publisher": "Ubuntu Developers ", + "name": "libgpg-error0", + "version": "1.37-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "g10-permissive" + } + } + ], + "cpe": "cpe:2.3:a:libgpg-error0:libgpg-error0:1.37-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgpg-error0@1.37-1?arch=amd64&upstream=libgpg-error&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgssapi-krb5-2@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04&package-id=443eafe2785f5a4c", + "publisher": "Ubuntu Developers ", + "name": "libgssapi-krb5-2", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgssapi-krb5-2@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgssapi3-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=17a37cca2446b615", + "publisher": "Ubuntu Developers ", + "name": "libgssapi3-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libgssapi3-heimdal:libgssapi3-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgssapi3-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libhcrypto4-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=98098d582df76b44", + "publisher": "Ubuntu Developers ", + "name": "libhcrypto4-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libhcrypto4-heimdal:libhcrypto4-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libhcrypto4-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libheimbase1-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=f8dfc9a84c337835", + "publisher": "Ubuntu Developers ", + "name": "libheimbase1-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libheimbase1-heimdal:libheimbase1-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libheimbase1-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libheimntlm0-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=9992d88ac7d6e8e3", + "publisher": "Ubuntu Developers ", + "name": "libheimntlm0-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libheimntlm0-heimdal:libheimntlm0-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libheimntlm0-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libhogweed5@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04&package-id=3caecccf070e6760", + "publisher": "Ubuntu Developers ", + "name": "libhogweed5", + "version": "3.5.1+really3.5.1-2ubuntu0.2", + "licenses": [ + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libhogweed5:libhogweed5:3.5.1\\+really3.5.1-2ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libhogweed5@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libhx509-5-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=3b0bac5e4e8f23c5", + "publisher": "Ubuntu Developers ", + "name": "libhx509-5-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libhx509-5-heimdal:libhx509-5-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libhx509-5-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libibverbs1@28.0-1ubuntu1?arch=amd64&upstream=rdma-core&distro=ubuntu-20.04&package-id=8a574b9c0296728e", + "publisher": "Ubuntu Developers ", + "name": "libibverbs1", + "version": "28.0-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-MIT" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "id": "CPL-1.0" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libibverbs1:libibverbs1:28.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libibverbs1@28.0-1ubuntu1?arch=amd64&upstream=rdma-core&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libicu66@66.1-2ubuntu2?arch=amd64&upstream=icu&distro=ubuntu-20.04&package-id=bcf598a9dea4cd38", + "publisher": "Ubuntu Developers ", + "name": "libicu66", + "version": "66.1-2ubuntu2", + "cpe": "cpe:2.3:a:libicu66:libicu66:66.1-2ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libicu66@66.1-2ubuntu2?arch=amd64&upstream=icu&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libidn2-0@2.2.0-2?arch=amd64&upstream=libidn2&distro=ubuntu-20.04&package-id=d2a82c3e28413bc1", + "publisher": "Ubuntu Developers ", + "name": "libidn2-0", + "version": "2.2.0-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "Unicode" + } + } + ], + "cpe": "cpe:2.3:a:libidn2-0:libidn2-0:2.2.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libidn2-0@2.2.0-2?arch=amd64&upstream=libidn2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libiscsi7@1.18.0-2?arch=amd64&upstream=libiscsi&distro=ubuntu-20.04&package-id=d3404aeee287695b", + "publisher": "Ubuntu Developers ", + "name": "libiscsi7", + "version": "1.18.0-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "MIT/X11" + } + }, + { + "license": { + "name": "Public_domain" + } + } + ], + "cpe": "cpe:2.3:a:libiscsi7:libiscsi7:1.18.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libiscsi7@1.18.0-2?arch=amd64&upstream=libiscsi&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libk5crypto3@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04&package-id=f9479050b59432b4", + "publisher": "Ubuntu Developers ", + "name": "libk5crypto3", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libk5crypto3:libk5crypto3:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libk5crypto3@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkeyutils1@1.6-6ubuntu1?arch=amd64&upstream=keyutils&distro=ubuntu-20.04&package-id=e8692427b123ea73", + "publisher": "Ubuntu Developers ", + "name": "libkeyutils1", + "version": "1.6-6ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libkeyutils1:libkeyutils1:1.6-6ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkeyutils1@1.6-6ubuntu1?arch=amd64&upstream=keyutils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkmod2@27-1ubuntu2?arch=amd64&upstream=kmod&distro=ubuntu-20.04&package-id=9de5f0614e60f8ee", + "publisher": "Ubuntu Developers ", + "name": "libkmod2", + "version": "27-1ubuntu2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkmod2:libkmod2:27-1ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkmod2@27-1ubuntu2?arch=amd64&upstream=kmod&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkrb5-26-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=2beb670b9378498e", + "publisher": "Ubuntu Developers ", + "name": "libkrb5-26-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5-26-heimdal:libkrb5-26-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkrb5-26-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkrb5-3@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04&package-id=fdb5970d8394a182", + "publisher": "Ubuntu Developers ", + "name": "libkrb5-3", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5-3:libkrb5-3:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkrb5-3@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkrb5support0@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04&package-id=a8d21a32e178b211", + "publisher": "Ubuntu Developers ", + "name": "libkrb5support0", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5support0:libkrb5support0:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkrb5support0@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libldap-2.4-2@2.4.49+dfsg-2ubuntu1.8?arch=amd64&upstream=openldap&distro=ubuntu-20.04&package-id=efdc80a7ae6eae19", + "publisher": "Ubuntu Developers ", + "name": "libldap-2.4-2", + "version": "2.4.49+dfsg-2ubuntu1.8", + "cpe": "cpe:2.3:a:libldap-2.4-2:libldap-2.4-2:2.4.49\\+dfsg-2ubuntu1.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libldap-2.4-2@2.4.49+dfsg-2ubuntu1.8?arch=amd64&upstream=openldap&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libldap-common@2.4.49+dfsg-2ubuntu1.8?arch=all&upstream=openldap&distro=ubuntu-20.04&package-id=4d0b88f98b40786b", + "publisher": "Ubuntu Developers ", + "name": "libldap-common", + "version": "2.4.49+dfsg-2ubuntu1.8", + "cpe": "cpe:2.3:a:libldap-common:libldap-common:2.4.49\\+dfsg-2ubuntu1.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libldap-common@2.4.49+dfsg-2ubuntu1.8?arch=all&upstream=openldap&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/liblz4-1@1.9.2-2ubuntu0.20.04.1?arch=amd64&upstream=lz4&distro=ubuntu-20.04&package-id=6f2c431caeb4980a", + "publisher": "Ubuntu Developers ", + "name": "liblz4-1", + "version": "1.9.2-2ubuntu0.20.04.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:liblz4-1:liblz4-1:1.9.2-2ubuntu0.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/liblz4-1@1.9.2-2ubuntu0.20.04.1?arch=amd64&upstream=lz4&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/liblzma5@5.2.4-1ubuntu1?arch=amd64&upstream=xz-utils&distro=ubuntu-20.04&package-id=f1e9f3b6205a664a", + "publisher": "Ubuntu Developers ", + "name": "liblzma5", + "version": "5.2.4-1ubuntu1", + "licenses": [ + { + "license": { + "name": "Autoconf" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "PD" + } + }, + { + "license": { + "name": "PD-debian" + } + }, + { + "license": { + "name": "config-h" + } + }, + { + "license": { + "name": "noderivs" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-nowarranty" + } + }, + { + "license": { + "name": "probably-PD" + } + } + ], + "cpe": "cpe:2.3:a:liblzma5:liblzma5:5.2.4-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/liblzma5@5.2.4-1ubuntu1?arch=amd64&upstream=xz-utils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmagic-mgc@1:5.38-4?arch=amd64&upstream=file&distro=ubuntu-20.04&package-id=3b4f02792ccf99bb", + "publisher": "Ubuntu Developers ", + "name": "libmagic-mgc", + "version": "1:5.38-4", + "licenses": [ + { + "license": { + "name": "BSD-2-Clause-alike" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-Clause-regents" + } + }, + { + "license": { + "name": "MIT-Old-Style-with-legal-disclaimer-2" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmagic-mgc:libmagic-mgc:1\\:5.38-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmagic-mgc@1:5.38-4?arch=amd64&upstream=file&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmagic1@1:5.38-4?arch=amd64&upstream=file&distro=ubuntu-20.04&package-id=302b8497a938556", + "publisher": "Ubuntu Developers ", + "name": "libmagic1", + "version": "1:5.38-4", + "licenses": [ + { + "license": { + "name": "BSD-2-Clause-alike" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-Clause-regents" + } + }, + { + "license": { + "name": "MIT-Old-Style-with-legal-disclaimer-2" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmagic1:libmagic1:1\\:5.38-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmagic1@1:5.38-4?arch=amd64&upstream=file&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmnl0@1.0.4-2?arch=amd64&upstream=libmnl&distro=ubuntu-20.04&package-id=162cfe25074edf0d", + "publisher": "Ubuntu Developers ", + "name": "libmnl0", + "version": "1.0.4-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libmnl0:libmnl0:1.0.4-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmnl0@1.0.4-2?arch=amd64&upstream=libmnl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmount1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=39446194385ebce5", + "publisher": "Ubuntu Developers ", + "name": "libmount1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmount1:libmount1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmount1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmpdec2@2.4.2-3?arch=amd64&upstream=mpdecimal&distro=ubuntu-20.04&package-id=b45a0d57576ce262", + "publisher": "Ubuntu Developers ", + "name": "libmpdec2", + "version": "2.4.2-3", + "licenses": [ + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libmpdec2:libmpdec2:2.4.2-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmpdec2@2.4.2-3?arch=amd64&upstream=mpdecimal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libncurses6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=ed8fb166163a75b8", + "publisher": "Ubuntu Developers ", + "name": "libncurses6", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:libncurses6:libncurses6:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libncurses6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libncursesw6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=58525ddc073a008a", + "publisher": "Ubuntu Developers ", + "name": "libncursesw6", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:libncursesw6:libncursesw6:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libncursesw6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libnettle7@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04&package-id=3d185fbd6a7e56f", + "publisher": "Ubuntu Developers ", + "name": "libnettle7", + "version": "3.5.1+really3.5.1-2ubuntu0.2", + "licenses": [ + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libnettle7:libnettle7:3.5.1\\+really3.5.1-2ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libnettle7@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libnfsidmap2@0.25-5.1ubuntu1?arch=amd64&upstream=libnfsidmap&distro=ubuntu-20.04&package-id=71bd574c47c02b75", + "publisher": "Ubuntu Developers ", + "name": "libnfsidmap2", + "version": "0.25-5.1ubuntu1", + "cpe": "cpe:2.3:a:libnfsidmap2:libnfsidmap2:0.25-5.1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libnfsidmap2@0.25-5.1ubuntu1?arch=amd64&upstream=libnfsidmap&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libnghttp2-14@1.40.0-1build1?arch=amd64&upstream=nghttp2&distro=ubuntu-20.04&package-id=c86604c1fa72dd96", + "publisher": "Ubuntu Developers ", + "name": "libnghttp2-14", + "version": "1.40.0-1build1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "SIL-OFL-1.1" + } + }, + { + "license": { + "name": "all-permissive" + } + } + ], + "cpe": "cpe:2.3:a:libnghttp2-14:libnghttp2-14:1.40.0-1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libnghttp2-14@1.40.0-1build1?arch=amd64&upstream=nghttp2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libnl-3-200@3.4.0-1?arch=amd64&upstream=libnl3&distro=ubuntu-20.04&package-id=520a765636f2f20f", + "publisher": "Ubuntu Developers ", + "name": "libnl-3-200", + "version": "3.4.0-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libnl-3-200:libnl-3-200:3.4.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libnl-3-200@3.4.0-1?arch=amd64&upstream=libnl3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libnl-route-3-200@3.4.0-1?arch=amd64&upstream=libnl3&distro=ubuntu-20.04&package-id=1a1d9f0f1f34e88b", + "publisher": "Ubuntu Developers ", + "name": "libnl-route-3-200", + "version": "3.4.0-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libnl-route-3-200:libnl-route-3-200:3.4.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libnl-route-3-200@3.4.0-1?arch=amd64&upstream=libnl3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libp11-kit0@0.23.20-1ubuntu0.1?arch=amd64&upstream=p11-kit&distro=ubuntu-20.04&package-id=9fc0ca46e6d21557", + "publisher": "Ubuntu Developers ", + "name": "libp11-kit0", + "version": "0.23.20-1ubuntu0.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "ISC+IBM" + } + }, + { + "license": { + "name": "permissive-like-automake-output" + } + }, + { + "license": { + "name": "same-as-rest-of-p11kit" + } + } + ], + "cpe": "cpe:2.3:a:libp11-kit0:libp11-kit0:0.23.20-1ubuntu0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libp11-kit0@0.23.20-1ubuntu0.1?arch=amd64&upstream=p11-kit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-cap@1:2.32-1?arch=amd64&upstream=libcap2&distro=ubuntu-20.04&package-id=20db44acb7f94535", + "publisher": "Ubuntu Developers ", + "name": "libpam-cap", + "version": "1:2.32-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libpam-cap:libpam-cap:1\\:2.32-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-cap@1:2.32-1?arch=amd64&upstream=libcap2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-modules@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04&package-id=e7be6c0ad703fc9a", + "publisher": "Ubuntu Developers ", + "name": "libpam-modules", + "version": "1.3.1-5ubuntu4.2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules:libpam-modules:1.3.1-5ubuntu4.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-modules@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-modules-bin@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04&package-id=7ff667273975da27", + "publisher": "Ubuntu Developers ", + "name": "libpam-modules-bin", + "version": "1.3.1-5ubuntu4.2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules-bin:libpam-modules-bin:1.3.1-5ubuntu4.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-modules-bin@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-runtime@1.3.1-5ubuntu4.2?arch=all&upstream=pam&distro=ubuntu-20.04&package-id=47a743e8128a9af6", + "publisher": "Ubuntu Developers ", + "name": "libpam-runtime", + "version": "1.3.1-5ubuntu4.2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-runtime:libpam-runtime:1.3.1-5ubuntu4.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-runtime@1.3.1-5ubuntu4.2?arch=all&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam0g@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04&package-id=e57fbdd1e7d57983", + "publisher": "Ubuntu Developers ", + "name": "libpam0g", + "version": "1.3.1-5ubuntu4.2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam0g:libpam0g:1.3.1-5ubuntu4.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam0g@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpcre2-8-0@10.34-7?arch=amd64&upstream=pcre2&distro=ubuntu-20.04&package-id=ec9eb70008ed8b14", + "publisher": "Ubuntu Developers ", + "name": "libpcre2-8-0", + "version": "10.34-7", + "cpe": "cpe:2.3:a:libpcre2-8-0:libpcre2-8-0:10.34-7:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpcre2-8-0@10.34-7?arch=amd64&upstream=pcre2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpcre3@2:8.39-12build1?arch=amd64&upstream=pcre3&distro=ubuntu-20.04&package-id=f2af8e66c60a624", + "publisher": "Ubuntu Developers ", + "name": "libpcre3", + "version": "2:8.39-12build1", + "cpe": "cpe:2.3:a:libpcre3:libpcre3:2\\:8.39-12build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpcre3@2:8.39-12build1?arch=amd64&upstream=pcre3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libperl5.30@5.30.0-9ubuntu0.2?arch=amd64&upstream=perl&distro=ubuntu-20.04&package-id=8748dda005dfdd96", + "publisher": "Ubuntu Developers ", + "name": "libperl5.30", + "version": "5.30.0-9ubuntu0.2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libperl5.30:libperl5.30:5.30.0-9ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libperl5.30@5.30.0-9ubuntu0.2?arch=amd64&upstream=perl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libprocps8@2:3.3.16-1ubuntu2.2?arch=amd64&upstream=procps&distro=ubuntu-20.04&package-id=1444db6c35de79c6", + "publisher": "Ubuntu Developers ", + "name": "libprocps8", + "version": "2:3.3.16-1ubuntu2.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libprocps8:libprocps8:2\\:3.3.16-1ubuntu2.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libprocps8@2:3.3.16-1ubuntu2.2?arch=amd64&upstream=procps&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpsl5@0.21.0-1ubuntu1?arch=amd64&upstream=libpsl&distro=ubuntu-20.04&package-id=e77e76f35a3ad192", + "publisher": "Ubuntu Developers ", + "name": "libpsl5", + "version": "0.21.0-1ubuntu1", + "licenses": [ + { + "license": { + "name": "Chromium" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libpsl5:libpsl5:0.21.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpsl5@0.21.0-1ubuntu1?arch=amd64&upstream=libpsl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpython3-stdlib@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04&package-id=b40e3316416bbdaf", + "publisher": "Ubuntu Developers ", + "name": "libpython3-stdlib", + "version": "3.8.2-0ubuntu2", + "cpe": "cpe:2.3:a:libpython3-stdlib:libpython3-stdlib:3.8.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpython3-stdlib@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpython3.8-minimal@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04&package-id=fb58dad98da64e3b", + "publisher": "Ubuntu Core Developers ", + "name": "libpython3.8-minimal", + "version": "3.8.10-0ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:libpython3.8-minimal:libpython3.8-minimal:3.8.10-0ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpython3.8-minimal@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpython3.8-stdlib@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04&package-id=54e48e611df3b41d", + "publisher": "Ubuntu Core Developers ", + "name": "libpython3.8-stdlib", + "version": "3.8.10-0ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:libpython3.8-stdlib:libpython3.8-stdlib:3.8.10-0ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpython3.8-stdlib@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/librados2@15.2.13-0ubuntu0.20.04.1?arch=amd64&upstream=ceph&distro=ubuntu-20.04&package-id=298550ee0e4c8b6b", + "publisher": "Ubuntu Developers ", + "name": "librados2", + "version": "15.2.13-0ubuntu0.20.04.1", + "licenses": [ + { + "license": { + "id": "APSL-2.0" + } + }, + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Boost" + } + }, + { + "license": { + "name": "Boost-Software-License-1.0" + } + }, + { + "license": { + "id": "CC-BY-SA-3.0" + } + }, + { + "license": { + "name": "Creative" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPL-3/OpenSSL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "Public" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:librados2:librados2:15.2.13-0ubuntu0.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/librados2@15.2.13-0ubuntu0.20.04.1?arch=amd64&upstream=ceph&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/librbd1@15.2.13-0ubuntu0.20.04.1?arch=amd64&upstream=ceph&distro=ubuntu-20.04&package-id=853b50c61a31c72e", + "publisher": "Ubuntu Developers ", + "name": "librbd1", + "version": "15.2.13-0ubuntu0.20.04.1", + "licenses": [ + { + "license": { + "id": "APSL-2.0" + } + }, + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Boost" + } + }, + { + "license": { + "name": "Boost-Software-License-1.0" + } + }, + { + "license": { + "id": "CC-BY-SA-3.0" + } + }, + { + "license": { + "name": "Creative" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPL-3/OpenSSL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "Public" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:librbd1:librbd1:15.2.13-0ubuntu0.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/librbd1@15.2.13-0ubuntu0.20.04.1?arch=amd64&upstream=ceph&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/librdmacm1@28.0-1ubuntu1?arch=amd64&upstream=rdma-core&distro=ubuntu-20.04&package-id=ba8ceed5ec4f0c95", + "publisher": "Ubuntu Developers ", + "name": "librdmacm1", + "version": "28.0-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-MIT" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "id": "CPL-1.0" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:librdmacm1:librdmacm1:28.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/librdmacm1@28.0-1ubuntu1?arch=amd64&upstream=rdma-core&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libreadline8@8.0-4?arch=amd64&upstream=readline&distro=ubuntu-20.04&package-id=67b876656fcd9e68", + "publisher": "Ubuntu Developers ", + "name": "libreadline8", + "version": "8.0-4", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libreadline8:libreadline8:8.0-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libreadline8@8.0-4?arch=amd64&upstream=readline&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libroken18-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=68e35bc456818613", + "publisher": "Ubuntu Developers ", + "name": "libroken18-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libroken18-heimdal:libroken18-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libroken18-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/librtmp1@2.4+20151223.gitfa8646d.1-2build1?arch=amd64&upstream=rtmpdump&distro=ubuntu-20.04&package-id=ede637f87a4bfd7b", + "publisher": "Ubuntu Developers ", + "name": "librtmp1", + "version": "2.4+20151223.gitfa8646d.1-2build1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:librtmp1:librtmp1:2.4\\+20151223.gitfa8646d.1-2build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/librtmp1@2.4+20151223.gitfa8646d.1-2build1?arch=amd64&upstream=rtmpdump&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsasl2-2@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04&package-id=374396d82667544d", + "publisher": "Ubuntu Developers ", + "name": "libsasl2-2", + "version": "2.1.27+dfsg-2", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-2:libsasl2-2:2.1.27\\+dfsg-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsasl2-2@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsasl2-modules@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04&package-id=fb8d278d10c4a3cf", + "publisher": "Ubuntu Developers ", + "name": "libsasl2-modules", + "version": "2.1.27+dfsg-2", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-modules:libsasl2-modules:2.1.27\\+dfsg-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsasl2-modules@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsasl2-modules-db@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04&package-id=63c3c50d36ec1d13", + "publisher": "Ubuntu Developers ", + "name": "libsasl2-modules-db", + "version": "2.1.27+dfsg-2", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-modules-db:libsasl2-modules-db:2.1.27\\+dfsg-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsasl2-modules-db@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libseccomp2@2.5.1-1ubuntu1~20.04.1?arch=amd64&upstream=libseccomp&distro=ubuntu-20.04&package-id=b2fd79b9c242e8e8", + "publisher": "Ubuntu Developers ", + "name": "libseccomp2", + "version": "2.5.1-1ubuntu1~20.04.1", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libseccomp2:libseccomp2:2.5.1-1ubuntu1\\~20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libseccomp2@2.5.1-1ubuntu1~20.04.1?arch=amd64&upstream=libseccomp&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libselinux1@3.0-1build2?arch=amd64&upstream=libselinux&distro=ubuntu-20.04&package-id=e5d4ae16ac79b901", + "publisher": "Ubuntu Developers ", + "name": "libselinux1", + "version": "3.0-1build2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libselinux1:libselinux1:3.0-1build2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libselinux1@3.0-1build2?arch=amd64&upstream=libselinux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsemanage-common@3.0-1build2?arch=all&upstream=libsemanage&distro=ubuntu-20.04&package-id=4c6cd9f68ce53262", + "publisher": "Ubuntu Developers ", + "name": "libsemanage-common", + "version": "3.0-1build2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage-common:libsemanage-common:3.0-1build2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsemanage-common@3.0-1build2?arch=all&upstream=libsemanage&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsemanage1@3.0-1build2?arch=amd64&upstream=libsemanage&distro=ubuntu-20.04&package-id=963297f19b339026", + "publisher": "Ubuntu Developers ", + "name": "libsemanage1", + "version": "3.0-1build2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage1:libsemanage1:3.0-1build2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsemanage1@3.0-1build2?arch=amd64&upstream=libsemanage&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsepol1@3.0-1?arch=amd64&upstream=libsepol&distro=ubuntu-20.04&package-id=991afdd7bf17200c", + "publisher": "Ubuntu Developers ", + "name": "libsepol1", + "version": "3.0-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsepol1:libsepol1:3.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsepol1@3.0-1?arch=amd64&upstream=libsepol&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsgutils2-2@1.44-1ubuntu2?arch=amd64&upstream=sg3-utils&distro=ubuntu-20.04&package-id=5eee3420d656cf76", + "publisher": "Ubuntu Developers ", + "name": "libsgutils2-2", + "version": "1.44-1ubuntu2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libsgutils2-2:libsgutils2-2:1.44-1ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsgutils2-2@1.44-1ubuntu2?arch=amd64&upstream=sg3-utils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsmartcols1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=b47d3a935260c518", + "publisher": "Ubuntu Developers ", + "name": "libsmartcols1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsmartcols1:libsmartcols1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsmartcols1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsqlite3-0@3.31.1-4ubuntu0.2?arch=amd64&upstream=sqlite3&distro=ubuntu-20.04&package-id=a7c7ccf11d3583d1", + "publisher": "Ubuntu Developers ", + "name": "libsqlite3-0", + "version": "3.31.1-4ubuntu0.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.31.1-4ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsqlite3-0@3.31.1-4ubuntu0.2?arch=amd64&upstream=sqlite3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libss2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=4715894cb8165c", + "publisher": "Ubuntu Developers ", + "name": "libss2", + "version": "1.45.5-2ubuntu1", + "cpe": "cpe:2.3:a:libss2:libss2:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libss2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libssh-4@0.9.3-2ubuntu2.1?arch=amd64&upstream=libssh&distro=ubuntu-20.04&package-id=7d95b303fdc1fe32", + "publisher": "Ubuntu Developers ", + "name": "libssh-4", + "version": "0.9.3-2ubuntu2.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "LGPL-2.1+~OpenSSL" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libssh-4:libssh-4:0.9.3-2ubuntu2.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libssh-4@0.9.3-2ubuntu2.1?arch=amd64&upstream=libssh&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.8?arch=amd64&upstream=openssl&distro=ubuntu-20.04&package-id=9228d1481eea75e3", + "publisher": "Ubuntu Developers ", + "name": "libssl1.1", + "version": "1.1.1f-1ubuntu2.8", + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.8?arch=amd64&upstream=openssl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libstdc++6@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04&package-id=241fcb3d9b65153a", + "publisher": "Ubuntu Core developers ", + "name": "libstdc++6", + "version": "10.3.0-1ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:10.3.0-1ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libstdc++6@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsystemd0@245.4-4ubuntu3.11?arch=amd64&upstream=systemd&distro=ubuntu-20.04&package-id=72d1f4b2fda6e155", + "publisher": "Ubuntu Developers ", + "name": "libsystemd0", + "version": "245.4-4ubuntu3.11", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsystemd0:libsystemd0:245.4-4ubuntu3.11:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsystemd0@245.4-4ubuntu3.11?arch=amd64&upstream=systemd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtasn1-6@4.16.0-2?arch=amd64&distro=ubuntu-20.04&package-id=a290c35fc0220ba0", + "publisher": "Ubuntu Developers ", + "name": "libtasn1-6", + "version": "4.16.0-2", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtasn1-6:libtasn1-6:4.16.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtasn1-6@4.16.0-2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtinfo6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=72ad56d118fefea3", + "publisher": "Ubuntu Developers ", + "name": "libtinfo6", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:libtinfo6:libtinfo6:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtinfo6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtirpc-common@1.2.5-1?arch=all&upstream=libtirpc&distro=ubuntu-20.04&package-id=ba22fe8af5722b24", + "publisher": "Ubuntu Developers ", + "name": "libtirpc-common", + "version": "1.2.5-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc-common:libtirpc-common:1.2.5-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtirpc-common@1.2.5-1?arch=all&upstream=libtirpc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtirpc3@1.2.5-1?arch=amd64&upstream=libtirpc&distro=ubuntu-20.04&package-id=57b2bfa0a8467ab7", + "publisher": "Ubuntu Developers ", + "name": "libtirpc3", + "version": "1.2.5-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc3:libtirpc3:1.2.5-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtirpc3@1.2.5-1?arch=amd64&upstream=libtirpc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libudev1@245.4-4ubuntu3.11?arch=amd64&upstream=systemd&distro=ubuntu-20.04&package-id=28d962536291b482", + "publisher": "Ubuntu Developers ", + "name": "libudev1", + "version": "245.4-4ubuntu3.11", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libudev1:libudev1:245.4-4ubuntu3.11:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libudev1@245.4-4ubuntu3.11?arch=amd64&upstream=systemd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libunistring2@0.9.10-2?arch=amd64&upstream=libunistring&distro=ubuntu-20.04&package-id=3140ffa70dcd9831", + "publisher": "Ubuntu Developers ", + "name": "libunistring2", + "version": "0.9.10-2", + "licenses": [ + { + "license": { + "name": "FreeSoftware" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GFDL-1.2+" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libunistring2:libunistring2:0.9.10-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libunistring2@0.9.10-2?arch=amd64&upstream=libunistring&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libuuid1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=5395a07c00002ea6", + "publisher": "Ubuntu Developers ", + "name": "libuuid1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libuuid1:libuuid1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libuuid1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libwind0-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=7b0e172efdb36a99", + "publisher": "Ubuntu Developers ", + "name": "libwind0-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libwind0-heimdal:libwind0-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libwind0-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libwrap0@7.6.q-30?arch=amd64&upstream=tcp-wrappers&distro=ubuntu-20.04&package-id=5b14391c61bb94f1", + "publisher": "Ubuntu Developers ", + "name": "libwrap0", + "version": "7.6.q-30", + "cpe": "cpe:2.3:a:libwrap0:libwrap0:7.6.q-30:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libwrap0@7.6.q-30?arch=amd64&upstream=tcp-wrappers&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libxml2@2.9.10+dfsg-5ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04&package-id=5227ee2e55b78734", + "publisher": "Ubuntu Developers ", + "name": "libxml2", + "version": "2.9.10+dfsg-5ubuntu0.20.04.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "MIT-1" + } + } + ], + "cpe": "cpe:2.3:a:libxml2:libxml2:2.9.10\\+dfsg-5ubuntu0.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libxml2@2.9.10+dfsg-5ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libxtables12@1.8.4-3ubuntu2?arch=amd64&upstream=iptables&distro=ubuntu-20.04&package-id=440c57e95fc3a35c", + "publisher": "Ubuntu Developers ", + "name": "libxtables12", + "version": "1.8.4-3ubuntu2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libxtables12:libxtables12:1.8.4-3ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libxtables12@1.8.4-3ubuntu2?arch=amd64&upstream=iptables&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libzstd1@1.4.4+dfsg-3ubuntu0.1?arch=amd64&upstream=libzstd&distro=ubuntu-20.04&package-id=47cff0564e160066", + "publisher": "Ubuntu Developers ", + "name": "libzstd1", + "version": "1.4.4+dfsg-3ubuntu0.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libzstd1:libzstd1:1.4.4\\+dfsg-3ubuntu0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libzstd1@1.4.4+dfsg-3ubuntu0.1?arch=amd64&upstream=libzstd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/login@1:4.8.1-1ubuntu5.20.04?arch=amd64&upstream=shadow&distro=ubuntu-20.04&package-id=bb92db08e65352ae", + "publisher": "Ubuntu Developers ", + "name": "login", + "version": "1:4.8.1-1ubuntu5.20.04", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:login:login:1\\:4.8.1-1ubuntu5.20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/login@1:4.8.1-1ubuntu5.20.04?arch=amd64&upstream=shadow&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/login@1:4.8.1-1ubuntu5.20.04.1?arch=amd64&upstream=shadow&distro=ubuntu-20.04&package-id=cb23947502a7c38d", + "publisher": "Ubuntu Developers ", + "name": "login", + "version": "1:4.8.1-1ubuntu5.20.04.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:login:login:1\\:4.8.1-1ubuntu5.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/login@1:4.8.1-1ubuntu5.20.04.1?arch=amd64&upstream=shadow&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/logsave@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=4a92556bee4b4f91", + "publisher": "Ubuntu Developers ", + "name": "logsave", + "version": "1.45.5-2ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:logsave:logsave:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/logsave@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/lsb-base@11.1.0ubuntu2?arch=all&upstream=lsb&distro=ubuntu-20.04&package-id=b76348b7f1282c61", + "publisher": "Ubuntu Developers ", + "name": "lsb-base", + "version": "11.1.0ubuntu2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:lsb-base:lsb-base:11.1.0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/lsb-base@11.1.0ubuntu2?arch=all&upstream=lsb&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/mawk@1.3.4.20200120-2?arch=amd64&distro=ubuntu-20.04&package-id=435885c82afbf721", + "publisher": "Ubuntu Developers ", + "name": "mawk", + "version": "1.3.4.20200120-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:mawk:mawk:1.3.4.20200120-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/mawk@1.3.4.20200120-2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/mime-support@3.64ubuntu1?arch=all&distro=ubuntu-20.04&package-id=405891a224258a92", + "publisher": "Ubuntu Developers ", + "name": "mime-support", + "version": "3.64ubuntu1", + "licenses": [ + { + "license": { + "name": "Bellcore" + } + }, + { + "license": { + "name": "ad-hoc" + } + } + ], + "cpe": "cpe:2.3:a:mime-support:mime-support:3.64ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/mime-support@3.64ubuntu1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/mount@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=fa4ef6b12af7900c", + "publisher": "Ubuntu Developers ", + "name": "mount", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:mount:mount:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/mount@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ncurses-base@6.2-0ubuntu2?arch=all&upstream=ncurses&distro=ubuntu-20.04&package-id=d7393defd95e4554", + "publisher": "Ubuntu Developers ", + "name": "ncurses-base", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:ncurses-base:ncurses-base:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ncurses-base@6.2-0ubuntu2?arch=all&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ncurses-bin@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=d6bdd43961b680f6", + "publisher": "Ubuntu Developers ", + "name": "ncurses-bin", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:ncurses-bin:ncurses-bin:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ncurses-bin@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/netbase@6.1?arch=all&distro=ubuntu-20.04&package-id=c6847a50307ac1ba", + "publisher": "Ubuntu Developers ", + "name": "netbase", + "version": "6.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:netbase:netbase:6.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/netbase@6.1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/nfs-common@1:1.3.4-2.5ubuntu3.4?arch=amd64&upstream=nfs-utils&distro=ubuntu-20.04&package-id=6a00c331080f32b7", + "publisher": "Ubuntu Developers ", + "name": "nfs-common", + "version": "1:1.3.4-2.5ubuntu3.4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:nfs-common:nfs-common:1\\:1.3.4-2.5ubuntu3.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/nfs-common@1:1.3.4-2.5ubuntu3.4?arch=amd64&upstream=nfs-utils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.8?arch=amd64&distro=ubuntu-20.04&package-id=5727f60759ec90aa", + "publisher": "Ubuntu Developers ", + "name": "openssl", + "version": "1.1.1f-1ubuntu2.8", + "cpe": "cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.8?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/passwd@1:4.8.1-1ubuntu5.20.04?arch=amd64&upstream=shadow&distro=ubuntu-20.04&package-id=d99390960eea7b3e", + "publisher": "Ubuntu Developers ", + "name": "passwd", + "version": "1:4.8.1-1ubuntu5.20.04", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:passwd:passwd:1\\:4.8.1-1ubuntu5.20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/passwd@1:4.8.1-1ubuntu5.20.04?arch=amd64&upstream=shadow&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/passwd@1:4.8.1-1ubuntu5.20.04.1?arch=amd64&upstream=shadow&distro=ubuntu-20.04&package-id=c4a1ed5267891532", + "publisher": "Ubuntu Developers ", + "name": "passwd", + "version": "1:4.8.1-1ubuntu5.20.04.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:passwd:passwd:1\\:4.8.1-1ubuntu5.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/passwd@1:4.8.1-1ubuntu5.20.04.1?arch=amd64&upstream=shadow&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/perl@5.30.0-9ubuntu0.2?arch=amd64&distro=ubuntu-20.04&package-id=80890d41e31d4ad9", + "publisher": "Ubuntu Developers ", + "name": "perl", + "version": "5.30.0-9ubuntu0.2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl:perl:5.30.0-9ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/perl@5.30.0-9ubuntu0.2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/perl-base@5.30.0-9ubuntu0.2?arch=amd64&upstream=perl&distro=ubuntu-20.04&package-id=eab1752e76cf29f", + "publisher": "Ubuntu Developers ", + "name": "perl-base", + "version": "5.30.0-9ubuntu0.2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl-base:perl-base:5.30.0-9ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/perl-base@5.30.0-9ubuntu0.2?arch=amd64&upstream=perl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/perl-modules-5.30@5.30.0-9ubuntu0.2?arch=all&upstream=perl&distro=ubuntu-20.04&package-id=fb3bcb2d22f50638", + "publisher": "Ubuntu Developers ", + "name": "perl-modules-5.30", + "version": "5.30.0-9ubuntu0.2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl-modules-5.30:perl-modules-5.30:5.30.0-9ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/perl-modules-5.30@5.30.0-9ubuntu0.2?arch=all&upstream=perl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/procps@2:3.3.16-1ubuntu2.2?arch=amd64&distro=ubuntu-20.04&package-id=f177d21a50776ea7", + "publisher": "Ubuntu Developers ", + "name": "procps", + "version": "2:3.3.16-1ubuntu2.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:procps:procps:2\\:3.3.16-1ubuntu2.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/procps@2:3.3.16-1ubuntu2.2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/publicsuffix@20200303.0012-1?arch=all&distro=ubuntu-20.04&package-id=fe371293cddb3ef3", + "publisher": "Ubuntu Developers ", + "name": "publicsuffix", + "version": "20200303.0012-1", + "licenses": [ + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:publicsuffix:publicsuffix:20200303.0012-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/publicsuffix@20200303.0012-1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "application", + "bom-ref": "pkg:generic/python@3.8.10?package-id=9f595431cf5573c7", + "name": "python", + "version": "3.8.10", + "cpe": "cpe:2.3:a:python_software_foundation:python:3.8.10:*:*:*:*:*:*:*", + "purl": "pkg:generic/python@3.8.10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/python3@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04&package-id=ca939acbf264771", + "publisher": "Ubuntu Developers ", + "name": "python3", + "version": "3.8.2-0ubuntu2", + "cpe": "cpe:2.3:a:python3:python3:3.8.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/python3@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/python3-minimal@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04&package-id=26eebf392e0b02cf", + "publisher": "Ubuntu Developers ", + "name": "python3-minimal", + "version": "3.8.2-0ubuntu2", + "cpe": "cpe:2.3:a:python3-minimal:python3-minimal:3.8.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/python3-minimal@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/python3.8@3.8.10-0ubuntu1~20.04?arch=amd64&distro=ubuntu-20.04&package-id=b1de928401abc554", + "publisher": "Ubuntu Core Developers ", + "name": "python3.8", + "version": "3.8.10-0ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:python3.8:python3.8:3.8.10-0ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/python3.8@3.8.10-0ubuntu1~20.04?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/python3.8-minimal@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04&package-id=91fa2bead1762d08", + "publisher": "Ubuntu Core Developers ", + "name": "python3.8-minimal", + "version": "3.8.10-0ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:python3.8-minimal:python3.8-minimal:3.8.10-0ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/python3.8-minimal@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/qemu-block-extra@1:4.2-3ubuntu6.17?arch=amd64&upstream=qemu&distro=ubuntu-20.04&package-id=f2ce7313d353bf0d", + "publisher": "Ubuntu Developers ", + "name": "qemu-block-extra", + "version": "1:4.2-3ubuntu6.17", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:qemu-block-extra:qemu-block-extra:1\\:4.2-3ubuntu6.17:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/qemu-block-extra@1:4.2-3ubuntu6.17?arch=amd64&upstream=qemu&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/qemu-utils@1:4.2-3ubuntu6.17?arch=amd64&upstream=qemu&distro=ubuntu-20.04&package-id=fd8d39c65bc83889", + "publisher": "Ubuntu Developers ", + "name": "qemu-utils", + "version": "1:4.2-3ubuntu6.17", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:qemu-utils:qemu-utils:1\\:4.2-3ubuntu6.17:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/qemu-utils@1:4.2-3ubuntu6.17?arch=amd64&upstream=qemu&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/readline-common@8.0-4?arch=all&upstream=readline&distro=ubuntu-20.04&package-id=34a85b4423ecbe7", + "publisher": "Ubuntu Developers ", + "name": "readline-common", + "version": "8.0-4", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:readline-common:readline-common:8.0-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/readline-common@8.0-4?arch=all&upstream=readline&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/rpcbind@1.2.5-8?arch=amd64&distro=ubuntu-20.04&package-id=e98d3334085e4495", + "publisher": "Ubuntu Developers ", + "name": "rpcbind", + "version": "1.2.5-8", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "PERMISSIVE" + } + } + ], + "cpe": "cpe:2.3:a:rpcbind:rpcbind:1.2.5-8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/rpcbind@1.2.5-8?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sed@4.7-1?arch=amd64&distro=ubuntu-20.04&package-id=24bbb8989a1870c7", + "publisher": "Ubuntu Developers ", + "name": "sed", + "version": "4.7-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:sed:sed:4.7-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sed@4.7-1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sensible-utils@0.0.12+nmu1?arch=all&distro=ubuntu-20.04&package-id=7e50cf6ac335106e", + "publisher": "Ubuntu Developers ", + "name": "sensible-utils", + "version": "0.0.12+nmu1", + "licenses": [ + { + "license": { + "name": "All-permissive" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "configure" + } + }, + { + "license": { + "name": "installsh" + } + } + ], + "cpe": "cpe:2.3:a:sensible-utils:sensible-utils:0.0.12\\+nmu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sensible-utils@0.0.12+nmu1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sg3-utils@1.44-1ubuntu2?arch=amd64&distro=ubuntu-20.04&package-id=794bb1692a1cfa88", + "publisher": "Ubuntu Developers ", + "name": "sg3-utils", + "version": "1.44-1ubuntu2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:sg3-utils:sg3-utils:1.44-1ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sg3-utils@1.44-1ubuntu2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/shared-mime-info@1.15-1?arch=amd64&distro=ubuntu-20.04&package-id=c15ede029a3e38cd", + "publisher": "Ubuntu Developers ", + "name": "shared-mime-info", + "version": "1.15-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:shared-mime-info:shared-mime-info:1.15-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/shared-mime-info@1.15-1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sharutils@1:4.15.2-4build1?arch=amd64&distro=ubuntu-20.04&package-id=e920784bf62009c0", + "publisher": "Ubuntu Developers ", + "name": "sharutils", + "version": "1:4.15.2-4build1", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:sharutils:sharutils:1\\:4.15.2-4build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sharutils@1:4.15.2-4build1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sysvinit-utils@2.96-2.1ubuntu1?arch=amd64&upstream=sysvinit&distro=ubuntu-20.04&package-id=abc451774789c392", + "publisher": "Ubuntu Developers ", + "name": "sysvinit-utils", + "version": "2.96-2.1ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:sysvinit-utils:sysvinit-utils:2.96-2.1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sysvinit-utils@2.96-2.1ubuntu1?arch=amd64&upstream=sysvinit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/tar@1.30+dfsg-7ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04&package-id=4c6cd0d17cc842e", + "publisher": "Ubuntu Developers ", + "name": "tar", + "version": "1.30+dfsg-7ubuntu0.20.04.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:tar:tar:1.30\\+dfsg-7ubuntu0.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/tar@1.30+dfsg-7ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/telnet@0.17-41.2build1?arch=amd64&upstream=netkit-telnet&distro=ubuntu-20.04&package-id=440d9ef0dcd8675e", + "publisher": "Ubuntu Developers ", + "name": "telnet", + "version": "0.17-41.2build1", + "cpe": "cpe:2.3:a:telnet:telnet:0.17-41.2build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/telnet@0.17-41.2build1?arch=amd64&upstream=netkit-telnet&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/tzdata@2021a-0ubuntu0.20.04?arch=all&distro=ubuntu-20.04&package-id=aaae4a94d26494c0", + "publisher": "Ubuntu Developers ", + "name": "tzdata", + "version": "2021a-0ubuntu0.20.04", + "licenses": [ + { + "license": { + "id": "ICU" + } + } + ], + "cpe": "cpe:2.3:a:tzdata:tzdata:2021a-0ubuntu0.20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/tzdata@2021a-0ubuntu0.20.04?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ubuntu-keyring@2020.02.11.4?arch=all&distro=ubuntu-20.04&package-id=6d2b18ebcbe1dab7", + "publisher": "Dimitri John Ledkov ", + "name": "ubuntu-keyring", + "version": "2020.02.11.4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:ubuntu-keyring:ubuntu-keyring:2020.02.11.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ubuntu-keyring@2020.02.11.4?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ucf@3.0038+nmu1?arch=all&distro=ubuntu-20.04&package-id=ab3b8cc8be7b5655", + "publisher": "Ubuntu Developers ", + "name": "ucf", + "version": "3.0038+nmu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ucf:ucf:3.0038\\+nmu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ucf@3.0038+nmu1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/util-linux@2.34-0.1ubuntu9.1?arch=amd64&distro=ubuntu-20.04&package-id=33e86bd94ef763b6", + "publisher": "Ubuntu Developers ", + "name": "util-linux", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:util-linux:util-linux:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/util-linux@2.34-0.1ubuntu9.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/wget@1.20.3-1ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=2fee01aeba885b76", + "publisher": "Ubuntu Developers ", + "name": "wget", + "version": "1.20.3-1ubuntu1", + "licenses": [ + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:wget:wget:1.20.3-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/wget@1.20.3-1ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/xdg-user-dirs@0.17-2ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=6c580aaac3aa6068", + "publisher": "Ubuntu Developers ", + "name": "xdg-user-dirs", + "version": "0.17-2ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:xdg-user-dirs:xdg-user-dirs:0.17-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/xdg-user-dirs@0.17-2ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/xz-utils@5.2.4-1ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=46271b3ba3de19b6", + "publisher": "Ubuntu Developers ", + "name": "xz-utils", + "version": "5.2.4-1ubuntu1", + "licenses": [ + { + "license": { + "name": "Autoconf" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "PD" + } + }, + { + "license": { + "name": "PD-debian" + } + }, + { + "license": { + "name": "config-h" + } + }, + { + "license": { + "name": "noderivs" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-nowarranty" + } + }, + { + "license": { + "name": "probably-PD" + } + } + ], + "cpe": "cpe:2.3:a:xz-utils:xz-utils:5.2.4-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/xz-utils@5.2.4-1ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/zlib1g@1:1.2.11.dfsg-2ubuntu1.2?arch=amd64&upstream=zlib&distro=ubuntu-20.04&package-id=65361fdd213cfcf7", + "publisher": "Ubuntu Developers ", + "name": "zlib1g", + "version": "1:1.2.11.dfsg-2ubuntu1.2", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib1g:zlib1g:1\\:1.2.11.dfsg-2ubuntu1.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/zlib1g@1:1.2.11.dfsg-2ubuntu1.2?arch=amd64&upstream=zlib&distro=ubuntu-20.04" + }, + { + "type": "operating-system", + "name": "ubuntu", + "version": "20.04", + "description": "Ubuntu 20.04.2 LTS", + "swid": { + "tagId": "ubuntu", + "name": "ubuntu", + "version": "20.04" + }, + "externalReferences": [ + { + "url": "https://bugs.launchpad.net/ubuntu/", + "type": "issue-tracker" + }, + { + "url": "https://www.ubuntu.com/", + "type": "website" + }, + { + "url": "https://help.ubuntu.com/", + "comment": "support", + "type": "other" + }, + { + "url": "https://www.ubuntu.com/legal/terms-and-policies/privacy-policy", + "comment": "privacyPolicy", + "type": "other" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/base-files@10.3+deb10u9?arch=amd64&distro=debian-10&package-id=5aa6e4929bf16696", + "publisher": "Santiago Vila ", + "name": "base-files", + "version": "10.3+deb10u9", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:10.3\\+deb10u9:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/base-files@10.3+deb10u9?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=fe208845850e761b", + "name": "github.com/beorn7/perks", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/beorn7/perks@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/blang/semver@v3.5.1+incompatible?package-id=a0fcce25c1c87943", + "name": "github.com/blang/semver", + "version": "v3.5.1+incompatible", + "cpe": "cpe:2.3:a:blang:semver:v3.5.1\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/blang/semver@v3.5.1+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.1.1?package-id=a3cf89dad3a1cb14", + "name": "github.com/cespare/xxhash/v2", + "version": "v2.1.1", + "cpe": "cpe:2.3:a:cespare:xxhash\\/v2:v2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/container-storage-interface/spec@v1.4.0?package-id=d167582a01352137", + "name": "github.com/container-storage-interface/spec", + "version": "v1.4.0", + "cpe": "cpe:2.3:a:container-storage-interface:spec:v1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/container-storage-interface/spec@v1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1?package-id=1552c23ced3a50ec", + "name": "github.com/davecgh/go-spew", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:davecgh:go-spew:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-logr/logr@v0.4.0?package-id=81dacddb5e57d473", + "name": "github.com/go-logr/logr", + "version": "v0.4.0", + "cpe": "cpe:2.3:a:go-logr:logr:v0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-logr/logr@v0.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2?package-id=5d77f4e6dec464a0", + "name": "github.com/gogo/protobuf", + "version": "v1.3.2", + "cpe": "cpe:2.3:a:gogo:protobuf:v1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/groupcache@v0.0.0-20200121045136-8c9f03a8e57e?package-id=49655a5a6aa0ab40", + "name": "github.com/golang/groupcache", + "version": "v0.0.0-20200121045136-8c9f03a8e57e", + "cpe": "cpe:2.3:a:golang:groupcache:v0.0.0-20200121045136-8c9f03a8e57e:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20200121045136-8c9f03a8e57e" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.1?package-id=df7a31ccba759cc6", + "name": "github.com/golang/protobuf", + "version": "v1.5.1", + "cpe": "cpe:2.3:a:golang:protobuf:v1.5.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.5.5?package-id=ae445c0d544c5a2f", + "name": "github.com/google/go-cmp", + "version": "v0.5.5", + "cpe": "cpe:2.3:a:google:go-cmp:v0.5.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-cmp@v0.5.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/gofuzz@v1.2.0?package-id=728996eb813a5896", + "name": "github.com/google/gofuzz", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:google:gofuzz:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/gofuzz@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/googleapis/gnostic@v0.5.4?package-id=58b1aa0f2d634b33", + "name": "github.com/googleapis/gnostic", + "version": "v0.5.4", + "cpe": "cpe:2.3:a:googleapis:gnostic:v0.5.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/googleapis/gnostic@v0.5.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/hashicorp/golang-lru@v0.5.4?package-id=eb19310b49d31c33", + "name": "github.com/hashicorp/golang-lru", + "version": "v0.5.4", + "cpe": "cpe:2.3:a:hashicorp:golang-lru:v0.5.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/golang-lru@v0.5.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.12?package-id=615bf0276f4720c1", + "name": "github.com/imdario/mergo", + "version": "v0.3.12", + "cpe": "cpe:2.3:a:imdario:mergo:v0.3.12:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/imdario/mergo@v0.3.12" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.10?package-id=604391da90d0269b", + "name": "github.com/json-iterator/go", + "version": "v1.1.10", + "cpe": "cpe:2.3:a:json-iterator:go:v1.1.10:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/json-iterator/go@v1.1.10" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/kubernetes-csi/csi-lib-utils@v0.9.1?package-id=f15d5f2721545be7", + "name": "github.com/kubernetes-csi/csi-lib-utils", + "version": "v0.9.1", + "cpe": "cpe:2.3:a:kubernetes-csi:csi-lib-utils:v0.9.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/kubernetes-csi/csi-lib-utils@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/kubernetes-csi/external-resizer@(devel)?package-id=67e7cf3d6129d38", + "name": "github.com/kubernetes-csi/external-resizer", + "version": "(devel)", + "cpe": "cpe:2.3:a:kubernetes-csi:external-resizer:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/kubernetes-csi/external-resizer@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.2-0.20181231171920-c182affec369?package-id=af6d9140b50303b6", + "name": "github.com/matttproud/golang_protobuf_extensions", + "version": "v1.0.2-0.20181231171920-c182affec369", + "cpe": "cpe:2.3:a:matttproud:golang-protobuf-extensions:v1.0.2-0.20181231171920-c182affec369:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.2-0.20181231171920-c182affec369" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=2c638b682effc6ac", + "name": "github.com/modern-go/concurrent", + "version": "v0.0.0-20180306012644-bacd9c7ef1dd", + "cpe": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.1?package-id=c55e380a734816f9", + "name": "github.com/modern-go/reflect2", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:modern-go:reflect2:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/client_golang@v1.9.0?package-id=ba1d9eb559485a13", + "name": "github.com/prometheus/client_golang", + "version": "v1.9.0", + "cpe": "cpe:2.3:a:prometheus:client-golang:v1.9.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_golang@v1.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/client_model@v0.2.0?package-id=51dd0152d6e0fdbd", + "name": "github.com/prometheus/client_model", + "version": "v0.2.0", + "cpe": "cpe:2.3:a:prometheus:client-model:v0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_model@v0.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/common@v0.19.0?package-id=fba5945728425a37", + "name": "github.com/prometheus/common", + "version": "v0.19.0", + "cpe": "cpe:2.3:a:prometheus:common:v0.19.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/common@v0.19.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/procfs@v0.6.0?package-id=535a47f4217466cb", + "name": "github.com/prometheus/procfs", + "version": "v0.6.0", + "cpe": "cpe:2.3:a:prometheus:procfs:v0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/procfs@v0.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5?package-id=4d38286b12cd6450", + "name": "github.com/spf13/pflag", + "version": "v1.0.5", + "cpe": "cpe:2.3:a:spf13:pflag:v1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4?package-id=e44cb9cc3c602db6", + "name": "golang.org/x/net", + "version": "v0.0.0-20210316092652-d523dce5a7f4", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.0.0-20210316092652-d523dce5a7f4:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20210313182246-cd4f82c27b84?package-id=f31028471e0b4388", + "name": "golang.org/x/oauth2", + "version": "v0.0.0-20210313182246-cd4f82c27b84", + "cpe": "cpe:2.3:a:golang:x\\/oauth2:v0.0.0-20210313182246-cd4f82c27b84:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20210313182246-cd4f82c27b84" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20210317225723-c4fcb01b228e?package-id=950dcd4bb9c9f694", + "name": "golang.org/x/sys", + "version": "v0.0.0-20210317225723-c4fcb01b228e", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20210317225723-c4fcb01b228e:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20210317225723-c4fcb01b228e" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/term@v0.0.0-20210317153231-de623e64d2a6?package-id=d248cfab3d519302", + "name": "golang.org/x/term", + "version": "v0.0.0-20210317153231-de623e64d2a6", + "cpe": "cpe:2.3:a:golang:x\\/term:v0.0.0-20210317153231-de623e64d2a6:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/term@v0.0.0-20210317153231-de623e64d2a6" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/text@v0.3.5?package-id=7492515188a94adc", + "name": "golang.org/x/text", + "version": "v0.3.5", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.3.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.3.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20210220033141-f8bda1e9f3ba?package-id=9f7b470f10543aaa", + "name": "golang.org/x/time", + "version": "v0.0.0-20210220033141-f8bda1e9f3ba", + "cpe": "cpe:2.3:a:golang:x\\/time:v0.0.0-20210220033141-f8bda1e9f3ba:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/time@v0.0.0-20210220033141-f8bda1e9f3ba" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20210317182105-75c7a8546eb9?package-id=eada3d755ec385e8", + "name": "google.golang.org/genproto", + "version": "v0.0.0-20210317182105-75c7a8546eb9", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20210317182105-75c7a8546eb9:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20210317182105-75c7a8546eb9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.36.0?package-id=8255b782ac9494a1", + "name": "google.golang.org/grpc", + "version": "v1.36.0", + "cpe": "cpe:2.3:a:google:grpc:v1.36.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.36.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.26.0?package-id=5ba9e2d27f0b9a52", + "name": "google.golang.org/protobuf", + "version": "v1.26.0", + "cpe": "cpe:2.3:a:google:protobuf:v1.26.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/protobuf@v1.26.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=55bacc9ffde81982", + "name": "gopkg.in/inf.v0", + "version": "v0.9.1", + "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0?package-id=55326b5ee7f9bfa4", + "name": "gopkg.in/yaml.v2", + "version": "v2.4.0", + "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b?package-id=5feeb0f0bddedf6a", + "name": "gopkg.in/yaml.v3", + "version": "v3.0.0-20210107192922-496545a6307b", + "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/api@v0.21.0?package-id=ff3c9d603f5b46c4", + "name": "k8s.io/api", + "version": "v0.21.0", + "purl": "pkg:golang/k8s.io/api@v0.21.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.21.0?package-id=6581a390e38569d3", + "name": "k8s.io/apimachinery", + "version": "v0.21.0", + "purl": "pkg:golang/k8s.io/apimachinery@v0.21.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/apiserver@v0.20.0?package-id=4db3b35cb1bf574a", + "name": "k8s.io/apiserver", + "version": "v0.20.0", + "purl": "pkg:golang/k8s.io/apiserver@v0.20.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/client-go@v0.21.0?package-id=36d03aada45c2efe", + "name": "k8s.io/client-go", + "version": "v0.21.0", + "purl": "pkg:golang/k8s.io/client-go@v0.21.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/component-base@v0.21.0?package-id=88d86de91cbd8dd6", + "name": "k8s.io/component-base", + "version": "v0.21.0", + "purl": "pkg:golang/k8s.io/component-base@v0.21.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/csi-translation-lib@v0.21.0?package-id=b06287d56fb3bfc3", + "name": "k8s.io/csi-translation-lib", + "version": "v0.21.0", + "purl": "pkg:golang/k8s.io/csi-translation-lib@v0.21.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/klog/v2@v2.8.0?package-id=39073ab938b1c44d", + "name": "k8s.io/klog/v2", + "version": "v2.8.0", + "cpe": "cpe:2.3:a:klog:v2:v2.8.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/k8s.io/klog/v2@v2.8.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20210305164622-f622666832c1?package-id=b4a1f6ece5f5f037", + "name": "k8s.io/kube-openapi", + "version": "v0.0.0-20210305164622-f622666832c1", + "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20210305164622-f622666832c1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20210305010621-2afb4311ab10?package-id=28103bb78327fc1b", + "name": "k8s.io/utils", + "version": "v0.0.0-20210305010621-2afb4311ab10", + "purl": "pkg:golang/k8s.io/utils@v0.0.0-20210305010621-2afb4311ab10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/netbase@5.6?arch=all&distro=debian-10&package-id=b55e51dca4eba9a6", + "publisher": "Marco d'Itri ", + "name": "netbase", + "version": "5.6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:netbase:netbase:5.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/netbase@5.6?arch=all&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.1.0?package-id=f721ecf66abff125", + "name": "sigs.k8s.io/structured-merge-diff/v4", + "version": "v4.1.0", + "cpe": "cpe:2.3:a:structured-merge-diff:v4:v4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.2.0?package-id=7a71f62ed60b4490", + "name": "sigs.k8s.io/yaml", + "version": "v1.2.0", + "purl": "pkg:golang/sigs.k8s.io/yaml@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tzdata@2021a-0+deb10u1?arch=all&distro=debian-10&package-id=9e5b2198bbbd7fb0", + "publisher": "GNU Libc Maintainers ", + "name": "tzdata", + "version": "2021a-0+deb10u1", + "cpe": "cpe:2.3:a:tzdata:tzdata:2021a-0\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tzdata@2021a-0+deb10u1?arch=all&distro=debian-10" + }, + { + "type": "operating-system", + "name": "debian", + "version": "10", + "description": "Distroless", + "swid": { + "tagId": "debian", + "name": "debian", + "version": "10" + }, + "externalReferences": [ + { + "url": "https://github.com/GoogleContainerTools/distroless/issues/new", + "type": "issue-tracker" + }, + { + "url": "https://github.com/GoogleContainerTools/distroless", + "type": "website" + }, + { + "url": "https://github.com/GoogleContainerTools/distroless/blob/master/README.md", + "comment": "support", + "type": "other" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/1to2@1.0.0?package-id=b0ed3b5fe4e5cbb3", + "name": "1to2", + "version": "1.0.0", + "description": "NAN 1 -> 2 Migration Script", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nodejs:1to2:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/1to2@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/nan.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular/material@8.0.0?package-id=1d00b998d1390487", + "name": "@angular/material", + "version": "8.0.0", + "description": "Angular Material", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular\\/material:\\@angular\\/material:8.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular/material@8.0.0", + "externalReferences": [ + { + "url": "https://github.com/angular/components.git", + "type": "distribution" + }, + { + "url": "https://github.com/angular/components#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40aytek/material-color-picker@1.0.4?package-id=446759678641ab0d", + "author": "Aytek Meral & S. Ferit Arslan", + "name": "@aytek/material-color-picker", + "version": "1.0.4", + "description": "material color picker ", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@aytek\\/material-color-picker:\\@aytek\\/material-color-picker:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40aytek/material-color-picker@1.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/code-frame@7.21.4?package-id=20a467bc170e49cb", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/code-frame", + "version": "7.21.4", + "description": "Generate errors that contain a code frame that point to source locations.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/code-frame:\\@babel\\/code-frame:7.21.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/code-frame@7.21.4", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-code-frame", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-validator-identifier@7.19.1?package-id=9118211910506819", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/helper-validator-identifier", + "version": "7.19.1", + "description": "Validate identifier/keywords name", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-validator-identifier:\\@babel\\/helper-validator-identifier:7.19.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-validator-identifier@7.19.1", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/highlight@7.18.6?package-id=67f84cf681f3c74c", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/highlight", + "version": "7.18.6", + "description": "Syntax highlight JavaScript strings for output in terminals.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/highlight:\\@babel\\/highlight:7.18.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/highlight@7.18.6", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-highlight", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40colors/colors@1.5.0?package-id=1e63eea14f4d61ef", + "author": "DABH", + "name": "@colors/colors", + "version": "1.5.0", + "description": "get colors in your node.js console", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@colors\\/colors:\\@colors\\/colors:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40colors/colors@1.5.0", + "externalReferences": [ + { + "url": "http://github.com/DABH/colors.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/DABH/colors.js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40danielmoncada/angular-datetime-picker@9.2.0?package-id=9c4e82e05b812a03", + "author": "Maintained and updated by Daniel Moncada, original implementatiom by Daniel Pan", + "name": "@danielmoncada/angular-datetime-picker", + "version": "9.2.0", + "description": "Angular Date Time Picker", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@danielmoncada\\/angular-datetime-picker:\\@danielmoncada\\/angular-datetime-picker:9.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40danielmoncada/angular-datetime-picker@9.2.0", + "externalReferences": [ + { + "url": "https://github.com/danielmoncada/date-time-picker.git", + "type": "distribution" + }, + { + "url": "https://github.com/danielmoncada/date-time-picker", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40gar/promisify@1.1.3?package-id=6fab079a7c06c1de", + "author": "Gar ", + "name": "@gar/promisify", + "version": "1.1.3", + "description": "Promisify an entire class or object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@gar\\/promisify:\\@gar\\/promisify:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40gar/promisify@1.1.3", + "externalReferences": [ + { + "url": "https://github.com/wraithgar/gar-promisify.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40isaacs/string-locale-compare@1.1.0?package-id=fbe0dcb344723a67", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "@isaacs/string-locale-compare", + "version": "1.1.0", + "description": "Compare strings with Intl.Collator if available, falling back to String.localeCompare otherwise", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@isaacs\\/string-locale-compare:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40isaacs/string-locale-compare@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/string-locale-compare", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40my-scope/package-a@0.0.0?package-id=9e7e5553c3ebce03", + "name": "@my-scope/package-a", + "version": "0.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@my-scope\\/package-a:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40my-scope/package-a@0.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40my-scope/package-b@0.0.0?package-id=9abfa6541a414f95", + "name": "@my-scope/package-b", + "version": "0.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@my-scope\\/package-b:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40my-scope/package-b@0.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/arborist@5.6.3?package-id=60e008e2ceb94218", + "author": "GitHub Inc.", + "name": "@npmcli/arborist", + "version": "5.6.3", + "description": "Manage node_modules trees", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/arborist:\\@npmcli\\/arborist:5.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/arborist@5.6.3", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/ci-detect@2.0.0?package-id=8a40a38b900bcf1d", + "author": "GitHub Inc.", + "name": "@npmcli/ci-detect", + "version": "2.0.0", + "description": "Detect what kind of CI environment the program is in", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/ci-detect:\\@npmcli\\/ci-detect:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/ci-detect@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/ci-detect.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/config@4.2.2?package-id=a02559bafd837882", + "author": "GitHub Inc.", + "name": "@npmcli/config", + "version": "4.2.2", + "description": "Configuration management for the npm cli", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/config:\\@npmcli\\/config:4.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/config@4.2.2", + "externalReferences": [ + { + "url": "https://github.com/npm/config.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/disparity-colors@2.0.0?package-id=3e63715f5300a753", + "author": "GitHub Inc.", + "name": "@npmcli/disparity-colors", + "version": "2.0.0", + "description": "Colorizes unified diff output", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/disparity-colors:\\@npmcli\\/disparity-colors:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/disparity-colors@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/disparity-colors.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/fs@2.1.2?package-id=cd19a20b4774187f", + "author": "GitHub Inc.", + "name": "@npmcli/fs", + "version": "2.1.2", + "description": "filesystem utilities for the npm cli", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/fs:\\@npmcli\\/fs:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/fs@2.1.2", + "externalReferences": [ + { + "url": "https://github.com/npm/fs.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/git@3.0.2?package-id=34b16cf601f612a9", + "author": "GitHub Inc.", + "name": "@npmcli/git", + "version": "3.0.2", + "description": "a util for spawning git from npm CLI contexts", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/git:\\@npmcli\\/git:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/git@3.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/git.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/installed-package-contents@1.0.7?package-id=8562f58f85ba40df", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "@npmcli/installed-package-contents", + "version": "1.0.7", + "description": "Get the list of files installed in a package in node_modules, including bundled dependencies", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/installed-package-contents:\\@npmcli\\/installed-package-contents:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/installed-package-contents@1.0.7", + "externalReferences": [ + { + "url": "git+https://github.com/npm/installed-package-contents", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/map-workspaces@2.0.4?package-id=471052449bb417cb", + "author": "GitHub Inc.", + "name": "@npmcli/map-workspaces", + "version": "2.0.4", + "description": "Retrieves a name:pathname Map for a given workspaces config", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/map-workspaces:\\@npmcli\\/map-workspaces:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/map-workspaces@2.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/map-workspaces.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/metavuln-calculator@3.1.1?package-id=5a94ed44a78625cd", + "author": "GitHub Inc.", + "name": "@npmcli/metavuln-calculator", + "version": "3.1.1", + "description": "Calculate meta-vulnerabilities from package security advisories", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/metavuln-calculator:\\@npmcli\\/metavuln-calculator:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/metavuln-calculator@3.1.1", + "externalReferences": [ + { + "url": "https://github.com/npm/metavuln-calculator.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/move-file@2.0.1?package-id=76e6ffad7033dea3", + "author": "GitHub Inc.", + "name": "@npmcli/move-file", + "version": "2.0.1", + "description": "move a file (fork of move-file)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/move-file:\\@npmcli\\/move-file:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/move-file@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/move-file.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/name-from-folder@1.0.1?package-id=bda8c8030d6b515f", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "@npmcli/name-from-folder", + "version": "1.0.1", + "description": "Get the package name from a folder path", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/name-from-folder:\\@npmcli\\/name-from-folder:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/name-from-folder@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/name-from-folder", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/node-gyp@2.0.0?package-id=c9fb094d61d2ac04", + "author": "GitHub Inc.", + "name": "@npmcli/node-gyp", + "version": "2.0.0", + "description": "Tools for dealing with node-gyp packages", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/node-gyp:\\@npmcli\\/node-gyp:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/node-gyp@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/node-gyp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/package-json@2.0.0?package-id=63189c571859bb1a", + "author": "GitHub Inc.", + "name": "@npmcli/package-json", + "version": "2.0.0", + "description": "Programmatic API to update package.json", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/package-json:\\@npmcli\\/package-json:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/package-json@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/package-json.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/promise-spawn@3.0.0?package-id=426c6e033be010cb", + "author": "GitHub Inc.", + "name": "@npmcli/promise-spawn", + "version": "3.0.0", + "description": "spawn processes the way the npm cli likes to do", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/promise-spawn:\\@npmcli\\/promise-spawn:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/promise-spawn@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/promise-spawn.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/query@1.2.0?package-id=e71e78476048755c", + "author": "GitHub Inc.", + "name": "@npmcli/query", + "version": "1.2.0", + "description": "npm query parser and tools", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/query:\\@npmcli\\/query:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/query@1.2.0", + "externalReferences": [ + { + "url": "https://github.com/npm/query.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/run-script@4.2.1?package-id=a13d191f5a0789d1", + "author": "GitHub Inc.", + "name": "@npmcli/run-script", + "version": "4.2.1", + "description": "Run a lifecycle script for a package (descendant of npm-lifecycle)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/run-script:\\@npmcli\\/run-script:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/run-script@4.2.1", + "externalReferences": [ + { + "url": "https://github.com/npm/run-script.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40tootallnate/once@2.0.0?package-id=5edbc75b01ae9167", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "@tootallnate/once", + "version": "2.0.0", + "description": "Creates a Promise that waits for a single event", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@tootallnate\\/once:\\@tootallnate\\/once:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40tootallnate/once@2.0.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/once.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/hammerjs@2.0.36?package-id=497759fd8d1e5621", + "name": "@types/hammerjs", + "version": "2.0.36", + "description": "TypeScript definitions for Hammer.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/hammerjs:\\@types\\/hammerjs:2.0.36:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/hammerjs@2.0.36", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/minimist@1.2.2?package-id=98deb2ed490d5744", + "name": "@types/minimist", + "version": "1.2.2", + "description": "TypeScript definitions for minimist", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/minimist:\\@types\\/minimist:1.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/minimist@1.2.2", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/minimist", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/normalize-package-data@2.4.1?package-id=9300a27ff31dc618", + "name": "@types/normalize-package-data", + "version": "2.4.1", + "description": "TypeScript definitions for normalize-package-data", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/normalize-package-data:\\@types\\/normalize-package-data:2.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/normalize-package-data@2.4.1", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/normalize-package-data", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/abbrev@1.1.1?package-id=98be1cad3f4d1d11", + "author": "Isaac Z. Schlueter ", + "name": "abbrev", + "version": "1.1.1", + "description": "Like ruby's abbrev module, but in js", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:abbrev:abbrev:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/abbrev@1.1.1", + "externalReferences": [ + { + "url": "http://github.com/isaacs/abbrev-js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/abbrev@1.1.1?package-id=7e084c60dbbfc7b6", + "author": "Isaac Z. Schlueter ", + "name": "abbrev", + "version": "1.1.1", + "description": "Like ruby's abbrev module, but in js", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:abbrev:abbrev:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/abbrev@1.1.1", + "externalReferences": [ + { + "url": "http://github.com/isaacs/abbrev-js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/accepts@1.3.7?package-id=e240b614957beb3f", + "name": "accepts", + "version": "1.3.7", + "description": "Higher-level content negotiation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:accepts:accepts:1.3.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/accepts@1.3.7", + "externalReferences": [ + { + "url": "jshttp/accepts", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/agent-base@6.0.2?package-id=4b0b5c9ee7d8fc08", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "agent-base", + "version": "6.0.2", + "description": "Turn a function into an `http.Agent` instance", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:TooTallNate:agent-base:6.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/agent-base@6.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/agentkeepalive@4.2.1?package-id=37fa9bcd67324d6e", + "author": "fengmk2 (https://fengmk2.com)", + "name": "agentkeepalive", + "version": "4.2.1", + "description": "Missing keepalive http.Agent", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:agentkeepalive:agentkeepalive:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/agentkeepalive@4.2.1", + "externalReferences": [ + { + "url": "git://github.com/node-modules/agentkeepalive.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aggregate-error@3.1.0?package-id=b1b74a520919b83f", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "aggregate-error", + "version": "3.1.0", + "description": "Create an error from multiple errors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:aggregate-error:aggregate-error:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aggregate-error@3.1.0", + "externalReferences": [ + { + "url": "sindresorhus/aggregate-error", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ajv@6.12.6?package-id=499abcf86654fa15", + "author": "Evgeny Poberezkin", + "name": "ajv", + "version": "6.12.6", + "description": "Another JSON Schema Validator", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ajv-validator:ajv:6.12.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/ajv@6.12.6", + "externalReferences": [ + { + "url": "https://github.com/ajv-validator/ajv.git", + "type": "distribution" + }, + { + "url": "https://github.com/ajv-validator/ajv", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.2.0-r23?arch=x86_64&distro=alpine-3.16.5&package-id=61eac5ce8105d394", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.2.0-r23", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.2.0-r23:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.2.0-r23?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout-data@3.2.0-r23?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.16.5&package-id=e8c6fcc3a282ed4f", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout-data", + "version": "3.2.0-r23", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.2.0-r23:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout-data@3.2.0-r23?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.16.5&package-id=82d183eb300978cc", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.4-r1", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/amdefine@1.0.1?package-id=424003c885d9f1d5", + "author": "James Burke (http://github.com/jrburke)", + "name": "amdefine", + "version": "1.0.1", + "description": "Provide AMD's define() API for declaring modules in the AMD format", + "licenses": [ + { + "license": { + "name": "BSD-3-Clause OR MIT" + } + } + ], + "cpe": "cpe:2.3:a:amdefine:amdefine:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/amdefine@1.0.1", + "externalReferences": [ + { + "url": "https://github.com/jrburke/amdefine.git", + "type": "distribution" + }, + { + "url": "http://github.com/jrburke/amdefine", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@2.1.1?package-id=f171d96c5c85c648", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "2.1.1", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@2.1.1", + "externalReferences": [ + { + "url": "chalk/ansi-regex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@4.1.1?package-id=2b2c69332642e60d", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "4.1.1", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@4.1.1", + "externalReferences": [ + { + "url": "chalk/ansi-regex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@4.1.1?package-id=57570b242bca44bc", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "4.1.1", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@4.1.1", + "externalReferences": [ + { + "url": "chalk/ansi-regex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@4.1.1?package-id=89ccb90286cd81cf", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "4.1.1", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@4.1.1", + "externalReferences": [ + { + "url": "chalk/ansi-regex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@5.0.1?package-id=fe78ee8372cda3ef", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "5.0.1", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@5.0.1", + "externalReferences": [ + { + "url": "chalk/ansi-regex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-styles@2.2.1?package-id=d4b2e8c78b45f2de", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-styles", + "version": "2.2.1", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@2.2.1", + "externalReferences": [ + { + "url": "chalk/ansi-styles", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-styles@3.2.1?package-id=44d19522b5daaa82", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-styles", + "version": "3.2.1", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:3.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@3.2.1", + "externalReferences": [ + { + "url": "chalk/ansi-styles", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-styles@3.2.1?package-id=2df8c46d58763f23", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-styles", + "version": "3.2.1", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:3.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@3.2.1", + "externalReferences": [ + { + "url": "chalk/ansi-styles", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-styles@4.3.0?package-id=e3f310fd74532509", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-styles", + "version": "4.3.0", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@4.3.0", + "externalReferences": [ + { + "url": "chalk/ansi-styles", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.9-r3?arch=x86_64&distro=alpine-3.16.5&package-id=42d502b764a37310", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.12.9-r3", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.12.9-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.12.9-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aproba@1.2.0?package-id=f8753d6fa099a7d0", + "author": "Rebecca Turner ", + "name": "aproba", + "version": "1.2.0", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:aproba:aproba:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aproba@1.2.0", + "externalReferences": [ + { + "url": "https://github.com/iarna/aproba", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aproba@2.0.0?package-id=d11111a04d810227", + "author": "Rebecca Turner ", + "name": "aproba", + "version": "2.0.0", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:aproba:aproba:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aproba@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/iarna/aproba", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/archy@1.0.0?package-id=a1e7fd77fec54095", + "author": "James Halliday (http://substack.net)", + "name": "archy", + "version": "1.0.0", + "description": "render nested hierarchies `npm ls` style with unicode pipes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:substack:archy:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/archy@1.0.0", + "externalReferences": [ + { + "url": "http://github.com/substack/node-archy.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/are-we-there-yet@1.1.7?package-id=bf4c3e64194953d8", + "author": "Rebecca Turner (http://re-becca.org)", + "name": "are-we-there-yet", + "version": "1.1.7", + "description": "Keep track of the overall completion of many disparate processes", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:are-we-there-yet:are-we-there-yet:1.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/are-we-there-yet@1.1.7", + "externalReferences": [ + { + "url": "https://github.com/iarna/are-we-there-yet.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/are-we-there-yet", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/are-we-there-yet@3.0.1?package-id=d7ea73c2e385c95d", + "author": "GitHub Inc.", + "name": "are-we-there-yet", + "version": "3.0.1", + "description": "Keep track of the overall completion of many disparate processes", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:are-we-there-yet:are-we-there-yet:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/are-we-there-yet@3.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/are-we-there-yet.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/are-we-there-yet", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/array-flatten@1.1.1?package-id=169fa984c33ff9f6", + "author": "Blake Embrey (http://blakeembrey.me)", + "name": "array-flatten", + "version": "1.1.1", + "description": "Flatten an array of nested arrays into a single flat array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:array-flatten:array-flatten:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/array-flatten@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/blakeembrey/array-flatten.git", + "type": "distribution" + }, + { + "url": "https://github.com/blakeembrey/array-flatten", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/arrify@1.0.1?package-id=a9e847f06d506623", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "arrify", + "version": "1.0.1", + "description": "Convert a value to an array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:arrify:arrify:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/arrify@1.0.1", + "externalReferences": [ + { + "url": "sindresorhus/arrify", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asap@2.0.6?package-id=4069b89e24646503", + "name": "asap", + "version": "2.0.6", + "description": "High-priority task queue for Node.js and browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:kriskowal:asap:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/asap@2.0.6", + "externalReferences": [ + { + "url": "https://github.com/kriskowal/asap.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asn1@0.2.6?package-id=fa945e5e8e9c4123", + "author": "Joyent (joyent.com)", + "name": "asn1", + "version": "0.2.6", + "description": "Contains parsers and serializers for ASN.1 (currently BER only)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:joyent:asn1:0.2.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/asn1@0.2.6", + "externalReferences": [ + { + "url": "https://github.com/joyent/node-asn1.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/assert-plus@1.0.0?package-id=fefb0d3370d896dc", + "author": "Mark Cavage ", + "name": "assert-plus", + "version": "1.0.0", + "description": "Extra assertions on top of node's assert module", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:assert-plus:assert-plus:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/assert-plus@1.0.0", + "externalReferences": [ + { + "url": "https://github.com/mcavage/node-assert-plus.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/async-foreach@0.1.3?package-id=36caf08e8333209", + "author": "\"Cowboy\" Ben Alman (http://benalman.com/)", + "name": "async-foreach", + "version": "0.1.3", + "description": "An optionally-asynchronous forEach with an interesting interface.", + "cpe": "cpe:2.3:a:async-foreach:async-foreach:0.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/async-foreach@0.1.3", + "externalReferences": [ + { + "url": "git://github.com/cowboy/javascript-sync-async-foreach.git", + "type": "distribution" + }, + { + "url": "http://github.com/cowboy/javascript-sync-async-foreach", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asynckit@0.4.0?package-id=ae8f87968d557dba", + "author": "Alex Indigo ", + "name": "asynckit", + "version": "0.4.0", + "description": "Minimal async jobs utility library, with streams support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alexindigo:asynckit:0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/asynckit@0.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/alexindigo/asynckit.git", + "type": "distribution" + }, + { + "url": "https://github.com/alexindigo/asynckit#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aws-sign2@0.7.0?package-id=2ea4d2f6e82a7f7d", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "aws-sign2", + "version": "0.7.0", + "description": "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor in request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:aws-sign2:aws-sign2:0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aws-sign2@0.7.0", + "externalReferences": [ + { + "url": "https://github.com/mikeal/aws-sign", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aws4@1.11.0?package-id=5f7693878d6531bc", + "author": "Michael Hart (https://github.com/mhart)", + "name": "aws4", + "version": "1.11.0", + "description": "Signs and prepares requests using AWS Signature Version 4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:aws4:aws4:1.11.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aws4@1.11.0", + "externalReferences": [ + { + "url": "github:mhart/aws4", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/balanced-match@1.0.2?package-id=c15b2106d0ae19d4", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "balanced-match", + "version": "1.0.2", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/balanced-match@1.0.2?package-id=8db1f18b661f67ae", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "balanced-match", + "version": "1.0.2", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2?package-id=e522f8051f2c594b", + "name": "bcrypt-pbkdf", + "version": "1.0.2", + "description": "Port of the OpenBSD bcrypt_pbkdf function to pure JS", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:bcrypt-pbkdf:bcrypt-pbkdf:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/bcrypt-pbkdf@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/joyent/node-bcrypt-pbkdf.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bin-links@3.0.3?package-id=605ade84572e7fb", + "author": "GitHub Inc.", + "name": "bin-links", + "version": "3.0.3", + "description": "JavaScript package binary linker", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:bin-links:bin-links:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/bin-links@3.0.3", + "externalReferences": [ + { + "url": "https://github.com/npm/bin-links.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/binary-extensions@2.2.0?package-id=2ddda84d3ad7f3e1", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "binary-extensions", + "version": "2.2.0", + "description": "List of binary file extensions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:binary-extensions:binary-extensions:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/binary-extensions@2.2.0", + "externalReferences": [ + { + "url": "sindresorhus/binary-extensions", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/body-parser@1.19.0?package-id=462cc944e01953ba", + "name": "body-parser", + "version": "1.19.0", + "description": "Node.js body parsing middleware", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:body-parser:body-parser:1.19.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/body-parser@1.19.0", + "externalReferences": [ + { + "url": "expressjs/body-parser", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=a36ca63616a6d457", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "1.1.11", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=8aefa0d5bf7ea5ce", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "1.1.11", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=1bc35b4fad6ec801", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "1.1.11", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@2.0.1?package-id=70d44e2ab0a06da3", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "2.0.1", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@2.0.1", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/builtins@5.0.1?package-id=af6ac207a0c6926d", + "name": "builtins", + "version": "5.0.1", + "description": "List of node.js builtin modules", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:builtins:builtins:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/builtins@5.0.1", + "externalReferences": [ + { + "url": "juliangruber/builtins", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "e14718c64f5147f4", + "name": "busybox", + "version": "1.35.0", + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=alpine-3.16.5&package-id=4b48ef6f6b983526", + "publisher": "Sören Tempel ", + "name": "busybox", + "version": "1.35.0-r17", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0-r17:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bytes@3.1.0?package-id=2d0d8d4dfef7b17c", + "author": "TJ Holowaychuk (http://tjholowaychuk.com)", + "name": "bytes", + "version": "3.1.0", + "description": "Utility to parse a string bytes to bytes and vice-versa", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bytes:bytes:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/bytes@3.1.0", + "externalReferences": [ + { + "url": "visionmedia/bytes.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20220614-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.16.5&package-id=30622a1848b22bca", + "publisher": "Natanael Copa ", + "name": "ca-certificates-bundle", + "version": "20220614-r0", + "description": "Pre generated bundle of Mozilla certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20220614-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-bundle@20220614-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cacache@16.1.3?package-id=4e055fb1e595c11", + "author": "GitHub Inc.", + "name": "cacache", + "version": "16.1.3", + "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cacache:cacache:16.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/cacache@16.1.3", + "externalReferences": [ + { + "url": "https://github.com/npm/cacache.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/camelcase@5.3.1?package-id=17dbb50316aee704", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "camelcase", + "version": "5.3.1", + "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:camelcase:camelcase:5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/camelcase@5.3.1", + "externalReferences": [ + { + "url": "sindresorhus/camelcase", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/camelcase-keys@6.2.2?package-id=5a5b5ae4e4a9a274", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "camelcase-keys", + "version": "6.2.2", + "description": "Convert object keys to camel case", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:camelcase-keys:camelcase-keys:6.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/camelcase-keys@6.2.2", + "externalReferences": [ + { + "url": "sindresorhus/camelcase-keys", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/caseless@0.12.0?package-id=227a1a61cfc117ad", + "author": "Mikeal Rogers ", + "name": "caseless", + "version": "0.12.0", + "description": "Caseless object set/get/has, very useful when working with HTTP headers.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:caseless:caseless:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/caseless@0.12.0", + "externalReferences": [ + { + "url": "https://github.com/mikeal/caseless", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chalk@1.1.3?package-id=76f13078d58865d", + "name": "chalk", + "version": "1.1.3", + "description": "Terminal string styling done right. Much color.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chalk:chalk:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/chalk@1.1.3", + "externalReferences": [ + { + "url": "chalk/chalk", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chalk@2.4.2?package-id=2dda8dd3bedbb7a9", + "name": "chalk", + "version": "2.4.2", + "description": "Terminal string styling done right", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chalk:chalk:2.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/chalk@2.4.2", + "externalReferences": [ + { + "url": "chalk/chalk", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chalk@4.1.2?package-id=b12178723b56594f", + "name": "chalk", + "version": "4.1.2", + "description": "Terminal string styling done right", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chalk:chalk:4.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/chalk@4.1.2", + "externalReferences": [ + { + "url": "chalk/chalk", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chownr@2.0.0?package-id=b5088c57ceda122f", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "chownr", + "version": "2.0.0", + "description": "like `chown -R`", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:chownr:chownr:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/chownr@2.0.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/chownr.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chownr@2.0.0?package-id=b6eb8c484ba68dba", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "chownr", + "version": "2.0.0", + "description": "like `chown -R`", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:chownr:chownr:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/chownr@2.0.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/chownr.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cidr-regex@3.1.1?package-id=be2d165b38649e26", + "author": "silverwind ", + "name": "cidr-regex", + "version": "3.1.1", + "description": "Regular expression for matching IP addresses in CIDR notation", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:cidr-regex:cidr-regex:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/cidr-regex@3.1.1", + "externalReferences": [ + { + "url": "silverwind/cidr-regex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/clean-stack@2.2.0?package-id=9a5c51e7acb4b115", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "clean-stack", + "version": "2.2.0", + "description": "Clean up error stack traces", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clean-stack:clean-stack:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/clean-stack@2.2.0", + "externalReferences": [ + { + "url": "sindresorhus/clean-stack", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-columns@4.0.0?package-id=61a1dfb277c2e6f7", + "author": "Shannon Moeller (http://shannonmoeller.com)", + "name": "cli-columns", + "version": "4.0.0", + "description": "Columnated lists for the CLI.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shannonmoeller:cli-columns:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-columns@4.0.0", + "externalReferences": [ + { + "url": "shannonmoeller/cli-columns", + "type": "distribution" + }, + { + "url": "https://github.com/shannonmoeller/cli-columns#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-table3@0.6.2?package-id=c77ee2194bd52f3d", + "author": "James Talmage", + "name": "cli-table3", + "version": "0.6.2", + "description": "Pretty unicode tables for the command line. Based on the original cli-table.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cli-table3:cli-table3:0.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-table3@0.6.2", + "externalReferences": [ + { + "url": "https://github.com/cli-table/cli-table3.git", + "type": "distribution" + }, + { + "url": "https://github.com/cli-table/cli-table3", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cliui@5.0.0?package-id=fc23b83417a19917", + "author": "Ben Coe ", + "name": "cliui", + "version": "5.0.0", + "description": "easily create complex multi-column command-line-interfaces", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cliui:cliui:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cliui@5.0.0", + "externalReferences": [ + { + "url": "http://github.com/yargs/cliui.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/clone@1.0.4?package-id=44b571b36478d30c", + "author": "Paul Vorbach (http://paul.vorba.ch/)", + "name": "clone", + "version": "1.0.4", + "description": "deep cloning of objects and arrays", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clone:clone:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/clone@1.0.4", + "externalReferences": [ + { + "url": "git://github.com/pvorb/node-clone.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cmd-shim@5.0.0?package-id=6701e31fdf422502", + "author": "GitHub Inc.", + "name": "cmd-shim", + "version": "5.0.0", + "description": "Used in npm for command line application support", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cmd-shim:cmd-shim:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cmd-shim@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/cmd-shim.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/code-point-at@1.1.0?package-id=3512fa99162e2014", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "code-point-at", + "version": "1.1.0", + "description": "ES2015 `String#codePointAt()` ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:code-point-at:code-point-at:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/code-point-at@1.1.0", + "externalReferences": [ + { + "url": "sindresorhus/code-point-at", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-convert@1.9.3?package-id=b59d318e978e5d66", + "author": "Heather Arthur ", + "name": "color-convert", + "version": "1.9.3", + "description": "Plain color conversion functions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:1.9.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@1.9.3", + "externalReferences": [ + { + "url": "Qix-/color-convert", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-convert@2.0.1?package-id=2be936aafe32cf82", + "author": "Heather Arthur ", + "name": "color-convert", + "version": "2.0.1", + "description": "Plain color conversion functions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@2.0.1", + "externalReferences": [ + { + "url": "Qix-/color-convert", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-name@1.1.3?package-id=21b65fb759f90e9b", + "author": "DY ", + "name": "color-name", + "version": "1.1.3", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.3", + "externalReferences": [ + { + "url": "git@github.com:dfcreative/color-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/dfcreative/color-name", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-name@1.1.4?package-id=b14fd2e37cdab40f", + "author": "DY ", + "name": "color-name", + "version": "1.1.4", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.4", + "externalReferences": [ + { + "url": "git@github.com:colorjs/color-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/colorjs/color-name", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-support@1.1.3?package-id=33c3f3c0dd43aff8", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "color-support", + "version": "1.1.3", + "description": "A module which will endeavor to guess your terminal's level of color support.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:color-support:color-support:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-support@1.1.3", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/color-support.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/columnify@1.6.0?package-id=fc90187aad4a6027", + "author": "Tim Oxley", + "name": "columnify", + "version": "1.6.0", + "description": "Render data in text columns. Supports in-column text-wrap.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:columnify:columnify:1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/columnify@1.6.0", + "externalReferences": [ + { + "url": "git://github.com/timoxley/columnify.git", + "type": "distribution" + }, + { + "url": "https://github.com/timoxley/columnify", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/combined-stream@1.0.8?package-id=868606bb12d293db", + "author": "Felix Geisendörfer (http://debuggable.com/)", + "name": "combined-stream", + "version": "1.0.8", + "description": "A stream that emits multiple other streams one after another.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:combined-stream:combined-stream:1.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/combined-stream@1.0.8", + "externalReferences": [ + { + "url": "git://github.com/felixge/node-combined-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/felixge/node-combined-stream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/common-ancestor-path@1.0.1?package-id=4296edf5ae5437c0", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "common-ancestor-path", + "version": "1.0.1", + "description": "Find the common ancestor of 2 or more paths on Windows or Unix", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:common-ancestor-path:common-ancestor-path:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/common-ancestor-path@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/common-ancestor-path", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=bdf14b65a5715b98", + "author": "James Halliday (http://substack.net)", + "name": "concat-map", + "version": "0.0.1", + "description": "concatenative mapdashery", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=c45208cf5ec4e0c1", + "author": "James Halliday (http://substack.net)", + "name": "concat-map", + "version": "0.0.1", + "description": "concatenative mapdashery", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/console-control-strings@1.1.0?package-id=f5b1c468fcf0a37a", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "console-control-strings", + "version": "1.1.0", + "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:console-control-strings:console-control-strings:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/console-control-strings@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/iarna/console-control-strings", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/console-control-strings@1.1.0?package-id=f1988658aefff76d", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "console-control-strings", + "version": "1.1.0", + "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:console-control-strings:console-control-strings:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/console-control-strings@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/iarna/console-control-strings", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/content-disposition@0.5.3?package-id=1e905051ff96d81d", + "author": "Douglas Christopher Wilson ", + "name": "content-disposition", + "version": "0.5.3", + "description": "Create and parse Content-Disposition header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:content-disposition:content-disposition:0.5.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/content-disposition@0.5.3", + "externalReferences": [ + { + "url": "jshttp/content-disposition", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/content-type@1.0.4?package-id=d344220e964f6e33", + "author": "Douglas Christopher Wilson ", + "name": "content-type", + "version": "1.0.4", + "description": "Create and parse HTTP Content-Type header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:content-type:content-type:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/content-type@1.0.4", + "externalReferences": [ + { + "url": "jshttp/content-type", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cookie@0.4.0?package-id=73a66864dec2ee22", + "author": "Roman Shtylman ", + "name": "cookie", + "version": "0.4.0", + "description": "HTTP server cookie parsing and serialization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie:cookie:0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie@0.4.0", + "externalReferences": [ + { + "url": "jshttp/cookie", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cookie-signature@1.0.6?package-id=679e26b17ad72290", + "author": "TJ Holowaychuk ", + "name": "cookie-signature", + "version": "1.0.6", + "description": "Sign and unsign cookies", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie-signature:cookie-signature:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie-signature@1.0.6", + "externalReferences": [ + { + "url": "https://github.com/visionmedia/node-cookie-signature.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/core-util-is@1.0.2?package-id=619d47a4e1417653", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "core-util-is", + "version": "1.0.2", + "description": "The `util.is*` functions introduced in Node v0.12.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:core-util-is:core-util-is:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/core-util-is@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/core-util-is", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/corepack@0.17.0?package-id=9d78c3bef9c05db3", + "name": "corepack", + "version": "0.17.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:corepack:corepack:0.17.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/corepack@0.17.0", + "externalReferences": [ + { + "url": "https://github.com/nodejs/corepack.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/corepack#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cross-spawn@7.0.3?package-id=68f286a9fc565c0b", + "author": "André Cruz ", + "name": "cross-spawn", + "version": "7.0.3", + "description": "Cross platform child_process#spawn and child_process#spawnSync", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cross-spawn:cross-spawn:7.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/cross-spawn@7.0.3", + "externalReferences": [ + { + "url": "git@github.com:moxystudio/node-cross-spawn.git", + "type": "distribution" + }, + { + "url": "https://github.com/moxystudio/node-cross-spawn", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cssesc@3.0.0?package-id=91a6a74efc4b88ba", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "cssesc", + "version": "3.0.0", + "description": "A JavaScript library for escaping CSS strings and identifiers while generating the shortest possible ASCII-only output.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mathiasbynens:cssesc:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cssesc@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/mathiasbynens/cssesc.git", + "type": "distribution" + }, + { + "url": "https://mths.be/cssesc", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dashdash@1.14.1?package-id=a7ca4af6d828a5a2", + "author": "Trent Mick (http://trentm.com)", + "name": "dashdash", + "version": "1.14.1", + "description": "A light, featureful and explicit option parsing library.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dashdash:dashdash:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/dashdash@1.14.1", + "externalReferences": [ + { + "url": "git://github.com/trentm/node-dashdash.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@2.6.9?package-id=189dbf0c8c397194", + "author": "TJ Holowaychuk ", + "name": "debug", + "version": "2.6.9", + "description": "small debugging utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:visionmedia:debug:2.6.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@2.6.9", + "externalReferences": [ + { + "url": "git://github.com/visionmedia/debug.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@4.3.4?package-id=744fe4d31961f128", + "author": "Josh Junon ", + "name": "debug", + "version": "4.3.4", + "description": "Lightweight debugging utility for Node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debug-js:debug:4.3.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@4.3.4", + "externalReferences": [ + { + "url": "git://github.com/debug-js/debug.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debuglog@1.0.1?package-id=de8cab91bb3727ee", + "author": "Sam Roberts ", + "name": "debuglog", + "version": "1.0.1", + "description": "backport of util.debuglog from node v0.11", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sam-github:debuglog:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/debuglog@1.0.1", + "externalReferences": [ + { + "url": "https://github.com/sam-github/node-debuglog.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/decamelize@1.2.0?package-id=ea04b30bc07ca72e", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "decamelize", + "version": "1.2.0", + "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decamelize:decamelize:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/decamelize@1.2.0", + "externalReferences": [ + { + "url": "sindresorhus/decamelize", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/decamelize-keys@1.1.1?package-id=4ef8653ed0679bb4", + "author": "Sindre Sorhus (http://sindresorhus.com)", + "name": "decamelize-keys", + "version": "1.1.1", + "description": "Convert object keys from camelCase to lowercase with a custom separator", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decamelize-keys:decamelize-keys:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/decamelize-keys@1.1.1", + "externalReferences": [ + { + "url": "sindresorhus/decamelize-keys", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/defaults@1.0.3?package-id=539a687773af61fe", + "author": "Elijah Insua ", + "name": "defaults", + "version": "1.0.3", + "description": "merge single level defaults over a config object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:defaults:defaults:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/defaults@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/tmpvar/defaults.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/delayed-stream@1.0.0?package-id=2e87a018d352ff35", + "author": "Felix Geisendörfer (http://debuggable.com/)", + "name": "delayed-stream", + "version": "1.0.0", + "description": "Buffers events from a stream until you are ready to handle them.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:delayed-stream:delayed-stream:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/delayed-stream@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/felixge/node-delayed-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/felixge/node-delayed-stream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/delegates@1.0.0?package-id=ed0c22d60c260f5c", + "name": "delegates", + "version": "1.0.0", + "description": "delegate methods and accessors to another property", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:delegates:delegates:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/delegates@1.0.0", + "externalReferences": [ + { + "url": "visionmedia/node-delegates", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/delegates@1.0.0?package-id=82e18a186444f540", + "name": "delegates", + "version": "1.0.0", + "description": "delegate methods and accessors to another property", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:delegates:delegates:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/delegates@1.0.0", + "externalReferences": [ + { + "url": "visionmedia/node-delegates", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/depd@1.1.2?package-id=8f51ca0c72f74b81", + "author": "Douglas Christopher Wilson ", + "name": "depd", + "version": "1.1.2", + "description": "Deprecate all the things", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:depd:depd:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/depd@1.1.2", + "externalReferences": [ + { + "url": "dougwilson/nodejs-depd", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/depd@1.1.2?package-id=88f59320de2b0d4a", + "author": "Douglas Christopher Wilson ", + "name": "depd", + "version": "1.1.2", + "description": "Deprecate all the things", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:depd:depd:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/depd@1.1.2", + "externalReferences": [ + { + "url": "dougwilson/nodejs-depd", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/destroy@1.0.4?package-id=7a46d2c188b90042", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "destroy", + "version": "1.0.4", + "description": "destroy a stream if possible", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:destroy:destroy:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/destroy@1.0.4", + "externalReferences": [ + { + "url": "stream-utils/destroy", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dezalgo@1.0.4?package-id=d8ccca0e738815bf", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "dezalgo", + "version": "1.0.4", + "description": "Contain async insanity so that the dark pony lord doesn't eat souls", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:dezalgo:dezalgo:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/dezalgo@1.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/dezalgo", + "type": "distribution" + }, + { + "url": "https://github.com/npm/dezalgo", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/diff@5.1.0?package-id=d6e2c2128602c71d", + "name": "diff", + "version": "5.1.0", + "description": "A javascript text diff implementation.", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:kpdecker:diff:5.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/diff@5.1.0", + "externalReferences": [ + { + "url": "git://github.com/kpdecker/jsdiff.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ecc-jsbn@0.1.2?package-id=281a10dc51f85ca9", + "author": "Jeremie Miller (http://jeremie.com/)", + "name": "ecc-jsbn", + "version": "0.1.2", + "description": "ECC JS code based on JSBN", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:quartzjer:ecc-jsbn:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ecc-jsbn@0.1.2", + "externalReferences": [ + { + "url": "https://github.com/quartzjer/ecc-jsbn.git", + "type": "distribution" + }, + { + "url": "https://github.com/quartzjer/ecc-jsbn", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ee-first@1.1.1?package-id=e237c873e14ffd47", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "ee-first", + "version": "1.1.1", + "description": "return the first event in a set of ee/event pairs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ee-first:ee-first:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ee-first@1.1.1", + "externalReferences": [ + { + "url": "jonathanong/ee-first", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/emoji-regex@7.0.3?package-id=4161e2e73378d2aa", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "emoji-regex", + "version": "7.0.3", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mathiasbynens:emoji-regex:7.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/emoji-regex@7.0.3", + "externalReferences": [ + { + "url": "https://github.com/mathiasbynens/emoji-regex.git", + "type": "distribution" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/emoji-regex@8.0.0?package-id=6bb38678688ed46f", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "emoji-regex", + "version": "8.0.0", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mathiasbynens:emoji-regex:8.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/emoji-regex@8.0.0", + "externalReferences": [ + { + "url": "https://github.com/mathiasbynens/emoji-regex.git", + "type": "distribution" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/encodeurl@1.0.2?package-id=ca5122f9d292a60f", + "name": "encodeurl", + "version": "1.0.2", + "description": "Encode a URL to a percent-encoded form, excluding already-encoded sequences", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:encodeurl:encodeurl:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/encodeurl@1.0.2", + "externalReferences": [ + { + "url": "pillarjs/encodeurl", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/encoding@0.1.13?package-id=e65b6a429cd40212", + "author": "Andris Reinman", + "name": "encoding", + "version": "0.1.13", + "description": "Convert encodings, uses iconv-lite", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:encoding:encoding:0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/encoding@0.1.13", + "externalReferences": [ + { + "url": "https://github.com/andris9/encoding.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/env-paths@2.2.1?package-id=d14634fe75802cac", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "env-paths", + "version": "2.2.1", + "description": "Get paths for storing things like data, config, cache, etc", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:env-paths:env-paths:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/env-paths@2.2.1", + "externalReferences": [ + { + "url": "sindresorhus/env-paths", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/env-paths@2.2.1?package-id=a40344c1c9f3ec9", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "env-paths", + "version": "2.2.1", + "description": "Get paths for storing things like data, config, cache, etc", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:env-paths:env-paths:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/env-paths@2.2.1", + "externalReferences": [ + { + "url": "sindresorhus/env-paths", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/err-code@2.0.3?package-id=60b62094686938a4", + "author": "IndigoUnited (http://indigounited.com)", + "name": "err-code", + "version": "2.0.3", + "description": "Create an error with a code", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:IndigoUnited:err-code:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/err-code@2.0.3", + "externalReferences": [ + { + "url": "git://github.com/IndigoUnited/js-err-code.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/error-ex@1.3.2?package-id=165ddbb0fda57ed3", + "name": "error-ex", + "version": "1.3.2", + "description": "Easy error subclassing and stack customization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:error-ex:error-ex:1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/error-ex@1.3.2", + "externalReferences": [ + { + "url": "qix-/node-error-ex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/escape-html@1.0.3?package-id=29b06dd1d0ba635a", + "name": "escape-html", + "version": "1.0.3", + "description": "Escape string for use in HTML", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:escape-html:escape-html:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/escape-html@1.0.3", + "externalReferences": [ + { + "url": "component/escape-html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/escape-string-regexp@1.0.5?package-id=25bd30cd97ed1bdf", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "escape-string-regexp", + "version": "1.0.5", + "description": "Escape RegExp special characters", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:escape-string-regexp:escape-string-regexp:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/escape-string-regexp@1.0.5", + "externalReferences": [ + { + "url": "sindresorhus/escape-string-regexp", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/etag@1.8.1?package-id=9151d174424b86ef", + "name": "etag", + "version": "1.8.1", + "description": "Create simple HTTP ETags", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:etag:etag:1.8.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/etag@1.8.1", + "externalReferences": [ + { + "url": "jshttp/etag", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/express@4.17.1?package-id=8df8a39c19cb2192", + "author": "TJ Holowaychuk ", + "name": "express", + "version": "4.17.1", + "description": "Fast, unopinionated, minimalist web framework", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:express:express:4.17.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/express@4.17.1", + "externalReferences": [ + { + "url": "expressjs/express", + "type": "distribution" + }, + { + "url": "http://expressjs.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/extend@3.0.2?package-id=ac3f1ce155e9acb0", + "author": "Stefan Thomas (http://www.justmoon.net)", + "name": "extend", + "version": "3.0.2", + "description": "Port of jQuery.extend for node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:justmoon:extend:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/extend@3.0.2", + "externalReferences": [ + { + "url": "https://github.com/justmoon/node-extend.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/extsprintf@1.3.0?package-id=e1ddb770c979f4c3", + "name": "extsprintf", + "version": "1.3.0", + "description": "extended POSIX-style sprintf", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:davepacheco:extsprintf:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/extsprintf@1.3.0", + "externalReferences": [ + { + "url": "git://github.com/davepacheco/node-extsprintf.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-deep-equal@3.1.3?package-id=8b9d45ccd3ca33c0", + "author": "Evgeny Poberezkin", + "name": "fast-deep-equal", + "version": "3.1.3", + "description": "Fast deep equal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-deep-equal:fast-deep-equal:3.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-deep-equal@3.1.3", + "externalReferences": [ + { + "url": "git+https://github.com/epoberezkin/fast-deep-equal.git", + "type": "distribution" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-json-stable-stringify@2.1.0?package-id=9e19806bed3935c1", + "author": "James Halliday (http://substack.net)", + "name": "fast-json-stable-stringify", + "version": "2.1.0", + "description": "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-json-stable-stringify:fast-json-stable-stringify:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-json-stable-stringify@2.1.0", + "externalReferences": [ + { + "url": "git://github.com/epoberezkin/fast-json-stable-stringify.git", + "type": "distribution" + }, + { + "url": "https://github.com/epoberezkin/fast-json-stable-stringify", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fastest-levenshtein@1.0.12?package-id=f703cf6832613e31", + "author": "Kasper U. Weihe", + "name": "fastest-levenshtein", + "version": "1.0.12", + "description": "Fastest Levenshtein distance implementation in JS.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fastest-levenshtein:fastest-levenshtein:1.0.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/fastest-levenshtein@1.0.12", + "externalReferences": [ + { + "url": "git+https://github.com/ka-weihe/fastest-levenshtein.git", + "type": "distribution" + }, + { + "url": "https://github.com/ka-weihe/fastest-levenshtein#README", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/finalhandler@1.1.2?package-id=7ddac0b926b41ecd", + "author": "Douglas Christopher Wilson ", + "name": "finalhandler", + "version": "1.1.2", + "description": "Node.js final http responder", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:finalhandler:finalhandler:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/finalhandler@1.1.2", + "externalReferences": [ + { + "url": "pillarjs/finalhandler", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/find-parent-dir@0.3.0?package-id=5530a908a83772cf", + "author": "Thorsten Lorenz (http://thlorenz.com)", + "name": "find-parent-dir", + "version": "0.3.0", + "description": "Finds the first parent directory that contains a given file or directory.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:find-parent-dir:find-parent-dir:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/find-parent-dir@0.3.0", + "externalReferences": [ + { + "url": "git://github.com/thlorenz/find-parent-dir.git", + "type": "distribution" + }, + { + "url": "https://github.com/thlorenz/find-parent-dir", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/find-up@3.0.0?package-id=b2c52ba40870e6f8", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "find-up", + "version": "3.0.0", + "description": "Find a file or directory by walking up parent directories", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:find-up:find-up:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/find-up@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/find-up", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/find-up@4.1.0?package-id=5375fdd0e5ee58cb", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "find-up", + "version": "4.1.0", + "description": "Find a file or directory by walking up parent directories", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:find-up:find-up:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/find-up@4.1.0", + "externalReferences": [ + { + "url": "sindresorhus/find-up", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/forever-agent@0.6.1?package-id=987c799490a62745", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "forever-agent", + "version": "0.6.1", + "description": "HTTP Agent that keeps socket connections alive between keep-alive requests. Formerly part of mikeal/request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:forever-agent:forever-agent:0.6.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/forever-agent@0.6.1", + "externalReferences": [ + { + "url": "https://github.com/mikeal/forever-agent", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/form-data@2.3.3?package-id=901e4c8507a70298", + "author": "Felix Geisendörfer (http://debuggable.com/)", + "name": "form-data", + "version": "2.3.3", + "description": "A library to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:form-data:form-data:2.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/form-data@2.3.3", + "externalReferences": [ + { + "url": "git://github.com/form-data/form-data.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/forwarded@0.1.2?package-id=d96391915b25acbf", + "name": "forwarded", + "version": "0.1.2", + "description": "Parse HTTP X-Forwarded-For header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:forwarded:forwarded:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/forwarded@0.1.2", + "externalReferences": [ + { + "url": "jshttp/forwarded", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fresh@0.5.2?package-id=7080d1485688188f", + "author": "TJ Holowaychuk (http://tjholowaychuk.com)", + "name": "fresh", + "version": "0.5.2", + "description": "HTTP response freshness testing", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fresh:fresh:0.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/fresh@0.5.2", + "externalReferences": [ + { + "url": "jshttp/fresh", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-extra@8.0.1?package-id=867e78ed80c61e36", + "author": "JP Richardson ", + "name": "fs-extra", + "version": "8.0.1", + "description": "fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as mkdir -p, cp -r, and rm -rf.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jprichardson:fs-extra:8.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-extra@8.0.1", + "externalReferences": [ + { + "url": "https://github.com/jprichardson/node-fs-extra", + "type": "distribution" + }, + { + "url": "https://github.com/jprichardson/node-fs-extra", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-minipass@2.1.0?package-id=398fbbb28fb7e1f4", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs-minipass", + "version": "2.1.0", + "description": "fs read and write streams based on minipass", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-minipass@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-minipass@2.1.0?package-id=f1b7ae0257cf54f0", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs-minipass", + "version": "2.1.0", + "description": "fs read and write streams based on minipass", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-minipass@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=21800424481533b1", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs.realpath", + "version": "1.0.0", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=65729748c227165e", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs.realpath", + "version": "1.0.0", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/function-bind@1.1.1?package-id=44648bf09db15f6c", + "author": "Raynos ", + "name": "function-bind", + "version": "1.1.1", + "description": "Implementation of Function.prototype.bind", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:function-bind:function-bind:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/function-bind@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/Raynos/function-bind.git", + "type": "distribution" + }, + { + "url": "https://github.com/Raynos/function-bind", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/function-bind@1.1.1?package-id=7bd79c8f88820292", + "author": "Raynos ", + "name": "function-bind", + "version": "1.1.1", + "description": "Implementation of Function.prototype.bind", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:function-bind:function-bind:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/function-bind@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/Raynos/function-bind.git", + "type": "distribution" + }, + { + "url": "https://github.com/Raynos/function-bind", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/gauge@2.7.4?package-id=e3560fb3e9d7712d", + "author": "Rebecca Turner ", + "name": "gauge", + "version": "2.7.4", + "description": "A terminal based horizontal guage", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:gauge:gauge:2.7.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/gauge@2.7.4", + "externalReferences": [ + { + "url": "https://github.com/iarna/gauge", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/gauge", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/gauge@4.0.4?package-id=fc4632a6e143d550", + "author": "GitHub Inc.", + "name": "gauge", + "version": "4.0.4", + "description": "A terminal based horizontal gauge", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:gauge:gauge:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/gauge@4.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/gauge.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/gauge", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/gaze@1.1.3?package-id=37239de1e454afe5", + "author": "Kyle Robinson Young ", + "name": "gaze", + "version": "1.1.3", + "description": "A globbing fs.watch wrapper built from the best parts of other fine watch libs.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shama:gaze:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/gaze@1.1.3", + "externalReferences": [ + { + "url": "https://github.com/shama/gaze.git", + "type": "distribution" + }, + { + "url": "https://github.com/shama/gaze", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-caller-file@2.0.5?package-id=4b23483947ffc7ae", + "author": "Stefan Penner", + "name": "get-caller-file", + "version": "2.0.5", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:get-caller-file:get-caller-file:2.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-caller-file@2.0.5", + "externalReferences": [ + { + "url": "git+https://github.com/stefanpenner/get-caller-file.git", + "type": "distribution" + }, + { + "url": "https://github.com/stefanpenner/get-caller-file#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-stdin@4.0.1?package-id=9fd981ecaeefe3b7", + "author": "Sindre Sorhus (http://sindresorhus.com)", + "name": "get-stdin", + "version": "4.0.1", + "description": "Easier stdin", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:get-stdin:get-stdin:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-stdin@4.0.1", + "externalReferences": [ + { + "url": "sindresorhus/get-stdin", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/getpass@0.1.7?package-id=75c291a71588a422", + "author": "Alex Wilson ", + "name": "getpass", + "version": "0.1.7", + "description": "getpass for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:arekinath:getpass:0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/getpass@0.1.7", + "externalReferences": [ + { + "url": "https://github.com/arekinath/node-getpass.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.1.7?package-id=2469a5ca066ad1d7", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.1.7", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.1.7", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.2.3?package-id=b961e222f6e54786", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.2.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.2.3?package-id=37af2473a85a6fa0", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.2.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.2.3?package-id=27f74d4e19b8aa02", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.2.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@8.0.3?package-id=f9282babaa70cabf", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "8.0.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:8.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@8.0.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/globule@1.3.4?package-id=ea81e98ac969d65d", + "author": "\"Cowboy\" Ben Alman (http://benalman.com/)", + "name": "globule", + "version": "1.3.4", + "description": "An easy-to-use wildcard globbing library.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:globule:globule:1.3.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/globule@1.3.4", + "externalReferences": [ + { + "url": "git://github.com/cowboy/node-globule.git", + "type": "distribution" + }, + { + "url": "https://github.com/cowboy/node-globule", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/graceful-fs@4.2.10?package-id=9591c6b5bd9602cc", + "name": "graceful-fs", + "version": "4.2.10", + "description": "A drop-in replacement for fs, making various improvements.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/graceful-fs@4.2.10", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-graceful-fs", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/graceful-fs@4.2.11?package-id=bef9b71aa253a928", + "name": "graceful-fs", + "version": "4.2.11", + "description": "A drop-in replacement for fs, making various improvements.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/graceful-fs@4.2.11", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-graceful-fs", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/hammerjs@2.0.8?package-id=4beb41d0a101c05a", + "author": "Jorik Tangelder ", + "name": "hammerjs", + "version": "2.0.8", + "description": "A javascript library for multi-touch gestures", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hammerjs:hammerjs:2.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/hammerjs@2.0.8", + "externalReferences": [ + { + "url": "git://github.com/hammerjs/hammer.js.git", + "type": "distribution" + }, + { + "url": "http://hammerjs.github.io/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/har-schema@2.0.0?package-id=4dcd539e47ce1819", + "author": "Ahmad Nassri (https://www.ahmadnassri.com/)", + "name": "har-schema", + "version": "2.0.0", + "description": "JSON Schema for HTTP Archive (HAR)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ahmadnassri:har-schema:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/har-schema@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/ahmadnassri/har-schema.git", + "type": "distribution" + }, + { + "url": "https://github.com/ahmadnassri/har-schema", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/har-validator@5.1.5?package-id=d992c94a0553947c", + "author": "Ahmad Nassri (https://www.ahmadnassri.com/)", + "name": "har-validator", + "version": "5.1.5", + "description": "Extremely fast HTTP Archive (HAR) validator using JSON Schema", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:har-validator:har-validator:5.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/har-validator@5.1.5", + "externalReferences": [ + { + "url": "https://github.com/ahmadnassri/node-har-validator.git", + "type": "distribution" + }, + { + "url": "https://github.com/ahmadnassri/node-har-validator", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/hard-rejection@2.1.0?package-id=7dd0883a3751ad07", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "hard-rejection", + "version": "2.1.0", + "description": "Make unhandled promise rejections fail hard right away instead of the default silent fail", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hard-rejection:hard-rejection:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/hard-rejection@2.1.0", + "externalReferences": [ + { + "url": "sindresorhus/hard-rejection", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has@1.0.3?package-id=57072cf8ae347274", + "author": "Thiago de Arruda ", + "name": "has", + "version": "1.0.3", + "description": "Object.prototype.hasOwnProperty.call shortcut", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tarruda:has:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/has@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/tarruda/has.git", + "type": "distribution" + }, + { + "url": "https://github.com/tarruda/has", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has@1.0.3?package-id=63cdb16663093af0", + "author": "Thiago de Arruda ", + "name": "has", + "version": "1.0.3", + "description": "Object.prototype.hasOwnProperty.call shortcut", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tarruda:has:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/has@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/tarruda/has.git", + "type": "distribution" + }, + { + "url": "https://github.com/tarruda/has", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-ansi@2.0.0?package-id=3a6add928c31a3bb", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "has-ansi", + "version": "2.0.0", + "description": "Check if a string has ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-ansi:has-ansi:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-ansi@2.0.0", + "externalReferences": [ + { + "url": "sindresorhus/has-ansi", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-flag@3.0.0?package-id=827f03d0a0fb3972", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "has-flag", + "version": "3.0.0", + "description": "Check if argv has a specific flag", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-flag:has-flag:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-flag@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/has-flag", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-flag@4.0.0?package-id=1ac717b55f99f4f2", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "has-flag", + "version": "4.0.0", + "description": "Check if argv has a specific flag", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-flag:has-flag:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-flag@4.0.0", + "externalReferences": [ + { + "url": "sindresorhus/has-flag", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-unicode@2.0.1?package-id=28dbbd6e7951181f", + "author": "Rebecca Turner ", + "name": "has-unicode", + "version": "2.0.1", + "description": "Try to guess if your terminal supports unicode", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:has-unicode:has-unicode:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-unicode@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/iarna/has-unicode", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/has-unicode", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-unicode@2.0.1?package-id=5faeeaf9daab02cc", + "author": "Rebecca Turner ", + "name": "has-unicode", + "version": "2.0.1", + "description": "Try to guess if your terminal supports unicode", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:has-unicode:has-unicode:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-unicode@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/iarna/has-unicode", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/has-unicode", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/hosted-git-info@2.8.9?package-id=56651d3dbc838027", + "author": "Rebecca Turner (http://re-becca.org)", + "name": "hosted-git-info", + "version": "2.8.9", + "description": "Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:hosted-git-info:hosted-git-info:2.8.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/hosted-git-info@2.8.9", + "externalReferences": [ + { + "url": "git+https://github.com/npm/hosted-git-info.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/hosted-git-info", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/hosted-git-info@4.1.0?package-id=89797d3e01db5f5f", + "author": "Rebecca Turner (http://re-becca.org)", + "name": "hosted-git-info", + "version": "4.1.0", + "description": "Provides metadata and conversions from repository urls for GitHub, Bitbucket and GitLab", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:hosted-git-info:hosted-git-info:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/hosted-git-info@4.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/hosted-git-info.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/hosted-git-info", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/hosted-git-info@5.2.1?package-id=daac03af08cd11f6", + "author": "GitHub Inc.", + "name": "hosted-git-info", + "version": "5.2.1", + "description": "Provides metadata and conversions from repository urls for GitHub, Bitbucket and GitLab", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:hosted-git-info:hosted-git-info:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/hosted-git-info@5.2.1", + "externalReferences": [ + { + "url": "https://github.com/npm/hosted-git-info.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/hosted-git-info", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-cache-semantics@4.1.1?package-id=916aa3ebe914a835", + "author": "Kornel Lesiński (https://kornel.ski/)", + "name": "http-cache-semantics", + "version": "4.1.1", + "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:http-cache-semantics:http-cache-semantics:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-cache-semantics@4.1.1", + "externalReferences": [ + { + "url": "https://github.com/kornelski/http-cache-semantics.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-errors@1.7.2?package-id=d5bb7c99a838d2db", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "http-errors", + "version": "1.7.2", + "description": "Create HTTP error objects", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-errors:http-errors:1.7.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-errors@1.7.2", + "externalReferences": [ + { + "url": "jshttp/http-errors", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-proxy-agent@5.0.0?package-id=af3d467415b1e643", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "http-proxy-agent", + "version": "5.0.0", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-proxy-agent:http-proxy-agent:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-proxy-agent@5.0.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-http-proxy-agent.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-signature@1.2.0?package-id=b566cae888becf5d", + "author": "Joyent, Inc", + "name": "http-signature", + "version": "1.2.0", + "description": "Reference implementation of Joyent's HTTP Signature scheme.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-signature:http-signature:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-signature@1.2.0", + "externalReferences": [ + { + "url": "git://github.com/joyent/node-http-signature.git", + "type": "distribution" + }, + { + "url": "https://github.com/joyent/node-http-signature/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/https-proxy-agent@5.0.1?package-id=b2694aac4dc305de", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "https-proxy-agent", + "version": "5.0.1", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:https-proxy-agent:https-proxy-agent:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/https-proxy-agent@5.0.1", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-https-proxy-agent.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/humanize-ms@1.2.1?package-id=d773c44dd2f9a86d", + "author": "dead-horse (http://deadhorse.me)", + "name": "humanize-ms", + "version": "1.2.1", + "description": "transform humanize time to ms", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-modules:humanize-ms:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/humanize-ms@1.2.1", + "externalReferences": [ + { + "url": "https://github.com/node-modules/humanize-ms", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iconv-lite@0.4.24?package-id=a2f86b03a2bcafd9", + "author": "Alexander Shtuchkin ", + "name": "iconv-lite", + "version": "0.4.24", + "description": "Convert character encodings in pure javascript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.4.24:*:*:*:*:*:*:*", + "purl": "pkg:npm/iconv-lite@0.4.24", + "externalReferences": [ + { + "url": "git://github.com/ashtuchkin/iconv-lite.git", + "type": "distribution" + }, + { + "url": "https://github.com/ashtuchkin/iconv-lite", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iconv-lite@0.6.3?package-id=fc4965fa5a86a9c9", + "author": "Alexander Shtuchkin ", + "name": "iconv-lite", + "version": "0.6.3", + "description": "Convert character encodings in pure javascript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/iconv-lite@0.6.3", + "externalReferences": [ + { + "url": "git://github.com/ashtuchkin/iconv-lite.git", + "type": "distribution" + }, + { + "url": "https://github.com/ashtuchkin/iconv-lite", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/igniteui-angular@9.0.3?package-id=cb97323e55cf687a", + "author": "Infragistics", + "name": "igniteui-angular", + "version": "9.0.3", + "description": "Ignite UI for Angular is a dependency-free Angular toolkit for building modern web apps", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:igniteui-angular:igniteui-angular:9.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/igniteui-angular@9.0.3", + "externalReferences": [ + { + "url": "https://github.com/IgniteUI/igniteui-angular", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ignore-walk@5.0.1?package-id=39d6166153eb8a8", + "author": "GitHub Inc.", + "name": "ignore-walk", + "version": "5.0.1", + "description": "Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ignore-walk:ignore-walk:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ignore-walk@5.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/ignore-walk.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/immediate@3.0.6?package-id=d2e401a8568285e0", + "name": "immediate", + "version": "3.0.6", + "description": "A cross browser microtask library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:calvinmetcalf:immediate:3.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/immediate@3.0.6", + "externalReferences": [ + { + "url": "git://github.com/calvinmetcalf/immediate.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/imurmurhash@0.1.4?package-id=6444b4b295dc6bb1", + "author": "Jens Taylor (https://github.com/homebrewing)", + "name": "imurmurhash", + "version": "0.1.4", + "description": "An incremental implementation of MurmurHash3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:imurmurhash:imurmurhash:0.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/imurmurhash@0.1.4", + "externalReferences": [ + { + "url": "https://github.com/jensyt/imurmurhash-js", + "type": "distribution" + }, + { + "url": "https://github.com/jensyt/imurmurhash-js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/indent-string@4.0.0?package-id=9c9aada4281114e7", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "indent-string", + "version": "4.0.0", + "description": "Indent each line in a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indent-string:indent-string:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/indent-string@4.0.0", + "externalReferences": [ + { + "url": "sindresorhus/indent-string", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/indent-string@4.0.0?package-id=221cbf992506c9b0", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "indent-string", + "version": "4.0.0", + "description": "Indent each line in a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indent-string:indent-string:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/indent-string@4.0.0", + "externalReferences": [ + { + "url": "sindresorhus/indent-string", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/infer-owner@1.0.4?package-id=70041214f8f231ae", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "infer-owner", + "version": "1.0.4", + "description": "Infer the owner of a path based on the owner of its nearest existing parent", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:infer-owner:infer-owner:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/infer-owner@1.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/infer-owner", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inflight@1.0.6?package-id=59c3c8a2d2437082", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "inflight", + "version": "1.0.6", + "description": "Add callbacks to requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "https://github.com/npm/inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inflight@1.0.6?package-id=f9bd5cf95258dad4", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "inflight", + "version": "1.0.6", + "description": "Add callbacks to requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "https://github.com/npm/inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.3?package-id=1bb44148e405c144", + "name": "inherits", + "version": "2.0.3", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/inherits", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.4?package-id=2aa76eeeb4a32e94", + "name": "inherits", + "version": "2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/inherits", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ini@3.0.1?package-id=143d409d5161792", + "author": "GitHub Inc.", + "name": "ini", + "version": "3.0.1", + "description": "An ini encoder/decoder for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ini:ini:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ini@3.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/ini.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/init-package-json@3.0.2?package-id=6836db1e46d935b6", + "author": "GitHub Inc.", + "name": "init-package-json", + "version": "3.0.2", + "description": "A node module to get your node module started", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:init-package-json:init-package-json:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/init-package-json@3.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/init-package-json.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ip@2.0.0?package-id=218d1c05ea387b3c", + "author": "Fedor Indutny ", + "name": "ip", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indutny:ip:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ip@2.0.0", + "externalReferences": [ + { + "url": "http://github.com/indutny/node-ip.git", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/node-ip", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ip-regex@4.3.0?package-id=ce63365b733beafc", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ip-regex", + "version": "4.3.0", + "description": "Regular expression for matching IP addresses (IPv4 & IPv6)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ip-regex:ip-regex:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ip-regex@4.3.0", + "externalReferences": [ + { + "url": "sindresorhus/ip-regex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ipaddr.js@1.9.0?package-id=edfe0b7d113597f2", + "author": "whitequark ", + "name": "ipaddr.js", + "version": "1.9.0", + "description": "A library for manipulating IPv4 and IPv6 addresses in JavaScript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:whitequark:ipaddr.js:1.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ipaddr.js@1.9.0", + "externalReferences": [ + { + "url": "git://github.com/whitequark/ipaddr.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-arrayish@0.2.1?package-id=5651b9aea93d51b0", + "author": "Qix (http://github.com/qix-)", + "name": "is-arrayish", + "version": "0.2.1", + "description": "Determines if an object can be used as an array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-arrayish:is-arrayish:0.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-arrayish@0.2.1", + "externalReferences": [ + { + "url": "https://github.com/qix-/node-is-arrayish.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-cidr@4.0.2?package-id=b7267695f8ce1238", + "author": "silverwind ", + "name": "is-cidr", + "version": "4.0.2", + "description": "Check if a string is an IP address in CIDR notation", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:is-cidr:is-cidr:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-cidr@4.0.2", + "externalReferences": [ + { + "url": "silverwind/is-cidr", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-core-module@2.10.0?package-id=22642820ec847015", + "author": "Jordan Harband ", + "name": "is-core-module", + "version": "2.10.0", + "description": "Is this specifier a node.js core module?", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-core-module:is-core-module:2.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-core-module@2.10.0", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/is-core-module.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/is-core-module", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-core-module@2.11.0?package-id=8daa8eea83313492", + "author": "Jordan Harband ", + "name": "is-core-module", + "version": "2.11.0", + "description": "Is this specifier a node.js core module?", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-core-module:is-core-module:2.11.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-core-module@2.11.0", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/is-core-module.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/is-core-module", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@1.0.0?package-id=539aa617ed9058c3", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "1.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@1.0.0", + "externalReferences": [ + { + "url": "sindresorhus/is-fullwidth-code-point", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0?package-id=420b1651620a4233", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "2.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@2.0.0", + "externalReferences": [ + { + "url": "sindresorhus/is-fullwidth-code-point", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0?package-id=66b7dca169e5b9bc", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "2.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@2.0.0", + "externalReferences": [ + { + "url": "sindresorhus/is-fullwidth-code-point", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0?package-id=47feb179d49d95da", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "2.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@2.0.0", + "externalReferences": [ + { + "url": "sindresorhus/is-fullwidth-code-point", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0?package-id=f89f6ce8e80b50d", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/is-fullwidth-code-point", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-lambda@1.0.1?package-id=841af64487227951", + "author": "Thomas Watson Steen (https://twitter.com/wa7son)", + "name": "is-lambda", + "version": "1.0.1", + "description": "Detect if your code is running on an AWS Lambda server", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-lambda:is-lambda:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-lambda@1.0.1", + "externalReferences": [ + { + "url": "https://github.com/watson/is-lambda.git", + "type": "distribution" + }, + { + "url": "https://github.com/watson/is-lambda", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-plain-obj@1.1.0?package-id=2b5099a344c93333", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-plain-obj", + "version": "1.1.0", + "description": "Check if a value is a plain object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-plain-obj:is-plain-obj:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-plain-obj@1.1.0", + "externalReferences": [ + { + "url": "sindresorhus/is-plain-obj", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-typedarray@1.0.0?package-id=7c7a7687a151a58f", + "author": "Hugh Kennedy (http://hughsk.io/)", + "name": "is-typedarray", + "version": "1.0.0", + "description": "Detect whether or not an object is a Typed Array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-typedarray:is-typedarray:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-typedarray@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/hughsk/is-typedarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/hughsk/is-typedarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isarray@1.0.0?package-id=91eedced5ea0d9f4", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "isarray", + "version": "1.0.0", + "description": "Array#isArray for older browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juliangruber:isarray:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isarray@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/isarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/isarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isexe@2.0.0?package-id=cac2857ecac9cad9", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "isexe", + "version": "2.0.0", + "description": "Minimal module to check if a file is executable.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:isexe:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isexe@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/isexe.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/isexe#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isexe@2.0.0?package-id=2f3fac93ebc9c581", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "isexe", + "version": "2.0.0", + "description": "Minimal module to check if a file is executable.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:isexe:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isexe@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/isexe.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/isexe#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isstream@0.1.2?package-id=60627e35aae479e", + "author": "Rod Vagg ", + "name": "isstream", + "version": "0.1.2", + "description": "Determine if an object is a Stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isstream:isstream:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/isstream@0.1.2", + "externalReferences": [ + { + "url": "https://github.com/rvagg/isstream.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/isstream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/js-base64@2.6.4?package-id=12a669467e5301e", + "author": "Dan Kogai", + "name": "js-base64", + "version": "2.6.4", + "description": "Yet another Base64 transcoder in pure-JS", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:js-base64:js-base64:2.6.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/js-base64@2.6.4", + "externalReferences": [ + { + "url": "git://github.com/dankogai/js-base64.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/js-tokens@4.0.0?package-id=7ba661b8c7568cc4", + "author": "Simon Lydell", + "name": "js-tokens", + "version": "4.0.0", + "description": "A regex that tokenizes JavaScript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:js-tokens:js-tokens:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/js-tokens@4.0.0", + "externalReferences": [ + { + "url": "lydell/js-tokens", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsbn@0.1.1?package-id=f3ac3ad288be4178", + "author": "Tom Wu", + "name": "jsbn", + "version": "0.1.1", + "description": "The jsbn library is a fast, portable implementation of large-number math in pure JavaScript, enabling public-key crypto and other applications on desktop and mobile browsers.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:andyperlitch:jsbn:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsbn@0.1.1", + "externalReferences": [ + { + "url": "https://github.com/andyperlitch/jsbn.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-parse-even-better-errors@2.3.1?package-id=abf07f33abe9247b", + "author": "Kat Marchán ", + "name": "json-parse-even-better-errors", + "version": "2.3.1", + "description": "JSON.parse with context information on error", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-parse-even-better-errors:json-parse-even-better-errors:2.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-parse-even-better-errors@2.3.1", + "externalReferences": [ + { + "url": "https://github.com/npm/json-parse-even-better-errors", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-parse-even-better-errors@2.3.1?package-id=f2d336434bd86052", + "author": "Kat Marchán ", + "name": "json-parse-even-better-errors", + "version": "2.3.1", + "description": "JSON.parse with context information on error", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-parse-even-better-errors:json-parse-even-better-errors:2.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-parse-even-better-errors@2.3.1", + "externalReferences": [ + { + "url": "https://github.com/npm/json-parse-even-better-errors", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema@0.4.0?package-id=f6da4a26d6afa2e4", + "author": "Kris Zyp", + "name": "json-schema", + "version": "0.4.0", + "description": "JSON Schema validation and specifications", + "licenses": [ + { + "license": { + "name": "(AFL-2.1 OR BSD-3-Clause)" + } + } + ], + "cpe": "cpe:2.3:a:json-schema:json-schema:0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema@0.4.0", + "externalReferences": [ + { + "url": "http://github.com/kriszyp/json-schema", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema-traverse@0.4.1?package-id=3b5dfc07da3fba89", + "author": "Evgeny Poberezkin", + "name": "json-schema-traverse", + "version": "0.4.1", + "description": "Traverse JSON Schema passing each schema object to callback", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-schema-traverse:json-schema-traverse:0.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema-traverse@0.4.1", + "externalReferences": [ + { + "url": "git+https://github.com/epoberezkin/json-schema-traverse.git", + "type": "distribution" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-stringify-nice@1.1.4?package-id=e53e3b4efad53e7c", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "json-stringify-nice", + "version": "1.1.4", + "description": "Stringify an object sorting scalars before objects, and defaulting to 2-space indent", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:json-stringify-nice:json-stringify-nice:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-stringify-nice@1.1.4", + "externalReferences": [ + { + "url": "https://github.com/isaacs/json-stringify-nice", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-stringify-safe@5.0.1?package-id=f6bc9b393e0af00f", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "json-stringify-safe", + "version": "5.0.1", + "description": "Like JSON.stringify, but doesn't blow up on circular refs.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:json-stringify-safe:json-stringify-safe:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-stringify-safe@5.0.1", + "externalReferences": [ + { + "url": "git://github.com/isaacs/json-stringify-safe", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/json-stringify-safe", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonfile@4.0.0?package-id=4cfeca6860892aa8", + "author": "JP Richardson ", + "name": "jsonfile", + "version": "4.0.0", + "description": "Easily read/write JSON files.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jsonfile:jsonfile:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonfile@4.0.0", + "externalReferences": [ + { + "url": "git@github.com:jprichardson/node-jsonfile.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonparse@1.3.1?package-id=4ac9c9dc14c89718", + "author": "Tim Caswell ", + "name": "jsonparse", + "version": "1.3.1", + "description": "This is a pure-js JSON streaming parser for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:creationix:jsonparse:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonparse@1.3.1", + "externalReferences": [ + { + "url": "http://github.com/creationix/jsonparse.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsprim@1.4.2?package-id=5cc587fdf3d16342", + "name": "jsprim", + "version": "1.4.2", + "description": "utilities for primitive JavaScript types", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:joyent:jsprim:1.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsprim@1.4.2", + "externalReferences": [ + { + "url": "git://github.com/joyent/node-jsprim.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jszip@3.2.2?package-id=c57d0869ae4da13f", + "author": "Stuart Knightley ", + "name": "jszip", + "version": "3.2.2", + "description": "Create, read and edit .zip files with JavaScript http://stuartk.com/jszip", + "licenses": [ + { + "license": { + "name": "(MIT OR GPL-3.0)" + } + } + ], + "cpe": "cpe:2.3:a:jszip:jszip:3.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/jszip@3.2.2", + "externalReferences": [ + { + "url": "https://github.com/Stuk/jszip.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/just-diff@5.1.1?package-id=ce66f628f594c549", + "author": "Angus Croll", + "name": "just-diff", + "version": "5.1.1", + "description": "Return an object representing the diffs between two objects. Supports jsonPatch protocol", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:just-diff:just-diff:5.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/just-diff@5.1.1", + "externalReferences": [ + { + "url": "https://github.com/angus-c/just", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/just-diff-apply@5.4.1?package-id=11dfc45c877cf5ba", + "author": "Angus Croll", + "name": "just-diff-apply", + "version": "5.4.1", + "description": "Apply a diff to an object. Optionally supports jsonPatch protocol", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:just-diff-apply:just-diff-apply:5.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/just-diff-apply@5.4.1", + "externalReferences": [ + { + "url": "https://github.com/angus-c/just", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/kind-of@6.0.3?package-id=a7344207303f4cfd", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "kind-of", + "version": "6.0.3", + "description": "Get the native type of a value.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:kind-of:6.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/kind-of@6.0.3", + "externalReferences": [ + { + "url": "jonschlinkert/kind-of", + "type": "distribution" + }, + { + "url": "https://github.com/jonschlinkert/kind-of", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.16.5&package-id=2abd3b45f6fa4702", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r3", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5&package-id=13bc051822a24e8d", + "publisher": "Timo Teras ", + "name": "libcrypto1.1", + "version": "1.1.1t-r2", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1t-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgcc@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5&package-id=d2886381f1e7cdb2", + "publisher": "Ariadne Conill ", + "name": "libgcc", + "version": "11.2.1_git20220219-r2", + "description": "GNU C compiler runtime libraries", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgcc:libgcc:11.2.1_git20220219-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgcc@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmaccess@6.0.4?package-id=f3410b3d946e1c4d", + "author": "GitHub Inc.", + "name": "libnpmaccess", + "version": "6.0.4", + "description": "programmatic library for `npm access` commands", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmaccess:libnpmaccess:6.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmaccess@6.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmaccess", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmdiff@4.0.5?package-id=ce3262e2c08529ea", + "author": "GitHub Inc.", + "name": "libnpmdiff", + "version": "4.0.5", + "description": "The registry diff", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmdiff:libnpmdiff:4.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmdiff@4.0.5", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmexec@4.0.14?package-id=902cc2f16bb11ffc", + "author": "GitHub Inc.", + "name": "libnpmexec", + "version": "4.0.14", + "description": "npm exec (npx) programmatic API", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmexec:libnpmexec:4.0.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmexec@4.0.14", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmfund@3.0.5?package-id=201ebcb5d992fa75", + "author": "GitHub Inc.", + "name": "libnpmfund", + "version": "3.0.5", + "description": "Programmatic API for npm fund", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmfund:libnpmfund:3.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmfund@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmhook@8.0.4?package-id=5679bee9e2f7003c", + "author": "GitHub Inc.", + "name": "libnpmhook", + "version": "8.0.4", + "description": "programmatic API for managing npm registry hooks", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmhook:libnpmhook:8.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmhook@8.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmorg@4.0.4?package-id=80c945656f22ba9d", + "author": "GitHub Inc.", + "name": "libnpmorg", + "version": "4.0.4", + "description": "Programmatic api for `npm org` commands", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmorg:libnpmorg:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmorg@4.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmorg", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmpack@4.1.3?package-id=62f6985b14d7de3e", + "author": "GitHub Inc.", + "name": "libnpmpack", + "version": "4.1.3", + "description": "Programmatic API for the bits behind npm pack", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmpack:libnpmpack:4.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmpack@4.1.3", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmpack", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmpublish@6.0.5?package-id=a970d9d2bf422a57", + "author": "GitHub Inc.", + "name": "libnpmpublish", + "version": "6.0.5", + "description": "Programmatic API for the bits behind npm publish and unpublish", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmpublish:libnpmpublish:6.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmpublish@6.0.5", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmpublish", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmsearch@5.0.4?package-id=e3666452dd7e585d", + "author": "GitHub Inc.", + "name": "libnpmsearch", + "version": "5.0.4", + "description": "Programmatic API for searching in npm and compatible registries.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmsearch:libnpmsearch:5.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmsearch@5.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmsearch", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmteam@4.0.4?package-id=95c3c29c4dcd60d1", + "author": "GitHub Inc.", + "name": "libnpmteam", + "version": "4.0.4", + "description": "npm Team management APIs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmteam:libnpmteam:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmteam@4.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmteam", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmversion@3.0.7?package-id=9ace162e3f4ca294", + "author": "GitHub Inc.", + "name": "libnpmversion", + "version": "3.0.7", + "description": "library to do the things that 'npm version' does", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmversion:libnpmversion:3.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmversion@3.0.7", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5&package-id=609cb94e63dc06dd", + "publisher": "Timo Teras ", + "name": "libssl1.1", + "version": "1.1.1t-r2", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1t-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libstdc++@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5&package-id=9913678ca8fd323d", + "publisher": "Ariadne Conill ", + "name": "libstdc++", + "version": "11.2.1_git20220219-r2", + "description": "GNU C++ standard runtime library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:11.2.1_git20220219-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libstdc++@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lie@3.3.0?package-id=db03f266d31d486e", + "name": "lie", + "version": "3.3.0", + "description": "A basic but performant promise implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:calvinmetcalf:lie:3.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lie@3.3.0", + "externalReferences": [ + { + "url": "https://github.com/calvinmetcalf/lie.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lines-and-columns@1.2.4?package-id=e16b7bf0fe2bdb56", + "author": "Brian Donovan ", + "name": "lines-and-columns", + "version": "1.2.4", + "description": "Maps lines and columns to character offsets and back.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lines-and-columns:lines-and-columns:1.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/lines-and-columns@1.2.4", + "externalReferences": [ + { + "url": "https://github.com/eventualbuddha/lines-and-columns.git", + "type": "distribution" + }, + { + "url": "https://github.com/eventualbuddha/lines-and-columns#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/locate-path@3.0.0?package-id=a657b1478ede4b77", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "locate-path", + "version": "3.0.0", + "description": "Get the first path that exists on disk of multiple paths", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:locate-path:locate-path:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/locate-path@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/locate-path", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/locate-path@5.0.0?package-id=622f665a0bf0d8bd", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "locate-path", + "version": "5.0.0", + "description": "Get the first path that exists on disk of multiple paths", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:locate-path:locate-path:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/locate-path@5.0.0", + "externalReferences": [ + { + "url": "sindresorhus/locate-path", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash@4.17.21?package-id=75dfb844472e21c2", + "author": "John-David Dalton ", + "name": "lodash", + "version": "4.17.21", + "description": "Lodash modular utilities.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash:lodash:4.17.21:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash@4.17.21", + "externalReferences": [ + { + "url": "lodash/lodash", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lru-cache@6.0.0?package-id=a9db11b8d6d48a85", + "author": "Isaac Z. Schlueter ", + "name": "lru-cache", + "version": "6.0.0", + "description": "A cache object that deletes the least-recently-used items.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lru-cache:lru-cache:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru-cache@6.0.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-lru-cache.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lru-cache@6.0.0?package-id=c938bdb42f7a80e2", + "author": "Isaac Z. Schlueter ", + "name": "lru-cache", + "version": "6.0.0", + "description": "A cache object that deletes the least-recently-used items.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lru-cache:lru-cache:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru-cache@6.0.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-lru-cache.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lru-cache@7.13.2?package-id=be5c7dc6ddace7cd", + "author": "Isaac Z. Schlueter ", + "name": "lru-cache", + "version": "7.13.2", + "description": "A cache object that deletes the least-recently-used items.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lru-cache:lru-cache:7.13.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru-cache@7.13.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-lru-cache.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/make-fetch-happen@10.2.1?package-id=d230079dee920278", + "author": "GitHub Inc.", + "name": "make-fetch-happen", + "version": "10.2.1", + "description": "Opinionated, caching, retrying fetch client", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:make-fetch-happen:make-fetch-happen:10.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-fetch-happen@10.2.1", + "externalReferences": [ + { + "url": "https://github.com/npm/make-fetch-happen.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/map-obj@1.0.1?package-id=d9b58c3f7e7ee73", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "map-obj", + "version": "1.0.1", + "description": "Map object keys and values into a new object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:map-obj:map-obj:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/map-obj@1.0.1", + "externalReferences": [ + { + "url": "sindresorhus/map-obj", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/map-obj@4.3.0?package-id=e650deaf663debbb", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "map-obj", + "version": "4.3.0", + "description": "Map object keys and values into a new object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:map-obj:map-obj:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/map-obj@4.3.0", + "externalReferences": [ + { + "url": "sindresorhus/map-obj", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/media-typer@0.3.0?package-id=edc1220ee5504fb4", + "author": "Douglas Christopher Wilson ", + "name": "media-typer", + "version": "0.3.0", + "description": "Simple RFC 6838 media type parser and formatter", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:media-typer:media-typer:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/media-typer@0.3.0", + "externalReferences": [ + { + "url": "jshttp/media-typer", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/meow@9.0.0?package-id=35513e503f8dd60b", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "meow", + "version": "9.0.0", + "description": "CLI app helper", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:meow:meow:9.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/meow@9.0.0", + "externalReferences": [ + { + "url": "sindresorhus/meow", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/merge-descriptors@1.0.1?package-id=24f38b1ffa4b7603", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "merge-descriptors", + "version": "1.0.1", + "description": "Merge objects using descriptors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:merge-descriptors:merge-descriptors:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/merge-descriptors@1.0.1", + "externalReferences": [ + { + "url": "component/merge-descriptors", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/methods@1.1.2?package-id=9b85a46f19a1f1aa", + "name": "methods", + "version": "1.1.2", + "description": "HTTP methods that node supports", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:methods:methods:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/methods@1.1.2", + "externalReferences": [ + { + "url": "jshttp/methods", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime@1.6.0?package-id=f48c5ee033535ed4", + "author": "Robert Kieffer (http://github.com/broofa)", + "name": "mime", + "version": "1.6.0", + "description": "A comprehensive library for mime-type mapping", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:broofa:mime:1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime@1.6.0", + "externalReferences": [ + { + "url": "https://github.com/broofa/node-mime", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-db@1.40.0?package-id=bee1749d3adba611", + "name": "mime-db", + "version": "1.40.0", + "description": "Media Type Database", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-db:mime-db:1.40.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-db@1.40.0", + "externalReferences": [ + { + "url": "jshttp/mime-db", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-types@2.1.24?package-id=ba2ec9e915a8563f", + "name": "mime-types", + "version": "2.1.24", + "description": "The ultimate javascript content-type utility.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-types:mime-types:2.1.24:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-types@2.1.24", + "externalReferences": [ + { + "url": "jshttp/mime-types", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/min-indent@1.0.1?package-id=b027336927e7884d", + "author": "James Kyle (thejameskyle.com)", + "name": "min-indent", + "version": "1.0.1", + "description": "Get the shortest leading whitespace from lines in a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:thejameskyle:min-indent:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/min-indent@1.0.1", + "externalReferences": [ + { + "url": "https://github.com/thejameskyle/min-indent", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.0.8?package-id=6eafef7f6398a3e6", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.0.8", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.0.8", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.1.2?package-id=32b47b032f3721ab", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.1.2", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.1.2?package-id=7392185ecbfd5435", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.1.2", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.1.2?package-id=6b4731ea6f19e173", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.1.2", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@5.1.0?package-id=7bf8dbc1a2543e83", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "5.1.0", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:5.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@5.1.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimist-options@4.1.0?package-id=d615d77b50850421", + "author": "Vadim Demedes ", + "name": "minimist-options", + "version": "4.1.0", + "description": "Pretty options for minimist", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minimist-options:minimist-options:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimist-options@4.1.0", + "externalReferences": [ + { + "url": "vadimdemedes/minimist-options", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass@3.3.4?package-id=b613ca6e3e5e1fdb", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "3.3.4", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:3.3.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@3.3.4", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass@3.3.6?package-id=cf3bc2db7652613b", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "3.3.6", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass@3.3.6?package-id=f0863d9180e7f0b3", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "3.3.6", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass@4.2.5?package-id=55b840b1c3a672da", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "4.2.5", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:4.2.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@4.2.5", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-collect@1.0.2?package-id=48596b1d4dbb4f19", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-collect", + "version": "1.0.2", + "description": "A Minipass stream that collects all the data into a single chunk", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-collect:minipass-collect:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-collect@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-fetch@2.1.1?package-id=1efc5437ba452e1d", + "author": "GitHub Inc.", + "name": "minipass-fetch", + "version": "2.1.1", + "description": "An implementation of window.fetch in Node.js using Minipass streams", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minipass-fetch:minipass-fetch:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-fetch@2.1.1", + "externalReferences": [ + { + "url": "https://github.com/npm/minipass-fetch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-flush@1.0.5?package-id=f00a260926226ede", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-flush", + "version": "1.0.5", + "description": "A Minipass stream that calls a flush function before emitting 'end'", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-flush:minipass-flush:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-flush@1.0.5", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass-flush.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-json-stream@1.0.1?package-id=43ed818882788b6b", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-json-stream", + "version": "1.0.1", + "description": "Like JSONStream, but using Minipass streams", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minipass-json-stream:minipass-json-stream:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-json-stream@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/minipass-json-stream.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-pipeline@1.2.4?package-id=891713a52fe6cc27", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-pipeline", + "version": "1.2.4", + "description": "create a pipeline of streams using Minipass", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-pipeline@1.2.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-sized@1.0.3?package-id=cd4842c35733398b", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-sized", + "version": "1.0.3", + "description": "A Minipass stream that raises an error if you get a different number of bytes than expected", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-sized:minipass-sized:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-sized@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass-sized.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minizlib@2.1.2?package-id=a651644b4f6a3e3", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minizlib", + "version": "2.1.2", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minizlib:minizlib:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minizlib@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minizlib@2.1.2?package-id=7bb75b451bb46790", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minizlib", + "version": "2.1.2", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minizlib:minizlib:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minizlib@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp@1.0.4?package-id=9695628e211e131d", + "name": "mkdirp", + "version": "1.0.4", + "description": "Recursively mkdir, like `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:mkdirp:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp@1.0.4", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-mkdirp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp@1.0.4?package-id=9258d24e97ef9bc8", + "name": "mkdirp", + "version": "1.0.4", + "description": "Recursively mkdir, like `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:mkdirp:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp@1.0.4", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-mkdirp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp-infer-owner@2.0.0?package-id=cd2840516db98e09", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "mkdirp-infer-owner", + "version": "2.0.0", + "description": "mkdirp, but chown to the owner of the containing folder if possible and necessary", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:mkdirp-infer-owner:mkdirp-infer-owner:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp-infer-owner@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/mkdirp-infer-owner", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/monorepo-symlink-test@0.0.0?package-id=fb8f3eb0b123561e", + "name": "monorepo-symlink-test", + "version": "0.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:monorepo-symlink-test:monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/monorepo-symlink-test@0.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.0.0?package-id=5a1105814fc945d6", + "name": "ms", + "version": "2.0.0", + "description": "Tiny milisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ms:ms:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.0.0", + "externalReferences": [ + { + "url": "zeit/ms", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.1?package-id=b637ed80fef8c29b", + "name": "ms", + "version": "2.1.1", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ms:ms:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.1", + "externalReferences": [ + { + "url": "zeit/ms", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.2?package-id=baab6160abc8414d", + "name": "ms", + "version": "2.1.2", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ms:ms:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "url": "zeit/ms", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.3?package-id=56db25c219fa0f4e", + "name": "ms", + "version": "2.1.3", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ms:ms:2.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.3", + "externalReferences": [ + { + "url": "vercel/ms", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.2.3-r2?arch=x86_64&distro=alpine-3.16.5&package-id=24c6089b81ca7d19", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.2.3-r2", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.2.3-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.2.3-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.3-r2?arch=x86_64&upstream=musl&distro=alpine-3.16.5&package-id=d33c14d727ae74d1", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.2.3-r2", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.2.3-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.2.3-r2?arch=x86_64&upstream=musl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mute-stream@0.0.8?package-id=b093eec725f75ac9", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "mute-stream", + "version": "0.0.8", + "description": "Bytes go in, but they don't come out (when muted).", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:mute-stream:mute-stream:0.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/mute-stream@0.0.8", + "externalReferences": [ + { + "url": "git://github.com/isaacs/mute-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mylib@0.0.0?package-id=9b8da0f44b3dbc2", + "name": "mylib", + "version": "0.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:mylib:mylib:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mylib@0.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/nan@2.16.0?package-id=430e00056ba7a1b6", + "name": "nan", + "version": "2.16.0", + "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nodejs:nan:2.16.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/nan@2.16.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/nan.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/negotiator@0.6.2?package-id=fda5fb209d9198e7", + "name": "negotiator", + "version": "0.6.2", + "description": "HTTP content negotiation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:negotiator:negotiator:0.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/negotiator@0.6.2", + "externalReferences": [ + { + "url": "jshttp/negotiator", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/negotiator@0.6.3?package-id=87cc6cb502ab228a", + "name": "negotiator", + "version": "0.6.3", + "description": "HTTP content negotiation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:negotiator:negotiator:0.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/negotiator@0.6.3", + "externalReferences": [ + { + "url": "jshttp/negotiator", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "pkg:generic/node@16.20.0?package-id=c3df0c8aa56599a1", + "name": "node", + "version": "16.20.0", + "cpe": "cpe:2.3:a:nodejs:node.js:16.20.0:*:*:*:*:*:*:*", + "purl": "pkg:generic/node@16.20.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-gyp@7.1.2?package-id=d6358be7e6610e78", + "author": "Nathan Rajlich (http://tootallnate.net)", + "name": "node-gyp", + "version": "7.1.2", + "description": "Node.js native addon build tool", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-gyp:node-gyp:7.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-gyp@7.1.2", + "externalReferences": [ + { + "url": "git://github.com/nodejs/node-gyp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-gyp@9.1.0?package-id=594531fb28fce181", + "author": "Nathan Rajlich (http://tootallnate.net)", + "name": "node-gyp", + "version": "9.1.0", + "description": "Node.js native addon build tool", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-gyp:node-gyp:9.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-gyp@9.1.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/node-gyp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-sass@6.0.1?package-id=8ed8bfb84f23be1c", + "author": "Andrew Nesbitt (http://andrew.github.com)", + "name": "node-sass", + "version": "6.0.1", + "description": "Wrapper around libsass", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-sass:node-sass:6.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-sass@6.0.1", + "externalReferences": [ + { + "url": "https://github.com/sass/node-sass", + "type": "distribution" + }, + { + "url": "https://github.com/sass/node-sass", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-sass-tilde-importer@1.0.2?package-id=7ddb032aafbef65", + "author": "Matthew Davidson ", + "name": "node-sass-tilde-importer", + "version": "1.0.2", + "description": "A node-sass custom importer which turns ~ into absolute paths to the nearest parent node_modules directory.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:node-sass-tilde-importer:node-sass-tilde-importer:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-sass-tilde-importer@1.0.2", + "externalReferences": [ + { + "url": "matthewdavidson/node-sass-tilde-importer", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/nopt@5.0.0?package-id=16f8d211f06e4fc1", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "nopt", + "version": "5.0.0", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:nopt:nopt:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/nopt@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/nopt.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/nopt@5.0.0?package-id=4a65eb288b716fd8", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "nopt", + "version": "5.0.0", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:nopt:nopt:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/nopt@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/nopt.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/nopt@6.0.0?package-id=2da699f46c59247", + "author": "GitHub Inc.", + "name": "nopt", + "version": "6.0.0", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:nopt:nopt:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/nopt@6.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/nopt.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/normalize-package-data@2.5.0?package-id=2acaa02f4b693695", + "author": "Meryn Stol ", + "name": "normalize-package-data", + "version": "2.5.0", + "description": "Normalizes data that can be found in package.json files.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:normalize-package-data:normalize-package-data:2.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/normalize-package-data@2.5.0", + "externalReferences": [ + { + "url": "git://github.com/npm/normalize-package-data.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/normalize-package-data@3.0.3?package-id=eba03005d68df6bd", + "author": "Meryn Stol ", + "name": "normalize-package-data", + "version": "3.0.3", + "description": "Normalizes data that can be found in package.json files.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:normalize-package-data:normalize-package-data:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/normalize-package-data@3.0.3", + "externalReferences": [ + { + "url": "git://github.com/npm/normalize-package-data.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/normalize-package-data@4.0.1?package-id=f65ac6113e729b71", + "author": "GitHub Inc.", + "name": "normalize-package-data", + "version": "4.0.1", + "description": "Normalizes data that can be found in package.json files.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:normalize-package-data:normalize-package-data:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/normalize-package-data@4.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/normalize-package-data.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm@8.19.4?package-id=3a7215c0f0fd939a", + "author": "GitHub Inc.", + "name": "npm", + "version": "8.19.4", + "description": "a package manager for JavaScript", + "licenses": [ + { + "license": { + "id": "Artistic-2.0" + } + } + ], + "cpe": "cpe:2.3:a:npm:npm:8.19.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm@8.19.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://docs.npmjs.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-audit-report@3.0.0?package-id=838d59a41103d415", + "author": "GitHub Inc.", + "name": "npm-audit-report", + "version": "3.0.0", + "description": "Given a response from the npm security api, render it into a variety of security reports", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-audit-report:npm-audit-report:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-audit-report@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-audit-report.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-audit-report#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-bundled@1.1.2?package-id=d3fc92546524f1a0", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "npm-bundled", + "version": "1.1.2", + "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-bundled:npm-bundled:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-bundled@1.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-bundled.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-bundled@2.0.1?package-id=4342e4ccfcb927ca", + "author": "GitHub Inc.", + "name": "npm-bundled", + "version": "2.0.1", + "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-bundled:npm-bundled:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-bundled@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-bundled.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-init@0.0.0?package-id=e58118b5aaeeedd7", + "name": "npm-init", + "version": "0.0.0", + "description": "an initter you init wit, innit?", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:npm-init:npm-init:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-init@0.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-install-checks@5.0.0?package-id=ea3011565b04383b", + "author": "GitHub Inc.", + "name": "npm-install-checks", + "version": "5.0.0", + "description": "Check the engines and platform fields in package.json", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:npm-install-checks:npm-install-checks:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-install-checks@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-install-checks.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@1.0.1?package-id=7cccc2d8907ef9bb", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "npm-normalize-package-bin", + "version": "1.0.1", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-normalize-package-bin", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=3b502df6a54faf04", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=cb496c88bc54cdd7", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=3675dcedd841f8b6", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=a6c4eec149dbad2b", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=b373bbb7c439b789", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-package-arg@9.1.0?package-id=30ebe98710a08c64", + "author": "GitHub Inc.", + "name": "npm-package-arg", + "version": "9.1.0", + "description": "Parse the things that can be arguments to `npm install`", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-package-arg:npm-package-arg:9.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-package-arg@9.1.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-package-arg.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-package-arg", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-packlist@5.1.3?package-id=e87ec46a213d7a87", + "author": "GitHub Inc.", + "name": "npm-packlist", + "version": "5.1.3", + "description": "Get a list of the files to add from a folder into an npm package", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-packlist:npm-packlist:5.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-packlist@5.1.3", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-packlist.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-pick-manifest@7.0.2?package-id=a9dc194030f7ba31", + "author": "GitHub Inc.", + "name": "npm-pick-manifest", + "version": "7.0.2", + "description": "Resolves a matching manifest from a package metadata document according to standard npm semver resolution rules.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-pick-manifest:npm-pick-manifest:7.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-pick-manifest@7.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-pick-manifest.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-profile@6.2.1?package-id=4b7db9f7ec8bd8ec", + "author": "GitHub Inc.", + "name": "npm-profile", + "version": "6.2.1", + "description": "Library for updating an npmjs.com profile", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-profile:npm-profile:6.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-profile@6.2.1", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-profile.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-registry-fetch@13.3.1?package-id=4a24a52ce2bed90", + "author": "GitHub Inc.", + "name": "npm-registry-fetch", + "version": "13.3.1", + "description": "Fetch-based http client for use with npm registry APIs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-registry-fetch:npm-registry-fetch:13.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-registry-fetch@13.3.1", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-registry-fetch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-user-validate@1.0.1?package-id=6154858fa52c8fec", + "author": "Robert Kowalski ", + "name": "npm-user-validate", + "version": "1.0.1", + "description": "User validations for npm", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:npm-user-validate:npm-user-validate:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-user-validate@1.0.1", + "externalReferences": [ + { + "url": "git://github.com/npm/npm-user-validate.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npmlog@4.1.2?package-id=3e6a9b76fcf5c0b5", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "npmlog", + "version": "4.1.2", + "description": "logger for npm", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npmlog:npmlog:4.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npmlog@4.1.2", + "externalReferences": [ + { + "url": "https://github.com/npm/npmlog.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npmlog@6.0.2?package-id=e1d7f39551f111f", + "author": "GitHub Inc.", + "name": "npmlog", + "version": "6.0.2", + "description": "logger for npm", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npmlog:npmlog:6.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npmlog@6.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/npmlog.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/number-is-nan@1.0.1?package-id=dfd433e1796a6a88", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "number-is-nan", + "version": "1.0.1", + "description": "ES2015 Number.isNaN() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:number-is-nan:number-is-nan:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/number-is-nan@1.0.1", + "externalReferences": [ + { + "url": "sindresorhus/number-is-nan", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/oauth-sign@0.9.0?package-id=db172ac1d3949e1b", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "oauth-sign", + "version": "0.9.0", + "description": "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:oauth-sign:oauth-sign:0.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/oauth-sign@0.9.0", + "externalReferences": [ + { + "url": "https://github.com/mikeal/oauth-sign", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-assign@4.1.1?package-id=9f37d7ea88ae7c48", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "object-assign", + "version": "4.1.1", + "description": "ES2015 `Object.assign()` ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-assign:object-assign:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-assign@4.1.1", + "externalReferences": [ + { + "url": "sindresorhus/object-assign", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/on-finished@2.3.0?package-id=10e3e142a47fe504", + "name": "on-finished", + "version": "2.3.0", + "description": "Execute a callback when a request closes, finishes, or errors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:on-finished:on-finished:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/on-finished@2.3.0", + "externalReferences": [ + { + "url": "jshttp/on-finished", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/once@1.4.0?package-id=2bfb1efabaee8e52", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "once", + "version": "1.4.0", + "description": "Run a function exactly one time", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:once:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/once", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/once@1.4.0?package-id=931b0bd981a31418", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "once", + "version": "1.4.0", + "description": "Run a function exactly one time", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:once:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/once", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/opener@1.5.2?package-id=44a3614f9f359ab5", + "author": "Domenic Denicola (https://domenic.me/)", + "name": "opener", + "version": "1.5.2", + "description": "Opens stuff, like webpages and files and executables, cross-platform", + "licenses": [ + { + "license": { + "name": "(WTFPL OR MIT)" + } + } + ], + "cpe": "cpe:2.3:a:opener:opener:1.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/opener@1.5.2", + "externalReferences": [ + { + "url": "domenic/opener", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-limit@2.3.0?package-id=740d957b6a14c8f8", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-limit", + "version": "2.3.0", + "description": "Run multiple promise-returning & async functions with limited concurrency", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-limit:p-limit:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-limit@2.3.0", + "externalReferences": [ + { + "url": "sindresorhus/p-limit", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-locate@3.0.0?package-id=da32ac4f0c6227d6", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-locate", + "version": "3.0.0", + "description": "Get the first fulfilled promise that satisfies the provided testing function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-locate:p-locate:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-locate@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/p-locate", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-locate@4.1.0?package-id=9405b01a2e4f963e", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-locate", + "version": "4.1.0", + "description": "Get the first fulfilled promise that satisfies the provided testing function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-locate:p-locate:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-locate@4.1.0", + "externalReferences": [ + { + "url": "sindresorhus/p-locate", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-map@4.0.0?package-id=1c07a8cbe4bd91d5", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "p-map", + "version": "4.0.0", + "description": "Map over promises concurrently", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-map:p-map:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-map@4.0.0", + "externalReferences": [ + { + "url": "sindresorhus/p-map", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-try@2.2.0?package-id=520c2a547947b938", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-try", + "version": "2.2.0", + "description": "`Start a promise chain", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-try:p-try:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-try@2.2.0", + "externalReferences": [ + { + "url": "sindresorhus/p-try", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pacote@13.6.2?package-id=481670a57d8719a5", + "author": "GitHub Inc.", + "name": "pacote", + "version": "13.6.2", + "description": "JavaScript package downloader", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:pacote:pacote:13.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/pacote@13.6.2", + "externalReferences": [ + { + "url": "https://github.com/npm/pacote.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pako@1.0.11?package-id=f661ff2562ab67d", + "name": "pako", + "version": "1.0.11", + "description": "zlib port to javascript - fast, modularized, with browser support", + "licenses": [ + { + "license": { + "name": "(MIT AND Zlib)" + } + } + ], + "cpe": "cpe:2.3:a:nodeca:pako:1.0.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/pako@1.0.11", + "externalReferences": [ + { + "url": "nodeca/pako", + "type": "distribution" + }, + { + "url": "https://github.com/nodeca/pako", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/parse-conflict-json@2.0.2?package-id=94638d4f43f17ad7", + "author": "GitHub Inc.", + "name": "parse-conflict-json", + "version": "2.0.2", + "description": "Parse a JSON string that has git merge conflicts, resolving if possible", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:parse-conflict-json:parse-conflict-json:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/parse-conflict-json@2.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/parse-conflict-json.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/parse-json@5.2.0?package-id=69aedb15a89a2fd8", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "parse-json", + "version": "5.2.0", + "description": "Parse JSON with more helpful errors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:parse-json:parse-json:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/parse-json@5.2.0", + "externalReferences": [ + { + "url": "sindresorhus/parse-json", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/parseurl@1.3.3?package-id=5a8f19386b323f4b", + "name": "parseurl", + "version": "1.3.3", + "description": "parse a url with memoization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:parseurl:parseurl:1.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/parseurl@1.3.3", + "externalReferences": [ + { + "url": "pillarjs/parseurl", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-exists@3.0.0?package-id=dc628303d89cd038", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-exists", + "version": "3.0.0", + "description": "Check if a path exists", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-exists:path-exists:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-exists@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/path-exists", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-exists@4.0.0?package-id=32f6c6f926c1330a", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-exists", + "version": "4.0.0", + "description": "Check if a path exists", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-exists:path-exists:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-exists@4.0.0", + "externalReferences": [ + { + "url": "sindresorhus/path-exists", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=ed58648f2f773bd9", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-is-absolute", + "version": "1.0.1", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "sindresorhus/path-is-absolute", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=70cf293874d995a2", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-is-absolute", + "version": "1.0.1", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "sindresorhus/path-is-absolute", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-key@3.1.1?package-id=738f6ea51d24b15a", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-key", + "version": "3.1.1", + "description": "Get the PATH environment variable key cross-platform", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-key:path-key:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-key@3.1.1", + "externalReferences": [ + { + "url": "sindresorhus/path-key", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-parse@1.0.7?package-id=a9f85aa88ec56175", + "author": "Javier Blanco ", + "name": "path-parse", + "version": "1.0.7", + "description": "Node.js path.parse() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jbgutierrez:path-parse:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-parse@1.0.7", + "externalReferences": [ + { + "url": "https://github.com/jbgutierrez/path-parse.git", + "type": "distribution" + }, + { + "url": "https://github.com/jbgutierrez/path-parse#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-to-regexp@0.1.7?package-id=ccbe7b36b309edc1", + "name": "path-to-regexp", + "version": "0.1.7", + "description": "Express style path to RegExp utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-to-regexp:path-to-regexp:0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-to-regexp@0.1.7", + "externalReferences": [ + { + "url": "https://github.com/component/path-to-regexp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/performance-now@2.1.0?package-id=571cf474f11938e4", + "author": "Braveg1rl ", + "name": "performance-now", + "version": "2.1.0", + "description": "Implements performance.now (based on process.hrtime).", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:performance-now:performance-now:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/performance-now@2.1.0", + "externalReferences": [ + { + "url": "git://github.com/braveg1rl/performance-now.git", + "type": "distribution" + }, + { + "url": "https://github.com/braveg1rl/performance-now", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pliant-addon-themes@1.0.0?package-id=70bccb6336959cc0", + "name": "pliant-addon-themes", + "version": "1.0.0", + "description": "pliant-addon-themes", + "licenses": [ + { + "license": { + "name": "UNLICENSED" + } + } + ], + "cpe": "cpe:2.3:a:pliant-addon-themes:pliant-addon-themes:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pliant-addon-themes@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-selector-parser@6.0.10?package-id=29dd6871004e9325", + "name": "postcss-selector-parser", + "version": "6.0.10", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-selector-parser:postcss-selector-parser:6.0.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-selector-parser@6.0.10", + "externalReferences": [ + { + "url": "postcss/postcss-selector-parser", + "type": "distribution" + }, + { + "url": "https://github.com/postcss/postcss-selector-parser", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/proc-log@2.0.1?package-id=a4591425ab5edc60", + "author": "GitHub Inc.", + "name": "proc-log", + "version": "2.0.1", + "description": "just emit 'log' events on the process object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:proc-log:proc-log:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/proc-log@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/proc-log.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/process-nextick-args@2.0.0?package-id=1f54bdeae1fcde6d", + "name": "process-nextick-args", + "version": "2.0.0", + "description": "process.nextTick but always with args", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:process-nextick-args:process-nextick-args:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/process-nextick-args@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/calvinmetcalf/process-nextick-args.git", + "type": "distribution" + }, + { + "url": "https://github.com/calvinmetcalf/process-nextick-args", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-all-reject-late@1.0.1?package-id=7b92ff8460614d4f", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "promise-all-reject-late", + "version": "1.0.1", + "description": "Like Promise.all, but save rejections until all promises are resolved", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promise-all-reject-late:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-all-reject-late@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-call-limit@1.0.1?package-id=2b0b41bd7b0aa502", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "promise-call-limit", + "version": "1.0.1", + "description": "Call an array of promise-returning functions, restricting concurrency to a specified limit.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promise-call-limit:promise-call-limit:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-call-limit@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/promise-call-limit", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-inflight@1.0.1?package-id=8ae6caef1e6290fe", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "promise-inflight", + "version": "1.0.1", + "description": "One promise for multiple requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promise-inflight:promise-inflight:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-inflight@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/promise-inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/promise-inflight#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-retry@2.0.1?package-id=7d483cd4a8ed637e", + "author": "IndigoUnited (http://indigounited.com)", + "name": "promise-retry", + "version": "2.0.1", + "description": "Retries a function that returns a promise, leveraging the power of the retry module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:promise-retry:promise-retry:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-retry@2.0.1", + "externalReferences": [ + { + "url": "git://github.com/IndigoUnited/node-promise-retry.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promzard@0.3.0?package-id=33cefe299422041", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "promzard", + "version": "0.3.0", + "description": "prompting wizardly", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promzard:promzard:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/promzard@0.3.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/promzard", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/proxy-addr@2.0.5?package-id=8658125c1260006d", + "author": "Douglas Christopher Wilson ", + "name": "proxy-addr", + "version": "2.0.5", + "description": "Determine address of proxied request", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:proxy-addr:proxy-addr:2.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/proxy-addr@2.0.5", + "externalReferences": [ + { + "url": "jshttp/proxy-addr", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/psl@1.9.0?package-id=53b253f7b10f23e5", + "author": "Lupo Montero (https://lupomontero.com/)", + "name": "psl", + "version": "1.9.0", + "description": "Domain name parser based on the Public Suffix List", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:psl:psl:1.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/psl@1.9.0", + "externalReferences": [ + { + "url": "git@github.com:lupomontero/psl.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/punycode@2.1.1?package-id=fa3e1b378dd1760a", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "punycode", + "version": "2.1.1", + "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bestiejs:punycode:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/punycode@2.1.1", + "externalReferences": [ + { + "url": "https://github.com/bestiejs/punycode.js.git", + "type": "distribution" + }, + { + "url": "https://mths.be/punycode", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/qrcode-terminal@0.12.0?package-id=83c91f496595f73", + "name": "qrcode-terminal", + "version": "0.12.0", + "description": "QRCodes, in the terminal", + "licenses": [ + { + "license": { + "name": "Apache 2.0" + } + } + ], + "cpe": "cpe:2.3:a:qrcode-terminal:qrcode-terminal:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/qrcode-terminal@0.12.0", + "externalReferences": [ + { + "url": "https://github.com/gtanner/qrcode-terminal", + "type": "distribution" + }, + { + "url": "https://github.com/gtanner/qrcode-terminal", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/qs@6.5.3?package-id=323c4310a1a5da48", + "name": "qs", + "version": "6.5.3", + "description": "A querystring parser that supports nesting and arrays, with a depth limit", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:ljharb:qs:6.5.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/qs@6.5.3", + "externalReferences": [ + { + "url": "https://github.com/ljharb/qs.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/qs", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/qs@6.7.0?package-id=4fccd8666f262a4b", + "name": "qs", + "version": "6.7.0", + "description": "A querystring parser that supports nesting and arrays, with a depth limit", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:ljharb:qs:6.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/qs@6.7.0", + "externalReferences": [ + { + "url": "https://github.com/ljharb/qs.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/qs", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/quick-lru@4.0.1?package-id=bd6e460313c1679d", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "quick-lru", + "version": "4.0.1", + "description": "Simple \"Least Recently Used\" (LRU) cache", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:quick-lru:quick-lru:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/quick-lru@4.0.1", + "externalReferences": [ + { + "url": "sindresorhus/quick-lru", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/range-parser@1.2.1?package-id=4426c7b6b8b9fe0c", + "author": "TJ Holowaychuk (http://tjholowaychuk.com)", + "name": "range-parser", + "version": "1.2.1", + "description": "Range header field string parser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:range-parser:range-parser:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/range-parser@1.2.1", + "externalReferences": [ + { + "url": "jshttp/range-parser", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/raw-body@2.4.0?package-id=86045e8e28d17aa5", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "raw-body", + "version": "2.4.0", + "description": "Get and validate the raw body of a readable stream.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:raw-body:raw-body:2.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/raw-body@2.4.0", + "externalReferences": [ + { + "url": "stream-utils/raw-body", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read@1.0.7?package-id=cf65e05575a1a15", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "read", + "version": "1.0.7", + "description": "read(1) for node programs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:read:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/read@1.0.7", + "externalReferences": [ + { + "url": "git://github.com/isaacs/read.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-cmd-shim@3.0.0?package-id=4b927be3f703982b", + "author": "GitHub Inc.", + "name": "read-cmd-shim", + "version": "3.0.0", + "description": "Figure out what a cmd-shim is pointing at. This acts as the equivalent of fs.readlink.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-cmd-shim:read-cmd-shim:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-cmd-shim@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/read-cmd-shim.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/read-cmd-shim#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-package-json@5.0.2?package-id=d15e27cd5cddf2b4", + "author": "GitHub Inc.", + "name": "read-package-json", + "version": "5.0.2", + "description": "The thing npm uses to read package.json files with semantics and defaults and validation", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-package-json:read-package-json:5.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-package-json@5.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/read-package-json.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-package-json-fast@2.0.3?package-id=bb9e08c93f4b4c89", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "read-package-json-fast", + "version": "2.0.3", + "description": "Like read-package-json, but faster", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-package-json-fast:read-package-json-fast:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-package-json-fast@2.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/npm/read-package-json-fast.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-pkg@5.2.0?package-id=ea2f8cf876469822", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "read-pkg", + "version": "5.2.0", + "description": "Read a package.json file", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:read-pkg:read-pkg:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-pkg@5.2.0", + "externalReferences": [ + { + "url": "sindresorhus/read-pkg", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-pkg-up@7.0.1?package-id=ce76c9dbb59a1a5c", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "read-pkg-up", + "version": "7.0.1", + "description": "Read the closest package.json file", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:read-pkg-up:read-pkg-up:7.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-pkg-up@7.0.1", + "externalReferences": [ + { + "url": "sindresorhus/read-pkg-up", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.6?package-id=5e01f3e591a23990", + "name": "readable-stream", + "version": "2.3.6", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.6", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@3.6.0?package-id=32d9c32dd3126020", + "name": "readable-stream", + "version": "3.6.0", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:3.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@3.6.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readdir-scoped-modules@1.1.0?package-id=33ac24742869be8b", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "readdir-scoped-modules", + "version": "1.1.0", + "description": "Like `fs.readdir` but handling `@org/module` dirs as if they were a single entry.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:readdir-scoped-modules:readdir-scoped-modules:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/readdir-scoped-modules@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/npm/readdir-scoped-modules", + "type": "distribution" + }, + { + "url": "https://github.com/npm/readdir-scoped-modules", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/redent@3.0.0?package-id=e20a794a0b358697", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "redent", + "version": "3.0.0", + "description": "Strip redundant indentation and indent the string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:redent:redent:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/redent@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/redent", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/request@2.88.2?package-id=9d4ba60210bc5002", + "author": "Mikeal Rogers ", + "name": "request", + "version": "2.88.2", + "description": "Simplified HTTP request client.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:request:request:2.88.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/request@2.88.2", + "externalReferences": [ + { + "url": "https://github.com/request/request.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/require-directory@2.1.1?package-id=411dd6ad0d64a0bc", + "author": "Troy Goode (http://github.com/troygoode/)", + "name": "require-directory", + "version": "2.1.1", + "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:require-directory:require-directory:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/require-directory@2.1.1", + "externalReferences": [ + { + "url": "git://github.com/troygoode/node-require-directory.git", + "type": "distribution" + }, + { + "url": "https://github.com/troygoode/node-require-directory/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/require-main-filename@2.0.0?package-id=9d7de391d2d9366d", + "author": "Ben Coe ", + "name": "require-main-filename", + "version": "2.0.0", + "description": "shim for require.main.filename() that works in as many environments as possible", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:require-main-filename:require-main-filename:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/require-main-filename@2.0.0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/yargs/require-main-filename.git", + "type": "distribution" + }, + { + "url": "https://github.com/yargs/require-main-filename#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/resize-observer-polyfill@1.5.1?package-id=cf15a93cb62d629c", + "author": "Denis Rul ", + "name": "resize-observer-polyfill", + "version": "1.5.1", + "description": "A polyfill for the Resize Observer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:resize-observer-polyfill:resize-observer-polyfill:1.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/resize-observer-polyfill@1.5.1", + "externalReferences": [ + { + "url": "https://github.com/que-etc/resize-observer-polyfill.git", + "type": "distribution" + }, + { + "url": "https://github.com/que-etc/resize-observer-polyfill", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/resolve@1.22.1?package-id=83d934ebb6d52bde", + "author": "James Halliday (http://substack.net)", + "name": "resolve", + "version": "1.22.1", + "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:browserify:resolve:1.22.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/resolve@1.22.1", + "externalReferences": [ + { + "url": "git://github.com/browserify/resolve.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/retry@0.12.0?package-id=c3f319915fd297ec", + "author": "Tim Koschützki (http://debuggable.com/)", + "name": "retry", + "version": "0.12.0", + "description": "Abstraction for exponential and custom retry strategies for failed operations.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tim-kos:retry:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/retry@0.12.0", + "externalReferences": [ + { + "url": "git://github.com/tim-kos/node-retry.git", + "type": "distribution" + }, + { + "url": "https://github.com/tim-kos/node-retry", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rimraf@3.0.2?package-id=92690f32c123c49b", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "rimraf", + "version": "3.0.2", + "description": "A deep deletion module for node (like `rm -rf`)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:rimraf:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/rimraf@3.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rimraf@3.0.2?package-id=691571e29c90ccb4", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "rimraf", + "version": "3.0.2", + "description": "A deep deletion module for node (like `rm -rf`)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:rimraf:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/rimraf@3.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=2726b88c81e31063", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=edf513d3ab46bee", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "safe-buffer", + "version": "5.2.1", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=4ab2220d3f3f4961", + "author": "Nikita Skovoroda (https://github.com/ChALkeR)", + "name": "safer-buffer", + "version": "2.1.2", + "description": "Modern Buffer API polyfill without footguns", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safer-buffer@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/ChALkeR/safer-buffer.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=cc287d73489b4567", + "author": "Nikita Skovoroda (https://github.com/ChALkeR)", + "name": "safer-buffer", + "version": "2.1.2", + "description": "Modern Buffer API polyfill without footguns", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safer-buffer@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/ChALkeR/safer-buffer.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sass-graph@2.2.5?package-id=7d18350a4afdf27f", + "author": "xzyfer", + "name": "sass-graph", + "version": "2.2.5", + "description": "Parse sass files and extract a graph of imports", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sass-graph:sass-graph:2.2.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/sass-graph@2.2.5", + "externalReferences": [ + { + "url": "xzyfer/sass-graph", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.3.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.16.5&package-id=206fdb47b3e980eb", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.3.4-r0", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.3.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.3.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/scss-tokenizer@0.2.3?package-id=66abb25b2e8aae0", + "author": "xzyfer", + "name": "scss-tokenizer", + "version": "0.2.3", + "description": "A tokenzier for Sass' SCSS syntax", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:scss-tokenizer:scss-tokenizer:0.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/scss-tokenizer@0.2.3", + "externalReferences": [ + { + "url": "https://github.com/sasstools/scss-tokenizer.git", + "type": "distribution" + }, + { + "url": "https://github.com/sasstools/scss-tokenizer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver@5.7.1?package-id=c944ab3d54a3a640", + "name": "semver", + "version": "5.7.1", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:semver:semver:5.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver@5.7.1", + "externalReferences": [ + { + "url": "https://github.com/npm/node-semver", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver@7.3.7?package-id=73e16bb8e099774", + "author": "GitHub Inc.", + "name": "semver", + "version": "7.3.7", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:semver:semver:7.3.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver@7.3.7", + "externalReferences": [ + { + "url": "https://github.com/npm/node-semver.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver@7.3.8?package-id=665caad5b223ed6f", + "author": "GitHub Inc.", + "name": "semver", + "version": "7.3.8", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:semver:semver:7.3.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver@7.3.8", + "externalReferences": [ + { + "url": "https://github.com/npm/node-semver.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/send@0.17.1?package-id=5cf87af6e2815632", + "author": "TJ Holowaychuk ", + "name": "send", + "version": "0.17.1", + "description": "Better streaming static file server with Range and conditional-GET support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:send:send:0.17.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/send@0.17.1", + "externalReferences": [ + { + "url": "pillarjs/send", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/serve-static@1.14.1?package-id=5a9e309a893cc7fa", + "author": "Douglas Christopher Wilson ", + "name": "serve-static", + "version": "1.14.1", + "description": "Serve static files", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:serve-static:serve-static:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/serve-static@1.14.1", + "externalReferences": [ + { + "url": "expressjs/serve-static", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/set-blocking@2.0.0?package-id=bac85cbb844de9c9", + "author": "Ben Coe ", + "name": "set-blocking", + "version": "2.0.0", + "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:set-blocking:set-blocking:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/set-blocking@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/yargs/set-blocking.git", + "type": "distribution" + }, + { + "url": "https://github.com/yargs/set-blocking#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/set-blocking@2.0.0?package-id=eedd514f5da11e23", + "author": "Ben Coe ", + "name": "set-blocking", + "version": "2.0.0", + "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:set-blocking:set-blocking:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/set-blocking@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/yargs/set-blocking.git", + "type": "distribution" + }, + { + "url": "https://github.com/yargs/set-blocking#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/set-immediate-shim@1.0.1?package-id=fdec1f5d3db6562c", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "set-immediate-shim", + "version": "1.0.1", + "description": "Simple setImmediate shim", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:set-immediate-shim:set-immediate-shim:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/set-immediate-shim@1.0.1", + "externalReferences": [ + { + "url": "sindresorhus/set-immediate-shim", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/setprototypeof@1.1.1?package-id=221ad70c81d999c5", + "author": "Wes Todd", + "name": "setprototypeof", + "version": "1.1.1", + "description": "A small polyfill for Object.setprototypeof", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:setprototypeof:setprototypeof:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/setprototypeof@1.1.1", + "externalReferences": [ + { + "url": "https://github.com/wesleytodd/setprototypeof.git", + "type": "distribution" + }, + { + "url": "https://github.com/wesleytodd/setprototypeof", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/shebang-command@2.0.0?package-id=a89760612079cb7d", + "author": "Kevin Mårtensson (github.com/kevva)", + "name": "shebang-command", + "version": "2.0.0", + "description": "Get the command from a shebang", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shebang-command:shebang-command:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/shebang-command@2.0.0", + "externalReferences": [ + { + "url": "kevva/shebang-command", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/shebang-regex@3.0.0?package-id=f5411c29bb38615e", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "shebang-regex", + "version": "3.0.0", + "description": "Regular expression for matching a shebang line", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shebang-regex:shebang-regex:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/shebang-regex@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/shebang-regex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/signal-exit@3.0.7?package-id=998659694cba1dfd", + "author": "Ben Coe ", + "name": "signal-exit", + "version": "3.0.7", + "description": "when you want to fire an event no matter how a process exits.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:signal-exit:signal-exit:3.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/signal-exit@3.0.7", + "externalReferences": [ + { + "url": "https://github.com/tapjs/signal-exit.git", + "type": "distribution" + }, + { + "url": "https://github.com/tapjs/signal-exit", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/signal-exit@3.0.7?package-id=133483a000431c75", + "author": "Ben Coe ", + "name": "signal-exit", + "version": "3.0.7", + "description": "when you want to fire an event no matter how a process exits.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:signal-exit:signal-exit:3.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/signal-exit@3.0.7", + "externalReferences": [ + { + "url": "https://github.com/tapjs/signal-exit.git", + "type": "distribution" + }, + { + "url": "https://github.com/tapjs/signal-exit", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/smart-buffer@4.2.0?package-id=ad322c124ae3043c", + "author": "Josh Glazebrook", + "name": "smart-buffer", + "version": "4.2.0", + "description": "smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:JoshGlazebrook:smart-buffer:4.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/smart-buffer@4.2.0", + "externalReferences": [ + { + "url": "https://github.com/JoshGlazebrook/smart-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/JoshGlazebrook/smart-buffer/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/socks@2.7.0?package-id=267f6eb3d489a8eb", + "author": "Josh Glazebrook", + "name": "socks", + "version": "2.7.0", + "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:JoshGlazebrook:socks:2.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/socks@2.7.0", + "externalReferences": [ + { + "url": "https://github.com/JoshGlazebrook/socks.git", + "type": "distribution" + }, + { + "url": "https://github.com/JoshGlazebrook/socks/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/socks-proxy-agent@7.0.0?package-id=8dc0e605920052a1", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "socks-proxy-agent", + "version": "7.0.0", + "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:socks-proxy-agent:socks-proxy-agent:7.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/socks-proxy-agent@7.0.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-socks-proxy-agent.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/node-socks-proxy-agent#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/source-map@0.4.4?package-id=cadf33a697da7f07", + "author": "Nick Fitzgerald ", + "name": "source-map", + "version": "0.4.4", + "description": "Generates and consumes source maps", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:source-map:source-map:0.4.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/source-map@0.4.4", + "externalReferences": [ + { + "url": "http://github.com/mozilla/source-map.git", + "type": "distribution" + }, + { + "url": "https://github.com/mozilla/source-map", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-correct@3.1.1?package-id=d6b0214947e454eb", + "author": "Kyle E. Mitchell (https://kemitchell.com)", + "name": "spdx-correct", + "version": "3.1.1", + "description": "correct invalid SPDX expressions", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-correct:spdx-correct:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-correct@3.1.1", + "externalReferences": [ + { + "url": "jslicense/spdx-correct.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-correct@3.2.0?package-id=354ef0f5eebdb222", + "name": "spdx-correct", + "version": "3.2.0", + "description": "correct invalid SPDX expressions", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-correct:spdx-correct:3.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-correct@3.2.0", + "externalReferences": [ + { + "url": "jslicense/spdx-correct.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-exceptions@2.3.0?package-id=22aa1fb7c596c6c7", + "author": "The Linux Foundation", + "name": "spdx-exceptions", + "version": "2.3.0", + "description": "list of SPDX standard license exceptions", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-exceptions:spdx-exceptions:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-exceptions@2.3.0", + "externalReferences": [ + { + "url": "kemitchell/spdx-exceptions.json", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-exceptions@2.3.0?package-id=a66d428fbb321cc7", + "author": "The Linux Foundation", + "name": "spdx-exceptions", + "version": "2.3.0", + "description": "list of SPDX standard license exceptions", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-exceptions:spdx-exceptions:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-exceptions@2.3.0", + "externalReferences": [ + { + "url": "kemitchell/spdx-exceptions.json", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-expression-parse@3.0.1?package-id=78c73c9b189e2783", + "author": "Kyle E. Mitchell (https://kemitchell.com)", + "name": "spdx-expression-parse", + "version": "3.0.1", + "description": "parse SPDX license expressions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:spdx-expression-parse:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-expression-parse@3.0.1", + "externalReferences": [ + { + "url": "jslicense/spdx-expression-parse.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-expression-parse@3.0.1?package-id=f20cbacf4a471831", + "author": "Kyle E. Mitchell (https://kemitchell.com)", + "name": "spdx-expression-parse", + "version": "3.0.1", + "description": "parse SPDX license expressions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:spdx-expression-parse:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-expression-parse@3.0.1", + "externalReferences": [ + { + "url": "jslicense/spdx-expression-parse.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-license-ids@3.0.11?package-id=6530ac28616ec508", + "author": "Shinnosuke Watanabe (https://github.com/shinnn)", + "name": "spdx-license-ids", + "version": "3.0.11", + "description": "A list of SPDX license identifiers", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-license-ids:spdx-license-ids:3.0.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-license-ids@3.0.11", + "externalReferences": [ + { + "url": "jslicense/spdx-license-ids", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-license-ids@3.0.13?package-id=b973922dc641c6a7", + "author": "Shinnosuke Watanabe (https://github.com/shinnn)", + "name": "spdx-license-ids", + "version": "3.0.13", + "description": "A list of SPDX license identifiers", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-license-ids:spdx-license-ids:3.0.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-license-ids@3.0.13", + "externalReferences": [ + { + "url": "jslicense/spdx-license-ids", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sshpk@1.17.0?package-id=343f480d60c250d6", + "author": "Joyent, Inc", + "name": "sshpk", + "version": "1.17.0", + "description": "A library for finding and using SSH public keys", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:arekinath:sshpk:1.17.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/sshpk@1.17.0", + "externalReferences": [ + { + "url": "git+https://github.com/joyent/node-sshpk.git", + "type": "distribution" + }, + { + "url": "https://github.com/arekinath/node-sshpk#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&upstream=busybox&distro=alpine-3.16.5&package-id=674d1e2fba4d633a", + "publisher": "Sören Tempel ", + "name": "ssl_client", + "version": "1.35.0-r17", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.35.0-r17:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&upstream=busybox&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ssri@9.0.1?package-id=49986701356bf646", + "author": "GitHub Inc.", + "name": "ssri", + "version": "9.0.1", + "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ssri:ssri:9.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ssri@9.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/ssri.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/statuses@1.5.0?package-id=96ff1cfb5add4c46", + "name": "statuses", + "version": "1.5.0", + "description": "HTTP status utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:statuses:statuses:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/statuses@1.5.0", + "externalReferences": [ + { + "url": "jshttp/statuses", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/stdout-stream@1.4.1?package-id=f3980bf34929f31f", + "name": "stdout-stream", + "version": "1.4.1", + "description": "Non-blocking stdout stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stdout-stream:stdout-stream:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/stdout-stream@1.4.1", + "externalReferences": [ + { + "url": "mafintosh/stdout-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@1.0.2?package-id=99c2eff90c5879e8", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "1.0.2", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-width:string-width:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@1.0.2", + "externalReferences": [ + { + "url": "sindresorhus/string-width", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@3.1.0?package-id=13d0998431f8e6ca", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "3.1.0", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-width:string-width:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@3.1.0", + "externalReferences": [ + { + "url": "sindresorhus/string-width", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@3.1.0?package-id=c616574e33942189", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "3.1.0", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-width:string-width:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@3.1.0", + "externalReferences": [ + { + "url": "sindresorhus/string-width", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@3.1.0?package-id=da15c8966a32e6fc", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "3.1.0", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-width:string-width:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@3.1.0", + "externalReferences": [ + { + "url": "sindresorhus/string-width", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@4.2.3?package-id=c50e61a77e3ea809", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "4.2.3", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-width:string-width:4.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@4.2.3", + "externalReferences": [ + { + "url": "sindresorhus/string-width", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=5a4daef36b769162", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.3.0?package-id=ca8af4aa6b41ca75", + "name": "string_decoder", + "version": "1.3.0", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@3.0.1?package-id=5660dbb18dd8d236", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "3.0.1", + "description": "Strip ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@3.0.1", + "externalReferences": [ + { + "url": "chalk/strip-ansi", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@5.2.0?package-id=b4723b70c5bdeabc", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "5.2.0", + "description": "Strip ANSI escape codes from a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@5.2.0", + "externalReferences": [ + { + "url": "chalk/strip-ansi", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@5.2.0?package-id=fae2bda52317bc81", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "5.2.0", + "description": "Strip ANSI escape codes from a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@5.2.0", + "externalReferences": [ + { + "url": "chalk/strip-ansi", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@5.2.0?package-id=9fdc9686bba43de6", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "5.2.0", + "description": "Strip ANSI escape codes from a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@5.2.0", + "externalReferences": [ + { + "url": "chalk/strip-ansi", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@6.0.1?package-id=5ec73c7d72940ceb", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "6.0.1", + "description": "Strip ANSI escape codes from a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@6.0.1", + "externalReferences": [ + { + "url": "chalk/strip-ansi", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-indent@3.0.0?package-id=1bc30b600b420b1a", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-indent", + "version": "3.0.0", + "description": "Strip leading whitespace from each line in a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-indent:strip-indent:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-indent@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/strip-indent", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-color@2.0.0?package-id=31606d8b3a6a4bcb", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "supports-color", + "version": "2.0.0", + "description": "Detect whether a terminal supports color", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-color:supports-color:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-color@2.0.0", + "externalReferences": [ + { + "url": "chalk/supports-color", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-color@5.5.0?package-id=a92bebf96aece909", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "supports-color", + "version": "5.5.0", + "description": "Detect whether a terminal supports color", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-color:supports-color:5.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-color@5.5.0", + "externalReferences": [ + { + "url": "chalk/supports-color", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-color@7.2.0?package-id=4c97deb16c788c95", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "supports-color", + "version": "7.2.0", + "description": "Detect whether a terminal supports color", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-color:supports-color:7.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-color@7.2.0", + "externalReferences": [ + { + "url": "chalk/supports-color", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0?package-id=63de1d09c9944553", + "author": "Jordan Harband ", + "name": "supports-preserve-symlinks-flag", + "version": "1.0.0", + "description": "Determine if the current node version supports the `--preserve-symlinks` flag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-preserve-symlinks-flag:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/node-supports-preserve-symlinks-flag.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/node-supports-preserve-symlinks-flag#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tar@6.1.11?package-id=97823590d9da9c9f", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "tar", + "version": "6.1.11", + "description": "tar for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm:tar:6.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/tar@6.1.11", + "externalReferences": [ + { + "url": "https://github.com/npm/node-tar.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tar@6.1.13?package-id=28c160aaaff6b1e5", + "author": "GitHub Inc.", + "name": "tar", + "version": "6.1.13", + "description": "tar for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm:tar:6.1.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/tar@6.1.13", + "externalReferences": [ + { + "url": "https://github.com/npm/node-tar.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/text-table@0.2.0?package-id=a124be9ad599668f", + "author": "James Halliday (http://substack.net)", + "name": "text-table", + "version": "0.2.0", + "description": "borderless text tables with alignment", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:text-table:text-table:0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/text-table@0.2.0", + "externalReferences": [ + { + "url": "git://github.com/substack/text-table.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/text-table", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tiny-relative-date@1.3.0?package-id=bc2a707c455ba496", + "author": "Joseph Wynn (https://wildlyinaccurate.com/)", + "name": "tiny-relative-date", + "version": "1.3.0", + "description": "Tiny function that provides relative, human-readable dates.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tiny-relative-date:tiny-relative-date:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tiny-relative-date@1.3.0", + "externalReferences": [ + { + "url": "https://github.com/wildlyinaccurate/relative-date.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/toidentifier@1.0.0?package-id=9530da023df4a67f", + "author": "Douglas Christopher Wilson ", + "name": "toidentifier", + "version": "1.0.0", + "description": "Convert a string of words to a JavaScript identifier", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:toidentifier:toidentifier:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/toidentifier@1.0.0", + "externalReferences": [ + { + "url": "component/toidentifier", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tough-cookie@2.5.0?package-id=a301940673b885ce", + "author": "Jeremy Stashewsky ", + "name": "tough-cookie", + "version": "2.5.0", + "description": "RFC6265 Cookies and Cookie Jar for node.js", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:tough-cookie:tough-cookie:2.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tough-cookie@2.5.0", + "externalReferences": [ + { + "url": "git://github.com/salesforce/tough-cookie.git", + "type": "distribution" + }, + { + "url": "https://github.com/salesforce/tough-cookie", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/treeverse@2.0.0?package-id=283d5c0745aa3ce7", + "author": "GitHub Inc.", + "name": "treeverse", + "version": "2.0.0", + "description": "Walk any kind of tree structure depth- or breadth-first. Supports promises and advanced map-reduce operations with a very small API.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:treeverse:treeverse:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/treeverse@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/treeverse.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/trim-newlines@3.0.1?package-id=c96d10cad34298f2", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "trim-newlines", + "version": "3.0.1", + "description": "Trim newlines from the start and/or end of a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:trim-newlines:trim-newlines:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/trim-newlines@3.0.1", + "externalReferences": [ + { + "url": "sindresorhus/trim-newlines", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/true-case-path@1.0.3?package-id=21c9dae6ead27ec1", + "author": "barsh", + "name": "true-case-path", + "version": "1.0.3", + "description": "Given a possibly case-variant version of an existing filesystem path, returns the case-exact, normalized version as stored in the filesystem.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:true-case-path:true-case-path:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/true-case-path@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/barsh/true-case-path.git", + "type": "distribution" + }, + { + "url": "https://github.com/barsh/true-case-path#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslib@1.9.3?package-id=a9ed9d8d6ca01dd2", + "author": "Microsoft Corp.", + "name": "tslib", + "version": "1.9.3", + "description": "Runtime library for TypeScript helper functions", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:Microsoft:tslib:1.9.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslib@1.9.3", + "externalReferences": [ + { + "url": "https://github.com/Microsoft/tslib.git", + "type": "distribution" + }, + { + "url": "http://typescriptlang.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tunnel-agent@0.6.0?package-id=2bdf83051339ef2c", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "tunnel-agent", + "version": "0.6.0", + "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:tunnel-agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tunnel-agent@0.6.0", + "externalReferences": [ + { + "url": "https://github.com/mikeal/tunnel-agent", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tweetnacl@0.14.5?package-id=70ac65ccc05f56fb", + "author": "TweetNaCl-js contributors", + "name": "tweetnacl", + "version": "0.14.5", + "description": "Port of TweetNaCl cryptographic library to JavaScript", + "licenses": [ + { + "license": { + "id": "Unlicense" + } + } + ], + "cpe": "cpe:2.3:a:tweetnacl:tweetnacl:0.14.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/tweetnacl@0.14.5", + "externalReferences": [ + { + "url": "https://github.com/dchest/tweetnacl-js.git", + "type": "distribution" + }, + { + "url": "https://tweetnacl.js.org", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/type-fest@0.18.1?package-id=8671d02251d4f42", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "type-fest", + "version": "0.18.1", + "description": "A collection of essential TypeScript types", + "licenses": [ + { + "license": { + "name": "(MIT OR CC0-1.0)" + } + } + ], + "cpe": "cpe:2.3:a:type-fest:type-fest:0.18.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/type-fest@0.18.1", + "externalReferences": [ + { + "url": "sindresorhus/type-fest", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/type-fest@0.6.0?package-id=5d825eebad9b4a4d", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "type-fest", + "version": "0.6.0", + "description": "A collection of essential TypeScript types", + "licenses": [ + { + "license": { + "name": "(MIT OR CC0-1.0)" + } + } + ], + "cpe": "cpe:2.3:a:type-fest:type-fest:0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/type-fest@0.6.0", + "externalReferences": [ + { + "url": "sindresorhus/type-fest", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/type-fest@0.8.1?package-id=974173f6f239e858", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "type-fest", + "version": "0.8.1", + "description": "A collection of essential TypeScript types", + "licenses": [ + { + "license": { + "name": "(MIT OR CC0-1.0)" + } + } + ], + "cpe": "cpe:2.3:a:type-fest:type-fest:0.8.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/type-fest@0.8.1", + "externalReferences": [ + { + "url": "sindresorhus/type-fest", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/type-is@1.6.18?package-id=5bdf50fc9a89514f", + "name": "type-is", + "version": "1.6.18", + "description": "Infer the content-type of a request.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:type-is:type-is:1.6.18:*:*:*:*:*:*:*", + "purl": "pkg:npm/type-is@1.6.18", + "externalReferences": [ + { + "url": "jshttp/type-is", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unique-filename@2.0.1?package-id=ddbea63cf5bc0343", + "author": "GitHub Inc.", + "name": "unique-filename", + "version": "2.0.1", + "description": "Generate a unique filename for use in temporary directories or caches.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:unique-filename:unique-filename:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-filename@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/unique-filename.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/unique-filename", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unique-slug@3.0.0?package-id=a61e6b90d7850f42", + "author": "GitHub Inc.", + "name": "unique-slug", + "version": "3.0.0", + "description": "Generate a unique character string suitible for use in files and URLs.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:unique-slug:unique-slug:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-slug@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/unique-slug.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/universalify@0.1.2?package-id=69eed8a5747afb4f", + "author": "Ryan Zimmerman ", + "name": "universalify", + "version": "0.1.2", + "description": "Make a callback- or promise-based function support both promises and callbacks.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:universalify:universalify:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/universalify@0.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/RyanZim/universalify.git", + "type": "distribution" + }, + { + "url": "https://github.com/RyanZim/universalify#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unpipe@1.0.0?package-id=c584cebc0a9824f4", + "author": "Douglas Christopher Wilson ", + "name": "unpipe", + "version": "1.0.0", + "description": "Unpipe a stream from all destinations", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unpipe:unpipe:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unpipe@1.0.0", + "externalReferences": [ + { + "url": "stream-utils/unpipe", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uri-js@4.4.1?package-id=fe61e3e32f3aaf87", + "author": "Gary Court ", + "name": "uri-js", + "version": "4.4.1", + "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:garycourt:uri-js:4.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/uri-js@4.4.1", + "externalReferences": [ + { + "url": "http://github.com/garycourt/uri-js", + "type": "distribution" + }, + { + "url": "https://github.com/garycourt/uri-js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=ecf076cf26fe73d0", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "util-deprecate", + "version": "1.0.2", + "description": "The Node.js `util.deprecate()` function with browser support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=78a196ea3de81330", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "util-deprecate", + "version": "1.0.2", + "description": "The Node.js `util.deprecate()` function with browser support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/utils-merge@1.0.1?package-id=62471f9f4fe7cedd", + "author": "Jared Hanson (http://www.jaredhanson.net/)", + "name": "utils-merge", + "version": "1.0.1", + "description": "merge() utility function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jaredhanson:utils-merge:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/utils-merge@1.0.1", + "externalReferences": [ + { + "url": "git://github.com/jaredhanson/utils-merge.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uuid@3.3.2?package-id=f2344b1d346d5fe5", + "name": "uuid", + "version": "3.3.2", + "description": "RFC4122 (v1, v4, and v5) UUIDs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:kelektiv:uuid:3.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/uuid@3.3.2", + "externalReferences": [ + { + "url": "https://github.com/kelektiv/node-uuid.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4?package-id=fa90b625ec15ead", + "author": "Kyle E. Mitchell (https://kemitchell.com)", + "name": "validate-npm-package-license", + "version": "3.0.4", + "description": "Give me a string and I'll tell you if it's a valid npm package license string", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:validate-npm-package-license:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/validate-npm-package-license@3.0.4", + "externalReferences": [ + { + "url": "kemitchell/validate-npm-package-license.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4?package-id=4aec2633663a7186", + "author": "Kyle E. Mitchell (https://kemitchell.com)", + "name": "validate-npm-package-license", + "version": "3.0.4", + "description": "Give me a string and I'll tell you if it's a valid npm package license string", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:validate-npm-package-license:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/validate-npm-package-license@3.0.4", + "externalReferences": [ + { + "url": "kemitchell/validate-npm-package-license.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/validate-npm-package-name@4.0.0?package-id=dc3a9f2b7a700330", + "author": "GitHub Inc.", + "name": "validate-npm-package-name", + "version": "4.0.0", + "description": "Give me a string and I'll tell you if it's a valid npm package name", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:validate-npm-package-name:validate-npm-package-name:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/validate-npm-package-name@4.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/validate-npm-package-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/validate-npm-package-name", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/vary@1.1.2?package-id=7021c84ca0665099", + "author": "Douglas Christopher Wilson ", + "name": "vary", + "version": "1.1.2", + "description": "Manipulate the HTTP Vary header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vary:vary:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/vary@1.1.2", + "externalReferences": [ + { + "url": "jshttp/vary", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/verror@1.10.0?package-id=f23f33c383aecb1a", + "name": "verror", + "version": "1.10.0", + "description": "richer JavaScript errors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:davepacheco:verror:1.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/verror@1.10.0", + "externalReferences": [ + { + "url": "git://github.com/davepacheco/node-verror.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/walk-up-path@1.0.0?package-id=9a8dd6f20b12184f", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "walk-up-path", + "version": "1.0.0", + "description": "Given a path string, return a generator that walks up the path, emitting each dirname.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:walk-up-path:walk-up-path:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/walk-up-path@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/walk-up-path", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wcwidth@1.0.1?package-id=ee54c63162090e16", + "author": "Tim Oxley", + "name": "wcwidth", + "version": "1.0.1", + "description": "Port of C's wcwidth() and wcswidth()", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:timoxley:wcwidth:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/wcwidth@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/timoxley/wcwidth.git", + "type": "distribution" + }, + { + "url": "https://github.com/timoxley/wcwidth#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/which@2.0.2?package-id=1d2beaa974655b97", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "which", + "version": "2.0.2", + "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:which:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/which@2.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-which.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/which@2.0.2?package-id=e5a03b0ce6856cfb", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "which", + "version": "2.0.2", + "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:which:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/which@2.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-which.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/which-module@2.0.0?package-id=aa72ca00ee9f5c47", + "author": "nexdrew", + "name": "which-module", + "version": "2.0.0", + "description": "Find the module object for something that was require()d", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:which-module:which-module:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/which-module@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/nexdrew/which-module.git", + "type": "distribution" + }, + { + "url": "https://github.com/nexdrew/which-module#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wide-align@1.1.5?package-id=f0bd5200e29a21be", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "wide-align", + "version": "1.1.5", + "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wide-align:wide-align:1.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/wide-align@1.1.5", + "externalReferences": [ + { + "url": "https://github.com/iarna/wide-align", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wide-align@1.1.5?package-id=f289ab46627a3f1a", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "wide-align", + "version": "1.1.5", + "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wide-align:wide-align:1.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/wide-align@1.1.5", + "externalReferences": [ + { + "url": "https://github.com/iarna/wide-align", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrap-ansi@5.1.0?package-id=99d759e29fd00fc", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "wrap-ansi", + "version": "5.1.0", + "description": "Wordwrap a string with ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:5.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrap-ansi@5.1.0", + "externalReferences": [ + { + "url": "chalk/wrap-ansi", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=88b7c304022dd8b8", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "wrappy", + "version": "1.0.2", + "description": "Callback wrapping utility", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/wrappy", + "type": "distribution" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=ed5926f6f76e646b", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "wrappy", + "version": "1.0.2", + "description": "Callback wrapping utility", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/wrappy", + "type": "distribution" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/write-file-atomic@4.0.2?package-id=401a0baef0d4f8db", + "author": "GitHub Inc.", + "name": "write-file-atomic", + "version": "4.0.2", + "description": "Write files in an atomic fashion w/configurable ownership", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:write-file-atomic:write-file-atomic:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/write-file-atomic@4.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/write-file-atomic.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/write-file-atomic", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/y18n@4.0.3?package-id=c92ff00a51eefe99", + "author": "Ben Coe ", + "name": "y18n", + "version": "4.0.3", + "description": "the bare-bones internationalization library used by yargs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yargs:y18n:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/y18n@4.0.3", + "externalReferences": [ + { + "url": "git@github.com:yargs/y18n.git", + "type": "distribution" + }, + { + "url": "https://github.com/yargs/y18n", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yallist@4.0.0?package-id=c5b3d2829d8d6201", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "yallist", + "version": "4.0.0", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yallist@4.0.0?package-id=962f7b1d680d2d52", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "yallist", + "version": "4.0.0", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yargs@13.3.2?package-id=2ef5bb5df9eb81e7", + "name": "yargs", + "version": "13.3.2", + "description": "yargs the modern, pirate-themed, successor to optimist.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:yargs:yargs:13.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/yargs@13.3.2", + "externalReferences": [ + { + "url": "https://github.com/yargs/yargs.git", + "type": "distribution" + }, + { + "url": "https://yargs.js.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yargs-parser@13.1.2?package-id=fd557779eae2a359", + "author": "Ben Coe ", + "name": "yargs-parser", + "version": "13.1.2", + "description": "the mighty option parser used by yargs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yargs-parser:yargs-parser:13.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/yargs-parser@13.1.2", + "externalReferences": [ + { + "url": "git@github.com:yargs/yargs-parser.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yargs-parser@20.2.9?package-id=5e93c3480eb20787", + "author": "Ben Coe ", + "name": "yargs-parser", + "version": "20.2.9", + "description": "the mighty option parser used by yargs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yargs-parser:yargs-parser:20.2.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/yargs-parser@20.2.9", + "externalReferences": [ + { + "url": "https://github.com/yargs/yargs-parser.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yarn@1.22.19?package-id=f2b974a78000b26b", + "name": "yarn", + "version": "1.22.19", + "description": "📦🐈 Fast, reliable, and secure dependency management.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:yarn:yarn:1.22.19:*:*:*:*:*:*:*", + "purl": "pkg:npm/yarn@1.22.19", + "externalReferences": [ + { + "url": "yarnpkg/yarn", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.12-r3?arch=x86_64&distro=alpine-3.16.5&package-id=75f0d92f695b4303", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.12-r3", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.12-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.12-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.16.5", + "description": "Alpine Linux v3.16", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.16.5" + }, + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40fastify/deepmerge@1.3.0?package-id=e2d8e13424224470", + "name": "@fastify/deepmerge", + "version": "1.3.0", + "description": "Merges the enumerable properties of two or more objects deeply.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@fastify\\/deepmerge:\\@fastify\\/deepmerge:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40fastify/deepmerge@1.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/fastify/deepmerge.git", + "type": "distribution" + }, + { + "url": "https://github.com/fastify/deepmerge#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nestjs/common@7.6.12?package-id=d54be2ae3d12494b", + "author": "Kamil Mysliwiec", + "name": "@nestjs/common", + "version": "7.6.12", + "description": "Nest - modern, fast, powerful node.js web framework (@common)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nestjs\\/common:\\@nestjs\\/common:7.6.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nestjs/common@7.6.12", + "externalReferences": [ + { + "url": "git+https://github.com/nestjs/nest.git", + "type": "distribution" + }, + { + "url": "https://nestjs.com", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nestjs/core@7.6.12?package-id=4f81c182fc0c1725", + "author": "Kamil Mysliwiec", + "name": "@nestjs/core", + "version": "7.6.12", + "description": "Nest - modern, fast, powerful node.js web framework (@core)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nestjs\\/core:\\@nestjs\\/core:7.6.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nestjs/core@7.6.12", + "externalReferences": [ + { + "url": "git+https://github.com/nestjs/nest.git", + "type": "distribution" + }, + { + "url": "https://nestjs.com", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nestjs/mapped-types@0.3.0?package-id=33f368ce65b8a92c", + "author": "Kamil Mysliwiec", + "name": "@nestjs/mapped-types", + "version": "0.3.0", + "description": "Nest - modern, fast, powerful node.js web framework (@mapped-types)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nestjs\\/mapped-types:\\@nestjs\\/mapped-types:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nestjs/mapped-types@0.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/nestjs/mapped-types.git", + "type": "distribution" + }, + { + "url": "https://github.com/nestjs/mapped-types#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nestjs/platform-express@7.6.12?package-id=bce3b466e5e7f496", + "author": "Kamil Mysliwiec", + "name": "@nestjs/platform-express", + "version": "7.6.12", + "description": "Nest - modern, fast, powerful node.js web framework (@platform-express)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nestjs\\/platform-express:\\@nestjs\\/platform-express:7.6.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nestjs/platform-express@7.6.12", + "externalReferences": [ + { + "url": "git+https://github.com/nestjs/nest.git", + "type": "distribution" + }, + { + "url": "https://nestjs.com", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nestjs/swagger@4.7.13?package-id=c910b4ab7eafab3d", + "author": "Kamil Mysliwiec", + "name": "@nestjs/swagger", + "version": "4.7.13", + "description": "Nest - modern, fast, powerful node.js web framework (@swagger)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nestjs\\/swagger:\\@nestjs\\/swagger:4.7.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nestjs/swagger@4.7.13", + "externalReferences": [ + { + "url": "git+https://github.com/nestjs/swagger.git", + "type": "distribution" + }, + { + "url": "https://github.com/nestjs/swagger#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nuxtjs/opencollective@0.3.2?package-id=4e66d3ddcbf4b722", + "name": "@nuxtjs/opencollective", + "version": "0.3.2", + "description": "[![npm version][npm-v-src]][npm-v-href] [![npm downloads][npm-d-src]][npm-d-href] [![status][github-actions-src]][github-actions-href]", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nuxtjs\\/opencollective:\\@nuxtjs\\/opencollective:0.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nuxtjs/opencollective@0.3.2", + "externalReferences": [ + { + "url": "git+https://github.com/nuxt-contrib/opencollective.git", + "type": "distribution" + }, + { + "url": "https://github.com/nuxt-contrib/opencollective#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40sentry/core@6.19.7?package-id=cd0c1f5b8fc79b8d", + "author": "Sentry", + "name": "@sentry/core", + "version": "6.19.7", + "description": "Base implementation for all Sentry JavaScript SDKs", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@sentry\\/core:\\@sentry\\/core:6.19.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40sentry/core@6.19.7", + "externalReferences": [ + { + "url": "git://github.com/getsentry/sentry-javascript.git", + "type": "distribution" + }, + { + "url": "https://github.com/getsentry/sentry-javascript/tree/master/packages/core", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40sentry/hub@6.19.7?package-id=9d14c99265a8607f", + "author": "Sentry", + "name": "@sentry/hub", + "version": "6.19.7", + "description": "Sentry hub which handles global state managment.", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@sentry\\/hub:\\@sentry\\/hub:6.19.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40sentry/hub@6.19.7", + "externalReferences": [ + { + "url": "git://github.com/getsentry/sentry-javascript.git", + "type": "distribution" + }, + { + "url": "https://github.com/getsentry/sentry-javascript/tree/master/packages/hub", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40sentry/minimal@6.19.7?package-id=777bce7c6aa8896f", + "author": "Sentry", + "name": "@sentry/minimal", + "version": "6.19.7", + "description": "Sentry minimal library that can be used in other packages", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@sentry\\/minimal:\\@sentry\\/minimal:6.19.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40sentry/minimal@6.19.7", + "externalReferences": [ + { + "url": "git://github.com/getsentry/sentry-javascript.git", + "type": "distribution" + }, + { + "url": "https://github.com/getsentry/sentry-javascript/tree/master/packages/minimal", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40sentry/node@6.19.7?package-id=a0e2d79b4943eadd", + "author": "Sentry", + "name": "@sentry/node", + "version": "6.19.7", + "description": "Official Sentry SDK for Node.js", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@sentry\\/node:\\@sentry\\/node:6.19.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40sentry/node@6.19.7", + "externalReferences": [ + { + "url": "git://github.com/getsentry/sentry-javascript.git", + "type": "distribution" + }, + { + "url": "https://github.com/getsentry/sentry-javascript/tree/master/packages/node", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40sentry/types@6.19.7?package-id=11f2f61157a029d8", + "author": "Sentry", + "name": "@sentry/types", + "version": "6.19.7", + "description": "Types for all Sentry JavaScript SDKs", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@sentry\\/types:\\@sentry\\/types:6.19.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40sentry/types@6.19.7", + "externalReferences": [ + { + "url": "git://github.com/getsentry/sentry-javascript.git", + "type": "distribution" + }, + { + "url": "https://github.com/getsentry/sentry-javascript/tree/master/packages/types", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40sentry/utils@6.19.7?package-id=a2a54a310d970b26", + "author": "Sentry", + "name": "@sentry/utils", + "version": "6.19.7", + "description": "Utilities for all Sentry JavaScript SDKs", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@sentry\\/utils:\\@sentry\\/utils:6.19.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40sentry/utils@6.19.7", + "externalReferences": [ + { + "url": "git://github.com/getsentry/sentry-javascript.git", + "type": "distribution" + }, + { + "url": "https://github.com/getsentry/sentry-javascript/tree/master/packages/utils", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/swagger-schema-official@2.0.21?package-id=fb625df5e37ecc8e", + "name": "@types/swagger-schema-official", + "version": "2.0.21", + "description": "TypeScript definitions for swagger-schema-official", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/swagger-schema-official:\\@types\\/swagger-schema-official:2.0.21:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/swagger-schema-official@2.0.21", + "externalReferences": [ + { + "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/validator@13.0.0?package-id=df4b0f14d888b090", + "name": "@types/validator", + "version": "13.0.0", + "description": "TypeScript definitions for validator.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/validator:\\@types\\/validator:13.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/validator@13.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/JSONStream@1.3.5?package-id=362f19a26f622e0", + "author": "Dominic Tarr (http://bit.ly/dominictarr)", + "name": "JSONStream", + "version": "1.3.5", + "description": "rawStream.pipe(JSONStream.parse()).pipe(streamOfObjects)", + "licenses": [ + { + "license": { + "name": "(MIT OR Apache-2.0)" + } + } + ], + "cpe": "cpe:2.3:a:dominictarr:JSONStream:1.3.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/JSONStream@1.3.5", + "externalReferences": [ + { + "url": "git://github.com/dominictarr/JSONStream.git", + "type": "distribution" + }, + { + "url": "http://github.com/dominictarr/JSONStream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/abbrev@1.1.1?package-id=79936430981a8702", + "author": "Isaac Z. Schlueter ", + "name": "abbrev", + "version": "1.1.1", + "description": "Like ruby's abbrev module, but in js", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:abbrev:abbrev:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/abbrev@1.1.1", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/isaacs/abbrev-js.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/abbrev-js#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/accepts@1.3.7?package-id=bbbf816fe622ef49", + "name": "accepts", + "version": "1.3.7", + "description": "Higher-level content negotiation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:accepts:accepts:1.3.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/accepts@1.3.7", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/accepts.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/accepts#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/acorn@8.0.5?package-id=3d1e17617f009f24", + "name": "acorn", + "version": "8.0.5", + "description": "ECMAScript parser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:acornjs:acorn:8.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/acorn@8.0.5", + "externalReferences": [ + { + "url": "git+https://github.com/acornjs/acorn.git", + "type": "distribution" + }, + { + "url": "https://github.com/acornjs/acorn", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/acorn-walk@8.0.2?package-id=1b1982bbf272f1dd", + "name": "acorn-walk", + "version": "8.0.2", + "description": "ECMAScript (ESTree) AST walker", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:acorn-walk:acorn-walk:8.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/acorn-walk@8.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/acornjs/acorn.git", + "type": "distribution" + }, + { + "url": "https://github.com/acornjs/acorn", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/agent-base@4.2.1?package-id=5fc4c61198f37ad3", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "agent-base", + "version": "4.2.1", + "description": "Turn a function into an `http.Agent` instance", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:TooTallNate:agent-base:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/agent-base@4.2.1", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/agent-base@4.3.0?package-id=5ba0b4e2347e7c24", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "agent-base", + "version": "4.3.0", + "description": "Turn a function into an `http.Agent` instance", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:TooTallNate:agent-base:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/agent-base@4.3.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/agent-base@6.0.2?package-id=b1bf7cf127c6dcdf", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "agent-base", + "version": "6.0.2", + "description": "Turn a function into an `http.Agent` instance", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:TooTallNate:agent-base:6.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/agent-base@6.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/agentkeepalive@3.5.2?package-id=1b7d5bc0186ab4c", + "author": "fengmk2 (https://fengmk2.com)", + "name": "agentkeepalive", + "version": "3.5.2", + "description": "Missing keepalive http.Agent", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:agentkeepalive:agentkeepalive:3.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/agentkeepalive@3.5.2", + "externalReferences": [ + { + "url": "git://github.com/node-modules/agentkeepalive.git", + "type": "distribution" + }, + { + "url": "https://github.com/node-modules/agentkeepalive#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ajv@6.12.6?package-id=d362ede6e3c68fc2", + "author": "Evgeny Poberezkin", + "name": "ajv", + "version": "6.12.6", + "description": "Another JSON Schema Validator", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ajv-validator:ajv:6.12.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/ajv@6.12.6", + "externalReferences": [ + { + "url": "git+https://github.com/ajv-validator/ajv.git", + "type": "distribution" + }, + { + "url": "https://github.com/ajv-validator/ajv", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ajv@8.11.2?package-id=1209ce04f62066", + "author": "Evgeny Poberezkin", + "name": "ajv", + "version": "8.11.2", + "description": "Another JSON Schema Validator", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ajv:ajv:8.11.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ajv@8.11.2", + "externalReferences": [ + { + "url": "git+https://github.com/ajv-validator/ajv.git", + "type": "distribution" + }, + { + "url": "https://ajv.js.org", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ajv@8.11.2?package-id=21ec2c8474075145", + "author": "Evgeny Poberezkin", + "name": "ajv", + "version": "8.11.2", + "description": "Another JSON Schema Validator", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ajv:ajv:8.11.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ajv@8.11.2", + "externalReferences": [ + { + "url": "git+https://github.com/ajv-validator/ajv.git", + "type": "distribution" + }, + { + "url": "https://ajv.js.org", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ajv-formats@2.1.1?package-id=e2512f1bfeb8344c", + "author": "Evgeny Poberezkin", + "name": "ajv-formats", + "version": "2.1.1", + "description": "Format validation for Ajv v7+", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ajv-validator:ajv-formats:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ajv-formats@2.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/ajv-validator/ajv-formats.git", + "type": "distribution" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.4.0-r0?arch=x86_64&distro=alpine-3.17.1&package-id=92b19c7750fb559d", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.4.0-r0", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.4.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.4.0-r0?arch=x86_64&distro=alpine-3.17.1", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout-data@3.4.0-r0?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.17.1&package-id=291d1267b40d636f", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout-data", + "version": "3.4.0-r0", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout-data@3.4.0-r0?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.17.1", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.17.1&package-id=2b5e23d349b556cf", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.4-r1", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.17.1", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-align@2.0.0?package-id=d1d8dd5f88203c8", + "author": "nexdrew", + "name": "ansi-align", + "version": "2.0.0", + "description": "align-text with ANSI support for CLIs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ansi-align:ansi-align:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-align@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/nexdrew/ansi-align.git", + "type": "distribution" + }, + { + "url": "https://github.com/nexdrew/ansi-align#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@2.1.1?package-id=b7526b5cc6e97d15", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "2.1.1", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@2.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@3.0.0?package-id=f6bd6cc6b4b0fe11", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "3.0.0", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@4.1.0?package-id=1898e7de5ccb0b04", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "4.1.0", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@4.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@4.1.1?package-id=5d5c8bf716d3dada", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "4.1.1", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@4.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@4.1.1?package-id=4c2cae6839d80ac9", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "4.1.1", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@4.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-styles@3.2.1?package-id=822983e67603ef84", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-styles", + "version": "3.2.1", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:3.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@3.2.1", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/ansi-styles.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/ansi-styles#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-styles@4.3.0?package-id=45c620984a9fcd36", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-styles", + "version": "4.3.0", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@4.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/ansi-styles.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/ansi-styles#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansicolors@0.3.2?package-id=b232b7afe5d99ae2", + "author": "Thorsten Lorenz (thlorenz.com)", + "name": "ansicolors", + "version": "0.3.2", + "description": "Functions that surround a string with ansicolor codes so it prints in color.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansicolors:ansicolors:0.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansicolors@0.3.2", + "externalReferences": [ + { + "url": "git://github.com/thlorenz/ansicolors.git", + "type": "distribution" + }, + { + "url": "https://github.com/thlorenz/ansicolors#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansistyles@0.1.3?package-id=3ab660f779efda37", + "author": "Thorsten Lorenz (thlorenz.com)", + "name": "ansistyles", + "version": "0.1.3", + "description": "Functions that surround a string with ansistyle codes so it prints in style.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansistyles:ansistyles:0.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansistyles@0.1.3", + "externalReferences": [ + { + "url": "git://github.com/thlorenz/ansistyles.git", + "type": "distribution" + }, + { + "url": "https://github.com/thlorenz/ansistyles#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.10-r1?arch=x86_64&distro=alpine-3.17.1&package-id=e5f757b0df1f62bc", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.12.10-r1", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.12.10-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.12.10-r1?arch=x86_64&distro=alpine-3.17.1", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/append-field@1.0.0?package-id=b4d8c83b22bdf90a", + "author": "Linus Unnebäck ", + "name": "append-field", + "version": "1.0.0", + "description": "A [W3C HTML JSON forms spec](http://www.w3.org/TR/html-json-forms/) compliant field appender (for lack of a better name). Useful for people implementing `application/x-www-form-urlencoded` and `multipart/form-data` parsers.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:append-field:append-field:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/append-field@1.0.0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/LinusU/node-append-field.git", + "type": "distribution" + }, + { + "url": "https://github.com/LinusU/node-append-field#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aproba@1.2.0?package-id=46ad585877d1bee7", + "author": "Rebecca Turner ", + "name": "aproba", + "version": "1.2.0", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:aproba:aproba:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aproba@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aproba@1.2.0?package-id=9379102f72715cd", + "author": "Rebecca Turner ", + "name": "aproba", + "version": "1.2.0", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:aproba:aproba:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aproba@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aproba@1.2.0?package-id=b0b533a70d15e523", + "author": "Rebecca Turner ", + "name": "aproba", + "version": "1.2.0", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:aproba:aproba:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aproba@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aproba@1.2.0?package-id=79645860424278c4", + "author": "Rebecca Turner ", + "name": "aproba", + "version": "1.2.0", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:aproba:aproba:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aproba@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aproba@1.2.0?package-id=811071cd19319711", + "author": "Rebecca Turner ", + "name": "aproba", + "version": "1.2.0", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:aproba:aproba:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aproba@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aproba@2.0.0?package-id=1375db1ef28ee546", + "author": "Rebecca Turner ", + "name": "aproba", + "version": "2.0.0", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:aproba:aproba:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aproba@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/archy@1.0.0?package-id=b81fc5a638c3732d", + "author": "James Halliday (http://substack.net)", + "name": "archy", + "version": "1.0.0", + "description": "render nested hierarchies `npm ls` style with unicode pipes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:substack:archy:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/archy@1.0.0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/substack/node-archy.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/node-archy#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/are-we-there-yet@1.1.4?package-id=13183467f0c1f82b", + "author": "Rebecca Turner (http://re-becca.org)", + "name": "are-we-there-yet", + "version": "1.1.4", + "description": "Keep track of the overall completion of many disparate processes", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:are-we-there-yet:are-we-there-yet:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/are-we-there-yet@1.1.4", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/are-we-there-yet.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/are-we-there-yet", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/argparse@1.0.10?package-id=100e667c428dea85", + "name": "argparse", + "version": "1.0.10", + "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:argparse:argparse:1.0.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/argparse@1.0.10", + "externalReferences": [ + { + "url": "git+https://github.com/nodeca/argparse.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodeca/argparse#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/array-flatten@1.1.1?package-id=a0792ccdcca020ca", + "author": "Blake Embrey (http://blakeembrey.me)", + "name": "array-flatten", + "version": "1.1.1", + "description": "Flatten an array of nested arrays into a single flat array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:array-flatten:array-flatten:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/array-flatten@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/blakeembrey/array-flatten.git", + "type": "distribution" + }, + { + "url": "https://github.com/blakeembrey/array-flatten", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asap@2.0.6?package-id=56ea014550752625", + "name": "asap", + "version": "2.0.6", + "description": "High-priority task queue for Node.js and browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:kriskowal:asap:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/asap@2.0.6", + "externalReferences": [ + { + "url": "git+https://github.com/kriskowal/asap.git", + "type": "distribution" + }, + { + "url": "https://github.com/kriskowal/asap#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asn1@0.2.4?package-id=12c39bfa53d7d26f", + "author": "Joyent (joyent.com)", + "name": "asn1", + "version": "0.2.4", + "description": "Contains parsers and serializers for ASN.1 (currently BER only)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:joyent:asn1:0.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/asn1@0.2.4", + "externalReferences": [ + { + "url": "git://github.com/joyent/node-asn1.git", + "type": "distribution" + }, + { + "url": "https://github.com/joyent/node-asn1#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/assert-plus@1.0.0?package-id=7b7c9640aad220f0", + "author": "Mark Cavage ", + "name": "assert-plus", + "version": "1.0.0", + "description": "Extra assertions on top of node's assert module", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:assert-plus:assert-plus:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/assert-plus@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/mcavage/node-assert-plus.git", + "type": "distribution" + }, + { + "url": "https://github.com/mcavage/node-assert-plus#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asynckit@0.4.0?package-id=7f18bf9a25c0da72", + "author": "Alex Indigo ", + "name": "asynckit", + "version": "0.4.0", + "description": "Minimal async jobs utility library, with streams support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alexindigo:asynckit:0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/asynckit@0.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/alexindigo/asynckit.git", + "type": "distribution" + }, + { + "url": "https://github.com/alexindigo/asynckit#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aws-sign2@0.7.0?package-id=f8fe112c8da3e39f", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "aws-sign2", + "version": "0.7.0", + "description": "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor in request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:aws-sign2:aws-sign2:0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aws-sign2@0.7.0", + "externalReferences": [ + { + "url": "git+https://github.com/mikeal/aws-sign.git", + "type": "distribution" + }, + { + "url": "https://github.com/mikeal/aws-sign#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aws4@1.8.0?package-id=eb9b4fd5d957d188", + "author": "Michael Hart (http://github.com/mhart)", + "name": "aws4", + "version": "1.8.0", + "description": "Signs and prepares requests using AWS Signature Version 4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mhart:aws4:1.8.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aws4@1.8.0", + "externalReferences": [ + { + "url": "git+https://github.com/mhart/aws4.git", + "type": "distribution" + }, + { + "url": "https://github.com/mhart/aws4#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/axios@0.21.1?package-id=5a7030bf3c0c089c", + "author": "Matt Zabriskie", + "name": "axios", + "version": "0.21.1", + "description": "Promise based HTTP client for the browser and node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:axios:axios:0.21.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/axios@0.21.1", + "externalReferences": [ + { + "url": "git+https://github.com/axios/axios.git", + "type": "distribution" + }, + { + "url": "https://github.com/axios/axios", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/balanced-match@1.0.0?package-id=f2485d1f88b2b3bf", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "balanced-match", + "version": "1.0.0", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/balanced-match@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/balanced-match@1.0.0?package-id=604bcb0d94c55468", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "balanced-match", + "version": "1.0.0", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/balanced-match@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2?package-id=b345fa0f3bee37c", + "name": "bcrypt-pbkdf", + "version": "1.0.2", + "description": "Port of the OpenBSD bcrypt_pbkdf function to pure JS", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:bcrypt-pbkdf:bcrypt-pbkdf:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/bcrypt-pbkdf@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/joyent/node-bcrypt-pbkdf.git", + "type": "distribution" + }, + { + "url": "https://github.com/joyent/node-bcrypt-pbkdf#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bin-links@1.1.8?package-id=d51f215e6a9beb3e", + "author": "Mike Sherov", + "name": "bin-links", + "version": "1.1.8", + "description": "JavaScript package binary linker", + "licenses": [ + { + "license": { + "id": "Artistic-2.0" + } + } + ], + "cpe": "cpe:2.3:a:bin-links:bin-links:1.1.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/bin-links@1.1.8", + "externalReferences": [ + { + "url": "git://github.com/npm/bin-links.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/bin-links#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bluebird@3.5.5?package-id=23a13a465eeec006", + "author": "Petka Antonov (http://github.com/petkaantonov/)", + "name": "bluebird", + "version": "3.5.5", + "description": "Full featured Promises/A+ implementation with exceptionally good performance", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:petkaantonov:bluebird:3.5.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/bluebird@3.5.5", + "externalReferences": [ + { + "url": "git://github.com/petkaantonov/bluebird.git", + "type": "distribution" + }, + { + "url": "https://github.com/petkaantonov/bluebird", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/body-parser@1.19.0?package-id=be42f3aef28246c", + "name": "body-parser", + "version": "1.19.0", + "description": "Node.js body parsing middleware", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:body-parser:body-parser:1.19.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/body-parser@1.19.0", + "externalReferences": [ + { + "url": "git+https://github.com/expressjs/body-parser.git", + "type": "distribution" + }, + { + "url": "https://github.com/expressjs/body-parser#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/boolean@3.2.0?package-id=a5139e59aa9a5908", + "name": "boolean", + "version": "3.2.0", + "description": "boolean converts lots of things to boolean.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:thenativeweb:boolean:3.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/boolean@3.2.0", + "externalReferences": [ + { + "url": "git://github.com/thenativeweb/boolean.git", + "type": "distribution" + }, + { + "url": "https://github.com/thenativeweb/boolean#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/boxen@1.3.0?package-id=9733e2ac66f5ce9b", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "boxen", + "version": "1.3.0", + "description": "Create boxes in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:boxen:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/boxen@1.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/boxen.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/boxen#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=b2f1259ad317cd31", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "1.1.11", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=a3ea8e119b765a4b", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "1.1.11", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-from@1.0.0?package-id=679ef1b5d74ace0f", + "name": "buffer-from", + "version": "1.0.0", + "description": "A [ponyfill](https://ponyfill.com) for `Buffer.from`, uses native implementation if available.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-from:buffer-from:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-from@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/LinusU/buffer-from.git", + "type": "distribution" + }, + { + "url": "https://github.com/LinusU/buffer-from#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-from@1.1.1?package-id=f79feba1e77ff417", + "name": "buffer-from", + "version": "1.1.1", + "description": "A [ponyfill](https://ponyfill.com) for `Buffer.from`, uses native implementation if available.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-from:buffer-from:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-from@1.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/LinusU/buffer-from.git", + "type": "distribution" + }, + { + "url": "https://github.com/LinusU/buffer-from#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/builtins@1.0.3?package-id=38ca391b8ca0276a", + "name": "builtins", + "version": "1.0.3", + "description": "List of node.js builtin modules", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juliangruber:builtins:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/builtins@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/juliangruber/builtins.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/builtins#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/busboy@0.2.14?package-id=b320ea57e5b5ba6a", + "author": "Brian White ", + "name": "busboy", + "version": "0.2.14", + "description": "A streaming parser for HTML form data for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:busboy:busboy:0.2.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/busboy@0.2.14", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/mscdex/busboy.git", + "type": "distribution" + }, + { + "url": "https://github.com/mscdex/busboy#readme", + "type": "website" + } + ] + }, + { + "type": "application", + "bom-ref": "5c25680736f90c12", + "name": "busybox", + "version": "1.35.0", + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=alpine-3.17.1&package-id=623d53216342d45e", + "publisher": "Sören Tempel ", + "name": "busybox", + "version": "1.35.0-r29", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0-r29:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=alpine-3.17.1", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.1&package-id=256fc96b4a8c4da8", + "publisher": "Sören Tempel ", + "name": "busybox-binsh", + "version": "1.35.0-r29", + "description": "busybox ash /bin/sh", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox-binsh:busybox-binsh:1.35.0-r29:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.1", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/byline@5.0.0?package-id=bc8643b43cbc314e", + "author": "John Hewson", + "name": "byline", + "version": "5.0.0", + "description": "simple line-by-line stream reader", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jahewson:byline:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/byline@5.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/jahewson/node-byline.git", + "type": "distribution" + }, + { + "url": "https://github.com/jahewson/node-byline", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/byte-size@5.0.1?package-id=ca5e03ebe208c5ec", + "author": "Lloyd Brookes <75pound@gmail.com>", + "name": "byte-size", + "version": "5.0.1", + "description": "Convert a bytes (and octets) value to a more human-readable format. Choose between metric or IEC units.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:byte-size:byte-size:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/byte-size@5.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/75lb/byte-size.git", + "type": "distribution" + }, + { + "url": "https://github.com/75lb/byte-size#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bytes@3.1.0?package-id=b4af9154bbf6604c", + "author": "TJ Holowaychuk (http://tjholowaychuk.com)", + "name": "bytes", + "version": "3.1.0", + "description": "Utility to parse a string bytes to bytes and vice-versa", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:visionmedia:bytes:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/bytes@3.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/visionmedia/bytes.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/visionmedia/bytes.js#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20220614-r4?arch=x86_64&upstream=ca-certificates&distro=alpine-3.17.1&package-id=b805d823ae624f04", + "publisher": "Natanael Copa ", + "name": "ca-certificates-bundle", + "version": "20220614-r4", + "description": "Pre generated bundle of Mozilla certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-bundle@20220614-r4?arch=x86_64&upstream=ca-certificates&distro=alpine-3.17.1", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cacache@12.0.3?package-id=4dc4cde2d8aef433", + "author": "Kat Marchán ", + "name": "cacache", + "version": "12.0.3", + "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cacache:cacache:12.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/cacache@12.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/npm/cacache.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/cacache#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/call-limit@1.1.1?package-id=94eefbf82cd78b25", + "author": "Rebecca Turner ", + "name": "call-limit", + "version": "1.1.1", + "description": "Limit the number of simultaneous calls to an async function", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:call-limit:call-limit:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/call-limit@1.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/call-limit.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/packages/call-limit", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/camelcase@4.1.0?package-id=be57efd9d82defbf", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "camelcase", + "version": "4.1.0", + "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:camelcase:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/camelcase@4.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/camelcase.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/camelcase#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/camelcase@5.3.1?package-id=4d249508c958ea3b", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "camelcase", + "version": "5.3.1", + "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:camelcase:5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/camelcase@5.3.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/camelcase.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/camelcase#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/capture-stack-trace@1.0.0?package-id=12efd23d12d8a98f", + "author": "Vsevolod Strukchinsky (github.com/floatdrop)", + "name": "capture-stack-trace", + "version": "1.0.0", + "description": "Error.captureStackTrace ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:capture-stack-trace:capture-stack-trace:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/capture-stack-trace@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/floatdrop/capture-stack-trace.git", + "type": "distribution" + }, + { + "url": "https://github.com/floatdrop/capture-stack-trace#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/caseless@0.12.0?package-id=748962a916b10431", + "author": "Mikeal Rogers ", + "name": "caseless", + "version": "0.12.0", + "description": "Caseless object set/get/has, very useful when working with HTTP headers.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:caseless:caseless:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/caseless@0.12.0", + "externalReferences": [ + { + "url": "git+https://github.com/mikeal/caseless.git", + "type": "distribution" + }, + { + "url": "https://github.com/mikeal/caseless#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chalk@2.4.1?package-id=772c80d6136b5c7c", + "name": "chalk", + "version": "2.4.1", + "description": "Terminal string styling done right", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chalk:chalk:2.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/chalk@2.4.1", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/chalk.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/chalk#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chalk@4.1.0?package-id=836e37cb96ea7d5f", + "name": "chalk", + "version": "4.1.0", + "description": "Terminal string styling done right", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chalk:chalk:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/chalk@4.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/chalk.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/chalk#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chownr@1.1.4?package-id=8e7f2809309b2b87", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "chownr", + "version": "1.1.4", + "description": "like `chown -R`", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:chownr:chownr:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/chownr@1.1.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/chownr.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/chownr#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ci-info@1.6.0?package-id=55ea54d1f904bd5e", + "author": "Thomas Watson Steen (https://twitter.com/wa7son)", + "name": "ci-info", + "version": "1.6.0", + "description": "Get details about the current Continuous Integration environment", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ci-info:ci-info:1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ci-info@1.6.0", + "externalReferences": [ + { + "url": "git+https://github.com/watson/ci-info.git", + "type": "distribution" + }, + { + "url": "https://github.com/watson/ci-info", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ci-info@2.0.0?package-id=16574bf0190b83e7", + "author": "Thomas Watson Steen (https://twitter.com/wa7son)", + "name": "ci-info", + "version": "2.0.0", + "description": "Get details about the current Continuous Integration environment", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ci-info:ci-info:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ci-info@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/watson/ci-info.git", + "type": "distribution" + }, + { + "url": "https://github.com/watson/ci-info", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cidr-regex@2.0.10?package-id=444a2d33b9bb6cf8", + "author": "silverwind ", + "name": "cidr-regex", + "version": "2.0.10", + "description": "Regular expression for matching IP addresses in CIDR notation", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:cidr-regex:cidr-regex:2.0.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/cidr-regex@2.0.10", + "externalReferences": [ + { + "url": "git+https://github.com/silverwind/cidr-regex.git", + "type": "distribution" + }, + { + "url": "https://github.com/silverwind/cidr-regex#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/class-transformer@0.3.1?package-id=e7a380cceb8414d2", + "author": "Umed Khudoiberdiev ", + "name": "class-transformer", + "version": "0.3.1", + "description": "Proper decorator-based transformation / serialization / deserialization of plain javascript objects to class constructors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:class-transformer:class-transformer:0.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/class-transformer@0.3.1", + "externalReferences": [ + { + "url": "git+https://github.com/typestack/class-transformer.git", + "type": "distribution" + }, + { + "url": "https://github.com/typestack/class-transformer#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/class-validator@0.12.2?package-id=c94eed0c9e7dc64a", + "author": "Umed Khudoiberdiev ", + "name": "class-validator", + "version": "0.12.2", + "description": "Class-based validation with Typescript / ES6 / ES5 using decorators or validation schemas. Supports both node.js and browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:class-validator:class-validator:0.12.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/class-validator@0.12.2", + "externalReferences": [ + { + "url": "git+https://github.com/typestack/class-validator.git", + "type": "distribution" + }, + { + "url": "https://github.com/typestack/class-validator#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-boxes@1.0.0?package-id=9c02e7f0cdd715b7", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "cli-boxes", + "version": "1.0.0", + "description": "Boxes for use in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:cli-boxes:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-boxes@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/cli-boxes.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/cli-boxes#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-columns@3.1.2?package-id=e9543de12daa768f", + "author": "Shannon Moeller (http://shannonmoeller.com)", + "name": "cli-columns", + "version": "3.1.2", + "description": "Columnated lists for the CLI.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shannonmoeller:cli-columns:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-columns@3.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/shannonmoeller/cli-columns.git", + "type": "distribution" + }, + { + "url": "https://github.com/shannonmoeller/cli-columns#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-table3@0.5.1?package-id=65433b3fd2fe95a6", + "author": "James Talmage", + "name": "cli-table3", + "version": "0.5.1", + "description": "Pretty unicode tables for the command line. Based on the original cli-table.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cli-table3:cli-table3:0.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-table3@0.5.1", + "externalReferences": [ + { + "url": "git+https://github.com/cli-table/cli-table3.git", + "type": "distribution" + }, + { + "url": "https://github.com/cli-table/cli-table3", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cliui@5.0.0?package-id=9c059219de8ff0b6", + "author": "Ben Coe ", + "name": "cliui", + "version": "5.0.0", + "description": "easily create complex multi-column command-line-interfaces", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cliui:cliui:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cliui@5.0.0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/yargs/cliui.git", + "type": "distribution" + }, + { + "url": "https://github.com/yargs/cliui#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/clone@1.0.4?package-id=13cad0458880c288", + "author": "Paul Vorbach (http://paul.vorba.ch/)", + "name": "clone", + "version": "1.0.4", + "description": "deep cloning of objects and arrays", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clone:clone:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/clone@1.0.4", + "externalReferences": [ + { + "url": "git://github.com/pvorb/node-clone.git", + "type": "distribution" + }, + { + "url": "https://github.com/pvorb/node-clone#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cmd-shim@3.0.3?package-id=6d36801ba84205fb", + "name": "cmd-shim", + "version": "3.0.3", + "description": "Used in npm for command line application support", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cmd-shim:cmd-shim:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/cmd-shim@3.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/npm/cmd-shim.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/cmd-shim#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/code-point-at@1.1.0?package-id=cdc2db70d5aa7113", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "code-point-at", + "version": "1.1.0", + "description": "ES2015 `String#codePointAt()` ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:code-point-at:code-point-at:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/code-point-at@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/code-point-at.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/code-point-at#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-convert@1.9.1?package-id=6a9f0408fc41f63d", + "author": "Heather Arthur ", + "name": "color-convert", + "version": "1.9.1", + "description": "Plain color conversion functions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:1.9.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@1.9.1", + "externalReferences": [ + { + "url": "git+https://github.com/Qix-/color-convert.git", + "type": "distribution" + }, + { + "url": "https://github.com/Qix-/color-convert#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-convert@2.0.1?package-id=417528da04af2cd8", + "author": "Heather Arthur ", + "name": "color-convert", + "version": "2.0.1", + "description": "Plain color conversion functions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@2.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/Qix-/color-convert.git", + "type": "distribution" + }, + { + "url": "https://github.com/Qix-/color-convert#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-name@1.1.3?package-id=55fdc340e318670", + "author": "DY ", + "name": "color-name", + "version": "1.1.3", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.3", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/dfcreative/color-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/dfcreative/color-name", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-name@1.1.4?package-id=f1798456080e41f3", + "author": "DY ", + "name": "color-name", + "version": "1.1.4", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.4", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/colorjs/color-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/colorjs/color-name", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/colors@1.3.3?package-id=c0b370b3fbefe8a8", + "author": "Marak Squires", + "name": "colors", + "version": "1.3.3", + "description": "get colors in your node.js console", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:colors:colors:1.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/colors@1.3.3", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/Marak/colors.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/Marak/colors.js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/columnify@1.5.4?package-id=c10dc5491c1ec9ba", + "author": "Tim Oxley", + "name": "columnify", + "version": "1.5.4", + "description": "Render data in text columns. Supports in-column text-wrap.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:columnify:columnify:1.5.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/columnify@1.5.4", + "externalReferences": [ + { + "url": "git://github.com/timoxley/columnify.git", + "type": "distribution" + }, + { + "url": "https://github.com/timoxley/columnify", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/combined-stream@1.0.6?package-id=40ad2220c38228d3", + "author": "Felix Geisendörfer (http://debuggable.com/)", + "name": "combined-stream", + "version": "1.0.6", + "description": "A stream that emits multiple other streams one after another.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:combined-stream:combined-stream:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/combined-stream@1.0.6", + "externalReferences": [ + { + "url": "git://github.com/felixge/node-combined-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/felixge/node-combined-stream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=cae0cd90b1194aad", + "author": "James Halliday (http://substack.net)", + "name": "concat-map", + "version": "0.0.1", + "description": "concatenative mapdashery", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/node-concat-map#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=329fc63deaa5be87", + "author": "James Halliday (http://substack.net)", + "name": "concat-map", + "version": "0.0.1", + "description": "concatenative mapdashery", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/node-concat-map#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-stream@1.6.2?package-id=bc1b41c56853527e", + "author": "Max Ogden ", + "name": "concat-stream", + "version": "1.6.2", + "description": "writable stream that concatenates strings or binary data and calls a callback with the result", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-stream:concat-stream:1.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-stream@1.6.2", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/maxogden/concat-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/maxogden/concat-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-stream@1.6.2?package-id=a6eeed3b9d53d4b7", + "author": "Max Ogden ", + "name": "concat-stream", + "version": "1.6.2", + "description": "writable stream that concatenates strings or binary data and calls a callback with the result", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-stream:concat-stream:1.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-stream@1.6.2", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/maxogden/concat-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/maxogden/concat-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/config-chain@1.1.12?package-id=ab957e8b65997c1d", + "author": "Dominic Tarr (http://dominictarr.com)", + "name": "config-chain", + "version": "1.1.12", + "description": "HANDLE CONFIGURATION ONCE AND FOR ALL", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:config-chain:config-chain:1.1.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/config-chain@1.1.12", + "externalReferences": [ + { + "url": "git+https://github.com/dominictarr/config-chain.git", + "type": "distribution" + }, + { + "url": "http://github.com/dominictarr/config-chain", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/configstore@3.1.5?package-id=cbe4550eb45f019", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "configstore", + "version": "3.1.5", + "description": "Easily load and save config without having to think about where and how", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:configstore:configstore:3.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/configstore@3.1.5", + "externalReferences": [ + { + "url": "git+https://github.com/yeoman/configstore.git", + "type": "distribution" + }, + { + "url": "https://github.com/yeoman/configstore#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/consola@2.15.3?package-id=9b03a0585128a93a", + "name": "consola", + "version": "2.15.3", + "description": "Elegant Console Logger for Node.js and Browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:consola:consola:2.15.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/consola@2.15.3", + "externalReferences": [ + { + "url": "git+https://github.com/nuxt/consola.git", + "type": "distribution" + }, + { + "url": "https://github.com/nuxt/consola#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/console-control-strings@1.1.0?package-id=40a4233e59daf424", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "console-control-strings", + "version": "1.1.0", + "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:console-control-strings:console-control-strings:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/console-control-strings@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/console-control-strings.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/console-control-strings#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/content-disposition@0.5.3?package-id=9818af4848590460", + "author": "Douglas Christopher Wilson ", + "name": "content-disposition", + "version": "0.5.3", + "description": "Create and parse Content-Disposition header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:content-disposition:content-disposition:0.5.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/content-disposition@0.5.3", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/content-disposition.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/content-disposition#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/content-type@1.0.4?package-id=e516a2b57e9346c6", + "author": "Douglas Christopher Wilson ", + "name": "content-type", + "version": "1.0.4", + "description": "Create and parse HTTP Content-Type header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:content-type:content-type:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/content-type@1.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/content-type.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/content-type#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cookie@0.4.0?package-id=5fac5f18e7a1cc19", + "author": "Roman Shtylman ", + "name": "cookie", + "version": "0.4.0", + "description": "HTTP server cookie parsing and serialization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie:cookie:0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie@0.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/cookie.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/cookie#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cookie@0.4.2?package-id=e48014f93b9ab851", + "author": "Roman Shtylman ", + "name": "cookie", + "version": "0.4.2", + "description": "HTTP server cookie parsing and serialization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie:cookie:0.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie@0.4.2", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/cookie.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/cookie#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cookie-signature@1.0.6?package-id=a948a26643209509", + "author": "TJ Holowaychuk ", + "name": "cookie-signature", + "version": "1.0.6", + "description": "Sign and unsign cookies", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie-signature:cookie-signature:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie-signature@1.0.6", + "externalReferences": [ + { + "url": "git+https://github.com/visionmedia/node-cookie-signature.git", + "type": "distribution" + }, + { + "url": "https://github.com/visionmedia/node-cookie-signature#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/copy-concurrently@1.0.5?package-id=edf05ca839b08cd4", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "copy-concurrently", + "version": "1.0.5", + "description": "Promises of copies of files, directories and symlinks, with concurrency controls and win32 junction fallback.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:copy-concurrently:copy-concurrently:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/copy-concurrently@1.0.5", + "externalReferences": [ + { + "url": "git+https://github.com/npm/copy-concurrently.git", + "type": "distribution" + }, + { + "url": "https://www.npmjs.com/package/copy-concurrently", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/core-util-is@1.0.2?package-id=88273ea59dd04956", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "core-util-is", + "version": "1.0.2", + "description": "The `util.is*` functions introduced in Node v0.12.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:core-util-is:core-util-is:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/core-util-is@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/core-util-is.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/core-util-is#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/core-util-is@1.0.2?package-id=c0eb72d0948fdcd7", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "core-util-is", + "version": "1.0.2", + "description": "The `util.is*` functions introduced in Node v0.12.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:core-util-is:core-util-is:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/core-util-is@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/core-util-is.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/core-util-is#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/corepack@0.15.1?package-id=ceed1cd3d200ed93", + "name": "corepack", + "version": "0.15.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:corepack:corepack:0.15.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/corepack@0.15.1", + "externalReferences": [ + { + "url": "https://github.com/nodejs/corepack.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/corepack#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cors@2.8.5?package-id=9e15e0015d5f6152", + "author": "Troy Goode (https://github.com/troygoode/)", + "name": "cors", + "version": "2.8.5", + "description": "Node.js CORS middleware", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:expressjs:cors:2.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/cors@2.8.5", + "externalReferences": [ + { + "url": "git+https://github.com/expressjs/cors.git", + "type": "distribution" + }, + { + "url": "https://github.com/expressjs/cors#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/create-error-class@3.0.2?package-id=bf8293b4fe00649d", + "author": "Vsevolod Strukchinsky (github.com/floatdrop)", + "name": "create-error-class", + "version": "3.0.2", + "description": "Create Error classes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:create-error-class:create-error-class:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/create-error-class@3.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/floatdrop/create-error-class.git", + "type": "distribution" + }, + { + "url": "https://github.com/floatdrop/create-error-class#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cross-spawn@5.1.0?package-id=61672b0d32e13073", + "author": "IndigoUnited (http://indigounited.com)", + "name": "cross-spawn", + "version": "5.1.0", + "description": "Cross platform child_process#spawn and child_process#spawnSync", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:IndigoUnited:cross-spawn:5.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cross-spawn@5.1.0", + "externalReferences": [ + { + "url": "git://github.com/IndigoUnited/node-cross-spawn.git", + "type": "distribution" + }, + { + "url": "https://github.com/IndigoUnited/node-cross-spawn#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/crypto-random-string@1.0.0?package-id=e95397a312b450f1", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "crypto-random-string", + "version": "1.0.0", + "description": "Generate a cryptographically strong random string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crypto-random-string:crypto-random-string:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/crypto-random-string@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/crypto-random-string.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/crypto-random-string#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cyclist@0.2.2?package-id=f1897ed52fc1db0d", + "author": "Mathias Buus Madsen ", + "name": "cyclist", + "version": "0.2.2", + "description": "Cyclist is an efficient cyclic list implemention.", + "cpe": "cpe:2.3:a:mafintosh:cyclist:0.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/cyclist@0.2.2", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/cyclist.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/cyclist#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dashdash@1.14.1?package-id=d46834cee3b39d41", + "author": "Trent Mick (http://trentm.com)", + "name": "dashdash", + "version": "1.14.1", + "description": "A light, featureful and explicit option parsing library.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dashdash:dashdash:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/dashdash@1.14.1", + "externalReferences": [ + { + "url": "git://github.com/trentm/node-dashdash.git", + "type": "distribution" + }, + { + "url": "https://github.com/trentm/node-dashdash#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@2.6.9?package-id=eaa4bb0dd0b61ab6", + "author": "TJ Holowaychuk ", + "name": "debug", + "version": "2.6.9", + "description": "small debugging utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:visionmedia:debug:2.6.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@2.6.9", + "externalReferences": [ + { + "url": "git://github.com/visionmedia/debug.git", + "type": "distribution" + }, + { + "url": "https://github.com/visionmedia/debug#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@3.1.0?package-id=6cd8fab77e7f9acc", + "author": "TJ Holowaychuk ", + "name": "debug", + "version": "3.1.0", + "description": "small debugging utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:visionmedia:debug:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@3.1.0", + "externalReferences": [ + { + "url": "git://github.com/visionmedia/debug.git", + "type": "distribution" + }, + { + "url": "https://github.com/visionmedia/debug#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@4.3.1?package-id=c8e552beb88cc156", + "author": "TJ Holowaychuk ", + "name": "debug", + "version": "4.3.1", + "description": "small debugging utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:visionmedia:debug:4.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@4.3.1", + "externalReferences": [ + { + "url": "git://github.com/visionmedia/debug.git", + "type": "distribution" + }, + { + "url": "https://github.com/visionmedia/debug#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@4.3.4?package-id=d53d67056f050b4c", + "author": "Josh Junon ", + "name": "debug", + "version": "4.3.4", + "description": "Lightweight debugging utility for Node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debug-js:debug:4.3.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@4.3.4", + "externalReferences": [ + { + "url": "git://github.com/debug-js/debug.git", + "type": "distribution" + }, + { + "url": "https://github.com/debug-js/debug#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@4.3.4?package-id=5842283db096bc55", + "author": "Josh Junon ", + "name": "debug", + "version": "4.3.4", + "description": "Lightweight debugging utility for Node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debug-js:debug:4.3.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@4.3.4", + "externalReferences": [ + { + "url": "git://github.com/debug-js/debug.git", + "type": "distribution" + }, + { + "url": "https://github.com/debug-js/debug#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debuglog@1.0.1?package-id=abf6b1b40c49bc95", + "author": "Sam Roberts ", + "name": "debuglog", + "version": "1.0.1", + "description": "backport of util.debuglog from node v0.11", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sam-github:debuglog:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/debuglog@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sam-github/node-debuglog.git", + "type": "distribution" + }, + { + "url": "https://github.com/sam-github/node-debuglog#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/decamelize@1.2.0?package-id=ad1f772c12d9a9f", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "decamelize", + "version": "1.2.0", + "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:decamelize:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/decamelize@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/decamelize.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/decamelize#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/decode-uri-component@0.2.0?package-id=b9c7ee4cc85ee60c", + "author": "Sam Verschueren (github.com/SamVerschueren)", + "name": "decode-uri-component", + "version": "0.2.0", + "description": "A better decodeURIComponent", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decode-uri-component:decode-uri-component:0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/decode-uri-component@0.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/SamVerschueren/decode-uri-component.git", + "type": "distribution" + }, + { + "url": "https://github.com/SamVerschueren/decode-uri-component#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/deep-extend@0.6.0?package-id=249a5a2e595cbcf5", + "author": "Viacheslav Lotsmanov ", + "name": "deep-extend", + "version": "0.6.0", + "description": "Recursive object extending", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:deep-extend:deep-extend:0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/deep-extend@0.6.0", + "externalReferences": [ + { + "url": "git://github.com/unclechu/node-deep-extend.git", + "type": "distribution" + }, + { + "url": "https://github.com/unclechu/node-deep-extend", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/defaults@1.0.3?package-id=b87ef5ac001f1810", + "author": "Elijah Insua ", + "name": "defaults", + "version": "1.0.3", + "description": "merge single level defaults over a config object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:defaults:defaults:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/defaults@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/tmpvar/defaults.git", + "type": "distribution" + }, + { + "url": "https://github.com/tmpvar/defaults#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/define-properties@1.1.3?package-id=6f151d17ca4e763e", + "author": "Jordan Harband", + "name": "define-properties", + "version": "1.1.3", + "description": "Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:define-properties:define-properties:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/define-properties@1.1.3", + "externalReferences": [ + { + "url": "git://github.com/ljharb/define-properties.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/define-properties#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/define-properties@1.1.3?package-id=b4b6e57cfdee31b8", + "author": "Jordan Harband", + "name": "define-properties", + "version": "1.1.3", + "description": "Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:define-properties:define-properties:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/define-properties@1.1.3", + "externalReferences": [ + { + "url": "git://github.com/ljharb/define-properties.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/delay@5.0.0?package-id=1fdfc0742e38417a", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "delay", + "version": "5.0.0", + "description": "Delay a promise a specified amount of time", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:delay:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/delay@5.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/delay.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/delay#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/delayed-stream@1.0.0?package-id=a195d79ef31bc579", + "author": "Felix Geisendörfer (http://debuggable.com/)", + "name": "delayed-stream", + "version": "1.0.0", + "description": "Buffers events from a stream until you are ready to handle them.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:delayed-stream:delayed-stream:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/delayed-stream@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/felixge/node-delayed-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/felixge/node-delayed-stream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/delegates@1.0.0?package-id=611fe8c99f30481e", + "name": "delegates", + "version": "1.0.0", + "description": "delegate methods and accessors to another property", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:visionmedia:delegates:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/delegates@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/visionmedia/node-delegates.git", + "type": "distribution" + }, + { + "url": "https://github.com/visionmedia/node-delegates#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/depd@1.1.2?package-id=b4e3a373f4fec0b8", + "author": "Douglas Christopher Wilson ", + "name": "depd", + "version": "1.1.2", + "description": "Deprecate all the things", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dougwilson:depd:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/depd@1.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/dougwilson/nodejs-depd.git", + "type": "distribution" + }, + { + "url": "https://github.com/dougwilson/nodejs-depd#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/destroy@1.0.4?package-id=d0ece580645e4cd1", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "destroy", + "version": "1.0.4", + "description": "destroy a stream if possible", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stream-utils:destroy:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/destroy@1.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/stream-utils/destroy.git", + "type": "distribution" + }, + { + "url": "https://github.com/stream-utils/destroy#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/detect-indent@5.0.0?package-id=cbccbb5dd754391", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "detect-indent", + "version": "5.0.0", + "description": "Detect the indentation of code", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:detect-indent:detect-indent:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/detect-indent@5.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/detect-indent.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/detect-indent#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/detect-newline@2.1.0?package-id=9759ace33b9872ed", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "detect-newline", + "version": "2.1.0", + "description": "Detect the dominant newline character of a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:detect-newline:detect-newline:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/detect-newline@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/detect-newline.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/detect-newline#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dezalgo@1.0.3?package-id=a0ca0da76ce71f2f", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "dezalgo", + "version": "1.0.3", + "description": "Contain async insanity so that the dark pony lord doesn't eat souls", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:dezalgo:dezalgo:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/dezalgo@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/npm/dezalgo.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/dezalgo", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dicer@0.2.5?package-id=a8a869ccc4536dc8", + "author": "Brian White ", + "name": "dicer", + "version": "0.2.5", + "description": "A very fast streaming multipart parser for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mscdex:dicer:0.2.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/dicer@0.2.5", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/mscdex/dicer.git", + "type": "distribution" + }, + { + "url": "https://github.com/mscdex/dicer#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dot-prop@4.2.1?package-id=d49bd91a9d2691c0", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "dot-prop", + "version": "4.2.1", + "description": "Get, set, or delete a property from a nested object using a dot path", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:dot-prop:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/dot-prop@4.2.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/dot-prop.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/dot-prop#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dotenv@5.0.1?package-id=52ed2ee809f10570", + "author": "scottmotte", + "name": "dotenv", + "version": "5.0.1", + "description": "Loads environment variables from .env file", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:motdotla:dotenv:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/dotenv@5.0.1", + "externalReferences": [ + { + "url": "git://github.com/motdotla/dotenv.git", + "type": "distribution" + }, + { + "url": "https://github.com/motdotla/dotenv#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/duplexer3@0.1.4?package-id=98204faeb1e0cfb8", + "author": "Conrad Pankoff (http://www.fknsrs.biz/)", + "name": "duplexer3", + "version": "0.1.4", + "description": "Like duplexer but using streams3", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:duplexer3:duplexer3:0.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/duplexer3@0.1.4", + "externalReferences": [ + { + "url": "git+https://github.com/floatdrop/duplexer3.git", + "type": "distribution" + }, + { + "url": "https://github.com/floatdrop/duplexer3#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/duplexify@3.6.0?package-id=80b25920959c0055", + "author": "Mathias Buus", + "name": "duplexify", + "version": "3.6.0", + "description": "Turn a writable and readable stream into a streams2 duplex stream with support for async initialization and streams1/streams2 input", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:duplexify:duplexify:3.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/duplexify@3.6.0", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/duplexify.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/duplexify", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ecc-jsbn@0.1.2?package-id=13a413a168a6381f", + "author": "Jeremie Miller (http://jeremie.com/)", + "name": "ecc-jsbn", + "version": "0.1.2", + "description": "ECC JS code based on JSBN", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:quartzjer:ecc-jsbn:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ecc-jsbn@0.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/quartzjer/ecc-jsbn.git", + "type": "distribution" + }, + { + "url": "https://github.com/quartzjer/ecc-jsbn", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/editor@1.0.0?package-id=57824e36461985c2", + "author": "James Halliday (http://substack.net)", + "name": "editor", + "version": "1.0.0", + "description": "launch $EDITOR in your program", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:substack:editor:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/editor@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/substack/node-editor.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/node-editor", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ee-first@1.1.1?package-id=64407a6fdf5ac08b", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "ee-first", + "version": "1.1.1", + "description": "return the first event in a set of ee/event pairs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonathanong:ee-first:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ee-first@1.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/jonathanong/ee-first.git", + "type": "distribution" + }, + { + "url": "https://github.com/jonathanong/ee-first#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/emoji-regex@7.0.3?package-id=67c6a2d66166ba44", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "emoji-regex", + "version": "7.0.3", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:emoji-regex:emoji-regex:7.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/emoji-regex@7.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/mathiasbynens/emoji-regex.git", + "type": "distribution" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/encodeurl@1.0.2?package-id=6de19f90b58f26e3", + "name": "encodeurl", + "version": "1.0.2", + "description": "Encode a URL to a percent-encoded form, excluding already-encoded sequences", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:encodeurl:encodeurl:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/encodeurl@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/pillarjs/encodeurl.git", + "type": "distribution" + }, + { + "url": "https://github.com/pillarjs/encodeurl#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/encoding@0.1.12?package-id=871fd80324ab2784", + "author": "Andris Reinman", + "name": "encoding", + "version": "0.1.12", + "description": "Convert encodings, uses iconv by default and fallbacks to iconv-lite if needed", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:encoding:encoding:0.1.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/encoding@0.1.12", + "externalReferences": [ + { + "url": "git+https://github.com/andris9/encoding.git", + "type": "distribution" + }, + { + "url": "https://github.com/andris9/encoding#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/end-of-stream@1.4.1?package-id=6a3ff5d2005a6a76", + "author": "Mathias Buus ", + "name": "end-of-stream", + "version": "1.4.1", + "description": "Call a callback when a readable/writable/duplex stream has completed or failed.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:end-of-stream:end-of-stream:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/end-of-stream@1.4.1", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/end-of-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/end-of-stream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/env-paths@2.2.0?package-id=cc33898e5e6c4f25", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "env-paths", + "version": "2.2.0", + "description": "Get paths for storing things like data, config, cache, etc", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:env-paths:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/env-paths@2.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/env-paths.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/env-paths#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/err-code@1.1.2?package-id=47b4e2b3e9659ed4", + "author": "IndigoUnited (http://indigounited.com)", + "name": "err-code", + "version": "1.1.2", + "description": "Create an error with a code", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:IndigoUnited:err-code:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/err-code@1.1.2", + "externalReferences": [ + { + "url": "git://github.com/IndigoUnited/js-err-code.git", + "type": "distribution" + }, + { + "url": "https://github.com/IndigoUnited/js-err-code#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/errno@0.1.7?package-id=1f6d7a00a99768b0", + "name": "errno", + "version": "0.1.7", + "description": "libuv errno details exposed", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:errno:errno:0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/errno@0.1.7", + "externalReferences": [ + { + "url": "git+https://github.com/rvagg/node-errno.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/node-errno#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/es-abstract@1.12.0?package-id=a2b6224dc1972289", + "author": "Jordan Harband (http://ljharb.codes)", + "name": "es-abstract", + "version": "1.12.0", + "description": "ECMAScript spec abstract operations.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:es-abstract:es-abstract:1.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/es-abstract@1.12.0", + "externalReferences": [ + { + "url": "git://github.com/ljharb/es-abstract.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/es-to-primitive@1.2.0?package-id=ff185285dcd118b3", + "author": "Jordan Harband", + "name": "es-to-primitive", + "version": "1.2.0", + "description": "ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:es-to-primitive:es-to-primitive:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/es-to-primitive@1.2.0", + "externalReferences": [ + { + "url": "git://github.com/ljharb/es-to-primitive.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/es6-promise@4.2.8?package-id=7acd7eff273aea0f", + "author": "Yehuda Katz, Tom Dale, Stefan Penner and contributors (Conversion to ES6 API by Jake Archibald)", + "name": "es6-promise", + "version": "4.2.8", + "description": "A lightweight library that provides tools for organizing asynchronous code", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stefanpenner:es6-promise:4.2.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/es6-promise@4.2.8", + "externalReferences": [ + { + "url": "git://github.com/stefanpenner/es6-promise.git", + "type": "distribution" + }, + { + "url": "https://github.com/stefanpenner/es6-promise", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/es6-promisify@5.0.0?package-id=922e6b6cb34c0449", + "author": "Mike Hall ", + "name": "es6-promisify", + "version": "5.0.0", + "description": "Converts callback-based functions to ES6 Promises", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:digitaldesignlabs:es6-promisify:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/es6-promisify@5.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/digitaldesignlabs/es6-promisify.git", + "type": "distribution" + }, + { + "url": "https://github.com/digitaldesignlabs/es6-promisify#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/escape-html@1.0.3?package-id=fc052a8fdf6a88f1", + "name": "escape-html", + "version": "1.0.3", + "description": "Escape string for use in HTML", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:escape-html:escape-html:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/escape-html@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/component/escape-html.git", + "type": "distribution" + }, + { + "url": "https://github.com/component/escape-html#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/escape-string-regexp@1.0.5?package-id=4ab0b66784f88a18", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "escape-string-regexp", + "version": "1.0.5", + "description": "Escape RegExp special characters", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:escape-string-regexp:escape-string-regexp:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/escape-string-regexp@1.0.5", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/escape-string-regexp.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/escape-string-regexp#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/esprima@4.0.1?package-id=17f4ea46648742e6", + "author": "Ariya Hidayat ", + "name": "esprima", + "version": "4.0.1", + "description": "ECMAScript parsing infrastructure for multipurpose analysis", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:esprima:esprima:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/esprima@4.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/jquery/esprima.git", + "type": "distribution" + }, + { + "url": "http://esprima.org", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/etag@1.8.1?package-id=3601ed58fabb680", + "name": "etag", + "version": "1.8.1", + "description": "Create simple HTTP ETags", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jshttp:etag:1.8.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/etag@1.8.1", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/etag.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/etag#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/execa@0.7.0?package-id=cb39ab257461721b", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "execa", + "version": "0.7.0", + "description": "A better `child_process`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:execa:0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/execa@0.7.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/execa.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/execa#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/express@4.17.1?package-id=b158c53a8f877dac", + "author": "TJ Holowaychuk ", + "name": "express", + "version": "4.17.1", + "description": "Fast, unopinionated, minimalist web framework", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:express:express:4.17.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/express@4.17.1", + "externalReferences": [ + { + "url": "git+https://github.com/expressjs/express.git", + "type": "distribution" + }, + { + "url": "http://expressjs.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/extend@3.0.2?package-id=6a93821e99ea76cf", + "author": "Stefan Thomas (http://www.justmoon.net)", + "name": "extend", + "version": "3.0.2", + "description": "Port of jQuery.extend for node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:justmoon:extend:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/extend@3.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/justmoon/node-extend.git", + "type": "distribution" + }, + { + "url": "https://github.com/justmoon/node-extend#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/extsprintf@1.3.0?package-id=c9c71fa4864f843a", + "name": "extsprintf", + "version": "1.3.0", + "description": "extended POSIX-style sprintf", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:davepacheco:extsprintf:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/extsprintf@1.3.0", + "externalReferences": [ + { + "url": "git://github.com/davepacheco/node-extsprintf.git", + "type": "distribution" + }, + { + "url": "https://github.com/davepacheco/node-extsprintf#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-deep-equal@3.1.3?package-id=50fc8df9c652bfea", + "author": "Evgeny Poberezkin", + "name": "fast-deep-equal", + "version": "3.1.3", + "description": "Fast deep equal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-deep-equal:fast-deep-equal:3.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-deep-equal@3.1.3", + "externalReferences": [ + { + "url": "git+https://github.com/epoberezkin/fast-deep-equal.git", + "type": "distribution" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-deep-equal@3.1.3?package-id=6bf670068a1ba042", + "author": "Evgeny Poberezkin", + "name": "fast-deep-equal", + "version": "3.1.3", + "description": "Fast deep equal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-deep-equal:fast-deep-equal:3.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-deep-equal@3.1.3", + "externalReferences": [ + { + "url": "git+https://github.com/epoberezkin/fast-deep-equal.git", + "type": "distribution" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-json-stable-stringify@2.0.0?package-id=2012b0c94dfc94ce", + "author": "James Halliday (http://substack.net)", + "name": "fast-json-stable-stringify", + "version": "2.0.0", + "description": "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-json-stable-stringify:fast-json-stable-stringify:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-json-stable-stringify@2.0.0", + "externalReferences": [ + { + "url": "git://github.com/epoberezkin/fast-json-stable-stringify.git", + "type": "distribution" + }, + { + "url": "https://github.com/epoberezkin/fast-json-stable-stringify", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-json-stringify@5.5.0?package-id=6654047de7e0dd0f", + "author": "Matteo Collina ", + "name": "fast-json-stringify", + "version": "5.5.0", + "description": "Stringify your JSON at max speed", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-json-stringify:fast-json-stringify:5.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-json-stringify@5.5.0", + "externalReferences": [ + { + "url": "git+https://github.com/fastify/fast-json-stringify.git", + "type": "distribution" + }, + { + "url": "https://github.com/fastify/fast-json-stringify#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-printf@1.6.9?package-id=fd1faec12b09e98e", + "author": "Gajus Kuizinas (http://gajus.com)", + "name": "fast-printf", + "version": "1.6.9", + "description": "Fast and spec-compliant printf implementation for Node.js and browser.", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:fast-printf:fast-printf:1.6.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-printf@1.6.9", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/gajus/fast-printf.git", + "type": "distribution" + }, + { + "url": "https://github.com/gajus/fast-printf#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-safe-stringify@2.0.7?package-id=c12cba20e0a81013", + "author": "David Mark Clements", + "name": "fast-safe-stringify", + "version": "2.0.7", + "description": "Safely and quickly serialize JavaScript objects", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-safe-stringify:fast-safe-stringify:2.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-safe-stringify@2.0.7", + "externalReferences": [ + { + "url": "git+https://github.com/davidmarkclements/fast-safe-stringify.git", + "type": "distribution" + }, + { + "url": "https://github.com/davidmarkclements/fast-safe-stringify#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-uri@2.2.0?package-id=348ed330e4d49c5", + "author": "Vincent Le Goff (https://github.com/zekth)", + "name": "fast-uri", + "version": "2.2.0", + "description": "Dependency free RFC 3986 URI toolbox", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-uri:fast-uri:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-uri@2.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/fastify/fast-uri.git", + "type": "distribution" + }, + { + "url": "https://github.com/fastify/fast-uri", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fastify-plugin@3.0.0?package-id=7d44b0537dbe0461", + "author": "Tomas Della Vedova - @delvedor (http://delved.org)", + "name": "fastify-plugin", + "version": "3.0.0", + "description": "Plugin helper for Fastify", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fastify-plugin:fastify-plugin:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fastify-plugin@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/fastify/fastify-plugin.git", + "type": "distribution" + }, + { + "url": "https://github.com/fastify/fastify-plugin#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fastify-static@3.4.0?package-id=17170748528d3481", + "author": "Tommaso Allevi - @allevo", + "name": "fastify-static", + "version": "3.4.0", + "description": "Plugin for serving static files as fast as possible.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fastify-static:fastify-static:3.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fastify-static@3.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/fastify/fastify-static.git", + "type": "distribution" + }, + { + "url": "https://github.com/fastify/fastify-static", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fastify-swagger@3.5.0?package-id=36ac3481c48adce7", + "author": "Tomas Della Vedova - @delvedor (http://delved.org)", + "name": "fastify-swagger", + "version": "3.5.0", + "description": "Generate Swagger files automatically for Fastify.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fastify-swagger:fastify-swagger:3.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fastify-swagger@3.5.0", + "externalReferences": [ + { + "url": "git+https://github.com/fastify/fastify-swagger.git", + "type": "distribution" + }, + { + "url": "https://github.com/fastify/fastify-swagger#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/figgy-pudding@3.5.1?package-id=c23a6d314b4a4c22", + "author": "Kat Marchán ", + "name": "figgy-pudding", + "version": "3.5.1", + "description": "Delicious, festive, cascading config/opts definitions", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:figgy-pudding:figgy-pudding:3.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/figgy-pudding@3.5.1", + "externalReferences": [ + { + "url": "git+https://github.com/zkat/figgy-pudding.git", + "type": "distribution" + }, + { + "url": "https://github.com/zkat/figgy-pudding#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/finalhandler@1.1.2?package-id=6259b7a0001a9b91", + "author": "Douglas Christopher Wilson ", + "name": "finalhandler", + "version": "1.1.2", + "description": "Node.js final http responder", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:finalhandler:finalhandler:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/finalhandler@1.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/pillarjs/finalhandler.git", + "type": "distribution" + }, + { + "url": "https://github.com/pillarjs/finalhandler#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/find-npm-prefix@1.0.2?package-id=52a36cf455f307ab", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "find-npm-prefix", + "version": "1.0.2", + "description": "Find the npm project directory associated with for a given directory", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:find-npm-prefix:find-npm-prefix:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/find-npm-prefix@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/find-npm-prefix.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/find-npm-prefix#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/find-up@3.0.0?package-id=74983d480f9ee68a", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "find-up", + "version": "3.0.0", + "description": "Find a file or directory by walking up parent directories", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:find-up:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/find-up@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/find-up.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/find-up#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/find-up@3.0.0?package-id=9716c27e89885f20", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "find-up", + "version": "3.0.0", + "description": "Find a file or directory by walking up parent directories", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:find-up:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/find-up@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/find-up.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/find-up#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/flush-write-stream@1.0.3?package-id=e1274c36a6d8d9af", + "author": "Mathias Buus (@mafintosh)", + "name": "flush-write-stream", + "version": "1.0.3", + "description": "A write stream constructor that supports a flush function that is called before finish is emitted", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:flush-write-stream:flush-write-stream:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/flush-write-stream@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/mafintosh/flush-write-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/flush-write-stream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/follow-redirects@1.13.2?package-id=11d925047a942922", + "author": "Ruben Verborgh (https://ruben.verborgh.org/)", + "name": "follow-redirects", + "version": "1.13.2", + "description": "HTTP and HTTPS modules that follow redirects.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:follow-redirects:follow-redirects:1.13.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/follow-redirects@1.13.2", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/follow-redirects/follow-redirects.git", + "type": "distribution" + }, + { + "url": "https://github.com/follow-redirects/follow-redirects", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/forever-agent@0.6.1?package-id=f246b38c6ee5f71b", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "forever-agent", + "version": "0.6.1", + "description": "HTTP Agent that keeps socket connections alive between keep-alive requests. Formerly part of mikeal/request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:forever-agent:forever-agent:0.6.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/forever-agent@0.6.1", + "externalReferences": [ + { + "url": "git+https://github.com/mikeal/forever-agent.git", + "type": "distribution" + }, + { + "url": "https://github.com/mikeal/forever-agent#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/form-data@2.3.2?package-id=a65eba2cf670811b", + "author": "Felix Geisendörfer (http://debuggable.com/)", + "name": "form-data", + "version": "2.3.2", + "description": "A library to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:form-data:form-data:2.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/form-data@2.3.2", + "externalReferences": [ + { + "url": "git://github.com/form-data/form-data.git", + "type": "distribution" + }, + { + "url": "https://github.com/form-data/form-data#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/forwarded@0.1.2?package-id=5628d515e146bf2f", + "name": "forwarded", + "version": "0.1.2", + "description": "Parse HTTP X-Forwarded-For header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:forwarded:forwarded:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/forwarded@0.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/forwarded.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/forwarded#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fresh@0.5.2?package-id=1aacf9842bb86f3e", + "author": "TJ Holowaychuk (http://tjholowaychuk.com)", + "name": "fresh", + "version": "0.5.2", + "description": "HTTP response freshness testing", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jshttp:fresh:0.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/fresh@0.5.2", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/fresh.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/fresh#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/from2@1.3.0?package-id=c7f3a7e49c7e8f25", + "author": "Hugh Kennedy (http://hughsk.io/)", + "name": "from2", + "version": "1.3.0", + "description": "Convenience wrapper for ReadableStream, with an API lifted from \"from\" and \"through2\"", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hughsk:from2:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/from2@1.3.0", + "externalReferences": [ + { + "url": "git://github.com/hughsk/from2.git", + "type": "distribution" + }, + { + "url": "https://github.com/hughsk/from2", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/from2@2.3.0?package-id=ee2d6b417c35bfd2", + "author": "Hugh Kennedy (http://hughsk.io/)", + "name": "from2", + "version": "2.3.0", + "description": "Convenience wrapper for ReadableStream, with an API lifted from \"from\" and \"through2\"", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hughsk:from2:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/from2@2.3.0", + "externalReferences": [ + { + "url": "git://github.com/hughsk/from2.git", + "type": "distribution" + }, + { + "url": "https://github.com/hughsk/from2", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-minipass@1.2.7?package-id=2e904f22ead50ae2", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs-minipass", + "version": "1.2.7", + "description": "fs read and write streams based on minipass", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:1.2.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-minipass@1.2.7", + "externalReferences": [ + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-vacuum@1.2.10?package-id=b9aa5d16af1961b0", + "author": "Forrest L Norvell ", + "name": "fs-vacuum", + "version": "1.2.10", + "description": "recursively remove empty directories -- to a point", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs-vacuum:fs-vacuum:1.2.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-vacuum@1.2.10", + "externalReferences": [ + { + "url": "git+https://github.com/npm/fs-vacuum.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/fs-vacuum", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-write-stream-atomic@1.0.10?package-id=7b08016bb08061fe", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs-write-stream-atomic", + "version": "1.0.10", + "description": "Like `fs.createWriteStream(...)`, but atomic.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs-write-stream-atomic:fs-write-stream-atomic:1.0.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-write-stream-atomic@1.0.10", + "externalReferences": [ + { + "url": "git+https://github.com/npm/fs-write-stream-atomic.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/fs-write-stream-atomic", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=9584ea0c034d1c3c", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs.realpath", + "version": "1.0.0", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/fs.realpath#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=ac3c818d9ca6548d", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs.realpath", + "version": "1.0.0", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/fs.realpath#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/function-bind@1.1.1?package-id=44648bf09db15f6c", + "author": "Raynos ", + "name": "function-bind", + "version": "1.1.1", + "description": "Implementation of Function.prototype.bind", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:function-bind:function-bind:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/function-bind@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/Raynos/function-bind.git", + "type": "distribution" + }, + { + "url": "https://github.com/Raynos/function-bind", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/gauge@2.7.4?package-id=ea01ccd89b49fe1f", + "author": "Rebecca Turner ", + "name": "gauge", + "version": "2.7.4", + "description": "A terminal based horizontal guage", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:gauge:gauge:2.7.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/gauge@2.7.4", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/gauge.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/gauge", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/genfun@5.0.0?package-id=6ca73a56321ec465", + "author": "Kat Marchán ", + "name": "genfun", + "version": "5.0.0", + "description": "Fast, prototype-friendly multimethods.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:genfun:genfun:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/genfun@5.0.0", + "externalReferences": [ + { + "url": "git://github.com/zkat/genfun.git", + "type": "distribution" + }, + { + "url": "http://github.com/zkat/genfun", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/gentle-fs@2.3.1?package-id=9e57430eae250bbf", + "author": "Mike Sherov", + "name": "gentle-fs", + "version": "2.3.1", + "description": "Gentle Filesystem operations", + "licenses": [ + { + "license": { + "id": "Artistic-2.0" + } + } + ], + "cpe": "cpe:2.3:a:gentle-fs:gentle-fs:2.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/gentle-fs@2.3.1", + "externalReferences": [ + { + "url": "git://github.com/npm/gentle-fs.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/gentle-fs#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-caller-file@2.0.5?package-id=c3a7c0e90ec1bd2a", + "author": "Stefan Penner", + "name": "get-caller-file", + "version": "2.0.5", + "description": "[![Build Status](https://travis-ci.org/stefanpenner/get-caller-file.svg?branch=master)](https://travis-ci.org/stefanpenner/get-caller-file) [![Build status](https://ci.appveyor.com/api/projects/status/ol2q94g1932cy14a/branch/master?svg=true)](https://ci.appveyor.com/project/embercli/get-caller-file/branch/master)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:get-caller-file:get-caller-file:2.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-caller-file@2.0.5", + "externalReferences": [ + { + "url": "git+https://github.com/stefanpenner/get-caller-file.git", + "type": "distribution" + }, + { + "url": "https://github.com/stefanpenner/get-caller-file#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-stream@3.0.0?package-id=1101f5258c5b4846", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "get-stream", + "version": "3.0.0", + "description": "Get a stream as a string, buffer, or array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:get-stream:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-stream@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/get-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/get-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-stream@3.0.0?package-id=d5ca602593287b20", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "get-stream", + "version": "3.0.0", + "description": "Get a stream as a string, buffer, or array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:get-stream:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-stream@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/get-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/get-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-stream@4.1.0?package-id=d90dfcea848a9fbf", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "get-stream", + "version": "4.1.0", + "description": "Get a stream as a string, buffer, or array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:get-stream:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-stream@4.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/get-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/get-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/getpass@0.1.7?package-id=25b6b9755ea147b4", + "author": "Alex Wilson ", + "name": "getpass", + "version": "0.1.7", + "description": "getpass for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:arekinath:getpass:0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/getpass@0.1.7", + "externalReferences": [ + { + "url": "git+https://github.com/arekinath/node-getpass.git", + "type": "distribution" + }, + { + "url": "https://github.com/arekinath/node-getpass#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.1.6?package-id=be41ab1822148062", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.1.6", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.1.6", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/node-glob#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.1.6?package-id=460f2e393a17861d", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.1.6", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.1.6", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/node-glob#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/global-dirs@0.1.1?package-id=a81eae1ffee86ac6", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "global-dirs", + "version": "0.1.1", + "description": "Get the directory of globally installed packages and binaries", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:global-dirs:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/global-dirs@0.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/global-dirs.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/global-dirs#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/globalthis@1.0.3?package-id=140b7f899d64d402", + "author": "Jordan Harband ", + "name": "globalthis", + "version": "1.0.3", + "description": "ECMAScript spec-compliant polyfill/shim for `globalThis`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:globalthis:globalthis:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/globalthis@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/ljharb/System.global.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/System.global#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/google-libphonenumber@3.2.17?package-id=e6ed838b7eadf96c", + "author": "Rui Marinho ", + "name": "google-libphonenumber", + "version": "3.2.17", + "description": "The up-to-date and reliable Google's libphonenumber package for node.js.", + "licenses": [ + { + "license": { + "name": "(MIT AND Apache-2.0)" + } + } + ], + "cpe": "cpe:2.3:a:google-libphonenumber:google-libphonenumber:3.2.17:*:*:*:*:*:*:*", + "purl": "pkg:npm/google-libphonenumber@3.2.17", + "externalReferences": [ + { + "url": "git+https://github.com/ruimarinho/google-libphonenumber.git", + "type": "distribution" + }, + { + "url": "https://ruimarinho.github.io/google-libphonenumber/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/got@6.7.1?package-id=ab6c4d5a78007334", + "name": "got", + "version": "6.7.1", + "description": "Simplified HTTP requests", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:got:6.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/got@6.7.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/got.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/got#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/graceful-fs@4.2.4?package-id=ae13bb0be4da9294", + "name": "graceful-fs", + "version": "4.2.4", + "description": "A drop-in replacement for fs, making various improvements.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/graceful-fs@4.2.4", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/node-graceful-fs.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/node-graceful-fs#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/har-schema@2.0.0?package-id=df1ab60f5188f58f", + "author": "Ahmad Nassri (https://www.ahmadnassri.com/)", + "name": "har-schema", + "version": "2.0.0", + "description": "JSON Schema for HTTP Archive (HAR)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ahmadnassri:har-schema:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/har-schema@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/ahmadnassri/har-schema.git", + "type": "distribution" + }, + { + "url": "https://github.com/ahmadnassri/har-schema", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/har-validator@5.1.5?package-id=9cf5dbba4ee808aa", + "author": "Ahmad Nassri (https://www.ahmadnassri.com/)", + "name": "har-validator", + "version": "5.1.5", + "description": "Extremely fast HTTP Archive (HAR) validator using JSON Schema", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:har-validator:har-validator:5.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/har-validator@5.1.5", + "externalReferences": [ + { + "url": "git+https://github.com/ahmadnassri/node-har-validator.git", + "type": "distribution" + }, + { + "url": "https://github.com/ahmadnassri/node-har-validator", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has@1.0.3?package-id=57072cf8ae347274", + "author": "Thiago de Arruda ", + "name": "has", + "version": "1.0.3", + "description": "Object.prototype.hasOwnProperty.call shortcut", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tarruda:has:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/has@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/tarruda/has.git", + "type": "distribution" + }, + { + "url": "https://github.com/tarruda/has", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-flag@3.0.0?package-id=d1a82ebb7b8ff26c", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "has-flag", + "version": "3.0.0", + "description": "Check if argv has a specific flag", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:has-flag:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-flag@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/has-flag.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/has-flag#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-flag@4.0.0?package-id=de3b59daaf6d7165", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "has-flag", + "version": "4.0.0", + "description": "Check if argv has a specific flag", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:has-flag:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-flag@4.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/has-flag.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/has-flag#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-symbols@1.0.0?package-id=9bd065ba951794af", + "author": "Jordan Harband (http://ljharb.codes)", + "name": "has-symbols", + "version": "1.0.0", + "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-symbols:has-symbols:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-symbols@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/ljharb/has-symbols.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-unicode@2.0.1?package-id=c2a2690b355e1e80", + "author": "Rebecca Turner ", + "name": "has-unicode", + "version": "2.0.1", + "description": "Try to guess if your terminal supports unicode", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:has-unicode:has-unicode:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-unicode@2.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/has-unicode.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/has-unicode", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/hosted-git-info@2.8.9?package-id=d8c63249d170a0bb", + "author": "Rebecca Turner (http://re-becca.org)", + "name": "hosted-git-info", + "version": "2.8.9", + "description": "Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:hosted-git-info:hosted-git-info:2.8.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/hosted-git-info@2.8.9", + "externalReferences": [ + { + "url": "git+https://github.com/npm/hosted-git-info.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/hosted-git-info", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-cache-semantics@3.8.1?package-id=be50af68f0bf4318", + "author": "Kornel Lesiński (https://kornel.ski/)", + "name": "http-cache-semantics", + "version": "3.8.1", + "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:http-cache-semantics:http-cache-semantics:3.8.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-cache-semantics@3.8.1", + "externalReferences": [ + { + "url": "git+https://github.com/pornel/http-cache-semantics.git", + "type": "distribution" + }, + { + "url": "https://github.com/pornel/http-cache-semantics#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-errors@1.7.2?package-id=caf9fdc642308a1c", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "http-errors", + "version": "1.7.2", + "description": "Create HTTP error objects", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-errors:http-errors:1.7.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-errors@1.7.2", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/http-errors.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/http-errors#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-proxy-agent@2.1.0?package-id=f58ccb0049d952d2", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "http-proxy-agent", + "version": "2.1.0", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-proxy-agent:http-proxy-agent:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-proxy-agent@2.1.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-http-proxy-agent.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/node-http-proxy-agent#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-signature@1.2.0?package-id=ec4c21581261e6af", + "author": "Joyent, Inc", + "name": "http-signature", + "version": "1.2.0", + "description": "Reference implementation of Joyent's HTTP Signature scheme.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-signature:http-signature:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-signature@1.2.0", + "externalReferences": [ + { + "url": "git://github.com/joyent/node-http-signature.git", + "type": "distribution" + }, + { + "url": "https://github.com/joyent/node-http-signature/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-terminator@3.2.0?package-id=74c7a1b1f1eee594", + "author": "Gajus Kuizinas (http://gajus.com)", + "name": "http-terminator", + "version": "3.2.0", + "description": "Gracefully terminates HTTP(S) server.", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:http-terminator:http-terminator:3.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-terminator@3.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/gajus/http-terminator.git", + "type": "distribution" + }, + { + "url": "https://github.com/gajus/http-terminator#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/https-proxy-agent@2.2.4?package-id=3865d5b676fac485", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "https-proxy-agent", + "version": "2.2.4", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:https-proxy-agent:https-proxy-agent:2.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/https-proxy-agent@2.2.4", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-https-proxy-agent.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/https-proxy-agent@5.0.1?package-id=27162acbce375aff", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "https-proxy-agent", + "version": "5.0.1", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:https-proxy-agent:https-proxy-agent:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/https-proxy-agent@5.0.1", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-https-proxy-agent.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/humanize-ms@1.2.1?package-id=6269f846c887d763", + "author": "dead-horse (http://deadhorse.me)", + "name": "humanize-ms", + "version": "1.2.1", + "description": "transform humanize time to ms", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-modules:humanize-ms:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/humanize-ms@1.2.1", + "externalReferences": [ + { + "url": "git+https://github.com/node-modules/humanize-ms.git", + "type": "distribution" + }, + { + "url": "https://github.com/node-modules/humanize-ms#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iconv-lite@0.4.23?package-id=72aa978f928b8369", + "author": "Alexander Shtuchkin ", + "name": "iconv-lite", + "version": "0.4.23", + "description": "Convert character encodings in pure javascript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.4.23:*:*:*:*:*:*:*", + "purl": "pkg:npm/iconv-lite@0.4.23", + "externalReferences": [ + { + "url": "git://github.com/ashtuchkin/iconv-lite.git", + "type": "distribution" + }, + { + "url": "https://github.com/ashtuchkin/iconv-lite", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iconv-lite@0.4.24?package-id=5b9a586d4ff6589f", + "author": "Alexander Shtuchkin ", + "name": "iconv-lite", + "version": "0.4.24", + "description": "Convert character encodings in pure javascript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.4.24:*:*:*:*:*:*:*", + "purl": "pkg:npm/iconv-lite@0.4.24", + "externalReferences": [ + { + "url": "git://github.com/ashtuchkin/iconv-lite.git", + "type": "distribution" + }, + { + "url": "https://github.com/ashtuchkin/iconv-lite", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iferr@0.1.5?package-id=240c8b7b718f7cca", + "author": "Nadav Ivgi", + "name": "iferr", + "version": "0.1.5", + "description": "Higher-order functions for easier error handling", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shesek:iferr:0.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/iferr@0.1.5", + "externalReferences": [ + { + "url": "git+https://github.com/shesek/iferr.git", + "type": "distribution" + }, + { + "url": "https://github.com/shesek/iferr", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iferr@0.1.5?package-id=78ea6eb1d1172c78", + "author": "Nadav Ivgi", + "name": "iferr", + "version": "0.1.5", + "description": "Higher-order functions for easier error handling", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shesek:iferr:0.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/iferr@0.1.5", + "externalReferences": [ + { + "url": "git+https://github.com/shesek/iferr.git", + "type": "distribution" + }, + { + "url": "https://github.com/shesek/iferr", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iferr@0.1.5?package-id=394fba8c06946b1c", + "author": "Nadav Ivgi", + "name": "iferr", + "version": "0.1.5", + "description": "Higher-order functions for easier error handling", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shesek:iferr:0.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/iferr@0.1.5", + "externalReferences": [ + { + "url": "git+https://github.com/shesek/iferr.git", + "type": "distribution" + }, + { + "url": "https://github.com/shesek/iferr", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iferr@1.0.2?package-id=23983836ee47095c", + "author": "Nadav Ivgi", + "name": "iferr", + "version": "1.0.2", + "description": "Higher-order functions for easier error handling", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shesek:iferr:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/iferr@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/shesek/iferr.git", + "type": "distribution" + }, + { + "url": "https://github.com/shesek/iferr", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ignore-walk@3.0.3?package-id=4b3b7cbce830d44b", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "ignore-walk", + "version": "3.0.3", + "description": "Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ignore-walk:ignore-walk:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/ignore-walk@3.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/ignore-walk.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/ignore-walk#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/import-lazy@2.1.0?package-id=af14ea31551b29b", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "import-lazy", + "version": "2.1.0", + "description": "Import modules lazily", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:import-lazy:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/import-lazy@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/import-lazy.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/import-lazy#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/imurmurhash@0.1.4?package-id=209f0ed2459f2a66", + "author": "Jens Taylor (https://github.com/homebrewing)", + "name": "imurmurhash", + "version": "0.1.4", + "description": "An incremental implementation of MurmurHash3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:imurmurhash:imurmurhash:0.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/imurmurhash@0.1.4", + "externalReferences": [ + { + "url": "git+https://github.com/jensyt/imurmurhash-js.git", + "type": "distribution" + }, + { + "url": "https://github.com/jensyt/imurmurhash-js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/infer-owner@1.0.4?package-id=ff8bebe3c92e29be", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "infer-owner", + "version": "1.0.4", + "description": "Infer the owner of a path based on the owner of its nearest existing parent", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:infer-owner:infer-owner:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/infer-owner@1.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/npm/infer-owner.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/infer-owner#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inflight@1.0.6?package-id=7f4a1389d99344e1", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "inflight", + "version": "1.0.6", + "description": "Add callbacks to requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "git+https://github.com/npm/inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inflight@1.0.6?package-id=699ceddffcda4478", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "inflight", + "version": "1.0.6", + "description": "Add callbacks to requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "git+https://github.com/npm/inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.3?package-id=9e94bf16095bed86", + "name": "inherits", + "version": "2.0.3", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/inherits.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/inherits#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.4?package-id=c75e2d1e61a335c0", + "name": "inherits", + "version": "2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/inherits.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/inherits#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ini@1.3.8?package-id=1144947c22b83407", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "ini", + "version": "1.3.8", + "description": "An ini encoder/decoder for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:ini:1.3.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/ini@1.3.8", + "externalReferences": [ + { + "url": "git://github.com/isaacs/ini.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/ini#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/init-package-json@1.10.3?package-id=612217504bf238b9", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "init-package-json", + "version": "1.10.3", + "description": "A node module to get your node module started", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:init-package-json:init-package-json:1.10.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/init-package-json@1.10.3", + "externalReferences": [ + { + "url": "git+https://github.com/npm/init-package-json.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/init-package-json#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ip@1.1.5?package-id=40b78732d677da70", + "author": "Fedor Indutny ", + "name": "ip", + "version": "1.1.5", + "description": "[![](https://badge.fury.io/js/ip.svg)](https://www.npmjs.com/package/ip)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indutny:ip:1.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/ip@1.1.5", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/indutny/node-ip.git", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/node-ip", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ip-regex@2.1.0?package-id=7de70bcecf1718ee", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ip-regex", + "version": "2.1.0", + "description": "Regular expression for matching IP addresses (IPv4 & IPv6)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:ip-regex:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ip-regex@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/ip-regex.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/ip-regex#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ipaddr.js@1.9.1?package-id=79e3881762ad8396", + "author": "whitequark ", + "name": "ipaddr.js", + "version": "1.9.1", + "description": "A library for manipulating IPv4 and IPv6 addresses in JavaScript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:whitequark:ipaddr.js:1.9.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ipaddr.js@1.9.1", + "externalReferences": [ + { + "url": "git://github.com/whitequark/ipaddr.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/whitequark/ipaddr.js#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-callable@1.1.4?package-id=1dc6d2322f00d7bb", + "author": "Jordan Harband (http://ljharb.codes)", + "name": "is-callable", + "version": "1.1.4", + "description": "Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-callable:is-callable:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-callable@1.1.4", + "externalReferences": [ + { + "url": "git://github.com/ljharb/is-callable.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-ci@1.2.1?package-id=33144f04a12b9be2", + "author": "Thomas Watson Steen (https://twitter.com/wa7son)", + "name": "is-ci", + "version": "1.2.1", + "description": "Detect if the current environment is a CI server", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:watson:is-ci:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-ci@1.2.1", + "externalReferences": [ + { + "url": "git+https://github.com/watson/is-ci.git", + "type": "distribution" + }, + { + "url": "https://github.com/watson/is-ci", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-cidr@3.0.0?package-id=e9a3ecf72f7e23a2", + "author": "silverwind ", + "name": "is-cidr", + "version": "3.0.0", + "description": "Check if a string is an IP address in CIDR notation", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:silverwind:is-cidr:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-cidr@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/silverwind/is-cidr.git", + "type": "distribution" + }, + { + "url": "https://github.com/silverwind/is-cidr#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-date-object@1.0.1?package-id=92b971217126a920", + "author": "Jordan Harband", + "name": "is-date-object", + "version": "1.0.1", + "description": "Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-date-object:is-date-object:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-date-object@1.0.1", + "externalReferences": [ + { + "url": "git://github.com/ljharb/is-date-object.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@1.0.0?package-id=5e069f3bee1f8e8c", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "1.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0?package-id=c9e52c69ac61a15d", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "2.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0?package-id=18d3c43bb481b40e", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "2.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0?package-id=bc292caf09c7f0a6", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "2.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0?package-id=b4b1a80d5cc6ed9f", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "2.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-installed-globally@0.1.0?package-id=52068e84c707b28e", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-installed-globally", + "version": "0.1.0", + "description": "Check if your package was installed globally", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-installed-globally:is-installed-globally:0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-installed-globally@0.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-installed-globally.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-installed-globally#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-npm@1.0.0?package-id=a091bf82a35edad5", + "author": "Sindre Sorhus (http://sindresorhus.com)", + "name": "is-npm", + "version": "1.0.0", + "description": "Check if your code is running as an npm script", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:is-npm:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-npm@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-npm.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-npm#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-obj@1.0.1?package-id=7979f769260859e3", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-obj", + "version": "1.0.1", + "description": "Check if a value is an object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:is-obj:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-obj@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-obj.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-obj#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-path-inside@1.0.1?package-id=62bf5e53df19f8af", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-path-inside", + "version": "1.0.1", + "description": "Check if a path is inside another path", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-path-inside:is-path-inside:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-path-inside@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-path-inside.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-path-inside#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-redirect@1.0.0?package-id=a4990c9b97577de8", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-redirect", + "version": "1.0.0", + "description": "Check if a number is a redirect HTTP status code", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:is-redirect:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-redirect@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-redirect.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-redirect#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-regex@1.0.4?package-id=f0395380adf7d3e7", + "author": "Jordan Harband", + "name": "is-regex", + "version": "1.0.4", + "description": "Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-regex:is-regex:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-regex@1.0.4", + "externalReferences": [ + { + "url": "git://github.com/ljharb/is-regex.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/is-regex", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-retry-allowed@1.2.0?package-id=b30668148b87771", + "author": "Vsevolod Strukchinsky (github.com/floatdrop)", + "name": "is-retry-allowed", + "version": "1.2.0", + "description": "Is retry allowed for Error?", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-retry-allowed:is-retry-allowed:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-retry-allowed@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/floatdrop/is-retry-allowed.git", + "type": "distribution" + }, + { + "url": "https://github.com/floatdrop/is-retry-allowed#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-stream@1.1.0?package-id=e2a191b14586fcc2", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-stream", + "version": "1.1.0", + "description": "Check if something is a Node.js stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:is-stream:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-stream@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-symbol@1.0.2?package-id=6f84bf274f444b99", + "author": "Jordan Harband", + "name": "is-symbol", + "version": "1.0.2", + "description": "Determine if a value is an ES6 Symbol or not.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-symbol:is-symbol:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-symbol@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/ljharb/is-symbol.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-typedarray@1.0.0?package-id=4614424f10a58ef7", + "author": "Hugh Kennedy (http://hughsk.io/)", + "name": "is-typedarray", + "version": "1.0.0", + "description": "Detect whether or not an object is a Typed Array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-typedarray:is-typedarray:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-typedarray@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/hughsk/is-typedarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/hughsk/is-typedarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isarray@0.0.1?package-id=4eab13fd6138583f", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "isarray", + "version": "0.0.1", + "description": "Array#isArray for older browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juliangruber:isarray:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/isarray@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/isarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/isarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isarray@0.0.1?package-id=9165d82d33f922a9", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "isarray", + "version": "0.0.1", + "description": "Array#isArray for older browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juliangruber:isarray:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/isarray@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/isarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/isarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isarray@1.0.0?package-id=67e7a38d852b614a", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "isarray", + "version": "1.0.0", + "description": "Array#isArray for older browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juliangruber:isarray:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isarray@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/isarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/isarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isarray@1.0.0?package-id=2d92be2d9c6d102e", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "isarray", + "version": "1.0.0", + "description": "Array#isArray for older browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juliangruber:isarray:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isarray@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/isarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/isarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isexe@2.0.0?package-id=cac2857ecac9cad9", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "isexe", + "version": "2.0.0", + "description": "Minimal module to check if a file is executable.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:isexe:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isexe@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/isexe.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/isexe#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isstream@0.1.2?package-id=fd7d0a75eb876e94", + "author": "Rod Vagg ", + "name": "isstream", + "version": "0.1.2", + "description": "Determine if an object is a Stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isstream:isstream:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/isstream@0.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/rvagg/isstream.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/isstream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iterare@1.2.1?package-id=f6ab001f5555d5ae", + "author": "Felix Becker ", + "name": "iterare", + "version": "1.2.1", + "description": "Array methods for ES6 Iterators", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:felixfbecker:iterare:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/iterare@1.2.1", + "externalReferences": [ + { + "url": "git+https://github.com/felixfbecker/iterare.git", + "type": "distribution" + }, + { + "url": "https://github.com/felixfbecker/iterare#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/js-yaml@3.14.1?package-id=ac3e3bf70973edb6", + "author": "Vladimir Zapparov ", + "name": "js-yaml", + "version": "3.14.1", + "description": "YAML 1.2 parser and serializer", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:js-yaml:js-yaml:3.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/js-yaml@3.14.1", + "externalReferences": [ + { + "url": "git+https://github.com/nodeca/js-yaml.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodeca/js-yaml", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsbn@0.1.1?package-id=5423bb90883d31d3", + "author": "Tom Wu", + "name": "jsbn", + "version": "0.1.1", + "description": "The jsbn library is a fast, portable implementation of large-number math in pure JavaScript, enabling public-key crypto and other applications on desktop and mobile browsers.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:andyperlitch:jsbn:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsbn@0.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/andyperlitch/jsbn.git", + "type": "distribution" + }, + { + "url": "https://github.com/andyperlitch/jsbn#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-parse-better-errors@1.0.2?package-id=988410d00081283c", + "author": "Kat Marchán ", + "name": "json-parse-better-errors", + "version": "1.0.2", + "description": "JSON.parse with context information on error", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-parse-better-errors:json-parse-better-errors:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-parse-better-errors@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/zkat/json-parse-better-errors.git", + "type": "distribution" + }, + { + "url": "https://github.com/zkat/json-parse-better-errors#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema@0.4.0?package-id=45c9a86c44dd53da", + "author": "Kris Zyp", + "name": "json-schema", + "version": "0.4.0", + "description": "JSON Schema validation and specifications", + "licenses": [ + { + "license": { + "name": "(AFL-2.1 OR BSD-3-Clause)" + } + } + ], + "cpe": "cpe:2.3:a:json-schema:json-schema:0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema@0.4.0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/kriszyp/json-schema.git", + "type": "distribution" + }, + { + "url": "https://github.com/kriszyp/json-schema#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema-resolver@1.2.2?package-id=42078307ae74905d", + "author": "Manuel Spigolon (https://github.com/Eomm)", + "name": "json-schema-resolver", + "version": "1.2.2", + "description": "Resolve all your $refs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-schema-resolver:json-schema-resolver:1.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema-resolver@1.2.2", + "externalReferences": [ + { + "url": "git+https://github.com/Eomm/json-schema-resolver.git", + "type": "distribution" + }, + { + "url": "https://github.com/Eomm/json-schema-resolver#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema-traverse@0.4.1?package-id=93d700e76c4d5de0", + "author": "Evgeny Poberezkin", + "name": "json-schema-traverse", + "version": "0.4.1", + "description": "Traverse JSON Schema passing each schema object to callback", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-schema-traverse:json-schema-traverse:0.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema-traverse@0.4.1", + "externalReferences": [ + { + "url": "git+https://github.com/epoberezkin/json-schema-traverse.git", + "type": "distribution" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema-traverse@1.0.0?package-id=3ff544f972f069f", + "author": "Evgeny Poberezkin", + "name": "json-schema-traverse", + "version": "1.0.0", + "description": "Traverse JSON Schema passing each schema object to callback", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-schema-traverse:json-schema-traverse:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema-traverse@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/epoberezkin/json-schema-traverse.git", + "type": "distribution" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema-traverse@1.0.0?package-id=af6940def8a1a1b8", + "author": "Evgeny Poberezkin", + "name": "json-schema-traverse", + "version": "1.0.0", + "description": "Traverse JSON Schema passing each schema object to callback", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-schema-traverse:json-schema-traverse:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema-traverse@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/epoberezkin/json-schema-traverse.git", + "type": "distribution" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-stringify-safe@5.0.1?package-id=1e6af39edc851fec", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "json-stringify-safe", + "version": "5.0.1", + "description": "Like JSON.stringify, but doesn't blow up on circular refs.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:json-stringify-safe:json-stringify-safe:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-stringify-safe@5.0.1", + "externalReferences": [ + { + "url": "git://github.com/isaacs/json-stringify-safe.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/json-stringify-safe", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonparse@1.3.1?package-id=b1e13c9869e6a60e", + "author": "Tim Caswell ", + "name": "jsonparse", + "version": "1.3.1", + "description": "This is a pure-js JSON streaming parser for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:creationix:jsonparse:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonparse@1.3.1", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/creationix/jsonparse.git", + "type": "distribution" + }, + { + "url": "https://github.com/creationix/jsonparse#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsprim@1.4.2?package-id=1555634d1f1bf190", + "name": "jsprim", + "version": "1.4.2", + "description": "utilities for primitive JavaScript types", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:joyent:jsprim:1.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsprim@1.4.2", + "externalReferences": [ + { + "url": "git://github.com/joyent/node-jsprim.git", + "type": "distribution" + }, + { + "url": "https://github.com/joyent/node-jsprim#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/latest-version@3.1.0?package-id=112a46fc0e19bff6", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "latest-version", + "version": "3.1.0", + "description": "Get the latest version of an npm package", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:latest-version:latest-version:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/latest-version@3.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/latest-version.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/latest-version#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lazy-property@1.0.0?package-id=3cdbabf15e025def", + "author": "Mikola Lysenko", + "name": "lazy-property", + "version": "1.0.0", + "description": "Lazily initialized properties for objects", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lazy-property:lazy-property:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lazy-property@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/mikolalysenko/lazy-property.git", + "type": "distribution" + }, + { + "url": "https://github.com/mikolalysenko/lazy-property#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.17.1&package-id=8126b232e2d3c608", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r3", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.17.1", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libcipm@4.0.8?package-id=939bd2c33a65cf65", + "author": "Kat Marchán ", + "name": "libcipm", + "version": "4.0.8", + "description": "programmatic API for cipm: a ci-oriented package installer for npm", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libcipm:libcipm:4.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/libcipm@4.0.8", + "externalReferences": [ + { + "url": "git+https://github.com/npm/libcipm.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/libcipm#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&upstream=openssl&distro=alpine-3.17.1&package-id=598e6b7529ed70b1", + "publisher": "Ariadne Conill ", + "name": "libcrypto3", + "version": "3.0.7-r2", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto3:libcrypto3:3.0.7-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto3@3.0.7-r2?arch=x86_64&upstream=openssl&distro=alpine-3.17.1", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgcc@12.2.1_git20220924-r4?arch=x86_64&upstream=gcc&distro=alpine-3.17.1&package-id=4dbb63d06d9618e9", + "publisher": "Ariadne Conill ", + "name": "libgcc", + "version": "12.2.1_git20220924-r4", + "description": "GNU C compiler runtime libraries", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgcc:libgcc:12.2.1_git20220924-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgcc@12.2.1_git20220924-r4?arch=x86_64&upstream=gcc&distro=alpine-3.17.1", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpm@3.0.1?package-id=8765b2a6f6c0fa16", + "author": "Kat Marchán ", + "name": "libnpm", + "version": "3.0.1", + "description": "Collection of programmatic APIs for the npm CLI", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpm:libnpm:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpm@3.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/libnpm.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/libnpm#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmaccess@3.0.2?package-id=5341f660eccfba6b", + "author": "Kat Marchán ", + "name": "libnpmaccess", + "version": "3.0.2", + "description": "programmatic library for `npm access` commands", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmaccess:libnpmaccess:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmaccess@3.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/libnpmaccess.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmaccess", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmconfig@1.2.1?package-id=db2a17ecbb5c09ba", + "author": "Kat Marchán ", + "name": "libnpmconfig", + "version": "1.2.1", + "description": "Standalone library for reading/writing/managing npm configurations", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmconfig:libnpmconfig:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmconfig@1.2.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/libnpmconfig.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmconfig", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmhook@5.0.3?package-id=15a009beffa78fc4", + "author": "Kat Marchán ", + "name": "libnpmhook", + "version": "5.0.3", + "description": "programmatic API for managing npm registry hooks", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmhook:libnpmhook:5.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmhook@5.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/npm/libnpmhook.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/libnpmhook#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmorg@1.0.1?package-id=8b6fdd9d34b188a7", + "author": "Kat Marchán ", + "name": "libnpmorg", + "version": "1.0.1", + "description": "Programmatic api for `npm org` commands", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmorg:libnpmorg:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmorg@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/libnpmorg.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmorg", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmpublish@1.1.2?package-id=4940e26c16b646a2", + "author": "Kat Marchán ", + "name": "libnpmpublish", + "version": "1.1.2", + "description": "Programmatic API for the bits behind npm publish and unpublish", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmpublish:libnpmpublish:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmpublish@1.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/libnpmpublish.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmpublish", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmsearch@2.0.2?package-id=4152eb0fada08f68", + "author": "Kat Marchán ", + "name": "libnpmsearch", + "version": "2.0.2", + "description": "Programmatic API for searching in npm and compatible registries.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmsearch:libnpmsearch:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmsearch@2.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/libnpmsearch.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmsearch", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmteam@1.0.2?package-id=ab825ae6bda4b852", + "author": "Kat Marchán ", + "name": "libnpmteam", + "version": "1.0.2", + "description": "npm Team management APIs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmteam:libnpmteam:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmteam@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/libnpmteam.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmteam", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpx@10.2.4?package-id=670932cf0842993", + "author": "Kat Marchán ", + "name": "libnpx", + "version": "10.2.4", + "description": "support library for npx -- an tool for executing npm-based packages.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpx:libnpx:10.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpx@10.2.4", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npx.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npx#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&upstream=openssl&distro=alpine-3.17.1&package-id=62fe4f2c0262ca5c", + "publisher": "Ariadne Conill ", + "name": "libssl3", + "version": "3.0.7-r2", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libssl3:libssl3:3.0.7-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl3@3.0.7-r2?arch=x86_64&upstream=openssl&distro=alpine-3.17.1", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libstdc++@12.2.1_git20220924-r4?arch=x86_64&upstream=gcc&distro=alpine-3.17.1&package-id=3c33807c48d3ddd2", + "publisher": "Ariadne Conill ", + "name": "libstdc++", + "version": "12.2.1_git20220924-r4", + "description": "GNU C++ standard runtime library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:12.2.1_git20220924-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libstdc++@12.2.1_git20220924-r4?arch=x86_64&upstream=gcc&distro=alpine-3.17.1", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lightship@6.8.0?package-id=83f0bd939f5ec53b", + "author": "Gajus Kuizinas (http://gajus.com)", + "name": "lightship", + "version": "6.8.0", + "description": "Abstracts readiness, liveness and startup checks and graceful shutdown of Node.js services running in Kubernetes.", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:lightship:lightship:6.8.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lightship@6.8.0", + "externalReferences": [ + { + "url": "git+https://github.com/gajus/lightship.git", + "type": "distribution" + }, + { + "url": "https://github.com/gajus/lightship#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/locate-path@3.0.0?package-id=6a3c95978434a1d0", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "locate-path", + "version": "3.0.0", + "description": "Get the first path that exists on disk of multiple paths", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:locate-path:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/locate-path@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/locate-path.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/locate-path#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/locate-path@3.0.0?package-id=e9f822cde2a9982c", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "locate-path", + "version": "3.0.0", + "description": "Get the first path that exists on disk of multiple paths", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:locate-path:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/locate-path@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/locate-path.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/locate-path#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lock-verify@2.1.0?package-id=f4dd576a958e3bb6", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "lock-verify", + "version": "2.1.0", + "description": "Report if your package.json is out of sync with your package-lock.json.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lock-verify:lock-verify:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lock-verify@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/lock-verify.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/lock-verify#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lockfile@1.0.4?package-id=ebdf70a73ac68f2d", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "lockfile", + "version": "1.0.4", + "description": "A very polite lock file utility, which endeavors to not litter, and to wait patiently for others.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lockfile:lockfile:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/lockfile@1.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/npm/lockfile.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/lockfile#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash@4.17.20?package-id=f72fa7bfea8130bb", + "author": "John-David Dalton ", + "name": "lodash", + "version": "4.17.20", + "description": "Lodash modular utilities.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash:lodash:4.17.20:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash@4.17.20", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash._baseindexof@3.1.0?package-id=38efd060e3a4d336", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash._baseindexof", + "version": "3.1.0", + "description": "The modern build of lodash’s internal `baseIndexOf` as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.-baseindexof:lodash.-baseindexof:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash._baseindexof@3.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash._baseuniq@4.6.0?package-id=f3cad3a8a8778d94", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash._baseuniq", + "version": "4.6.0", + "description": "The internal lodash function `baseUniq` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.-baseuniq:lodash.-baseuniq:4.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash._baseuniq@4.6.0", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash._bindcallback@3.0.1?package-id=aceccd904d52fec7", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash._bindcallback", + "version": "3.0.1", + "description": "The modern build of lodash’s internal `bindCallback` as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.-bindcallback:lodash.-bindcallback:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash._bindcallback@3.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash._cacheindexof@3.0.2?package-id=9366742db20085f0", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash._cacheindexof", + "version": "3.0.2", + "description": "The modern build of lodash’s internal `cacheIndexOf` as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.-cacheindexof:lodash.-cacheindexof:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash._cacheindexof@3.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash._createcache@3.1.2?package-id=edbe9d8077eb16ba", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash._createcache", + "version": "3.1.2", + "description": "The modern build of lodash’s internal `createCache` as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.-createcache:lodash.-createcache:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash._createcache@3.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash._createset@4.0.3?package-id=27ed42f7fc9601ba", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash._createset", + "version": "4.0.3", + "description": "The internal lodash function `createSet` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.-createset:lodash.-createset:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash._createset@4.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash._getnative@3.9.1?package-id=b817ace9e00c6dc1", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash._getnative", + "version": "3.9.1", + "description": "The modern build of lodash’s internal `getNative` as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.-getnative:lodash.-getnative:3.9.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash._getnative@3.9.1", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash._root@3.0.1?package-id=3975d2ad53d321e8", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash._root", + "version": "3.0.1", + "description": "The internal lodash function `root` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.-root:lodash.-root:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash._root@3.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.clonedeep@4.5.0?package-id=60a70c19659c0615", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.clonedeep", + "version": "4.5.0", + "description": "The lodash method `_.cloneDeep` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.clonedeep:lodash.clonedeep:4.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.clonedeep@4.5.0", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.restparam@3.6.1?package-id=cd218c729d0105b1", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.restparam", + "version": "3.6.1", + "description": "The modern build of lodash’s `_.restParam` as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.restparam:lodash.restparam:3.6.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.restparam@3.6.1", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.union@4.6.0?package-id=fd1f76b549051dc5", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.union", + "version": "4.6.0", + "description": "The lodash method `_.union` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.union:lodash.union:4.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.union@4.6.0", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.uniq@4.5.0?package-id=ff80c2262d287958", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.uniq", + "version": "4.5.0", + "description": "The lodash method `_.uniq` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.uniq:lodash.uniq:4.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.uniq@4.5.0", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.without@4.4.0?package-id=284f38c0ca8041d8", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.without", + "version": "4.4.0", + "description": "The lodash method `_.without` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.without:lodash.without:4.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.without@4.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lowercase-keys@1.0.1?package-id=409c8833cd49dbdb", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "lowercase-keys", + "version": "1.0.1", + "description": "Lowercase the keys of an object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lowercase-keys:lowercase-keys:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lowercase-keys@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/lowercase-keys.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/lowercase-keys#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lru-cache@4.1.5?package-id=eef94188c4c5e168", + "author": "Isaac Z. Schlueter ", + "name": "lru-cache", + "version": "4.1.5", + "description": "A cache object that deletes the least-recently-used items.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lru-cache:lru-cache:4.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru-cache@4.1.5", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-lru-cache.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/node-lru-cache#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lru-cache@5.1.1?package-id=6e978256c4691a8c", + "author": "Isaac Z. Schlueter ", + "name": "lru-cache", + "version": "5.1.1", + "description": "A cache object that deletes the least-recently-used items.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lru-cache:lru-cache:5.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru-cache@5.1.1", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-lru-cache.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/node-lru-cache#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lru_map@0.3.3?package-id=8593166d4c692511", + "author": "Rasmus Andersson ", + "name": "lru_map", + "version": "0.3.3", + "description": "Finite key-value map using the Least Recently Used (LRU) algorithm where the most recently used objects are keept in the map while less recently used items are evicted to make room for new ones.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lru-map:lru-map:0.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru_map@0.3.3", + "externalReferences": [ + { + "url": "git+https://github.com/rsms/js-lru.git", + "type": "distribution" + }, + { + "url": "https://github.com/rsms/js-lru#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/make-dir@1.3.0?package-id=8c1dc4a13ddd1f8b", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "make-dir", + "version": "1.3.0", + "description": "Make a directory and its parents if needed - Think `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:make-dir:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-dir@1.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/make-dir.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/make-dir#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/make-fetch-happen@5.0.2?package-id=b812e5c3d8342059", + "author": "Kat Marchán ", + "name": "make-fetch-happen", + "version": "5.0.2", + "description": "Opinionated, caching, retrying fetch client", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:make-fetch-happen:make-fetch-happen:5.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-fetch-happen@5.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/zkat/make-fetch-happen.git", + "type": "distribution" + }, + { + "url": "https://github.com/zkat/make-fetch-happen#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/meant@1.0.2?package-id=9f846d616f5464f2", + "author": "Daijiro Wachi", + "name": "meant", + "version": "1.0.2", + "description": "Like the `Did you mean?` in git for npm", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:watilde:meant:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/meant@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/watilde/meant.git", + "type": "distribution" + }, + { + "url": "https://github.com/watilde/meant#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/media-typer@0.3.0?package-id=33c04253526b5d6b", + "author": "Douglas Christopher Wilson ", + "name": "media-typer", + "version": "0.3.0", + "description": "Simple RFC 6838 media type parser and formatter", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:media-typer:media-typer:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/media-typer@0.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/media-typer.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/media-typer#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/merge-descriptors@1.0.1?package-id=c7a60e972125bba3", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "merge-descriptors", + "version": "1.0.1", + "description": "Merge objects using descriptors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:merge-descriptors:merge-descriptors:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/merge-descriptors@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/component/merge-descriptors.git", + "type": "distribution" + }, + { + "url": "https://github.com/component/merge-descriptors#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/methods@1.1.2?package-id=96ba5c582a21e3ad", + "name": "methods", + "version": "1.1.2", + "description": "HTTP methods that node supports", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:methods:methods:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/methods@1.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/methods.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/methods#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime@1.6.0?package-id=e5feb4f33fab3438", + "author": "Robert Kieffer (http://github.com/broofa)", + "name": "mime", + "version": "1.6.0", + "description": "A comprehensive library for mime-type mapping", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:broofa:mime:1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime@1.6.0", + "externalReferences": [ + { + "url": "git+https://github.com/broofa/node-mime.git", + "type": "distribution" + }, + { + "url": "https://github.com/broofa/node-mime#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-db@1.35.0?package-id=c25238efc221af78", + "name": "mime-db", + "version": "1.35.0", + "description": "Media Type Database", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-db:mime-db:1.35.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-db@1.35.0", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/mime-db.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/mime-db#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-db@1.46.0?package-id=e7158f9d9f9f8c50", + "name": "mime-db", + "version": "1.46.0", + "description": "Media Type Database", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-db:mime-db:1.46.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-db@1.46.0", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/mime-db.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/mime-db#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-types@2.1.19?package-id=62a25db5618d2057", + "name": "mime-types", + "version": "2.1.19", + "description": "The ultimate javascript content-type utility.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-types:mime-types:2.1.19:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-types@2.1.19", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/mime-types.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/mime-types#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-types@2.1.29?package-id=b14edb66509f19f5", + "name": "mime-types", + "version": "2.1.29", + "description": "The ultimate javascript content-type utility.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-types:mime-types:2.1.29:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-types@2.1.29", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/mime-types.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/mime-types#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.0.4?package-id=7fcd6e247b4522bb", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.0.4", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.0.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/minimatch#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.0.4?package-id=b74a272da922258", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.0.4", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.0.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/minimatch#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimist@1.2.5?package-id=7e33f89f406fa4cd", + "author": "James Halliday (http://substack.net)", + "name": "minimist", + "version": "1.2.5", + "description": "parse argument options", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minimist:minimist:1.2.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimist@1.2.5", + "externalReferences": [ + { + "url": "git://github.com/substack/minimist.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/minimist", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimist@1.2.6?package-id=65c18082a40e8fdd", + "author": "James Halliday (http://substack.net)", + "name": "minimist", + "version": "1.2.6", + "description": "parse argument options", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minimist:minimist:1.2.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimist@1.2.6", + "externalReferences": [ + { + "url": "git://github.com/substack/minimist.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/minimist", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimist@1.2.6?package-id=402e6e7e70713122", + "author": "James Halliday (http://substack.net)", + "name": "minimist", + "version": "1.2.6", + "description": "parse argument options", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minimist:minimist:1.2.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimist@1.2.6", + "externalReferences": [ + { + "url": "git://github.com/substack/minimist.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/minimist", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass@2.9.0?package-id=f2f474de24692541", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "2.9.0", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:2.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@2.9.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass@2.9.0?package-id=5d775be3798a9729", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "2.9.0", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:2.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@2.9.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass@2.9.0?package-id=e33a08c31794e287", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "2.9.0", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:2.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@2.9.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass@2.9.0?package-id=535794a8ced5f304", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "2.9.0", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:2.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@2.9.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minizlib@1.3.3?package-id=140f93595fa83c95", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minizlib", + "version": "1.3.3", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minizlib:minizlib:1.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/minizlib@1.3.3", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/minizlib#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mississippi@3.0.0?package-id=9436d1be28573634", + "author": "max ogden", + "name": "mississippi", + "version": "3.0.0", + "description": "a collection of useful streams", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:mississippi:mississippi:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mississippi@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/maxogden/mississippi.git", + "type": "distribution" + }, + { + "url": "https://github.com/maxogden/mississippi#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp@0.5.5?package-id=56a07975b148c1e", + "author": "James Halliday (http://substack.net)", + "name": "mkdirp", + "version": "0.5.5", + "description": "Recursively mkdir, like `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:substack:mkdirp:0.5.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp@0.5.5", + "externalReferences": [ + { + "url": "git+https://github.com/substack/node-mkdirp.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/node-mkdirp#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp@0.5.5?package-id=505d896e9aff08a3", + "author": "James Halliday (http://substack.net)", + "name": "mkdirp", + "version": "0.5.5", + "description": "Recursively mkdir, like `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:substack:mkdirp:0.5.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp@0.5.5", + "externalReferences": [ + { + "url": "git+https://github.com/substack/node-mkdirp.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/node-mkdirp#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/move-concurrently@1.0.1?package-id=bd433a898366d4cd", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "move-concurrently", + "version": "1.0.1", + "description": "Promises of moves of files or directories with rename, falling back to recursive rename/copy on EXDEV errors, with configurable concurrency and win32 junction support.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:move-concurrently:move-concurrently:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/move-concurrently@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/move-concurrently.git", + "type": "distribution" + }, + { + "url": "https://www.npmjs.com/package/move-concurrently", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.0.0?package-id=8a90bac75ece8442", + "name": "ms", + "version": "2.0.0", + "description": "Tiny milisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:zeit:ms:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/zeit/ms.git", + "type": "distribution" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.0.0?package-id=489a012f564610ef", + "name": "ms", + "version": "2.0.0", + "description": "Tiny milisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:zeit:ms:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/zeit/ms.git", + "type": "distribution" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.1?package-id=8d2514ddd40cc73b", + "name": "ms", + "version": "2.1.1", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:zeit:ms:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/zeit/ms.git", + "type": "distribution" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.1?package-id=c3b6931e886fa739", + "name": "ms", + "version": "2.1.1", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:zeit:ms:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/zeit/ms.git", + "type": "distribution" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.2?package-id=4125489c3f9d17dc", + "name": "ms", + "version": "2.1.2", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:zeit:ms:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/zeit/ms.git", + "type": "distribution" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.2?package-id=b8f30c8413c3d272", + "name": "ms", + "version": "2.1.2", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:zeit:ms:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/zeit/ms.git", + "type": "distribution" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.2?package-id=4a5d80c8c2a7c2a7", + "name": "ms", + "version": "2.1.2", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:zeit:ms:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/zeit/ms.git", + "type": "distribution" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/multer@1.4.2?package-id=cd7acf9d44738a70", + "name": "multer", + "version": "1.4.2", + "description": "Middleware for handling `multipart/form-data`.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:expressjs:multer:1.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/multer@1.4.2", + "externalReferences": [ + { + "url": "git+https://github.com/expressjs/multer.git", + "type": "distribution" + }, + { + "url": "https://github.com/expressjs/multer#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.2.3-r4?arch=x86_64&distro=alpine-3.17.1&package-id=d9700f02cf26e8b8", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.2.3-r4", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.2.3-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.2.3-r4?arch=x86_64&distro=alpine-3.17.1", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86_64&upstream=musl&distro=alpine-3.17.1&package-id=f71ecf5267e6c37b", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.2.3-r4", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.2.3-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86_64&upstream=musl&distro=alpine-3.17.1", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mute-stream@0.0.7?package-id=ab0b4d84af6e6552", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "mute-stream", + "version": "0.0.7", + "description": "Bytes go in, but they don't come out (when muted).", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:mute-stream:mute-stream:0.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/mute-stream@0.0.7", + "externalReferences": [ + { + "url": "git://github.com/isaacs/mute-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/mute-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/negotiator@0.6.2?package-id=ad18b750d9f88ada", + "name": "negotiator", + "version": "0.6.2", + "description": "HTTP content negotiation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:negotiator:negotiator:0.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/negotiator@0.6.2", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/negotiator.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/negotiator#readme", + "type": "website" + } + ] + }, + { + "type": "application", + "bom-ref": "pkg:generic/node@14.21.2?package-id=c10925941d01dbd1", + "name": "node", + "version": "14.21.2", + "cpe": "cpe:2.3:a:nodejs:node.js:14.21.2:*:*:*:*:*:*:*", + "purl": "pkg:generic/node@14.21.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-fetch@2.6.1?package-id=ff97b9d822553e25", + "author": "David Frank", + "name": "node-fetch", + "version": "2.6.1", + "description": "A light-weight module that brings window.fetch to node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-fetch:node-fetch:2.6.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-fetch@2.6.1", + "externalReferences": [ + { + "url": "git+https://github.com/bitinn/node-fetch.git", + "type": "distribution" + }, + { + "url": "https://github.com/bitinn/node-fetch", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-fetch-npm@2.0.2?package-id=adeeb0d4a244c44", + "author": "David Frank", + "name": "node-fetch-npm", + "version": "2.0.2", + "description": "An npm cli-oriented fork of the excellent node-fetch", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-fetch-npm:node-fetch-npm:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-fetch-npm@2.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/node-fetch-npm.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/node-fetch-npm", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-gyp@5.1.0?package-id=b9b00a18ece22cef", + "author": "Nathan Rajlich (http://tootallnate.net)", + "name": "node-gyp", + "version": "5.1.0", + "description": "Node.js native addon build tool", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-gyp:node-gyp:5.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-gyp@5.1.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/node-gyp.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/node-gyp#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/nopt@4.0.3?package-id=2f83f388c5e5a214", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "nopt", + "version": "4.0.3", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:nopt:nopt:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/nopt@4.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/npm/nopt.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/nopt#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/normalize-package-data@2.5.0?package-id=8439f54251b29848", + "author": "Meryn Stol ", + "name": "normalize-package-data", + "version": "2.5.0", + "description": "Normalizes data that can be found in package.json files.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:normalize-package-data:normalize-package-data:2.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/normalize-package-data@2.5.0", + "externalReferences": [ + { + "url": "git://github.com/npm/normalize-package-data.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/normalize-package-data#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm@6.14.17?package-id=b37c7f858fd429d1", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "npm", + "version": "6.14.17", + "description": "a package manager for JavaScript", + "licenses": [ + { + "license": { + "id": "Artistic-2.0" + } + } + ], + "cpe": "cpe:2.3:a:npm:npm:6.14.17:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm@6.14.17", + "externalReferences": [ + { + "url": "https://github.com/npm/cli", + "type": "distribution" + }, + { + "url": "https://docs.npmjs.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-audit-report@1.3.3?package-id=cfbfbebf3fce8431", + "author": "Adam Baldwin", + "name": "npm-audit-report", + "version": "1.3.3", + "description": "Given a response from the npm security api, render it into a variety of security reports", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-audit-report:npm-audit-report:1.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-audit-report@1.3.3", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-audit-report.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-audit-report#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-bundled@1.1.1?package-id=9e77c8c8f13f445a", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "npm-bundled", + "version": "1.1.1", + "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-bundled:npm-bundled:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-bundled@1.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-bundled.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-bundled#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-cache-filename@1.0.2?package-id=cb5b8efb67903585", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "npm-cache-filename", + "version": "1.0.2", + "description": "Given a cache folder and url, return the appropriate cache folder.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-cache-filename:npm-cache-filename:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-cache-filename@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/npm/npm-cache-filename.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-cache-filename", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-cli-docs@0.1.0?package-id=8f1a0cc1a30d42f6", + "author": "Tanya Brassie ", + "name": "npm-cli-docs", + "version": "0.1.0", + "description": "npm cli docs", + "licenses": [ + { + "license": { + "id": "Artistic-2.0" + } + } + ], + "cpe": "cpe:2.3:a:npm-cli-docs:npm-cli-docs:0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-cli-docs@0.1.0", + "externalReferences": [ + { + "url": "https://github.com/npm/cli", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-init@0.0.0?package-id=e58118b5aaeeedd7", + "name": "npm-init", + "version": "0.0.0", + "description": "an initter you init wit, innit?", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:npm-init:npm-init:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-init@0.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-install-checks@3.0.2?package-id=cbed4ef3ca50d013", + "author": "Robert Kowalski ", + "name": "npm-install-checks", + "version": "3.0.2", + "description": "checks that npm runs during the installation of a module", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:npm-install-checks:npm-install-checks:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-install-checks@3.0.2", + "externalReferences": [ + { + "url": "git://github.com/npm/npm-install-checks.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-install-checks", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-lifecycle@3.1.5?package-id=b6ff96c0c3bbf7d2", + "author": "Mike Sherov", + "name": "npm-lifecycle", + "version": "3.1.5", + "description": "JavaScript package lifecycle hook runner", + "licenses": [ + { + "license": { + "id": "Artistic-2.0" + } + } + ], + "cpe": "cpe:2.3:a:npm-lifecycle:npm-lifecycle:3.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-lifecycle@3.1.5", + "externalReferences": [ + { + "url": "git://github.com/npm/lifecycle.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/lifecycle#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-logical-tree@1.2.1?package-id=441198ebc020e01d", + "author": "Kat Marchán ", + "name": "npm-logical-tree", + "version": "1.2.1", + "description": "Calculate 'logical' trees from a package.json + package-lock", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-logical-tree:npm-logical-tree:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-logical-tree@1.2.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/logical-tree.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/logical-tree#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@1.0.1?package-id=faf8a116dafcc8d", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "npm-normalize-package-bin", + "version": "1.0.1", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-normalize-package-bin#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-package-arg@6.1.1?package-id=361cb151e33b38b8", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "npm-package-arg", + "version": "6.1.1", + "description": "Parse the things that can be arguments to `npm install`", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-package-arg:npm-package-arg:6.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-package-arg@6.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-package-arg.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-package-arg", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-packlist@1.4.8?package-id=45dd5db953381614", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "npm-packlist", + "version": "1.4.8", + "description": "Get a list of the files to add from a folder into an npm package", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-packlist:npm-packlist:1.4.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-packlist@1.4.8", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-packlist.git", + "type": "distribution" + }, + { + "url": "https://www.npmjs.com/package/npm-packlist", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-pick-manifest@3.0.2?package-id=eaeea9720b4d5360", + "author": "Kat Marchán ", + "name": "npm-pick-manifest", + "version": "3.0.2", + "description": "Resolves a matching manifest from a package metadata document according to standard npm semver resolution rules.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-pick-manifest:npm-pick-manifest:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-pick-manifest@3.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-pick-manifest.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-pick-manifest#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-profile@4.0.4?package-id=4d9e591b42474ecb", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "npm-profile", + "version": "4.0.4", + "description": "Library for updating an npmjs.com profile", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-profile:npm-profile:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-profile@4.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-profile.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-profile/tree/latest/lib#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-registry-fetch@4.0.7?package-id=ff298f561e427135", + "author": "Kat Marchán ", + "name": "npm-registry-fetch", + "version": "4.0.7", + "description": "Fetch-based http client for use with npm registry APIs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-registry-fetch:npm-registry-fetch:4.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-registry-fetch@4.0.7", + "externalReferences": [ + { + "url": "git+https://github.com/npm/registry-fetch.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/registry-fetch#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-run-path@2.0.2?package-id=affacdccaca7f37f", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "npm-run-path", + "version": "2.0.2", + "description": "Get your PATH prepended with locally installed binaries", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:npm-run-path:npm-run-path:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-run-path@2.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/npm-run-path.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/npm-run-path#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-user-validate@1.0.1?package-id=9cb265c5d2df8131", + "author": "Robert Kowalski ", + "name": "npm-user-validate", + "version": "1.0.1", + "description": "User validations for npm", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:npm-user-validate:npm-user-validate:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-user-validate@1.0.1", + "externalReferences": [ + { + "url": "git://github.com/npm/npm-user-validate.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-user-validate#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npmlog@4.1.2?package-id=25b4bcebeb6b5003", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "npmlog", + "version": "4.1.2", + "description": "logger for npm", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npmlog:npmlog:4.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npmlog@4.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npmlog.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npmlog#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/number-is-nan@1.0.1?package-id=52229f13f55aa483", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "number-is-nan", + "version": "1.0.1", + "description": "ES2015 Number.isNaN() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:number-is-nan:number-is-nan:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/number-is-nan@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/number-is-nan.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/number-is-nan#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/oauth-sign@0.9.0?package-id=ca46b51b0266a848", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "oauth-sign", + "version": "0.9.0", + "description": "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:oauth-sign:oauth-sign:0.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/oauth-sign@0.9.0", + "externalReferences": [ + { + "url": "git+https://github.com/mikeal/oauth-sign.git", + "type": "distribution" + }, + { + "url": "https://github.com/mikeal/oauth-sign#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-assign@4.1.1?package-id=ae257450c890715a", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "object-assign", + "version": "4.1.1", + "description": "ES2015 `Object.assign()` ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-assign:object-assign:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-assign@4.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/object-assign.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/object-assign#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-assign@4.1.1?package-id=4352ef57ca64ac71", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "object-assign", + "version": "4.1.1", + "description": "ES2015 `Object.assign()` ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-assign:object-assign:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-assign@4.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/object-assign.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/object-assign#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-hash@2.1.1?package-id=1a268c519d95fecd", + "author": "Scott Puleo ", + "name": "object-hash", + "version": "2.1.1", + "description": "Generate hashes from javascript objects in node and the browser.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-hash:object-hash:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-hash@2.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/puleos/object-hash.git", + "type": "distribution" + }, + { + "url": "https://github.com/puleos/object-hash", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-keys@1.0.12?package-id=553c1830da4c0f15", + "author": "Jordan Harband (http://ljharb.codes)", + "name": "object-keys", + "version": "1.0.12", + "description": "An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-keys:object-keys:1.0.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-keys@1.0.12", + "externalReferences": [ + { + "url": "git://github.com/ljharb/object-keys.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-keys@1.1.1?package-id=319eacbf6a0ef5d", + "author": "Jordan Harband (http://ljharb.codes)", + "name": "object-keys", + "version": "1.1.1", + "description": "An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-keys:object-keys:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-keys@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/ljharb/object-keys.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/object-keys#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object.getownpropertydescriptors@2.0.3?package-id=5a48ed26122d77f7", + "author": "Jordan Harband", + "name": "object.getownpropertydescriptors", + "version": "2.0.3", + "description": "ES2017 spec-compliant shim for `Object.getOwnPropertyDescriptors` that works in ES5.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object.getownpropertydescriptors:object.getownpropertydescriptors:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/object.getownpropertydescriptors@2.0.3", + "externalReferences": [ + { + "url": "git://github.com/ljharb/object.getownpropertydescriptors.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/object.getownpropertydescriptors#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/on-finished@2.3.0?package-id=ce866b6fa0101af5", + "name": "on-finished", + "version": "2.3.0", + "description": "Execute a callback when a request closes, finishes, or errors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:on-finished:on-finished:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/on-finished@2.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/on-finished.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/on-finished#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/once@1.4.0?package-id=acd9aa54ac049a0e", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "once", + "version": "1.4.0", + "description": "Run a function exactly one time", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:once:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/once.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/once#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/once@1.4.0?package-id=56789787f3e05aa7", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "once", + "version": "1.4.0", + "description": "Run a function exactly one time", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:once:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/once.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/once#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/opener@1.5.2?package-id=7e147c5eae081fba", + "author": "Domenic Denicola (https://domenic.me/)", + "name": "opener", + "version": "1.5.2", + "description": "Opens stuff, like webpages and files and executables, cross-platform", + "licenses": [ + { + "license": { + "name": "(WTFPL OR MIT)" + } + } + ], + "cpe": "cpe:2.3:a:domenic:opener:1.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/opener@1.5.2", + "externalReferences": [ + { + "url": "git+https://github.com/domenic/opener.git", + "type": "distribution" + }, + { + "url": "https://github.com/domenic/opener#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/os-homedir@1.0.2?package-id=8f5251251e0a2862", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "os-homedir", + "version": "1.0.2", + "description": "Node.js 4 `os.homedir()` ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:os-homedir:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/os-homedir@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/os-homedir.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/os-homedir#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/os-tmpdir@1.0.2?package-id=319f8a779adc8672", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "os-tmpdir", + "version": "1.0.2", + "description": "Node.js os.tmpdir() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:os-tmpdir:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/os-tmpdir@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/os-tmpdir.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/os-tmpdir#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/osenv@0.1.5?package-id=299bd30a410ad76d", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "osenv", + "version": "0.1.5", + "description": "Look up environment settings specific to different operating systems", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:osenv:osenv:0.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/osenv@0.1.5", + "externalReferences": [ + { + "url": "git+https://github.com/npm/osenv.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/osenv#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-finally@1.0.0?package-id=da0efa231a6d3078", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-finally", + "version": "1.0.0", + "description": "`Promise#finally()` ponyfill - Invoked when the promise is settled regardless of outcome", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:p-finally:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-finally@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/p-finally.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/p-finally#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-finally@1.0.0?package-id=ee6201c5c1a7fb4d", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-finally", + "version": "1.0.0", + "description": "`Promise#finally()` ponyfill - Invoked when the promise is settled regardless of outcome", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:p-finally:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-finally@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/p-finally.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/p-finally#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-limit@2.2.0?package-id=8e8636a82737dbe8", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-limit", + "version": "2.2.0", + "description": "Run multiple promise-returning & async functions with limited concurrency", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:p-limit:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-limit@2.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/p-limit.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/p-limit#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-limit@2.3.0?package-id=55e0eb9e24d434b9", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-limit", + "version": "2.3.0", + "description": "Run multiple promise-returning & async functions with limited concurrency", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:p-limit:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-limit@2.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/p-limit.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/p-limit#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-locate@3.0.0?package-id=caacbeef8553cb8b", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-locate", + "version": "3.0.0", + "description": "Get the first fulfilled promise that satisfies the provided testing function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:p-locate:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-locate@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/p-locate.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/p-locate#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-locate@3.0.0?package-id=f95bdff20b3ee519", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-locate", + "version": "3.0.0", + "description": "Get the first fulfilled promise that satisfies the provided testing function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:p-locate:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-locate@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/p-locate.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/p-locate#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-timeout@3.2.0?package-id=1109246b0f2dc3d3", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-timeout", + "version": "3.2.0", + "description": "Timeout a promise after a specified amount of time", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:p-timeout:3.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-timeout@3.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/p-timeout.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/p-timeout#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-try@2.2.0?package-id=c42ca8af78a02fe7", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-try", + "version": "2.2.0", + "description": "`Start a promise chain", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:p-try:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-try@2.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/p-try.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/p-try#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-try@2.2.0?package-id=c6cc8bcd8e8c6777", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-try", + "version": "2.2.0", + "description": "`Start a promise chain", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:p-try:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-try@2.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/p-try.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/p-try#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-wait-for@3.2.0?package-id=46408edc8e37cf24", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "p-wait-for", + "version": "3.2.0", + "description": "Wait for a condition to be true", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:p-wait-for:3.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-wait-for@3.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/p-wait-for.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/p-wait-for#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/package-json@4.0.1?package-id=4e92e688a7ce2a15", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "package-json", + "version": "4.0.1", + "description": "Get metadata of a package from the npm registry", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:package-json:package-json:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/package-json@4.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/package-json.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/package-json#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pacote@9.5.12?package-id=140141515a255620", + "author": "Kat Marchán ", + "name": "pacote", + "version": "9.5.12", + "description": "JavaScript package downloader", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pacote:pacote:9.5.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/pacote@9.5.12", + "externalReferences": [ + { + "url": "git+https://github.com/npm/pacote.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/pacote#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/parallel-transform@1.1.0?package-id=62f72bf19fb9ed91", + "author": "Mathias Buus Madsen ", + "name": "parallel-transform", + "version": "1.1.0", + "description": "Transform stream that allows you to run your transforms in parallel without changing the order", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:parallel-transform:parallel-transform:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/parallel-transform@1.1.0", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/parallel-transform.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/parallel-transform#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/parseurl@1.3.3?package-id=a522a78fd0867f72", + "name": "parseurl", + "version": "1.3.3", + "description": "parse a url with memoization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:parseurl:parseurl:1.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/parseurl@1.3.3", + "externalReferences": [ + { + "url": "git+https://github.com/pillarjs/parseurl.git", + "type": "distribution" + }, + { + "url": "https://github.com/pillarjs/parseurl#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-exists@3.0.0?package-id=e62b33d309c41526", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-exists", + "version": "3.0.0", + "description": "Check if a path exists", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:path-exists:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-exists@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/path-exists.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/path-exists#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=b30d6bddac8e825a", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-is-absolute", + "version": "1.0.1", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/path-is-absolute.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=89d0f4a70e07b9bf", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-is-absolute", + "version": "1.0.1", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/path-is-absolute.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-is-inside@1.0.2?package-id=9b511c0f5818d466", + "author": "Domenic Denicola (https://domenic.me)", + "name": "path-is-inside", + "version": "1.0.2", + "description": "Tests whether one path is inside another path", + "licenses": [ + { + "license": { + "name": "(WTFPL OR MIT)" + } + } + ], + "cpe": "cpe:2.3:a:path-is-inside:path-is-inside:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-is-inside@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/domenic/path-is-inside.git", + "type": "distribution" + }, + { + "url": "https://github.com/domenic/path-is-inside#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-key@2.0.1?package-id=2de86124def740fb", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-key", + "version": "2.0.1", + "description": "Get the PATH environment variable key cross-platform", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:path-key:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-key@2.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/path-key.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/path-key#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-parse@1.0.7?package-id=8726bfd9ba83e33b", + "author": "Javier Blanco ", + "name": "path-parse", + "version": "1.0.7", + "description": "Node.js path.parse() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jbgutierrez:path-parse:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-parse@1.0.7", + "externalReferences": [ + { + "url": "git+https://github.com/jbgutierrez/path-parse.git", + "type": "distribution" + }, + { + "url": "https://github.com/jbgutierrez/path-parse#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-to-regexp@0.1.7?package-id=c5bea2fa2a46ed82", + "name": "path-to-regexp", + "version": "0.1.7", + "description": "Express style path to RegExp utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-to-regexp:path-to-regexp:0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-to-regexp@0.1.7", + "externalReferences": [ + { + "url": "git+https://github.com/component/path-to-regexp.git", + "type": "distribution" + }, + { + "url": "https://github.com/component/path-to-regexp#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-to-regexp@3.2.0?package-id=89f78191777fd1c7", + "name": "path-to-regexp", + "version": "3.2.0", + "description": "Express style path to RegExp utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-to-regexp:path-to-regexp:3.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-to-regexp@3.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/pillarjs/path-to-regexp.git", + "type": "distribution" + }, + { + "url": "https://github.com/pillarjs/path-to-regexp#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/performance-now@2.1.0?package-id=111ced796010edab", + "author": "Braveg1rl ", + "name": "performance-now", + "version": "2.1.0", + "description": "Implements performance.now (based on process.hrtime).", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:performance-now:performance-now:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/performance-now@2.1.0", + "externalReferences": [ + { + "url": "git://github.com/braveg1rl/performance-now.git", + "type": "distribution" + }, + { + "url": "https://github.com/braveg1rl/performance-now", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pify@3.0.0?package-id=fbdbb56dc0a20970", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "pify", + "version": "3.0.0", + "description": "Promisify a callback-style function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:pify:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pify@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/pify.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/pify#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pliant-compiler@0.0.1?package-id=4b3f7cb0cf33f6d", + "name": "pliant-compiler", + "version": "0.0.1", + "licenses": [ + { + "license": { + "name": "UNLICENSED" + } + } + ], + "cpe": "cpe:2.3:a:pliant-compiler:pliant-compiler:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/pliant-compiler@0.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/prepend-http@1.0.4?package-id=5a1dd47457f85ce5", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "prepend-http", + "version": "1.0.4", + "description": "Prepend `http://` to humanized URLs like todomvc.com and localhost", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:prepend-http:prepend-http:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/prepend-http@1.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/prepend-http.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/prepend-http#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/process-nextick-args@2.0.0?package-id=8bbb7c6bdbbf3e62", + "name": "process-nextick-args", + "version": "2.0.0", + "description": "process.nextTick but always with args", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:process-nextick-args:process-nextick-args:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/process-nextick-args@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/calvinmetcalf/process-nextick-args.git", + "type": "distribution" + }, + { + "url": "https://github.com/calvinmetcalf/process-nextick-args", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/process-nextick-args@2.0.1?package-id=19dd49024e39231", + "name": "process-nextick-args", + "version": "2.0.1", + "description": "process.nextTick but always with args", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:process-nextick-args:process-nextick-args:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/process-nextick-args@2.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/calvinmetcalf/process-nextick-args.git", + "type": "distribution" + }, + { + "url": "https://github.com/calvinmetcalf/process-nextick-args", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-inflight@1.0.1?package-id=8ae6caef1e6290fe", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "promise-inflight", + "version": "1.0.1", + "description": "One promise for multiple requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promise-inflight:promise-inflight:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-inflight@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/promise-inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/promise-inflight#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-retry@1.1.1?package-id=4d71993cfae70c18", + "author": "IndigoUnited (http://indigounited.com)", + "name": "promise-retry", + "version": "1.1.1", + "description": "Retries a function that returns a promise, leveraging the power of the retry module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:promise-retry:promise-retry:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-retry@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/IndigoUnited/node-promise-retry.git", + "type": "distribution" + }, + { + "url": "https://github.com/IndigoUnited/node-promise-retry#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promzard@0.3.0?package-id=c6cc33c4ce6e7c43", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "promzard", + "version": "0.3.0", + "description": "prompting wizardly", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promzard:promzard:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/promzard@0.3.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/promzard.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/promzard#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/proto-list@1.2.4?package-id=c43196d550bdd95d", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "proto-list", + "version": "1.2.4", + "description": "A utility for managing a prototype chain", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:proto-list:proto-list:1.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/proto-list@1.2.4", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/proto-list.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/proto-list#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/protoduck@5.0.1?package-id=b68f59ea3292e512", + "author": "Kat Marchán ", + "name": "protoduck", + "version": "5.0.1", + "description": "Fancy duck typing for the most serious of ducks.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:protoduck:protoduck:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/protoduck@5.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/zkat/protoduck.git", + "type": "distribution" + }, + { + "url": "https://github.com/zkat/protoduck#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/proxy-addr@2.0.6?package-id=123f0887df70f1b6", + "author": "Douglas Christopher Wilson ", + "name": "proxy-addr", + "version": "2.0.6", + "description": "Determine address of proxied request", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:proxy-addr:proxy-addr:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/proxy-addr@2.0.6", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/proxy-addr.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/proxy-addr#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/prr@1.0.1?package-id=63f1d318228c3928", + "author": "Rod Vagg (https://github.com/rvagg)", + "name": "prr", + "version": "1.0.1", + "description": "A better Object.defineProperty()", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:rvagg:prr:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/prr@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/rvagg/prr.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/prr", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pseudomap@1.0.2?package-id=ad27150a47cebf68", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "pseudomap", + "version": "1.0.2", + "description": "A thing that is a lot like ES6 `Map`, but without iterators, for use in environments where `for..of` syntax and `Map` are not available.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:pseudomap:pseudomap:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/pseudomap@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/pseudomap.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/pseudomap#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/psl@1.1.29?package-id=4ac2f379b7d8203e", + "author": "Lupo Montero", + "name": "psl", + "version": "1.1.29", + "description": "Domain name parser based on the Public Suffix List", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:wrangr:psl:1.1.29:*:*:*:*:*:*:*", + "purl": "pkg:npm/psl@1.1.29", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/wrangr/psl.git", + "type": "distribution" + }, + { + "url": "https://github.com/wrangr/psl#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pump@2.0.1?package-id=a8def469cb4dfeae", + "author": "Mathias Buus Madsen ", + "name": "pump", + "version": "2.0.1", + "description": "pipe streams together and close all of them if one of them closes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mafintosh:pump:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/pump@2.0.1", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/pump.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/pump#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pump@3.0.0?package-id=3312119136f0c5b9", + "author": "Mathias Buus Madsen ", + "name": "pump", + "version": "3.0.0", + "description": "pipe streams together and close all of them if one of them closes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mafintosh:pump:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pump@3.0.0", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/pump.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/pump#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pumpify@1.5.1?package-id=dfd38f508d390c3c", + "author": "Mathias Buus", + "name": "pumpify", + "version": "1.5.1", + "description": "Combine an array of streams into a single duplex stream using pump and duplexify", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mafintosh:pumpify:1.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/pumpify@1.5.1", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/pumpify.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/pumpify", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/punycode@1.4.1?package-id=f447605e37be624d", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "punycode", + "version": "1.4.1", + "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:punycode:punycode:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/punycode@1.4.1", + "externalReferences": [ + { + "url": "git+https://github.com/bestiejs/punycode.js.git", + "type": "distribution" + }, + { + "url": "https://mths.be/punycode", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/punycode@2.1.1?package-id=a14c3d9d17c7ad6a", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "punycode", + "version": "2.1.1", + "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:punycode:punycode:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/punycode@2.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/bestiejs/punycode.js.git", + "type": "distribution" + }, + { + "url": "https://mths.be/punycode", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/punycode@2.1.1?package-id=c670851ee62b8607", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "punycode", + "version": "2.1.1", + "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:punycode:punycode:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/punycode@2.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/bestiejs/punycode.js.git", + "type": "distribution" + }, + { + "url": "https://mths.be/punycode", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/qrcode-terminal@0.12.0?package-id=12a4e61b4c7723ca", + "name": "qrcode-terminal", + "version": "0.12.0", + "description": "QRCodes, in the terminal", + "licenses": [ + { + "license": { + "name": "Apache 2.0" + } + } + ], + "cpe": "cpe:2.3:a:qrcode-terminal:qrcode-terminal:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/qrcode-terminal@0.12.0", + "externalReferences": [ + { + "url": "git+https://github.com/gtanner/qrcode-terminal.git", + "type": "distribution" + }, + { + "url": "https://github.com/gtanner/qrcode-terminal", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/qs@6.5.2?package-id=3ce787a6bf6df684", + "name": "qs", + "version": "6.5.2", + "description": "A querystring parser that supports nesting and arrays, with a depth limit", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:ljharb:qs:6.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/qs@6.5.2", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/qs.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/qs", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/qs@6.7.0?package-id=1e95eebb398f373b", + "name": "qs", + "version": "6.7.0", + "description": "A querystring parser that supports nesting and arrays, with a depth limit", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:ljharb:qs:6.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/qs@6.7.0", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/qs.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/qs", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/query-string@6.8.2?package-id=17a1cdcb1043d65", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "query-string", + "version": "6.8.2", + "description": "Parse and stringify URL query strings", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:query-string:query-string:6.8.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/query-string@6.8.2", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/query-string.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/query-string#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/qw@1.0.1?package-id=ddfd5a6a50550a8a", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "qw", + "version": "1.0.1", + "description": "Quoted word literals!", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:iarna:qw:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/qw@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/node-qw.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/node-qw#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/range-parser@1.2.1?package-id=5f29bd6f8c12ae73", + "author": "TJ Holowaychuk (http://tjholowaychuk.com)", + "name": "range-parser", + "version": "1.2.1", + "description": "Range header field string parser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:range-parser:range-parser:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/range-parser@1.2.1", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/range-parser.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/range-parser#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/raw-body@2.4.0?package-id=94f992c82048f5e8", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "raw-body", + "version": "2.4.0", + "description": "Get and validate the raw body of a readable stream.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stream-utils:raw-body:2.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/raw-body@2.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/stream-utils/raw-body.git", + "type": "distribution" + }, + { + "url": "https://github.com/stream-utils/raw-body#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rc@1.2.8?package-id=4eb7e0d572bcca8b", + "author": "Dominic Tarr (dominictarr.com)", + "name": "rc", + "version": "1.2.8", + "description": "hardwired configuration loader", + "licenses": [ + { + "license": { + "name": "(BSD-2-Clause OR MIT OR Apache-2.0)" + } + } + ], + "cpe": "cpe:2.3:a:dominictarr:rc:1.2.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/rc@1.2.8", + "externalReferences": [ + { + "url": "git+https://github.com/dominictarr/rc.git", + "type": "distribution" + }, + { + "url": "https://github.com/dominictarr/rc#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read@1.0.7?package-id=c9bc8b81b738d1cf", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "read", + "version": "1.0.7", + "description": "read(1) for node programs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:read:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/read@1.0.7", + "externalReferences": [ + { + "url": "git://github.com/isaacs/read.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/read#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-cmd-shim@1.0.5?package-id=f4070b859bc3daec", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "read-cmd-shim", + "version": "1.0.5", + "description": "Figure out what a cmd-shim is pointing at. This acts as the equivalent of fs.readlink.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-cmd-shim:read-cmd-shim:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-cmd-shim@1.0.5", + "externalReferences": [ + { + "url": "git+https://github.com/npm/read-cmd-shim.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/read-cmd-shim#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-installed@4.0.3?package-id=9b81d092221c4f30", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "read-installed", + "version": "4.0.3", + "description": "Read all the installed packages in a folder, and return a tree structure with all the data.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-installed:read-installed:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-installed@4.0.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/read-installed.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/read-installed#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-package-json@2.1.1?package-id=4f64a93322ae44fc", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "read-package-json", + "version": "2.1.1", + "description": "The thing npm uses to read package.json files with semantics and defaults and validation", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-package-json:read-package-json:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-package-json@2.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/read-package-json.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/read-package-json#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-package-tree@5.3.1?package-id=ae8f6f2464715ed7", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "read-package-tree", + "version": "5.3.1", + "description": "Read the contents of node_modules.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-package-tree:read-package-tree:5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-package-tree@5.3.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/read-package-tree.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/read-package-tree", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@1.1.14?package-id=8757df08ac8f65d0", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "readable-stream", + "version": "1.1.14", + "description": "Streams3, a user-land copy of the stream library from Node.js v0.11.x", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:1.1.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@1.1.14", + "externalReferences": [ + { + "url": "git://github.com/isaacs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@1.1.14?package-id=48b97f0045dc6076", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "readable-stream", + "version": "1.1.14", + "description": "Streams3, a user-land copy of the stream library from Node.js v0.11.x", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:1.1.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@1.1.14", + "externalReferences": [ + { + "url": "git://github.com/isaacs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.6?package-id=7353d87f1c25d400", + "name": "readable-stream", + "version": "2.3.6", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.6", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.6?package-id=fe3065896055c182", + "name": "readable-stream", + "version": "2.3.6", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.6", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.6?package-id=ee88dc9eaec41878", + "name": "readable-stream", + "version": "2.3.6", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.6", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.6?package-id=de77726bf8112b61", + "name": "readable-stream", + "version": "2.3.6", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.6", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.6?package-id=a2ed95a02f789ed0", + "name": "readable-stream", + "version": "2.3.6", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.6", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.6?package-id=4bf24eaec254b2f5", + "name": "readable-stream", + "version": "2.3.6", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.6", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.6?package-id=fbc5f578bd8a0000", + "name": "readable-stream", + "version": "2.3.6", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.6", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.6?package-id=7cd5df9449d0f2a5", + "name": "readable-stream", + "version": "2.3.6", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.6", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.6?package-id=e6f05a441c42f027", + "name": "readable-stream", + "version": "2.3.6", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.6", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.7?package-id=b99a917b60ecef17", + "name": "readable-stream", + "version": "2.3.7", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.7", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@3.6.0?package-id=534bbd008356bd1a", + "name": "readable-stream", + "version": "3.6.0", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:3.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@3.6.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@3.6.0?package-id=e68425c0a847320d", + "name": "readable-stream", + "version": "3.6.0", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:3.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@3.6.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readdir-scoped-modules@1.1.0?package-id=faa5c279a92af9df", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "readdir-scoped-modules", + "version": "1.1.0", + "description": "Like `fs.readdir` but handling `@org/module` dirs as if they were a single entry.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:readdir-scoped-modules:readdir-scoped-modules:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/readdir-scoped-modules@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/readdir-scoped-modules.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/readdir-scoped-modules", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/reflect-metadata@0.1.13?package-id=c10a8a0418712a9f", + "author": "Ron Buckton (http://github.com/rbuckton)", + "name": "reflect-metadata", + "version": "0.1.13", + "description": "Polyfill for Metadata Reflection API", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:reflect-metadata:reflect-metadata:0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/reflect-metadata@0.1.13", + "externalReferences": [ + { + "url": "git+https://github.com/rbuckton/reflect-metadata.git", + "type": "distribution" + }, + { + "url": "http://rbuckton.github.io/reflect-metadata", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/registry-auth-token@3.4.0?package-id=7b8cdd936c12baa6", + "author": "Espen Hovlandsdal ", + "name": "registry-auth-token", + "version": "3.4.0", + "description": "Get the auth token set for an npm registry (if any)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:registry-auth-token:registry-auth-token:3.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/registry-auth-token@3.4.0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/rexxars/registry-auth-token.git", + "type": "distribution" + }, + { + "url": "https://github.com/rexxars/registry-auth-token#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/registry-url@3.1.0?package-id=fcf8f05cbd852c57", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "registry-url", + "version": "3.1.0", + "description": "Get the set npm registry URL", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:registry-url:registry-url:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/registry-url@3.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/registry-url.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/registry-url#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/request@2.88.0?package-id=d960fbbc3970c57d", + "author": "Mikeal Rogers ", + "name": "request", + "version": "2.88.0", + "description": "Simplified HTTP request client.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:request:request:2.88.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/request@2.88.0", + "externalReferences": [ + { + "url": "git+https://github.com/request/request.git", + "type": "distribution" + }, + { + "url": "https://github.com/request/request#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/require-directory@2.1.1?package-id=bec44f06abee329", + "author": "Troy Goode (http://github.com/troygoode/)", + "name": "require-directory", + "version": "2.1.1", + "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:require-directory:require-directory:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/require-directory@2.1.1", + "externalReferences": [ + { + "url": "git://github.com/troygoode/node-require-directory.git", + "type": "distribution" + }, + { + "url": "https://github.com/troygoode/node-require-directory/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/require-from-string@2.0.2?package-id=11e90a26bc88f3bb", + "author": "Vsevolod Strukchinsky (github.com/floatdrop)", + "name": "require-from-string", + "version": "2.0.2", + "description": "Require module from string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:require-from-string:require-from-string:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/require-from-string@2.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/floatdrop/require-from-string.git", + "type": "distribution" + }, + { + "url": "https://github.com/floatdrop/require-from-string#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/require-main-filename@2.0.0?package-id=90371ac30591c486", + "author": "Ben Coe ", + "name": "require-main-filename", + "version": "2.0.0", + "description": "shim for require.main.filename() that works in as many environments as possible", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:require-main-filename:require-main-filename:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/require-main-filename@2.0.0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/yargs/require-main-filename.git", + "type": "distribution" + }, + { + "url": "https://github.com/yargs/require-main-filename#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/resolve@1.10.0?package-id=dd5261f69051c0d3", + "author": "James Halliday (http://substack.net)", + "name": "resolve", + "version": "1.10.0", + "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:browserify:resolve:1.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/resolve@1.10.0", + "externalReferences": [ + { + "url": "git://github.com/browserify/resolve.git", + "type": "distribution" + }, + { + "url": "https://github.com/browserify/resolve#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/resolve-from@4.0.0?package-id=8184b04db20ef759", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "resolve-from", + "version": "4.0.0", + "description": "Resolve the path of a module like `require.resolve()` but from a given path", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:resolve-from:resolve-from:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/resolve-from@4.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/resolve-from.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/resolve-from#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/retry@0.10.1?package-id=baef3799d7cf16e1", + "author": "Tim Koschützki (http://debuggable.com/)", + "name": "retry", + "version": "0.10.1", + "description": "Abstraction for exponential and custom retry strategies for failed operations.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tim-kos:retry:0.10.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/retry@0.10.1", + "externalReferences": [ + { + "url": "git://github.com/tim-kos/node-retry.git", + "type": "distribution" + }, + { + "url": "https://github.com/tim-kos/node-retry", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/retry@0.12.0?package-id=c3f319915fd297ec", + "author": "Tim Koschützki (http://debuggable.com/)", + "name": "retry", + "version": "0.12.0", + "description": "Abstraction for exponential and custom retry strategies for failed operations.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tim-kos:retry:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/retry@0.12.0", + "externalReferences": [ + { + "url": "git://github.com/tim-kos/node-retry.git", + "type": "distribution" + }, + { + "url": "https://github.com/tim-kos/node-retry", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rfdc@1.2.0?package-id=bda32043b343edc5", + "author": "David Mark Clements ", + "name": "rfdc", + "version": "1.2.0", + "description": "Really Fast Deep Clone", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:davidmarkclements:rfdc:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/rfdc@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/davidmarkclements/rfdc.git", + "type": "distribution" + }, + { + "url": "https://github.com/davidmarkclements/rfdc#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rimraf@2.7.1?package-id=be161be7f66aefcd", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "rimraf", + "version": "2.7.1", + "description": "A deep deletion module for node (like `rm -rf`)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:rimraf:2.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/rimraf@2.7.1", + "externalReferences": [ + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/rimraf#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/roarr@7.14.1?package-id=5025f686ab418801", + "author": "Gajus Kuizinas (http://gajus.com)", + "name": "roarr", + "version": "7.14.1", + "description": "JSON logger for Node.js and browser.", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:gajus:roarr:7.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/roarr@7.14.1", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/gajus/roarr.git", + "type": "distribution" + }, + { + "url": "https://github.com/gajus/roarr#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/run-queue@1.0.3?package-id=442b305f6fbe55fa", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "run-queue", + "version": "1.0.3", + "description": "A promise based, dynamic priority queue runner, with concurrency limiting.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:run-queue:run-queue:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/run-queue@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/run-queue.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/run-queue", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rxjs@6.6.3?package-id=ff52683ef05bf27c", + "author": "Ben Lesh ", + "name": "rxjs", + "version": "6.6.3", + "description": "Reactive Extensions for modern JavaScript", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:ReactiveX:rxjs:6.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/rxjs@6.6.3", + "externalReferences": [ + { + "url": "git+https://github.com/reactivex/rxjs.git", + "type": "distribution" + }, + { + "url": "https://github.com/ReactiveX/RxJS", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=ad8e4b783ec0cc69", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=e80d2a70105aad97", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.2.0?package-id=516952fe04a9e096", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.2.0", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.2.0", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=dea359a9da63b3e8", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "safe-buffer", + "version": "5.2.1", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=5521c324233fe89", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "safe-buffer", + "version": "5.2.1", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=94bc01ba89de1a5", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "safe-buffer", + "version": "5.2.1", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-stable-stringify@2.4.1?package-id=6c481e7270221230", + "author": "Ruben Bridgewater", + "name": "safe-stable-stringify", + "version": "2.4.1", + "description": "Deterministic and safely JSON.stringify to quickly serialize JavaScript objects", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-stable-stringify:safe-stable-stringify:2.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-stable-stringify@2.4.1", + "externalReferences": [ + { + "url": "git+https://github.com/BridgeAR/safe-stable-stringify.git", + "type": "distribution" + }, + { + "url": "https://github.com/BridgeAR/safe-stable-stringify#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=7c597e987a69726c", + "author": "Nikita Skovoroda (https://github.com/ChALkeR)", + "name": "safer-buffer", + "version": "2.1.2", + "description": "Modern Buffer API polyfill without footguns", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safer-buffer@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/ChALkeR/safer-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/ChALkeR/safer-buffer#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=1bec84d27ea929ed", + "author": "Nikita Skovoroda (https://github.com/ChALkeR)", + "name": "safer-buffer", + "version": "2.1.2", + "description": "Modern Buffer API polyfill without footguns", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safer-buffer@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/ChALkeR/safer-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/ChALkeR/safer-buffer#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.3.5-r1?arch=x86_64&upstream=pax-utils&distro=alpine-3.17.1&package-id=e903138d19e85b80", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.3.5-r1", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.3.5-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.3.5-r1?arch=x86_64&upstream=pax-utils&distro=alpine-3.17.1", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver@5.7.1?package-id=3d4365fad3b89b36", + "name": "semver", + "version": "5.7.1", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:semver:semver:5.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver@5.7.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver-compare@1.0.0?package-id=e18fbcae955a3a19", + "author": "James Halliday (http://substack.net)", + "name": "semver-compare", + "version": "1.0.0", + "description": "compare two semver version strings, returning -1, 0, or 1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:semver-compare:semver-compare:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver-compare@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/substack/semver-compare.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/semver-compare", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver-diff@2.1.0?package-id=8addb1f46fbb0950", + "author": "Sindre Sorhus (http://sindresorhus.com)", + "name": "semver-diff", + "version": "2.1.0", + "description": "Get the diff type of two semver versions: 0.0.1 0.0.2 → patch", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:semver-diff:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver-diff@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/semver-diff.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/semver-diff#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/send@0.17.1?package-id=39fd424f16226051", + "author": "TJ Holowaychuk ", + "name": "send", + "version": "0.17.1", + "description": "Better streaming static file server with Range and conditional-GET support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pillarjs:send:0.17.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/send@0.17.1", + "externalReferences": [ + { + "url": "git+https://github.com/pillarjs/send.git", + "type": "distribution" + }, + { + "url": "https://github.com/pillarjs/send#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/serialize-error@8.1.0?package-id=e5fdc9cccc69c57b", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "serialize-error", + "version": "8.1.0", + "description": "Serialize/deserialize an error into a plain object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:serialize-error:serialize-error:8.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/serialize-error@8.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/serialize-error.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/serialize-error#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/serve-static@1.14.1?package-id=8a14231746896ad1", + "author": "Douglas Christopher Wilson ", + "name": "serve-static", + "version": "1.14.1", + "description": "Serve static files", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:serve-static:serve-static:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/serve-static@1.14.1", + "externalReferences": [ + { + "url": "git+https://github.com/expressjs/serve-static.git", + "type": "distribution" + }, + { + "url": "https://github.com/expressjs/serve-static#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/set-blocking@2.0.0?package-id=bac85cbb844de9c9", + "author": "Ben Coe ", + "name": "set-blocking", + "version": "2.0.0", + "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:set-blocking:set-blocking:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/set-blocking@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/yargs/set-blocking.git", + "type": "distribution" + }, + { + "url": "https://github.com/yargs/set-blocking#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/setprototypeof@1.1.1?package-id=48c9427615459103", + "author": "Wes Todd", + "name": "setprototypeof", + "version": "1.1.1", + "description": "A small polyfill for Object.setprototypeof", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:setprototypeof:setprototypeof:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/setprototypeof@1.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/wesleytodd/setprototypeof.git", + "type": "distribution" + }, + { + "url": "https://github.com/wesleytodd/setprototypeof", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sha@3.0.0?package-id=64341d7e8de754f6", + "name": "sha", + "version": "3.0.0", + "description": "Check and get file hashes", + "licenses": [ + { + "license": { + "name": "(BSD-2-Clause OR MIT)" + } + } + ], + "cpe": "cpe:2.3:a:ForbesLindesay:sha:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/sha@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/ForbesLindesay/sha.git", + "type": "distribution" + }, + { + "url": "https://github.com/ForbesLindesay/sha#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/shebang-command@1.2.0?package-id=31728ea7868ca29", + "author": "Kevin Martensson (github.com/kevva)", + "name": "shebang-command", + "version": "1.2.0", + "description": "Get the command from a shebang", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shebang-command:shebang-command:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/shebang-command@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/kevva/shebang-command.git", + "type": "distribution" + }, + { + "url": "https://github.com/kevva/shebang-command#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/shebang-regex@1.0.0?package-id=3ee6cea199436243", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "shebang-regex", + "version": "1.0.0", + "description": "Regular expression for matching a shebang", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shebang-regex:shebang-regex:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/shebang-regex@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/shebang-regex.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/shebang-regex#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/signal-exit@3.0.2?package-id=5f81e92f345b2dca", + "author": "Ben Coe ", + "name": "signal-exit", + "version": "3.0.2", + "description": "when you want to fire an event no matter how a process exits.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:signal-exit:signal-exit:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/signal-exit@3.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/tapjs/signal-exit.git", + "type": "distribution" + }, + { + "url": "https://github.com/tapjs/signal-exit", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/slide@1.1.6?package-id=67c80effc5f2e06c", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "slide", + "version": "1.1.6", + "description": "A flow control lib small enough to fit on in a slide presentation. Derived live at Oak.JS", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:slide:1.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/slide@1.1.6", + "externalReferences": [ + { + "url": "git://github.com/isaacs/slide-flow-control.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/slide-flow-control#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/smart-buffer@4.1.0?package-id=8a098cd7b95880b2", + "author": "Josh Glazebrook", + "name": "smart-buffer", + "version": "4.1.0", + "description": "smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:JoshGlazebrook:smart-buffer:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/smart-buffer@4.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/JoshGlazebrook/smart-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/JoshGlazebrook/smart-buffer/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/socks@2.3.3?package-id=df90bddac1fc2e9b", + "author": "Josh Glazebrook", + "name": "socks", + "version": "2.3.3", + "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:JoshGlazebrook:socks:2.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/socks@2.3.3", + "externalReferences": [ + { + "url": "git+https://github.com/JoshGlazebrook/socks.git", + "type": "distribution" + }, + { + "url": "https://github.com/JoshGlazebrook/socks/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/socks-proxy-agent@4.0.2?package-id=467552ce30535bfb", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "socks-proxy-agent", + "version": "4.0.2", + "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:socks-proxy-agent:socks-proxy-agent:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/socks-proxy-agent@4.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-socks-proxy-agent.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/node-socks-proxy-agent#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sorted-object@2.0.1?package-id=b1d8024e52e50f32", + "author": "Domenic Denicola (https://domenic.me/)", + "name": "sorted-object", + "version": "2.0.1", + "description": "Returns a copy of an object with its keys sorted", + "licenses": [ + { + "license": { + "name": "(WTFPL OR MIT)" + } + } + ], + "cpe": "cpe:2.3:a:sorted-object:sorted-object:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/sorted-object@2.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/domenic/sorted-object.git", + "type": "distribution" + }, + { + "url": "https://github.com/domenic/sorted-object#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sorted-union-stream@2.1.3?package-id=6fde9400f65d4713", + "author": "Mathias Buus Madsen ", + "name": "sorted-union-stream", + "version": "2.1.3", + "description": "Get the union of two sorted streams", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sorted-union-stream:sorted-union-stream:2.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/sorted-union-stream@2.1.3", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/sorted-union-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/sorted-union-stream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-correct@3.0.0?package-id=73531364f1007a1", + "author": "Kyle E. Mitchell (https://kemitchell.com)", + "name": "spdx-correct", + "version": "3.0.0", + "description": "correct invalid SPDX expressions", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-correct:spdx-correct:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-correct@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/jslicense/spdx-correct.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/jslicense/spdx-correct.js#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-exceptions@2.1.0?package-id=1e5a7f3e71a3aea6", + "author": "The Linux Foundation", + "name": "spdx-exceptions", + "version": "2.1.0", + "description": "list of SPDX standard license exceptions", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-exceptions:spdx-exceptions:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-exceptions@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/kemitchell/spdx-exceptions.json.git", + "type": "distribution" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-expression-parse@3.0.0?package-id=71a0de12075b58c5", + "author": "Kyle E. Mitchell (http://kemitchell.com)", + "name": "spdx-expression-parse", + "version": "3.0.0", + "description": "parse SPDX license expressions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:spdx-expression-parse:spdx-expression-parse:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-expression-parse@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/jslicense/spdx-expression-parse.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-license-ids@3.0.5?package-id=1138941acd86a408", + "author": "Shinnosuke Watanabe (https://github.com/shinnn)", + "name": "spdx-license-ids", + "version": "3.0.5", + "description": "A list of SPDX license identifiers", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-license-ids:spdx-license-ids:3.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-license-ids@3.0.5", + "externalReferences": [ + { + "url": "git+https://github.com/shinnn/spdx-license-ids.git", + "type": "distribution" + }, + { + "url": "https://github.com/shinnn/spdx-license-ids#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/split-on-first@1.1.0?package-id=a53cafaea7f6944b", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "split-on-first", + "version": "1.1.0", + "description": "Split a string on the first occurance of a given separator", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:split-on-first:split-on-first:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/split-on-first@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/split-on-first.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/split-on-first#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sprintf-js@1.0.3?package-id=c0e64437ada9115b", + "author": "Alexandru Marasteanu (http://alexei.ro/)", + "name": "sprintf-js", + "version": "1.0.3", + "description": "JavaScript sprintf implementation", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:sprintf-js:sprintf-js:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/sprintf-js@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/alexei/sprintf.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/alexei/sprintf.js#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sshpk@1.14.2?package-id=41b4eebd6b06963f", + "author": "Joyent, Inc", + "name": "sshpk", + "version": "1.14.2", + "description": "A library for finding and using SSH public keys", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:arekinath:sshpk:1.14.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/sshpk@1.14.2", + "externalReferences": [ + { + "url": "git+https://github.com/arekinath/node-sshpk.git", + "type": "distribution" + }, + { + "url": "https://github.com/arekinath/node-sshpk#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.1&package-id=b15247aafcd4a647", + "publisher": "Sören Tempel ", + "name": "ssl_client", + "version": "1.35.0-r29", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.35.0-r29:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.1", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ssri@6.0.2?package-id=739aca50718ed16c", + "author": "Kat Marchán ", + "name": "ssri", + "version": "6.0.2", + "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ssri:ssri:6.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ssri@6.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/zkat/ssri.git", + "type": "distribution" + }, + { + "url": "https://github.com/zkat/ssri#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/statuses@1.5.0?package-id=7880c86343c91f02", + "name": "statuses", + "version": "1.5.0", + "description": "HTTP status utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:statuses:statuses:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/statuses@1.5.0", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/statuses.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/statuses#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/stream-each@1.2.2?package-id=ff21dffb4b08347c", + "author": "Mathias Buus (@mafintosh)", + "name": "stream-each", + "version": "1.2.2", + "description": "Iterate all the data in a stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stream-each:stream-each:1.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/stream-each@1.2.2", + "externalReferences": [ + { + "url": "git+https://github.com/mafintosh/stream-each.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/stream-each", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/stream-iterate@1.2.0?package-id=45645dfa25e969e7", + "author": "Mathias Buus (@mafintosh)", + "name": "stream-iterate", + "version": "1.2.0", + "description": "Iterate through the values of a stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stream-iterate:stream-iterate:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/stream-iterate@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/mafintosh/stream-iterate.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/stream-iterate", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/stream-shift@1.0.0?package-id=e058037128eb4cc1", + "author": "Mathias Buus (@mafintosh)", + "name": "stream-shift", + "version": "1.0.0", + "description": "Returns the next buffer/object in a stream's readable queue", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stream-shift:stream-shift:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/stream-shift@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/mafintosh/stream-shift.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/stream-shift", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/streamsearch@0.1.2?package-id=900089132d0d8437", + "author": "Brian White ", + "name": "streamsearch", + "version": "0.1.2", + "description": "Streaming Boyer-Moore-Horspool searching for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:streamsearch:streamsearch:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/streamsearch@0.1.2", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/mscdex/streamsearch.git", + "type": "distribution" + }, + { + "url": "https://github.com/mscdex/streamsearch#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strict-uri-encode@2.0.0?package-id=8d1313eb6c7e50c6", + "author": "Kevin Mårtensson (github.com/kevva)", + "name": "strict-uri-encode", + "version": "2.0.0", + "description": "A stricter URI encode adhering to RFC 3986", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strict-uri-encode:strict-uri-encode:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strict-uri-encode@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/kevva/strict-uri-encode.git", + "type": "distribution" + }, + { + "url": "https://github.com/kevva/strict-uri-encode#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@1.0.2?package-id=f3fde1d1bb9d11bb", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "1.0.2", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:string-width:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@1.0.2?package-id=aad7726ab13feca", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "1.0.2", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:string-width:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@2.1.1?package-id=aa7b698cf21b3eed", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "2.1.1", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:string-width:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@2.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@3.1.0?package-id=87790d6cb608b04c", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "3.1.0", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:string-width:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@3.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@3.1.0?package-id=12bb72b3585d56cb", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "3.1.0", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:string-width:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@3.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@3.1.0?package-id=55af5077fbd273b", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "3.1.0", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:string-width:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@3.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@0.10.31?package-id=842458f1d210431a", + "name": "string_decoder", + "version": "0.10.31", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:0.10.31:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@0.10.31", + "externalReferences": [ + { + "url": "git://github.com/rvagg/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@0.10.31?package-id=b225c432d9e6b500", + "name": "string_decoder", + "version": "0.10.31", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:0.10.31:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@0.10.31", + "externalReferences": [ + { + "url": "git://github.com/rvagg/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=a6eeeaeb8b6353ea", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=361d8a5e7e28d65b", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=6de5785db73e974c", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=64921df3b8583429", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=f7db62bc91e69852", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=44a4766f5469b746", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=2892cc6855d3777f", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=b44575a021be68ba", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=b19b3b00778e1d8", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=5c7fd10ffa2e6849", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.3.0?package-id=804f0a28a30f2774", + "name": "string_decoder", + "version": "1.3.0", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.3.0?package-id=ca8af4aa6b41ca75", + "name": "string_decoder", + "version": "1.3.0", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/stringify-package@1.0.1?package-id=c67453153e496783", + "author": "Kat Marchán ", + "name": "stringify-package", + "version": "1.0.1", + "description": "stringifies npm-written json files", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:stringify-package:stringify-package:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/stringify-package@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/stringify-package.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/stringify-package", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@3.0.1?package-id=51b22d897b0450b8", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "3.0.1", + "description": "Strip ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@3.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@4.0.0?package-id=13ba95b5b65e8a37", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "4.0.0", + "description": "Strip ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@4.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@5.2.0?package-id=465f19aa1b6b9497", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "5.2.0", + "description": "Strip ANSI escape codes from a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@5.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@5.2.0?package-id=f78d385de6e5730d", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "5.2.0", + "description": "Strip ANSI escape codes from a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@5.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@5.2.0?package-id=6eaeb57df2549822", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "5.2.0", + "description": "Strip ANSI escape codes from a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@5.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-eof@1.0.0?package-id=16191ba994ef2bb8", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-eof", + "version": "1.0.0", + "description": "Strip the End-Of-File (EOF) character from a string/buffer", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:strip-eof:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-eof@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/strip-eof.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/strip-eof#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-json-comments@2.0.1?package-id=ccf04b5e0cce811a", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-json-comments", + "version": "2.0.1", + "description": "Strip comments from JSON. Lets you use comments in your JSON files!", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-json-comments:strip-json-comments:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-json-comments@2.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/strip-json-comments.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/strip-json-comments#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-color@5.4.0?package-id=4145d752dc87470d", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "supports-color", + "version": "5.4.0", + "description": "Detect whether a terminal supports color", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-color:supports-color:5.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-color@5.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/supports-color.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/supports-color#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-color@7.2.0?package-id=33ae3b7b72211ee6", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "supports-color", + "version": "7.2.0", + "description": "Detect whether a terminal supports color", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-color:supports-color:7.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-color@7.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/supports-color.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/supports-color#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/swagger-ui-dist@3.43.0?package-id=9e46999407d696d1", + "name": "swagger-ui-dist", + "version": "3.43.0", + "description": "[![NPM version](https://badge.fury.io/js/swagger-ui-dist.svg)](http://badge.fury.io/js/swagger-ui-dist)", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:swagger-ui-dist:swagger-ui-dist:3.43.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/swagger-ui-dist@3.43.0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/swagger-api/swagger-ui.git", + "type": "distribution" + }, + { + "url": "https://github.com/swagger-api/swagger-ui#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/swagger-ui-express@4.1.6?package-id=7b829ce58415e1f2", + "author": "Stephen Scott ", + "name": "swagger-ui-express", + "version": "4.1.6", + "description": "Swagger UI Express", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:swagger-ui-express:swagger-ui-express:4.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/swagger-ui-express@4.1.6", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/scottie1984/swagger-ui-express.git", + "type": "distribution" + }, + { + "url": "https://github.com/scottie1984/swagger-ui-express", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tar@4.4.19?package-id=9c9c5053c0d2bf4e", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "tar", + "version": "4.4.19", + "description": "tar for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm:tar:4.4.19:*:*:*:*:*:*:*", + "purl": "pkg:npm/tar@4.4.19", + "externalReferences": [ + { + "url": "git+https://github.com/npm/node-tar.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/node-tar#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/term-size@1.2.0?package-id=b1193806642eaebf", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "term-size", + "version": "1.2.0", + "description": "Reliably get the terminal window size (columns & rows)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:term-size:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/term-size@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/term-size.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/term-size#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/text-table@0.2.0?package-id=a124be9ad599668f", + "author": "James Halliday (http://substack.net)", + "name": "text-table", + "version": "0.2.0", + "description": "borderless text tables with alignment", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:text-table:text-table:0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/text-table@0.2.0", + "externalReferences": [ + { + "url": "git://github.com/substack/text-table.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/text-table", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/through@2.3.8?package-id=4d5d009c68a6687c", + "author": "Dominic Tarr (dominictarr.com)", + "name": "through", + "version": "2.3.8", + "description": "simplified stream construction", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dominictarr:through:2.3.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/through@2.3.8", + "externalReferences": [ + { + "url": "git+https://github.com/dominictarr/through.git", + "type": "distribution" + }, + { + "url": "https://github.com/dominictarr/through", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/through2@2.0.3?package-id=8dbf9f3bfb369784", + "author": "Rod Vagg (https://github.com/rvagg)", + "name": "through2", + "version": "2.0.3", + "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:through2:through2:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/through2@2.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/rvagg/through2.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/through2#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/timed-out@4.0.1?package-id=8c5219320754c34a", + "author": "Vsevolod Strukchinsky ", + "name": "timed-out", + "version": "4.0.1", + "description": "Emit `ETIMEDOUT` or `ESOCKETTIMEDOUT` when ClientRequest is hanged", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:floatdrop:timed-out:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/timed-out@4.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/floatdrop/timed-out.git", + "type": "distribution" + }, + { + "url": "https://github.com/floatdrop/timed-out#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tiny-relative-date@1.3.0?package-id=192b923f399b9869", + "author": "Joseph Wynn (https://wildlyinaccurate.com/)", + "name": "tiny-relative-date", + "version": "1.3.0", + "description": "Tiny function that provides relative, human-readable dates.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tiny-relative-date:tiny-relative-date:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tiny-relative-date@1.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/wildlyinaccurate/relative-date.git", + "type": "distribution" + }, + { + "url": "https://github.com/wildlyinaccurate/relative-date#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/toidentifier@1.0.0?package-id=b139c4c4805829ae", + "author": "Douglas Christopher Wilson ", + "name": "toidentifier", + "version": "1.0.0", + "description": "Convert a string of words to a JavaScript identifier", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:toidentifier:toidentifier:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/toidentifier@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/component/toidentifier.git", + "type": "distribution" + }, + { + "url": "https://github.com/component/toidentifier#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tough-cookie@2.4.3?package-id=13b418b16f100361", + "author": "Jeremy Stashewsky ", + "name": "tough-cookie", + "version": "2.4.3", + "description": "RFC6265 Cookies and Cookie Jar for node.js", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:tough-cookie:tough-cookie:2.4.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/tough-cookie@2.4.3", + "externalReferences": [ + { + "url": "git://github.com/salesforce/tough-cookie.git", + "type": "distribution" + }, + { + "url": "https://github.com/salesforce/tough-cookie", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslib@1.14.1?package-id=6536b2dd10d6cbb5", + "author": "Microsoft Corp.", + "name": "tslib", + "version": "1.14.1", + "description": "Runtime library for TypeScript helper functions", + "licenses": [ + { + "license": { + "id": "0BSD" + } + } + ], + "cpe": "cpe:2.3:a:tslib:tslib:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslib@1.14.1", + "externalReferences": [ + { + "url": "git+https://github.com/Microsoft/tslib.git", + "type": "distribution" + }, + { + "url": "https://www.typescriptlang.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslib@1.14.1?package-id=1d66cb61fb941655", + "author": "Microsoft Corp.", + "name": "tslib", + "version": "1.14.1", + "description": "Runtime library for TypeScript helper functions", + "licenses": [ + { + "license": { + "id": "0BSD" + } + } + ], + "cpe": "cpe:2.3:a:tslib:tslib:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslib@1.14.1", + "externalReferences": [ + { + "url": "git+https://github.com/Microsoft/tslib.git", + "type": "distribution" + }, + { + "url": "https://www.typescriptlang.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslib@1.14.1?package-id=85f17f7fdbf8a5d0", + "author": "Microsoft Corp.", + "name": "tslib", + "version": "1.14.1", + "description": "Runtime library for TypeScript helper functions", + "licenses": [ + { + "license": { + "id": "0BSD" + } + } + ], + "cpe": "cpe:2.3:a:tslib:tslib:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslib@1.14.1", + "externalReferences": [ + { + "url": "git+https://github.com/Microsoft/tslib.git", + "type": "distribution" + }, + { + "url": "https://www.typescriptlang.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslib@1.14.1?package-id=5529bb73f7015d14", + "author": "Microsoft Corp.", + "name": "tslib", + "version": "1.14.1", + "description": "Runtime library for TypeScript helper functions", + "licenses": [ + { + "license": { + "id": "0BSD" + } + } + ], + "cpe": "cpe:2.3:a:tslib:tslib:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslib@1.14.1", + "externalReferences": [ + { + "url": "git+https://github.com/Microsoft/tslib.git", + "type": "distribution" + }, + { + "url": "https://www.typescriptlang.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslib@1.14.1?package-id=4a8087d9ced7b72a", + "author": "Microsoft Corp.", + "name": "tslib", + "version": "1.14.1", + "description": "Runtime library for TypeScript helper functions", + "licenses": [ + { + "license": { + "id": "0BSD" + } + } + ], + "cpe": "cpe:2.3:a:tslib:tslib:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslib@1.14.1", + "externalReferences": [ + { + "url": "git+https://github.com/Microsoft/tslib.git", + "type": "distribution" + }, + { + "url": "https://www.typescriptlang.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslib@1.14.1?package-id=81b6a4b44008213", + "author": "Microsoft Corp.", + "name": "tslib", + "version": "1.14.1", + "description": "Runtime library for TypeScript helper functions", + "licenses": [ + { + "license": { + "id": "0BSD" + } + } + ], + "cpe": "cpe:2.3:a:tslib:tslib:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslib@1.14.1", + "externalReferences": [ + { + "url": "git+https://github.com/Microsoft/tslib.git", + "type": "distribution" + }, + { + "url": "https://www.typescriptlang.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslib@2.1.0?package-id=2fc99281bc7a8815", + "author": "Microsoft Corp.", + "name": "tslib", + "version": "2.1.0", + "description": "Runtime library for TypeScript helper functions", + "licenses": [ + { + "license": { + "id": "0BSD" + } + } + ], + "cpe": "cpe:2.3:a:tslib:tslib:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslib@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/Microsoft/tslib.git", + "type": "distribution" + }, + { + "url": "https://www.typescriptlang.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tunnel-agent@0.6.0?package-id=5f666f5e908dfc65", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "tunnel-agent", + "version": "0.6.0", + "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:tunnel-agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tunnel-agent@0.6.0", + "externalReferences": [ + { + "url": "git+https://github.com/mikeal/tunnel-agent.git", + "type": "distribution" + }, + { + "url": "https://github.com/mikeal/tunnel-agent#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tweetnacl@0.14.5?package-id=978333255b1b0435", + "author": "TweetNaCl-js contributors", + "name": "tweetnacl", + "version": "0.14.5", + "description": "Port of TweetNaCl cryptographic library to JavaScript", + "licenses": [ + { + "license": { + "id": "Unlicense" + } + } + ], + "cpe": "cpe:2.3:a:tweetnacl:tweetnacl:0.14.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/tweetnacl@0.14.5", + "externalReferences": [ + { + "url": "git+https://github.com/dchest/tweetnacl-js.git", + "type": "distribution" + }, + { + "url": "https://tweetnacl.js.org", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/type-fest@0.20.2?package-id=20a77ee3cf7802b3", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "type-fest", + "version": "0.20.2", + "description": "A collection of essential TypeScript types", + "licenses": [ + { + "license": { + "name": "(MIT OR CC0-1.0)" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:type-fest:0.20.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/type-fest@0.20.2", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/type-fest.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/type-fest#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/type-fest@2.19.0?package-id=f8a109d13e380a83", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "type-fest", + "version": "2.19.0", + "description": "A collection of essential TypeScript types", + "licenses": [ + { + "license": { + "name": "(MIT OR CC0-1.0)" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:type-fest:2.19.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/type-fest@2.19.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/type-fest.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/type-fest#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/type-is@1.6.18?package-id=a4eef9183b32a31", + "name": "type-is", + "version": "1.6.18", + "description": "Infer the content-type of a request.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:type-is:type-is:1.6.18:*:*:*:*:*:*:*", + "purl": "pkg:npm/type-is@1.6.18", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/type-is.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/type-is#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/typedarray@0.0.6?package-id=f7beac06324a3356", + "author": "James Halliday (http://substack.net)", + "name": "typedarray", + "version": "0.0.6", + "description": "TypedArray polyfill for old browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:typedarray:typedarray:0.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/typedarray@0.0.6", + "externalReferences": [ + { + "url": "git://github.com/substack/typedarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/typedarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/typedarray@0.0.6?package-id=8f3ba3a6a4336960", + "author": "James Halliday (http://substack.net)", + "name": "typedarray", + "version": "0.0.6", + "description": "TypedArray polyfill for old browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:typedarray:typedarray:0.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/typedarray@0.0.6", + "externalReferences": [ + { + "url": "git://github.com/substack/typedarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/typedarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uid-number@0.0.6?package-id=c6b3a428d7d6414b", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "uid-number", + "version": "0.0.6", + "description": "Convert a username/group name to a uid/gid number", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:uid-number:uid-number:0.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/uid-number@0.0.6", + "externalReferences": [ + { + "url": "git://github.com/isaacs/uid-number.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/uid-number#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/umask@1.1.0?package-id=c2c1639822e8e1f2", + "author": "Sam Mikes ", + "name": "umask", + "version": "1.1.0", + "description": "convert umask from string <-> number", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:smikes:umask:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/umask@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/smikes/umask.git", + "type": "distribution" + }, + { + "url": "https://github.com/smikes/umask", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unique-filename@1.1.1?package-id=7ca7ff63263b2fc2", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "unique-filename", + "version": "1.1.1", + "description": "Generate a unique filename for use in temporary directories or caches.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:unique-filename:unique-filename:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-filename@1.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/unique-filename.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/unique-filename", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unique-slug@2.0.0?package-id=924ca3204f5aad87", + "author": "Rebecca Turner (http://re-becca.org)", + "name": "unique-slug", + "version": "2.0.0", + "description": "Generate a unique character string suitible for use in files and URLs.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:unique-slug:unique-slug:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-slug@2.0.0", + "externalReferences": [ + { + "url": "git://github.com/iarna/unique-slug.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/unique-slug#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unique-string@1.0.0?package-id=4e6b7ebbf2d6b0b2", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "unique-string", + "version": "1.0.0", + "description": "Generate a unique random string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unique-string:unique-string:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-string@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/unique-string.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/unique-string#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unpipe@1.0.0?package-id=5fde8937a7c37a7f", + "author": "Douglas Christopher Wilson ", + "name": "unpipe", + "version": "1.0.0", + "description": "Unpipe a stream from all destinations", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stream-utils:unpipe:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unpipe@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/stream-utils/unpipe.git", + "type": "distribution" + }, + { + "url": "https://github.com/stream-utils/unpipe#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unpipe@1.0.0?package-id=6e84e73fed0f90d9", + "author": "Douglas Christopher Wilson ", + "name": "unpipe", + "version": "1.0.0", + "description": "Unpipe a stream from all destinations", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stream-utils:unpipe:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unpipe@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/stream-utils/unpipe.git", + "type": "distribution" + }, + { + "url": "https://github.com/stream-utils/unpipe#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unzip-response@2.0.1?package-id=2f2960808396cad4", + "name": "unzip-response", + "version": "2.0.1", + "description": "Unzip a HTTP response if needed", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unzip-response:unzip-response:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/unzip-response@2.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/unzip-response.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/unzip-response#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/update-notifier@2.5.0?package-id=e826782630303ce6", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "update-notifier", + "version": "2.5.0", + "description": "Update notifications for your CLI app", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:update-notifier:update-notifier:2.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/update-notifier@2.5.0", + "externalReferences": [ + { + "url": "git+https://github.com/yeoman/update-notifier.git", + "type": "distribution" + }, + { + "url": "https://github.com/yeoman/update-notifier#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uri-js@4.4.0?package-id=2643142c0c55d592", + "author": "Gary Court ", + "name": "uri-js", + "version": "4.4.0", + "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:garycourt:uri-js:4.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/uri-js@4.4.0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/garycourt/uri-js.git", + "type": "distribution" + }, + { + "url": "https://github.com/garycourt/uri-js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uri-js@4.4.1?package-id=dfad1f1bc56159f9", + "author": "Gary Court ", + "name": "uri-js", + "version": "4.4.1", + "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:garycourt:uri-js:4.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/uri-js@4.4.1", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/garycourt/uri-js.git", + "type": "distribution" + }, + { + "url": "https://github.com/garycourt/uri-js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/url-parse-lax@1.0.0?package-id=66c52cc773273a82", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "url-parse-lax", + "version": "1.0.0", + "description": "url.parse() with support for protocol-less URLs & IPs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:url-parse-lax:url-parse-lax:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/url-parse-lax@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/url-parse-lax.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/url-parse-lax#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=adcfe60f42b3bf40", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "util-deprecate", + "version": "1.0.2", + "description": "The Node.js `util.deprecate()` function with browser support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=ecf076cf26fe73d0", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "util-deprecate", + "version": "1.0.2", + "description": "The Node.js `util.deprecate()` function with browser support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/util-extend@1.0.3?package-id=b90581678f776d40", + "name": "util-extend", + "version": "1.0.3", + "description": "Node's internal object extension function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-extend:util-extend:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-extend@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/util-extend.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/util-extend#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/util-promisify@2.1.0?package-id=a64f5f12cac515a2", + "name": "util-promisify", + "version": "2.1.0", + "description": "Node 8's util.promisify, as a node module", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-promisify:util-promisify:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-promisify@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/juliangruber/util-promisify.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/util-promisify#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/utils-merge@1.0.1?package-id=2c445cae22e4baa6", + "author": "Jared Hanson (http://www.jaredhanson.net/)", + "name": "utils-merge", + "version": "1.0.1", + "description": "merge() utility function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jaredhanson:utils-merge:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/utils-merge@1.0.1", + "externalReferences": [ + { + "url": "git://github.com/jaredhanson/utils-merge.git", + "type": "distribution" + }, + { + "url": "https://github.com/jaredhanson/utils-merge#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uuid@3.3.3?package-id=ae2a096a6bb42106", + "name": "uuid", + "version": "3.3.3", + "description": "RFC4122 (v1, v4, and v5) UUIDs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:kelektiv:uuid:3.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/uuid@3.3.3", + "externalReferences": [ + { + "url": "git+https://github.com/kelektiv/node-uuid.git", + "type": "distribution" + }, + { + "url": "https://github.com/kelektiv/node-uuid#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uuid@8.3.2?package-id=95a83579b4e2b728", + "name": "uuid", + "version": "8.3.2", + "description": "RFC4122 (v1, v4, and v5) UUIDs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:uuidjs:uuid:8.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/uuid@8.3.2", + "externalReferences": [ + { + "url": "git+https://github.com/uuidjs/uuid.git", + "type": "distribution" + }, + { + "url": "https://github.com/uuidjs/uuid#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4?package-id=33663eb8a236f357", + "author": "Kyle E. Mitchell (https://kemitchell.com)", + "name": "validate-npm-package-license", + "version": "3.0.4", + "description": "Give me a string and I'll tell you if it's a valid npm package license string", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:validate-npm-package-license:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/validate-npm-package-license@3.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/kemitchell/validate-npm-package-license.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/kemitchell/validate-npm-package-license.js#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/validate-npm-package-name@3.0.0?package-id=57f9fd66d4ad5701", + "author": "zeke", + "name": "validate-npm-package-name", + "version": "3.0.0", + "description": "Give me a string and I'll tell you if it's a valid npm package name", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:validate-npm-package-name:validate-npm-package-name:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/validate-npm-package-name@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/validate-npm-package-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/validate-npm-package-name", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/validator@13.0.0?package-id=c822b35e061ecd32", + "author": "Chris O'Hara ", + "name": "validator", + "version": "13.0.0", + "description": "String validation and sanitization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:validator:validator:13.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/validator@13.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/chriso/validator.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/chriso/validator.js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/vary@1.1.2?package-id=b22a107883a17598", + "author": "Douglas Christopher Wilson ", + "name": "vary", + "version": "1.1.2", + "description": "Manipulate the HTTP Vary header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jshttp:vary:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/vary@1.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/vary.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/vary#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/verror@1.10.0?package-id=be840953a9e5ca6a", + "name": "verror", + "version": "1.10.0", + "description": "richer JavaScript errors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:davepacheco:verror:1.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/verror@1.10.0", + "externalReferences": [ + { + "url": "git://github.com/davepacheco/node-verror.git", + "type": "distribution" + }, + { + "url": "https://github.com/davepacheco/node-verror#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wcwidth@1.0.1?package-id=ee54c63162090e16", + "author": "Tim Oxley", + "name": "wcwidth", + "version": "1.0.1", + "description": "Port of C's wcwidth() and wcswidth()", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:timoxley:wcwidth:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/wcwidth@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/timoxley/wcwidth.git", + "type": "distribution" + }, + { + "url": "https://github.com/timoxley/wcwidth#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/which@1.3.1?package-id=ace883b09cbe1ce", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "which", + "version": "1.3.1", + "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:which:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/which@1.3.1", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-which.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/node-which#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/which-module@2.0.0?package-id=5db3efe3b2bc298b", + "author": "nexdrew", + "name": "which-module", + "version": "2.0.0", + "description": "Find the module object for something that was require()d", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:which-module:which-module:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/which-module@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/nexdrew/which-module.git", + "type": "distribution" + }, + { + "url": "https://github.com/nexdrew/which-module#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wide-align@1.1.2?package-id=7a2f1fc2f2c8bfd3", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "wide-align", + "version": "1.1.2", + "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wide-align:wide-align:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/wide-align@1.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/wide-align.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/wide-align#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/widest-line@2.0.1?package-id=8d53bbe290b5bf2", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "widest-line", + "version": "2.0.1", + "description": "Get the visual width of the widest line in a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:widest-line:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/widest-line@2.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/widest-line.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/widest-line#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/worker-farm@1.7.0?package-id=485ea0f11314a814", + "name": "worker-farm", + "version": "1.7.0", + "description": "Distribute processing tasks to child processes with an über-simple API and baked-in durability & custom concurrency options.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:worker-farm:worker-farm:1.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/worker-farm@1.7.0", + "externalReferences": [ + { + "url": "git+https://github.com/rvagg/node-worker-farm.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/node-worker-farm", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrap-ansi@5.1.0?package-id=d8793c53891a3183", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "wrap-ansi", + "version": "5.1.0", + "description": "Wordwrap a string with ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:5.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrap-ansi@5.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/wrap-ansi.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/wrap-ansi#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=3bac7a86a24db14e", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "wrappy", + "version": "1.0.2", + "description": "Callback wrapping utility", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/wrappy.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=da7850cd4ce320be", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "wrappy", + "version": "1.0.2", + "description": "Callback wrapping utility", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/wrappy.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/write-file-atomic@2.4.3?package-id=7d4897c5064f974b", + "author": "Rebecca Turner (http://re-becca.org)", + "name": "write-file-atomic", + "version": "2.4.3", + "description": "Write files in an atomic fashion w/configurable ownership", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:write-file-atomic:write-file-atomic:2.4.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/write-file-atomic@2.4.3", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/iarna/write-file-atomic.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/write-file-atomic", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/xdg-basedir@3.0.0?package-id=6cd97401957b6225", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "xdg-basedir", + "version": "3.0.0", + "description": "Get XDG Base Directory paths", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:xdg-basedir:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/xdg-basedir@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/xdg-basedir.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/xdg-basedir#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/xtend@4.0.1?package-id=7f934d0a04b60a40", + "author": "Raynos ", + "name": "xtend", + "version": "4.0.1", + "description": "extend like a boss", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:Raynos:xtend:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/xtend@4.0.1", + "externalReferences": [ + { + "url": "git://github.com/Raynos/xtend.git", + "type": "distribution" + }, + { + "url": "https://github.com/Raynos/xtend", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/xtend@4.0.2?package-id=806268954298f9d0", + "author": "Raynos ", + "name": "xtend", + "version": "4.0.2", + "description": "extend like a boss", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:Raynos:xtend:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/xtend@4.0.2", + "externalReferences": [ + { + "url": "git://github.com/Raynos/xtend.git", + "type": "distribution" + }, + { + "url": "https://github.com/Raynos/xtend", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/y18n@4.0.1?package-id=59c84f1155aa57be", + "author": "Ben Coe ", + "name": "y18n", + "version": "4.0.1", + "description": "the bare-bones internationalization library used by yargs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yargs:y18n:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/y18n@4.0.1", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/yargs/y18n.git", + "type": "distribution" + }, + { + "url": "https://github.com/yargs/y18n", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yallist@2.1.2?package-id=2dc35655140480b4", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "yallist", + "version": "2.1.2", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/yallist#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yallist@3.0.3?package-id=dba260e644a452f8", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "yallist", + "version": "3.0.3", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@3.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/yallist#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yallist@3.1.1?package-id=786b4b01dc63a464", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "yallist", + "version": "3.1.1", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@3.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/yallist#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yargs@14.2.3?package-id=2b0da698f823246", + "name": "yargs", + "version": "14.2.3", + "description": "yargs the modern, pirate-themed, successor to optimist.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:yargs:yargs:14.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/yargs@14.2.3", + "externalReferences": [ + { + "url": "git+https://github.com/yargs/yargs.git", + "type": "distribution" + }, + { + "url": "https://yargs.js.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yargs-parser@15.0.1?package-id=21203be018f57e45", + "author": "Ben Coe ", + "name": "yargs-parser", + "version": "15.0.1", + "description": "the mighty option parser used by yargs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yargs-parser:yargs-parser:15.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/yargs-parser@15.0.1", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/yargs/yargs-parser.git", + "type": "distribution" + }, + { + "url": "https://github.com/yargs/yargs-parser#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yarn@1.22.19?package-id=f2b974a78000b26b", + "name": "yarn", + "version": "1.22.19", + "description": "📦🐈 Fast, reliable, and secure dependency management.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:yarn:yarn:1.22.19:*:*:*:*:*:*:*", + "purl": "pkg:npm/yarn@1.22.19", + "externalReferences": [ + { + "url": "yarnpkg/yarn", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.13-r0?arch=x86_64&distro=alpine-3.17.1&package-id=94014313cfcd2b71", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.13-r0", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.13-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.13-r0?arch=x86_64&distro=alpine-3.17.1", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.17.1", + "description": "Alpine Linux v3.17", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.17.1" + }, + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.2.0-r15?arch=x86_64&distro=alpine-3.14.0&package-id=e9fa5a5914a9f876", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.2.0-r15", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.2.0-r15:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.2.0-r15?arch=x86_64&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.2.0-r16?arch=x86_64&distro=alpine-3.14.0&package-id=99cf2e0f247af59f", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.2.0-r16", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.2.0-r16:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.2.0-r16?arch=x86_64&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.3-r1?arch=x86_64&distro=alpine-3.14.0&package-id=d9b110f5aec37ab0", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.3-r1", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.3-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.3-r1?arch=x86_64&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.4-r0?arch=x86_64&distro=alpine-3.14.0&package-id=3129d951e009dfc8", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.4-r0", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.4-r0?arch=x86_64&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.5.0-b42?package-id=bb384db4fa883606", + "group": "org.glassfish.hk2.external", + "name": "aopalliance-repackaged", + "version": "2.5.0-b42", + "licenses": [ + { + "license": { + "name": "https://glassfish.java.net/nonav/public/CDDL+GPL_1_1.html" + } + } + ], + "cpe": "cpe:2.3:a:aopalliance-repackaged:aopalliance-repackaged:2.5.0-b42:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.5.0-b42", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "e74beab6ca12e9e745eb47ca61729d9452b96f0c" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.5-r1?arch=x86_64&distro=alpine-3.14.0&package-id=e4b0dfa0167d1cc4", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.12.5-r1", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.12.5-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.12.5-r1?arch=x86_64&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.7-r0?arch=x86_64&distro=alpine-3.14.0&package-id=3d3f539520a09439", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.12.7-r0", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.12.7-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.12.7-r0?arch=x86_64&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "a1a69d918cc41a1c", + "name": "busybox", + "version": "1.33.1", + "cpe": "cpe:2.3:a:busybox:busybox:1.33.1:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.33.1-r2?arch=x86_64&distro=alpine-3.14.0&package-id=202ec46474524c4", + "publisher": "Natanael Copa ", + "name": "busybox", + "version": "1.33.1-r2", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.33.1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.33.1-r2?arch=x86_64&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.33.1-r8?arch=x86_64&distro=alpine-3.14.0&package-id=f930f5a430102cb5", + "publisher": "Natanael Copa ", + "name": "busybox", + "version": "1.33.1-r8", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.33.1-r8:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.33.1-r8?arch=x86_64&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates@20191127-r5?arch=x86_64&distro=alpine-3.14.0&package-id=59f0dfc47bad0b78", + "publisher": "Natanael Copa ", + "name": "ca-certificates", + "version": "20191127-r5", + "description": "Common CA certificates PEM files from Mozilla", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20191127-r5:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates@20191127-r5?arch=x86_64&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates@20220614-r0?arch=x86_64&distro=alpine-3.14.0&package-id=6f2c91b9b6c0161b", + "publisher": "Natanael Copa ", + "name": "ca-certificates", + "version": "20220614-r0", + "description": "Common CA certificates PEM files from Mozilla", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20220614-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates@20220614-r0?arch=x86_64&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20191127-r5?arch=x86_64&upstream=ca-certificates&distro=alpine-3.14.0&package-id=49b1d2868a3a2549", + "publisher": "Natanael Copa ", + "name": "ca-certificates-bundle", + "version": "20191127-r5", + "description": "Pre generated bundle of Mozilla certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20191127-r5:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-bundle@20191127-r5?arch=x86_64&upstream=ca-certificates&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20220614-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.14.0&package-id=3442a80f36917ed5", + "publisher": "Natanael Copa ", + "name": "ca-certificates-bundle", + "version": "20220614-r0", + "description": "Pre generated bundle of Mozilla certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20220614-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-bundle@20220614-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-api@2.5.0-b42?package-id=45be60709aa9aec6", + "group": "org.glassfish.hk2", + "name": "hk2-api", + "version": "2.5.0-b42", + "licenses": [ + { + "license": { + "name": "https://glassfish.java.net/nonav/public/CDDL+GPL_1_1.html" + } + } + ], + "cpe": "cpe:2.3:a:glassfish:hk2-api:2.5.0-b42:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.glassfish.hk2/hk2-api@2.5.0-b42", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "7fd4e3d0f2cb37c80ad0dedee3f5ee69503eaf52" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-locator@2.5.0-b42?package-id=23cae187b997b45d", + "group": "org.glassfish.hk2", + "name": "hk2-locator", + "version": "2.5.0-b42", + "licenses": [ + { + "license": { + "name": "https://glassfish.java.net/nonav/public/CDDL+GPL_1_1.html" + } + } + ], + "cpe": "cpe:2.3:a:hk2-locator:hk2-locator:2.5.0-b42:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.glassfish.hk2/hk2-locator@2.5.0-b42", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "9d6edc0cb226401a8316e67d81bfc37cb626ef91" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-utils@2.5.0-b42?package-id=107583b5f4533036", + "group": "org.glassfish.hk2", + "name": "hk2-utils", + "version": "2.5.0-b42", + "licenses": [ + { + "license": { + "name": "https://glassfish.java.net/nonav/public/CDDL+GPL_1_1.html" + } + } + ], + "cpe": "cpe:2.3:a:glassfish:hk2-utils:2.5.0-b42:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.glassfish.hk2/hk2-utils@2.5.0-b42", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "102a344e1728825e865a8986d7605602aba3c3b6" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.1?package-id=89e9ce0870de8124", + "group": "com.fasterxml.jackson.core", + "name": "jackson-annotations", + "version": "2.13.1", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:jackson-annotations:jackson-annotations:2.13.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.1", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "1cbcbe4623113e6af92ccaa89884a345270f1a87" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.1?package-id=1f5b6adfe2f0a1bc", + "group": "com.fasterxml.jackson.core", + "name": "jackson-core", + "version": "2.13.1", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:jackson-core:jackson-core:2.13.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.1", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "51ae921a2ed1e06ca8876f12f32f265e83c0b2b8" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.1?package-id=a57e1639b6ef14c0", + "group": "com.fasterxml.jackson.core", + "name": "jackson-databind", + "version": "2.13.1", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:jackson-databind:jackson-databind:2.13.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.1", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "698b2d2b15d9a1b7aae025f1d9f576842285e7f6" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.13.1?package-id=ecb3e710e9f4ac49", + "group": "com.fasterxml.jackson.module", + "name": "jackson-module-jaxb-annotations", + "version": "2.13.1", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:jackson-module-jaxb-annotations:jackson-module-jaxb-annotations:2.13.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.13.1", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "63de86abf14db6ef940b21a50eaf5cadce0a6627" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun/jakarta.activation-api@1.2.2?package-id=350355945fc7b49c", + "group": "jakarta.activation", + "name": "jakarta.activation-api", + "version": "1.2.2", + "licenses": [ + { + "license": { + "name": "http://www.eclipse.org/org/documents/edl-v10.php" + } + } + ], + "cpe": "cpe:2.3:a:jakarta.activation-api:jakarta.activation-api:1.2.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.sun/jakarta.activation-api@1.2.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "99f53adba383cb1bf7c3862844488574b559621f" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish/jakarta.annotation-api@1.3.5?package-id=fb9e1cad1b155a1b", + "group": "jakarta.annotation", + "name": "jakarta.annotation-api", + "version": "1.3.5", + "licenses": [ + { + "license": { + "name": "http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html" + } + } + ], + "cpe": "cpe:2.3:a:jakarta.annotation-api:jakarta.annotation-api:1.3.5:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.glassfish/jakarta.annotation-api@1.3.5", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "59eb84ee0d616332ff44aba065f3888cf002cd2d" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.xml.bind-api/jakarta.xml.bind-api@2.3.3?package-id=4ac61dac5750d2e3", + "group": "jakarta.xml.bind", + "name": "jakarta.xml.bind-api", + "version": "2.3.3", + "licenses": [ + { + "license": { + "name": "http://www.eclipse.org/org/documents/edl-v10.php" + } + } + ], + "cpe": "cpe:2.3:a:jakarta.xml.bind-api:jakarta.xml.bind-api:2.3.3:*:*:*:*:*:*:*", + "purl": "pkg:maven/jakarta.xml.bind-api/jakarta.xml.bind-api@2.3.3", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "48e3b9cfc10752fba3521d6511f4165bea951801" + } + ] + } + ] + }, + { + "type": "application", + "bom-ref": "pkg:generic/java@17-ea+14?package-id=fb1af09dc1b83573", + "name": "java", + "version": "17-ea+14", + "cpe": "cpe:2.3:a:oracle:openjdk:17-ea\\+14:*:*:*:*:*:*:*", + "purl": "pkg:generic/java@17-ea+14" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/java-cacerts@1.0-r1?arch=x86_64&distro=alpine-3.14.0&package-id=423274d2f2da67db", + "publisher": "Natanael Copa ", + "name": "java-cacerts", + "version": "1.0-r1", + "description": "Script to update java cacerts store", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:java-cacerts:java-cacerts:1.0-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/java-cacerts@1.0-r1?arch=x86_64&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/aports/tree/community/java-cacerts", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.javassist/javassist@3.22.0-CR2?package-id=71fc9d47cb1d25e0", + "group": "org.javassist", + "name": "javassist", + "version": "3.22.0-CR2", + "licenses": [ + { + "license": { + "name": "http://www.mozilla.org/MPL/MPL-1.1.html, http://www.gnu.org/licenses/lgpl-2.1.html, http://www.apache.org/licenses/" + } + } + ], + "cpe": "cpe:2.3:a:shigeru-chiba\\,-www-javassist-org:javassist:3.22.0-CR2:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.javassist/javassist@3.22.0-CR2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "44eaf0990dea92f4bca4b9931b2239c0e8756ee7" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish/javax.annotation-api@1.3.2?package-id=2b5b0da472e81775", + "group": "javax.annotation", + "name": "javax.annotation-api", + "version": "1.3.2", + "licenses": [ + { + "license": { + "name": "https://github.com/javaee/javax.annotation/blob/master/LICENSE" + } + } + ], + "cpe": "cpe:2.3:a:javax.annotation-api:javax.annotation-api:1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.glassfish/javax.annotation-api@1.3.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "934c04d3cfef185a8008e7bf34331b79730a9d43" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.hk2.external/javax.inject@2.5.0-b42?package-id=98208f013fc569d6", + "group": "org.glassfish.hk2.external", + "name": "javax.inject", + "version": "2.5.0-b42", + "licenses": [ + { + "license": { + "name": "https://glassfish.java.net/nonav/public/CDDL+GPL_1_1.html" + } + } + ], + "cpe": "cpe:2.3:a:javax.inject:javax.inject:2.5.0-b42:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.glassfish.hk2.external/javax.inject@2.5.0-b42", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "98e0b7dcef77dc04809f0603868140a1c60bea71" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/javax.ws.rs-api/javax.ws.rs-api@2.1?package-id=1a78ff1a5f581769", + "group": "javax.ws.rs", + "name": "javax.ws.rs-api", + "version": "2.1", + "licenses": [ + { + "license": { + "name": "https://oss.oracle.com/licenses/CDDL+GPL-1.1, https://oss.oracle.com/licenses/CDDL+GPL-1.1" + } + } + ], + "cpe": "cpe:2.3:a:oracle-corporation:javax.ws.rs-api:2.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/javax.ws.rs-api/javax.ws.rs-api@2.1", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "426a0862406536e690c7caa8bb6ed32191986fac" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-client@2.26?package-id=5c8461a7366022b7", + "group": "org.glassfish.jersey.core", + "name": "jersey-client", + "version": "2.26", + "licenses": [ + { + "license": { + "name": "https://oss.oracle.com/licenses/CDDL+GPL-1.1, https://oss.oracle.com/licenses/CDDL+GPL-1.1" + } + } + ], + "cpe": "cpe:2.3:a:jersey-client:jersey-client:2.26:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.glassfish.jersey.core/jersey-client@2.26", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "125b8d1040d121a5dc4ce6858e21a6160bed7afa" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@2.26?package-id=ad20887a916ee088", + "group": "org.glassfish.jersey.core", + "name": "jersey-common", + "version": "2.26", + "licenses": [ + { + "license": { + "name": "https://oss.oracle.com/licenses/CDDL+GPL-1.1, https://oss.oracle.com/licenses/CDDL+GPL-1.1" + } + } + ], + "cpe": "cpe:2.3:a:jersey-common:jersey-common:2.26:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.glassfish.jersey.core/jersey-common@2.26", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "d96475745c5e72cafcbc4dc9e2e725f4d9683f21" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@2.26?package-id=5ca13c1f3ffa6c4", + "group": "org.glassfish.jersey.ext", + "name": "jersey-entity-filtering", + "version": "2.26", + "licenses": [ + { + "license": { + "name": "https://oss.oracle.com/licenses/CDDL+GPL-1.1, https://oss.oracle.com/licenses/CDDL+GPL-1.1" + } + } + ], + "cpe": "cpe:2.3:a:jersey-entity-filtering:jersey-entity-filtering:2.26:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@2.26", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "a8ea15c9cd0bd8b090dbbf0f0e43aa39604f3433" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.26?package-id=58cbd95c762b612", + "group": "org.glassfish.jersey.inject", + "name": "jersey-hk2", + "version": "2.26", + "licenses": [ + { + "license": { + "name": "https://oss.oracle.com/licenses/CDDL+GPL-1.1, https://oss.oracle.com/licenses/CDDL+GPL-1.1" + } + } + ], + "cpe": "cpe:2.3:a:jersey-hk2:jersey-hk2:2.26:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.26", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "df27f7d7577acf4b532684448021632098924dab" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@2.26?package-id=a801d5f38afafe02", + "group": "org.glassfish.jersey.media", + "name": "jersey-media-json-jackson", + "version": "2.26", + "licenses": [ + { + "license": { + "name": "https://oss.oracle.com/licenses/CDDL+GPL-1.1, https://oss.oracle.com/licenses/CDDL+GPL-1.1" + } + } + ], + "cpe": "cpe:2.3:a:jersey-media-json-jackson:jersey-media-json-jackson:2.26:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@2.26", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "ce3109479991527107921ca5e7943a6e7e20db80" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/jrt-fs/jrt-fs@17-ea?package-id=da626d820e747d5f", + "name": "jrt-fs", + "version": "17-ea", + "cpe": "cpe:2.3:a:oracle-corporation:jrt-fs:17-ea:*:*:*:*:*:*:*", + "purl": "pkg:maven/jrt-fs/jrt-fs@17-ea", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "299abc6b65845de85d818d2ccff2ba68a75b7418" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.slf4j/jul-to-slf4j@1.7.25?package-id=e7d1a290d9cb288a", + "group": "org.slf4j", + "name": "jul-to-slf4j", + "version": "1.7.25", + "cpe": "cpe:2.3:a:jul-to-slf4j:jul-to-slf4j:1.7.25:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.slf4j/jul-to-slf4j@1.7.25", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "0af5364cd6679bfffb114f0dec8a157aaa283b76" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.14.0&package-id=76cb141a67eed50e", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r3", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86_64&upstream=openssl&distro=alpine-3.14.0&package-id=a8e4da1bd835ea49", + "publisher": "Timo Teras ", + "name": "libcrypto1.1", + "version": "1.1.1k-r0", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1k-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1k-r0?arch=x86_64&upstream=openssl&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.14.0&package-id=4f05bc02c33574a5", + "publisher": "Timo Teras ", + "name": "libcrypto1.1", + "version": "1.1.1t-r2", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1t-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libffi@3.3-r2?arch=x86_64&distro=alpine-3.14.0&package-id=9e89f2d619383fa", + "publisher": "Natanael Copa ", + "name": "libffi", + "version": "3.3-r2", + "description": "A portable, high level programming interface to various calling conventions.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libffi:libffi:3.3-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libffi@3.3-r2?arch=x86_64&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://sourceware.org/libffi", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libretls@3.3.3-r0?arch=x86_64&distro=alpine-3.14.0&package-id=49022fa922cbbe4e", + "publisher": "Ariadne Conill ", + "name": "libretls", + "version": "3.3.3-r0", + "description": "port of libtls from libressl to openssl", + "licenses": [ + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "name": "(BSD-3-Clause" + } + }, + { + "license": { + "name": "OR" + } + }, + { + "license": { + "name": "MIT)" + } + } + ], + "cpe": "cpe:2.3:a:libretls:libretls:3.3.3-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libretls@3.3.3-r0?arch=x86_64&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://git.causal.agency/libretls/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libretls@3.3.3p1-r3?arch=x86_64&distro=alpine-3.14.0&package-id=c50c962c5333e40a", + "publisher": "Ariadne Conill ", + "name": "libretls", + "version": "3.3.3p1-r3", + "description": "port of libtls from libressl to openssl", + "licenses": [ + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "name": "(BSD-3-Clause" + } + }, + { + "license": { + "name": "OR" + } + }, + { + "license": { + "name": "MIT)" + } + } + ], + "cpe": "cpe:2.3:a:libretls:libretls:3.3.3p1-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libretls@3.3.3p1-r3?arch=x86_64&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://git.causal.agency/libretls/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86_64&upstream=openssl&distro=alpine-3.14.0&package-id=cce2236c3fac3c86", + "publisher": "Timo Teras ", + "name": "libssl1.1", + "version": "1.1.1k-r0", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1k-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl1.1@1.1.1k-r0?arch=x86_64&upstream=openssl&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.14.0&package-id=49466695c53c1135", + "publisher": "Timo Teras ", + "name": "libssl1.1", + "version": "1.1.1t-r2", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1t-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libtasn1@4.17.0-r0?arch=x86_64&distro=alpine-3.14.0&package-id=7ab7881e9d89ecad", + "publisher": "Natanael Copa ", + "name": "libtasn1", + "version": "4.17.0-r0", + "description": "The ASN.1 library used in GNUTLS", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libtasn1:libtasn1:4.17.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libtasn1@4.17.0-r0?arch=x86_64&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/gnutls/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libtasn1@4.17.0-r1?arch=x86_64&distro=alpine-3.14.0&package-id=c9659bd74b33efff", + "publisher": "Natanael Copa ", + "name": "libtasn1", + "version": "4.17.0-r1", + "description": "The ASN.1 library used in GNUTLS", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libtasn1:libtasn1:4.17.0-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libtasn1@4.17.0-r1?arch=x86_64&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/gnutls/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.0?package-id=991c08e4ad4dcc14", + "group": "org.apache.logging.log4j", + "name": "log4j-api", + "version": "2.17.0", + "licenses": [ + { + "license": { + "name": "https://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:apache:log4j-api:2.17.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "bbd791e9c8c9421e45337c4fe0a10851c086e36c" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.17.0?package-id=61df27c793dc0ec2", + "group": "org.apache.logging.log4j", + "name": "log4j-to-slf4j", + "version": "2.17.0", + "licenses": [ + { + "license": { + "name": "https://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:apache:log4j-to-slf4j:2.17.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.17.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "e50b82411b9ce9c204c938509f914b2bb887168b" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/logback-classic/logback-classic@1.2.3?package-id=bbf59ed5da25a49b", + "group": "ch.qos.logback", + "name": "logback-classic", + "version": "1.2.3", + "licenses": [ + { + "license": { + "name": "http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html" + } + } + ], + "cpe": "cpe:2.3:a:logback-classic:logback-classic:1.2.3:*:*:*:*:*:*:*", + "purl": "pkg:maven/logback-classic/logback-classic@1.2.3", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "7c4f3c474fb2c041d8028740440937705ebb473a" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/logback-core/logback-core@1.2.3?package-id=3fd3ba5508d97fd9", + "group": "ch.qos.logback", + "name": "logback-core", + "version": "1.2.3", + "licenses": [ + { + "license": { + "name": "http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html" + } + } + ], + "cpe": "cpe:2.3:a:logback-core:logback-core:1.2.3:*:*:*:*:*:*:*", + "purl": "pkg:maven/logback-core/logback-core@1.2.3", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "864344400c3d4d92dfeb0a305dc87d953677c03c" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/lombok/lombok@1.18.22?package-id=55c274533d68b2ca", + "name": "lombok", + "version": "1.18.22", + "cpe": "cpe:2.3:a:lombok:lombok:1.18.22:*:*:*:*:*:*:*", + "purl": "pkg:maven/lombok/lombok@1.18.22", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "9c08ea24c6eb714e2d6170e8122c069a0ba9aacf" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.mchange/mchange-commons-java@0.2.11?package-id=710e6cac5bf9d7a6", + "name": "mchange-commons-java", + "version": "0.2.11", + "cpe": "cpe:2.3:a:mchange-commons-java:mchange-commons-java:0.2.11:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.mchange/mchange-commons-java@0.2.11", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "2a6a6c1fe25f28f5a073171956ce6250813467ef" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.2.2-r3?arch=x86_64&distro=alpine-3.14.0&package-id=7122523f0dac0754", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.2.2-r3", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.2.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.2.2-r3?arch=x86_64&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.2.2-r4?arch=x86_64&distro=alpine-3.14.0&package-id=e981ed9fdcc8f274", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.2.2-r4", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.2.2-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.2.2-r4?arch=x86_64&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.2-r3?arch=x86_64&upstream=musl&distro=alpine-3.14.0&package-id=6a9ab08217e03637", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.2.2-r3", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.2.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.2.2-r3?arch=x86_64&upstream=musl&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.2-r4?arch=x86_64&upstream=musl&distro=alpine-3.14.0&package-id=254a7d4894b2b5f5", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.2.2-r4", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.2.2-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.2.2-r4?arch=x86_64&upstream=musl&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.1?package-id=224cfe4676787d32", + "group": "org.glassfish.hk2", + "name": "osgi-resource-locator", + "version": "1.0.1", + "licenses": [ + { + "license": { + "name": "https://glassfish.dev.java.net/nonav/public/CDDL+GPL.html" + } + } + ], + "cpe": "cpe:2.3:a:osgi-resource-locator:osgi-resource-locator:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.1", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "4ed2b2d4738aed5786cfa64cba5a332779c4c708" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/p11-kit@0.23.22-r0?arch=x86_64&distro=alpine-3.14.0&package-id=f294a166107fe6e2", + "publisher": "Fabian Affolter ", + "name": "p11-kit", + "version": "0.23.22-r0", + "description": "Library for loading and sharing PKCS#11 modules", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:p11-kit:p11-kit:0.23.22-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/p11-kit@0.23.22-r0?arch=x86_64&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://p11-glue.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/p11-kit-trust@0.23.22-r0?arch=x86_64&upstream=p11-kit&distro=alpine-3.14.0&package-id=7217ba22f4c611cd", + "publisher": "Fabian Affolter ", + "name": "p11-kit-trust", + "version": "0.23.22-r0", + "description": "System trust module from p11-kit", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:p11-kit-trust:p11-kit-trust:0.23.22-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/p11-kit-trust@0.23.22-r0?arch=x86_64&upstream=p11-kit&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://p11-glue.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.quartz-scheduler/quartz@2.3.0?package-id=dc4697cb17463c55", + "group": "org.quartz-scheduler", + "name": "quartz", + "version": "2.3.0", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:quartz-scheduler:quartz:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.quartz-scheduler/quartz@2.3.0", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "a090397102a12f6241177c5d501835334bb7662a" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.3.2-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.14.0&package-id=f9f3f41ca590dd0a", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.3.2-r0", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.3.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.3.2-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.pliant.scheduler/scheduler@0.0.1-SNAPSHOT?package-id=4eadbd304d6746af", + "group": "io.pliant.scheduler", + "name": "scheduler", + "version": "0.0.1-SNAPSHOT", + "cpe": "cpe:2.3:a:springframework:scheduler:0.0.1-SNAPSHOT:*:*:*:*:*:*:*", + "purl": "pkg:maven/io.pliant.scheduler/scheduler@0.0.1-SNAPSHOT", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "36014b89b18b079f274062b23d4621d7a2c7599e" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.25?package-id=acf3f11bdb789270", + "group": "org.slf4j", + "name": "slf4j-api", + "version": "1.7.25", + "cpe": "cpe:2.3:a:slf4j-api:slf4j-api:1.7.25:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.25", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "da76ca59f6a57ee3102f8f9bd9cee742973efa8a" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.yaml/snakeyaml@1.29?package-id=721746b019aec5fd", + "group": "org.yaml", + "name": "snakeyaml", + "version": "1.29", + "licenses": [ + { + "license": { + "name": "http://www.apache.org/licenses/LICENSE-2.0.txt" + } + } + ], + "cpe": "cpe:2.3:a:snakeyaml:snakeyaml:1.29:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.yaml/snakeyaml@1.29", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "6d0cdafb2010f1297e574656551d7145240f6e25" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-aop/spring-aop@5.3.14?package-id=3ac76bc93e1a8f03", + "name": "spring-aop", + "version": "5.3.14", + "cpe": "cpe:2.3:a:spring-aop:spring-aop:5.3.14:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-aop/spring-aop@5.3.14", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "f049146a55991e89c0f04b9624f1f69e1763d80f" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-beans/spring-beans@5.3.14?package-id=99f686d0e15a48e0", + "name": "spring-beans", + "version": "5.3.14", + "cpe": "cpe:2.3:a:spring-beans:spring-beans:5.3.14:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-beans/spring-beans@5.3.14", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "24cc27af89edc1581a57bb15bc160d2353f40a0e" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot/spring-boot@2.6.2?package-id=15afccdb714652d8", + "name": "spring-boot", + "version": "2.6.2", + "cpe": "cpe:2.3:a:spring-boot:spring-boot:2.6.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot/spring-boot@2.6.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "bbf59f411320da665411692359ff511315d0ff91" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-autoconfigure/spring-boot-autoconfigure@2.6.2?package-id=35315b62217fbe06", + "name": "spring-boot-autoconfigure", + "version": "2.6.2", + "cpe": "cpe:2.3:a:spring-boot-autoconfigure:spring-boot-autoconfigure:2.6.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-autoconfigure/spring-boot-autoconfigure@2.6.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "7c91bce101d3f796cccbc1a6744c1ea389fff73f" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-boot-jarmode-layertools/spring-boot-jarmode-layertools@2.6.2?package-id=a6b8639052477852", + "name": "spring-boot-jarmode-layertools", + "version": "2.6.2", + "cpe": "cpe:2.3:a:spring-boot-jarmode-layertools:spring-boot-jarmode-layertools:2.6.2:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-boot-jarmode-layertools/spring-boot-jarmode-layertools@2.6.2", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "95f8a94acad93228895242b0bd5fa97e85529fd6" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-context/spring-context@5.3.14?package-id=c76f3604469161de", + "name": "spring-context", + "version": "5.3.14", + "cpe": "cpe:2.3:a:spring-context:spring-context:5.3.14:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-context/spring-context@5.3.14", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "ce6042492f042131f602bdc83fcb412b142bdac5" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-context-support/spring-context-support@5.3.14?package-id=507d3769f935823", + "name": "spring-context-support", + "version": "5.3.14", + "cpe": "cpe:2.3:a:spring-context-support:spring-context-support:5.3.14:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-context-support/spring-context-support@5.3.14", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "46292d1dbc02a0cc9a7850ec3165084a914da371" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-core/spring-core@5.3.14?package-id=82a5ba8580b81e15", + "name": "spring-core", + "version": "5.3.14", + "cpe": "cpe:2.3:a:springsource-spring-framework:springsource_spring_framework:5.3.14:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-core/spring-core@5.3.14", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "d87ad19f9d8b9a3f1a143db5a2be34c61751aaa2" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-expression/spring-expression@5.3.14?package-id=bb99db503aa6ef03", + "name": "spring-expression", + "version": "5.3.14", + "cpe": "cpe:2.3:a:spring-expression:spring-expression:5.3.14:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-expression/spring-expression@5.3.14", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "5cd4c568522b7084afac5d2ac6cb945b797b3f16" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-jcl/spring-jcl@5.3.14?package-id=6c6336b885ac413d", + "name": "spring-jcl", + "version": "5.3.14", + "cpe": "cpe:2.3:a:spring-jcl:spring-jcl:5.3.14:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-jcl/spring-jcl@5.3.14", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "ffcf745ed5ba32930771378316fd08e97986bec2" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/spring-tx/spring-tx@5.3.14?package-id=d53221eed4fc721f", + "name": "spring-tx", + "version": "5.3.14", + "cpe": "cpe:2.3:a:spring-tx:spring-tx:5.3.14:*:*:*:*:*:*:*", + "purl": "pkg:maven/spring-tx/spring-tx@5.3.14", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "03d80a1e051f071e9cd42fc99698bf9022862b5c" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.33.1-r2?arch=x86_64&upstream=busybox&distro=alpine-3.14.0&package-id=aadfbe26e0e8c00d", + "publisher": "Natanael Copa ", + "name": "ssl_client", + "version": "1.33.1-r2", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.33.1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.33.1-r2?arch=x86_64&upstream=busybox&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.33.1-r8?arch=x86_64&upstream=busybox&distro=alpine-3.14.0&package-id=3bf185518fada134", + "publisher": "Natanael Copa ", + "name": "ssl_client", + "version": "1.33.1-r8", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.33.1-r8:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.33.1-r8?arch=x86_64&upstream=busybox&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jvnet/tiger-types@1.4?package-id=49d81aafceedc7c1", + "group": "org.jvnet", + "name": "tiger-types", + "version": "1.4", + "cpe": "cpe:2.3:a:tiger-types:tiger-types:1.4:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.jvnet/tiger-types@1.4" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=alpine-3.14.0&package-id=3b72ad1745a99acd", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.11-r3", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.11-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.12-r3?arch=x86_64&distro=alpine-3.14.0&package-id=ff5aaa577609e046", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.12-r3", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.12-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.12-r3?arch=x86_64&distro=alpine-3.14.0", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.14.0", + "description": "Alpine Linux v3.14", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.14.0" + }, + "externalReferences": [ + { + "url": "https://bugs.alpinelinux.org/", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40azure/abort-controller@1.1.0?package-id=11423cec834cf110", + "name": "@azure/abort-controller", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@azure\\/abort-controller:\\@azure\\/abort-controller:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40azure/abort-controller@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40azure/core-auth@1.4.0?package-id=2506dc6455323255", + "name": "@azure/core-auth", + "version": "1.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@azure\\/core-auth:\\@azure\\/core-auth:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40azure/core-auth@1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40azure/core-client@1.7.2?package-id=9ddd7665128ccdfb", + "name": "@azure/core-client", + "version": "1.7.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@azure\\/core-client:\\@azure\\/core-client:1.7.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40azure/core-client@1.7.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40azure/core-http-compat@1.3.0?package-id=646436aa651ad071", + "name": "@azure/core-http-compat", + "version": "1.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@azure\\/core-http-compat:\\@azure\\/core-http-compat:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40azure/core-http-compat@1.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40azure/core-lro@2.5.2?package-id=14c64e99ba30e9d3", + "name": "@azure/core-lro", + "version": "2.5.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@azure\\/core-lro:\\@azure\\/core-lro:2.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40azure/core-lro@2.5.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40azure/core-paging@1.5.0?package-id=2041f5c065ffe83d", + "name": "@azure/core-paging", + "version": "1.5.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@azure\\/core-paging:\\@azure\\/core-paging:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40azure/core-paging@1.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40azure/core-rest-pipeline@1.10.3?package-id=3a380141c5a2bf50", + "name": "@azure/core-rest-pipeline", + "version": "1.10.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@azure\\/core-rest-pipeline:\\@azure\\/core-rest-pipeline:1.10.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40azure/core-rest-pipeline@1.10.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40azure/core-tracing@1.0.0-preview.12?package-id=b096e397ce2d81ff", + "name": "@azure/core-tracing", + "version": "1.0.0-preview.12", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@azure\\/core-tracing:\\@azure\\/core-tracing:1.0.0-preview.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40azure/core-tracing@1.0.0-preview.12" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40azure/core-util@1.3.1?package-id=91868b86ed729c99", + "name": "@azure/core-util", + "version": "1.3.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@azure\\/core-util:\\@azure\\/core-util:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40azure/core-util@1.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40azure/identity@1.5.2?package-id=224b1dc5564a6f07", + "name": "@azure/identity", + "version": "1.5.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@azure\\/identity:\\@azure\\/identity:1.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40azure/identity@1.5.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40azure/keyvault-keys@4.7.0?package-id=aaf9835925fa72c", + "name": "@azure/keyvault-keys", + "version": "4.7.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@azure\\/keyvault-keys:\\@azure\\/keyvault-keys:4.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40azure/keyvault-keys@4.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40azure/logger@1.0.4?package-id=651d30b616ff78f3", + "name": "@azure/logger", + "version": "1.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@azure\\/logger:\\@azure\\/logger:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40azure/logger@1.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40azure/ms-rest-azure-env@2.0.0?package-id=d930d660843037c4", + "name": "@azure/ms-rest-azure-env", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@azure\\/ms-rest-azure-env:\\@azure\\/ms-rest-azure-env:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40azure/ms-rest-azure-env@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40azure/ms-rest-js@2.6.6?package-id=fe4f0295171d8d64", + "name": "@azure/ms-rest-js", + "version": "2.6.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@azure\\/ms-rest-js:\\@azure\\/ms-rest-js:2.6.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40azure/ms-rest-js@2.6.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40azure/ms-rest-nodeauth@3.1.1?package-id=eab888787c00de5f", + "name": "@azure/ms-rest-nodeauth", + "version": "3.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@azure\\/ms-rest-nodeauth:\\@azure\\/ms-rest-nodeauth:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40azure/ms-rest-nodeauth@3.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40azure/msal-common@4.5.1?package-id=8f6cb77bfb24c078", + "name": "@azure/msal-common", + "version": "4.5.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@azure\\/msal-common:\\@azure\\/msal-common:4.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40azure/msal-common@4.5.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40azure/msal-node@1.0.0-beta.6?package-id=f6983ff1fffffbc7", + "name": "@azure/msal-node", + "version": "1.0.0-beta.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@azure\\/msal-node:\\@azure\\/msal-node:1.0.0-beta.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40azure/msal-node@1.0.0-beta.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40fast-csv/format@4.3.5?package-id=d7bbf57d1524f794", + "name": "@fast-csv/format", + "version": "4.3.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@fast-csv\\/format:\\@fast-csv\\/format:4.3.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40fast-csv/format@4.3.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40fast-csv/parse@4.3.6?package-id=a988c43ba1ede232", + "name": "@fast-csv/parse", + "version": "4.3.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@fast-csv\\/parse:\\@fast-csv\\/parse:4.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40fast-csv/parse@4.3.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40hapi/hoek@9.3.0?package-id=dfc7ed4b61f06d8c", + "name": "@hapi/hoek", + "version": "9.3.0", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@hapi\\/hoek:\\@hapi\\/hoek:9.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40hapi/hoek@9.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40hapi/topo@5.1.0?package-id=cb0bbf80daabb466", + "name": "@hapi/topo", + "version": "5.1.0", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@hapi\\/topo:\\@hapi\\/topo:5.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40hapi/topo@5.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40js-joda/core@3.2.0?package-id=67b3b2f65b07adab", + "name": "@js-joda/core", + "version": "3.2.0", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@js-joda\\/core:\\@js-joda\\/core:3.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40js-joda/core@3.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40opentelemetry/api@1.4.1?package-id=593eeeea33422937", + "name": "@opentelemetry/api", + "version": "1.4.1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:\\@opentelemetry\\/api:\\@opentelemetry\\/api:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40opentelemetry/api@1.4.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40panva/asn1.js@1.0.0?package-id=c8e65302abe99479", + "name": "@panva/asn1.js", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@panva\\/asn1.js:\\@panva\\/asn1.js:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40panva/asn1.js@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40sideway/address@4.1.4?package-id=1ea2eefe06a54f25", + "name": "@sideway/address", + "version": "4.1.4", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@sideway\\/address:\\@sideway\\/address:4.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40sideway/address@4.1.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40sideway/formula@3.0.1?package-id=e81f1bea574ff974", + "name": "@sideway/formula", + "version": "3.0.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@sideway\\/formula:\\@sideway\\/formula:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40sideway/formula@3.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40sideway/pinpoint@2.0.0?package-id=f89ae43244c63b1f", + "name": "@sideway/pinpoint", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@sideway\\/pinpoint:\\@sideway\\/pinpoint:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40sideway/pinpoint@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40tediousjs/connection-string@0.3.0?package-id=10ad6ff87e2088f5", + "name": "@tediousjs/connection-string", + "version": "0.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@tediousjs\\/connection-string:\\@tediousjs\\/connection-string:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40tediousjs/connection-string@0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40tootallnate/once@2.0.0?package-id=72cdc9bd2ed3fd0f", + "name": "@tootallnate/once", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@tootallnate\\/once:\\@tootallnate\\/once:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40tootallnate/once@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/body-parser@1.19.2?package-id=6f9a5a97d256a43f", + "name": "@types/body-parser", + "version": "1.19.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/body-parser:\\@types\\/body-parser:1.19.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/body-parser@1.19.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/connect@3.4.35?package-id=153356e88e8dda78", + "name": "@types/connect", + "version": "3.4.35", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/connect:\\@types\\/connect:3.4.35:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/connect@3.4.35" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/express@4.17.17?package-id=5971111e043e694e", + "name": "@types/express", + "version": "4.17.17", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/express:\\@types\\/express:4.17.17:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/express@4.17.17" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/express-serve-static-core@4.17.33?package-id=9dc9470269359489", + "name": "@types/express-serve-static-core", + "version": "4.17.33", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/express-serve-static-core:\\@types\\/express-serve-static-core:4.17.33:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/express-serve-static-core@4.17.33" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/jsonwebtoken@8.5.9?package-id=247862396db178a8", + "name": "@types/jsonwebtoken", + "version": "8.5.9", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/jsonwebtoken:\\@types\\/jsonwebtoken:8.5.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/jsonwebtoken@8.5.9" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/mime@3.0.1?package-id=60c5899602e48814", + "name": "@types/mime", + "version": "3.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/mime:\\@types\\/mime:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/mime@3.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/node@14.18.42?package-id=6190c1b84651a693", + "name": "@types/node", + "version": "14.18.42", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/node:\\@types\\/node:14.18.42:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/node@14.18.42" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/qs@6.9.7?package-id=b72bb411c6c145bc", + "name": "@types/qs", + "version": "6.9.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/qs:\\@types\\/qs:6.9.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/qs@6.9.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/range-parser@1.2.4?package-id=b0e966b06d5708ba", + "name": "@types/range-parser", + "version": "1.2.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/range-parser:\\@types\\/range-parser:1.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/range-parser@1.2.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/serve-static@1.15.1?package-id=968e77e09ffbea88", + "name": "@types/serve-static", + "version": "1.15.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/serve-static:\\@types\\/serve-static:1.15.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/serve-static@1.15.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/stoppable@1.1.1?package-id=ffff93d62159b673", + "name": "@types/stoppable", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/stoppable:\\@types\\/stoppable:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/stoppable@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40xmldom/xmldom@0.8.7?package-id=70b6e12290b2ea87", + "name": "@xmldom/xmldom", + "version": "0.8.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@xmldom\\/xmldom:\\@xmldom\\/xmldom:0.8.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40xmldom/xmldom@0.8.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/abort-controller@3.0.0?package-id=2d2118b0a97fb9c7", + "name": "abort-controller", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:abort-controller:abort-controller:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/abort-controller@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/abstract-logging@2.0.1?package-id=366cc5c49b6b0cf5", + "name": "abstract-logging", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:abstract-logging:abstract-logging:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/abstract-logging@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/acorn@8.8.2?package-id=4cee9549cfc133a5", + "name": "acorn", + "version": "8.8.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:acorn:acorn:8.8.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/acorn@8.8.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/acorn-walk@8.2.0?package-id=a1aa765228bf451f", + "name": "acorn-walk", + "version": "8.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:acorn-walk:acorn-walk:8.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/acorn-walk@8.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/adal-node@0.2.4?package-id=93a22c584b592ee2", + "name": "adal-node", + "version": "0.2.4", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:adal-node:adal-node:0.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/adal-node@0.2.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/adm-zip@0.5.10?package-id=c280ef75808fc160", + "name": "adm-zip", + "version": "0.5.10", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:adm-zip:adm-zip:0.5.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/adm-zip@0.5.10" + }, + { + "type": "library", + "bom-ref": "pkg:npm/agent-base@6.0.2?package-id=5108dbd3b615483c", + "name": "agent-base", + "version": "6.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:agent-base:agent-base:6.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/agent-base@6.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ajv@6.10.0?package-id=eadf273c9f89d2f8", + "name": "ajv", + "version": "6.10.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ajv:ajv:6.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ajv@6.10.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/amqplib@0.8.0?package-id=ff9e9fce295201c6", + "name": "amqplib", + "version": "0.8.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:amqplib:amqplib:0.8.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/amqplib@0.8.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@3.0.1?package-id=42c9e6d73f370617", + "name": "ansi-regex", + "version": "3.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@3.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-styles@4.3.0?package-id=32a623a574dfd25", + "name": "ansi-styles", + "version": "4.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@4.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/archiver@5.3.1?package-id=7d1e6daa01902ab9", + "name": "archiver", + "version": "5.3.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:archiver:archiver:5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/archiver@5.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/archiver-utils@2.1.0?package-id=fb8748d38a8f9d94", + "name": "archiver-utils", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:archiver-utils:archiver-utils:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/archiver-utils@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/argparse@1.0.10?package-id=6f7ef639728134c2", + "name": "argparse", + "version": "1.0.10", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:argparse:argparse:1.0.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/argparse@1.0.10" + }, + { + "type": "library", + "bom-ref": "pkg:npm/arrify@2.0.1?package-id=173785c10c13c86", + "name": "arrify", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:arrify:arrify:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/arrify@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/asn1@0.2.3?package-id=b15c6f19148d0d36", + "name": "asn1", + "version": "0.2.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:asn1:asn1:0.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/asn1@0.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/asn1-ber@1.2.2?package-id=1b5b706a7e5e39fc", + "name": "asn1-ber", + "version": "1.2.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:asn1-ber:asn1-ber:1.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/asn1-ber@1.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/assert-plus@1.0.0?package-id=5390131abace4c0", + "name": "assert-plus", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:assert-plus:assert-plus:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/assert-plus@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/astral-regex@1.0.0?package-id=c211cde80b2c1f30", + "name": "astral-regex", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:astral-regex:astral-regex:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/astral-regex@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/async@3.2.4?package-id=3b25272da5bf5383", + "name": "async", + "version": "3.2.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:async:async:3.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/async@3.2.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/async-limiter@1.0.1?package-id=37f39b275bd1ee5", + "name": "async-limiter", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:async-limiter:async-limiter:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/async-limiter@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/asynckit@0.4.0?package-id=4cfcce01cadf2d8d", + "name": "asynckit", + "version": "0.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:asynckit:asynckit:0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/asynckit@0.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/aws-sign2@0.7.0?package-id=f85b64dcabe1f3b7", + "name": "aws-sign2", + "version": "0.7.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:aws-sign2:aws-sign2:0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aws-sign2@0.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/aws4@1.8.0?package-id=b81f07df77ac4843", + "name": "aws4", + "version": "1.8.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:aws4:aws4:1.8.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aws4@1.8.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/axios@0.21.4?package-id=b2963fcf94c5008f", + "name": "axios", + "version": "0.21.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:axios:axios:0.21.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/axios@0.21.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/backoff@2.5.0?package-id=b25215831e3b5aa1", + "name": "backoff", + "version": "2.5.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:backoff:backoff:2.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/backoff@2.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/balanced-match@1.0.2?package-id=cb6b0119ddbab112", + "name": "balanced-match", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/balanced-match@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/base64-js@1.5.1?package-id=695551d0f1012f91", + "name": "base64-js", + "version": "1.5.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:base64-js:base64-js:1.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/base64-js@1.5.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/base64url@3.0.1?package-id=537ad19ac0056d7c", + "name": "base64url", + "version": "3.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:base64url:base64url:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/base64url@3.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2?package-id=935adf4faa5810fe", + "name": "bcrypt-pbkdf", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:bcrypt-pbkdf:bcrypt-pbkdf:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/bcrypt-pbkdf@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/big-integer@1.6.51?package-id=ceb6273775691db9", + "name": "big-integer", + "version": "1.6.51", + "licenses": [ + { + "license": { + "id": "Unlicense" + } + } + ], + "cpe": "cpe:2.3:a:big-integer:big-integer:1.6.51:*:*:*:*:*:*:*", + "purl": "pkg:npm/big-integer@1.6.51" + }, + { + "type": "library", + "bom-ref": "pkg:npm/bignumber.js@9.1.1?package-id=5349ee3a177f8ae1", + "name": "bignumber.js", + "version": "9.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bignumber.js:bignumber.js:9.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/bignumber.js@9.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/bin-build@3.0.0?package-id=d59b78bfb221e859", + "name": "bin-build", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bin-build:bin-build:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/bin-build@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/binary@0.3.0?package-id=246c87153112ab52", + "name": "binary", + "version": "0.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:binary:binary:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/binary@0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/binaryheap@0.0.3?package-id=d33723c3648cad62", + "name": "binaryheap", + "version": "0.0.3", + "cpe": "cpe:2.3:a:binaryheap:binaryheap:0.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/binaryheap@0.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/bitsyntax@0.1.0?package-id=f0ea24159e69f491", + "name": "bitsyntax", + "version": "0.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bitsyntax:bitsyntax:0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/bitsyntax@0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/bl@4.1.0?package-id=480c2300eda438dc", + "name": "bl", + "version": "4.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bl:bl:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/bl@4.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/bluebird@3.7.2?package-id=b78a7f922dc9e95d", + "name": "bluebird", + "version": "3.7.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bluebird:bluebird:3.7.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/bluebird@3.7.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=5a34efcf67357245", + "name": "brace-expansion", + "version": "1.1.11", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11" + }, + { + "type": "library", + "bom-ref": "pkg:npm/bson@1.1.6?package-id=ef159f383f13c1e1", + "name": "bson", + "version": "1.1.6", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:bson:bson:1.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/bson@1.1.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer@5.7.1?package-id=2eb88003f2fa2648", + "name": "buffer", + "version": "5.7.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer:buffer:5.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer@5.7.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-alloc@1.2.0?package-id=927d6e2deda9b7fb", + "name": "buffer-alloc", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-alloc:buffer-alloc:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-alloc@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-alloc-unsafe@1.1.0?package-id=951f5a542c211f90", + "name": "buffer-alloc-unsafe", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-alloc-unsafe:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-alloc-unsafe@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-crc32@0.2.13?package-id=b90b276a6ab8ea4b", + "name": "buffer-crc32", + "version": "0.2.13", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-crc32:buffer-crc32:0.2.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-crc32@0.2.13" + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-equal-constant-time@1.0.1?package-id=ebc6cb6a4f293753", + "name": "buffer-equal-constant-time", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:buffer-equal-constant-time:buffer-equal-constant-time:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-equal-constant-time@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-fill@1.0.0?package-id=5e1dbb9ba7ac1c8a", + "name": "buffer-fill", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-fill:buffer-fill:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-fill@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-from@1.1.2?package-id=24ef8c5078f78a00", + "name": "buffer-from", + "version": "1.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-from:buffer-from:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-from@1.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-indexof-polyfill@1.0.2?package-id=1bf50c5676c8ed1", + "name": "buffer-indexof-polyfill", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-indexof-polyfill:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-indexof-polyfill@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-more-ints@1.0.0?package-id=bad5a95b993345e3", + "name": "buffer-more-ints", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-more-ints:buffer-more-ints:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-more-ints@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-writer@2.0.0?package-id=b7c4bd65333b5a6e", + "name": "buffer-writer", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-writer:buffer-writer:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-writer@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffercursor@0.0.12?package-id=ceb4c032f4af0d3a", + "name": "buffercursor", + "version": "0.0.12", + "cpe": "cpe:2.3:a:buffercursor:buffercursor:0.0.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffercursor@0.0.12" + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffers@0.1.1?package-id=c23d403946247971", + "name": "buffers", + "version": "0.1.1", + "cpe": "cpe:2.3:a:buffers:buffers:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffers@0.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/buildcheck@0.0.6?package-id=b566387558aabe2e", + "name": "buildcheck", + "version": "0.0.6", + "cpe": "cpe:2.3:a:buildcheck:buildcheck:0.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/buildcheck@0.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/call-bind@1.0.2?package-id=3716eae3fd07393a", + "name": "call-bind", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:call-bind:call-bind:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/call-bind@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/caseless@0.12.0?package-id=810c24f06aebfc6a", + "name": "caseless", + "version": "0.12.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:caseless:caseless:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/caseless@0.12.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/caw@2.0.1?package-id=bc45252557842f91", + "name": "caw", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:caw:caw:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/caw@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/chainsaw@0.1.0?package-id=c10b4be093e9a307", + "name": "chainsaw", + "version": "0.1.0", + "licenses": [ + { + "license": { + "name": "MIT/X11" + } + } + ], + "cpe": "cpe:2.3:a:chainsaw:chainsaw:0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/chainsaw@0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/charenc@0.0.2?package-id=9a85c18b5f28e52c", + "name": "charenc", + "version": "0.0.2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:charenc:charenc:0.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/charenc@0.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/chownr@1.1.4?package-id=8b60213f0177e0", + "name": "chownr", + "version": "1.1.4", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:chownr:chownr:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/chownr@1.1.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cliui@8.0.1?package-id=50dbf73e876c2553", + "name": "cliui", + "version": "8.0.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cliui:cliui:8.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/cliui@8.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/clone@2.1.2?package-id=4b667ae9156999fe", + "name": "clone", + "version": "2.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clone:clone:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/clone@2.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-convert@2.0.1?package-id=7079296802bc0a1c", + "name": "color-convert", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-name@1.1.4?package-id=ac535df053d9fcde", + "name": "color-name", + "version": "1.1.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/combined-stream@1.0.7?package-id=1b6c31aba554d18d", + "name": "combined-stream", + "version": "1.0.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:combined-stream:combined-stream:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/combined-stream@1.0.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/commander@2.20.3?package-id=c0490df2a859f33d", + "name": "commander", + "version": "2.20.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:commander:commander:2.20.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/commander@2.20.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/commist@1.1.0?package-id=79067e2b11ef98ef", + "name": "commist", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:commist:commist:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/commist@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/compress-commons@4.1.1?package-id=ec9310f12bf9f6e5", + "name": "compress-commons", + "version": "4.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:compress-commons:compress-commons:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/compress-commons@4.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=9a019e4863875fb3", + "name": "concat-map", + "version": "0.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-map@0.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-stream@2.0.0?package-id=a7264ebd9a657cd7", + "name": "concat-stream", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-stream:concat-stream:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-stream@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/config-chain@1.1.13?package-id=dbc6192261bb775b", + "name": "config-chain", + "version": "1.1.13", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:config-chain:config-chain:1.1.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/config-chain@1.1.13" + }, + { + "type": "library", + "bom-ref": "pkg:npm/content-disposition@0.5.4?package-id=3f23125685d33bb1", + "name": "content-disposition", + "version": "0.5.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:content-disposition:content-disposition:0.5.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/content-disposition@0.5.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cookie@0.4.2?package-id=8fb98f10137c1f52", + "name": "cookie", + "version": "0.4.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie:cookie:0.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie@0.4.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/core-util-is@1.0.2?package-id=fec8addd97f2c2cb", + "name": "core-util-is", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:core-util-is:core-util-is:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/core-util-is@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cpu-features@0.0.7?package-id=1c9e7a840a1d5000", + "name": "cpu-features", + "version": "0.0.7", + "cpe": "cpe:2.3:a:cpu-features:cpu-features:0.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/cpu-features@0.0.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/crc-32@1.2.2?package-id=24b44b7c5a36d590", + "name": "crc-32", + "version": "1.2.2", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:crc-32:crc-32:1.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/crc-32@1.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/crc32-stream@4.0.2?package-id=14c2c8f54fab2e75", + "name": "crc32-stream", + "version": "4.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crc32-stream:crc32-stream:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/crc32-stream@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cross-spawn@5.1.0?package-id=da550a6c41ddb04d", + "name": "cross-spawn", + "version": "5.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cross-spawn:cross-spawn:5.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cross-spawn@5.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/crypt@0.0.2?package-id=da721c03add8f70a", + "name": "crypt", + "version": "0.0.2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:crypt:crypt:0.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/crypt@0.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/dank-each@1.0.0?package-id=933fd4351eef0e51", + "name": "dank-each", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dank-each:dank-each:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/dank-each@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/dank-map@0.1.0?package-id=dcb70e5d584759cd", + "name": "dank-map", + "version": "0.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dank-map:dank-map:0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/dank-map@0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/dashdash@1.14.1?package-id=1f0eeaff816ac0ca", + "name": "dashdash", + "version": "1.14.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dashdash:dashdash:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/dashdash@1.14.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/date-utils@1.2.21?package-id=e6015b34c2d44f1", + "name": "date-utils", + "version": "1.2.21", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:date-utils:date-utils:1.2.21:*:*:*:*:*:*:*", + "purl": "pkg:npm/date-utils@1.2.21" + }, + { + "type": "library", + "bom-ref": "pkg:npm/dayjs@1.11.7?package-id=c02da3e262cb73c9", + "name": "dayjs", + "version": "1.11.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dayjs:dayjs:1.11.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/dayjs@1.11.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@2.6.9?package-id=33eed526d342c333", + "name": "debug", + "version": "2.6.9", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debug:debug:2.6.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@2.6.9" + }, + { + "type": "library", + "bom-ref": "pkg:npm/decompress@4.2.1?package-id=5ea82c39344b2b2f", + "name": "decompress", + "version": "4.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress:decompress:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/decompress@4.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/decompress-response@6.0.0?package-id=a5fd823feaa67a50", + "name": "decompress-response", + "version": "6.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress-response:decompress-response:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/decompress-response@6.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/decompress-tar@4.1.1?package-id=41aeb43f6bc07d01", + "name": "decompress-tar", + "version": "4.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress-tar:decompress-tar:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/decompress-tar@4.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/decompress-tarbz2@4.1.1?package-id=385b191ddfa126cf", + "name": "decompress-tarbz2", + "version": "4.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress-tarbz2:decompress-tarbz2:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/decompress-tarbz2@4.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/decompress-targz@4.1.1?package-id=b1f1020b832cf5e6", + "name": "decompress-targz", + "version": "4.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress-targz:decompress-targz:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/decompress-targz@4.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/decompress-unzip@4.0.1?package-id=14b41b679c8fae88", + "name": "decompress-unzip", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress-unzip:decompress-unzip:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/decompress-unzip@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/deep-extend@0.6.0?package-id=20cca47651026adb", + "name": "deep-extend", + "version": "0.6.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:deep-extend:deep-extend:0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/deep-extend@0.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/delayed-stream@1.0.0?package-id=cd45040a62713265", + "name": "delayed-stream", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:delayed-stream:delayed-stream:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/delayed-stream@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/denque@1.5.1?package-id=9b802287f4ae9f3c", + "name": "denque", + "version": "1.5.1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:denque:denque:1.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/denque@1.5.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/depd@2.0.0?package-id=6dbb13190f2f1d86", + "name": "depd", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:depd:depd:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/depd@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/detect-libc@2.0.1?package-id=899b76cb317fecaa", + "name": "detect-libc", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:detect-libc:detect-libc:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/detect-libc@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/diff@3.5.0?package-id=435d3990ee2bbf96", + "name": "diff", + "version": "3.5.0", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:diff:diff:3.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/diff@3.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/diff-lines@1.1.1?package-id=4c419e71a85bdeb8", + "name": "diff-lines", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:diff-lines:diff-lines:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/diff-lines@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/download@6.2.5?package-id=4e52499ce165e54f", + "name": "download", + "version": "6.2.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:download:download:6.2.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/download@6.2.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/duplexer2@0.1.4?package-id=514036286bddf371", + "name": "duplexer2", + "version": "0.1.4", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:duplexer2:duplexer2:0.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/duplexer2@0.1.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/duplexer3@0.1.5?package-id=540712303e0e5020", + "name": "duplexer3", + "version": "0.1.5", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:duplexer3:duplexer3:0.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/duplexer3@0.1.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/duplexify@3.7.1?package-id=db63fa71104335d3", + "name": "duplexify", + "version": "3.7.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:duplexify:duplexify:3.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/duplexify@3.7.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ecc-jsbn@0.1.2?package-id=cc938104d42b6760", + "name": "ecc-jsbn", + "version": "0.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ecc-jsbn:ecc-jsbn:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ecc-jsbn@0.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ecdsa-sig-formatter@1.0.11?package-id=cf5becb712919066", + "name": "ecdsa-sig-formatter", + "version": "1.0.11", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:ecdsa-sig-formatter:ecdsa-sig-formatter:1.0.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/ecdsa-sig-formatter@1.0.11" + }, + { + "type": "library", + "bom-ref": "pkg:npm/emitter-component@1.1.1?package-id=eb972e58579069f9", + "name": "emitter-component", + "version": "1.1.1", + "cpe": "cpe:2.3:a:emitter-component:emitter-component:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/emitter-component@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/emoji-regex@8.0.0?package-id=99ba91235e6f01bb", + "name": "emoji-regex", + "version": "8.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:emoji-regex:emoji-regex:8.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/emoji-regex@8.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/end-of-stream@1.4.4?package-id=4e51e9b811cd77c1", + "name": "end-of-stream", + "version": "1.4.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:end-of-stream:end-of-stream:1.4.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/end-of-stream@1.4.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/err-code@2.0.3?package-id=ecdcdaf74466154b", + "name": "err-code", + "version": "2.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:err-code:err-code:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/err-code@2.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/escalade@3.1.1?package-id=cde689cfccaa7d77", + "name": "escalade", + "version": "3.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:escalade:escalade:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/escalade@3.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/escape-string-regexp@1.0.5?package-id=a5426e144b8bae0e", + "name": "escape-string-regexp", + "version": "1.0.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:escape-string-regexp:escape-string-regexp:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/escape-string-regexp@1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/event-target-shim@5.0.1?package-id=77f0beb7ac74ebf6", + "name": "event-target-shim", + "version": "5.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:event-target-shim:event-target-shim:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/event-target-shim@5.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/events@3.3.0?package-id=937b3024552d5a0d", + "name": "events", + "version": "3.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:events:events:3.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/events@3.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/exceljs@4.3.0?package-id=8d8d02274c0e030c", + "name": "exceljs", + "version": "4.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:exceljs:exceljs:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/exceljs@4.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/execa@0.7.0?package-id=6c84caa9fd62b313", + "name": "execa", + "version": "0.7.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:execa:execa:0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/execa@0.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/expand-template@2.0.3?package-id=f97d55d03ec17cd4", + "name": "expand-template", + "version": "2.0.3", + "licenses": [ + { + "license": { + "name": "(MIT OR WTFPL)" + } + } + ], + "cpe": "cpe:2.3:a:expand-template:expand-template:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/expand-template@2.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ext-list@2.2.2?package-id=227497a47356b4ad", + "name": "ext-list", + "version": "2.2.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ext-list:ext-list:2.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ext-list@2.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ext-name@5.0.0?package-id=b127926513ba69ea", + "name": "ext-name", + "version": "5.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ext-name:ext-name:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ext-name@5.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/extend@3.0.2?package-id=1985b9e710517a00", + "name": "extend", + "version": "3.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:extend:extend:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/extend@3.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/extsprintf@1.3.0?package-id=6e3b15c094722f53", + "name": "extsprintf", + "version": "1.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:extsprintf:extsprintf:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/extsprintf@1.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-chunk-string@1.0.1?package-id=8e4eb75995f5b533", + "name": "fast-chunk-string", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-chunk-string:fast-chunk-string:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-chunk-string@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-csv@4.3.6?package-id=83093c4ee1514c20", + "name": "fast-csv", + "version": "4.3.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-csv:fast-csv:4.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-csv@4.3.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-deep-equal@3.1.3?package-id=2b7ef2a1cc68885b", + "name": "fast-deep-equal", + "version": "3.1.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-deep-equal:fast-deep-equal:3.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-deep-equal@3.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-json-patch@3.1.1?package-id=dc1dc6cba523588d", + "name": "fast-json-patch", + "version": "3.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-json-patch:fast-json-patch:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-json-patch@3.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-json-stable-stringify@2.0.0?package-id=4f3459ba7fc5deee", + "name": "fast-json-stable-stringify", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-json-stable-stringify:fast-json-stable-stringify:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-json-stable-stringify@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-text-encoding@1.0.6?package-id=3e4ec51769956bca", + "name": "fast-text-encoding", + "version": "1.0.6", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:fast-text-encoding:fast-text-encoding:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-text-encoding@1.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fd-slicer@1.1.0?package-id=7232ea3a7554f576", + "name": "fd-slicer", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fd-slicer:fd-slicer:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fd-slicer@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/file-type@5.2.0?package-id=e69e1929f5bd16ca", + "name": "file-type", + "version": "5.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:file-type:file-type:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/file-type@5.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/filename-reserved-regex@2.0.0?package-id=b95fdaa6cde49484", + "name": "filename-reserved-regex", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:filename-reserved-regex:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/filename-reserved-regex@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/filenamify@2.1.0?package-id=89f601871d8c7704", + "name": "filenamify", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:filenamify:filenamify:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/filenamify@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/follow-redirects@1.15.2?package-id=3691791795751fe5", + "name": "follow-redirects", + "version": "1.15.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:follow-redirects:follow-redirects:1.15.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/follow-redirects@1.15.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/forever-agent@0.6.1?package-id=ba24fa234f7565ab", + "name": "forever-agent", + "version": "0.6.1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:forever-agent:forever-agent:0.6.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/forever-agent@0.6.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/form-data@2.3.3?package-id=e8062fbce3e10599", + "name": "form-data", + "version": "2.3.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:form-data:form-data:2.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/form-data@2.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-constants@1.0.0?package-id=d23cbb5d1e356eaa", + "name": "fs-constants", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fs-constants:fs-constants:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-constants@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-extra@10.1.0?package-id=cb1a020f99c3b34f", + "name": "fs-extra", + "version": "10.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fs-extra:fs-extra:10.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-extra@10.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=4b68b3b85c9298b7", + "name": "fs.realpath", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs.realpath@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fstream@1.0.12?package-id=6aa064dac7c55c50", + "name": "fstream", + "version": "1.0.12", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fstream:fstream:1.0.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/fstream@1.0.12" + }, + { + "type": "library", + "bom-ref": "pkg:npm/function-bind@1.1.1?package-id=56c3a01f3c742c82", + "name": "function-bind", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:function-bind:function-bind:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/function-bind@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/gaxios@5.1.0?package-id=76ac5c02295c1ac9", + "name": "gaxios", + "version": "5.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:gaxios:gaxios:5.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/gaxios@5.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/gcp-metadata@5.2.0?package-id=8b09be7927d977e1", + "name": "gcp-metadata", + "version": "5.2.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:gcp-metadata:gcp-metadata:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/gcp-metadata@5.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/generate-function@2.3.1?package-id=cc8d8b1b871a73d6", + "name": "generate-function", + "version": "2.3.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:generate-function:generate-function:2.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/generate-function@2.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-caller-file@2.0.5?package-id=9dfebea6137e18ff", + "name": "get-caller-file", + "version": "2.0.5", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:get-caller-file:get-caller-file:2.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-caller-file@2.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-intrinsic@1.2.0?package-id=2f2414d89af5e416", + "name": "get-intrinsic", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:get-intrinsic:get-intrinsic:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-intrinsic@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-proxy@2.1.0?package-id=e1d6d3a523c2194", + "name": "get-proxy", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:get-proxy:get-proxy:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-proxy@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-ssl-certificate@2.3.3?package-id=8657a0f5de77391", + "name": "get-ssl-certificate", + "version": "2.3.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:get-ssl-certificate:get-ssl-certificate:2.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-ssl-certificate@2.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-stream@2.3.1?package-id=e5de72b525129103", + "name": "get-stream", + "version": "2.3.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:get-stream:get-stream:2.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-stream@2.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/getpass@0.1.7?package-id=8fbe9dc611eb5d31", + "name": "getpass", + "version": "0.1.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:getpass:getpass:0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/getpass@0.1.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/github-from-package@0.0.0?package-id=8b04e173750b94fd", + "name": "github-from-package", + "version": "0.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:github-from-package:github-from-package:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/github-from-package@0.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.2.3?package-id=773492798887d32d", + "name": "glob", + "version": "7.2.3", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:glob:glob:7.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/google-auth-library@8.7.0?package-id=3c7a04514b954856", + "name": "google-auth-library", + "version": "8.7.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:google-auth-library:google-auth-library:8.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/google-auth-library@8.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/google-p12-pem@4.0.1?package-id=7a78023e3cb79f63", + "name": "google-p12-pem", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:google-p12-pem:google-p12-pem:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/google-p12-pem@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/got@7.1.0?package-id=8923e1498bfd9dd4", + "name": "got", + "version": "7.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:got:got:7.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/got@7.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/graceful-fs@4.2.11?package-id=61ac1a1312177452", + "name": "graceful-fs", + "version": "4.2.11", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/graceful-fs@4.2.11" + }, + { + "type": "library", + "bom-ref": "pkg:npm/gtoken@6.1.2?package-id=73a563f8c7a5bd92", + "name": "gtoken", + "version": "6.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:gtoken:gtoken:6.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/gtoken@6.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/har-schema@2.0.0?package-id=b1a2ebde8b267bd6", + "name": "har-schema", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:har-schema:har-schema:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/har-schema@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/har-validator@5.1.3?package-id=ac87909b9cd270ec", + "name": "har-validator", + "version": "5.1.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:har-validator:har-validator:5.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/har-validator@5.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/has@1.0.3?package-id=8c4936faeea3f824", + "name": "has", + "version": "1.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has:has:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/has@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-symbol-support-x@1.4.2?package-id=5e9008252db5c744", + "name": "has-symbol-support-x", + "version": "1.4.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-symbol-support-x:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-symbol-support-x@1.4.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-symbols@1.0.3?package-id=7ce61f2841af382e", + "name": "has-symbols", + "version": "1.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-symbols:has-symbols:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-symbols@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-to-string-tag-x@1.4.1?package-id=2e0b4b9c0fc821b7", + "name": "has-to-string-tag-x", + "version": "1.4.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-to-string-tag-x:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-to-string-tag-x@1.4.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/help-me@3.0.0?package-id=603d25f748e5e9e0", + "name": "help-me", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:help-me:help-me:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/help-me@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-proxy-agent@5.0.0?package-id=1ea51dd78ab16e66", + "name": "http-proxy-agent", + "version": "5.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-proxy-agent:http-proxy-agent:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-proxy-agent@5.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-signature@1.2.0?package-id=eab31ef7fd190da4", + "name": "http-signature", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-signature:http-signature:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-signature@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/httpntlm@1.7.7?package-id=686f85abe23b00de", + "name": "httpntlm", + "version": "1.7.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:httpntlm:httpntlm:1.7.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/httpntlm@1.7.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/httpreq@0.5.2?package-id=a117cb304356570d", + "name": "httpreq", + "version": "0.5.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:httpreq:httpreq:0.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/httpreq@0.5.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/https-proxy-agent@5.0.1?package-id=fa298b452afab32c", + "name": "https-proxy-agent", + "version": "5.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:https-proxy-agent:https-proxy-agent:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/https-proxy-agent@5.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/iconv-lite@0.6.3?package-id=d61ec7b4dcdc2ade", + "name": "iconv-lite", + "version": "0.6.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:iconv-lite:iconv-lite:0.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/iconv-lite@0.6.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ieee754@1.2.1?package-id=50638262b62e811e", + "name": "ieee754", + "version": "1.2.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:ieee754:ieee754:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ieee754@1.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/immediate@3.0.6?package-id=1b5cd6b87ec2fe33", + "name": "immediate", + "version": "3.0.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:immediate:immediate:3.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/immediate@3.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/inflight@1.0.6?package-id=bb1fb09a39e4138f", + "name": "inflight", + "version": "1.0.6", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/inflight@1.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.3?package-id=76c148c0e64d7ca9", + "name": "inherits", + "version": "2.0.3", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ini@1.3.8?package-id=31d2f9dab70f6e2d", + "name": "ini", + "version": "1.3.8", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ini:ini:1.3.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/ini@1.3.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ip-regex@2.1.0?package-id=7145867c23651176", + "name": "ip-regex", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ip-regex:ip-regex:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ip-regex@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ipaddr.js@0.1.9?package-id=cdeccd7131cc7730", + "name": "ipaddr.js", + "version": "0.1.9", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ipaddr.js:ipaddr.js:0.1.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/ipaddr.js@0.1.9" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-buffer@1.1.6?package-id=8a6b8aeccfd36bf9", + "name": "is-buffer", + "version": "1.1.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-buffer:is-buffer:1.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-buffer@1.1.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-docker@2.2.1?package-id=d1c8eece895a6a7c", + "name": "is-docker", + "version": "2.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-docker:is-docker:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-docker@2.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-extglob@1.0.0?package-id=9bd06efc38021620", + "name": "is-extglob", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-extglob:is-extglob:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-extglob@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0?package-id=4b31e427326967cf", + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-glob@2.0.1?package-id=927d27e260c7aa94", + "name": "is-glob", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-glob:is-glob:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-glob@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-invalid-path@0.1.0?package-id=b41f9cac05cb592b", + "name": "is-invalid-path", + "version": "0.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-invalid-path:is-invalid-path:0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-invalid-path@0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-natural-number@4.0.1?package-id=e6c93265936b6c47", + "name": "is-natural-number", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-natural-number:is-natural-number:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-natural-number@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-object@1.0.2?package-id=34c318604551d0cf", + "name": "is-object", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-object:is-object:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-object@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-plain-obj@1.1.0?package-id=2e3359b4a0319950", + "name": "is-plain-obj", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-plain-obj:is-plain-obj:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-plain-obj@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-property@1.0.2?package-id=56ad99e7e3e52d48", + "name": "is-property", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-property:is-property:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-property@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-retry-allowed@1.2.0?package-id=d3c2758210c3daf5", + "name": "is-retry-allowed", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-retry-allowed:is-retry-allowed:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-retry-allowed@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-stream@2.0.1?package-id=b8ef357f765bad52", + "name": "is-stream", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-stream:is-stream:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-stream@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-typedarray@1.0.0?package-id=a8a7526a7be6ffaf", + "name": "is-typedarray", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-typedarray:is-typedarray:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-typedarray@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-valid-path@0.1.1?package-id=2254b989bf73c502", + "name": "is-valid-path", + "version": "0.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-valid-path:is-valid-path:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-valid-path@0.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-wsl@2.2.0?package-id=4d541859b87a4641", + "name": "is-wsl", + "version": "2.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-wsl:is-wsl:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-wsl@2.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/isarray@0.0.1?package-id=f2e7f731afad59b6", + "name": "isarray", + "version": "0.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isarray:isarray:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/isarray@0.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/isexe@2.0.0?package-id=52ecba3ab693bf39", + "name": "isexe", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isexe:isexe:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isexe@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/isstream@0.1.2?package-id=6de000f9ce16c1f", + "name": "isstream", + "version": "0.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isstream:isstream:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/isstream@0.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/isurl@1.0.0?package-id=e81c672d21cd7273", + "name": "isurl", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isurl:isurl:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isurl@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/joi@17.9.1?package-id=63f4c46d01f7c012", + "name": "joi", + "version": "17.9.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:joi:joi:17.9.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/joi@17.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jose@2.0.6?package-id=f76276a4f3e5a941", + "name": "jose", + "version": "2.0.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jose:jose:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/jose@2.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/js-sdsl@4.3.0?package-id=ab665d09c6328b7d", + "name": "js-sdsl", + "version": "4.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:js-sdsl:js-sdsl:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/js-sdsl@4.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsbi@3.2.5?package-id=310cc3efe77a9210", + "name": "jsbi", + "version": "3.2.5", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:jsbi:jsbi:3.2.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsbi@3.2.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsbn@0.1.1?package-id=180bcccaba7b462f", + "name": "jsbn", + "version": "0.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jsbn:jsbn:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsbn@0.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-bigint@1.0.0?package-id=316de12d7c18c3e0", + "name": "json-bigint", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-bigint:json-bigint:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-bigint@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-cycle@1.3.0?package-id=47076b86e448a8a4", + "name": "json-cycle", + "version": "1.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-cycle:json-cycle:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-cycle@1.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema@0.2.3?package-id=e4cfa487fbbcfb8e", + "name": "json-schema", + "version": "0.2.3", + "licenses": [ + { + "license": { + "name": "AFLv2.1" + } + }, + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:json-schema:json-schema:0.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema@0.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema-traverse@0.4.1?package-id=cbb857d85748c1e4", + "name": "json-schema-traverse", + "version": "0.4.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-schema-traverse:json-schema-traverse:0.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema-traverse@0.4.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-stringify-safe@5.0.1?package-id=2609f143751fda00", + "name": "json-stringify-safe", + "version": "5.0.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:json-stringify-safe:json-stringify-safe:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-stringify-safe@5.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-to-pretty-yaml@1.2.2?package-id=addb2f98a64e665d", + "name": "json-to-pretty-yaml", + "version": "1.2.2", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:json-to-pretty-yaml:json-to-pretty-yaml:1.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-to-pretty-yaml@1.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonfile@6.1.0?package-id=5d5f4a3fabf683ed", + "name": "jsonfile", + "version": "6.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jsonfile:jsonfile:6.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonfile@6.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonwebtoken@8.5.1?package-id=239172beb9f99257", + "name": "jsonwebtoken", + "version": "8.5.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jsonwebtoken:jsonwebtoken:8.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonwebtoken@8.5.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsprim@1.4.1?package-id=196b972bd5fc97eb", + "name": "jsprim", + "version": "1.4.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jsprim:jsprim:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsprim@1.4.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jszip@3.10.1?package-id=a09c134e88daa104", + "name": "jszip", + "version": "3.10.1", + "licenses": [ + { + "license": { + "name": "(MIT OR GPL-3.0-or-later)" + } + } + ], + "cpe": "cpe:2.3:a:jszip:jszip:3.10.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jszip@3.10.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jwa@2.0.0?package-id=f4fe935a19908bfd", + "name": "jwa", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jwa:jwa:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/jwa@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jwks-rsa@2.1.5?package-id=5ae37b454e4725ca", + "name": "jwks-rsa", + "version": "2.1.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jwks-rsa:jwks-rsa:2.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/jwks-rsa@2.1.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jws@4.0.0?package-id=8d3629e6bf66d851", + "name": "jws", + "version": "4.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jws:jws:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/jws@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/keypair@1.0.4?package-id=6bef9bc79912ca3c", + "name": "keypair", + "version": "1.0.4", + "licenses": [ + { + "license": { + "name": "BSD / GPL" + } + } + ], + "cpe": "cpe:2.3:a:keypair:keypair:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/keypair@1.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/keytar@7.9.0?package-id=77901beaec5aab3f", + "name": "keytar", + "version": "7.9.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:keytar:keytar:7.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/keytar@7.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lazystream@1.0.1?package-id=512111df2c100d88", + "name": "lazystream", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lazystream:lazystream:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lazystream@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ldap-filter@0.3.3?package-id=a6b5e76554979e4a", + "name": "ldap-filter", + "version": "0.3.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ldap-filter:ldap-filter:0.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/ldap-filter@0.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ldapjs@2.3.3?package-id=186cb6e9d4994ec3", + "name": "ldapjs", + "version": "2.3.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ldapjs:ldapjs:2.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/ldapjs@2.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/leven@2.1.0?package-id=3e4e6acddc385937", + "name": "leven", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:leven:leven:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/leven@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lie@3.3.0?package-id=c5fcf15e35110845", + "name": "lie", + "version": "3.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lie:lie:3.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lie@3.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/limiter@1.1.5?package-id=1a6cfa53ef5808c8", + "name": "limiter", + "version": "1.1.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:limiter:limiter:1.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/limiter@1.1.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/linked-queue@1.0.3?package-id=73d35dd58ea9f6a7", + "name": "linked-queue", + "version": "1.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:linked-queue:linked-queue:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/linked-queue@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/listenercount@1.0.1?package-id=2e936a5c015aafeb", + "name": "listenercount", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:listenercount:listenercount:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/listenercount@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash@4.17.21?package-id=7b2fcd3433197626", + "name": "lodash", + "version": "4.17.21", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash:lodash:4.17.21:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash@4.17.21" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.clonedeep@4.5.0?package-id=f763b6a52777c6a2", + "name": "lodash.clonedeep", + "version": "4.5.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.clonedeep:lodash.clonedeep:4.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.clonedeep@4.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.defaults@4.2.0?package-id=b9e19cde12279217", + "name": "lodash.defaults", + "version": "4.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.defaults:lodash.defaults:4.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.defaults@4.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.difference@4.5.0?package-id=1b83453e1f83ee57", + "name": "lodash.difference", + "version": "4.5.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.difference:lodash.difference:4.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.difference@4.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.escaperegexp@4.1.2?package-id=6f72a4ced382d171", + "name": "lodash.escaperegexp", + "version": "4.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.escaperegexp:lodash.escaperegexp:4.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.escaperegexp@4.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.flatten@4.4.0?package-id=14b40817f9764024", + "name": "lodash.flatten", + "version": "4.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.flatten:lodash.flatten:4.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.flatten@4.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.groupby@4.6.0?package-id=ca12556cff2112d1", + "name": "lodash.groupby", + "version": "4.6.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.groupby:lodash.groupby:4.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.groupby@4.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.includes@4.3.0?package-id=e585efeceee900f", + "name": "lodash.includes", + "version": "4.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.includes:lodash.includes:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.includes@4.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.isboolean@3.0.3?package-id=8335ba9468ec80f0", + "name": "lodash.isboolean", + "version": "3.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.isboolean:lodash.isboolean:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.isboolean@3.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.isequal@4.5.0?package-id=5251c4f818e928b1", + "name": "lodash.isequal", + "version": "4.5.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.isequal:lodash.isequal:4.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.isequal@4.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.isfunction@3.0.9?package-id=9c3a10266c70acb7", + "name": "lodash.isfunction", + "version": "3.0.9", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.isfunction:lodash.isfunction:3.0.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.isfunction@3.0.9" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.isinteger@4.0.4?package-id=bafca3985b5fdec1", + "name": "lodash.isinteger", + "version": "4.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.isinteger:lodash.isinteger:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.isinteger@4.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.isnil@4.0.0?package-id=431f88c7bfa63e04", + "name": "lodash.isnil", + "version": "4.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.isnil:lodash.isnil:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.isnil@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.isnumber@3.0.3?package-id=94c51348ad85344", + "name": "lodash.isnumber", + "version": "3.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.isnumber:lodash.isnumber:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.isnumber@3.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.isplainobject@4.0.6?package-id=7d6f7dea0776bfc", + "name": "lodash.isplainobject", + "version": "4.0.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.isplainobject:lodash.isplainobject:4.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.isplainobject@4.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.isstring@4.0.1?package-id=edda530a6a6d1b0d", + "name": "lodash.isstring", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.isstring:lodash.isstring:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.isstring@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.isundefined@3.0.1?package-id=906abdda987ba4ec", + "name": "lodash.isundefined", + "version": "3.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.isundefined:lodash.isundefined:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.isundefined@3.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.once@4.1.1?package-id=1f367f2e40133d59", + "name": "lodash.once", + "version": "4.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.once:lodash.once:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.once@4.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.union@4.6.0?package-id=c586216ff13bb1a4", + "name": "lodash.union", + "version": "4.6.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.union:lodash.union:4.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.union@4.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.uniq@4.5.0?package-id=68eaf8085c8e0a06", + "name": "lodash.uniq", + "version": "4.5.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.uniq:lodash.uniq:4.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.uniq@4.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/long@4.0.0?package-id=7d0bb950e353c5d9", + "name": "long", + "version": "4.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:long:long:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/long@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lowercase-keys@1.0.1?package-id=af1169441f2c0bdb", + "name": "lowercase-keys", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lowercase-keys:lowercase-keys:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lowercase-keys@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lru-cache@6.0.0?package-id=8c02d6ee9bbcd9da", + "name": "lru-cache", + "version": "6.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lru-cache:lru-cache:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru-cache@6.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lru-memoizer@2.2.0?package-id=5e77fb8f02f52e85", + "name": "lru-memoizer", + "version": "2.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lru-memoizer:lru-memoizer:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru-memoizer@2.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ltrim@1.0.1?package-id=6961f2176cd9da4", + "name": "ltrim", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ltrim:ltrim:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ltrim@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/make-dir@1.3.0?package-id=e00431ed58e34879", + "name": "make-dir", + "version": "1.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:make-dir:make-dir:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-dir@1.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/md5@2.3.0?package-id=143470e05ab22daf", + "name": "md5", + "version": "2.3.0", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:md5:md5:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/md5@2.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/memory-pager@1.5.0?package-id=9cde7eea9b9531e8", + "name": "memory-pager", + "version": "1.5.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:memory-pager:memory-pager:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/memory-pager@1.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime@3.0.0?package-id=f8dfe8bc2bf8333c", + "name": "mime", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime:mime:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-db@1.38.0?package-id=9c29c8dc2d02516c", + "name": "mime-db", + "version": "1.38.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-db:mime-db:1.38.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-db@1.38.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-types@2.1.22?package-id=2b08e02a08672413", + "name": "mime-types", + "version": "2.1.22", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-types:mime-types:2.1.22:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-types@2.1.22" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mimic-response@3.1.0?package-id=3e8f0e728acab9b8", + "name": "mimic-response", + "version": "3.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mimic-response:mimic-response:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mimic-response@3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.1.2?package-id=9c5f83fd6498349d", + "name": "minimatch", + "version": "3.1.2", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimist@1.2.8?package-id=872011e67dd733e4", + "name": "minimist", + "version": "1.2.8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minimist:minimist:1.2.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimist@1.2.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp@0.5.6?package-id=e5d9aa06e4dc9993", + "name": "mkdirp", + "version": "0.5.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mkdirp:mkdirp:0.5.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp@0.5.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp-classic@0.5.3?package-id=9209863aa2d1321a", + "name": "mkdirp-classic", + "version": "0.5.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mkdirp-classic:mkdirp-classic:0.5.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp-classic@0.5.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/module-alias@2.2.1?package-id=58aa72890d941581", + "name": "module-alias", + "version": "2.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:module-alias:module-alias:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/module-alias@2.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/moment@2.29.4?package-id=b2d2faac48e64687", + "name": "moment", + "version": "2.29.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:moment:moment:2.29.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/moment@2.29.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mongodb@3.5.11?package-id=5c965149b57fc4c4", + "name": "mongodb", + "version": "3.5.11", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:mongodb:mongodb:3.5.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/mongodb@3.5.11" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mqtt@4.3.7?package-id=3dfb9d92a32e39fb", + "name": "mqtt", + "version": "4.3.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mqtt:mqtt:4.3.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/mqtt@4.3.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mqtt-packet@6.10.0?package-id=6d4a13033efafbf1", + "name": "mqtt-packet", + "version": "6.10.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mqtt-packet:mqtt-packet:6.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mqtt-packet@6.10.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mri@1.1.6?package-id=240a1fc952389136", + "name": "mri", + "version": "1.1.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mri:mri:1.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/mri@1.1.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.0.0?package-id=feb4188feae0109c", + "name": "ms", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ms:ms:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/msal@1.4.17?package-id=490d9fb4508cdc94", + "name": "msal", + "version": "1.4.17", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:msal:msal:1.4.17:*:*:*:*:*:*:*", + "purl": "pkg:npm/msal@1.4.17" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mssql@7.3.5?package-id=9808e2811d48a6ce", + "name": "mssql", + "version": "7.3.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mssql:mssql:7.3.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/mssql@7.3.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mysql2@2.3.3?package-id=e58d18da22da6a83", + "name": "mysql2", + "version": "2.3.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mysql2:mysql2:2.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/mysql2@2.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/named-placeholders@1.1.3?package-id=45591b6f07c34f9f", + "name": "named-placeholders", + "version": "1.1.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:named-placeholders:named-placeholders:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/named-placeholders@1.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/nan@2.17.0?package-id=30f65a817f752869", + "name": "nan", + "version": "2.17.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nan:nan:2.17.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/nan@2.17.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/napi-build-utils@1.0.2?package-id=91fe8bb48c613d82", + "name": "napi-build-utils", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:napi-build-utils:napi-build-utils:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/napi-build-utils@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/native-dns@0.7.0?package-id=4baf7a9de9c01aab", + "name": "native-dns", + "version": "0.7.0", + "cpe": "cpe:2.3:a:native-dns:native-dns:0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/native-dns@0.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/native-dns-cache@0.0.2?package-id=90af90d700cf54d6", + "name": "native-dns-cache", + "version": "0.0.2", + "cpe": "cpe:2.3:a:native-dns-cache:native-dns-cache:0.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/native-dns-cache@0.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/native-dns-packet@0.1.1?package-id=7e525552d425530f", + "name": "native-dns-packet", + "version": "0.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:native-dns-packet:native-dns-packet:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/native-dns-packet@0.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/native-duplexpair@1.0.0?package-id=b53dc9479eefc91b", + "name": "native-duplexpair", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:native-duplexpair:native-duplexpair:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/native-duplexpair@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/net@1.0.2?package-id=945c43271284705b", + "name": "net", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:net:net:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/net@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/net-snmp@2.10.1?package-id=73bfaeb8ccc0620f", + "name": "net-snmp", + "version": "2.10.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:net-snmp:net-snmp:2.10.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/net-snmp@2.10.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/netmask@2.0.2?package-id=7b8a537382e19f84", + "name": "netmask", + "version": "2.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:netmask:netmask:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/netmask@2.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-abi@3.40.0?package-id=845e4dabbed5418c", + "name": "node-abi", + "version": "3.40.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-abi:node-abi:3.40.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-abi@3.40.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-abort-controller@2.0.0?package-id=365fc27f037b2dc9", + "name": "node-abort-controller", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-abort-controller:node-abort-controller:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-abort-controller@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-addon-api@4.3.0?package-id=737c845459b5f28b", + "name": "node-addon-api", + "version": "4.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-addon-api:node-addon-api:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-addon-api@4.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-downloader-helper@2.1.6?package-id=9e9a8bd9d75dc13e", + "name": "node-downloader-helper", + "version": "2.1.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-downloader-helper:node-downloader-helper:2.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-downloader-helper@2.1.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-fetch@2.6.9?package-id=d393e37503d93a07", + "name": "node-fetch", + "version": "2.6.9", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-fetch:node-fetch:2.6.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-fetch@2.6.9" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-forge@0.9.2?package-id=63694c905ac251ac", + "name": "node-forge", + "version": "0.9.2", + "licenses": [ + { + "license": { + "name": "(BSD-3-Clause OR GPL-2.0)" + } + } + ], + "cpe": "cpe:2.3:a:node-forge:node-forge:0.9.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-forge@0.9.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-jq@2.3.5?package-id=3d658658aef7763", + "name": "node-jq", + "version": "2.3.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-jq:node-jq:2.3.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-jq@2.3.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/nodemailer@6.9.1?package-id=e3d87d856d4479cb", + "name": "nodemailer", + "version": "6.9.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nodemailer:nodemailer:6.9.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/nodemailer@6.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/nodemailer-cram-md5@1.0.0?package-id=c6aaa4a77580698c", + "name": "nodemailer-cram-md5", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:nodemailer-cram-md5:nodemailer-cram-md5:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/nodemailer-cram-md5@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/nodemailer-ntlm-auth@1.0.3?package-id=22141b4145606d8", + "name": "nodemailer-ntlm-auth", + "version": "1.0.3", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:nodemailer-ntlm-auth:nodemailer-ntlm-auth:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/nodemailer-ntlm-auth@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/normalize-path@3.0.0?package-id=f19edc9ce3987dc0", + "name": "normalize-path", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:normalize-path:normalize-path:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/normalize-path@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-conf@1.1.3?package-id=2ba23af7d43a4fe9", + "name": "npm-conf", + "version": "1.1.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:npm-conf:npm-conf:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-conf@1.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-run-path@2.0.2?package-id=e1df79664dbd98bd", + "name": "npm-run-path", + "version": "2.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:npm-run-path:npm-run-path:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-run-path@2.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/nslookup@1.1.1?package-id=939a5a3901e2c380", + "name": "nslookup", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nslookup:nslookup:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/nslookup@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/number-allocator@1.0.14?package-id=c14821c5f37e4114", + "name": "number-allocator", + "version": "1.0.14", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:number-allocator:number-allocator:1.0.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/number-allocator@1.0.14" + }, + { + "type": "library", + "bom-ref": "pkg:npm/oauth-sign@0.9.0?package-id=cd8ae3e717266c46", + "name": "oauth-sign", + "version": "0.9.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:oauth-sign:oauth-sign:0.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/oauth-sign@0.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-assign@4.1.1?package-id=63fe6c472c96e9b5", + "name": "object-assign", + "version": "4.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-assign:object-assign:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-assign@4.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-inspect@1.12.3?package-id=a598678420ee2424", + "name": "object-inspect", + "version": "1.12.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-inspect:object-inspect:1.12.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-inspect@1.12.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-to-xml@2.0.0?package-id=9643952784075673", + "name": "object-to-xml", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-to-xml:object-to-xml:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-to-xml@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/once@1.4.0?package-id=8c181f3657a90187", + "name": "once", + "version": "1.4.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:once:once:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/once@1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/open@7.4.2?package-id=8ee0a1cd09b34e5d", + "name": "open", + "version": "7.4.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:open:open:7.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/open@7.4.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-cancelable@0.3.0?package-id=38a8c444277f3022", + "name": "p-cancelable", + "version": "0.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-cancelable:p-cancelable:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-cancelable@0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-event@1.3.0?package-id=19bb01f39139ca0b", + "name": "p-event", + "version": "1.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-event:p-event:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-event@1.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-finally@1.0.0?package-id=d6d5e10d2f8c93f2", + "name": "p-finally", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-finally:p-finally:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-finally@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-map-series@1.0.0?package-id=3a1ed4f0a02c2e01", + "name": "p-map-series", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-map-series:p-map-series:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-map-series@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-reduce@1.0.0?package-id=55f25bcbca1e2bbe", + "name": "p-reduce", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-reduce:p-reduce:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-reduce@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-timeout@1.2.1?package-id=9dff646575de5046", + "name": "p-timeout", + "version": "1.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-timeout:p-timeout:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-timeout@1.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/packet-reader@1.0.0?package-id=75df104dc2508940", + "name": "packet-reader", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:packet-reader:packet-reader:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/packet-reader@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pako@1.0.11?package-id=4ba4360c0ee4894b", + "name": "pako", + "version": "1.0.11", + "licenses": [ + { + "license": { + "name": "(MIT AND Zlib)" + } + } + ], + "cpe": "cpe:2.3:a:pako:pako:1.0.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/pako@1.0.11" + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=3d9c2ce1c4f890ec", + "name": "path-is-absolute", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-is-absolute@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-key@2.0.1?package-id=21cbd9787f5fce18", + "name": "path-key", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-key:path-key:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-key@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pend@1.2.0?package-id=457fc8a71608ab87", + "name": "pend", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pend:pend:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pend@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/performance-now@2.1.0?package-id=1f9e7e0e96f42aad", + "name": "performance-now", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:performance-now:performance-now:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/performance-now@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pg@8.10.0?package-id=fc2d59094476740f", + "name": "pg", + "version": "8.10.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pg:pg:8.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pg@8.10.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pg-connection-string@2.5.0?package-id=4bf430bf7b355676", + "name": "pg-connection-string", + "version": "2.5.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pg-connection-string:pg-connection-string:2.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pg-connection-string@2.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pg-int8@1.0.1?package-id=5a327a9285807839", + "name": "pg-int8", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:pg-int8:pg-int8:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/pg-int8@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pg-pool@3.6.0?package-id=ddd8ac662bde1ee7", + "name": "pg-pool", + "version": "3.6.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pg-pool:pg-pool:3.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pg-pool@3.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pg-protocol@1.6.0?package-id=d0aa079acaaa68db", + "name": "pg-protocol", + "version": "1.6.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pg-protocol:pg-protocol:1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pg-protocol@1.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pg-types@2.2.0?package-id=c76c4b7121c6ca47", + "name": "pg-types", + "version": "2.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pg-types:pg-types:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pg-types@2.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pgpass@1.0.5?package-id=59fefb3e80424722", + "name": "pgpass", + "version": "1.0.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pgpass:pgpass:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/pgpass@1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pify@2.3.0?package-id=55b205bbcedd5fa", + "name": "pify", + "version": "2.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pify:pify:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pify@2.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ping@0.2.3?package-id=2a119b2683893b01", + "name": "ping", + "version": "0.2.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ping:ping:0.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/ping@0.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pinkie@2.0.4?package-id=b7c6ded513ccb743", + "name": "pinkie", + "version": "2.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pinkie:pinkie:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/pinkie@2.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pinkie-promise@2.0.1?package-id=645c9d6e7d684f97", + "name": "pinkie-promise", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pinkie-promise:pinkie-promise:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/pinkie-promise@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postgres-array@2.0.0?package-id=a3ddeef146982962", + "name": "postgres-array", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postgres-array:postgres-array:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/postgres-array@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postgres-bytea@1.0.0?package-id=cd979817d491b54f", + "name": "postgres-bytea", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postgres-bytea:postgres-bytea:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/postgres-bytea@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postgres-date@1.0.7?package-id=14947a9420346c64", + "name": "postgres-date", + "version": "1.0.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postgres-date:postgres-date:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/postgres-date@1.0.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postgres-interval@1.2.0?package-id=3427cc0fa2dbad52", + "name": "postgres-interval", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postgres-interval:postgres-interval:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/postgres-interval@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/prebuild-install@7.1.1?package-id=26826962b14e8ff", + "name": "prebuild-install", + "version": "7.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:prebuild-install:prebuild-install:7.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/prebuild-install@7.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/precond@0.2.3?package-id=31f5729c7ac244df", + "name": "precond", + "version": "0.2.3", + "cpe": "cpe:2.3:a:precond:precond:0.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/precond@0.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/prepend-http@1.0.4?package-id=ca566c6220af4ac", + "name": "prepend-http", + "version": "1.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:prepend-http:prepend-http:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/prepend-http@1.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/process-nextick-args@2.0.1?package-id=c28603c1f456c61", + "name": "process-nextick-args", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:process-nextick-args:process-nextick-args:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/process-nextick-args@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-retry@2.0.1?package-id=5329cfb28c9e58ba", + "name": "promise-retry", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:promise-retry:promise-retry:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-retry@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/proto-list@1.2.4?package-id=d44eb14fee08fca8", + "name": "proto-list", + "version": "1.2.4", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:proto-list:proto-list:1.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/proto-list@1.2.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pseudomap@1.0.2?package-id=43d1566857e4decb", + "name": "pseudomap", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:pseudomap:pseudomap:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/pseudomap@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/psl@1.1.31?package-id=587802c2922e454c", + "name": "psl", + "version": "1.1.31", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:psl:psl:1.1.31:*:*:*:*:*:*:*", + "purl": "pkg:npm/psl@1.1.31" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pump@3.0.0?package-id=da201e2347bcef10", + "name": "pump", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pump:pump:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pump@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/punycode@2.1.1?package-id=54ff6dfd577aea1f", + "name": "punycode", + "version": "2.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:punycode:punycode:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/punycode@2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/q@1.5.1?package-id=6443ea5109bfc613", + "name": "q", + "version": "1.5.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:q:q:1.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/q@1.5.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/qs@6.11.1?package-id=c0e55e334ae8dd79", + "name": "qs", + "version": "6.11.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:qs:qs:6.11.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/qs@6.11.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/querystringify@2.2.0?package-id=24597ee2fc0e08d3", + "name": "querystringify", + "version": "2.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:querystringify:querystringify:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/querystringify@2.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/rc@1.2.8?package-id=480cef8701bbb78f", + "name": "rc", + "version": "1.2.8", + "licenses": [ + { + "license": { + "name": "(BSD-2-Clause OR MIT OR Apache-2.0)" + } + } + ], + "cpe": "cpe:2.3:a:rc:rc:1.2.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/rc@1.2.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@1.1.14?package-id=497e418df5c500b1", + "name": "readable-stream", + "version": "1.1.14", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:1.1.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@1.1.14" + }, + { + "type": "library", + "bom-ref": "pkg:npm/readdir-glob@1.1.3?package-id=fc4fe9d8037b845", + "name": "readdir-glob", + "version": "1.1.3", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:readdir-glob:readdir-glob:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/readdir-glob@1.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/reinterval@1.1.0?package-id=45a3d0f86d261b67", + "name": "reinterval", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:reinterval:reinterval:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/reinterval@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/remedial@1.0.8?package-id=4460d0f4af3fbabb", + "name": "remedial", + "version": "1.0.8", + "licenses": [ + { + "license": { + "name": "(MIT OR Apache-2.0)" + } + } + ], + "cpe": "cpe:2.3:a:remedial:remedial:1.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/remedial@1.0.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/remove-trailing-spaces@1.0.8?package-id=d62246009db91041", + "name": "remove-trailing-spaces", + "version": "1.0.8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:remove-trailing-spaces:remove-trailing-spaces:1.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/remove-trailing-spaces@1.0.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/request@2.88.0?package-id=e5c87bb07668db7d", + "name": "request", + "version": "2.88.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:request:request:2.88.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/request@2.88.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/request-promise@4.2.2?package-id=6261d3476fe7f423", + "name": "request-promise", + "version": "4.2.2", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:request-promise:request-promise:4.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/request-promise@4.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/request-promise-core@1.1.2?package-id=9e616d7cb63a8a71", + "name": "request-promise-core", + "version": "1.1.2", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:request-promise-core:request-promise-core:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/request-promise-core@1.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/request-promise-native@1.0.7?package-id=edbdd862a90272b3", + "name": "request-promise-native", + "version": "1.0.7", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:request-promise-native:request-promise-native:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/request-promise-native@1.0.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/require-directory@2.1.1?package-id=b8a78b7c52ddce8a", + "name": "require-directory", + "version": "2.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:require-directory:require-directory:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/require-directory@2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/require-from-string@1.2.1?package-id=5fae4181be224cf7", + "name": "require-from-string", + "version": "1.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:require-from-string:require-from-string:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/require-from-string@1.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/require_optional@1.0.1?package-id=66249e18c6fbe4fb", + "name": "require_optional", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:require-optional:require-optional:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/require_optional@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/requires-port@1.0.0?package-id=6a273325b79a1db9", + "name": "requires-port", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:requires-port:requires-port:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/requires-port@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/resolve-from@2.0.0?package-id=bb677a96dd4fadb5", + "name": "resolve-from", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:resolve-from:resolve-from:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/resolve-from@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/retry@0.12.0?package-id=1dfb175092fbc68", + "name": "retry", + "version": "0.12.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:retry:retry:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/retry@0.12.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/rfdc@1.3.0?package-id=81a08e2c21f173d9", + "name": "rfdc", + "version": "1.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:rfdc:rfdc:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/rfdc@1.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/rimraf@3.0.2?package-id=e94efbdfea35d1c0", + "name": "rimraf", + "version": "3.0.2", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:rimraf:rimraf:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/rimraf@3.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/rtrim@1.0.1?package-id=c3d41e2719500629", + "name": "rtrim", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:rtrim:rtrim:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/rtrim@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/runes@0.4.3?package-id=559f935bcd31feef", + "name": "runes", + "version": "0.4.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:runes:runes:0.4.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/runes@0.4.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=49d265d1cbcc6263", + "name": "safe-buffer", + "version": "5.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=8590432c1ecbd629", + "name": "safer-buffer", + "version": "2.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safer-buffer@2.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/samba-client@3.4.0?package-id=eec0d4bf5678e7b3", + "name": "samba-client", + "version": "3.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:samba-client:samba-client:3.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/samba-client@3.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/sanitizer@0.1.3?package-id=3a4f9a89128c1755", + "name": "sanitizer", + "version": "0.1.3", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:sanitizer:sanitizer:0.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/sanitizer@0.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/saslprep@1.0.3?package-id=9f5ebf5e0291bf9d", + "name": "saslprep", + "version": "1.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:saslprep:saslprep:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/saslprep@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/sax@1.2.4?package-id=f596b5408ec8797f", + "name": "sax", + "version": "1.2.4", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:sax:sax:1.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/sax@1.2.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/saxes@5.0.1?package-id=9c1810a97a8dad06", + "name": "saxes", + "version": "5.0.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:saxes:saxes:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/saxes@5.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/seek-bzip@1.0.6?package-id=a15f66380e96498b", + "name": "seek-bzip", + "version": "1.0.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:seek-bzip:seek-bzip:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/seek-bzip@1.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/selfsigned@1.10.14?package-id=d45ddba3ded024e5", + "name": "selfsigned", + "version": "1.10.14", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:selfsigned:selfsigned:1.10.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/selfsigned@1.10.14" + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver@5.7.1?package-id=5185dd7ea7f9862e", + "name": "semver", + "version": "5.7.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:semver:semver:5.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver@5.7.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/seq-queue@0.0.5?package-id=9b717ee05a7d527b", + "name": "seq-queue", + "version": "0.0.5", + "cpe": "cpe:2.3:a:seq-queue:seq-queue:0.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/seq-queue@0.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/setimmediate@1.0.5?package-id=4b03a62d8669b95a", + "name": "setimmediate", + "version": "1.0.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:setimmediate:setimmediate:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/setimmediate@1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/shebang-command@1.2.0?package-id=e4390e83449061fd", + "name": "shebang-command", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shebang-command:shebang-command:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/shebang-command@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/shebang-regex@1.0.0?package-id=765dd2a9bdfc7211", + "name": "shebang-regex", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shebang-regex:shebang-regex:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/shebang-regex@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/side-channel@1.0.4?package-id=aac091cedc631ec1", + "name": "side-channel", + "version": "1.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:side-channel:side-channel:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/side-channel@1.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/signal-exit@3.0.7?package-id=f77c386c34bd93bf", + "name": "signal-exit", + "version": "3.0.7", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:signal-exit:signal-exit:3.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/signal-exit@3.0.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/simple-concat@1.0.1?package-id=db88fdd27cdedb5d", + "name": "simple-concat", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:simple-concat:simple-concat:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/simple-concat@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/simple-get@4.0.1?package-id=eeb7995aca6c24bd", + "name": "simple-get", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:simple-get:simple-get:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/simple-get@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/smart-buffer@4.2.0?package-id=ebea64a17d71a1f", + "name": "smart-buffer", + "version": "4.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:smart-buffer:smart-buffer:4.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/smart-buffer@4.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/sort-keys@1.1.2?package-id=edd6027cc9ab9969", + "name": "sort-keys", + "version": "1.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sort-keys:sort-keys:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/sort-keys@1.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/sort-keys-length@1.0.1?package-id=5e84f11b046b6f8a", + "name": "sort-keys-length", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sort-keys-length:sort-keys-length:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/sort-keys-length@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/sparse-bitfield@3.0.3?package-id=715fb89e60bb0037", + "name": "sparse-bitfield", + "version": "3.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sparse-bitfield:sparse-bitfield:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/sparse-bitfield@3.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/split2@3.2.2?package-id=305d2d4a274748bb", + "name": "split2", + "version": "3.2.2", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:split2:split2:3.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/split2@3.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/sprintf-js@1.1.2?package-id=74e79f15ca88ecfc", + "name": "sprintf-js", + "version": "1.1.2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:sprintf-js:sprintf-js:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/sprintf-js@1.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/sqlstring@2.3.3?package-id=49fd1186fd97d952", + "name": "sqlstring", + "version": "2.3.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sqlstring:sqlstring:2.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/sqlstring@2.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ssh2@1.11.0?package-id=c3b54ec578fb35bf", + "name": "ssh2", + "version": "1.11.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ssh2:ssh2:1.11.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ssh2@1.11.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ssh2-sftp-client@9.0.4?package-id=cf14723b82cf691b", + "name": "ssh2-sftp-client", + "version": "9.0.4", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:ssh2-sftp-client:ssh2-sftp-client:9.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/ssh2-sftp-client@9.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ssh2-streams@0.2.1?package-id=4148ca35eb134307", + "name": "ssh2-streams", + "version": "0.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ssh2-streams:ssh2-streams:0.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ssh2-streams@0.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/sshpk@1.16.1?package-id=86482c783da2ad02", + "name": "sshpk", + "version": "1.16.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sshpk:sshpk:1.16.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/sshpk@1.16.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/stealthy-require@1.1.1?package-id=af959e080f157f47", + "name": "stealthy-require", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:stealthy-require:stealthy-require:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/stealthy-require@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/stoppable@1.1.0?package-id=21eff745d7236cfa", + "name": "stoppable", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stoppable:stoppable:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/stoppable@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/stream@0.0.2?package-id=67ed72f3f05feca2", + "name": "stream", + "version": "0.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stream:stream:0.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/stream@0.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/stream-shift@1.0.1?package-id=3eb8c981419452ac", + "name": "stream-shift", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stream-shift:stream-shift:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/stream-shift@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/streamsearch@0.1.2?package-id=bacba908aeedb20a", + "name": "streamsearch", + "version": "0.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:streamsearch:streamsearch:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/streamsearch@0.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-length@2.0.0?package-id=dcd437837b46e19", + "name": "string-length", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-length:string-length:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-length@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@4.2.3?package-id=4fe676119af3c825", + "name": "string-width", + "version": "4.2.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-width:string-width:4.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@4.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@0.10.31?package-id=b0ce766a25d5c3c3", + "name": "string_decoder", + "version": "0.10.31", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:0.10.31:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@0.10.31" + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@4.0.0?package-id=bf00dc61dadf0fe9", + "name": "strip-ansi", + "version": "4.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-dirs@2.1.0?package-id=dfbb388ffc8babe2", + "name": "strip-dirs", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-dirs:strip-dirs:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-dirs@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-eof@1.0.0?package-id=1bfac392049f7cc3", + "name": "strip-eof", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-eof:strip-eof:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-eof@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-final-newline@2.0.0?package-id=49cbc7c9cf3c24c6", + "name": "strip-final-newline", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-final-newline:strip-final-newline:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-final-newline@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-json-comments@2.0.1?package-id=1435ab4349134f2c", + "name": "strip-json-comments", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-json-comments:strip-json-comments:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-json-comments@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-outer@1.0.1?package-id=83335ae7dd346793", + "name": "strip-outer", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-outer:strip-outer:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-outer@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/syslog-client-tls@1.2.1?package-id=50db31ee2355e3f1", + "name": "syslog-client-tls", + "version": "1.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:syslog-client-tls:syslog-client-tls:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/syslog-client-tls@1.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tar-fs@2.1.1?package-id=3d824bed6c00ea98", + "name": "tar-fs", + "version": "2.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tar-fs:tar-fs:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/tar-fs@2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tar-stream@2.2.0?package-id=cb576c49f2bef8dc", + "name": "tar-stream", + "version": "2.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tar-stream:tar-stream:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tar-stream@2.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tarn@3.0.2?package-id=e063df59cb414f88", + "name": "tarn", + "version": "3.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tarn:tarn:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/tarn@3.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tcp-over-websockets@2.0.0?package-id=2b9da4871a2543a7", + "name": "tcp-over-websockets", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:tcp-over-websockets:tcp-over-websockets:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tcp-over-websockets@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tedious@11.8.0?package-id=cdc93fd7edc921f2", + "name": "tedious", + "version": "11.8.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tedious:tedious:11.8.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tedious@11.8.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/telnet-client@2.0.8?package-id=c1992eefa5dbbbe2", + "name": "telnet-client", + "version": "2.0.8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:telnet-client:telnet-client:2.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/telnet-client@2.0.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/temp-dir@1.0.0?package-id=69a30ea8bc89a443", + "name": "temp-dir", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:temp-dir:temp-dir:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/temp-dir@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tempfile@3.0.0?package-id=56ad1dc67a2459bd", + "name": "tempfile", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tempfile:tempfile:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tempfile@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/through@2.3.8?package-id=9fb5b0ac7a8f80d3", + "name": "through", + "version": "2.3.8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:through:through:2.3.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/through@2.3.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/timed-out@4.0.1?package-id=1285acf491264495", + "name": "timed-out", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:timed-out:timed-out:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/timed-out@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tmp@0.2.1?package-id=2331b71ccf2b4583", + "name": "tmp", + "version": "0.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tmp:tmp:0.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/tmp@0.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/to-buffer@1.1.1?package-id=e00d416d2ea1399b", + "name": "to-buffer", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:to-buffer:to-buffer:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/to-buffer@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tough-cookie@2.4.3?package-id=df86e1683e982f52", + "name": "tough-cookie", + "version": "2.4.3", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:tough-cookie:tough-cookie:2.4.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/tough-cookie@2.4.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tr46@0.0.3?package-id=ff1ef2214c0d3e88", + "name": "tr46", + "version": "0.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tr46:tr46:0.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/tr46@0.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/traverse@0.3.9?package-id=53adc222fde681b4", + "name": "traverse", + "version": "0.3.9", + "licenses": [ + { + "license": { + "name": "MIT/X11" + } + } + ], + "cpe": "cpe:2.3:a:traverse:traverse:0.3.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/traverse@0.3.9" + }, + { + "type": "library", + "bom-ref": "pkg:npm/trim-repeated@1.0.0?package-id=89f93d149e5cf575", + "name": "trim-repeated", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:trim-repeated:trim-repeated:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/trim-repeated@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/truncate@2.1.0?package-id=d91226667033e23a", + "name": "truncate", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:truncate:truncate:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/truncate@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/truncate-words@1.0.0?package-id=f397da253b12bb5d", + "name": "truncate-words", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:truncate-words:truncate-words:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/truncate-words@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslib@2.5.0?package-id=7677506dae7c7968", + "name": "tslib", + "version": "2.5.0", + "licenses": [ + { + "license": { + "id": "0BSD" + } + } + ], + "cpe": "cpe:2.3:a:tslib:tslib:2.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslib@2.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tunnel@0.0.6?package-id=9b7ac0b204ad2036", + "name": "tunnel", + "version": "0.0.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tunnel:tunnel:0.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/tunnel@0.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tunnel-agent@0.6.0?package-id=ca049987a582a89c", + "name": "tunnel-agent", + "version": "0.6.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:tunnel-agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tunnel-agent@0.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tweetnacl@0.14.5?package-id=49aff99863163f8d", + "name": "tweetnacl", + "version": "0.14.5", + "licenses": [ + { + "license": { + "id": "Unlicense" + } + } + ], + "cpe": "cpe:2.3:a:tweetnacl:tweetnacl:0.14.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/tweetnacl@0.14.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/typedarray@0.0.6?package-id=4f11f2d8665a995", + "name": "typedarray", + "version": "0.0.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:typedarray:typedarray:0.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/typedarray@0.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ultron@1.1.1?package-id=7afe554e7e1e2c78", + "name": "ultron", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ultron:ultron:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ultron@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/unbzip2-stream@1.4.3?package-id=e94ada5ff807aa4e", + "name": "unbzip2-stream", + "version": "1.4.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unbzip2-stream:unbzip2-stream:1.4.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/unbzip2-stream@1.4.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/underscore@1.13.6?package-id=a2d4ac377c698f3c", + "name": "underscore", + "version": "1.13.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:underscore:underscore:1.13.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/underscore@1.13.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/universalify@2.0.0?package-id=77c593967ba910e6", + "name": "universalify", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:universalify:universalify:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/universalify@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/unzipper@0.10.11?package-id=779c93967d20dda4", + "name": "unzipper", + "version": "0.10.11", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unzipper:unzipper:0.10.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/unzipper@0.10.11" + }, + { + "type": "library", + "bom-ref": "pkg:npm/uri-js@4.2.2?package-id=bdb26b64854d360e", + "name": "uri-js", + "version": "4.2.2", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:uri-js:uri-js:4.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/uri-js@4.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/url-parse@1.5.3?package-id=1079a2de95d8b792", + "name": "url-parse", + "version": "1.5.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:url-parse:url-parse:1.5.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/url-parse@1.5.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/url-parse-lax@1.0.0?package-id=128b7dd8377294e5", + "name": "url-parse-lax", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:url-parse-lax:url-parse-lax:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/url-parse-lax@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/url-to-options@1.0.1?package-id=4b2d010d7f0f658a", + "name": "url-to-options", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:url-to-options:url-to-options:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/url-to-options@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=9f39f1de5aacfdc1", + "name": "util-deprecate", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-deprecate@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/uuid@3.3.2?package-id=c14730b3aa075c3", + "name": "uuid", + "version": "3.3.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:uuid:uuid:3.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/uuid@3.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/vasync@2.2.1?package-id=a74a0eb0e1192243", + "name": "vasync", + "version": "2.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vasync:vasync:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/vasync@2.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/verror@1.10.0?package-id=7d34167865ed5df2", + "name": "verror", + "version": "1.10.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:verror:verror:1.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/verror@1.10.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/vm2@3.9.17?package-id=2a67bae6147150f6", + "name": "vm2", + "version": "3.9.17", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vm2:vm2:3.9.17:*:*:*:*:*:*:*", + "purl": "pkg:npm/vm2@3.9.17" + }, + { + "type": "library", + "bom-ref": "pkg:npm/webidl-conversions@3.0.1?package-id=e4d685e7c081d58a", + "name": "webidl-conversions", + "version": "3.0.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:webidl-conversions:webidl-conversions:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/webidl-conversions@3.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/websocket-stream@5.5.2?package-id=aee8d7a01a1a4d8a", + "name": "websocket-stream", + "version": "5.5.2", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:websocket-stream:websocket-stream:5.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/websocket-stream@5.5.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/whatwg-url@5.0.0?package-id=f773ab8ee6c0a467", + "name": "whatwg-url", + "version": "5.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:whatwg-url:whatwg-url:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/whatwg-url@5.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/which@1.3.1?package-id=c6dc767d8b803349", + "name": "which", + "version": "1.3.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:which:which:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/which@1.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrap-ansi@7.0.0?package-id=a7ec557ea4be7637", + "name": "wrap-ansi", + "version": "7.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:7.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrap-ansi@7.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=dd6d0718da9fb963", + "name": "wrappy", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrappy@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ws@3.3.3?package-id=8f22f16bf14cdcb1", + "name": "ws", + "version": "3.3.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ws:ws:3.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/ws@3.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/xml2js@0.4.23?package-id=8a1a1332606bd50f", + "name": "xml2js", + "version": "0.4.23", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:xml2js:xml2js:0.4.23:*:*:*:*:*:*:*", + "purl": "pkg:npm/xml2js@0.4.23" + }, + { + "type": "library", + "bom-ref": "pkg:npm/xmlbuilder@11.0.1?package-id=ea247fd9c6bc1e81", + "name": "xmlbuilder", + "version": "11.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:xmlbuilder:xmlbuilder:11.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/xmlbuilder@11.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/xmlchars@2.2.0?package-id=652829b3677ee0df", + "name": "xmlchars", + "version": "2.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:xmlchars:xmlchars:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/xmlchars@2.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/xmldom@0.3.0?package-id=fa680282cd6f4515", + "name": "xmldom", + "version": "0.3.0", + "licenses": [ + { + "license": { + "name": "(LGPL-2.0 OR MIT)" + } + } + ], + "cpe": "cpe:2.3:a:xmldom:xmldom:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/xmldom@0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/xpath@0.0.27?package-id=7b0515ef49c37f21", + "name": "xpath", + "version": "0.0.27", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:xpath:xpath:0.0.27:*:*:*:*:*:*:*", + "purl": "pkg:npm/xpath@0.0.27" + }, + { + "type": "library", + "bom-ref": "pkg:npm/xpath.js@1.1.0?package-id=57a2a0e61dfcfd91", + "name": "xpath.js", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:xpath.js:xpath.js:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/xpath.js@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/xtend@4.0.2?package-id=b451db5ef40dd530", + "name": "xtend", + "version": "4.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:xtend:xtend:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/xtend@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/y18n@5.0.8?package-id=5ea6ad91a0da81b9", + "name": "y18n", + "version": "5.0.8", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:y18n:y18n:5.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/y18n@5.0.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/yallist@4.0.0?package-id=b9ba8a2c34ea0780", + "name": "yallist", + "version": "4.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/yamljs@0.3.0?package-id=3d288a204b7dca48", + "name": "yamljs", + "version": "0.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:yamljs:yamljs:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/yamljs@0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/yargs@17.7.1?package-id=2273b4a5f5593327", + "name": "yargs", + "version": "17.7.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:yargs:yargs:17.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/yargs@17.7.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/yargs-parser@21.1.1?package-id=848966d4da7d78d2", + "name": "yargs-parser", + "version": "21.1.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yargs-parser:yargs-parser:21.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/yargs-parser@21.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/yauzl@2.10.0?package-id=e24663c0b2257231", + "name": "yauzl", + "version": "2.10.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:yauzl:yauzl:2.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/yauzl@2.10.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/zip-stream@4.1.0?package-id=3112e7c8747f2b66", + "name": "zip-stream", + "version": "4.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:zip-stream:zip-stream:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/zip-stream@4.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/./staging/src/k8s.io/api@(devel)?package-id=8c504ee48620498a", + "name": "./staging/src/k8s.io/api", + "version": "(devel)", + "cpe": "cpe:2.3:a:staging:src\\/k8s.io\\/api:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/./staging/src/k8s.io/api@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/./staging/src/k8s.io/apimachinery@(devel)?package-id=220bb807a073597d", + "name": "./staging/src/k8s.io/apimachinery", + "version": "(devel)", + "cpe": "cpe:2.3:a:staging:src\\/k8s.io\\/apimachinery:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/./staging/src/k8s.io/apimachinery@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/./staging/src/k8s.io/cli-runtime@(devel)?package-id=c03ef8ed2db7d259", + "name": "./staging/src/k8s.io/cli-runtime", + "version": "(devel)", + "cpe": "cpe:2.3:a:staging:src\\/k8s.io\\/cli-runtime:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/./staging/src/k8s.io/cli-runtime@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/./staging/src/k8s.io/client-go@(devel)?package-id=3da4e7a1466b3dea", + "name": "./staging/src/k8s.io/client-go", + "version": "(devel)", + "cpe": "cpe:2.3:a:staging:src\\/k8s.io\\/client-go:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/./staging/src/k8s.io/client-go@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/./staging/src/k8s.io/component-base@(devel)?package-id=a449ca6151d5ecf1", + "name": "./staging/src/k8s.io/component-base", + "version": "(devel)", + "cpe": "cpe:2.3:a:staging:src\\/k8s.io\\/component-base:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/./staging/src/k8s.io/component-base@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/./staging/src/k8s.io/component-helpers@(devel)?package-id=2eed2e7145e62a15", + "name": "./staging/src/k8s.io/component-helpers", + "version": "(devel)", + "cpe": "cpe:2.3:a:staging:src\\/k8s.io\\/component-helpers:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/./staging/src/k8s.io/component-helpers@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/./staging/src/k8s.io/kubectl@(devel)?package-id=de0a9f8a5d651442", + "name": "./staging/src/k8s.io/kubectl", + "version": "(devel)", + "cpe": "cpe:2.3:a:staging:src\\/k8s.io\\/kubectl:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/./staging/src/k8s.io/kubectl@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/./staging/src/k8s.io/metrics@(devel)?package-id=4fdf96d4b53f374e", + "name": "./staging/src/k8s.io/metrics", + "version": "(devel)", + "cpe": "cpe:2.3:a:staging:src\\/k8s.io\\/metrics:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/./staging/src/k8s.io/metrics@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.2.0-r3?arch=x86_64&distro=alpine-3.11.13&package-id=61f27796f703939", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.2.0-r3", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.2.0-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.2.0-r3?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.1-r2?arch=x86_64&distro=alpine-3.11.13&package-id=79f884384758c443", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.1-r2", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.1-r2?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.10.8-r0?arch=x86_64&distro=alpine-3.11.13&package-id=28993d8277c2c4f", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.10.8-r0", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.10.8-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.10.8-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "eb62c645e9680ee0", + "name": "busybox", + "version": "1.31.1", + "cpe": "cpe:2.3:a:busybox:busybox:1.31.1:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.31.1-r11?arch=x86_64&distro=alpine-3.11.13&package-id=3f3095cbef6e353", + "publisher": "Natanael Copa ", + "name": "busybox", + "version": "1.31.1-r11", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.31.1-r11:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.31.1-r11?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates@20191127-r2?arch=x86_64&distro=alpine-3.11.13&package-id=91490583c2f9b81b", + "publisher": "Natanael Copa ", + "name": "ca-certificates", + "version": "20191127-r2", + "description": "Common CA certificates PEM files from Mozilla", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20191127-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates@20191127-r2?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-cacert@20191127-r2?arch=x86_64&upstream=ca-certificates&distro=alpine-3.11.13&package-id=e135ce85ed757130", + "publisher": "Natanael Copa ", + "name": "ca-certificates-cacert", + "version": "20191127-r2", + "description": "Mozilla bundled certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-cacert:ca-certificates-cacert:20191127-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-cacert@20191127-r2?arch=x86_64&upstream=ca-certificates&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:golang/cloud.google.com/go@v0.97.0?package-id=c19586b9df3c7a14", + "name": "cloud.google.com/go", + "version": "v0.97.0", + "purl": "pkg:golang/cloud.google.com/go@v0.97.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/curl@7.79.1-r0?arch=x86_64&distro=alpine-3.11.13&package-id=d9c1833e179a6443", + "publisher": "Natanael Copa ", + "name": "curl", + "version": "7.79.1-r0", + "description": "URL retrival utility and library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:curl:curl:7.79.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/curl@7.79.1-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://curl.haxx.se/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest@v0.11.27?package-id=fe60404b9e3c0866", + "name": "github.com/Azure/go-autorest/autorest", + "version": "v0.11.27", + "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest:v0.11.27:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/go-autorest/autorest@v0.11.27" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.9.20?package-id=873ac1fa330e8fe1", + "name": "github.com/Azure/go-autorest/autorest/adal", + "version": "v0.9.20", + "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/adal:v0.9.20:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/adal@v0.9.20" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/date@v0.3.0?package-id=78f14f0bb0400efc", + "name": "github.com/Azure/go-autorest/autorest/date", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/date:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/date@v0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/go-autorest/logger@v0.2.1?package-id=f0f891d194b0a30b", + "name": "github.com/Azure/go-autorest/logger", + "version": "v0.2.1", + "cpe": "cpe:2.3:a:Azure:go-autorest\\/logger:v0.2.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/go-autorest/logger@v0.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/go-autorest/tracing@v0.6.0?package-id=6c81ba59d97a8733", + "name": "github.com/Azure/go-autorest/tracing", + "version": "v0.6.0", + "cpe": "cpe:2.3:a:Azure:go-autorest\\/tracing:v0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/go-autorest/tracing@v0.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/makenowjust/heredoc@v1.0.0?package-id=c62cf0203fee57b2", + "name": "github.com/MakeNowJust/heredoc", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:MakeNowJust:heredoc:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/MakeNowJust/heredoc@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/puerkitobio/purell@v1.1.1?package-id=6e3fe172793f5f", + "name": "github.com/PuerkitoBio/purell", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:PuerkitoBio:purell:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/PuerkitoBio/purell@v1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/puerkitobio/urlesc@v0.0.0-20170810143723-de5bf2ad4578?package-id=eb8d0318308efc37", + "name": "github.com/PuerkitoBio/urlesc", + "version": "v0.0.0-20170810143723-de5bf2ad4578", + "cpe": "cpe:2.3:a:PuerkitoBio:urlesc:v0.0.0-20170810143723-de5bf2ad4578:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/PuerkitoBio/urlesc@v0.0.0-20170810143723-de5bf2ad4578" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/chai2010/gettext-go@v1.0.2?package-id=b9404182e4ac7886", + "name": "github.com/chai2010/gettext-go", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:chai2010:gettext-go:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/chai2010/gettext-go@v1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1?package-id=c6969379e4ccf85d", + "name": "github.com/davecgh/go-spew", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:davecgh:go-spew:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/daviddengcn/go-colortext@v1.0.0?package-id=1c57de1c1df43d89", + "name": "github.com/daviddengcn/go-colortext", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:daviddengcn:go-colortext:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/daviddengcn/go-colortext@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/docker/distribution@v2.8.1+incompatible?package-id=ef2706a361249766", + "name": "github.com/docker/distribution", + "version": "v2.8.1+incompatible", + "cpe": "cpe:2.3:a:docker:distribution:v2.8.1\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/distribution@v2.8.1+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.8.0?package-id=fc2ca4a8df2bd60b", + "name": "github.com/emicklei/go-restful/v3", + "version": "v3.8.0", + "cpe": "cpe:2.3:a:emicklei:go-restful\\/v3:v3.8.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.8.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/evanphx/json-patch@v4.12.0+incompatible?package-id=e145ece2c9466355", + "name": "github.com/evanphx/json-patch", + "version": "v4.12.0+incompatible", + "cpe": "cpe:2.3:a:evanphx:json-patch:v4.12.0\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/evanphx/json-patch@v4.12.0+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/exponent-io/jsonpath@v0.0.0-20151013193312-d6023ce2651d?package-id=449d65077b2ab2bd", + "name": "github.com/exponent-io/jsonpath", + "version": "v0.0.0-20151013193312-d6023ce2651d", + "cpe": "cpe:2.3:a:exponent-io:jsonpath:v0.0.0-20151013193312-d6023ce2651d:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/exponent-io/jsonpath@v0.0.0-20151013193312-d6023ce2651d" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/fatih/camelcase@v1.0.0?package-id=e6c83c1797b8b972", + "name": "github.com/fatih/camelcase", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:fatih:camelcase:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fatih/camelcase@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/fvbommel/sortorder@v1.0.1?package-id=5fd7c07954ce275e", + "name": "github.com/fvbommel/sortorder", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:fvbommel:sortorder:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fvbommel/sortorder@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-errors/errors@v1.0.1?package-id=c0affd76def6a291", + "name": "github.com/go-errors/errors", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:go-errors:errors:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-errors/errors@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-logr/logr@v1.2.3?package-id=d5d0c25145ac4bbe", + "name": "github.com/go-logr/logr", + "version": "v1.2.3", + "cpe": "cpe:2.3:a:go-logr:logr:v1.2.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-logr/logr@v1.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5?package-id=d829f38ba86c2cb3", + "name": "github.com/go-openapi/jsonpointer", + "version": "v0.19.5", + "cpe": "cpe:2.3:a:go-openapi:jsonpointer:v0.19.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.19.5?package-id=dc40d16551a1fb96", + "name": "github.com/go-openapi/jsonreference", + "version": "v0.19.5", + "cpe": "cpe:2.3:a:go-openapi:jsonreference:v0.19.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-openapi/jsonreference@v0.19.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14?package-id=be19e7e1a88c805c", + "name": "github.com/go-openapi/swag", + "version": "v0.19.14", + "cpe": "cpe:2.3:a:go-openapi:swag:v0.19.14:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-openapi/swag@v0.19.14" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2?package-id=362fd233d97a1f20", + "name": "github.com/gogo/protobuf", + "version": "v1.3.2", + "cpe": "cpe:2.3:a:gogo:protobuf:v1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.2.0?package-id=ad6ea524b86e63d9", + "name": "github.com/golang-jwt/jwt/v4", + "version": "v4.2.0", + "cpe": "cpe:2.3:a:golang-jwt:jwt\\/v4:v4.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.2?package-id=c27e8e22a6267096", + "name": "github.com/golang/protobuf", + "version": "v1.5.2", + "cpe": "cpe:2.3:a:golang:protobuf:v1.5.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/btree@v1.0.1?package-id=81173f3262ddde3a", + "name": "github.com/google/btree", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:google:btree:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/btree@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs?package-id=2981a0d4c6890d54", + "name": "github.com/google/gnostic", + "version": "v0.5.7-v3refs", + "cpe": "cpe:2.3:a:google:gnostic:v0.5.7-v3refs:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.5.8?package-id=6534056ab5e93ecd", + "name": "github.com/google/go-cmp", + "version": "v0.5.8", + "cpe": "cpe:2.3:a:google:go-cmp:v0.5.8:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-cmp@v0.5.8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510?package-id=8e9d52f012e4d305", + "name": "github.com/google/shlex", + "version": "v0.0.0-20191202100458-e7afc7fbc510", + "cpe": "cpe:2.3:a:google:shlex:v0.0.0-20191202100458-e7afc7fbc510:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/uuid@v1.1.2?package-id=a053a4a8bc52d233", + "name": "github.com/google/uuid", + "version": "v1.1.2", + "cpe": "cpe:2.3:a:google:uuid:v1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/uuid@v1.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20180305231024-9cad4c3443a7?package-id=4e2fa5e092935c9e", + "name": "github.com/gregjones/httpcache", + "version": "v0.0.0-20180305231024-9cad4c3443a7", + "cpe": "cpe:2.3:a:gregjones:httpcache:v0.0.0-20180305231024-9cad4c3443a7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20180305231024-9cad4c3443a7" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.6?package-id=77417b387c901877", + "name": "github.com/imdario/mergo", + "version": "v0.3.6", + "cpe": "cpe:2.3:a:imdario:mergo:v0.3.6:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/imdario/mergo@v0.3.6" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/jonboulle/clockwork@v0.2.2?package-id=c8a4ae29897a05c3", + "name": "github.com/jonboulle/clockwork", + "version": "v0.2.2", + "cpe": "cpe:2.3:a:jonboulle:clockwork:v0.2.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jonboulle/clockwork@v0.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/josharian/intern@v1.0.0?package-id=48b2b098ac0eff27", + "name": "github.com/josharian/intern", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:josharian:intern:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/josharian/intern@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.12?package-id=8ded29bb7799ebbd", + "name": "github.com/json-iterator/go", + "version": "v1.1.12", + "cpe": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/liggitt/tabwriter@v0.0.0-20181228230101-89fcab3d43de?package-id=9fddb2784a091432", + "name": "github.com/liggitt/tabwriter", + "version": "v0.0.0-20181228230101-89fcab3d43de", + "cpe": "cpe:2.3:a:liggitt:tabwriter:v0.0.0-20181228230101-89fcab3d43de:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/liggitt/tabwriter@v0.0.0-20181228230101-89fcab3d43de" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/lithammer/dedent@v1.1.0?package-id=b98e3af513ea0ef6", + "name": "github.com/lithammer/dedent", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:lithammer:dedent:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/lithammer/dedent@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mailru/easyjson@v0.7.6?package-id=92ec11262cb43e7a", + "name": "github.com/mailru/easyjson", + "version": "v0.7.6", + "cpe": "cpe:2.3:a:mailru:easyjson:v0.7.6:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mailru/easyjson@v0.7.6" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.0?package-id=c11099fad78fdc18", + "name": "github.com/mitchellh/go-wordwrap", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/moby/spdystream@v0.2.0?package-id=b6166b4b884fc733", + "name": "github.com/moby/spdystream", + "version": "v0.2.0", + "cpe": "cpe:2.3:a:moby:spdystream:v0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/moby/spdystream@v0.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/moby/term@v0.0.0-20210619224110-3f7ff695adc6?package-id=50d59ad7963a7c61", + "name": "github.com/moby/term", + "version": "v0.0.0-20210619224110-3f7ff695adc6", + "cpe": "cpe:2.3:a:moby:term:v0.0.0-20210619224110-3f7ff695adc6:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/moby/term@v0.0.0-20210619224110-3f7ff695adc6" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=b7c1f35358263fbe", + "name": "github.com/modern-go/concurrent", + "version": "v0.0.0-20180306012644-bacd9c7ef1dd", + "cpe": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2?package-id=2780c28b00a46731", + "name": "github.com/modern-go/reflect2", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:modern-go:reflect2:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/monochromegane/go-gitignore@v0.0.0-20200626010858-205db1a8cc00?package-id=63c0fbf15c9553f8", + "name": "github.com/monochromegane/go-gitignore", + "version": "v0.0.0-20200626010858-205db1a8cc00", + "cpe": "cpe:2.3:a:monochromegane:go-gitignore:v0.0.0-20200626010858-205db1a8cc00:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/monochromegane/go-gitignore@v0.0.0-20200626010858-205db1a8cc00" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?package-id=3d6c515e5279b09f", + "name": "github.com/munnerz/goautoneg", + "version": "v0.0.0-20191010083416-a7dc8b61c822", + "cpe": "cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f?package-id=efb647ed9b49a5dd", + "name": "github.com/mxk/go-flowrate", + "version": "v0.0.0-20140419014527-cca7078d478f", + "cpe": "cpe:2.3:a:mxk:go-flowrate:v0.0.0-20140419014527-cca7078d478f:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=36d3c6d356fc6c74", + "name": "github.com/opencontainers/go-digest", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1+incompatible?package-id=db146f4f4d89c741", + "name": "github.com/peterbourgon/diskv", + "version": "v2.0.1+incompatible", + "cpe": "cpe:2.3:a:peterbourgon:diskv:v2.0.1\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=cb00a4938728f837", + "name": "github.com/pkg/errors", + "version": "v0.9.1", + "cpe": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pkg/errors@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/russross/blackfriday@v1.5.2?package-id=f1eb3fcbd723d6c9", + "name": "github.com/russross/blackfriday", + "version": "v1.5.2", + "cpe": "cpe:2.3:a:russross:blackfriday:v1.5.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/russross/blackfriday@v1.5.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/cobra@v1.4.0?package-id=665df81804ec1bc", + "name": "github.com/spf13/cobra", + "version": "v1.4.0", + "cpe": "cpe:2.3:a:spf13:cobra:v1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/spf13/cobra@v1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5?package-id=f63680d8ec6c8a18", + "name": "github.com/spf13/pflag", + "version": "v1.0.5", + "cpe": "cpe:2.3:a:spf13:pflag:v1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/xlab/treeprint@v1.1.0?package-id=a04bcc27e24695ad", + "name": "github.com/xlab/treeprint", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:xlab:treeprint:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/xlab/treeprint@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/go.starlark.net@v0.0.0-20200306205701-8dd3e2ee1dd5?package-id=f902a2778df87f2d", + "name": "go.starlark.net", + "version": "v0.0.0-20200306205701-8dd3e2ee1dd5", + "purl": "pkg:golang/go.starlark.net@v0.0.0-20200306205701-8dd3e2ee1dd5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd?package-id=c04279ea9cbe904b", + "name": "golang.org/x/crypto", + "version": "v0.0.0-20220315160706-3147a52a75dd", + "cpe": "cpe:2.3:a:golang:x\\/crypto:v0.0.0-20220315160706-3147a52a75dd:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/net@v0.0.0-20220722155237-a158d28d115b?package-id=f7308ab8f20527d9", + "name": "golang.org/x/net", + "version": "v0.0.0-20220722155237-a158d28d115b", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.0.0-20220722155237-a158d28d115b:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.0.0-20220722155237-a158d28d115b" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8?package-id=e9093cc6436d9400", + "name": "golang.org/x/oauth2", + "version": "v0.0.0-20211104180415-d3ed0bb246c8", + "cpe": "cpe:2.3:a:golang:x\\/oauth2:v0.0.0-20211104180415-d3ed0bb246c8:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20220722155257-8c9f86f7a55f?package-id=4ff632baacccabf3", + "name": "golang.org/x/sys", + "version": "v0.0.0-20220722155257-8c9f86f7a55f", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20220722155257-8c9f86f7a55f:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20220722155257-8c9f86f7a55f" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/term@v0.0.0-20210927222741-03fcf44c2211?package-id=3d4ef2cd90e25ba7", + "name": "golang.org/x/term", + "version": "v0.0.0-20210927222741-03fcf44c2211", + "cpe": "cpe:2.3:a:golang:x\\/term:v0.0.0-20210927222741-03fcf44c2211:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/term@v0.0.0-20210927222741-03fcf44c2211" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/text@v0.3.7?package-id=3a726cad0263b37b", + "name": "golang.org/x/text", + "version": "v0.3.7", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.3.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.3.7" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8?package-id=1d11ff6ba712efe", + "name": "golang.org/x/time", + "version": "v0.0.0-20220210224613-90d013bbcef8", + "cpe": "cpe:2.3:a:golang:x\\/time:v0.0.0-20220210224613-90d013bbcef8:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.28.0?package-id=f80825fabf9c7634", + "name": "google.golang.org/protobuf", + "version": "v1.28.0", + "cpe": "cpe:2.3:a:google:protobuf:v1.28.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/protobuf@v1.28.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=f09a07a4292d1673", + "name": "gopkg.in/inf.v0", + "version": "v0.9.1", + "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0?package-id=587a54deb8faba65", + "name": "gopkg.in/yaml.v2", + "version": "v2.4.0", + "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=62c132701753ef85", + "name": "gopkg.in/yaml.v3", + "version": "v3.0.1", + "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/grep@3.3-r0?arch=x86_64&distro=alpine-3.11.13&package-id=a00894042b8b026d", + "publisher": "Natanael Copa ", + "name": "grep", + "version": "3.3-r0", + "description": "Searches input files for lines containing a match to a specified pattern", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:grep:grep:3.3-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/grep@3.3-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/grep/grep.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/klog/v2@v2.70.1?package-id=ecf6f5624bc14b4e", + "name": "k8s.io/klog/v2", + "version": "v2.70.1", + "cpe": "cpe:2.3:a:klog:v2:v2.70.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/k8s.io/klog/v2@v2.70.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20220803162953-67bda5d908f1?package-id=9571920a550513e3", + "name": "k8s.io/kube-openapi", + "version": "v0.0.0-20220803162953-67bda5d908f1", + "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20220803162953-67bda5d908f1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/kubernetes@v0.0.0-20221012104725-434bfd82814a?package-id=7c7559392b0efde9", + "name": "k8s.io/kubernetes", + "version": "v0.0.0-20221012104725-434bfd82814a", + "purl": "pkg:golang/k8s.io/kubernetes@v0.0.0-20221012104725-434bfd82814a" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20220728103510-ee6ede2d64ed?package-id=e9909dc0931261fa", + "name": "k8s.io/utils", + "version": "v0.0.0-20220728103510-ee6ede2d64ed", + "purl": "pkg:golang/k8s.io/utils@v0.0.0-20220728103510-ee6ede2d64ed" + }, + { + "type": "application", + "bom-ref": "pkg:golang/k8s.io/kubectl@1.25.3?package-id=fdfe149ef621c365", + "name": "kubectl", + "version": "1.25.3", + "cpe": "cpe:2.3:a:kubectl:kubectl:1.25.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/k8s.io/kubectl@1.25.3" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r0?arch=x86_64&upstream=libc-dev&distro=alpine-3.11.13&package-id=22b2a81fa39d5dd2", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r0", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r0?arch=x86_64&upstream=libc-dev&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "http://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&upstream=openssl&distro=alpine-3.11.13&package-id=9dc8a627b3dc6e7c", + "publisher": "Timo Teras ", + "name": "libcrypto1.1", + "version": "1.1.1l-r0", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1l-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&upstream=openssl&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.openssl.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcurl@7.79.1-r0?arch=x86_64&upstream=curl&distro=alpine-3.11.13&package-id=b055e046cf7212a1", + "publisher": "Natanael Copa ", + "name": "libcurl", + "version": "7.79.1-r0", + "description": "The multiprotocol file transfer library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libcurl:libcurl:7.79.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcurl@7.79.1-r0?arch=x86_64&upstream=curl&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://curl.haxx.se/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&upstream=openssl&distro=alpine-3.11.13&package-id=286e1bd630e38068", + "publisher": "Timo Teras ", + "name": "libssl1.1", + "version": "1.1.1l-r0", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1l-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&upstream=openssl&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.openssl.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libtls-standalone@2.9.1-r0?arch=x86_64&distro=alpine-3.11.13&package-id=44d013a47dc758aa", + "name": "libtls-standalone", + "version": "2.9.1-r0", + "description": "libtls extricated from libressl sources", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libtls-standalone:libtls-standalone:2.9.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libtls-standalone@2.9.1-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.libressl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.1.24-r3?arch=x86_64&distro=alpine-3.11.13&package-id=485b70fc6d5760", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.1.24-r3", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.1.24-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.1.24-r3?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.1.24-r3?arch=x86_64&upstream=musl&distro=alpine-3.11.13&package-id=fc850f3aca8a5da", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.1.24-r3", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.1.24-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.1.24-r3?arch=x86_64&upstream=musl&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/nghttp2-libs@1.40.0-r1?arch=x86_64&upstream=nghttp2&distro=alpine-3.11.13&package-id=569777ff2f19d9f3", + "publisher": "Francesco Colista ", + "name": "nghttp2-libs", + "version": "1.40.0-r1", + "description": "Experimental HTTP/2 client, server and proxy (libraries)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nghttp2-libs:nghttp2-libs:1.40.0-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/nghttp2-libs@1.40.0-r1?arch=x86_64&upstream=nghttp2&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://nghttp2.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/pcre@8.43-r1?arch=x86_64&distro=alpine-3.11.13&package-id=be1b5b15b01eec50", + "publisher": "Natanael Copa ", + "name": "pcre", + "version": "8.43-r1", + "description": "Perl-compatible regular expression library", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:pcre:pcre:8.43-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/pcre@8.43-r1?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "http://pcre.sourceforge.net", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.2.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.11.13&package-id=d7d0b4983b78c706", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.2.4-r0", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.2.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.2.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2?package-id=d741e5ed9ff6dc56", + "name": "sigs.k8s.io/json", + "version": "v0.0.0-20220713155537-f223a00ba0e2", + "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/kustomize/api@v0.12.1?package-id=62abdaa20c0c5d6f", + "name": "sigs.k8s.io/kustomize/api", + "version": "v0.12.1", + "cpe": "cpe:2.3:a:kustomize:api:v0.12.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/sigs.k8s.io/kustomize/api@v0.12.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/kustomize/kustomize/v4@v4.5.7?package-id=639fff7501878120", + "name": "sigs.k8s.io/kustomize/kustomize/v4", + "version": "v4.5.7", + "cpe": "cpe:2.3:a:kustomize:kustomize\\/v4:v4.5.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/sigs.k8s.io/kustomize/kustomize/v4@v4.5.7" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/kustomize/kyaml@v0.13.9?package-id=cc0f7082592466ec", + "name": "sigs.k8s.io/kustomize/kyaml", + "version": "v0.13.9", + "cpe": "cpe:2.3:a:kustomize:kyaml:v0.13.9:*:*:*:*:*:*:*", + "purl": "pkg:golang/sigs.k8s.io/kustomize/kyaml@v0.13.9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3?package-id=1c1000ac48c38798", + "name": "sigs.k8s.io/structured-merge-diff/v4", + "version": "v4.2.3", + "cpe": "cpe:2.3:a:structured-merge-diff:v4:v4.2.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.2.0?package-id=82cff49cd29939e5", + "name": "sigs.k8s.io/yaml", + "version": "v1.2.0", + "purl": "pkg:golang/sigs.k8s.io/yaml@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.31.1-r11?arch=x86_64&upstream=busybox&distro=alpine-3.11.13&package-id=685c6f235663ea24", + "publisher": "Natanael Copa ", + "name": "ssl_client", + "version": "1.31.1-r11", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.31.1-r11:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.31.1-r11?arch=x86_64&upstream=busybox&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=alpine-3.11.13&package-id=9886c2465766333f", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.11-r3", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.11-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.11.13", + "description": "Alpine Linux v3.11", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.11.13" + }, + "externalReferences": [ + { + "url": "https://bugs.alpinelinux.org/", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/adduser@3.118ubuntu2?arch=all&distro=ubuntu-20.04&package-id=69d1980477020fa3", + "publisher": "Ubuntu Core Developers ", + "name": "adduser", + "version": "3.118ubuntu2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:adduser:adduser:3.118ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/adduser@3.118ubuntu2?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/apt@2.0.8?arch=amd64&distro=ubuntu-20.04&package-id=e15dc7ed115af27", + "publisher": "Ubuntu Developers ", + "name": "apt", + "version": "2.0.8", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:apt:apt:2.0.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/apt@2.0.8?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/base-files@11ubuntu5.5?arch=amd64&distro=ubuntu-20.04&package-id=195c402cc18c6ec8", + "publisher": "Ubuntu Developers ", + "name": "base-files", + "version": "11ubuntu5.5", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:11ubuntu5.5:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/base-files@11ubuntu5.5?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/base-passwd@3.5.47?arch=amd64&distro=ubuntu-20.04&package-id=8b6e494dac6dab09", + "publisher": "Colin Watson ", + "name": "base-passwd", + "version": "3.5.47", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "PD" + } + } + ], + "cpe": "cpe:2.3:a:base-passwd:base-passwd:3.5.47:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/base-passwd@3.5.47?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/bash@5.0-6ubuntu1.2?arch=amd64&distro=ubuntu-20.04&package-id=9b2a88643de9f471", + "publisher": "Ubuntu Developers ", + "name": "bash", + "version": "5.0-6ubuntu1.2", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:bash:bash:5.0-6ubuntu1.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/bash@5.0-6ubuntu1.2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/bsdutils@1:2.34-0.1ubuntu9.3?arch=amd64&upstream=util-linux%402.34-0.1ubuntu9.3&distro=ubuntu-20.04&package-id=f059f1effc2759b2", + "publisher": "Ubuntu Developers ", + "name": "bsdutils", + "version": "1:2.34-0.1ubuntu9.3", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:bsdutils:bsdutils:1\\:2.34-0.1ubuntu9.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/bsdutils@1:2.34-0.1ubuntu9.3?arch=amd64&upstream=util-linux%402.34-0.1ubuntu9.3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/bzip2@1.0.8-2?arch=amd64&distro=ubuntu-20.04&package-id=97dab883cac4c956", + "publisher": "Ubuntu Developers ", + "name": "bzip2", + "version": "1.0.8-2", + "licenses": [ + { + "license": { + "name": "BSD-variant" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:bzip2:bzip2:1.0.8-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/bzip2@1.0.8-2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/coreutils@8.30-3ubuntu2?arch=amd64&distro=ubuntu-20.04&package-id=f77283ee51e117fa", + "publisher": "Ubuntu Developers ", + "name": "coreutils", + "version": "8.30-3ubuntu2", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:coreutils:coreutils:8.30-3ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/coreutils@8.30-3ubuntu2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/dash@0.5.10.2-6?arch=amd64&distro=ubuntu-20.04&package-id=fa0f613df8411b7", + "publisher": "Ubuntu Developers ", + "name": "dash", + "version": "0.5.10.2-6", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:dash:dash:0.5.10.2-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/dash@0.5.10.2-6?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/debconf@1.5.73?arch=all&distro=ubuntu-20.04&package-id=128eb6066f5ec19c", + "publisher": "Ubuntu Developers ", + "name": "debconf", + "version": "1.5.73", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:debconf:debconf:1.5.73:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/debconf@1.5.73?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/debianutils@4.9.1?arch=amd64&distro=ubuntu-20.04&package-id=328b1094024bda26", + "publisher": "Ubuntu Developers ", + "name": "debianutils", + "version": "4.9.1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:debianutils:debianutils:4.9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/debianutils@4.9.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/diffutils@1:3.7-3?arch=amd64&distro=ubuntu-20.04&package-id=d21aefcaf9c9c9b6", + "publisher": "Ubuntu Developers ", + "name": "diffutils", + "version": "1:3.7-3", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:diffutils:diffutils:1\\:3.7-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/diffutils@1:3.7-3?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/dpkg@1.19.7ubuntu3.2?arch=amd64&distro=ubuntu-20.04&package-id=c04e8d0994357312", + "publisher": "Ubuntu Developers ", + "name": "dpkg", + "version": "1.19.7ubuntu3.2", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain-md5" + } + }, + { + "license": { + "name": "public-domain-s-s-d" + } + } + ], + "cpe": "cpe:2.3:a:dpkg:dpkg:1.19.7ubuntu3.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/dpkg@1.19.7ubuntu3.2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/e2fsprogs@1.45.5-2ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=6a037357f3ebf47a", + "publisher": "Ubuntu Developers ", + "name": "e2fsprogs", + "version": "1.45.5-2ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:e2fsprogs:e2fsprogs:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/e2fsprogs@1.45.5-2ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/fdisk@2.34-0.1ubuntu9.3?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=c1731913519805c2", + "publisher": "Ubuntu Developers ", + "name": "fdisk", + "version": "2.34-0.1ubuntu9.3", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:fdisk:fdisk:2.34-0.1ubuntu9.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/fdisk@2.34-0.1ubuntu9.3?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/findutils@4.7.0-1ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=103a5999463b7e08", + "publisher": "Ubuntu Developers ", + "name": "findutils", + "version": "4.7.0-1ubuntu1", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:findutils:findutils:4.7.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/findutils@4.7.0-1ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/gcc-10-base@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04&package-id=a268d6ad2986f239", + "publisher": "Ubuntu Core developers ", + "name": "gcc-10-base", + "version": "10.3.0-1ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:gcc-10-base:gcc-10-base:10.3.0-1ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/gcc-10-base@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/gcc-9-base@9.4.0-1ubuntu1~20.04.1?arch=amd64&upstream=gcc-9&distro=ubuntu-20.04&package-id=3ba6275fbc717c77", + "publisher": "Ubuntu Core developers ", + "name": "gcc-9-base", + "version": "9.4.0-1ubuntu1~20.04.1", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:gcc-9-base:gcc-9-base:9.4.0-1ubuntu1\\~20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/gcc-9-base@9.4.0-1ubuntu1~20.04.1?arch=amd64&upstream=gcc-9&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/gosu@1.10-1ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04&package-id=2f8c6c9669b24c1d", + "publisher": "Ubuntu Developers ", + "name": "gosu", + "version": "1.10-1ubuntu0.20.04.1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:gosu:gosu:1.10-1ubuntu0.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/gosu@1.10-1ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/gpgv@2.2.19-3ubuntu2.1?arch=amd64&upstream=gnupg2&distro=ubuntu-20.04&package-id=b3a56223224b45d2", + "publisher": "Ubuntu Developers ", + "name": "gpgv", + "version": "2.2.19-3ubuntu2.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + }, + { + "license": { + "name": "TinySCHEME" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:gpgv:gpgv:2.2.19-3ubuntu2.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/gpgv@2.2.19-3ubuntu2.1?arch=amd64&upstream=gnupg2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/grep@3.4-1?arch=amd64&distro=ubuntu-20.04&package-id=e7af9af4b90473f", + "publisher": "Ubuntu Developers ", + "name": "grep", + "version": "3.4-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:grep:grep:3.4-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/grep@3.4-1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/gzip@1.10-0ubuntu4.1?arch=amd64&distro=ubuntu-20.04&package-id=733a6389eeaa99c9", + "publisher": "Ubuntu Developers ", + "name": "gzip", + "version": "1.10-0ubuntu4.1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:gzip:gzip:1.10-0ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/gzip@1.10-0ubuntu4.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/hostname@3.23?arch=amd64&distro=ubuntu-20.04&package-id=263dae70cc8e6a4f", + "publisher": "Ubuntu Developers ", + "name": "hostname", + "version": "3.23", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:hostname:hostname:3.23:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/hostname@3.23?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/init-system-helpers@1.57?arch=all&distro=ubuntu-20.04&package-id=b0e335d96f12154d", + "publisher": "Ubuntu Developers ", + "name": "init-system-helpers", + "version": "1.57", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:init-system-helpers:init-system-helpers:1.57:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/init-system-helpers@1.57?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libacl1@2.2.53-6?arch=amd64&upstream=acl&distro=ubuntu-20.04&package-id=5cec2c2009596050", + "publisher": "Ubuntu Developers ", + "name": "libacl1", + "version": "2.2.53-6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libacl1:libacl1:2.2.53-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libacl1@2.2.53-6?arch=amd64&upstream=acl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libapt-pkg6.0@2.0.8?arch=amd64&upstream=apt&distro=ubuntu-20.04&package-id=a53aba344e652eae", + "publisher": "Ubuntu Developers ", + "name": "libapt-pkg6.0", + "version": "2.0.8", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libapt-pkg6.0:libapt-pkg6.0:2.0.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libapt-pkg6.0@2.0.8?arch=amd64&upstream=apt&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libattr1@1:2.4.48-5?arch=amd64&upstream=attr&distro=ubuntu-20.04&package-id=edf8dd62bd537bd5", + "publisher": "Ubuntu Developers ", + "name": "libattr1", + "version": "1:2.4.48-5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libattr1:libattr1:1\\:2.4.48-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libattr1@1:2.4.48-5?arch=amd64&upstream=attr&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libaudit-common@1:2.8.5-2ubuntu6?arch=all&upstream=audit&distro=ubuntu-20.04&package-id=4a463ab850d7c68c", + "publisher": "Ubuntu Developers ", + "name": "libaudit-common", + "version": "1:2.8.5-2ubuntu6", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit-common:libaudit-common:1\\:2.8.5-2ubuntu6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libaudit-common@1:2.8.5-2ubuntu6?arch=all&upstream=audit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libaudit1@1:2.8.5-2ubuntu6?arch=amd64&upstream=audit&distro=ubuntu-20.04&package-id=be9537deb8db616e", + "publisher": "Ubuntu Developers ", + "name": "libaudit1", + "version": "1:2.8.5-2ubuntu6", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit1:libaudit1:1\\:2.8.5-2ubuntu6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libaudit1@1:2.8.5-2ubuntu6?arch=amd64&upstream=audit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libblkid1@2.34-0.1ubuntu9.3?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=8668ed2232ebc357", + "publisher": "Ubuntu Developers ", + "name": "libblkid1", + "version": "2.34-0.1ubuntu9.3", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libblkid1:libblkid1:2.34-0.1ubuntu9.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libblkid1@2.34-0.1ubuntu9.3?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libbz2-1.0@1.0.8-2?arch=amd64&upstream=bzip2&distro=ubuntu-20.04&package-id=fd8b0edf257b69b7", + "publisher": "Ubuntu Developers ", + "name": "libbz2-1.0", + "version": "1.0.8-2", + "licenses": [ + { + "license": { + "name": "BSD-variant" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libbz2-1.0:libbz2-1.0:1.0.8-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libbz2-1.0@1.0.8-2?arch=amd64&upstream=bzip2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.9?arch=amd64&upstream=glibc&distro=ubuntu-20.04&package-id=57986ecc4347eed4", + "publisher": "Ubuntu Developers ", + "name": "libc-bin", + "version": "2.31-0ubuntu9.9", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc-bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.9?arch=amd64&upstream=glibc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libc6@2.31-0ubuntu9.9?arch=amd64&upstream=glibc&distro=ubuntu-20.04&package-id=8e27f98d9024ca2a", + "publisher": "Ubuntu Developers ", + "name": "libc6", + "version": "2.31-0ubuntu9.9", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc6:libc6:2.31-0ubuntu9.9:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libc6@2.31-0ubuntu9.9?arch=amd64&upstream=glibc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcap-ng0@0.7.9-2.1build1?arch=amd64&upstream=libcap-ng&distro=ubuntu-20.04&package-id=57ceb68462a99cb4", + "publisher": "Ubuntu Developers ", + "name": "libcap-ng0", + "version": "0.7.9-2.1build1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libcap-ng0:libcap-ng0:0.7.9-2.1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcap-ng0@0.7.9-2.1build1?arch=amd64&upstream=libcap-ng&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcom-err2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=fbaeb4c3d5d0f976", + "publisher": "Ubuntu Developers ", + "name": "libcom-err2", + "version": "1.45.5-2ubuntu1", + "cpe": "cpe:2.3:a:libcom-err2:libcom-err2:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcom-err2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcrypt1@1:4.4.10-10ubuntu4?arch=amd64&upstream=libxcrypt&distro=ubuntu-20.04&package-id=8a4302e2e7027353", + "publisher": "Ubuntu Developers ", + "name": "libcrypt1", + "version": "1:4.4.10-10ubuntu4", + "cpe": "cpe:2.3:a:libcrypt1:libcrypt1:1\\:4.4.10-10ubuntu4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcrypt1@1:4.4.10-10ubuntu4?arch=amd64&upstream=libxcrypt&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libdb5.3@5.3.28+dfsg1-0.6ubuntu2?arch=amd64&upstream=db5.3&distro=ubuntu-20.04&package-id=bc84b4da0031640d", + "publisher": "Ubuntu Developers ", + "name": "libdb5.3", + "version": "5.3.28+dfsg1-0.6ubuntu2", + "cpe": "cpe:2.3:a:libdb5.3:libdb5.3:5.3.28\\+dfsg1-0.6ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libdb5.3@5.3.28+dfsg1-0.6ubuntu2?arch=amd64&upstream=db5.3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libdebconfclient0@0.251ubuntu1?arch=amd64&upstream=cdebconf&distro=ubuntu-20.04&package-id=78bbe40d9c2ef9b5", + "publisher": "Ubuntu Developers ", + "name": "libdebconfclient0", + "version": "0.251ubuntu1", + "cpe": "cpe:2.3:a:libdebconfclient0:libdebconfclient0:0.251ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libdebconfclient0@0.251ubuntu1?arch=amd64&upstream=cdebconf&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libext2fs2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=ec6113f55e73d1fd", + "publisher": "Ubuntu Developers ", + "name": "libext2fs2", + "version": "1.45.5-2ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libext2fs2:libext2fs2:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libext2fs2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libfdisk1@2.34-0.1ubuntu9.3?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=95ad31e81a712549", + "publisher": "Ubuntu Developers ", + "name": "libfdisk1", + "version": "2.34-0.1ubuntu9.3", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libfdisk1:libfdisk1:2.34-0.1ubuntu9.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libfdisk1@2.34-0.1ubuntu9.3?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libffi7@3.3-4?arch=amd64&upstream=libffi&distro=ubuntu-20.04&package-id=b43b799d45da9d97", + "publisher": "Ubuntu Developers ", + "name": "libffi7", + "version": "3.3-4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libffi7:libffi7:3.3-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libffi7@3.3-4?arch=amd64&upstream=libffi&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgcc-s1@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04&package-id=f98ce69fd9e55bb8", + "publisher": "Ubuntu Core developers ", + "name": "libgcc-s1", + "version": "10.3.0-1ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcc-s1:libgcc-s1:10.3.0-1ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgcc-s1@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgcrypt20@1.8.5-5ubuntu1.1?arch=amd64&distro=ubuntu-20.04&package-id=779dc4322dee5841", + "publisher": "Ubuntu Developers ", + "name": "libgcrypt20", + "version": "1.8.5-5ubuntu1.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcrypt20:libgcrypt20:1.8.5-5ubuntu1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgcrypt20@1.8.5-5ubuntu1.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgmp10@2:6.2.0+dfsg-4?arch=amd64&upstream=gmp&distro=ubuntu-20.04&package-id=40fc269dcb8b3369", + "publisher": "Ubuntu Developers ", + "name": "libgmp10", + "version": "2:6.2.0+dfsg-4", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgmp10:libgmp10:2\\:6.2.0\\+dfsg-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgmp10@2:6.2.0+dfsg-4?arch=amd64&upstream=gmp&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.6?arch=amd64&upstream=gnutls28&distro=ubuntu-20.04&package-id=7490f76da775c6e", + "publisher": "Ubuntu Developers ", + "name": "libgnutls30", + "version": "3.6.13-2ubuntu1.6", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPLv3+" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "name": "LGPLv2.1+" + } + }, + { + "license": { + "name": "LGPLv3+_or_GPLv2+" + } + }, + { + "license": { + "name": "The" + } + } + ], + "cpe": "cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.6?arch=amd64&upstream=gnutls28&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgpg-error0@1.37-1?arch=amd64&upstream=libgpg-error&distro=ubuntu-20.04&package-id=37ef62d87edfe03", + "publisher": "Ubuntu Developers ", + "name": "libgpg-error0", + "version": "1.37-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "g10-permissive" + } + } + ], + "cpe": "cpe:2.3:a:libgpg-error0:libgpg-error0:1.37-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgpg-error0@1.37-1?arch=amd64&upstream=libgpg-error&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libhogweed5@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04&package-id=3caecccf070e6760", + "publisher": "Ubuntu Developers ", + "name": "libhogweed5", + "version": "3.5.1+really3.5.1-2ubuntu0.2", + "licenses": [ + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libhogweed5:libhogweed5:3.5.1\\+really3.5.1-2ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libhogweed5@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libidn2-0@2.2.0-2?arch=amd64&upstream=libidn2&distro=ubuntu-20.04&package-id=d2a82c3e28413bc1", + "publisher": "Ubuntu Developers ", + "name": "libidn2-0", + "version": "2.2.0-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "Unicode" + } + } + ], + "cpe": "cpe:2.3:a:libidn2-0:libidn2-0:2.2.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libidn2-0@2.2.0-2?arch=amd64&upstream=libidn2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/liblz4-1@1.9.2-2ubuntu0.20.04.1?arch=amd64&upstream=lz4&distro=ubuntu-20.04&package-id=6f2c431caeb4980a", + "publisher": "Ubuntu Developers ", + "name": "liblz4-1", + "version": "1.9.2-2ubuntu0.20.04.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:liblz4-1:liblz4-1:1.9.2-2ubuntu0.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/liblz4-1@1.9.2-2ubuntu0.20.04.1?arch=amd64&upstream=lz4&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/liblzma5@5.2.4-1ubuntu1.1?arch=amd64&upstream=xz-utils&distro=ubuntu-20.04&package-id=a8f6e2f0d5df075c", + "publisher": "Ubuntu Developers ", + "name": "liblzma5", + "version": "5.2.4-1ubuntu1.1", + "licenses": [ + { + "license": { + "name": "Autoconf" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "PD" + } + }, + { + "license": { + "name": "PD-debian" + } + }, + { + "license": { + "name": "config-h" + } + }, + { + "license": { + "name": "noderivs" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-nowarranty" + } + }, + { + "license": { + "name": "probably-PD" + } + } + ], + "cpe": "cpe:2.3:a:liblzma5:liblzma5:5.2.4-1ubuntu1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/liblzma5@5.2.4-1ubuntu1.1?arch=amd64&upstream=xz-utils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmount1@2.34-0.1ubuntu9.3?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=73e2bbfe6d27dd86", + "publisher": "Ubuntu Developers ", + "name": "libmount1", + "version": "2.34-0.1ubuntu9.3", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmount1:libmount1:2.34-0.1ubuntu9.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmount1@2.34-0.1ubuntu9.3?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libncurses6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=ed8fb166163a75b8", + "publisher": "Ubuntu Developers ", + "name": "libncurses6", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:libncurses6:libncurses6:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libncurses6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libncursesw6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=58525ddc073a008a", + "publisher": "Ubuntu Developers ", + "name": "libncursesw6", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:libncursesw6:libncursesw6:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libncursesw6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libnettle7@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04&package-id=3d185fbd6a7e56f", + "publisher": "Ubuntu Developers ", + "name": "libnettle7", + "version": "3.5.1+really3.5.1-2ubuntu0.2", + "licenses": [ + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libnettle7:libnettle7:3.5.1\\+really3.5.1-2ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libnettle7@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libp11-kit0@0.23.20-1ubuntu0.1?arch=amd64&upstream=p11-kit&distro=ubuntu-20.04&package-id=9fc0ca46e6d21557", + "publisher": "Ubuntu Developers ", + "name": "libp11-kit0", + "version": "0.23.20-1ubuntu0.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "ISC+IBM" + } + }, + { + "license": { + "name": "permissive-like-automake-output" + } + }, + { + "license": { + "name": "same-as-rest-of-p11kit" + } + } + ], + "cpe": "cpe:2.3:a:libp11-kit0:libp11-kit0:0.23.20-1ubuntu0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libp11-kit0@0.23.20-1ubuntu0.1?arch=amd64&upstream=p11-kit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-modules@1.3.1-5ubuntu4.3?arch=amd64&upstream=pam&distro=ubuntu-20.04&package-id=563cd7ffd9ad09e2", + "publisher": "Ubuntu Developers ", + "name": "libpam-modules", + "version": "1.3.1-5ubuntu4.3", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules:libpam-modules:1.3.1-5ubuntu4.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-modules@1.3.1-5ubuntu4.3?arch=amd64&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-modules-bin@1.3.1-5ubuntu4.3?arch=amd64&upstream=pam&distro=ubuntu-20.04&package-id=2fef7b748bc46246", + "publisher": "Ubuntu Developers ", + "name": "libpam-modules-bin", + "version": "1.3.1-5ubuntu4.3", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules-bin:libpam-modules-bin:1.3.1-5ubuntu4.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-modules-bin@1.3.1-5ubuntu4.3?arch=amd64&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-runtime@1.3.1-5ubuntu4.3?arch=all&upstream=pam&distro=ubuntu-20.04&package-id=ee86ac677ddf58c5", + "publisher": "Ubuntu Developers ", + "name": "libpam-runtime", + "version": "1.3.1-5ubuntu4.3", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-runtime:libpam-runtime:1.3.1-5ubuntu4.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-runtime@1.3.1-5ubuntu4.3?arch=all&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam0g@1.3.1-5ubuntu4.3?arch=amd64&upstream=pam&distro=ubuntu-20.04&package-id=473c40bcd3d2ef2d", + "publisher": "Ubuntu Developers ", + "name": "libpam0g", + "version": "1.3.1-5ubuntu4.3", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam0g:libpam0g:1.3.1-5ubuntu4.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam0g@1.3.1-5ubuntu4.3?arch=amd64&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpcre2-8-0@10.34-7?arch=amd64&upstream=pcre2&distro=ubuntu-20.04&package-id=ec9eb70008ed8b14", + "publisher": "Ubuntu Developers ", + "name": "libpcre2-8-0", + "version": "10.34-7", + "cpe": "cpe:2.3:a:libpcre2-8-0:libpcre2-8-0:10.34-7:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpcre2-8-0@10.34-7?arch=amd64&upstream=pcre2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpcre3@2:8.39-12ubuntu0.1?arch=amd64&upstream=pcre3&distro=ubuntu-20.04&package-id=28df348f627128bf", + "publisher": "Ubuntu Developers ", + "name": "libpcre3", + "version": "2:8.39-12ubuntu0.1", + "cpe": "cpe:2.3:a:libpcre3:libpcre3:2\\:8.39-12ubuntu0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpcre3@2:8.39-12ubuntu0.1?arch=amd64&upstream=pcre3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libprocps8@2:3.3.16-1ubuntu2.3?arch=amd64&upstream=procps&distro=ubuntu-20.04&package-id=393a438be5ba5065", + "publisher": "Ubuntu Developers ", + "name": "libprocps8", + "version": "2:3.3.16-1ubuntu2.3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libprocps8:libprocps8:2\\:3.3.16-1ubuntu2.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libprocps8@2:3.3.16-1ubuntu2.3?arch=amd64&upstream=procps&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libseccomp2@2.5.1-1ubuntu1~20.04.2?arch=amd64&upstream=libseccomp&distro=ubuntu-20.04&package-id=355e0292bcd139c5", + "publisher": "Ubuntu Developers ", + "name": "libseccomp2", + "version": "2.5.1-1ubuntu1~20.04.2", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libseccomp2:libseccomp2:2.5.1-1ubuntu1\\~20.04.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libseccomp2@2.5.1-1ubuntu1~20.04.2?arch=amd64&upstream=libseccomp&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libselinux1@3.0-1build2?arch=amd64&upstream=libselinux&distro=ubuntu-20.04&package-id=e5d4ae16ac79b901", + "publisher": "Ubuntu Developers ", + "name": "libselinux1", + "version": "3.0-1build2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libselinux1:libselinux1:3.0-1build2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libselinux1@3.0-1build2?arch=amd64&upstream=libselinux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsemanage-common@3.0-1build2?arch=all&upstream=libsemanage&distro=ubuntu-20.04&package-id=4c6cd9f68ce53262", + "publisher": "Ubuntu Developers ", + "name": "libsemanage-common", + "version": "3.0-1build2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage-common:libsemanage-common:3.0-1build2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsemanage-common@3.0-1build2?arch=all&upstream=libsemanage&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsemanage1@3.0-1build2?arch=amd64&upstream=libsemanage&distro=ubuntu-20.04&package-id=963297f19b339026", + "publisher": "Ubuntu Developers ", + "name": "libsemanage1", + "version": "3.0-1build2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage1:libsemanage1:3.0-1build2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsemanage1@3.0-1build2?arch=amd64&upstream=libsemanage&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsepol1@3.0-1ubuntu0.1?arch=amd64&upstream=libsepol&distro=ubuntu-20.04&package-id=7c862941a3db7eb2", + "publisher": "Ubuntu Developers ", + "name": "libsepol1", + "version": "3.0-1ubuntu0.1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsepol1:libsepol1:3.0-1ubuntu0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsepol1@3.0-1ubuntu0.1?arch=amd64&upstream=libsepol&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsmartcols1@2.34-0.1ubuntu9.3?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=4c497aae80a33ecf", + "publisher": "Ubuntu Developers ", + "name": "libsmartcols1", + "version": "2.34-0.1ubuntu9.3", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsmartcols1:libsmartcols1:2.34-0.1ubuntu9.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsmartcols1@2.34-0.1ubuntu9.3?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libss2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=4715894cb8165c", + "publisher": "Ubuntu Developers ", + "name": "libss2", + "version": "1.45.5-2ubuntu1", + "cpe": "cpe:2.3:a:libss2:libss2:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libss2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libstdc++6@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04&package-id=241fcb3d9b65153a", + "publisher": "Ubuntu Core developers ", + "name": "libstdc++6", + "version": "10.3.0-1ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:10.3.0-1ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libstdc++6@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsystemd0@245.4-4ubuntu3.17?arch=amd64&upstream=systemd&distro=ubuntu-20.04&package-id=3d3e78a58ecc55ae", + "publisher": "Ubuntu Developers ", + "name": "libsystemd0", + "version": "245.4-4ubuntu3.17", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsystemd0:libsystemd0:245.4-4ubuntu3.17:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsystemd0@245.4-4ubuntu3.17?arch=amd64&upstream=systemd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtasn1-6@4.16.0-2?arch=amd64&distro=ubuntu-20.04&package-id=a290c35fc0220ba0", + "publisher": "Ubuntu Developers ", + "name": "libtasn1-6", + "version": "4.16.0-2", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtasn1-6:libtasn1-6:4.16.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtasn1-6@4.16.0-2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtinfo6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=72ad56d118fefea3", + "publisher": "Ubuntu Developers ", + "name": "libtinfo6", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:libtinfo6:libtinfo6:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtinfo6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libudev1@245.4-4ubuntu3.17?arch=amd64&upstream=systemd&distro=ubuntu-20.04&package-id=f583490c60e22ba9", + "publisher": "Ubuntu Developers ", + "name": "libudev1", + "version": "245.4-4ubuntu3.17", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libudev1:libudev1:245.4-4ubuntu3.17:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libudev1@245.4-4ubuntu3.17?arch=amd64&upstream=systemd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libunistring2@0.9.10-2?arch=amd64&upstream=libunistring&distro=ubuntu-20.04&package-id=3140ffa70dcd9831", + "publisher": "Ubuntu Developers ", + "name": "libunistring2", + "version": "0.9.10-2", + "licenses": [ + { + "license": { + "name": "FreeSoftware" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GFDL-1.2+" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libunistring2:libunistring2:0.9.10-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libunistring2@0.9.10-2?arch=amd64&upstream=libunistring&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libuuid1@2.34-0.1ubuntu9.3?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=309202d9f4bbb363", + "publisher": "Ubuntu Developers ", + "name": "libuuid1", + "version": "2.34-0.1ubuntu9.3", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libuuid1:libuuid1:2.34-0.1ubuntu9.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libuuid1@2.34-0.1ubuntu9.3?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libzstd1@1.4.4+dfsg-3ubuntu0.1?arch=amd64&upstream=libzstd&distro=ubuntu-20.04&package-id=47cff0564e160066", + "publisher": "Ubuntu Developers ", + "name": "libzstd1", + "version": "1.4.4+dfsg-3ubuntu0.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libzstd1:libzstd1:1.4.4\\+dfsg-3ubuntu0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libzstd1@1.4.4+dfsg-3ubuntu0.1?arch=amd64&upstream=libzstd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/login@1:4.8.1-1ubuntu5.20.04.2?arch=amd64&upstream=shadow&distro=ubuntu-20.04&package-id=6e31c2fd9fc25f2e", + "publisher": "Ubuntu Developers ", + "name": "login", + "version": "1:4.8.1-1ubuntu5.20.04.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:login:login:1\\:4.8.1-1ubuntu5.20.04.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/login@1:4.8.1-1ubuntu5.20.04.2?arch=amd64&upstream=shadow&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/logsave@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=4a92556bee4b4f91", + "publisher": "Ubuntu Developers ", + "name": "logsave", + "version": "1.45.5-2ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:logsave:logsave:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/logsave@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/lsb-base@11.1.0ubuntu2?arch=all&upstream=lsb&distro=ubuntu-20.04&package-id=b76348b7f1282c61", + "publisher": "Ubuntu Developers ", + "name": "lsb-base", + "version": "11.1.0ubuntu2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:lsb-base:lsb-base:11.1.0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/lsb-base@11.1.0ubuntu2?arch=all&upstream=lsb&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/mawk@1.3.4.20200120-2?arch=amd64&distro=ubuntu-20.04&package-id=435885c82afbf721", + "publisher": "Ubuntu Developers ", + "name": "mawk", + "version": "1.3.4.20200120-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:mawk:mawk:1.3.4.20200120-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/mawk@1.3.4.20200120-2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/mount@2.34-0.1ubuntu9.3?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=20e03a37af64e56c", + "publisher": "Ubuntu Developers ", + "name": "mount", + "version": "2.34-0.1ubuntu9.3", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:mount:mount:2.34-0.1ubuntu9.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/mount@2.34-0.1ubuntu9.3?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ncurses-base@6.2-0ubuntu2?arch=all&upstream=ncurses&distro=ubuntu-20.04&package-id=d7393defd95e4554", + "publisher": "Ubuntu Developers ", + "name": "ncurses-base", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:ncurses-base:ncurses-base:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ncurses-base@6.2-0ubuntu2?arch=all&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ncurses-bin@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=d6bdd43961b680f6", + "publisher": "Ubuntu Developers ", + "name": "ncurses-bin", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:ncurses-bin:ncurses-bin:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ncurses-bin@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/passwd@1:4.8.1-1ubuntu5.20.04.2?arch=amd64&upstream=shadow&distro=ubuntu-20.04&package-id=858f573489f83f86", + "publisher": "Ubuntu Developers ", + "name": "passwd", + "version": "1:4.8.1-1ubuntu5.20.04.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:passwd:passwd:1\\:4.8.1-1ubuntu5.20.04.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/passwd@1:4.8.1-1ubuntu5.20.04.2?arch=amd64&upstream=shadow&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/perl-base@5.30.0-9ubuntu0.2?arch=amd64&upstream=perl&distro=ubuntu-20.04&package-id=eab1752e76cf29f", + "publisher": "Ubuntu Developers ", + "name": "perl-base", + "version": "5.30.0-9ubuntu0.2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl-base:perl-base:5.30.0-9ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/perl-base@5.30.0-9ubuntu0.2?arch=amd64&upstream=perl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/procps@2:3.3.16-1ubuntu2.3?arch=amd64&distro=ubuntu-20.04&package-id=1b952d75ffac7280", + "publisher": "Ubuntu Developers ", + "name": "procps", + "version": "2:3.3.16-1ubuntu2.3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:procps:procps:2\\:3.3.16-1ubuntu2.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/procps@2:3.3.16-1ubuntu2.3?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sed@4.7-1?arch=amd64&distro=ubuntu-20.04&package-id=24bbb8989a1870c7", + "publisher": "Ubuntu Developers ", + "name": "sed", + "version": "4.7-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:sed:sed:4.7-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sed@4.7-1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sensible-utils@0.0.12+nmu1?arch=all&distro=ubuntu-20.04&package-id=7e50cf6ac335106e", + "publisher": "Ubuntu Developers ", + "name": "sensible-utils", + "version": "0.0.12+nmu1", + "licenses": [ + { + "license": { + "name": "All-permissive" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "configure" + } + }, + { + "license": { + "name": "installsh" + } + } + ], + "cpe": "cpe:2.3:a:sensible-utils:sensible-utils:0.0.12\\+nmu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sensible-utils@0.0.12+nmu1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sysvinit-utils@2.96-2.1ubuntu1?arch=amd64&upstream=sysvinit&distro=ubuntu-20.04&package-id=abc451774789c392", + "publisher": "Ubuntu Developers ", + "name": "sysvinit-utils", + "version": "2.96-2.1ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:sysvinit-utils:sysvinit-utils:2.96-2.1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sysvinit-utils@2.96-2.1ubuntu1?arch=amd64&upstream=sysvinit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/tar@1.30+dfsg-7ubuntu0.20.04.2?arch=amd64&distro=ubuntu-20.04&package-id=a57014f4a463478d", + "publisher": "Ubuntu Developers ", + "name": "tar", + "version": "1.30+dfsg-7ubuntu0.20.04.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:tar:tar:1.30\\+dfsg-7ubuntu0.20.04.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/tar@1.30+dfsg-7ubuntu0.20.04.2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ubuntu-keyring@2020.02.11.4?arch=all&distro=ubuntu-20.04&package-id=6d2b18ebcbe1dab7", + "publisher": "Dimitri John Ledkov ", + "name": "ubuntu-keyring", + "version": "2020.02.11.4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:ubuntu-keyring:ubuntu-keyring:2020.02.11.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ubuntu-keyring@2020.02.11.4?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/util-linux@2.34-0.1ubuntu9.3?arch=amd64&distro=ubuntu-20.04&package-id=980ca6ad8f0b50ad", + "publisher": "Ubuntu Developers ", + "name": "util-linux", + "version": "2.34-0.1ubuntu9.3", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:util-linux:util-linux:2.34-0.1ubuntu9.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/util-linux@2.34-0.1ubuntu9.3?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/zlib1g@1:1.2.11.dfsg-2ubuntu1.3?arch=amd64&upstream=zlib&distro=ubuntu-20.04&package-id=45609aec77ee2abd", + "publisher": "Ubuntu Developers ", + "name": "zlib1g", + "version": "1:1.2.11.dfsg-2ubuntu1.3", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib1g:zlib1g:1\\:1.2.11.dfsg-2ubuntu1.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/zlib1g@1:1.2.11.dfsg-2ubuntu1.3?arch=amd64&upstream=zlib&distro=ubuntu-20.04" + }, + { + "type": "operating-system", + "name": "ubuntu", + "version": "20.04", + "description": "Ubuntu 20.04.4 LTS", + "swid": { + "tagId": "ubuntu", + "name": "ubuntu", + "version": "20.04" + }, + "externalReferences": [ + { + "url": "https://bugs.launchpad.net/ubuntu/", + "type": "issue-tracker" + }, + { + "url": "https://www.ubuntu.com/", + "type": "website" + }, + { + "url": "https://help.ubuntu.com/", + "comment": "support", + "type": "other" + }, + { + "url": "https://www.ubuntu.com/legal/terms-and-policies/privacy-policy", + "comment": "privacyPolicy", + "type": "other" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nestjs/common@7.6.18?package-id=d73b1ee7c4c93551", + "author": "Kamil Mysliwiec", + "name": "@nestjs/common", + "version": "7.6.18", + "description": "Nest - modern, fast, powerful node.js web framework (@common)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nestjs\\/common:\\@nestjs\\/common:7.6.18:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nestjs/common@7.6.18", + "externalReferences": [ + { + "url": "https://github.com/nestjs/nest", + "type": "distribution" + }, + { + "url": "https://nestjs.com", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nestjs/core@7.6.18?package-id=8a5e3048e90617fc", + "author": "Kamil Mysliwiec", + "name": "@nestjs/core", + "version": "7.6.18", + "description": "Nest - modern, fast, powerful node.js web framework (@core)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nestjs\\/core:\\@nestjs\\/core:7.6.18:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nestjs/core@7.6.18", + "externalReferences": [ + { + "url": "https://github.com/nestjs/nest", + "type": "distribution" + }, + { + "url": "https://nestjs.com", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nestjs/mapped-types@0.4.1?package-id=f831d8d988bed4d4", + "author": "Kamil Mysliwiec", + "name": "@nestjs/mapped-types", + "version": "0.4.1", + "description": "Nest - modern, fast, powerful node.js web framework (@mapped-types)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nestjs\\/mapped-types:\\@nestjs\\/mapped-types:0.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nestjs/mapped-types@0.4.1", + "externalReferences": [ + { + "url": "https://github.com/nestjs/mapped-types", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nestjs/platform-express@7.6.18?package-id=31183ee6d4dba244", + "author": "Kamil Mysliwiec", + "name": "@nestjs/platform-express", + "version": "7.6.18", + "description": "Nest - modern, fast, powerful node.js web framework (@platform-express)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nestjs\\/platform-express:\\@nestjs\\/platform-express:7.6.18:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nestjs/platform-express@7.6.18", + "externalReferences": [ + { + "url": "https://github.com/nestjs/nest", + "type": "distribution" + }, + { + "url": "https://nestjs.com", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nestjs/swagger@4.8.2?package-id=e9c35d1ea263f2c4", + "author": "Kamil Mysliwiec", + "name": "@nestjs/swagger", + "version": "4.8.2", + "description": "Nest - modern, fast, powerful node.js web framework (@swagger)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nestjs\\/swagger:\\@nestjs\\/swagger:4.8.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nestjs/swagger@4.8.2", + "externalReferences": [ + { + "url": "https://github.com/nestjs/swagger", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nuxtjs/opencollective@0.3.2?package-id=e5c4143197893d11", + "name": "@nuxtjs/opencollective", + "version": "0.3.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nuxtjs\\/opencollective:\\@nuxtjs\\/opencollective:0.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nuxtjs/opencollective@0.3.2", + "externalReferences": [ + { + "url": "nuxt-contrib/opencollective", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/swagger-schema-official@2.0.22?package-id=3ff0206ece91290b", + "name": "@types/swagger-schema-official", + "version": "2.0.22", + "description": "TypeScript definitions for swagger-schema-official", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/swagger-schema-official:\\@types\\/swagger-schema-official:2.0.22:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/swagger-schema-official@2.0.22", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/swagger-schema-official", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/validator@13.0.0?package-id=200f68cb0085ca75", + "name": "@types/validator", + "version": "13.0.0", + "description": "TypeScript definitions for validator.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/validator:\\@types\\/validator:13.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/validator@13.0.0", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/accepts@1.3.8?package-id=1e782728d2f96ad5", + "name": "accepts", + "version": "1.3.8", + "description": "Higher-level content negotiation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:accepts:accepts:1.3.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/accepts@1.3.8", + "externalReferences": [ + { + "url": "jshttp/accepts", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/acorn@8.8.0?package-id=abca65515accbcbb", + "name": "acorn", + "version": "8.8.0", + "description": "ECMAScript parser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:acornjs:acorn:8.8.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/acorn@8.8.0", + "externalReferences": [ + { + "url": "https://github.com/acornjs/acorn.git", + "type": "distribution" + }, + { + "url": "https://github.com/acornjs/acorn", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/acorn-walk@8.2.0?package-id=e867131972437532", + "name": "acorn-walk", + "version": "8.2.0", + "description": "ECMAScript (ESTree) AST walker", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:acorn-walk:acorn-walk:8.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/acorn-walk@8.2.0", + "externalReferences": [ + { + "url": "https://github.com/acornjs/acorn.git", + "type": "distribution" + }, + { + "url": "https://github.com/acornjs/acorn", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ajv@6.12.6?package-id=d848ab675d068d7e", + "author": "Evgeny Poberezkin", + "name": "ajv", + "version": "6.12.6", + "description": "Another JSON Schema Validator", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ajv-validator:ajv:6.12.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/ajv@6.12.6", + "externalReferences": [ + { + "url": "https://github.com/ajv-validator/ajv.git", + "type": "distribution" + }, + { + "url": "https://github.com/ajv-validator/ajv", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.2.0-r3?arch=x86_64&distro=alpine-3.11.13&package-id=61f27796f703939", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.2.0-r3", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.2.0-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.2.0-r3?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.1-r2?arch=x86_64&distro=alpine-3.11.13&package-id=79f884384758c443", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.1-r2", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.1-r2?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-styles@4.3.0?package-id=5f44e0d6870d0e9f", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-styles", + "version": "4.3.0", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@4.3.0", + "externalReferences": [ + { + "url": "chalk/ansi-styles", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.10.8-r0?arch=x86_64&distro=alpine-3.11.13&package-id=28993d8277c2c4f", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.10.8-r0", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.10.8-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.10.8-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/append-field@1.0.0?package-id=61114d940dc42e53", + "author": "Linus Unnebäck ", + "name": "append-field", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:append-field:append-field:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/append-field@1.0.0", + "externalReferences": [ + { + "url": "http://github.com/LinusU/node-append-field.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/argparse@1.0.10?package-id=a8c08d35b24bfc06", + "name": "argparse", + "version": "1.0.10", + "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:argparse:argparse:1.0.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/argparse@1.0.10", + "externalReferences": [ + { + "url": "nodeca/argparse", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/array-flatten@1.1.1?package-id=a0792ccdcca020ca", + "author": "Blake Embrey (http://blakeembrey.me)", + "name": "array-flatten", + "version": "1.1.1", + "description": "Flatten an array of nested arrays into a single flat array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:array-flatten:array-flatten:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/array-flatten@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/blakeembrey/array-flatten.git", + "type": "distribution" + }, + { + "url": "https://github.com/blakeembrey/array-flatten", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asn1@0.2.6?package-id=fcf616ea5d0cab3", + "author": "Joyent (joyent.com)", + "name": "asn1", + "version": "0.2.6", + "description": "Contains parsers and serializers for ASN.1 (currently BER only)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:joyent:asn1:0.2.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/asn1@0.2.6", + "externalReferences": [ + { + "url": "https://github.com/joyent/node-asn1.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/assert-plus@1.0.0?package-id=cc913262afbe8a5f", + "author": "Mark Cavage ", + "name": "assert-plus", + "version": "1.0.0", + "description": "Extra assertions on top of node's assert module", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:assert-plus:assert-plus:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/assert-plus@1.0.0", + "externalReferences": [ + { + "url": "https://github.com/mcavage/node-assert-plus.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asynckit@0.4.0?package-id=1f30a832887b0ff8", + "author": "Alex Indigo ", + "name": "asynckit", + "version": "0.4.0", + "description": "Minimal async jobs utility library, with streams support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alexindigo:asynckit:0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/asynckit@0.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/alexindigo/asynckit.git", + "type": "distribution" + }, + { + "url": "https://github.com/alexindigo/asynckit#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aws-sign2@0.7.0?package-id=ecb4a9d1efb7a585", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "aws-sign2", + "version": "0.7.0", + "description": "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor in request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:aws-sign2:aws-sign2:0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aws-sign2@0.7.0", + "externalReferences": [ + { + "url": "https://github.com/mikeal/aws-sign", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aws4@1.11.0?package-id=9a100f91453a7603", + "author": "Michael Hart (https://github.com/mhart)", + "name": "aws4", + "version": "1.11.0", + "description": "Signs and prepares requests using AWS Signature Version 4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:aws4:aws4:1.11.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aws4@1.11.0", + "externalReferences": [ + { + "url": "github:mhart/aws4", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/axios@0.21.1?package-id=41cbd58df24630d7", + "author": "Matt Zabriskie", + "name": "axios", + "version": "0.21.1", + "description": "Promise based HTTP client for the browser and node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:axios:axios:0.21.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/axios@0.21.1", + "externalReferences": [ + { + "url": "https://github.com/axios/axios.git", + "type": "distribution" + }, + { + "url": "https://github.com/axios/axios", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/balanced-match@1.0.2?package-id=adb20dac41a9f796", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "balanced-match", + "version": "1.0.2", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2?package-id=c90f98bc05501cc0", + "name": "bcrypt-pbkdf", + "version": "1.0.2", + "description": "Port of the OpenBSD bcrypt_pbkdf function to pure JS", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:bcrypt-pbkdf:bcrypt-pbkdf:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/bcrypt-pbkdf@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/joyent/node-bcrypt-pbkdf.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/body-parser@1.19.0?package-id=75f0fd44f4a12452", + "name": "body-parser", + "version": "1.19.0", + "description": "Node.js body parsing middleware", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:body-parser:body-parser:1.19.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/body-parser@1.19.0", + "externalReferences": [ + { + "url": "expressjs/body-parser", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=b2f1259ad317cd31", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "1.1.11", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-from@1.1.2?package-id=9fbdf57a30df513b", + "name": "buffer-from", + "version": "1.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-from:buffer-from:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-from@1.1.2", + "externalReferences": [ + { + "url": "LinusU/buffer-from", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/busboy@0.2.14?package-id=bcc00af63882763b", + "author": "Brian White ", + "name": "busboy", + "version": "0.2.14", + "description": "A streaming parser for HTML form data for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:busboy:busboy:0.2.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/busboy@0.2.14", + "externalReferences": [ + { + "url": "http://github.com/mscdex/busboy.git", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "eb62c645e9680ee0", + "name": "busybox", + "version": "1.31.1", + "cpe": "cpe:2.3:a:busybox:busybox:1.31.1:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.31.1-r11?arch=x86_64&distro=alpine-3.11.13&package-id=3f3095cbef6e353", + "publisher": "Natanael Copa ", + "name": "busybox", + "version": "1.31.1-r11", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.31.1-r11:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.31.1-r11?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bytes@3.1.0?package-id=9b9980bcb7763199", + "author": "TJ Holowaychuk (http://tjholowaychuk.com)", + "name": "bytes", + "version": "3.1.0", + "description": "Utility to parse a string bytes to bytes and vice-versa", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bytes:bytes:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/bytes@3.1.0", + "externalReferences": [ + { + "url": "visionmedia/bytes.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-cacert@20191127-r2?arch=x86_64&upstream=ca-certificates&distro=alpine-3.11.13&package-id=e135ce85ed757130", + "publisher": "Natanael Copa ", + "name": "ca-certificates-cacert", + "version": "20191127-r2", + "description": "Mozilla bundled certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-cacert:ca-certificates-cacert:20191127-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-cacert@20191127-r2?arch=x86_64&upstream=ca-certificates&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/caseless@0.12.0?package-id=221908f94b11f2bf", + "author": "Mikeal Rogers ", + "name": "caseless", + "version": "0.12.0", + "description": "Caseless object set/get/has, very useful when working with HTTP headers.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:caseless:caseless:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/caseless@0.12.0", + "externalReferences": [ + { + "url": "https://github.com/mikeal/caseless", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chalk@4.1.2?package-id=fa63c4db8c85f06e", + "name": "chalk", + "version": "4.1.2", + "description": "Terminal string styling done right", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chalk:chalk:4.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/chalk@4.1.2", + "externalReferences": [ + { + "url": "chalk/chalk", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/class-transformer@0.3.1?package-id=6d35b09acf35095e", + "author": "Umed Khudoiberdiev ", + "name": "class-transformer", + "version": "0.3.1", + "description": "Proper decorator-based transformation / serialization / deserialization of plain javascript objects to class constructors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:class-transformer:class-transformer:0.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/class-transformer@0.3.1", + "externalReferences": [ + { + "url": "https://github.com/typestack/class-transformer.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/class-validator@0.12.2?package-id=643573d629b73678", + "author": "Umed Khudoiberdiev ", + "name": "class-validator", + "version": "0.12.2", + "description": "Class-based validation with Typescript / ES6 / ES5 using decorators or validation schemas. Supports both node.js and browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:class-validator:class-validator:0.12.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/class-validator@0.12.2", + "externalReferences": [ + { + "url": "https://github.com/typestack/class-validator.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/clone@2.1.2?package-id=ddeefb9a5c39ff9d", + "author": "Paul Vorbach (http://paul.vorba.ch/)", + "name": "clone", + "version": "2.1.2", + "description": "deep cloning of objects and arrays", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clone:clone:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/clone@2.1.2", + "externalReferences": [ + { + "url": "git://github.com/pvorb/node-clone.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-convert@2.0.1?package-id=ede9e43092bb946", + "author": "Heather Arthur ", + "name": "color-convert", + "version": "2.0.1", + "description": "Plain color conversion functions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@2.0.1", + "externalReferences": [ + { + "url": "Qix-/color-convert", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-name@1.1.4?package-id=1b53bfdbf817bc09", + "author": "DY ", + "name": "color-name", + "version": "1.1.4", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.4", + "externalReferences": [ + { + "url": "git@github.com:colorjs/color-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/colorjs/color-name", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/combined-stream@1.0.8?package-id=1815a102a95b1ebf", + "author": "Felix Geisendörfer (http://debuggable.com/)", + "name": "combined-stream", + "version": "1.0.8", + "description": "A stream that emits multiple other streams one after another.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:combined-stream:combined-stream:1.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/combined-stream@1.0.8", + "externalReferences": [ + { + "url": "git://github.com/felixge/node-combined-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/felixge/node-combined-stream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=365c0e5852decdee", + "author": "James Halliday (http://substack.net)", + "name": "concat-map", + "version": "0.0.1", + "description": "concatenative mapdashery", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-stream@1.6.2?package-id=625928c8328aeef2", + "author": "Max Ogden ", + "name": "concat-stream", + "version": "1.6.2", + "description": "writable stream that concatenates strings or binary data and calls a callback with the result", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-stream:concat-stream:1.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-stream@1.6.2", + "externalReferences": [ + { + "url": "http://github.com/maxogden/concat-stream.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/consola@2.15.3?package-id=8e45836dee2f9a42", + "name": "consola", + "version": "2.15.3", + "description": "Elegant Console Logger for Node.js and Browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:consola:consola:2.15.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/consola@2.15.3", + "externalReferences": [ + { + "url": "nuxt/consola", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/content-disposition@0.5.3?package-id=c38707d4f6028283", + "author": "Douglas Christopher Wilson ", + "name": "content-disposition", + "version": "0.5.3", + "description": "Create and parse Content-Disposition header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:content-disposition:content-disposition:0.5.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/content-disposition@0.5.3", + "externalReferences": [ + { + "url": "jshttp/content-disposition", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/content-type@1.0.4?package-id=a628c8ecfea96934", + "author": "Douglas Christopher Wilson ", + "name": "content-type", + "version": "1.0.4", + "description": "Create and parse HTTP Content-Type header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:content-type:content-type:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/content-type@1.0.4", + "externalReferences": [ + { + "url": "jshttp/content-type", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cookie@0.4.0?package-id=db0f82a3b6498333", + "author": "Roman Shtylman ", + "name": "cookie", + "version": "0.4.0", + "description": "HTTP server cookie parsing and serialization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie:cookie:0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie@0.4.0", + "externalReferences": [ + { + "url": "jshttp/cookie", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cookie-signature@1.0.6?package-id=5f31fb3f87889ab8", + "author": "TJ Holowaychuk ", + "name": "cookie-signature", + "version": "1.0.6", + "description": "Sign and unsign cookies", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie-signature:cookie-signature:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie-signature@1.0.6", + "externalReferences": [ + { + "url": "https://github.com/visionmedia/node-cookie-signature.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/core-util-is@1.0.2?package-id=c983dd40d7978937", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "core-util-is", + "version": "1.0.2", + "description": "The `util.is*` functions introduced in Node v0.12.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:core-util-is:core-util-is:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/core-util-is@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/core-util-is", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/core-util-is@1.0.3?package-id=dbb820a659873e98", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "core-util-is", + "version": "1.0.3", + "description": "The `util.is*` functions introduced in Node v0.12.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:core-util-is:core-util-is:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/core-util-is@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/core-util-is", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cors@2.8.5?package-id=b5af6190b535a540", + "author": "Troy Goode (https://github.com/troygoode/)", + "name": "cors", + "version": "2.8.5", + "description": "Node.js CORS middleware", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cors:cors:2.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/cors@2.8.5", + "externalReferences": [ + { + "url": "expressjs/cors", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dashdash@1.14.1?package-id=bfb8c12a112d1919", + "author": "Trent Mick (http://trentm.com)", + "name": "dashdash", + "version": "1.14.1", + "description": "A light, featureful and explicit option parsing library.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dashdash:dashdash:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/dashdash@1.14.1", + "externalReferences": [ + { + "url": "git://github.com/trentm/node-dashdash.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@2.6.9?package-id=3da4c2c2cbfbb047", + "author": "TJ Holowaychuk ", + "name": "debug", + "version": "2.6.9", + "description": "small debugging utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:visionmedia:debug:2.6.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@2.6.9", + "externalReferences": [ + { + "url": "git://github.com/visionmedia/debug.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@4.3.4?package-id=b12ad427500f6c64", + "author": "Josh Junon ", + "name": "debug", + "version": "4.3.4", + "description": "Lightweight debugging utility for Node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debug-js:debug:4.3.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@4.3.4", + "externalReferences": [ + { + "url": "git://github.com/debug-js/debug.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/delayed-stream@1.0.0?package-id=f797cfc3ebbb05a9", + "author": "Felix Geisendörfer (http://debuggable.com/)", + "name": "delayed-stream", + "version": "1.0.0", + "description": "Buffers events from a stream until you are ready to handle them.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:delayed-stream:delayed-stream:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/delayed-stream@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/felixge/node-delayed-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/felixge/node-delayed-stream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/depd@1.1.2?package-id=a2a20b51e5e43d41", + "author": "Douglas Christopher Wilson ", + "name": "depd", + "version": "1.1.2", + "description": "Deprecate all the things", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:depd:depd:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/depd@1.1.2", + "externalReferences": [ + { + "url": "dougwilson/nodejs-depd", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/destroy@1.0.4?package-id=a53fa70769e7c0c", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "destroy", + "version": "1.0.4", + "description": "destroy a stream if possible", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:destroy:destroy:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/destroy@1.0.4", + "externalReferences": [ + { + "url": "stream-utils/destroy", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dicer@0.2.5?package-id=2d612385fedcdd75", + "author": "Brian White ", + "name": "dicer", + "version": "0.2.5", + "description": "A very fast streaming multipart parser for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mscdex:dicer:0.2.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/dicer@0.2.5", + "externalReferences": [ + { + "url": "http://github.com/mscdex/dicer.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dotenv@16.0.2?package-id=37d1fe9c9157abb4", + "name": "dotenv", + "version": "16.0.2", + "description": "Loads environment variables from .env file", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:motdotla:dotenv:16.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/dotenv@16.0.2", + "externalReferences": [ + { + "url": "git://github.com/motdotla/dotenv.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ecc-jsbn@0.1.2?package-id=ffebd35e64a63a04", + "author": "Jeremie Miller (http://jeremie.com/)", + "name": "ecc-jsbn", + "version": "0.1.2", + "description": "ECC JS code based on JSBN", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:quartzjer:ecc-jsbn:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ecc-jsbn@0.1.2", + "externalReferences": [ + { + "url": "https://github.com/quartzjer/ecc-jsbn.git", + "type": "distribution" + }, + { + "url": "https://github.com/quartzjer/ecc-jsbn", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ee-first@1.1.1?package-id=ecddedc37ff4e45a", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "ee-first", + "version": "1.1.1", + "description": "return the first event in a set of ee/event pairs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ee-first:ee-first:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ee-first@1.1.1", + "externalReferences": [ + { + "url": "jonathanong/ee-first", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/encodeurl@1.0.2?package-id=4372fc523e1c5977", + "name": "encodeurl", + "version": "1.0.2", + "description": "Encode a URL to a percent-encoded form, excluding already-encoded sequences", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:encodeurl:encodeurl:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/encodeurl@1.0.2", + "externalReferences": [ + { + "url": "pillarjs/encodeurl", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/escape-html@1.0.3?package-id=f531ef9b02f6376", + "name": "escape-html", + "version": "1.0.3", + "description": "Escape string for use in HTML", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:escape-html:escape-html:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/escape-html@1.0.3", + "externalReferences": [ + { + "url": "component/escape-html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/esprima@4.0.1?package-id=3c7a8491f8e708ec", + "author": "Ariya Hidayat ", + "name": "esprima", + "version": "4.0.1", + "description": "ECMAScript parsing infrastructure for multipurpose analysis", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:esprima:esprima:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/esprima@4.0.1", + "externalReferences": [ + { + "url": "https://github.com/jquery/esprima.git", + "type": "distribution" + }, + { + "url": "http://esprima.org", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/etag@1.8.1?package-id=ceaf0764c2d4213b", + "name": "etag", + "version": "1.8.1", + "description": "Create simple HTTP ETags", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:etag:etag:1.8.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/etag@1.8.1", + "externalReferences": [ + { + "url": "jshttp/etag", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/express@4.17.1?package-id=10b8669cbfa1e704", + "author": "TJ Holowaychuk ", + "name": "express", + "version": "4.17.1", + "description": "Fast, unopinionated, minimalist web framework", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:express:express:4.17.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/express@4.17.1", + "externalReferences": [ + { + "url": "expressjs/express", + "type": "distribution" + }, + { + "url": "http://expressjs.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/extend@3.0.2?package-id=7791e2e67d96bf70", + "author": "Stefan Thomas (http://www.justmoon.net)", + "name": "extend", + "version": "3.0.2", + "description": "Port of jQuery.extend for node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:justmoon:extend:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/extend@3.0.2", + "externalReferences": [ + { + "url": "https://github.com/justmoon/node-extend.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/extsprintf@1.3.0?package-id=25826531f96c075b", + "name": "extsprintf", + "version": "1.3.0", + "description": "extended POSIX-style sprintf", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:davepacheco:extsprintf:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/extsprintf@1.3.0", + "externalReferences": [ + { + "url": "git://github.com/davepacheco/node-extsprintf.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-deep-equal@3.1.3?package-id=50fc8df9c652bfea", + "author": "Evgeny Poberezkin", + "name": "fast-deep-equal", + "version": "3.1.3", + "description": "Fast deep equal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-deep-equal:fast-deep-equal:3.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-deep-equal@3.1.3", + "externalReferences": [ + { + "url": "git+https://github.com/epoberezkin/fast-deep-equal.git", + "type": "distribution" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-json-stable-stringify@2.1.0?package-id=4c56416a0a0165fc", + "author": "James Halliday (http://substack.net)", + "name": "fast-json-stable-stringify", + "version": "2.1.0", + "description": "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-json-stable-stringify:fast-json-stable-stringify:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-json-stable-stringify@2.1.0", + "externalReferences": [ + { + "url": "git://github.com/epoberezkin/fast-json-stable-stringify.git", + "type": "distribution" + }, + { + "url": "https://github.com/epoberezkin/fast-json-stable-stringify", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-safe-stringify@2.0.7?package-id=c12cba20e0a81013", + "author": "David Mark Clements", + "name": "fast-safe-stringify", + "version": "2.0.7", + "description": "Safely and quickly serialize JavaScript objects", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-safe-stringify:fast-safe-stringify:2.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-safe-stringify@2.0.7", + "externalReferences": [ + { + "url": "git+https://github.com/davidmarkclements/fast-safe-stringify.git", + "type": "distribution" + }, + { + "url": "https://github.com/davidmarkclements/fast-safe-stringify#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fastify-plugin@3.0.1?package-id=8ce5710fd62dc089", + "author": "Tomas Della Vedova - @delvedor (http://delved.org)", + "name": "fastify-plugin", + "version": "3.0.1", + "description": "Plugin helper for Fastify", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fastify-plugin:fastify-plugin:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/fastify-plugin@3.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/fastify/fastify-plugin.git", + "type": "distribution" + }, + { + "url": "https://github.com/fastify/fastify-plugin#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fastify-static@3.4.0?package-id=7e49a469dea6cf1", + "author": "Tommaso Allevi - @allevo", + "name": "fastify-static", + "version": "3.4.0", + "description": "Plugin for serving static files as fast as possible.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fastify-static:fastify-static:3.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fastify-static@3.4.0", + "externalReferences": [ + { + "url": "https://github.com/fastify/fastify-static.git", + "type": "distribution" + }, + { + "url": "https://github.com/fastify/fastify-static", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fastify-swagger@3.5.0?package-id=36ac3481c48adce7", + "author": "Tomas Della Vedova - @delvedor (http://delved.org)", + "name": "fastify-swagger", + "version": "3.5.0", + "description": "Generate Swagger files automatically for Fastify.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fastify-swagger:fastify-swagger:3.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fastify-swagger@3.5.0", + "externalReferences": [ + { + "url": "git+https://github.com/fastify/fastify-swagger.git", + "type": "distribution" + }, + { + "url": "https://github.com/fastify/fastify-swagger#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/finalhandler@1.1.2?package-id=c5db4477c66cef3d", + "author": "Douglas Christopher Wilson ", + "name": "finalhandler", + "version": "1.1.2", + "description": "Node.js final http responder", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:finalhandler:finalhandler:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/finalhandler@1.1.2", + "externalReferences": [ + { + "url": "pillarjs/finalhandler", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/follow-redirects@1.15.2?package-id=f99b748737390e38", + "author": "Ruben Verborgh (https://ruben.verborgh.org/)", + "name": "follow-redirects", + "version": "1.15.2", + "description": "HTTP and HTTPS modules that follow redirects.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:follow-redirects:follow-redirects:1.15.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/follow-redirects@1.15.2", + "externalReferences": [ + { + "url": "git@github.com:follow-redirects/follow-redirects.git", + "type": "distribution" + }, + { + "url": "https://github.com/follow-redirects/follow-redirects", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/forever-agent@0.6.1?package-id=c25138b8f27cb6de", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "forever-agent", + "version": "0.6.1", + "description": "HTTP Agent that keeps socket connections alive between keep-alive requests. Formerly part of mikeal/request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:forever-agent:forever-agent:0.6.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/forever-agent@0.6.1", + "externalReferences": [ + { + "url": "https://github.com/mikeal/forever-agent", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/form-data@2.3.3?package-id=a4db7a65123703d7", + "author": "Felix Geisendörfer (http://debuggable.com/)", + "name": "form-data", + "version": "2.3.3", + "description": "A library to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:form-data:form-data:2.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/form-data@2.3.3", + "externalReferences": [ + { + "url": "git://github.com/form-data/form-data.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/forwarded@0.2.0?package-id=ad40eb2bb2cdc901", + "name": "forwarded", + "version": "0.2.0", + "description": "Parse HTTP X-Forwarded-For header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:forwarded:forwarded:0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/forwarded@0.2.0", + "externalReferences": [ + { + "url": "jshttp/forwarded", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fresh@0.5.2?package-id=611b251fb71eb02", + "author": "TJ Holowaychuk (http://tjholowaychuk.com)", + "name": "fresh", + "version": "0.5.2", + "description": "HTTP response freshness testing", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fresh:fresh:0.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/fresh@0.5.2", + "externalReferences": [ + { + "url": "jshttp/fresh", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=e3859c9f856fd75c", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs.realpath", + "version": "1.0.0", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/getpass@0.1.7?package-id=15b9f67c553ff142", + "author": "Alex Wilson ", + "name": "getpass", + "version": "0.1.7", + "description": "getpass for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:arekinath:getpass:0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/getpass@0.1.7", + "externalReferences": [ + { + "url": "https://github.com/arekinath/node-getpass.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.2.3?package-id=50a57845f8268bd9", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.2.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/google-libphonenumber@3.2.31?package-id=d2704c6162061356", + "author": "Rui Marinho ", + "name": "google-libphonenumber", + "version": "3.2.31", + "description": "The up-to-date and reliable Google's libphonenumber package for node.js.", + "licenses": [ + { + "license": { + "name": "(MIT AND Apache-2.0)" + } + } + ], + "cpe": "cpe:2.3:a:google-libphonenumber:google-libphonenumber:3.2.31:*:*:*:*:*:*:*", + "purl": "pkg:npm/google-libphonenumber@3.2.31", + "externalReferences": [ + { + "url": "https://github.com/ruimarinho/google-libphonenumber.git", + "type": "distribution" + }, + { + "url": "https://ruimarinho.github.io/google-libphonenumber/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/har-schema@2.0.0?package-id=5f7076af7b8ab3b6", + "author": "Ahmad Nassri (https://www.ahmadnassri.com/)", + "name": "har-schema", + "version": "2.0.0", + "description": "JSON Schema for HTTP Archive (HAR)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ahmadnassri:har-schema:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/har-schema@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/ahmadnassri/har-schema.git", + "type": "distribution" + }, + { + "url": "https://github.com/ahmadnassri/har-schema", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/har-validator@5.1.5?package-id=e50dc896c187031b", + "author": "Ahmad Nassri (https://www.ahmadnassri.com/)", + "name": "har-validator", + "version": "5.1.5", + "description": "Extremely fast HTTP Archive (HAR) validator using JSON Schema", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:har-validator:har-validator:5.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/har-validator@5.1.5", + "externalReferences": [ + { + "url": "https://github.com/ahmadnassri/node-har-validator.git", + "type": "distribution" + }, + { + "url": "https://github.com/ahmadnassri/node-har-validator", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-flag@4.0.0?package-id=f69253adfef44160", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "has-flag", + "version": "4.0.0", + "description": "Check if argv has a specific flag", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-flag:has-flag:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-flag@4.0.0", + "externalReferences": [ + { + "url": "sindresorhus/has-flag", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-errors@1.7.2?package-id=4c85a4da72f2dbad", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "http-errors", + "version": "1.7.2", + "description": "Create HTTP error objects", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-errors:http-errors:1.7.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-errors@1.7.2", + "externalReferences": [ + { + "url": "jshttp/http-errors", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-signature@1.2.0?package-id=9a991d3938b7d038", + "author": "Joyent, Inc", + "name": "http-signature", + "version": "1.2.0", + "description": "Reference implementation of Joyent's HTTP Signature scheme.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-signature:http-signature:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-signature@1.2.0", + "externalReferences": [ + { + "url": "git://github.com/joyent/node-http-signature.git", + "type": "distribution" + }, + { + "url": "https://github.com/joyent/node-http-signature/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iconv-lite@0.4.24?package-id=5b9a586d4ff6589f", + "author": "Alexander Shtuchkin ", + "name": "iconv-lite", + "version": "0.4.24", + "description": "Convert character encodings in pure javascript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.4.24:*:*:*:*:*:*:*", + "purl": "pkg:npm/iconv-lite@0.4.24", + "externalReferences": [ + { + "url": "git://github.com/ashtuchkin/iconv-lite.git", + "type": "distribution" + }, + { + "url": "https://github.com/ashtuchkin/iconv-lite", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inflight@1.0.6?package-id=30c024273863343f", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "inflight", + "version": "1.0.6", + "description": "Add callbacks to requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "https://github.com/npm/inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.3?package-id=8f61c802178ab66a", + "name": "inherits", + "version": "2.0.3", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/inherits", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ipaddr.js@1.9.1?package-id=a33cb559fc812015", + "author": "whitequark ", + "name": "ipaddr.js", + "version": "1.9.1", + "description": "A library for manipulating IPv4 and IPv6 addresses in JavaScript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:whitequark:ipaddr.js:1.9.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ipaddr.js@1.9.1", + "externalReferences": [ + { + "url": "git://github.com/whitequark/ipaddr.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-typedarray@1.0.0?package-id=e719ed77b7d38e33", + "author": "Hugh Kennedy (http://hughsk.io/)", + "name": "is-typedarray", + "version": "1.0.0", + "description": "Detect whether or not an object is a Typed Array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-typedarray:is-typedarray:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-typedarray@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/hughsk/is-typedarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/hughsk/is-typedarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isarray@0.0.1?package-id=4eab13fd6138583f", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "isarray", + "version": "0.0.1", + "description": "Array#isArray for older browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juliangruber:isarray:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/isarray@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/isarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/isarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isarray@1.0.0?package-id=67e7a38d852b614a", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "isarray", + "version": "1.0.0", + "description": "Array#isArray for older browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juliangruber:isarray:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isarray@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/isarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/isarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isstream@0.1.2?package-id=1796db715939d54d", + "author": "Rod Vagg ", + "name": "isstream", + "version": "0.1.2", + "description": "Determine if an object is a Stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isstream:isstream:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/isstream@0.1.2", + "externalReferences": [ + { + "url": "https://github.com/rvagg/isstream.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/isstream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iterare@1.2.1?package-id=45a8c745e9393653", + "author": "Felix Becker ", + "name": "iterare", + "version": "1.2.1", + "description": "Array methods for ES6 Iterators", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:felixfbecker:iterare:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/iterare@1.2.1", + "externalReferences": [ + { + "url": "https://github.com/felixfbecker/iterare", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/js-yaml@3.14.1?package-id=936abc8eee132e4", + "author": "Vladimir Zapparov ", + "name": "js-yaml", + "version": "3.14.1", + "description": "YAML 1.2 parser and serializer", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:js-yaml:js-yaml:3.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/js-yaml@3.14.1", + "externalReferences": [ + { + "url": "nodeca/js-yaml", + "type": "distribution" + }, + { + "url": "https://github.com/nodeca/js-yaml", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsbn@0.1.1?package-id=221bb7ced8fe5a78", + "author": "Tom Wu", + "name": "jsbn", + "version": "0.1.1", + "description": "The jsbn library is a fast, portable implementation of large-number math in pure JavaScript, enabling public-key crypto and other applications on desktop and mobile browsers.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:andyperlitch:jsbn:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsbn@0.1.1", + "externalReferences": [ + { + "url": "https://github.com/andyperlitch/jsbn.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema@0.4.0?package-id=ca754b1364dba8bb", + "author": "Kris Zyp", + "name": "json-schema", + "version": "0.4.0", + "description": "JSON Schema validation and specifications", + "licenses": [ + { + "license": { + "name": "(AFL-2.1 OR BSD-3-Clause)" + } + } + ], + "cpe": "cpe:2.3:a:json-schema:json-schema:0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema@0.4.0", + "externalReferences": [ + { + "url": "http://github.com/kriszyp/json-schema", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema-resolver@1.3.0?package-id=a6561614e3c31970", + "author": "Manuel Spigolon (https://github.com/Eomm)", + "name": "json-schema-resolver", + "version": "1.3.0", + "description": "Resolve all your $refs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-schema-resolver:json-schema-resolver:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema-resolver@1.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/Eomm/json-schema-resolver.git", + "type": "distribution" + }, + { + "url": "https://github.com/Eomm/json-schema-resolver#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema-traverse@0.4.1?package-id=285c4d6d5ff842", + "author": "Evgeny Poberezkin", + "name": "json-schema-traverse", + "version": "0.4.1", + "description": "Traverse JSON Schema passing each schema object to callback", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-schema-traverse:json-schema-traverse:0.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema-traverse@0.4.1", + "externalReferences": [ + { + "url": "git+https://github.com/epoberezkin/json-schema-traverse.git", + "type": "distribution" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-stringify-safe@5.0.1?package-id=a160b0f4a9bea77e", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "json-stringify-safe", + "version": "5.0.1", + "description": "Like JSON.stringify, but doesn't blow up on circular refs.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:json-stringify-safe:json-stringify-safe:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-stringify-safe@5.0.1", + "externalReferences": [ + { + "url": "git://github.com/isaacs/json-stringify-safe", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/json-stringify-safe", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonschema@1.4.1?package-id=144a946eabfa9c32", + "author": "Tom de Grunt ", + "name": "jsonschema", + "version": "1.4.1", + "description": "A fast and easy to use JSON Schema validator", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jsonschema:jsonschema:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonschema@1.4.1", + "externalReferences": [ + { + "url": "git://github.com/tdegrunt/jsonschema.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsprim@1.4.2?package-id=bec0b682350f7528", + "name": "jsprim", + "version": "1.4.2", + "description": "utilities for primitive JavaScript types", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:joyent:jsprim:1.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsprim@1.4.2", + "externalReferences": [ + { + "url": "git://github.com/joyent/node-jsprim.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r0?arch=x86_64&upstream=libc-dev&distro=alpine-3.11.13&package-id=22b2a81fa39d5dd2", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r0", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r0?arch=x86_64&upstream=libc-dev&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "http://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&upstream=openssl&distro=alpine-3.11.13&package-id=9dc8a627b3dc6e7c", + "publisher": "Timo Teras ", + "name": "libcrypto1.1", + "version": "1.1.1l-r0", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1l-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&upstream=openssl&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.openssl.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgcc@9.3.0-r0?arch=x86_64&upstream=gcc&distro=alpine-3.11.13&package-id=89cc23c6449d2429", + "publisher": "Natanael Copa ", + "name": "libgcc", + "version": "9.3.0-r0", + "description": "GNU C compiler runtime libraries", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcc:libgcc:9.3.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgcc@9.3.0-r0?arch=x86_64&upstream=gcc&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "http://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&upstream=openssl&distro=alpine-3.11.13&package-id=286e1bd630e38068", + "publisher": "Timo Teras ", + "name": "libssl1.1", + "version": "1.1.1l-r0", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1l-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&upstream=openssl&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.openssl.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libstdc++@9.3.0-r0?arch=x86_64&upstream=gcc&distro=alpine-3.11.13&package-id=6fd631fecbbb6585", + "publisher": "Natanael Copa ", + "name": "libstdc++", + "version": "9.3.0-r0", + "description": "GNU C++ standard runtime library", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:9.3.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libstdc++@9.3.0-r0?arch=x86_64&upstream=gcc&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "http://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libtls-standalone@2.9.1-r0?arch=x86_64&distro=alpine-3.11.13&package-id=44d013a47dc758aa", + "name": "libtls-standalone", + "version": "2.9.1-r0", + "description": "libtls extricated from libressl sources", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libtls-standalone:libtls-standalone:2.9.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libtls-standalone@2.9.1-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.libressl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/linked-queue@1.0.3?package-id=6a98e1e0c1c18f8a", + "author": "Hung Nguyen ", + "name": "linked-queue", + "version": "1.0.3", + "description": "Queues using linked list, faster than array.shift(), support enqueue,dequeue,enqueue all, dequeue all, clear, forEach, first, last", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:linked-queue:linked-queue:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/linked-queue@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/hungntit/lqueue.git", + "type": "distribution" + }, + { + "url": "https://github.com/hungntit/lqueue#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash@4.17.21?package-id=6047cd16d33b78f4", + "author": "John-David Dalton ", + "name": "lodash", + "version": "4.17.21", + "description": "Lodash modular utilities.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash:lodash:4.17.21:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash@4.17.21", + "externalReferences": [ + { + "url": "lodash/lodash", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/media-typer@0.3.0?package-id=5ee412145f832035", + "author": "Douglas Christopher Wilson ", + "name": "media-typer", + "version": "0.3.0", + "description": "Simple RFC 6838 media type parser and formatter", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:media-typer:media-typer:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/media-typer@0.3.0", + "externalReferences": [ + { + "url": "jshttp/media-typer", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/merge-descriptors@1.0.1?package-id=3f6c0ab125751474", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "merge-descriptors", + "version": "1.0.1", + "description": "Merge objects using descriptors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:merge-descriptors:merge-descriptors:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/merge-descriptors@1.0.1", + "externalReferences": [ + { + "url": "component/merge-descriptors", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/methods@1.1.2?package-id=15a8c45d09fc8d99", + "name": "methods", + "version": "1.1.2", + "description": "HTTP methods that node supports", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:methods:methods:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/methods@1.1.2", + "externalReferences": [ + { + "url": "jshttp/methods", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime@1.6.0?package-id=6f5b549e9935a4d3", + "author": "Robert Kieffer (http://github.com/broofa)", + "name": "mime", + "version": "1.6.0", + "description": "A comprehensive library for mime-type mapping", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:broofa:mime:1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime@1.6.0", + "externalReferences": [ + { + "url": "https://github.com/broofa/node-mime", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-db@1.52.0?package-id=403a2724d6dab6f1", + "name": "mime-db", + "version": "1.52.0", + "description": "Media Type Database", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-db:mime-db:1.52.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-db@1.52.0", + "externalReferences": [ + { + "url": "jshttp/mime-db", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-types@2.1.35?package-id=761ad31d16a93070", + "name": "mime-types", + "version": "2.1.35", + "description": "The ultimate javascript content-type utility.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-types:mime-types:2.1.35:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-types@2.1.35", + "externalReferences": [ + { + "url": "jshttp/mime-types", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.1.2?package-id=9b77623d14038b42", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.1.2", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimist@1.2.6?package-id=b432279d3f151180", + "author": "James Halliday (http://substack.net)", + "name": "minimist", + "version": "1.2.6", + "description": "parse argument options", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minimist:minimist:1.2.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimist@1.2.6", + "externalReferences": [ + { + "url": "git://github.com/substack/minimist.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/minimist", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp@0.5.6?package-id=8fe2c2c6668f6890", + "author": "James Halliday (http://substack.net)", + "name": "mkdirp", + "version": "0.5.6", + "description": "Recursively mkdir, like `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:substack:mkdirp:0.5.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp@0.5.6", + "externalReferences": [ + { + "url": "https://github.com/substack/node-mkdirp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.0.0?package-id=188f44433460d00d", + "name": "ms", + "version": "2.0.0", + "description": "Tiny milisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ms:ms:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.0.0", + "externalReferences": [ + { + "url": "zeit/ms", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.1?package-id=945089044e883417", + "name": "ms", + "version": "2.1.1", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ms:ms:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.1", + "externalReferences": [ + { + "url": "zeit/ms", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.2?package-id=4ce80519f65a6aeb", + "name": "ms", + "version": "2.1.2", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ms:ms:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "url": "zeit/ms", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/multer@1.4.2?package-id=250b8ef9ecf095fd", + "name": "multer", + "version": "1.4.2", + "description": "Middleware for handling `multipart/form-data`.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:multer:multer:1.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/multer@1.4.2", + "externalReferences": [ + { + "url": "expressjs/multer", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.1.24-r3?arch=x86_64&distro=alpine-3.11.13&package-id=485b70fc6d5760", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.1.24-r3", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.1.24-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.1.24-r3?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.1.24-r3?arch=x86_64&upstream=musl&distro=alpine-3.11.13&package-id=fc850f3aca8a5da", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.1.24-r3", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.1.24-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.1.24-r3?arch=x86_64&upstream=musl&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/negotiator@0.6.3?package-id=bb169d2c6ba1f856", + "name": "negotiator", + "version": "0.6.3", + "description": "HTTP content negotiation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:negotiator:negotiator:0.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/negotiator@0.6.3", + "externalReferences": [ + { + "url": "jshttp/negotiator", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "pkg:generic/node@15.12.0?package-id=35373778dc80f093", + "name": "node", + "version": "15.12.0", + "cpe": "cpe:2.3:a:nodejs:node.js:15.12.0:*:*:*:*:*:*:*", + "purl": "pkg:generic/node@15.12.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-fetch@2.6.7?package-id=f88958d48d9976b4", + "author": "David Frank", + "name": "node-fetch", + "version": "2.6.7", + "description": "A light-weight module that brings window.fetch to node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-fetch:node-fetch:2.6.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-fetch@2.6.7", + "externalReferences": [ + { + "url": "https://github.com/bitinn/node-fetch.git", + "type": "distribution" + }, + { + "url": "https://github.com/bitinn/node-fetch", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/oauth-sign@0.9.0?package-id=b618b0fa581b813f", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "oauth-sign", + "version": "0.9.0", + "description": "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:oauth-sign:oauth-sign:0.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/oauth-sign@0.9.0", + "externalReferences": [ + { + "url": "https://github.com/mikeal/oauth-sign", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-assign@4.1.1?package-id=9d2fa57337157e31", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "object-assign", + "version": "4.1.1", + "description": "ES2015 `Object.assign()` ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-assign:object-assign:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-assign@4.1.1", + "externalReferences": [ + { + "url": "sindresorhus/object-assign", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-hash@2.1.1?package-id=a9e2e73b131ec362", + "author": "Scott Puleo ", + "name": "object-hash", + "version": "2.1.1", + "description": "Generate hashes from javascript objects in node and the browser.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-hash:object-hash:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-hash@2.1.1", + "externalReferences": [ + { + "url": "https://github.com/puleos/object-hash", + "type": "distribution" + }, + { + "url": "https://github.com/puleos/object-hash", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/on-finished@2.3.0?package-id=3c6c0c8ba3bf4ee6", + "name": "on-finished", + "version": "2.3.0", + "description": "Execute a callback when a request closes, finishes, or errors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:on-finished:on-finished:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/on-finished@2.3.0", + "externalReferences": [ + { + "url": "jshttp/on-finished", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/once@1.4.0?package-id=6a66d209255e8adb", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "once", + "version": "1.4.0", + "description": "Run a function exactly one time", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:once:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/once", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/parseurl@1.3.3?package-id=2af9256e9eccb4f5", + "name": "parseurl", + "version": "1.3.3", + "description": "parse a url with memoization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:parseurl:parseurl:1.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/parseurl@1.3.3", + "externalReferences": [ + { + "url": "pillarjs/parseurl", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=ca0320bcc1f00114", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-is-absolute", + "version": "1.0.1", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "sindresorhus/path-is-absolute", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-to-regexp@0.1.7?package-id=33dc602dbc9c9fbf", + "name": "path-to-regexp", + "version": "0.1.7", + "description": "Express style path to RegExp utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-to-regexp:path-to-regexp:0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-to-regexp@0.1.7", + "externalReferences": [ + { + "url": "https://github.com/component/path-to-regexp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-to-regexp@3.2.0?package-id=d3cca60b642f3825", + "name": "path-to-regexp", + "version": "3.2.0", + "description": "Express style path to RegExp utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-to-regexp:path-to-regexp:3.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-to-regexp@3.2.0", + "externalReferences": [ + { + "url": "https://github.com/pillarjs/path-to-regexp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/performance-now@2.1.0?package-id=33fda45cab4efc34", + "author": "Braveg1rl ", + "name": "performance-now", + "version": "2.1.0", + "description": "Implements performance.now (based on process.hrtime).", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:performance-now:performance-now:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/performance-now@2.1.0", + "externalReferences": [ + { + "url": "git://github.com/braveg1rl/performance-now.git", + "type": "distribution" + }, + { + "url": "https://github.com/braveg1rl/performance-now", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pliant-flow-converter@0.0.1?package-id=1ac38d88d18bd4c5", + "name": "pliant-flow-converter", + "version": "0.0.1", + "licenses": [ + { + "license": { + "name": "UNLICENSED" + } + } + ], + "cpe": "cpe:2.3:a:pliant-flow-converter:pliant-flow-converter:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/pliant-flow-converter@0.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/process-nextick-args@2.0.1?package-id=e40e9e1f49dce12f", + "name": "process-nextick-args", + "version": "2.0.1", + "description": "process.nextTick but always with args", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:process-nextick-args:process-nextick-args:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/process-nextick-args@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/calvinmetcalf/process-nextick-args.git", + "type": "distribution" + }, + { + "url": "https://github.com/calvinmetcalf/process-nextick-args", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/proxy-addr@2.0.7?package-id=37d1d32cf6c7543a", + "author": "Douglas Christopher Wilson ", + "name": "proxy-addr", + "version": "2.0.7", + "description": "Determine address of proxied request", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:proxy-addr:proxy-addr:2.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/proxy-addr@2.0.7", + "externalReferences": [ + { + "url": "jshttp/proxy-addr", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/psl@1.9.0?package-id=ab1c072ffd28101b", + "author": "Lupo Montero (https://lupomontero.com/)", + "name": "psl", + "version": "1.9.0", + "description": "Domain name parser based on the Public Suffix List", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:psl:psl:1.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/psl@1.9.0", + "externalReferences": [ + { + "url": "git@github.com:lupomontero/psl.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/punycode@2.1.1?package-id=fcf18547b0e856e5", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "punycode", + "version": "2.1.1", + "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bestiejs:punycode:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/punycode@2.1.1", + "externalReferences": [ + { + "url": "https://github.com/bestiejs/punycode.js.git", + "type": "distribution" + }, + { + "url": "https://mths.be/punycode", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/qs@6.5.3?package-id=bb49b99015745f72", + "name": "qs", + "version": "6.5.3", + "description": "A querystring parser that supports nesting and arrays, with a depth limit", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:ljharb:qs:6.5.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/qs@6.5.3", + "externalReferences": [ + { + "url": "https://github.com/ljharb/qs.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/qs", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/qs@6.7.0?package-id=14cc4b940f3dada7", + "name": "qs", + "version": "6.7.0", + "description": "A querystring parser that supports nesting and arrays, with a depth limit", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:ljharb:qs:6.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/qs@6.7.0", + "externalReferences": [ + { + "url": "https://github.com/ljharb/qs.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/qs", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/range-parser@1.2.1?package-id=c2944ba157538539", + "author": "TJ Holowaychuk (http://tjholowaychuk.com)", + "name": "range-parser", + "version": "1.2.1", + "description": "Range header field string parser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:range-parser:range-parser:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/range-parser@1.2.1", + "externalReferences": [ + { + "url": "jshttp/range-parser", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/raw-body@2.4.0?package-id=9f97269c1ea647f4", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "raw-body", + "version": "2.4.0", + "description": "Get and validate the raw body of a readable stream.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:raw-body:raw-body:2.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/raw-body@2.4.0", + "externalReferences": [ + { + "url": "stream-utils/raw-body", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@1.1.14?package-id=3dc690cb53b2e336", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "readable-stream", + "version": "1.1.14", + "description": "Streams3, a user-land copy of the stream library from Node.js v0.11.x", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:1.1.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@1.1.14", + "externalReferences": [ + { + "url": "git://github.com/isaacs/readable-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.7?package-id=9e96f166ea078b0b", + "name": "readable-stream", + "version": "2.3.7", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.7", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@3.6.0?package-id=5f6e30ef9202613f", + "name": "readable-stream", + "version": "3.6.0", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:3.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@3.6.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/reflect-metadata@0.1.13?package-id=fd6c3616d9a1ea26", + "author": "Ron Buckton (http://github.com/rbuckton)", + "name": "reflect-metadata", + "version": "0.1.13", + "description": "Polyfill for Metadata Reflection API", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:reflect-metadata:reflect-metadata:0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/reflect-metadata@0.1.13", + "externalReferences": [ + { + "url": "https://github.com/rbuckton/reflect-metadata.git", + "type": "distribution" + }, + { + "url": "http://rbuckton.github.io/reflect-metadata", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/request@2.88.2?package-id=6e967c01797dfee7", + "author": "Mikeal Rogers ", + "name": "request", + "version": "2.88.2", + "description": "Simplified HTTP request client.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:request:request:2.88.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/request@2.88.2", + "externalReferences": [ + { + "url": "https://github.com/request/request.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/request-promise-core@1.1.4?package-id=cace198e93a0ac1a", + "author": "Nicolai Kamenzky (https://github.com/analog-nico)", + "name": "request-promise-core", + "version": "1.1.4", + "description": "Core Promise support implementation for the simplified HTTP request client 'request'.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:request-promise-core:request-promise-core:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/request-promise-core@1.1.4", + "externalReferences": [ + { + "url": "git+https://github.com/request/promise-core.git", + "type": "distribution" + }, + { + "url": "https://github.com/request/promise-core#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/request-promise-native@1.0.9?package-id=aaa680f997a6fc93", + "author": "Nicolai Kamenzky (https://github.com/analog-nico)", + "name": "request-promise-native", + "version": "1.0.9", + "description": "The simplified HTTP request client 'request' with Promise support. Powered by native ES6 promises.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:request-promise-native:request-promise-native:1.0.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/request-promise-native@1.0.9", + "externalReferences": [ + { + "url": "git+https://github.com/request/request-promise-native.git", + "type": "distribution" + }, + { + "url": "https://github.com/request/request-promise-native#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/require-from-string@2.0.2?package-id=739c440c697446fc", + "author": "Vsevolod Strukchinsky (github.com/floatdrop)", + "name": "require-from-string", + "version": "2.0.2", + "description": "Require module from string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:require-from-string:require-from-string:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/require-from-string@2.0.2", + "externalReferences": [ + { + "url": "floatdrop/require-from-string", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/require-module@0.1.0?package-id=c8de46f8af77b22a", + "author": "Thorsten Lorenz (http://thlorenz.com)", + "name": "require-module", + "version": "0.1.0", + "description": "Requires a module found relative to given root or working directory.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:require-module:require-module:0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/require-module@0.1.0", + "externalReferences": [ + { + "url": "git://github.com/thlorenz/require-module.git", + "type": "distribution" + }, + { + "url": "https://github.com/thlorenz/require-module", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/resolve@0.6.3?package-id=644481495e094d7e", + "author": "James Halliday (http://substack.net)", + "name": "resolve", + "version": "0.6.3", + "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:substack:resolve:0.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/resolve@0.6.3", + "externalReferences": [ + { + "url": "git://github.com/substack/node-resolve.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rfdc@1.3.0?package-id=c42ea943f6301922", + "author": "David Mark Clements ", + "name": "rfdc", + "version": "1.3.0", + "description": "Really Fast Deep Clone", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:davidmarkclements:rfdc:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/rfdc@1.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/davidmarkclements/rfdc.git", + "type": "distribution" + }, + { + "url": "https://github.com/davidmarkclements/rfdc#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rxjs@6.6.7?package-id=4f05fae8827c5fc3", + "author": "Ben Lesh ", + "name": "rxjs", + "version": "6.6.7", + "description": "Reactive Extensions for modern JavaScript", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:ReactiveX:rxjs:6.6.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/rxjs@6.6.7", + "externalReferences": [ + { + "url": "https://github.com/reactivex/rxjs.git", + "type": "distribution" + }, + { + "url": "https://github.com/ReactiveX/RxJS", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=ad8e4b783ec0cc69", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=dea359a9da63b3e8", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "safe-buffer", + "version": "5.2.1", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=80f8422ca3238468", + "author": "Nikita Skovoroda (https://github.com/ChALkeR)", + "name": "safer-buffer", + "version": "2.1.2", + "description": "Modern Buffer API polyfill without footguns", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safer-buffer@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/ChALkeR/safer-buffer.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.2.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.11.13&package-id=d7d0b4983b78c706", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.2.4-r0", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.2.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.2.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/send@0.17.1?package-id=7dffc1d2e3f92043", + "author": "TJ Holowaychuk ", + "name": "send", + "version": "0.17.1", + "description": "Better streaming static file server with Range and conditional-GET support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:send:send:0.17.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/send@0.17.1", + "externalReferences": [ + { + "url": "pillarjs/send", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/serve-static@1.14.1?package-id=f832e52e2d8996cb", + "author": "Douglas Christopher Wilson ", + "name": "serve-static", + "version": "1.14.1", + "description": "Serve static files", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:serve-static:serve-static:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/serve-static@1.14.1", + "externalReferences": [ + { + "url": "expressjs/serve-static", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/setprototypeof@1.1.1?package-id=32889ff192d43014", + "author": "Wes Todd", + "name": "setprototypeof", + "version": "1.1.1", + "description": "A small polyfill for Object.setprototypeof", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:setprototypeof:setprototypeof:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/setprototypeof@1.1.1", + "externalReferences": [ + { + "url": "https://github.com/wesleytodd/setprototypeof.git", + "type": "distribution" + }, + { + "url": "https://github.com/wesleytodd/setprototypeof", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sprintf-js@1.0.3?package-id=e69a185108240b00", + "author": "Alexandru Marasteanu (http://alexei.ro/)", + "name": "sprintf-js", + "version": "1.0.3", + "description": "JavaScript sprintf implementation", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:sprintf-js:sprintf-js:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/sprintf-js@1.0.3", + "externalReferences": [ + { + "url": "https://github.com/alexei/sprintf.js.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sshpk@1.17.0?package-id=7fcc111acb9b8e10", + "author": "Joyent, Inc", + "name": "sshpk", + "version": "1.17.0", + "description": "A library for finding and using SSH public keys", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:arekinath:sshpk:1.17.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/sshpk@1.17.0", + "externalReferences": [ + { + "url": "git+https://github.com/joyent/node-sshpk.git", + "type": "distribution" + }, + { + "url": "https://github.com/arekinath/node-sshpk#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.31.1-r11?arch=x86_64&upstream=busybox&distro=alpine-3.11.13&package-id=685c6f235663ea24", + "publisher": "Natanael Copa ", + "name": "ssl_client", + "version": "1.31.1-r11", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.31.1-r11:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.31.1-r11?arch=x86_64&upstream=busybox&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/statuses@1.5.0?package-id=7ab4b68e7e88520b", + "name": "statuses", + "version": "1.5.0", + "description": "HTTP status utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:statuses:statuses:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/statuses@1.5.0", + "externalReferences": [ + { + "url": "jshttp/statuses", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/stealthy-require@1.1.1?package-id=c9d362abc885b44", + "author": "Nicolai Kamenzky (https://github.com/analog-nico)", + "name": "stealthy-require", + "version": "1.1.1", + "description": "The closest you can get to require something with bypassing the require cache", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:stealthy-require:stealthy-require:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/stealthy-require@1.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/analog-nico/stealthy-require.git", + "type": "distribution" + }, + { + "url": "https://github.com/analog-nico/stealthy-require#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/streamsearch@0.1.2?package-id=816d843ca19c8f00", + "author": "Brian White ", + "name": "streamsearch", + "version": "0.1.2", + "description": "Streaming Boyer-Moore-Horspool searching for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:streamsearch:streamsearch:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/streamsearch@0.1.2", + "externalReferences": [ + { + "url": "http://github.com/mscdex/streamsearch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@0.10.31?package-id=842458f1d210431a", + "name": "string_decoder", + "version": "0.10.31", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:0.10.31:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@0.10.31", + "externalReferences": [ + { + "url": "git://github.com/rvagg/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=a6eeeaeb8b6353ea", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.3.0?package-id=804f0a28a30f2774", + "name": "string_decoder", + "version": "1.3.0", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-color@7.2.0?package-id=b12cfc056aff0a2a", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "supports-color", + "version": "7.2.0", + "description": "Detect whether a terminal supports color", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-color:supports-color:7.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-color@7.2.0", + "externalReferences": [ + { + "url": "chalk/supports-color", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/swagger-ui-dist@4.14.2?package-id=d5d4acd98ac04772", + "name": "swagger-ui-dist", + "version": "4.14.2", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:swagger-ui-dist:swagger-ui-dist:4.14.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/swagger-ui-dist@4.14.2", + "externalReferences": [ + { + "url": "git@github.com:swagger-api/swagger-ui.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/swagger-ui-express@4.5.0?package-id=2634b6d602813a49", + "author": "Stephen Scott ", + "name": "swagger-ui-express", + "version": "4.5.0", + "description": "Swagger UI Express", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:swagger-ui-express:swagger-ui-express:4.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/swagger-ui-express@4.5.0", + "externalReferences": [ + { + "url": "git@github.com:scottie1984/swagger-ui-express.git", + "type": "distribution" + }, + { + "url": "https://github.com/scottie1984/swagger-ui-express", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/toidentifier@1.0.0?package-id=73e3300187220c93", + "author": "Douglas Christopher Wilson ", + "name": "toidentifier", + "version": "1.0.0", + "description": "Convert a string of words to a JavaScript identifier", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:toidentifier:toidentifier:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/toidentifier@1.0.0", + "externalReferences": [ + { + "url": "component/toidentifier", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tough-cookie@2.5.0?package-id=84ac1ba3e7a7e035", + "author": "Jeremy Stashewsky ", + "name": "tough-cookie", + "version": "2.5.0", + "description": "RFC6265 Cookies and Cookie Jar for node.js", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:tough-cookie:tough-cookie:2.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tough-cookie@2.5.0", + "externalReferences": [ + { + "url": "git://github.com/salesforce/tough-cookie.git", + "type": "distribution" + }, + { + "url": "https://github.com/salesforce/tough-cookie", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tr46@0.0.3?package-id=d3c5ac58d5c51d2a", + "author": "Sebastian Mayr ", + "name": "tr46", + "version": "0.0.3", + "description": "An implementation of the Unicode TR46 spec", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:Sebmaster:tr46:0.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/tr46@0.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/Sebmaster/tr46.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/Sebmaster/tr46.js#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslib@1.14.1?package-id=111a065e7906003c", + "author": "Microsoft Corp.", + "name": "tslib", + "version": "1.14.1", + "description": "Runtime library for TypeScript helper functions", + "licenses": [ + { + "license": { + "id": "0BSD" + } + } + ], + "cpe": "cpe:2.3:a:Microsoft:tslib:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslib@1.14.1", + "externalReferences": [ + { + "url": "https://github.com/Microsoft/tslib.git", + "type": "distribution" + }, + { + "url": "https://www.typescriptlang.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslib@2.2.0?package-id=eff17310e4ba5bda", + "author": "Microsoft Corp.", + "name": "tslib", + "version": "2.2.0", + "description": "Runtime library for TypeScript helper functions", + "licenses": [ + { + "license": { + "id": "0BSD" + } + } + ], + "cpe": "cpe:2.3:a:Microsoft:tslib:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslib@2.2.0", + "externalReferences": [ + { + "url": "https://github.com/Microsoft/tslib.git", + "type": "distribution" + }, + { + "url": "https://www.typescriptlang.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tunnel-agent@0.6.0?package-id=69b71945e64f48cf", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "tunnel-agent", + "version": "0.6.0", + "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:tunnel-agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tunnel-agent@0.6.0", + "externalReferences": [ + { + "url": "https://github.com/mikeal/tunnel-agent", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tweetnacl@0.14.5?package-id=50d7cd01e6907a9a", + "author": "TweetNaCl-js contributors", + "name": "tweetnacl", + "version": "0.14.5", + "description": "Port of TweetNaCl cryptographic library to JavaScript", + "licenses": [ + { + "license": { + "id": "Unlicense" + } + } + ], + "cpe": "cpe:2.3:a:tweetnacl:tweetnacl:0.14.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/tweetnacl@0.14.5", + "externalReferences": [ + { + "url": "https://github.com/dchest/tweetnacl-js.git", + "type": "distribution" + }, + { + "url": "https://tweetnacl.js.org", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/type-is@1.6.18?package-id=9b3a78dcc8cb74b9", + "name": "type-is", + "version": "1.6.18", + "description": "Infer the content-type of a request.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:type-is:type-is:1.6.18:*:*:*:*:*:*:*", + "purl": "pkg:npm/type-is@1.6.18", + "externalReferences": [ + { + "url": "jshttp/type-is", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/typedarray@0.0.6?package-id=f7beac06324a3356", + "author": "James Halliday (http://substack.net)", + "name": "typedarray", + "version": "0.0.6", + "description": "TypedArray polyfill for old browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:typedarray:typedarray:0.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/typedarray@0.0.6", + "externalReferences": [ + { + "url": "git://github.com/substack/typedarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/typedarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unpipe@1.0.0?package-id=fae35ea8f5714b2b", + "author": "Douglas Christopher Wilson ", + "name": "unpipe", + "version": "1.0.0", + "description": "Unpipe a stream from all destinations", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unpipe:unpipe:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unpipe@1.0.0", + "externalReferences": [ + { + "url": "stream-utils/unpipe", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uri-js@4.4.1?package-id=a32c58744bdbe4c2", + "author": "Gary Court ", + "name": "uri-js", + "version": "4.4.1", + "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:garycourt:uri-js:4.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/uri-js@4.4.1", + "externalReferences": [ + { + "url": "http://github.com/garycourt/uri-js", + "type": "distribution" + }, + { + "url": "https://github.com/garycourt/uri-js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=adcfe60f42b3bf40", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "util-deprecate", + "version": "1.0.2", + "description": "The Node.js `util.deprecate()` function with browser support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/utils-merge@1.0.1?package-id=64d85338bee3696b", + "author": "Jared Hanson (http://www.jaredhanson.net/)", + "name": "utils-merge", + "version": "1.0.1", + "description": "merge() utility function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jaredhanson:utils-merge:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/utils-merge@1.0.1", + "externalReferences": [ + { + "url": "git://github.com/jaredhanson/utils-merge.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uuid@3.4.0?package-id=91ce0de869a58a0b", + "name": "uuid", + "version": "3.4.0", + "description": "RFC4122 (v1, v4, and v5) UUIDs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:uuidjs:uuid:3.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/uuid@3.4.0", + "externalReferences": [ + { + "url": "https://github.com/uuidjs/uuid.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uuid@8.3.2?package-id=dfc52717da1a2dfb", + "name": "uuid", + "version": "8.3.2", + "description": "RFC4122 (v1, v4, and v5) UUIDs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:uuidjs:uuid:8.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/uuid@8.3.2", + "externalReferences": [ + { + "url": "https://github.com/uuidjs/uuid.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/validator@13.0.0?package-id=b1acf0481cccb1e7", + "author": "Chris O'Hara ", + "name": "validator", + "version": "13.0.0", + "description": "String validation and sanitization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:validator:validator:13.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/validator@13.0.0", + "externalReferences": [ + { + "url": "https://github.com/chriso/validator.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/chriso/validator.js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/vary@1.1.2?package-id=5c4e624911744e1d", + "author": "Douglas Christopher Wilson ", + "name": "vary", + "version": "1.1.2", + "description": "Manipulate the HTTP Vary header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vary:vary:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/vary@1.1.2", + "externalReferences": [ + { + "url": "jshttp/vary", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/verror@1.10.0?package-id=a12cc8f9f8f6def3", + "name": "verror", + "version": "1.10.0", + "description": "richer JavaScript errors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:davepacheco:verror:1.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/verror@1.10.0", + "externalReferences": [ + { + "url": "git://github.com/davepacheco/node-verror.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/vm2@3.9.17?package-id=3b1db33ba6d7e81a", + "author": "Patrik Simek (https://patriksimek.cz)", + "name": "vm2", + "version": "3.9.17", + "description": "vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Securely!", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vm2:vm2:3.9.17:*:*:*:*:*:*:*", + "purl": "pkg:npm/vm2@3.9.17", + "externalReferences": [ + { + "url": "github:patriksimek/vm2", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/webidl-conversions@3.0.1?package-id=a41caedf689f369e", + "author": "Domenic Denicola (https://domenic.me/)", + "name": "webidl-conversions", + "version": "3.0.1", + "description": "Implements the WebIDL algorithms for converting to and from JavaScript values", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:webidl-conversions:webidl-conversions:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/webidl-conversions@3.0.1", + "externalReferences": [ + { + "url": "jsdom/webidl-conversions", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/whatwg-url@5.0.0?package-id=e27e9c90c3de3771", + "author": "Sebastian Mayr ", + "name": "whatwg-url", + "version": "5.0.0", + "description": "An implementation of the WHATWG URL Standard's URL API and parsing machinery", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:whatwg-url:whatwg-url:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/whatwg-url@5.0.0", + "externalReferences": [ + { + "url": "jsdom/whatwg-url", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=ce6ead4039a1b1e8", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "wrappy", + "version": "1.0.2", + "description": "Callback wrapping utility", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/wrappy", + "type": "distribution" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/xtend@4.0.2?package-id=806268954298f9d0", + "author": "Raynos ", + "name": "xtend", + "version": "4.0.2", + "description": "extend like a boss", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:Raynos:xtend:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/xtend@4.0.2", + "externalReferences": [ + { + "url": "git://github.com/Raynos/xtend.git", + "type": "distribution" + }, + { + "url": "https://github.com/Raynos/xtend", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=alpine-3.11.13&package-id=9886c2465766333f", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.11-r3", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.11-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.11.13", + "description": "Alpine Linux v3.11", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.11.13" + }, + "externalReferences": [ + { + "url": "https://bugs.alpinelinux.org/", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.2.0-r23?arch=x86_64&distro=alpine-3.16.5&package-id=61eac5ce8105d394", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.2.0-r23", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.2.0-r23:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.2.0-r23?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout-data@3.2.0-r23?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.16.5&package-id=e8c6fcc3a282ed4f", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout-data", + "version": "3.2.0-r23", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.2.0-r23:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout-data@3.2.0-r23?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.16.5&package-id=82d183eb300978cc", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.4-r1", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.9-r3?arch=x86_64&distro=alpine-3.16.5&package-id=42d502b764a37310", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.12.9-r3", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.12.9-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.12.9-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "e14718c64f5147f4", + "name": "busybox", + "version": "1.35.0", + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=alpine-3.16.5&package-id=4b48ef6f6b983526", + "publisher": "Sören Tempel ", + "name": "busybox", + "version": "1.35.0-r17", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0-r17:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates@20220614-r0?arch=x86_64&distro=alpine-3.16.5&package-id=fbb1924ff870cc71", + "publisher": "Natanael Copa ", + "name": "ca-certificates", + "version": "20220614-r0", + "description": "Common CA certificates PEM files from Mozilla", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20220614-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates@20220614-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20220614-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.16.5&package-id=30622a1848b22bca", + "publisher": "Natanael Copa ", + "name": "ca-certificates-bundle", + "version": "20220614-r0", + "description": "Pre generated bundle of Mozilla certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20220614-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-bundle@20220614-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.16.5&package-id=2abd3b45f6fa4702", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r3", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5&package-id=13bc051822a24e8d", + "publisher": "Timo Teras ", + "name": "libcrypto1.1", + "version": "1.1.1t-r2", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1t-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5&package-id=609cb94e63dc06dd", + "publisher": "Timo Teras ", + "name": "libssl1.1", + "version": "1.1.1t-r2", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1t-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.2.3-r2?arch=x86_64&distro=alpine-3.16.5&package-id=24c6089b81ca7d19", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.2.3-r2", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.2.3-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.2.3-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.3-r2?arch=x86_64&upstream=musl&distro=alpine-3.16.5&package-id=d33c14d727ae74d1", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.2.3-r2", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.2.3-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.2.3-r2?arch=x86_64&upstream=musl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.3.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.16.5&package-id=206fdb47b3e980eb", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.3.4-r0", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.3.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.3.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&upstream=busybox&distro=alpine-3.16.5&package-id=674d1e2fba4d633a", + "publisher": "Sören Tempel ", + "name": "ssl_client", + "version": "1.35.0-r17", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.35.0-r17:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&upstream=busybox&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.12-r3?arch=x86_64&distro=alpine-3.16.5&package-id=75f0d92f695b4303", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.12-r3", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.12-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.12-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.16.5", + "description": "Alpine Linux v3.16", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.16.5" + }, + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/adduser@3.118?arch=all&distro=debian-10&package-id=3e9282034226b93f", + "publisher": "Debian Adduser Developers ", + "name": "adduser", + "version": "3.118", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:adduser:adduser:3.118:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/adduser@3.118?arch=all&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/apt@1.8.2.3?arch=amd64&distro=debian-10&package-id=c780dc7f69abdf78", + "publisher": "APT Development Team ", + "name": "apt", + "version": "1.8.2.3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:apt:apt:1.8.2.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/apt@1.8.2.3?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/base-files@10.3+deb10u10?arch=amd64&distro=debian-10&package-id=11919a287d510b6c", + "publisher": "Santiago Vila ", + "name": "base-files", + "version": "10.3+deb10u10", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:10.3\\+deb10u10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/base-files@10.3+deb10u10?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/base-passwd@3.5.46?arch=amd64&distro=debian-10&package-id=8c36ab474a82d3ae", + "publisher": "Colin Watson ", + "name": "base-passwd", + "version": "3.5.46", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "PD" + } + } + ], + "cpe": "cpe:2.3:a:base-passwd:base-passwd:3.5.46:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/base-passwd@3.5.46?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/bash@5.0-4?arch=amd64&distro=debian-10&package-id=1307b253f0761292", + "publisher": "Matthias Klose ", + "name": "bash", + "version": "5.0-4", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:bash:bash:5.0-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/bash@5.0-4?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/bsdutils@1:2.33.1-0.1?arch=amd64&upstream=util-linux%402.33.1-0.1&distro=debian-10&package-id=344ffe16352c1b24", + "publisher": "LaMont Jones ", + "name": "bsdutils", + "version": "1:2.33.1-0.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:bsdutils:bsdutils:1\\:2.33.1-0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/bsdutils@1:2.33.1-0.1?arch=amd64&upstream=util-linux%402.33.1-0.1&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/coreutils@8.30-3?arch=amd64&distro=debian-10&package-id=46b6002891a4d405", + "publisher": "Michael Stone ", + "name": "coreutils", + "version": "8.30-3", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:coreutils:coreutils:8.30-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/coreutils@8.30-3?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/dash@0.5.10.2-5?arch=amd64&distro=debian-10&package-id=567db85af6d6aaf3", + "publisher": "Andrej Shadura ", + "name": "dash", + "version": "0.5.10.2-5", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:dash:dash:0.5.10.2-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/dash@0.5.10.2-5?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/debconf@1.5.71?arch=all&distro=debian-10&package-id=9470bfee238208a1", + "publisher": "Debconf Developers ", + "name": "debconf", + "version": "1.5.71", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:debconf:debconf:1.5.71:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/debconf@1.5.71?arch=all&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/debian-archive-keyring@2019.1+deb10u1?arch=all&distro=debian-10&package-id=f9b380da454eddb4", + "publisher": "Debian Release Team ", + "name": "debian-archive-keyring", + "version": "2019.1+deb10u1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:debian-archive-keyring:debian-archive-keyring:2019.1\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/debian-archive-keyring@2019.1+deb10u1?arch=all&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/debianutils@4.8.6.1?arch=amd64&distro=debian-10&package-id=a28bc35fdac63cd4", + "publisher": "Clint Adams ", + "name": "debianutils", + "version": "4.8.6.1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:debianutils:debianutils:4.8.6.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/debianutils@4.8.6.1?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/diffutils@1:3.7-3?arch=amd64&distro=debian-10&package-id=6d51f5deb90deb06", + "publisher": "Santiago Vila ", + "name": "diffutils", + "version": "1:3.7-3", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:diffutils:diffutils:1\\:3.7-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/diffutils@1:3.7-3?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/dpkg@1.19.7?arch=amd64&distro=debian-10&package-id=826669ee9d8b4b93", + "publisher": "Dpkg Developers ", + "name": "dpkg", + "version": "1.19.7", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain-md5" + } + }, + { + "license": { + "name": "public-domain-s-s-d" + } + } + ], + "cpe": "cpe:2.3:a:dpkg:dpkg:1.19.7:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/dpkg@1.19.7?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/e2fsprogs@1.44.5-1+deb10u3?arch=amd64&distro=debian-10&package-id=af000c00a7621537", + "publisher": "Theodore Y. Ts'o ", + "name": "e2fsprogs", + "version": "1.44.5-1+deb10u3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:e2fsprogs:e2fsprogs:1.44.5-1\\+deb10u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/e2fsprogs@1.44.5-1+deb10u3?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/fdisk@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10&package-id=743bbe9c435d52f3", + "publisher": "LaMont Jones ", + "name": "fdisk", + "version": "2.33.1-0.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:fdisk:fdisk:2.33.1-0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/fdisk@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/findutils@4.6.0+git+20190209-2?arch=amd64&distro=debian-10&package-id=38adf8ca435355da", + "publisher": "Andreas Metzler ", + "name": "findutils", + "version": "4.6.0+git+20190209-2", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:findutils:findutils:4.6.0\\+git\\+20190209-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/findutils@4.6.0+git+20190209-2?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gcc-8-base@8.3.0-6?arch=amd64&upstream=gcc-8&distro=debian-10&package-id=a958e0e726fb519d", + "publisher": "Debian GCC Maintainers ", + "name": "gcc-8-base", + "version": "8.3.0-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:gcc-8-base:gcc-8-base:8.3.0-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gcc-8-base@8.3.0-6?arch=amd64&upstream=gcc-8&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gpgv@2.2.12-1+deb10u1?arch=amd64&upstream=gnupg2&distro=debian-10&package-id=1ffde2f3ed358894", + "publisher": "Debian GnuPG Maintainers ", + "name": "gpgv", + "version": "2.2.12-1+deb10u1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + }, + { + "license": { + "name": "TinySCHEME" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:gpgv:gpgv:2.2.12-1\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gpgv@2.2.12-1+deb10u1?arch=amd64&upstream=gnupg2&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/grep@3.3-1?arch=amd64&distro=debian-10&package-id=e19c01918650b778", + "publisher": "Anibal Monsalve Salazar ", + "name": "grep", + "version": "3.3-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:grep:grep:3.3-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/grep@3.3-1?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gzip@1.9-3?arch=amd64&distro=debian-10&package-id=7de3a8e52e2d2e8b", + "publisher": "Bdale Garbee ", + "name": "gzip", + "version": "1.9-3", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:gzip:gzip:1.9-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gzip@1.9-3?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/hostname@3.21?arch=amd64&distro=debian-10&package-id=9deb64db83d5e7c0", + "publisher": "Michael Meskes ", + "name": "hostname", + "version": "3.21", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:hostname:hostname:3.21:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/hostname@3.21?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/init-system-helpers@1.56+nmu1?arch=all&distro=debian-10&package-id=7d7ed30b1f37bb0", + "publisher": "Debian systemd Maintainers ", + "name": "init-system-helpers", + "version": "1.56+nmu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:init-system-helpers:init-system-helpers:1.56\\+nmu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/init-system-helpers@1.56+nmu1?arch=all&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libacl1@2.2.53-4?arch=amd64&upstream=acl&distro=debian-10&package-id=a6d0197dab539e98", + "publisher": "Guillem Jover ", + "name": "libacl1", + "version": "2.2.53-4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libacl1:libacl1:2.2.53-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libacl1@2.2.53-4?arch=amd64&upstream=acl&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libapt-pkg5.0@1.8.2.3?arch=amd64&upstream=apt&distro=debian-10&package-id=a54bb5db29539ed0", + "publisher": "APT Development Team ", + "name": "libapt-pkg5.0", + "version": "1.8.2.3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libapt-pkg5.0:libapt-pkg5.0:1.8.2.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libapt-pkg5.0@1.8.2.3?arch=amd64&upstream=apt&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libattr1@1:2.4.48-4?arch=amd64&upstream=attr&distro=debian-10&package-id=26f28a682fbbe026", + "publisher": "Guillem Jover ", + "name": "libattr1", + "version": "1:2.4.48-4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libattr1:libattr1:1\\:2.4.48-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libattr1@1:2.4.48-4?arch=amd64&upstream=attr&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libaudit-common@1:2.8.4-3?arch=all&upstream=audit&distro=debian-10&package-id=eacb6fb921d6e85e", + "publisher": "Laurent Bigonville ", + "name": "libaudit-common", + "version": "1:2.8.4-3", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit-common:libaudit-common:1\\:2.8.4-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libaudit-common@1:2.8.4-3?arch=all&upstream=audit&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libaudit1@1:2.8.4-3?arch=amd64&upstream=audit&distro=debian-10&package-id=74f57d9ce0c68d86", + "publisher": "Laurent Bigonville ", + "name": "libaudit1", + "version": "1:2.8.4-3", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit1:libaudit1:1\\:2.8.4-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libaudit1@1:2.8.4-3?arch=amd64&upstream=audit&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libblkid1@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10&package-id=c70296289994443b", + "publisher": "LaMont Jones ", + "name": "libblkid1", + "version": "2.33.1-0.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libblkid1:libblkid1:2.33.1-0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libblkid1@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libbz2-1.0@1.0.6-9.2~deb10u1?arch=amd64&upstream=bzip2&distro=debian-10&package-id=2cf51f0ebe123d92", + "publisher": "Anibal Monsalve Salazar ", + "name": "libbz2-1.0", + "version": "1.0.6-9.2~deb10u1", + "licenses": [ + { + "license": { + "name": "BSD-variant" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libbz2-1.0:libbz2-1.0:1.0.6-9.2\\~deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libbz2-1.0@1.0.6-9.2~deb10u1?arch=amd64&upstream=bzip2&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libc-bin@2.28-10?arch=amd64&upstream=glibc&distro=debian-10&package-id=e79c24d81f90a0f7", + "publisher": "GNU Libc Maintainers ", + "name": "libc-bin", + "version": "2.28-10", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc-bin:libc-bin:2.28-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libc-bin@2.28-10?arch=amd64&upstream=glibc&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libc6@2.28-10?arch=amd64&upstream=glibc&distro=debian-10&package-id=b5ff55594183baf5", + "publisher": "GNU Libc Maintainers ", + "name": "libc6", + "version": "2.28-10", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc6:libc6:2.28-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libc6@2.28-10?arch=amd64&upstream=glibc&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcap-ng0@0.7.9-2?arch=amd64&upstream=libcap-ng&distro=debian-10&package-id=801e27b4655082f1", + "publisher": "Pierre Chifflier ", + "name": "libcap-ng0", + "version": "0.7.9-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libcap-ng0:libcap-ng0:0.7.9-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcap-ng0@0.7.9-2?arch=amd64&upstream=libcap-ng&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcom-err2@1.44.5-1+deb10u3?arch=amd64&upstream=e2fsprogs&distro=debian-10&package-id=c05feef9d71ff201", + "publisher": "Theodore Y. Ts'o ", + "name": "libcom-err2", + "version": "1.44.5-1+deb10u3", + "cpe": "cpe:2.3:a:libcom-err2:libcom-err2:1.44.5-1\\+deb10u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcom-err2@1.44.5-1+deb10u3?arch=amd64&upstream=e2fsprogs&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libdb5.3@5.3.28+dfsg1-0.5?arch=amd64&upstream=db5.3&distro=debian-10&package-id=5f1d8daf8bc92e9d", + "publisher": "Debian Berkeley DB Team ", + "name": "libdb5.3", + "version": "5.3.28+dfsg1-0.5", + "cpe": "cpe:2.3:a:libdb5.3:libdb5.3:5.3.28\\+dfsg1-0.5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libdb5.3@5.3.28+dfsg1-0.5?arch=amd64&upstream=db5.3&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libdebconfclient0@0.249?arch=amd64&upstream=cdebconf&distro=debian-10&package-id=6872b9d4842b81ec", + "publisher": "Debian Install System Team ", + "name": "libdebconfclient0", + "version": "0.249", + "cpe": "cpe:2.3:a:libdebconfclient0:libdebconfclient0:0.249:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libdebconfclient0@0.249?arch=amd64&upstream=cdebconf&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libext2fs2@1.44.5-1+deb10u3?arch=amd64&upstream=e2fsprogs&distro=debian-10&package-id=182468cb92f6dd82", + "publisher": "Theodore Y. Ts'o ", + "name": "libext2fs2", + "version": "1.44.5-1+deb10u3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libext2fs2:libext2fs2:1.44.5-1\\+deb10u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libext2fs2@1.44.5-1+deb10u3?arch=amd64&upstream=e2fsprogs&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libfdisk1@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10&package-id=6c6e62c52a86ba09", + "publisher": "LaMont Jones ", + "name": "libfdisk1", + "version": "2.33.1-0.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libfdisk1:libfdisk1:2.33.1-0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libfdisk1@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libffi6@3.2.1-9?arch=amd64&upstream=libffi&distro=debian-10&package-id=40f6d811db6b6459", + "publisher": "Debian GCC Maintainers ", + "name": "libffi6", + "version": "3.2.1-9", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libffi6:libffi6:3.2.1-9:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libffi6@3.2.1-9?arch=amd64&upstream=libffi&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgcc1@1:8.3.0-6?arch=amd64&upstream=gcc-8%408.3.0-6&distro=debian-10&package-id=a4ec20e9bb10a790", + "publisher": "Debian GCC Maintainers ", + "name": "libgcc1", + "version": "1:8.3.0-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcc1:libgcc1:1\\:8.3.0-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgcc1@1:8.3.0-6?arch=amd64&upstream=gcc-8%408.3.0-6&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgcrypt20@1.8.4-5+deb10u1?arch=amd64&distro=debian-10&package-id=3e78c615e5274de", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libgcrypt20", + "version": "1.8.4-5+deb10u1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcrypt20:libgcrypt20:1.8.4-5\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgcrypt20@1.8.4-5+deb10u1?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgmp10@2:6.1.2+dfsg-4?arch=amd64&upstream=gmp&distro=debian-10&package-id=8681d22eff791901", + "publisher": "Debian Science Team ", + "name": "libgmp10", + "version": "2:6.1.2+dfsg-4", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgmp10:libgmp10:2\\:6.1.2\\+dfsg-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgmp10@2:6.1.2+dfsg-4?arch=amd64&upstream=gmp&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgnutls30@3.6.7-4+deb10u7?arch=amd64&upstream=gnutls28&distro=debian-10&package-id=1af9b360964e957b", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libgnutls30", + "version": "3.6.7-4+deb10u7", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPLv3+" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "name": "LGPLv3+_or_GPLv2+" + } + }, + { + "license": { + "name": "The" + } + } + ], + "cpe": "cpe:2.3:a:libgnutls30:libgnutls30:3.6.7-4\\+deb10u7:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgnutls30@3.6.7-4+deb10u7?arch=amd64&upstream=gnutls28&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgpg-error0@1.35-1?arch=amd64&upstream=libgpg-error&distro=debian-10&package-id=e650eaf4629b1d02", + "publisher": "Debian GnuPG Maintainers ", + "name": "libgpg-error0", + "version": "1.35-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "g10-permissive" + } + } + ], + "cpe": "cpe:2.3:a:libgpg-error0:libgpg-error0:1.35-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgpg-error0@1.35-1?arch=amd64&upstream=libgpg-error&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libhogweed4@3.4.1-1+deb10u1?arch=amd64&upstream=nettle&distro=debian-10&package-id=57eaf28dd9e5956e", + "publisher": "Magnus Holmgren ", + "name": "libhogweed4", + "version": "3.4.1-1+deb10u1", + "licenses": [ + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libhogweed4:libhogweed4:3.4.1-1\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libhogweed4@3.4.1-1+deb10u1?arch=amd64&upstream=nettle&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libidn2-0@2.0.5-1+deb10u1?arch=amd64&upstream=libidn2&distro=debian-10&package-id=fb57203f630b9840", + "publisher": "Debian Libidn team ", + "name": "libidn2-0", + "version": "2.0.5-1+deb10u1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "Unicode" + } + } + ], + "cpe": "cpe:2.3:a:libidn2-0:libidn2-0:2.0.5-1\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libidn2-0@2.0.5-1+deb10u1?arch=amd64&upstream=libidn2&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/liblz4-1@1.8.3-1+deb10u1?arch=amd64&upstream=lz4&distro=debian-10&package-id=3703c0e5f7c5fec2", + "publisher": "Nobuhiro Iwamatsu ", + "name": "liblz4-1", + "version": "1.8.3-1+deb10u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:liblz4-1:liblz4-1:1.8.3-1\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/liblz4-1@1.8.3-1+deb10u1?arch=amd64&upstream=lz4&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/liblzma5@5.2.4-1?arch=amd64&upstream=xz-utils&distro=debian-10&package-id=711120f227a4ca8", + "publisher": "Jonathan Nieder ", + "name": "liblzma5", + "version": "5.2.4-1", + "licenses": [ + { + "license": { + "name": "Autoconf" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "PD" + } + }, + { + "license": { + "name": "PD-debian" + } + }, + { + "license": { + "name": "config-h" + } + }, + { + "license": { + "name": "noderivs" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-nowarranty" + } + }, + { + "license": { + "name": "probably-PD" + } + } + ], + "cpe": "cpe:2.3:a:liblzma5:liblzma5:5.2.4-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/liblzma5@5.2.4-1?arch=amd64&upstream=xz-utils&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libmount1@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10&package-id=e7866651c1082fc0", + "publisher": "LaMont Jones ", + "name": "libmount1", + "version": "2.33.1-0.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmount1:libmount1:2.33.1-0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libmount1@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libncursesw6@6.1+20181013-2+deb10u2?arch=amd64&upstream=ncurses&distro=debian-10&package-id=71854d05b1ca05ab", + "publisher": "Craig Small ", + "name": "libncursesw6", + "version": "6.1+20181013-2+deb10u2", + "cpe": "cpe:2.3:a:libncursesw6:libncursesw6:6.1\\+20181013-2\\+deb10u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libncursesw6@6.1+20181013-2+deb10u2?arch=amd64&upstream=ncurses&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libnettle6@3.4.1-1+deb10u1?arch=amd64&upstream=nettle&distro=debian-10&package-id=7d68638a3712de41", + "publisher": "Magnus Holmgren ", + "name": "libnettle6", + "version": "3.4.1-1+deb10u1", + "licenses": [ + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libnettle6:libnettle6:3.4.1-1\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libnettle6@3.4.1-1+deb10u1?arch=amd64&upstream=nettle&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libp11-kit0@0.23.15-2+deb10u1?arch=amd64&upstream=p11-kit&distro=debian-10&package-id=d609c3d39a184627", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libp11-kit0", + "version": "0.23.15-2+deb10u1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "ISC+IBM" + } + }, + { + "license": { + "name": "permissive-like-automake-output" + } + }, + { + "license": { + "name": "same-as-rest-of-p11kit" + } + } + ], + "cpe": "cpe:2.3:a:libp11-kit0:libp11-kit0:0.23.15-2\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libp11-kit0@0.23.15-2+deb10u1?arch=amd64&upstream=p11-kit&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam-modules@1.3.1-5?arch=amd64&upstream=pam&distro=debian-10&package-id=aab3cfb1d218fd23", + "publisher": "Steve Langasek ", + "name": "libpam-modules", + "version": "1.3.1-5", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules:libpam-modules:1.3.1-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam-modules@1.3.1-5?arch=amd64&upstream=pam&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam-modules-bin@1.3.1-5?arch=amd64&upstream=pam&distro=debian-10&package-id=12161ce3bab02f2", + "publisher": "Steve Langasek ", + "name": "libpam-modules-bin", + "version": "1.3.1-5", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules-bin:libpam-modules-bin:1.3.1-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam-modules-bin@1.3.1-5?arch=amd64&upstream=pam&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam-runtime@1.3.1-5?arch=all&upstream=pam&distro=debian-10&package-id=6db7f7079130ac03", + "publisher": "Steve Langasek ", + "name": "libpam-runtime", + "version": "1.3.1-5", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-runtime:libpam-runtime:1.3.1-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam-runtime@1.3.1-5?arch=all&upstream=pam&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam0g@1.3.1-5?arch=amd64&upstream=pam&distro=debian-10&package-id=91c506d4399b261f", + "publisher": "Steve Langasek ", + "name": "libpam0g", + "version": "1.3.1-5", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam0g:libpam0g:1.3.1-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam0g@1.3.1-5?arch=amd64&upstream=pam&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpcre3@2:8.39-12?arch=amd64&upstream=pcre3&distro=debian-10&package-id=d463b0783493ae72", + "publisher": "Matthew Vernon ", + "name": "libpcre3", + "version": "2:8.39-12", + "cpe": "cpe:2.3:a:libpcre3:libpcre3:2\\:8.39-12:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpcre3@2:8.39-12?arch=amd64&upstream=pcre3&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libseccomp2@2.3.3-4?arch=amd64&upstream=libseccomp&distro=debian-10&package-id=b751700bd628a765", + "publisher": "Kees Cook ", + "name": "libseccomp2", + "version": "2.3.3-4", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libseccomp2:libseccomp2:2.3.3-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libseccomp2@2.3.3-4?arch=amd64&upstream=libseccomp&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libselinux1@2.8-1+b1?arch=amd64&upstream=libselinux%402.8-1&distro=debian-10&package-id=123a35c7043b0a0", + "publisher": "Debian SELinux maintainers ", + "name": "libselinux1", + "version": "2.8-1+b1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libselinux1:libselinux1:2.8-1\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libselinux1@2.8-1+b1?arch=amd64&upstream=libselinux%402.8-1&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsemanage-common@2.8-2?arch=all&upstream=libsemanage&distro=debian-10&package-id=720058c21890c44f", + "publisher": "Debian SELinux maintainers ", + "name": "libsemanage-common", + "version": "2.8-2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage-common:libsemanage-common:2.8-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsemanage-common@2.8-2?arch=all&upstream=libsemanage&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsemanage1@2.8-2?arch=amd64&upstream=libsemanage&distro=debian-10&package-id=cd3c06cc7a1130a4", + "publisher": "Debian SELinux maintainers ", + "name": "libsemanage1", + "version": "2.8-2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage1:libsemanage1:2.8-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsemanage1@2.8-2?arch=amd64&upstream=libsemanage&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsepol1@2.8-1?arch=amd64&upstream=libsepol&distro=debian-10&package-id=b33fd215afdc5714", + "publisher": "Debian SELinux maintainers ", + "name": "libsepol1", + "version": "2.8-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsepol1:libsepol1:2.8-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsepol1@2.8-1?arch=amd64&upstream=libsepol&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsmartcols1@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10&package-id=fc03f42224a52138", + "publisher": "LaMont Jones ", + "name": "libsmartcols1", + "version": "2.33.1-0.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsmartcols1:libsmartcols1:2.33.1-0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsmartcols1@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libss2@1.44.5-1+deb10u3?arch=amd64&upstream=e2fsprogs&distro=debian-10&package-id=d0b160fc178bbb5b", + "publisher": "Theodore Y. Ts'o ", + "name": "libss2", + "version": "1.44.5-1+deb10u3", + "cpe": "cpe:2.3:a:libss2:libss2:1.44.5-1\\+deb10u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libss2@1.44.5-1+deb10u3?arch=amd64&upstream=e2fsprogs&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libssl1.1@1.1.1d-0+deb10u7?arch=amd64&upstream=openssl&distro=debian-10&package-id=a5f1f1afa4da3bb8", + "publisher": "Debian OpenSSL Team ", + "name": "libssl1.1", + "version": "1.1.1d-0+deb10u7", + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1d-0\\+deb10u7:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libssl1.1@1.1.1d-0+deb10u7?arch=amd64&upstream=openssl&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libstdc++6@8.3.0-6?arch=amd64&upstream=gcc-8&distro=debian-10&package-id=d05459fba83fc410", + "publisher": "Debian GCC Maintainers ", + "name": "libstdc++6", + "version": "8.3.0-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:8.3.0-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libstdc++6@8.3.0-6?arch=amd64&upstream=gcc-8&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsystemd0@241-7~deb10u8?arch=amd64&upstream=systemd&distro=debian-10&package-id=855ac19a48989126", + "publisher": "Debian systemd Maintainers ", + "name": "libsystemd0", + "version": "241-7~deb10u8", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsystemd0:libsystemd0:241-7\\~deb10u8:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsystemd0@241-7~deb10u8?arch=amd64&upstream=systemd&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtasn1-6@4.13-3?arch=amd64&distro=debian-10&package-id=692d7710a71ec82b", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libtasn1-6", + "version": "4.13-3", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtasn1-6:libtasn1-6:4.13-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtasn1-6@4.13-3?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtinfo6@6.1+20181013-2+deb10u2?arch=amd64&upstream=ncurses&distro=debian-10&package-id=9e8c05e586cbb968", + "publisher": "Craig Small ", + "name": "libtinfo6", + "version": "6.1+20181013-2+deb10u2", + "cpe": "cpe:2.3:a:libtinfo6:libtinfo6:6.1\\+20181013-2\\+deb10u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtinfo6@6.1+20181013-2+deb10u2?arch=amd64&upstream=ncurses&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libudev1@241-7~deb10u8?arch=amd64&upstream=systemd&distro=debian-10&package-id=362a85019c976a00", + "publisher": "Debian systemd Maintainers ", + "name": "libudev1", + "version": "241-7~deb10u8", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libudev1:libudev1:241-7\\~deb10u8:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libudev1@241-7~deb10u8?arch=amd64&upstream=systemd&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libunistring2@0.9.10-1?arch=amd64&upstream=libunistring&distro=debian-10&package-id=b394fd46c85f8bb7", + "publisher": "Jörg Frings-Fürst ", + "name": "libunistring2", + "version": "0.9.10-1", + "licenses": [ + { + "license": { + "name": "FreeSoftware" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GFDL-1.2+" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libunistring2:libunistring2:0.9.10-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libunistring2@0.9.10-1?arch=amd64&upstream=libunistring&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libuuid1@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10&package-id=69873dc165cbbd6e", + "publisher": "LaMont Jones ", + "name": "libuuid1", + "version": "2.33.1-0.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libuuid1:libuuid1:2.33.1-0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libuuid1@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libzstd1@1.3.8+dfsg-3+deb10u2?arch=amd64&upstream=libzstd&distro=debian-10&package-id=b90d64adc03a2a50", + "publisher": "Debian Med Packaging Team ", + "name": "libzstd1", + "version": "1.3.8+dfsg-3+deb10u2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libzstd1:libzstd1:1.3.8\\+dfsg-3\\+deb10u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libzstd1@1.3.8+dfsg-3+deb10u2?arch=amd64&upstream=libzstd&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/login@1:4.5-1.1?arch=amd64&upstream=shadow&distro=debian-10&package-id=98839d2adee55b56", + "publisher": "Shadow package maintainers ", + "name": "login", + "version": "1:4.5-1.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:login:login:1\\:4.5-1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/login@1:4.5-1.1?arch=amd64&upstream=shadow&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/lsb-base@10.2019051400?arch=all&upstream=lsb&distro=debian-10&package-id=4986087322566df", + "publisher": "Debian LSB Team ", + "name": "lsb-base", + "version": "10.2019051400", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:lsb-base:lsb-base:10.2019051400:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/lsb-base@10.2019051400?arch=all&upstream=lsb&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/mawk@1.3.3-17+b3?arch=amd64&upstream=mawk%401.3.3-17&distro=debian-10&package-id=2aa71b5a2c22f638", + "publisher": "Steve Langasek ", + "name": "mawk", + "version": "1.3.3-17+b3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:mawk:mawk:1.3.3-17\\+b3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/mawk@1.3.3-17+b3?arch=amd64&upstream=mawk%401.3.3-17&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/mount@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10&package-id=d4b73315d7d26098", + "publisher": "LaMont Jones ", + "name": "mount", + "version": "2.33.1-0.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:mount:mount:2.33.1-0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/mount@2.33.1-0.1?arch=amd64&upstream=util-linux&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ncurses-base@6.1+20181013-2+deb10u2?arch=all&upstream=ncurses&distro=debian-10&package-id=a9450a198d2ae455", + "publisher": "Craig Small ", + "name": "ncurses-base", + "version": "6.1+20181013-2+deb10u2", + "cpe": "cpe:2.3:a:ncurses-base:ncurses-base:6.1\\+20181013-2\\+deb10u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ncurses-base@6.1+20181013-2+deb10u2?arch=all&upstream=ncurses&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ncurses-bin@6.1+20181013-2+deb10u2?arch=amd64&upstream=ncurses&distro=debian-10&package-id=2d41aa0664b272f4", + "publisher": "Craig Small ", + "name": "ncurses-bin", + "version": "6.1+20181013-2+deb10u2", + "cpe": "cpe:2.3:a:ncurses-bin:ncurses-bin:6.1\\+20181013-2\\+deb10u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ncurses-bin@6.1+20181013-2+deb10u2?arch=amd64&upstream=ncurses&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/passwd@1:4.5-1.1?arch=amd64&upstream=shadow&distro=debian-10&package-id=6a37b96614be0ad8", + "publisher": "Shadow package maintainers ", + "name": "passwd", + "version": "1:4.5-1.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:passwd:passwd:1\\:4.5-1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/passwd@1:4.5-1.1?arch=amd64&upstream=shadow&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/perl-base@5.28.1-6+deb10u1?arch=amd64&upstream=perl&distro=debian-10&package-id=99c7261aa39b37e1", + "publisher": "Niko Tyni ", + "name": "perl-base", + "version": "5.28.1-6+deb10u1", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "S2P" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl-base:perl-base:5.28.1-6\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/perl-base@5.28.1-6+deb10u1?arch=amd64&upstream=perl&distro=debian-10" + }, + { + "type": "application", + "bom-ref": "pkg:generic/redis@6.2.5?package-id=2a035ccef527ad12", + "name": "redis", + "version": "6.2.5", + "cpe": "cpe:2.3:a:redislabs:redis:6.2.5:*:*:*:*:*:*:*", + "purl": "pkg:generic/redis@6.2.5" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/sed@4.7-1?arch=amd64&distro=debian-10&package-id=cd24b1a69c7b788a", + "publisher": "Clint Adams ", + "name": "sed", + "version": "4.7-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:sed:sed:4.7-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/sed@4.7-1?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/sysvinit-utils@2.93-8?arch=amd64&upstream=sysvinit&distro=debian-10&package-id=9762b89f96a3933c", + "publisher": "Debian sysvinit maintainers ", + "name": "sysvinit-utils", + "version": "2.93-8", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:sysvinit-utils:sysvinit-utils:2.93-8:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/sysvinit-utils@2.93-8?arch=amd64&upstream=sysvinit&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tar@1.30+dfsg-6?arch=amd64&distro=debian-10&package-id=c194088099b2a715", + "publisher": "Bdale Garbee ", + "name": "tar", + "version": "1.30+dfsg-6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:tar:tar:1.30\\+dfsg-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tar@1.30+dfsg-6?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tzdata@2021a-0+deb10u1?arch=all&distro=debian-10&package-id=382d46893fab7c54", + "publisher": "GNU Libc Maintainers ", + "name": "tzdata", + "version": "2021a-0+deb10u1", + "cpe": "cpe:2.3:a:tzdata:tzdata:2021a-0\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tzdata@2021a-0+deb10u1?arch=all&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/util-linux@2.33.1-0.1?arch=amd64&distro=debian-10&package-id=cc8d30d3a3bc01b6", + "publisher": "LaMont Jones ", + "name": "util-linux", + "version": "2.33.1-0.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:util-linux:util-linux:2.33.1-0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/util-linux@2.33.1-0.1?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/zlib1g@1:1.2.11.dfsg-1?arch=amd64&upstream=zlib&distro=debian-10&package-id=462eb7255c2bc918", + "publisher": "Mark Brown ", + "name": "zlib1g", + "version": "1:1.2.11.dfsg-1", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib1g:zlib1g:1\\:1.2.11.dfsg-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/zlib1g@1:1.2.11.dfsg-1?arch=amd64&upstream=zlib&distro=debian-10" + }, + { + "type": "operating-system", + "name": "debian", + "version": "10", + "description": "Debian GNU/Linux 10 (buster)", + "swid": { + "tagId": "debian", + "name": "debian", + "version": "10" + }, + "externalReferences": [ + { + "url": "https://bugs.debian.org/", + "type": "issue-tracker" + }, + { + "url": "https://www.debian.org/", + "type": "website" + }, + { + "url": "https://www.debian.org/support", + "comment": "support", + "type": "other" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/adduser@3.118?arch=all&distro=debian-11&package-id=3e9282034226b93f", + "publisher": "Debian Adduser Developers ", + "name": "adduser", + "version": "3.118", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:adduser:adduser:3.118:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/adduser@3.118?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/adwaita-icon-theme@3.38.0-1?arch=all&distro=debian-11&package-id=f681011a16c62101", + "publisher": "Debian GNOME Maintainers ", + "name": "adwaita-icon-theme", + "version": "3.38.0-1", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0-US" + } + }, + { + "license": { + "name": "CC-BY-SA-2.0-IT" + } + }, + { + "license": { + "id": "CC-BY-SA-3.0" + } + }, + { + "license": { + "name": "CC-BY-SA-3.0-US" + } + }, + { + "license": { + "name": "CC-BY-SA-3.0-Unported" + } + }, + { + "license": { + "id": "CC-BY-SA-4.0" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GFDL-1.2+" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "GPL-unspecified" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:adwaita-icon-theme:adwaita-icon-theme:3.38.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/adwaita-icon-theme@3.38.0-1?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/apt@2.2.4?arch=amd64&distro=debian-11&package-id=1cce537379623b25", + "publisher": "APT Development Team ", + "name": "apt", + "version": "2.2.4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:apt:apt:2.2.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/apt@2.2.4?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/atop@2.6.0-2?arch=amd64&distro=debian-11&package-id=79fa69727b8cd928", + "publisher": "Marc Haber ", + "name": "atop", + "version": "2.6.0-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:atop:atop:2.6.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/atop@2.6.0-2?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/base-files@11.1+deb11u5?arch=amd64&distro=debian-11&package-id=8a4d0a5e2afa8cb4", + "publisher": "Santiago Vila ", + "name": "base-files", + "version": "11.1+deb11u5", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:11.1\\+deb11u5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/base-files@11.1+deb11u5?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/base-passwd@3.5.51?arch=amd64&distro=debian-11&package-id=7ae3e2ba2e10f31", + "publisher": "Colin Watson ", + "name": "base-passwd", + "version": "3.5.51", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:base-passwd:base-passwd:3.5.51:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/base-passwd@3.5.51?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/bash@5.1-2+deb11u1?arch=amd64&distro=debian-11&package-id=94b35b4f7d874a43", + "publisher": "Matthias Klose ", + "name": "bash", + "version": "5.1-2+deb11u1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:bash:bash:5.1-2\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/bash@5.1-2+deb11u1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/bash-completion@1:2.11-2?arch=all&distro=debian-11&package-id=8d5f9acd2065a143", + "publisher": "Gabriel F. T. Gomes ", + "name": "bash-completion", + "version": "1:2.11-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:bash-completion:bash-completion:1\\:2.11-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/bash-completion@1:2.11-2?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/bind9-dnsutils@1:9.16.33-1~deb11u1?arch=amd64&upstream=bind9&distro=debian-11&package-id=80903b8263a99b29", + "publisher": "Debian DNS Team ", + "name": "bind9-dnsutils", + "version": "1:9.16.33-1~deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:bind9-dnsutils:bind9-dnsutils:1\\:9.16.33-1\\~deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/bind9-dnsutils@1:9.16.33-1~deb11u1?arch=amd64&upstream=bind9&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/bind9-host@1:9.16.33-1~deb11u1?arch=amd64&upstream=bind9&distro=debian-11&package-id=97b475e67f54ca10", + "publisher": "Debian DNS Team ", + "name": "bind9-host", + "version": "1:9.16.33-1~deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:bind9-host:bind9-host:1\\:9.16.33-1\\~deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/bind9-host@1:9.16.33-1~deb11u1?arch=amd64&upstream=bind9&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/bind9-libs@1:9.16.33-1~deb11u1?arch=amd64&upstream=bind9&distro=debian-11&package-id=d2478f04be0bf1f4", + "publisher": "Debian DNS Team ", + "name": "bind9-libs", + "version": "1:9.16.33-1~deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:bind9-libs:bind9-libs:1\\:9.16.33-1\\~deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/bind9-libs@1:9.16.33-1~deb11u1?arch=amd64&upstream=bind9&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/binutils@2.35.2-2?arch=amd64&distro=debian-11&package-id=d3f194b20dd87044", + "publisher": "Matthias Klose ", + "name": "binutils", + "version": "2.35.2-2", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:binutils:binutils:2.35.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/binutils@2.35.2-2?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/binutils-common@2.35.2-2?arch=amd64&upstream=binutils&distro=debian-11&package-id=a3c60c2527e62ea5", + "publisher": "Matthias Klose ", + "name": "binutils-common", + "version": "2.35.2-2", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:binutils-common:binutils-common:2.35.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/binutils-common@2.35.2-2?arch=amd64&upstream=binutils&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/binutils-x86-64-linux-gnu@2.35.2-2?arch=amd64&upstream=binutils&distro=debian-11&package-id=8ebf803eb42ea096", + "publisher": "Matthias Klose ", + "name": "binutils-x86-64-linux-gnu", + "version": "2.35.2-2", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:binutils-x86-64-linux-gnu:binutils-x86-64-linux-gnu:2.35.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/binutils-x86-64-linux-gnu@2.35.2-2?arch=amd64&upstream=binutils&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/bridge-utils@1.7-1?arch=amd64&distro=debian-11&package-id=1d6017f4b2cecaac", + "publisher": "Santiago Garcia Mantinan ", + "name": "bridge-utils", + "version": "1.7-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:bridge-utils:bridge-utils:1.7-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/bridge-utils@1.7-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/bsdutils@1:2.36.1-8+deb11u1?arch=amd64&upstream=util-linux%402.36.1-8+deb11u1&distro=debian-11&package-id=677e6ace24dce684", + "publisher": "util-linux packagers ", + "name": "bsdutils", + "version": "1:2.36.1-8+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:bsdutils:bsdutils:1\\:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/bsdutils@1:2.36.1-8+deb11u1?arch=amd64&upstream=util-linux%402.36.1-8+deb11u1&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/build-essential@12.9?arch=amd64&distro=debian-11&package-id=5050a7461db58e1b", + "publisher": "Matthias Klose ", + "name": "build-essential", + "version": "12.9", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:build-essential:build-essential:12.9:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/build-essential@12.9?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/bzip2@1.0.8-4?arch=amd64&distro=debian-11&package-id=ad55a67b4d12349e", + "publisher": "Anibal Monsalve Salazar ", + "name": "bzip2", + "version": "1.0.8-4", + "licenses": [ + { + "license": { + "name": "BSD-variant" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:bzip2:bzip2:1.0.8-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/bzip2@1.0.8-4?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ca-certificates@20210119?arch=all&distro=debian-11&package-id=6b7e2b0745c43628", + "publisher": "Julien Cristau ", + "name": "ca-certificates", + "version": "20210119", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20210119:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ca-certificates@20210119?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/coreutils@8.32-4+b1?arch=amd64&upstream=coreutils%408.32-4&distro=debian-11&package-id=65bac153c492b66e", + "publisher": "Michael Stone ", + "name": "coreutils", + "version": "8.32-4+b1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:coreutils:coreutils:8.32-4\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/coreutils@8.32-4+b1?arch=amd64&upstream=coreutils%408.32-4&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/cpp@4:10.2.1-1?arch=amd64&upstream=gcc-defaults%401.190&distro=debian-11&package-id=e516dbbaa98e2923", + "publisher": "Debian GCC Maintainers ", + "name": "cpp", + "version": "4:10.2.1-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:cpp:cpp:4\\:10.2.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/cpp@4:10.2.1-1?arch=amd64&upstream=gcc-defaults%401.190&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/cpp-10@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=dc45592ad23e2d35", + "publisher": "Debian GCC Maintainers ", + "name": "cpp-10", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:cpp-10:cpp-10:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/cpp-10@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/cron@3.0pl1-137?arch=amd64&distro=debian-11&package-id=1c68faf525e1be27", + "publisher": "Javier Fernández-Sanguino Peña ", + "name": "cron", + "version": "3.0pl1-137", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "Paul-Vixie's-license" + } + } + ], + "cpe": "cpe:2.3:a:cron:cron:3.0pl1-137:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/cron@3.0pl1-137?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/curl@7.74.0-1.3+deb11u3?arch=amd64&distro=debian-11&package-id=61cfce17f478a6e", + "publisher": "Alessandro Ghedini ", + "name": "curl", + "version": "7.74.0-1.3+deb11u3", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/curl@7.74.0-1.3+deb11u3?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/dash@0.5.11+git20200708+dd9ef66-5?arch=amd64&distro=debian-11&package-id=19db7775ce4c27be", + "publisher": "Andrej Shadura ", + "name": "dash", + "version": "0.5.11+git20200708+dd9ef66-5", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "FSFUL" + } + }, + { + "license": { + "id": "FSFULLR" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:dash:dash:0.5.11\\+git20200708\\+dd9ef66-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/dash@0.5.11+git20200708+dd9ef66-5?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/debconf@1.5.77?arch=all&distro=debian-11&package-id=99525df5637687bd", + "publisher": "Debconf Developers ", + "name": "debconf", + "version": "1.5.77", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:debconf:debconf:1.5.77:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/debconf@1.5.77?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/debian-archive-keyring@2021.1.1?arch=all&distro=debian-11&package-id=f7fcb44a58e72708", + "publisher": "Debian Release Team ", + "name": "debian-archive-keyring", + "version": "2021.1.1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:debian-archive-keyring:debian-archive-keyring:2021.1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/debian-archive-keyring@2021.1.1?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/debianutils@4.11.2?arch=amd64&distro=debian-11&package-id=4cd4f150dae8c295", + "publisher": "Clint Adams ", + "name": "debianutils", + "version": "4.11.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:debianutils:debianutils:4.11.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/debianutils@4.11.2?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/diffutils@1:3.7-5?arch=amd64&distro=debian-11&package-id=9133f9a320bf77e1", + "publisher": "Santiago Vila ", + "name": "diffutils", + "version": "1:3.7-5", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:diffutils:diffutils:1\\:3.7-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/diffutils@1:3.7-5?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/dnsutils@1:9.16.33-1~deb11u1?arch=all&upstream=bind9&distro=debian-11&package-id=8fad8800619a3fcd", + "publisher": "Debian DNS Team ", + "name": "dnsutils", + "version": "1:9.16.33-1~deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:dnsutils:dnsutils:1\\:9.16.33-1\\~deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/dnsutils@1:9.16.33-1~deb11u1?arch=all&upstream=bind9&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/dpkg@1.20.12?arch=amd64&distro=debian-11&package-id=3dbbad249b74a866", + "publisher": "Dpkg Developers ", + "name": "dpkg", + "version": "1.20.12", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain-md5" + } + }, + { + "license": { + "name": "public-domain-s-s-d" + } + } + ], + "cpe": "cpe:2.3:a:dpkg:dpkg:1.20.12:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/dpkg@1.20.12?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/dpkg-dev@1.20.12?arch=all&upstream=dpkg&distro=debian-11&package-id=5d8445b8e65f0cdd", + "publisher": "Dpkg Developers ", + "name": "dpkg-dev", + "version": "1.20.12", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain-md5" + } + }, + { + "license": { + "name": "public-domain-s-s-d" + } + } + ], + "cpe": "cpe:2.3:a:dpkg-dev:dpkg-dev:1.20.12:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/dpkg-dev@1.20.12?arch=all&upstream=dpkg&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/e2fsprogs@1.46.2-2?arch=amd64&distro=debian-11&package-id=7c4baa682137e759", + "publisher": "Theodore Y. Ts'o ", + "name": "e2fsprogs", + "version": "1.46.2-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:e2fsprogs:e2fsprogs:1.46.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/e2fsprogs@1.46.2-2?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/findutils@4.8.0-1?arch=amd64&distro=debian-11&package-id=b503e3d45616f33c", + "publisher": "Andreas Metzler ", + "name": "findutils", + "version": "4.8.0-1", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:findutils:findutils:4.8.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/findutils@4.8.0-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/fontconfig@2.13.1-4.2?arch=amd64&distro=debian-11&package-id=3c9030a6708e02d", + "publisher": "Debian freedesktop.org maintainers ", + "name": "fontconfig", + "version": "2.13.1-4.2", + "cpe": "cpe:2.3:a:fontconfig:fontconfig:2.13.1-4.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/fontconfig@2.13.1-4.2?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/fontconfig-config@2.13.1-4.2?arch=all&upstream=fontconfig&distro=debian-11&package-id=4cbb1169d85c98", + "publisher": "Debian freedesktop.org maintainers ", + "name": "fontconfig-config", + "version": "2.13.1-4.2", + "cpe": "cpe:2.3:a:fontconfig-config:fontconfig-config:2.13.1-4.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/fontconfig-config@2.13.1-4.2?arch=all&upstream=fontconfig&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/fonts-dejavu-core@2.37-2?arch=all&upstream=fonts-dejavu&distro=debian-11&package-id=6c1e339e269277ec", + "publisher": "Debian Fonts Task Force ", + "name": "fonts-dejavu-core", + "version": "2.37-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "Bitstream-Vera" + } + } + ], + "cpe": "cpe:2.3:a:fonts-dejavu-core:fonts-dejavu-core:2.37-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/fonts-dejavu-core@2.37-2?arch=all&upstream=fonts-dejavu&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/g++@4:10.2.1-1?arch=amd64&upstream=gcc-defaults%401.190&distro=debian-11&package-id=6b6519c4607e45e", + "publisher": "Debian GCC Maintainers ", + "name": "g++", + "version": "4:10.2.1-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:g\\+\\+:g\\+\\+:4\\:10.2.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/g++@4:10.2.1-1?arch=amd64&upstream=gcc-defaults%401.190&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/g++-10@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=51dfb6b320067d0f", + "publisher": "Debian GCC Maintainers ", + "name": "g++-10", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:g\\+\\+-10:g\\+\\+-10:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/g++-10@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gcc@4:10.2.1-1?arch=amd64&upstream=gcc-defaults%401.190&distro=debian-11&package-id=a6ecfb912c8833e4", + "publisher": "Debian GCC Maintainers ", + "name": "gcc", + "version": "4:10.2.1-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:gcc:gcc:4\\:10.2.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gcc@4:10.2.1-1?arch=amd64&upstream=gcc-defaults%401.190&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gcc-10@10.2.1-6?arch=amd64&distro=debian-11&package-id=50efe1856f600714", + "publisher": "Debian GCC Maintainers ", + "name": "gcc-10", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:gcc-10:gcc-10:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gcc-10@10.2.1-6?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gcc-10-base@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=742204f033ae5a1e", + "publisher": "Debian GCC Maintainers ", + "name": "gcc-10-base", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:gcc-10-base:gcc-10-base:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gcc-10-base@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gcc-9-base@9.3.0-22?arch=amd64&upstream=gcc-9&distro=debian-11&package-id=57c0768e353bbfc8", + "publisher": "Debian GCC Maintainers ", + "name": "gcc-9-base", + "version": "9.3.0-22", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:gcc-9-base:gcc-9-base:9.3.0-22:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gcc-9-base@9.3.0-22?arch=amd64&upstream=gcc-9&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gdb@10.1-1.7?arch=amd64&distro=debian-11&package-id=907d43bc4c1c8d83", + "publisher": "Héctor Orón Martínez ", + "name": "gdb", + "version": "10.1-1.7", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:gdb:gdb:10.1-1.7:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gdb@10.1-1.7?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/git@1:2.30.2-1?arch=amd64&distro=debian-11&package-id=7be419089a488288", + "publisher": "Jonathan Nieder ", + "name": "git", + "version": "1:2.30.2-1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "name": "Boost" + } + }, + { + "license": { + "name": "EDL-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "dlmalloc" + } + }, + { + "license": { + "name": "mingw-runtime" + } + } + ], + "cpe": "cpe:2.3:a:git:git:1\\:2.30.2-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/git@1:2.30.2-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/git-man@1:2.30.2-1?arch=all&upstream=git&distro=debian-11&package-id=a785f12138249f6", + "publisher": "Jonathan Nieder ", + "name": "git-man", + "version": "1:2.30.2-1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "name": "Boost" + } + }, + { + "license": { + "name": "EDL-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "dlmalloc" + } + }, + { + "license": { + "name": "mingw-runtime" + } + } + ], + "cpe": "cpe:2.3:a:git-man:git-man:1\\:2.30.2-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/git-man@1:2.30.2-1?arch=all&upstream=git&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gpgv@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11&package-id=b6346590c45ba7ab", + "publisher": "Debian GnuPG Maintainers ", + "name": "gpgv", + "version": "2.2.27-2+deb11u2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + }, + { + "license": { + "name": "TinySCHEME" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:gpgv:gpgv:2.2.27-2\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gpgv@2.2.27-2+deb11u2?arch=amd64&upstream=gnupg2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/grep@3.6-1?arch=amd64&distro=debian-11&package-id=9ed140c6f7959d", + "publisher": "Anibal Monsalve Salazar ", + "name": "grep", + "version": "3.6-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:grep:grep:3.6-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/grep@3.6-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gtk-update-icon-cache@3.24.24-4+deb11u2?arch=amd64&upstream=gtk+3.0&distro=debian-11&package-id=2526fea62442389c", + "publisher": "Debian GNOME Maintainers ", + "name": "gtk-update-icon-cache", + "version": "3.24.24-4+deb11u2", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "SWL" + } + }, + { + "license": { + "name": "X11R5-permissive" + } + }, + { + "license": { + "name": "check-gdk-cairo-permissive" + } + }, + { + "license": { + "name": "other" + } + } + ], + "cpe": "cpe:2.3:a:gtk-update-icon-cache:gtk-update-icon-cache:3.24.24-4\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gtk-update-icon-cache@3.24.24-4+deb11u2?arch=amd64&upstream=gtk+3.0&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/gzip@1.10-4+deb11u1?arch=amd64&distro=debian-11&package-id=ade955af6710751d", + "publisher": "Milan Kupcevic ", + "name": "gzip", + "version": "1.10-4+deb11u1", + "licenses": [ + { + "license": { + "name": "FSF-manpages" + } + }, + { + "license": { + "name": "GFDL-1.3+-no-invariant" + } + }, + { + "license": { + "name": "GFDL-3" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:gzip:gzip:1.10-4\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gzip@1.10-4+deb11u1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/hdparm@9.60+ds-1?arch=amd64&distro=debian-11&package-id=2713d6f4d6a293cf", + "publisher": "Alexandre Mestiashvili ", + "name": "hdparm", + "version": "9.60+ds-1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "hdparm" + } + } + ], + "cpe": "cpe:2.3:a:hdparm:hdparm:9.60\\+ds-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/hdparm@9.60+ds-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/hicolor-icon-theme@0.17-2?arch=all&distro=debian-11&package-id=a830a0ef5701c9aa", + "publisher": "Debian GNOME Maintainers ", + "name": "hicolor-icon-theme", + "version": "0.17-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:hicolor-icon-theme:hicolor-icon-theme:0.17-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/hicolor-icon-theme@0.17-2?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/hostname@3.23?arch=amd64&distro=debian-11&package-id=fec906d1ab1d9712", + "publisher": "Michael Meskes ", + "name": "hostname", + "version": "3.23", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:hostname:hostname:3.23:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/hostname@3.23?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/htop@3.0.5-7?arch=amd64&distro=debian-11&package-id=a453d84b1f10d0ac", + "publisher": "Daniel Lange ", + "name": "htop", + "version": "3.0.5-7", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:htop:htop:3.0.5-7:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/htop@3.0.5-7?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/iftop@1.0~pre4-7?arch=amd64&distro=debian-11&package-id=69076acf974ed92b", + "publisher": "Markus Koschany ", + "name": "iftop", + "version": "1.0~pre4-7", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-like" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:iftop:iftop:1.0\\~pre4-7:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/iftop@1.0~pre4-7?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/init-system-helpers@1.60?arch=all&distro=debian-11&package-id=9853db6c4e48777f", + "publisher": "Debian systemd Maintainers ", + "name": "init-system-helpers", + "version": "1.60", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:init-system-helpers:init-system-helpers:1.60:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/init-system-helpers@1.60?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/iotop@0.6?package-id=3d5ee3626c3c6617", + "author": "Guillaume Chazarain ", + "name": "iotop", + "version": "0.6", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:guillaume_chazarain_project:python-iotop:0.6:*:*:*:*:*:*:*", + "purl": "pkg:pypi/iotop@0.6" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/iotop@0.6-24-g733f3f8-1.1?arch=amd64&distro=debian-11&package-id=dfee60c7465df37e", + "publisher": "Paul Wise ", + "name": "iotop", + "version": "0.6-24-g733f3f8-1.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:iotop:iotop:0.6-24-g733f3f8-1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/iotop@0.6-24-g733f3f8-1.1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/iperf@2.0.14a+dfsg1-1?arch=amd64&distro=debian-11&package-id=79f9d5ca79cfafb0", + "publisher": "Roberto Lumbreras ", + "name": "iperf", + "version": "2.0.14a+dfsg1-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "FSF-something" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-2-WithACException" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPL-3-WithACException" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:iperf:iperf:2.0.14a\\+dfsg1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/iperf@2.0.14a+dfsg1-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/iputils-arping@3:20210202-1?arch=amd64&upstream=iputils&distro=debian-11&package-id=1d68a57dae47d198", + "publisher": "Noah Meyerhans ", + "name": "iputils-arping", + "version": "3:20210202-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:iputils-arping:iputils-arping:3\\:20210202-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/iputils-arping@3:20210202-1?arch=amd64&upstream=iputils&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/iputils-clockdiff@3:20210202-1?arch=amd64&upstream=iputils&distro=debian-11&package-id=679c714f319c04cb", + "publisher": "Noah Meyerhans ", + "name": "iputils-clockdiff", + "version": "3:20210202-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:iputils-clockdiff:iputils-clockdiff:3\\:20210202-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/iputils-clockdiff@3:20210202-1?arch=amd64&upstream=iputils&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/iputils-ping@3:20210202-1?arch=amd64&upstream=iputils&distro=debian-11&package-id=6faf0749d49d1121", + "publisher": "Noah Meyerhans ", + "name": "iputils-ping", + "version": "3:20210202-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:iputils-ping:iputils-ping:3\\:20210202-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/iputils-ping@3:20210202-1?arch=amd64&upstream=iputils&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/iputils-tracepath@3:20210202-1?arch=amd64&upstream=iputils&distro=debian-11&package-id=81cf5e85c67e6623", + "publisher": "Noah Meyerhans ", + "name": "iputils-tracepath", + "version": "3:20210202-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:iputils-tracepath:iputils-tracepath:3\\:20210202-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/iputils-tracepath@3:20210202-1?arch=amd64&upstream=iputils&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/jq@1.6-2.1?arch=amd64&distro=debian-11&package-id=e3f3c6b4cef4fa4b", + "publisher": "ChangZhuo Chen (陳昌倬) ", + "name": "jq", + "version": "1.6-2.1", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jq:jq:1.6-2.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/jq@1.6-2.1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libacl1@2.2.53-10?arch=amd64&upstream=acl&distro=debian-11&package-id=e26fd10cf6ff246", + "publisher": "Guillem Jover ", + "name": "libacl1", + "version": "2.2.53-10", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libacl1:libacl1:2.2.53-10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libacl1@2.2.53-10?arch=amd64&upstream=acl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libapt-pkg6.0@2.2.4?arch=amd64&upstream=apt&distro=debian-11&package-id=da442f0998cccf2b", + "publisher": "APT Development Team ", + "name": "libapt-pkg6.0", + "version": "2.2.4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libapt-pkg6.0:libapt-pkg6.0:2.2.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libapt-pkg6.0@2.2.4?arch=amd64&upstream=apt&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libasan6@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=7b2bbb7b9367d33b", + "publisher": "Debian GCC Maintainers ", + "name": "libasan6", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libasan6:libasan6:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libasan6@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libatk1.0-0@2.36.0-2?arch=amd64&upstream=atk1.0&distro=debian-11&package-id=29be3deb7a055b39", + "publisher": "Debian Accessibility Team ", + "name": "libatk1.0-0", + "version": "2.36.0-2", + "licenses": [ + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libatk1.0-0:libatk1.0-0:2.36.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libatk1.0-0@2.36.0-2?arch=amd64&upstream=atk1.0&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libatk1.0-data@2.36.0-2?arch=all&upstream=atk1.0&distro=debian-11&package-id=8e0f51bd2ccb2ded", + "publisher": "Debian Accessibility Team ", + "name": "libatk1.0-data", + "version": "2.36.0-2", + "licenses": [ + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libatk1.0-data:libatk1.0-data:2.36.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libatk1.0-data@2.36.0-2?arch=all&upstream=atk1.0&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libatomic1@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=3cc56d6c19b5e9ee", + "publisher": "Debian GCC Maintainers ", + "name": "libatomic1", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libatomic1:libatomic1:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libatomic1@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libattr1@1:2.4.48-6?arch=amd64&upstream=attr&distro=debian-11&package-id=254a97dd16e20391", + "publisher": "Guillem Jover ", + "name": "libattr1", + "version": "1:2.4.48-6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libattr1:libattr1:1\\:2.4.48-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libattr1@1:2.4.48-6?arch=amd64&upstream=attr&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libaudit-common@1:3.0-2?arch=all&upstream=audit&distro=debian-11&package-id=e666dc18886f28ff", + "publisher": "Laurent Bigonville ", + "name": "libaudit-common", + "version": "1:3.0-2", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit-common:libaudit-common:1\\:3.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libaudit-common@1:3.0-2?arch=all&upstream=audit&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libaudit1@1:3.0-2?arch=amd64&upstream=audit&distro=debian-11&package-id=ae77fe6c43b7188d", + "publisher": "Laurent Bigonville ", + "name": "libaudit1", + "version": "1:3.0-2", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit1:libaudit1:1\\:3.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libaudit1@1:3.0-2?arch=amd64&upstream=audit&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libavahi-client3@0.8-5+deb11u1?arch=amd64&upstream=avahi&distro=debian-11&package-id=6b5e18bf7ed72322", + "publisher": "Utopia Maintenance Team ", + "name": "libavahi-client3", + "version": "0.8-5+deb11u1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libavahi-client3:libavahi-client3:0.8-5\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libavahi-client3@0.8-5+deb11u1?arch=amd64&upstream=avahi&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libavahi-common-data@0.8-5+deb11u1?arch=amd64&upstream=avahi&distro=debian-11&package-id=d37e1fbe59a6768d", + "publisher": "Utopia Maintenance Team ", + "name": "libavahi-common-data", + "version": "0.8-5+deb11u1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libavahi-common-data:libavahi-common-data:0.8-5\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libavahi-common-data@0.8-5+deb11u1?arch=amd64&upstream=avahi&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libavahi-common3@0.8-5+deb11u1?arch=amd64&upstream=avahi&distro=debian-11&package-id=8e732ab2d4aef5ce", + "publisher": "Utopia Maintenance Team ", + "name": "libavahi-common3", + "version": "0.8-5+deb11u1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libavahi-common3:libavahi-common3:0.8-5\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libavahi-common3@0.8-5+deb11u1?arch=amd64&upstream=avahi&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libbabeltrace1@1.5.8-1+b3?arch=amd64&upstream=babeltrace%401.5.8-1&distro=debian-11&package-id=c606b237b63fe870", + "publisher": "Jon Bernard ", + "name": "libbabeltrace1", + "version": "1.5.8-1+b3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libbabeltrace1:libbabeltrace1:1.5.8-1\\+b3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libbabeltrace1@1.5.8-1+b3?arch=amd64&upstream=babeltrace%401.5.8-1&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libbinutils@2.35.2-2?arch=amd64&upstream=binutils&distro=debian-11&package-id=d2b9a8a8509edd7f", + "publisher": "Matthias Klose ", + "name": "libbinutils", + "version": "2.35.2-2", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libbinutils:libbinutils:2.35.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libbinutils@2.35.2-2?arch=amd64&upstream=binutils&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libblas3@3.9.0-3?arch=amd64&upstream=lapack&distro=debian-11&package-id=d66a0658bd3f26ae", + "publisher": "Debian Science Team ", + "name": "libblas3", + "version": "3.9.0-3", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-intel" + } + } + ], + "cpe": "cpe:2.3:a:libblas3:libblas3:3.9.0-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libblas3@3.9.0-3?arch=amd64&upstream=lapack&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libblkid1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11&package-id=f235c9c5cb7b4190", + "publisher": "util-linux packagers ", + "name": "libblkid1", + "version": "2.36.1-8+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libblkid1:libblkid1:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libblkid1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libboost-regex1.74.0@1.74.0-9?arch=amd64&upstream=boost1.74&distro=debian-11&package-id=bcdeea51cd7769e2", + "publisher": "Debian Boost Team ", + "name": "libboost-regex1.74.0", + "version": "1.74.0-9", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "BSD2" + } + }, + { + "license": { + "name": "BSD3_DEShaw" + } + }, + { + "license": { + "name": "BSD3_Google" + } + }, + { + "license": { + "id": "BSL-1.0" + } + }, + { + "license": { + "name": "Caramel" + } + }, + { + "license": { + "name": "CrystalClear" + } + }, + { + "license": { + "name": "HP" + } + }, + { + "license": { + "id": "Jam" + } + }, + { + "license": { + "name": "Kempf" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "NIST" + } + }, + { + "license": { + "name": "OldBoost1" + } + }, + { + "license": { + "name": "OldBoost2" + } + }, + { + "license": { + "name": "OldBoost3" + } + }, + { + "license": { + "name": "Python" + } + }, + { + "license": { + "name": "SGI" + } + }, + { + "license": { + "name": "Spencer" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libboost-regex1.74.0:libboost-regex1.74.0:1.74.0-9:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libboost-regex1.74.0@1.74.0-9?arch=amd64&upstream=boost1.74&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libbrotli1@1.0.9-2+b2?arch=amd64&upstream=brotli%401.0.9-2&distro=debian-11&package-id=56558463e048d713", + "publisher": "Tomasz Buchert ", + "name": "libbrotli1", + "version": "1.0.9-2+b2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libbrotli1:libbrotli1:1.0.9-2\\+b2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libbrotli1@1.0.9-2+b2?arch=amd64&upstream=brotli%401.0.9-2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libbsd0@0.11.3-1?arch=amd64&upstream=libbsd&distro=debian-11&package-id=19b310b25a33fc08", + "publisher": "Guillem Jover ", + "name": "libbsd0", + "version": "0.11.3-1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-clause-author" + } + }, + { + "license": { + "name": "BSD-2-clause-verbatim" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-John-Birrell" + } + }, + { + "license": { + "name": "BSD-3-clause-Regents" + } + }, + { + "license": { + "name": "BSD-3-clause-author" + } + }, + { + "license": { + "name": "BSD-4-clause-Christopher-G-Demetriou" + } + }, + { + "license": { + "name": "BSD-4-clause-Niels-Provos" + } + }, + { + "license": { + "name": "BSD-5-clause-Peter-Wemm" + } + }, + { + "license": { + "id": "Beerware" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "ISC-Original" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libbsd0:libbsd0:0.11.3-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libbsd0@0.11.3-1?arch=amd64&upstream=libbsd&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libbz2-1.0@1.0.8-4?arch=amd64&upstream=bzip2&distro=debian-11&package-id=120fe415369d1784", + "publisher": "Anibal Monsalve Salazar ", + "name": "libbz2-1.0", + "version": "1.0.8-4", + "licenses": [ + { + "license": { + "name": "BSD-variant" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libbz2-1.0:libbz2-1.0:1.0.8-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libbz2-1.0@1.0.8-4?arch=amd64&upstream=bzip2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libc-bin@2.31-13+deb11u5?arch=amd64&upstream=glibc&distro=debian-11&package-id=228ff11572a24b74", + "publisher": "GNU Libc Maintainers ", + "name": "libc-bin", + "version": "2.31-13+deb11u5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc-bin:libc-bin:2.31-13\\+deb11u5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libc-bin@2.31-13+deb11u5?arch=amd64&upstream=glibc&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libc-dev-bin@2.31-13+deb11u5?arch=amd64&upstream=glibc&distro=debian-11&package-id=e6850f78fed7a84a", + "publisher": "GNU Libc Maintainers ", + "name": "libc-dev-bin", + "version": "2.31-13+deb11u5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc-dev-bin:libc-dev-bin:2.31-13\\+deb11u5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libc-dev-bin@2.31-13+deb11u5?arch=amd64&upstream=glibc&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libc6@2.31-13+deb11u5?arch=amd64&upstream=glibc&distro=debian-11&package-id=abe2c3f30be707e3", + "publisher": "GNU Libc Maintainers ", + "name": "libc6", + "version": "2.31-13+deb11u5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc6:libc6:2.31-13\\+deb11u5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libc6@2.31-13+deb11u5?arch=amd64&upstream=glibc&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libc6-dbg@2.31-13+deb11u5?arch=amd64&upstream=glibc&distro=debian-11&package-id=8a9d416cb54a01f7", + "publisher": "GNU Libc Maintainers ", + "name": "libc6-dbg", + "version": "2.31-13+deb11u5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc6-dbg:libc6-dbg:2.31-13\\+deb11u5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libc6-dbg@2.31-13+deb11u5?arch=amd64&upstream=glibc&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libc6-dev@2.31-13+deb11u5?arch=amd64&upstream=glibc&distro=debian-11&package-id=8e26a90b08552057", + "publisher": "GNU Libc Maintainers ", + "name": "libc6-dev", + "version": "2.31-13+deb11u5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc6-dev:libc6-dev:2.31-13\\+deb11u5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libc6-dev@2.31-13+deb11u5?arch=amd64&upstream=glibc&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcairo2@1.16.0-5?arch=amd64&upstream=cairo&distro=debian-11&package-id=259764e52a1f36ec", + "publisher": "Debian GNOME Maintainers ", + "name": "libcairo2", + "version": "1.16.0-5", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libcairo2:libcairo2:1.16.0-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcairo2@1.16.0-5?arch=amd64&upstream=cairo&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcap-ng0@0.7.9-2.2+b1?arch=amd64&upstream=libcap-ng%400.7.9-2.2&distro=debian-11&package-id=77d3f745010c245", + "publisher": "Pierre Chifflier ", + "name": "libcap-ng0", + "version": "0.7.9-2.2+b1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libcap-ng0:libcap-ng0:0.7.9-2.2\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcap-ng0@0.7.9-2.2+b1?arch=amd64&upstream=libcap-ng%400.7.9-2.2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcap2@1:2.44-1?arch=amd64&distro=debian-11&package-id=e072c59707c90e6f", + "publisher": "Christian Kastner ", + "name": "libcap2", + "version": "1:2.44-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libcap2:libcap2:1\\:2.44-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcap2@1:2.44-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcap2-bin@1:2.44-1?arch=amd64&upstream=libcap2&distro=debian-11&package-id=947be301d335f82a", + "publisher": "Christian Kastner ", + "name": "libcap2-bin", + "version": "1:2.44-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libcap2-bin:libcap2-bin:1\\:2.44-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcap2-bin@1:2.44-1?arch=amd64&upstream=libcap2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcc1-0@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=9324050ed0fc149", + "publisher": "Debian GCC Maintainers ", + "name": "libcc1-0", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libcc1-0:libcc1-0:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcc1-0@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcom-err2@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11&package-id=c3e2285fd362b920", + "publisher": "Theodore Y. Ts'o ", + "name": "libcom-err2", + "version": "1.46.2-2", + "cpe": "cpe:2.3:a:libcom-err2:libcom-err2:1.46.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcom-err2@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcrypt-dev@1:4.4.18-4?arch=amd64&upstream=libxcrypt&distro=debian-11&package-id=5f0f760a471b910b", + "publisher": "Marco d'Itri ", + "name": "libcrypt-dev", + "version": "1:4.4.18-4", + "cpe": "cpe:2.3:a:libcrypt-dev:libcrypt-dev:1\\:4.4.18-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcrypt-dev@1:4.4.18-4?arch=amd64&upstream=libxcrypt&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcrypt1@1:4.4.18-4?arch=amd64&upstream=libxcrypt&distro=debian-11&package-id=4d32f8aeb497b2e2", + "publisher": "Marco d'Itri ", + "name": "libcrypt1", + "version": "1:4.4.18-4", + "cpe": "cpe:2.3:a:libcrypt1:libcrypt1:1\\:4.4.18-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcrypt1@1:4.4.18-4?arch=amd64&upstream=libxcrypt&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libctf-nobfd0@2.35.2-2?arch=amd64&upstream=binutils&distro=debian-11&package-id=d44ea0845aeea037", + "publisher": "Matthias Klose ", + "name": "libctf-nobfd0", + "version": "2.35.2-2", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libctf-nobfd0:libctf-nobfd0:2.35.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libctf-nobfd0@2.35.2-2?arch=amd64&upstream=binutils&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libctf0@2.35.2-2?arch=amd64&upstream=binutils&distro=debian-11&package-id=6c48848dd231991f", + "publisher": "Matthias Klose ", + "name": "libctf0", + "version": "2.35.2-2", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libctf0:libctf0:2.35.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libctf0@2.35.2-2?arch=amd64&upstream=binutils&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcups2@2.3.3op2-3+deb11u2?arch=amd64&upstream=cups&distro=debian-11&package-id=de95652ff6b6f5cc", + "publisher": "Debian Printing Team ", + "name": "libcups2", + "version": "2.3.3op2-3+deb11u2", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "Apache-2.0-with-GPL2-LGPL2-Exception" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "FSFUL" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libcups2:libcups2:2.3.3op2-3\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcups2@2.3.3op2-3+deb11u2?arch=amd64&upstream=cups&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3+deb11u3?arch=amd64&upstream=curl&distro=debian-11&package-id=86d0f9e8bf25fb5a", + "publisher": "Alessandro Ghedini ", + "name": "libcurl3-gnutls", + "version": "7.74.0-1.3+deb11u3", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3+deb11u3?arch=amd64&upstream=curl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcurl4@7.74.0-1.3+deb11u3?arch=amd64&upstream=curl&distro=debian-11&package-id=49f31c785a42021", + "publisher": "Alessandro Ghedini ", + "name": "libcurl4", + "version": "7.74.0-1.3+deb11u3", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcurl4@7.74.0-1.3+deb11u3?arch=amd64&upstream=curl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libdatrie1@0.2.13-1?arch=amd64&upstream=libdatrie&distro=debian-11&package-id=133a81bae05d7d0b", + "publisher": "Theppitak Karoonboonyanan ", + "name": "libdatrie1", + "version": "0.2.13-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libdatrie1:libdatrie1:0.2.13-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libdatrie1@0.2.13-1?arch=amd64&upstream=libdatrie&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libdb5.3@5.3.28+dfsg1-0.8?arch=amd64&upstream=db5.3&distro=debian-11&package-id=bd40bf11043e04a6", + "publisher": "Debian Berkeley DB Team ", + "name": "libdb5.3", + "version": "5.3.28+dfsg1-0.8", + "cpe": "cpe:2.3:a:libdb5.3:libdb5.3:5.3.28\\+dfsg1-0.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libdb5.3@5.3.28+dfsg1-0.8?arch=amd64&upstream=db5.3&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libdbus-1-3@1.12.24-0+deb11u1?arch=amd64&upstream=dbus&distro=debian-11&package-id=e8b953d2ddcce10b", + "publisher": "Utopia Maintenance Team ", + "name": "libdbus-1-3", + "version": "1.12.24-0+deb11u1", + "licenses": [ + { + "license": { + "id": "AFL-2.1" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-generic" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "Tcl-BSDish" + } + }, + { + "license": { + "name": "g10-permissive" + } + } + ], + "cpe": "cpe:2.3:a:libdbus-1-3:libdbus-1-3:1.12.24-0\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libdbus-1-3@1.12.24-0+deb11u1?arch=amd64&upstream=dbus&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libdebconfclient0@0.260?arch=amd64&upstream=cdebconf&distro=debian-11&package-id=f46e6be545ae8a8c", + "publisher": "Debian Install System Team ", + "name": "libdebconfclient0", + "version": "0.260", + "cpe": "cpe:2.3:a:libdebconfclient0:libdebconfclient0:0.260:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libdebconfclient0@0.260?arch=amd64&upstream=cdebconf&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libdebuginfod1@0.183-1?arch=amd64&upstream=elfutils&distro=debian-11&package-id=c4de0d218fbac992", + "publisher": "Debian Elfutils Maintainers ", + "name": "libdebuginfod1", + "version": "0.183-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libdebuginfod1:libdebuginfod1:0.183-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libdebuginfod1@0.183-1?arch=amd64&upstream=elfutils&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libdeflate0@1.7-1?arch=amd64&upstream=libdeflate&distro=debian-11&package-id=6d2c83972d64bdfd", + "publisher": "Debian Med Packaging Team ", + "name": "libdeflate0", + "version": "1.7-1", + "licenses": [ + { + "license": { + "name": "Expat" + } + } + ], + "cpe": "cpe:2.3:a:libdeflate0:libdeflate0:1.7-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libdeflate0@1.7-1?arch=amd64&upstream=libdeflate&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libdpkg-perl@1.20.12?arch=all&upstream=dpkg&distro=debian-11&package-id=e27c59e3ebbbfb59", + "publisher": "Dpkg Developers ", + "name": "libdpkg-perl", + "version": "1.20.12", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain-md5" + } + }, + { + "license": { + "name": "public-domain-s-s-d" + } + } + ], + "cpe": "cpe:2.3:a:libdpkg-perl:libdpkg-perl:1.20.12:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libdpkg-perl@1.20.12?arch=all&upstream=dpkg&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libdw1@0.183-1?arch=amd64&upstream=elfutils&distro=debian-11&package-id=f50fed65709c52a7", + "publisher": "Debian Elfutils Maintainers ", + "name": "libdw1", + "version": "0.183-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libdw1:libdw1:0.183-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libdw1@0.183-1?arch=amd64&upstream=elfutils&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libedit2@3.1-20191231-2+b1?arch=amd64&upstream=libedit%403.1-20191231-2&distro=debian-11&package-id=82ba53f03f3bc29a", + "publisher": "LLVM Packaging Team ", + "name": "libedit2", + "version": "3.1-20191231-2+b1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libedit2:libedit2:3.1-20191231-2\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libedit2@3.1-20191231-2+b1?arch=amd64&upstream=libedit%403.1-20191231-2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libelf1@0.183-1?arch=amd64&upstream=elfutils&distro=debian-11&package-id=9dca3dea199ddb18", + "publisher": "Debian Elfutils Maintainers ", + "name": "libelf1", + "version": "0.183-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libelf1:libelf1:0.183-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libelf1@0.183-1?arch=amd64&upstream=elfutils&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/liberror-perl@0.17029-1?arch=all&distro=debian-11&package-id=283ecec26ab1cb92", + "publisher": "Debian Perl Group ", + "name": "liberror-perl", + "version": "0.17029-1", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "name": "MIT/X11" + } + } + ], + "cpe": "cpe:2.3:a:liberror-perl:liberror-perl:0.17029-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/liberror-perl@0.17029-1?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libevent-2.1-7@2.1.12-stable-1?arch=amd64&upstream=libevent&distro=debian-11&package-id=ece57e6e93801664", + "publisher": "Balint Reczey ", + "name": "libevent-2.1-7", + "version": "2.1.12-stable-1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-3-Clause~Kitware" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "FSFUL" + } + }, + { + "license": { + "id": "FSFULLR" + } + }, + { + "license": { + "name": "FSFULLR-No-Warranty" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + } + ], + "cpe": "cpe:2.3:a:libevent-2.1-7:libevent-2.1-7:2.1.12-stable-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libevent-2.1-7@2.1.12-stable-1?arch=amd64&upstream=libevent&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libexpat1@2.2.10-2+deb11u5?arch=amd64&upstream=expat&distro=debian-11&package-id=a3394c6f61c6d6ab", + "publisher": "Laszlo Boszormenyi (GCS) ", + "name": "libexpat1", + "version": "2.2.10-2+deb11u5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libexpat1:libexpat1:2.2.10-2\\+deb11u5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libexpat1@2.2.10-2+deb11u5?arch=amd64&upstream=expat&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libext2fs2@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11&package-id=78620e65fcd780c3", + "publisher": "Theodore Y. Ts'o ", + "name": "libext2fs2", + "version": "1.46.2-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libext2fs2:libext2fs2:1.46.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libext2fs2@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libffi7@3.3-6?arch=amd64&upstream=libffi&distro=debian-11&package-id=b76aa1c712147c28", + "publisher": "Debian GCC Maintainers ", + "name": "libffi7", + "version": "3.3-6", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libffi7:libffi7:3.3-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libffi7@3.3-6?arch=amd64&upstream=libffi&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libfontconfig1@2.13.1-4.2?arch=amd64&upstream=fontconfig&distro=debian-11&package-id=f0e377aa1de8214e", + "publisher": "Debian freedesktop.org maintainers ", + "name": "libfontconfig1", + "version": "2.13.1-4.2", + "cpe": "cpe:2.3:a:libfontconfig1:libfontconfig1:2.13.1-4.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libfontconfig1@2.13.1-4.2?arch=amd64&upstream=fontconfig&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libfreetype6@2.10.4+dfsg-1+deb11u1?arch=amd64&upstream=freetype&distro=debian-11&package-id=55f5893ecb8315bb", + "publisher": "Hugh McMaster ", + "name": "libfreetype6", + "version": "2.10.4+dfsg-1+deb11u1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "FSFAP" + } + }, + { + "license": { + "id": "FSFUL" + } + }, + { + "license": { + "id": "FSFULLR" + } + }, + { + "license": { + "id": "FTL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "id": "OFL-1.1" + } + }, + { + "license": { + "name": "OpenGroup-BSD-like" + } + }, + { + "license": { + "name": "Permissive" + } + }, + { + "license": { + "name": "Public-Domain" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libfreetype6:libfreetype6:2.10.4\\+dfsg-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libfreetype6@2.10.4+dfsg-1+deb11u1?arch=amd64&upstream=freetype&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libfribidi0@1.0.8-2+deb11u1?arch=amd64&upstream=fribidi&distro=debian-11&package-id=1ee2bb298a6b642d", + "publisher": "Debian Hebrew Packaging Team ", + "name": "libfribidi0", + "version": "1.0.8-2+deb11u1", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libfribidi0:libfribidi0:1.0.8-2\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libfribidi0@1.0.8-2+deb11u1?arch=amd64&upstream=fribidi&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libfstrm0@0.6.0-1+b1?arch=amd64&upstream=fstrm%400.6.0-1&distro=debian-11&package-id=e9d6cf983a9519b4", + "publisher": "Robert Edmonds ", + "name": "libfstrm0", + "version": "0.6.0-1+b1", + "licenses": [ + { + "license": { + "name": "Gray-Watson" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libfstrm0:libfstrm0:0.6.0-1\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libfstrm0@0.6.0-1+b1?arch=amd64&upstream=fstrm%400.6.0-1&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgcc-10-dev@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=be33e75e9891e290", + "publisher": "Debian GCC Maintainers ", + "name": "libgcc-10-dev", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcc-10-dev:libgcc-10-dev:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgcc-10-dev@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgcc-s1@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=ddb4ba0153b59955", + "publisher": "Debian GCC Maintainers ", + "name": "libgcc-s1", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcc-s1:libgcc-s1:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgcc-s1@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgcrypt20@1.8.7-6?arch=amd64&distro=debian-11&package-id=7bc9b7389c934ca8", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libgcrypt20", + "version": "1.8.7-6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcrypt20:libgcrypt20:1.8.7-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgcrypt20@1.8.7-6?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgdbm-compat4@1.19-2?arch=amd64&upstream=gdbm&distro=debian-11&package-id=90dd9f99ee3321b8", + "publisher": "Dmitry Bogatov ", + "name": "libgdbm-compat4", + "version": "1.19-2", + "licenses": [ + { + "license": { + "name": "GFDL-NIV-1.3+" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgdbm-compat4:libgdbm-compat4:1.19-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgdbm-compat4@1.19-2?arch=amd64&upstream=gdbm&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgdbm6@1.19-2?arch=amd64&upstream=gdbm&distro=debian-11&package-id=9ed3d476ab3ead1e", + "publisher": "Dmitry Bogatov ", + "name": "libgdbm6", + "version": "1.19-2", + "licenses": [ + { + "license": { + "name": "GFDL-NIV-1.3+" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgdbm6:libgdbm6:1.19-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgdbm6@1.19-2?arch=amd64&upstream=gdbm&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgdk-pixbuf-2.0-0@2.42.2+dfsg-1+deb11u1?arch=amd64&upstream=gdk-pixbuf&distro=debian-11&package-id=9bdad52748b9d133", + "publisher": "Debian GNOME Maintainers ", + "name": "libgdk-pixbuf-2.0-0", + "version": "2.42.2+dfsg-1+deb11u1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgdk-pixbuf-2.0-0:libgdk-pixbuf-2.0-0:2.42.2\\+dfsg-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgdk-pixbuf-2.0-0@2.42.2+dfsg-1+deb11u1?arch=amd64&upstream=gdk-pixbuf&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgdk-pixbuf2.0-common@2.42.2+dfsg-1+deb11u1?arch=all&upstream=gdk-pixbuf&distro=debian-11&package-id=423ac90f801992cb", + "publisher": "Debian GNOME Maintainers ", + "name": "libgdk-pixbuf2.0-common", + "version": "2.42.2+dfsg-1+deb11u1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgdk-pixbuf2.0-common:libgdk-pixbuf2.0-common:2.42.2\\+dfsg-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgdk-pixbuf2.0-common@2.42.2+dfsg-1+deb11u1?arch=all&upstream=gdk-pixbuf&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libglib2.0-0@2.66.8-1?arch=amd64&upstream=glib2.0&distro=debian-11&package-id=d91983e4d7618554", + "publisher": "Debian GNOME Maintainers ", + "name": "libglib2.0-0", + "version": "2.66.8-1", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libglib2.0-0:libglib2.0-0:2.66.8-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libglib2.0-0@2.66.8-1?arch=amd64&upstream=glib2.0&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgmp10@2:6.2.1+dfsg-1+deb11u1?arch=amd64&upstream=gmp&distro=debian-11&package-id=b8566db47d8d4ddc", + "publisher": "Debian Science Team ", + "name": "libgmp10", + "version": "2:6.2.1+dfsg-1+deb11u1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgmp10:libgmp10:2\\:6.2.1\\+dfsg-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgmp10@2:6.2.1+dfsg-1+deb11u1?arch=amd64&upstream=gmp&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgnutls30@3.7.1-5+deb11u2?arch=amd64&upstream=gnutls28&distro=debian-11&package-id=9ba32f357c27d6bd", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libgnutls30", + "version": "3.7.1-5+deb11u2", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPLv3+" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "name": "LGPLv2.1+" + } + }, + { + "license": { + "name": "LGPLv3+_or_GPLv2+" + } + }, + { + "license": { + "name": "The" + } + } + ], + "cpe": "cpe:2.3:a:libgnutls30:libgnutls30:3.7.1-5\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgnutls30@3.7.1-5+deb11u2?arch=amd64&upstream=gnutls28&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgomp1@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=fee45961a9f5626b", + "publisher": "Debian GCC Maintainers ", + "name": "libgomp1", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgomp1:libgomp1:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgomp1@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgpg-error0@1.38-2?arch=amd64&upstream=libgpg-error&distro=debian-11&package-id=2391ec82a95e1b79", + "publisher": "Debian GnuPG Maintainers ", + "name": "libgpg-error0", + "version": "1.38-2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "g10-permissive" + } + } + ], + "cpe": "cpe:2.3:a:libgpg-error0:libgpg-error0:1.38-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgpg-error0@1.38-2?arch=amd64&upstream=libgpg-error&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgpm2@1.20.7-8?arch=amd64&upstream=gpm&distro=debian-11&package-id=5a5861d941b8b3e9", + "publisher": "Axel Beckert ", + "name": "libgpm2", + "version": "1.20.7-8", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgpm2:libgpm2:1.20.7-8:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgpm2@1.20.7-8?arch=amd64&upstream=gpm&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgraphite2-3@1.3.14-1?arch=amd64&upstream=graphite2&distro=debian-11&package-id=9a1127616d55e8d8", + "publisher": "Debian LibreOffice Maintainers ", + "name": "libgraphite2-3", + "version": "1.3.14-1", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "MPL-1.1" + } + }, + { + "license": { + "name": "custom-sil-open-font-license" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libgraphite2-3:libgraphite2-3:1.3.14-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgraphite2-3@1.3.14-1?arch=amd64&upstream=graphite2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6+deb11u2?arch=amd64&upstream=krb5&distro=debian-11&package-id=939119995ec5c771", + "publisher": "Sam Hartman ", + "name": "libgssapi-krb5-2", + "version": "1.18.3-6+deb11u2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.18.3-6\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6+deb11u2?arch=amd64&upstream=krb5&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgtk2.0-0@2.24.33-2?arch=amd64&upstream=gtk+2.0&distro=debian-11&package-id=80d08798df8a6ad3", + "publisher": "Debian GNOME Maintainers ", + "name": "libgtk2.0-0", + "version": "2.24.33-2", + "licenses": [ + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "name": "other" + } + } + ], + "cpe": "cpe:2.3:a:libgtk2.0-0:libgtk2.0-0:2.24.33-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgtk2.0-0@2.24.33-2?arch=amd64&upstream=gtk+2.0&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgtk2.0-common@2.24.33-2?arch=all&upstream=gtk+2.0&distro=debian-11&package-id=8064722b08ef354f", + "publisher": "Debian GNOME Maintainers ", + "name": "libgtk2.0-common", + "version": "2.24.33-2", + "licenses": [ + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "name": "other" + } + } + ], + "cpe": "cpe:2.3:a:libgtk2.0-common:libgtk2.0-common:2.24.33-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgtk2.0-common@2.24.33-2?arch=all&upstream=gtk+2.0&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libharfbuzz0b@2.7.4-1?arch=amd64&upstream=harfbuzz&distro=debian-11&package-id=e3de93324e0a53b5", + "publisher": "أحمد المحمودي (Ahmed El-Mahmoudy) ", + "name": "libharfbuzz0b", + "version": "2.7.4-1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libharfbuzz0b:libharfbuzz0b:2.7.4-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libharfbuzz0b@2.7.4-1?arch=amd64&upstream=harfbuzz&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libhogweed6@3.7.3-1?arch=amd64&upstream=nettle&distro=debian-11&package-id=5e22b39e8cb919f6", + "publisher": "Magnus Holmgren ", + "name": "libhogweed6", + "version": "3.7.3-1", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libhogweed6:libhogweed6:3.7.3-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libhogweed6@3.7.3-1?arch=amd64&upstream=nettle&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libhttp-parser2.9@2.9.4-4+deb11u1?arch=amd64&upstream=http-parser&distro=debian-11&package-id=741ccf3f007628b8", + "publisher": "Christoph Biedl ", + "name": "libhttp-parser2.9", + "version": "2.9.4-4+deb11u1", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "name": "Expat-nginx" + } + } + ], + "cpe": "cpe:2.3:a:libhttp-parser2.9:libhttp-parser2.9:2.9.4-4\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libhttp-parser2.9@2.9.4-4+deb11u1?arch=amd64&upstream=http-parser&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libicu67@67.1-7?arch=amd64&upstream=icu&distro=debian-11&package-id=52bb142f2f6f57d4", + "publisher": "Laszlo Boszormenyi (GCS) ", + "name": "libicu67", + "version": "67.1-7", + "cpe": "cpe:2.3:a:libicu67:libicu67:67.1-7:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libicu67@67.1-7?arch=amd64&upstream=icu&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libidn2-0@2.3.0-5?arch=amd64&upstream=libidn2&distro=debian-11&package-id=8eb1c8304ad48ef2", + "publisher": "Debian Libidn team ", + "name": "libidn2-0", + "version": "2.3.0-5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "Unicode" + } + } + ], + "cpe": "cpe:2.3:a:libidn2-0:libidn2-0:2.3.0-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libidn2-0@2.3.0-5?arch=amd64&upstream=libidn2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libipt2@2.0.3-1?arch=amd64&upstream=intel-processor-trace&distro=debian-11&package-id=1d478f1cfa95ed86", + "publisher": "Victor Seva ", + "name": "libipt2", + "version": "2.0.3-1", + "licenses": [ + { + "license": { + "name": "Expat" + } + } + ], + "cpe": "cpe:2.3:a:libipt2:libipt2:2.0.3-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libipt2@2.0.3-1?arch=amd64&upstream=intel-processor-trace&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libisl23@0.23-1?arch=amd64&upstream=isl&distro=debian-11&package-id=6678b90c2b92f785", + "publisher": "Debian GCC Maintainers ", + "name": "libisl23", + "version": "0.23-1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libisl23:libisl23:0.23-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libisl23@0.23-1?arch=amd64&upstream=isl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libitm1@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=879d46ac73134aff", + "publisher": "Debian GCC Maintainers ", + "name": "libitm1", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libitm1:libitm1:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libitm1@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libjansson4@2.13.1-1.1?arch=amd64&upstream=jansson&distro=debian-11&package-id=dd055046a425296c", + "publisher": "Alessandro Ghedini ", + "name": "libjansson4", + "version": "2.13.1-1.1", + "licenses": [ + { + "license": { + "name": "Expat" + } + } + ], + "cpe": "cpe:2.3:a:libjansson4:libjansson4:2.13.1-1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libjansson4@2.13.1-1.1?arch=amd64&upstream=jansson&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libjbig0@2.1-3.1+b2?arch=amd64&upstream=jbigkit%402.1-3.1&distro=debian-11&package-id=ccf2e13886894508", + "publisher": "Michael van der Kolff ", + "name": "libjbig0", + "version": "2.1-3.1+b2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libjbig0:libjbig0:2.1-3.1\\+b2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libjbig0@2.1-3.1+b2?arch=amd64&upstream=jbigkit%402.1-3.1&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libjpeg62-turbo@1:2.0.6-4?arch=amd64&upstream=libjpeg-turbo&distro=debian-11&package-id=2e17533511143831", + "publisher": "Ondřej Surý ", + "name": "libjpeg62-turbo", + "version": "1:2.0.6-4", + "licenses": [ + { + "license": { + "name": "BSD-3" + } + }, + { + "license": { + "name": "BSD-BY-LC-NE" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "NTP" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libjpeg62-turbo:libjpeg62-turbo:1\\:2.0.6-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libjpeg62-turbo@1:2.0.6-4?arch=amd64&upstream=libjpeg-turbo&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libjq1@1.6-2.1?arch=amd64&upstream=jq&distro=debian-11&package-id=35feed02a5ab7792", + "publisher": "ChangZhuo Chen (陳昌倬) ", + "name": "libjq1", + "version": "1.6-2.1", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libjq1:libjq1:1.6-2.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libjq1@1.6-2.1?arch=amd64&upstream=jq&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libjson-c5@0.15-2?arch=amd64&upstream=json-c&distro=debian-11&package-id=578da518c638c2b0", + "publisher": "Nicolas Mora ", + "name": "libjson-c5", + "version": "0.15-2", + "licenses": [ + { + "license": { + "name": "Expat" + } + } + ], + "cpe": "cpe:2.3:a:libjson-c5:libjson-c5:0.15-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libjson-c5@0.15-2?arch=amd64&upstream=json-c&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libk5crypto3@1.18.3-6+deb11u2?arch=amd64&upstream=krb5&distro=debian-11&package-id=2c74d8b8e84dd04b", + "publisher": "Sam Hartman ", + "name": "libk5crypto3", + "version": "1.18.3-6+deb11u2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libk5crypto3:libk5crypto3:1.18.3-6\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libk5crypto3@1.18.3-6+deb11u2?arch=amd64&upstream=krb5&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libkeyutils1@1.6.1-2?arch=amd64&upstream=keyutils&distro=debian-11&package-id=308487f5f23bf878", + "publisher": "Christian Kastner ", + "name": "libkeyutils1", + "version": "1.6.1-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libkeyutils1:libkeyutils1:1.6.1-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libkeyutils1@1.6.1-2?arch=amd64&upstream=keyutils&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libkmod2@28-1?arch=amd64&upstream=kmod&distro=debian-11&package-id=5e06037b7cd9c087", + "publisher": "Marco d'Itri ", + "name": "libkmod2", + "version": "28-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkmod2:libkmod2:28-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libkmod2@28-1?arch=amd64&upstream=kmod&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libkrb5-3@1.18.3-6+deb11u2?arch=amd64&upstream=krb5&distro=debian-11&package-id=74e136490fc32e51", + "publisher": "Sam Hartman ", + "name": "libkrb5-3", + "version": "1.18.3-6+deb11u2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5-3:libkrb5-3:1.18.3-6\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libkrb5-3@1.18.3-6+deb11u2?arch=amd64&upstream=krb5&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libkrb5support0@1.18.3-6+deb11u2?arch=amd64&upstream=krb5&distro=debian-11&package-id=6e5b5ddd0b83ce02", + "publisher": "Sam Hartman ", + "name": "libkrb5support0", + "version": "1.18.3-6+deb11u2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5support0:libkrb5support0:1.18.3-6\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libkrb5support0@1.18.3-6+deb11u2?arch=amd64&upstream=krb5&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libldap-2.4-2@2.4.57+dfsg-3+deb11u1?arch=amd64&upstream=openldap&distro=debian-11&package-id=796a192b709a2a2b", + "publisher": "Debian OpenLDAP Maintainers ", + "name": "libldap-2.4-2", + "version": "2.4.57+dfsg-3+deb11u1", + "cpe": "cpe:2.3:a:libldap-2.4-2:libldap-2.4-2:2.4.57\\+dfsg-3\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libldap-2.4-2@2.4.57+dfsg-3+deb11u1?arch=amd64&upstream=openldap&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/liblinear4@2.3.0+dfsg-5?arch=amd64&upstream=liblinear&distro=debian-11&package-id=77ce23fef5f89dc5", + "publisher": "Debian Science Maintainers ", + "name": "liblinear4", + "version": "2.3.0+dfsg-5", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:liblinear4:liblinear4:2.3.0\\+dfsg-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/liblinear4@2.3.0+dfsg-5?arch=amd64&upstream=liblinear&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/liblmdb0@0.9.24-1?arch=amd64&upstream=lmdb&distro=debian-11&package-id=cfbf2c4fd501829d", + "publisher": "LMDB ", + "name": "liblmdb0", + "version": "0.9.24-1", + "licenses": [ + { + "license": { + "name": "OpenLDAP-2.8" + } + } + ], + "cpe": "cpe:2.3:a:liblmdb0:liblmdb0:0.9.24-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/liblmdb0@0.9.24-1?arch=amd64&upstream=lmdb&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/liblsan0@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=e282c94440156007", + "publisher": "Debian GCC Maintainers ", + "name": "liblsan0", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:liblsan0:liblsan0:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/liblsan0@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/liblua5.3-0@5.3.3-1.1+b1?arch=amd64&upstream=lua5.3%405.3.3-1.1&distro=debian-11&package-id=92a6d9ca129f4c8", + "publisher": "Enrico Tassi ", + "name": "liblua5.3-0", + "version": "5.3.3-1.1+b1", + "licenses": [ + { + "license": { + "name": "Expat" + } + } + ], + "cpe": "cpe:2.3:a:liblua5.3-0:liblua5.3-0:5.3.3-1.1\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/liblua5.3-0@5.3.3-1.1+b1?arch=amd64&upstream=lua5.3%405.3.3-1.1&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/liblz4-1@1.9.3-2?arch=amd64&upstream=lz4&distro=debian-11&package-id=b59e208fb7f8bae4", + "publisher": "Nobuhiro Iwamatsu ", + "name": "liblz4-1", + "version": "1.9.3-2", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:liblz4-1:liblz4-1:1.9.3-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/liblz4-1@1.9.3-2?arch=amd64&upstream=lz4&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/liblzma5@5.2.5-2.1~deb11u1?arch=amd64&upstream=xz-utils&distro=debian-11&package-id=b95662a389d30c72", + "publisher": "Jonathan Nieder ", + "name": "liblzma5", + "version": "5.2.5-2.1~deb11u1", + "licenses": [ + { + "license": { + "name": "Autoconf" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "PD" + } + }, + { + "license": { + "name": "PD-debian" + } + }, + { + "license": { + "name": "config-h" + } + }, + { + "license": { + "name": "noderivs" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-nowarranty" + } + }, + { + "license": { + "name": "probably-PD" + } + } + ], + "cpe": "cpe:2.3:a:liblzma5:liblzma5:5.2.5-2.1\\~deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/liblzma5@5.2.5-2.1~deb11u1?arch=amd64&upstream=xz-utils&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libmaxminddb0@1.5.2-1?arch=amd64&upstream=libmaxminddb&distro=debian-11&package-id=55e1638fcb0edbb2", + "publisher": "Faidon Liambotis ", + "name": "libmaxminddb0", + "version": "1.5.2-1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "CC-BY-SA-3.0" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libmaxminddb0:libmaxminddb0:1.5.2-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libmaxminddb0@1.5.2-1?arch=amd64&upstream=libmaxminddb&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libmd0@1.0.3-3?arch=amd64&upstream=libmd&distro=debian-11&package-id=331d8d42d5fc0777", + "publisher": "Guillem Jover ", + "name": "libmd0", + "version": "1.0.3-3", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-Aaron-D-Gifford" + } + }, + { + "license": { + "id": "Beerware" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "public-domain-md4" + } + }, + { + "license": { + "name": "public-domain-md5" + } + }, + { + "license": { + "name": "public-domain-sha1" + } + } + ], + "cpe": "cpe:2.3:a:libmd0:libmd0:1.0.3-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libmd0@1.0.3-3?arch=amd64&upstream=libmd&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libmount1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11&package-id=afd0c3536366dc2c", + "publisher": "util-linux packagers ", + "name": "libmount1", + "version": "2.36.1-8+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmount1:libmount1:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libmount1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libmpc3@1.2.0-1?arch=amd64&upstream=mpclib3&distro=debian-11&package-id=85fd2c8d9e7b2289", + "publisher": "Debian GCC Maintainers ", + "name": "libmpc3", + "version": "1.2.0-1", + "licenses": [ + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libmpc3:libmpc3:1.2.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libmpc3@1.2.0-1?arch=amd64&upstream=mpclib3&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libmpdec3@2.5.1-1?arch=amd64&upstream=mpdecimal&distro=debian-11&package-id=a54659e4774c2bea", + "publisher": "Matthias Klose ", + "name": "libmpdec3", + "version": "2.5.1-1", + "licenses": [ + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libmpdec3:libmpdec3:2.5.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libmpdec3@2.5.1-1?arch=amd64&upstream=mpdecimal&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libmpfr6@4.1.0-3?arch=amd64&upstream=mpfr4&distro=debian-11&package-id=25a396a34cfda6a8", + "publisher": "Debian GCC Maintainers ", + "name": "libmpfr6", + "version": "4.1.0-3", + "licenses": [ + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libmpfr6:libmpfr6:4.1.0-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libmpfr6@4.1.0-3?arch=amd64&upstream=mpfr4&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libncurses6@6.2+20201114-2?arch=amd64&upstream=ncurses&distro=debian-11&package-id=f539b9c0b1c439cc", + "publisher": "Craig Small ", + "name": "libncurses6", + "version": "6.2+20201114-2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "MIT/X11" + } + }, + { + "license": { + "id": "X11" + } + } + ], + "cpe": "cpe:2.3:a:libncurses6:libncurses6:6.2\\+20201114-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libncurses6@6.2+20201114-2?arch=amd64&upstream=ncurses&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libncursesw6@6.2+20201114-2?arch=amd64&upstream=ncurses&distro=debian-11&package-id=9eba19a6d4dcd7de", + "publisher": "Craig Small ", + "name": "libncursesw6", + "version": "6.2+20201114-2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "MIT/X11" + } + }, + { + "license": { + "id": "X11" + } + } + ], + "cpe": "cpe:2.3:a:libncursesw6:libncursesw6:6.2\\+20201114-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libncursesw6@6.2+20201114-2?arch=amd64&upstream=ncurses&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libnet1@1.1.6+dfsg-3.1?arch=amd64&upstream=libnet&distro=debian-11&package-id=8fc9735913a7d9d2", + "publisher": "Stefanos Harhalakis ", + "name": "libnet1", + "version": "1.1.6+dfsg-3.1", + "licenses": [ + { + "license": { + "name": "BSD-2" + } + }, + { + "license": { + "name": "BSD-3" + } + }, + { + "license": { + "name": "BSD-4" + } + }, + { + "license": { + "name": "other" + } + } + ], + "cpe": "cpe:2.3:a:libnet1:libnet1:1.1.6\\+dfsg-3.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libnet1@1.1.6+dfsg-3.1?arch=amd64&upstream=libnet&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libnettle8@3.7.3-1?arch=amd64&upstream=nettle&distro=debian-11&package-id=ceff94b390c9bf61", + "publisher": "Magnus Holmgren ", + "name": "libnettle8", + "version": "3.7.3-1", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libnettle8:libnettle8:3.7.3-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libnettle8@3.7.3-1?arch=amd64&upstream=nettle&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libnghttp2-14@1.43.0-1?arch=amd64&upstream=nghttp2&distro=debian-11&package-id=cfb81461ba0ee3f7", + "publisher": "Tomasz Buchert ", + "name": "libnghttp2-14", + "version": "1.43.0-1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "SIL-OFL-1.1" + } + }, + { + "license": { + "name": "all-permissive" + } + } + ], + "cpe": "cpe:2.3:a:libnghttp2-14:libnghttp2-14:1.43.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libnghttp2-14@1.43.0-1?arch=amd64&upstream=nghttp2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libnl-3-200@3.4.0-1+b1?arch=amd64&upstream=libnl3%403.4.0-1&distro=debian-11&package-id=ad90f043b9966ef2", + "publisher": "Heiko Stuebner ", + "name": "libnl-3-200", + "version": "3.4.0-1+b1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libnl-3-200:libnl-3-200:3.4.0-1\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libnl-3-200@3.4.0-1+b1?arch=amd64&upstream=libnl3%403.4.0-1&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libnl-genl-3-200@3.4.0-1+b1?arch=amd64&upstream=libnl3%403.4.0-1&distro=debian-11&package-id=77b7843058b162e5", + "publisher": "Heiko Stuebner ", + "name": "libnl-genl-3-200", + "version": "3.4.0-1+b1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libnl-genl-3-200:libnl-genl-3-200:3.4.0-1\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libnl-genl-3-200@3.4.0-1+b1?arch=amd64&upstream=libnl3%403.4.0-1&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libnsl-dev@1.3.0-2?arch=amd64&upstream=libnsl&distro=debian-11&package-id=272daa220241ae9c", + "publisher": "GNU Libc Maintainers ", + "name": "libnsl-dev", + "version": "1.3.0-2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPL-2+-autoconf-exception" + } + }, + { + "license": { + "name": "GPL-2+-libtool-exception" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPL-3+-autoconf-exception" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "permissive-autoconf-m4" + } + }, + { + "license": { + "name": "permissive-autoconf-m4-no-warranty" + } + }, + { + "license": { + "name": "permissive-configure" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-makefile-in" + } + } + ], + "cpe": "cpe:2.3:a:libnsl-dev:libnsl-dev:1.3.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libnsl-dev@1.3.0-2?arch=amd64&upstream=libnsl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libnsl2@1.3.0-2?arch=amd64&upstream=libnsl&distro=debian-11&package-id=fc8ac2f1807436d9", + "publisher": "GNU Libc Maintainers ", + "name": "libnsl2", + "version": "1.3.0-2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPL-2+-autoconf-exception" + } + }, + { + "license": { + "name": "GPL-2+-libtool-exception" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPL-3+-autoconf-exception" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "permissive-autoconf-m4" + } + }, + { + "license": { + "name": "permissive-autoconf-m4-no-warranty" + } + }, + { + "license": { + "name": "permissive-configure" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-makefile-in" + } + } + ], + "cpe": "cpe:2.3:a:libnsl2:libnsl2:1.3.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libnsl2@1.3.0-2?arch=amd64&upstream=libnsl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libonig5@6.9.6-1.1?arch=amd64&upstream=libonig&distro=debian-11&package-id=77b70f9f005a3a90", + "publisher": "Jörg Frings-Fürst ", + "name": "libonig5", + "version": "6.9.6-1.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libonig5:libonig5:6.9.6-1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libonig5@6.9.6-1.1?arch=amd64&upstream=libonig&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libp11-kit0@0.23.22-1?arch=amd64&upstream=p11-kit&distro=debian-11&package-id=a2ce6d1eb48ab956", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libp11-kit0", + "version": "0.23.22-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "ISC+IBM" + } + }, + { + "license": { + "name": "permissive-like-automake-output" + } + }, + { + "license": { + "name": "same-as-rest-of-p11kit" + } + } + ], + "cpe": "cpe:2.3:a:libp11-kit0:libp11-kit0:0.23.22-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libp11-kit0@0.23.22-1?arch=amd64&upstream=p11-kit&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam-modules@1.4.0-9+deb11u1?arch=amd64&upstream=pam&distro=debian-11&package-id=903eac5974d73705", + "publisher": "Steve Langasek ", + "name": "libpam-modules", + "version": "1.4.0-9+deb11u1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules:libpam-modules:1.4.0-9\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam-modules@1.4.0-9+deb11u1?arch=amd64&upstream=pam&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam-modules-bin@1.4.0-9+deb11u1?arch=amd64&upstream=pam&distro=debian-11&package-id=2dc3f20bb97e020d", + "publisher": "Steve Langasek ", + "name": "libpam-modules-bin", + "version": "1.4.0-9+deb11u1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules-bin:libpam-modules-bin:1.4.0-9\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam-modules-bin@1.4.0-9+deb11u1?arch=amd64&upstream=pam&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam-runtime@1.4.0-9+deb11u1?arch=all&upstream=pam&distro=debian-11&package-id=1238d07342abe7a3", + "publisher": "Steve Langasek ", + "name": "libpam-runtime", + "version": "1.4.0-9+deb11u1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-runtime:libpam-runtime:1.4.0-9\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam-runtime@1.4.0-9+deb11u1?arch=all&upstream=pam&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpam0g@1.4.0-9+deb11u1?arch=amd64&upstream=pam&distro=debian-11&package-id=70917c5424d601fa", + "publisher": "Steve Langasek ", + "name": "libpam0g", + "version": "1.4.0-9+deb11u1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam0g:libpam0g:1.4.0-9\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpam0g@1.4.0-9+deb11u1?arch=amd64&upstream=pam&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpango-1.0-0@1.46.2-3?arch=amd64&upstream=pango1.0&distro=debian-11&package-id=96fa4f5edb516162", + "publisher": "Debian GNOME Maintainers ", + "name": "libpango-1.0-0", + "version": "1.46.2-3", + "licenses": [ + { + "license": { + "name": "Chromium-BSD-style" + } + }, + { + "license": { + "name": "Example" + } + }, + { + "license": { + "id": "ICU" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "TCL" + } + }, + { + "license": { + "name": "Unicode" + } + } + ], + "cpe": "cpe:2.3:a:libpango-1.0-0:libpango-1.0-0:1.46.2-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpango-1.0-0@1.46.2-3?arch=amd64&upstream=pango1.0&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpangocairo-1.0-0@1.46.2-3?arch=amd64&upstream=pango1.0&distro=debian-11&package-id=7567383a7569f75d", + "publisher": "Debian GNOME Maintainers ", + "name": "libpangocairo-1.0-0", + "version": "1.46.2-3", + "licenses": [ + { + "license": { + "name": "Chromium-BSD-style" + } + }, + { + "license": { + "name": "Example" + } + }, + { + "license": { + "id": "ICU" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "TCL" + } + }, + { + "license": { + "name": "Unicode" + } + } + ], + "cpe": "cpe:2.3:a:libpangocairo-1.0-0:libpangocairo-1.0-0:1.46.2-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpangocairo-1.0-0@1.46.2-3?arch=amd64&upstream=pango1.0&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpangoft2-1.0-0@1.46.2-3?arch=amd64&upstream=pango1.0&distro=debian-11&package-id=b3636c41d4fd4ff9", + "publisher": "Debian GNOME Maintainers ", + "name": "libpangoft2-1.0-0", + "version": "1.46.2-3", + "licenses": [ + { + "license": { + "name": "Chromium-BSD-style" + } + }, + { + "license": { + "name": "Example" + } + }, + { + "license": { + "id": "ICU" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "TCL" + } + }, + { + "license": { + "name": "Unicode" + } + } + ], + "cpe": "cpe:2.3:a:libpangoft2-1.0-0:libpangoft2-1.0-0:1.46.2-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpangoft2-1.0-0@1.46.2-3?arch=amd64&upstream=pango1.0&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpcap0.8@1.10.0-2?arch=amd64&upstream=libpcap&distro=debian-11&package-id=44b99d669ec6a4e", + "publisher": "Romain Francoise ", + "name": "libpcap0.8", + "version": "1.10.0-2", + "cpe": "cpe:2.3:a:libpcap0.8:libpcap0.8:1.10.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpcap0.8@1.10.0-2?arch=amd64&upstream=libpcap&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpci3@1:3.7.0-5?arch=amd64&upstream=pciutils&distro=debian-11&package-id=81d8df8d8f28e135", + "publisher": "Guillem Jover ", + "name": "libpci3", + "version": "1:3.7.0-5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libpci3:libpci3:1\\:3.7.0-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpci3@1:3.7.0-5?arch=amd64&upstream=pciutils&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpcre2-8-0@10.36-2+deb11u1?arch=amd64&upstream=pcre2&distro=debian-11&package-id=5d07d7ec308f6bb2", + "publisher": "Matthew Vernon ", + "name": "libpcre2-8-0", + "version": "10.36-2+deb11u1", + "cpe": "cpe:2.3:a:libpcre2-8-0:libpcre2-8-0:10.36-2\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpcre2-8-0@10.36-2+deb11u1?arch=amd64&upstream=pcre2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpcre3@2:8.39-13?arch=amd64&upstream=pcre3&distro=debian-11&package-id=1c1641a0882b431f", + "publisher": "Matthew Vernon ", + "name": "libpcre3", + "version": "2:8.39-13", + "cpe": "cpe:2.3:a:libpcre3:libpcre3:2\\:8.39-13:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpcre3@2:8.39-13?arch=amd64&upstream=pcre3&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libperl5.32@5.32.1-4+deb11u2?arch=amd64&upstream=perl&distro=debian-11&package-id=ea44a16f7932b5f8", + "publisher": "Niko Tyni ", + "name": "libperl5.32", + "version": "5.32.1-4+deb11u2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libperl5.32:libperl5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libperl5.32@5.32.1-4+deb11u2?arch=amd64&upstream=perl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpixman-1-0@0.40.0-1.1~deb11u1?arch=amd64&upstream=pixman&distro=debian-11&package-id=e7ecd44c3b7fdac8", + "publisher": "Debian X Strike Force ", + "name": "libpixman-1-0", + "version": "0.40.0-1.1~deb11u1", + "cpe": "cpe:2.3:a:libpixman-1-0:libpixman-1-0:0.40.0-1.1\\~deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpixman-1-0@0.40.0-1.1~deb11u1?arch=amd64&upstream=pixman&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=amd64&upstream=libpng1.6&distro=debian-11&package-id=9821c1ad36f085c7", + "publisher": "Maintainers of libpng1.6 packages ", + "name": "libpng16-16", + "version": "1.6.37-3", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-like-with-advertising-clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "expat" + } + }, + { + "license": { + "id": "Libpng" + } + } + ], + "cpe": "cpe:2.3:a:libpng16-16:libpng16-16:1.6.37-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=amd64&upstream=libpng1.6&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpopt0@1.18-2?arch=amd64&upstream=popt&distro=debian-11&package-id=c5395fb489d0398d", + "publisher": "Michael Jeanson ", + "name": "libpopt0", + "version": "1.18-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "X-Consortium" + } + } + ], + "cpe": "cpe:2.3:a:libpopt0:libpopt0:1.18-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpopt0@1.18-2?arch=amd64&upstream=popt&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpq5@13.8-0+deb11u1?arch=amd64&upstream=postgresql-13&distro=debian-11&package-id=f2714dd821f9d3e5", + "publisher": "Debian PostgreSQL Maintainers ", + "name": "libpq5", + "version": "13.8-0+deb11u1", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Custom-Unicode" + } + }, + { + "license": { + "name": "Custom-pg_dump" + } + }, + { + "license": { + "name": "Custom-regex" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "PostgreSQL" + } + }, + { + "license": { + "id": "TCL" + } + }, + { + "license": { + "name": "blf" + } + }, + { + "license": { + "name": "double-metaphone" + } + }, + { + "license": { + "name": "imath" + } + }, + { + "license": { + "name": "nagaysau-ishii" + } + }, + { + "license": { + "name": "rijndael" + } + } + ], + "cpe": "cpe:2.3:a:libpq5:libpq5:13.8-0\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpq5@13.8-0+deb11u1?arch=amd64&upstream=postgresql-13&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libprotobuf-c1@1.3.3-1+b2?arch=amd64&upstream=protobuf-c%401.3.3-1&distro=debian-11&package-id=1f15c1e3949aef7c", + "publisher": "Robert Edmonds ", + "name": "libprotobuf-c1", + "version": "1.3.3-1+b2", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:libprotobuf-c1:libprotobuf-c1:1.3.3-1\\+b2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libprotobuf-c1@1.3.3-1+b2?arch=amd64&upstream=protobuf-c%401.3.3-1&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpsl5@0.21.0-1.2?arch=amd64&upstream=libpsl&distro=debian-11&package-id=3409718c91a2d222", + "publisher": "Tim Rühsen ", + "name": "libpsl5", + "version": "0.21.0-1.2", + "licenses": [ + { + "license": { + "name": "Chromium" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libpsl5:libpsl5:0.21.0-1.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpsl5@0.21.0-1.2?arch=amd64&upstream=libpsl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpython3-stdlib@3.9.2-3?arch=amd64&upstream=python3-defaults&distro=debian-11&package-id=99db392d77306819", + "publisher": "Matthias Klose ", + "name": "libpython3-stdlib", + "version": "3.9.2-3", + "cpe": "cpe:2.3:a:libpython3-stdlib:libpython3-stdlib:3.9.2-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpython3-stdlib@3.9.2-3?arch=amd64&upstream=python3-defaults&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpython3.9@3.9.2-1?arch=amd64&upstream=python3.9&distro=debian-11&package-id=23ca0958a8aee622", + "publisher": "Matthias Klose ", + "name": "libpython3.9", + "version": "3.9.2-1", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:libpython3.9:libpython3.9:3.9.2-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpython3.9@3.9.2-1?arch=amd64&upstream=python3.9&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpython3.9-minimal@3.9.2-1?arch=amd64&upstream=python3.9&distro=debian-11&package-id=4de115782307e751", + "publisher": "Matthias Klose ", + "name": "libpython3.9-minimal", + "version": "3.9.2-1", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:libpython3.9-minimal:libpython3.9-minimal:3.9.2-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpython3.9-minimal@3.9.2-1?arch=amd64&upstream=python3.9&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpython3.9-stdlib@3.9.2-1?arch=amd64&upstream=python3.9&distro=debian-11&package-id=f151291f1a87d4bb", + "publisher": "Matthias Klose ", + "name": "libpython3.9-stdlib", + "version": "3.9.2-1", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:libpython3.9-stdlib:libpython3.9-stdlib:3.9.2-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpython3.9-stdlib@3.9.2-1?arch=amd64&upstream=python3.9&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libquadmath0@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=48f5f166b613dcea", + "publisher": "Debian GCC Maintainers ", + "name": "libquadmath0", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libquadmath0:libquadmath0:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libquadmath0@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libreadline8@8.1-1?arch=amd64&upstream=readline&distro=debian-11&package-id=348793ec2b579ee6", + "publisher": "Matthias Klose ", + "name": "libreadline8", + "version": "8.1-1", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libreadline8:libreadline8:8.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libreadline8@8.1-1?arch=amd64&upstream=readline&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/librtmp1@2.4+20151223.gitfa8646d.1-2+b2?arch=amd64&upstream=rtmpdump%402.4+20151223.gitfa8646d.1-2&distro=debian-11&package-id=4f5f3212d3812c5d", + "publisher": "Debian Multimedia Maintainers ", + "name": "librtmp1", + "version": "2.4+20151223.gitfa8646d.1-2+b2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:librtmp1:librtmp1:2.4\\+20151223.gitfa8646d.1-2\\+b2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/librtmp1@2.4+20151223.gitfa8646d.1-2+b2?arch=amd64&upstream=rtmpdump%402.4+20151223.gitfa8646d.1-2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsasl2-2@2.1.27+dfsg-2.1+deb11u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-11&package-id=77ea74a82c5fc951", + "publisher": "Debian Cyrus Team ", + "name": "libsasl2-2", + "version": "2.1.27+dfsg-2.1+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-2:libsasl2-2:2.1.27\\+dfsg-2.1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsasl2-2@2.1.27+dfsg-2.1+deb11u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsasl2-modules-db@2.1.27+dfsg-2.1+deb11u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-11&package-id=1e10a1d2edb3e77a", + "publisher": "Debian Cyrus Team ", + "name": "libsasl2-modules-db", + "version": "2.1.27+dfsg-2.1+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-modules-db:libsasl2-modules-db:2.1.27\\+dfsg-2.1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsasl2-modules-db@2.1.27+dfsg-2.1+deb11u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libseccomp2@2.5.1-1+deb11u1?arch=amd64&upstream=libseccomp&distro=debian-11&package-id=bb0878d1437830b4", + "publisher": "Kees Cook ", + "name": "libseccomp2", + "version": "2.5.1-1+deb11u1", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libseccomp2:libseccomp2:2.5.1-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libseccomp2@2.5.1-1+deb11u1?arch=amd64&upstream=libseccomp&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libselinux1@3.1-3?arch=amd64&upstream=libselinux&distro=debian-11&package-id=bb9d0a1adefb7931", + "publisher": "Debian SELinux maintainers ", + "name": "libselinux1", + "version": "3.1-3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libselinux1:libselinux1:3.1-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libselinux1@3.1-3?arch=amd64&upstream=libselinux&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsemanage-common@3.1-1?arch=all&upstream=libsemanage&distro=debian-11&package-id=f41fe741bd23f493", + "publisher": "Debian SELinux maintainers ", + "name": "libsemanage-common", + "version": "3.1-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage-common:libsemanage-common:3.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsemanage-common@3.1-1?arch=all&upstream=libsemanage&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsemanage1@3.1-1+b2?arch=amd64&upstream=libsemanage%403.1-1&distro=debian-11&package-id=fa4813c20a8027a6", + "publisher": "Debian SELinux maintainers ", + "name": "libsemanage1", + "version": "3.1-1+b2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage1:libsemanage1:3.1-1\\+b2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsemanage1@3.1-1+b2?arch=amd64&upstream=libsemanage%403.1-1&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsensors-config@1:3.6.0-7?arch=all&upstream=lm-sensors&distro=debian-11&package-id=8bdfd0c7b4bd6", + "publisher": "Aurelien Jarno ", + "name": "libsensors-config", + "version": "1:3.6.0-7", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libsensors-config:libsensors-config:1\\:3.6.0-7:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsensors-config@1:3.6.0-7?arch=all&upstream=lm-sensors&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsensors5@1:3.6.0-7?arch=amd64&upstream=lm-sensors&distro=debian-11&package-id=af14da8cfedd8260", + "publisher": "Aurelien Jarno ", + "name": "libsensors5", + "version": "1:3.6.0-7", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libsensors5:libsensors5:1\\:3.6.0-7:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsensors5@1:3.6.0-7?arch=amd64&upstream=lm-sensors&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsepol1@3.1-1?arch=amd64&upstream=libsepol&distro=debian-11&package-id=cfa6f496d2fd049", + "publisher": "Debian SELinux maintainers ", + "name": "libsepol1", + "version": "3.1-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsepol1:libsepol1:3.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsepol1@3.1-1?arch=amd64&upstream=libsepol&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsmartcols1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11&package-id=cf3b22adc552a311", + "publisher": "util-linux packagers ", + "name": "libsmartcols1", + "version": "2.36.1-8+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsmartcols1:libsmartcols1:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsmartcols1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsource-highlight-common@3.1.9-3?arch=all&upstream=source-highlight&distro=debian-11&package-id=871404b6164e4cc6", + "publisher": "Kartik Kulkarni ", + "name": "libsource-highlight-common", + "version": "3.1.9-3", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsource-highlight-common:libsource-highlight-common:3.1.9-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsource-highlight-common@3.1.9-3?arch=all&upstream=source-highlight&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsource-highlight4v5@3.1.9-3+b1?arch=amd64&upstream=source-highlight%403.1.9-3&distro=debian-11&package-id=afd27e834ad2c5b6", + "publisher": "Kartik Kulkarni ", + "name": "libsource-highlight4v5", + "version": "3.1.9-3+b1", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsource-highlight4v5:libsource-highlight4v5:3.1.9-3\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsource-highlight4v5@3.1.9-3+b1?arch=amd64&upstream=source-highlight%403.1.9-3&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsqlite3-0@3.34.1-3?arch=amd64&upstream=sqlite3&distro=debian-11&package-id=373ed1f8b8bffc03", + "publisher": "Laszlo Boszormenyi (GCS) ", + "name": "libsqlite3-0", + "version": "3.34.1-3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.34.1-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsqlite3-0@3.34.1-3?arch=amd64&upstream=sqlite3&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libss2@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11&package-id=4ba13b2c11cb0876", + "publisher": "Theodore Y. Ts'o ", + "name": "libss2", + "version": "1.46.2-2", + "cpe": "cpe:2.3:a:libss2:libss2:1.46.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libss2@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libssh2-1@1.9.0-2?arch=amd64&upstream=libssh2&distro=debian-11&package-id=7b11dbeecfce2854", + "publisher": "Nicolas Mora ", + "name": "libssh2-1", + "version": "1.9.0-2", + "licenses": [ + { + "license": { + "name": "BSD3" + } + } + ], + "cpe": "cpe:2.3:a:libssh2-1:libssh2-1:1.9.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libssh2-1@1.9.0-2?arch=amd64&upstream=libssh2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libssl1.1@1.1.1n-0+deb11u3?arch=amd64&upstream=openssl&distro=debian-11&package-id=1f1a72119651ccc9", + "publisher": "Debian OpenSSL Team ", + "name": "libssl1.1", + "version": "1.1.1n-0+deb11u3", + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libssl1.1@1.1.1n-0+deb11u3?arch=amd64&upstream=openssl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libstdc++-10-dev@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=a8bb337f3114d06f", + "publisher": "Debian GCC Maintainers ", + "name": "libstdc++-10-dev", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+-10-dev:libstdc\\+\\+-10-dev:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libstdc++-10-dev@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libstdc++6@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=748369630632944", + "publisher": "Debian GCC Maintainers ", + "name": "libstdc++6", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libstdc++6@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsystemd0@247.3-7+deb11u1?arch=amd64&upstream=systemd&distro=debian-11&package-id=4c258dc3b086d634", + "publisher": "Debian systemd Maintainers ", + "name": "libsystemd0", + "version": "247.3-7+deb11u1", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsystemd0:libsystemd0:247.3-7\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsystemd0@247.3-7+deb11u1?arch=amd64&upstream=systemd&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtasn1-6@4.16.0-2?arch=amd64&distro=debian-11&package-id=8385ea5e56a5fca9", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libtasn1-6", + "version": "4.16.0-2", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtasn1-6:libtasn1-6:4.16.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtasn1-6@4.16.0-2?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libthai-data@0.1.28-3?arch=all&upstream=libthai&distro=debian-11&package-id=a45678a4f884dbc7", + "publisher": "Theppitak Karoonboonyanan ", + "name": "libthai-data", + "version": "0.1.28-3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libthai-data:libthai-data:0.1.28-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libthai-data@0.1.28-3?arch=all&upstream=libthai&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libthai0@0.1.28-3?arch=amd64&upstream=libthai&distro=debian-11&package-id=df056741aa45e5f9", + "publisher": "Theppitak Karoonboonyanan ", + "name": "libthai0", + "version": "0.1.28-3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libthai0:libthai0:0.1.28-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libthai0@0.1.28-3?arch=amd64&upstream=libthai&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u1?arch=amd64&upstream=tiff&distro=debian-11&package-id=38e84af4b5984ce3", + "publisher": "Laszlo Boszormenyi (GCS) ", + "name": "libtiff5", + "version": "4.2.0-1+deb11u1", + "licenses": [ + { + "license": { + "name": "Hylafax" + } + } + ], + "cpe": "cpe:2.3:a:libtiff5:libtiff5:4.2.0-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u1?arch=amd64&upstream=tiff&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtinfo6@6.2+20201114-2?arch=amd64&upstream=ncurses&distro=debian-11&package-id=9e96601b60336037", + "publisher": "Craig Small ", + "name": "libtinfo6", + "version": "6.2+20201114-2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "MIT/X11" + } + }, + { + "license": { + "id": "X11" + } + } + ], + "cpe": "cpe:2.3:a:libtinfo6:libtinfo6:6.2\\+20201114-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtinfo6@6.2+20201114-2?arch=amd64&upstream=ncurses&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtirpc-common@1.3.1-1+deb11u1?arch=all&upstream=libtirpc&distro=debian-11&package-id=3623a1ef0b5b63b9", + "publisher": "Josue Ortega ", + "name": "libtirpc-common", + "version": "1.3.1-1+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc-common:libtirpc-common:1.3.1-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtirpc-common@1.3.1-1+deb11u1?arch=all&upstream=libtirpc&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtirpc-dev@1.3.1-1+deb11u1?arch=amd64&upstream=libtirpc&distro=debian-11&package-id=7e633fe46be14994", + "publisher": "Josue Ortega ", + "name": "libtirpc-dev", + "version": "1.3.1-1+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc-dev:libtirpc-dev:1.3.1-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtirpc-dev@1.3.1-1+deb11u1?arch=amd64&upstream=libtirpc&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtirpc3@1.3.1-1+deb11u1?arch=amd64&upstream=libtirpc&distro=debian-11&package-id=c7b97f0b9d21e851", + "publisher": "Josue Ortega ", + "name": "libtirpc3", + "version": "1.3.1-1+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc3:libtirpc3:1.3.1-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtirpc3@1.3.1-1+deb11u1?arch=amd64&upstream=libtirpc&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtsan0@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=83a443dc658b63f", + "publisher": "Debian GCC Maintainers ", + "name": "libtsan0", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libtsan0:libtsan0:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtsan0@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libubsan1@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=8aaa96ac167225f2", + "publisher": "Debian GCC Maintainers ", + "name": "libubsan1", + "version": "10.2.1-6", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libubsan1:libubsan1:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libubsan1@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libudev1@247.3-7+deb11u1?arch=amd64&upstream=systemd&distro=debian-11&package-id=79c718cff72e218e", + "publisher": "Debian systemd Maintainers ", + "name": "libudev1", + "version": "247.3-7+deb11u1", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libudev1:libudev1:247.3-7\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libudev1@247.3-7+deb11u1?arch=amd64&upstream=systemd&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libunistring2@0.9.10-4?arch=amd64&upstream=libunistring&distro=debian-11&package-id=dc7fcfc9dde2b703", + "publisher": "Jörg Frings-Fürst ", + "name": "libunistring2", + "version": "0.9.10-4", + "licenses": [ + { + "license": { + "name": "FreeSoftware" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GFDL-1.2+" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libunistring2:libunistring2:0.9.10-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libunistring2@0.9.10-4?arch=amd64&upstream=libunistring&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libunwind8@1.3.2-2?arch=amd64&upstream=libunwind&distro=debian-11&package-id=a6684a06050b7d94", + "publisher": "Adrian Bunk ", + "name": "libunwind8", + "version": "1.3.2-2", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libunwind8:libunwind8:1.3.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libunwind8@1.3.2-2?arch=amd64&upstream=libunwind&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libutempter0@1.2.1-2?arch=amd64&upstream=libutempter&distro=debian-11&package-id=35c6b4894b99c171", + "publisher": "Christian Göttsche ", + "name": "libutempter0", + "version": "1.2.1-2", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libutempter0:libutempter0:1.2.1-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libutempter0@1.2.1-2?arch=amd64&upstream=libutempter&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libuuid1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11&package-id=e87310d3e1426d6c", + "publisher": "util-linux packagers ", + "name": "libuuid1", + "version": "2.36.1-8+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libuuid1:libuuid1:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libuuid1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libuv1@1.40.0-2?arch=amd64&distro=debian-11&package-id=c148a0e42edb5812", + "publisher": "Dominique Dumont ", + "name": "libuv1", + "version": "1.40.0-2", + "licenses": [ + { + "license": { + "id": "BSD-1-Clause" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC-BY-4.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libuv1:libuv1:1.40.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libuv1@1.40.0-2?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libwebp6@0.6.1-2.1?arch=amd64&upstream=libwebp&distro=debian-11&package-id=88ca886298d7e0b", + "publisher": "Jeff Breidenbach ", + "name": "libwebp6", + "version": "0.6.1-2.1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libwebp6:libwebp6:0.6.1-2.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libwebp6@0.6.1-2.1?arch=amd64&upstream=libwebp&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libx11-6@2:1.7.2-1?arch=amd64&upstream=libx11&distro=debian-11&package-id=ce4e2010925a4939", + "publisher": "Debian X Strike Force ", + "name": "libx11-6", + "version": "2:1.7.2-1", + "cpe": "cpe:2.3:a:libx11-6:libx11-6:2\\:1.7.2-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libx11-6@2:1.7.2-1?arch=amd64&upstream=libx11&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libx11-data@2:1.7.2-1?arch=all&upstream=libx11&distro=debian-11&package-id=8defa9b2d11078dc", + "publisher": "Debian X Strike Force ", + "name": "libx11-data", + "version": "2:1.7.2-1", + "cpe": "cpe:2.3:a:libx11-data:libx11-data:2\\:1.7.2-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libx11-data@2:1.7.2-1?arch=all&upstream=libx11&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxau6@1:1.0.9-1?arch=amd64&upstream=libxau&distro=debian-11&package-id=e6c254c1e56081d8", + "publisher": "Debian X Strike Force ", + "name": "libxau6", + "version": "1:1.0.9-1", + "cpe": "cpe:2.3:a:libxau6:libxau6:1\\:1.0.9-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxau6@1:1.0.9-1?arch=amd64&upstream=libxau&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxcb-render0@1.14-3?arch=amd64&upstream=libxcb&distro=debian-11&package-id=3155b288526dcd63", + "publisher": "Debian X Strike Force ", + "name": "libxcb-render0", + "version": "1.14-3", + "cpe": "cpe:2.3:a:libxcb-render0:libxcb-render0:1.14-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxcb-render0@1.14-3?arch=amd64&upstream=libxcb&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxcb-shm0@1.14-3?arch=amd64&upstream=libxcb&distro=debian-11&package-id=3a21b443c8a292e1", + "publisher": "Debian X Strike Force ", + "name": "libxcb-shm0", + "version": "1.14-3", + "cpe": "cpe:2.3:a:libxcb-shm0:libxcb-shm0:1.14-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxcb-shm0@1.14-3?arch=amd64&upstream=libxcb&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxcb1@1.14-3?arch=amd64&upstream=libxcb&distro=debian-11&package-id=9281d5ec3fb0ebd8", + "publisher": "Debian X Strike Force ", + "name": "libxcb1", + "version": "1.14-3", + "cpe": "cpe:2.3:a:libxcb1:libxcb1:1.14-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxcb1@1.14-3?arch=amd64&upstream=libxcb&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxcomposite1@1:0.4.5-1?arch=amd64&upstream=libxcomposite&distro=debian-11&package-id=213069b92189166", + "publisher": "Debian X Strike Force ", + "name": "libxcomposite1", + "version": "1:0.4.5-1", + "cpe": "cpe:2.3:a:libxcomposite1:libxcomposite1:1\\:0.4.5-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxcomposite1@1:0.4.5-1?arch=amd64&upstream=libxcomposite&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxcursor1@1:1.2.0-2?arch=amd64&upstream=libxcursor&distro=debian-11&package-id=b76001f5b07d32c7", + "publisher": "Debian X Strike Force ", + "name": "libxcursor1", + "version": "1:1.2.0-2", + "cpe": "cpe:2.3:a:libxcursor1:libxcursor1:1\\:1.2.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxcursor1@1:1.2.0-2?arch=amd64&upstream=libxcursor&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxdamage1@1:1.1.5-2?arch=amd64&upstream=libxdamage&distro=debian-11&package-id=4c83a910129b29fb", + "publisher": "Debian X Strike Force ", + "name": "libxdamage1", + "version": "1:1.1.5-2", + "cpe": "cpe:2.3:a:libxdamage1:libxdamage1:1\\:1.1.5-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxdamage1@1:1.1.5-2?arch=amd64&upstream=libxdamage&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxdmcp6@1:1.1.2-3?arch=amd64&upstream=libxdmcp&distro=debian-11&package-id=4005b45e460ecaca", + "publisher": "Debian X Strike Force ", + "name": "libxdmcp6", + "version": "1:1.1.2-3", + "cpe": "cpe:2.3:a:libxdmcp6:libxdmcp6:1\\:1.1.2-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxdmcp6@1:1.1.2-3?arch=amd64&upstream=libxdmcp&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxext6@2:1.3.3-1.1?arch=amd64&upstream=libxext&distro=debian-11&package-id=5b7fd9c7f30d7df8", + "publisher": "Debian X Strike Force ", + "name": "libxext6", + "version": "2:1.3.3-1.1", + "cpe": "cpe:2.3:a:libxext6:libxext6:2\\:1.3.3-1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxext6@2:1.3.3-1.1?arch=amd64&upstream=libxext&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxfixes3@1:5.0.3-2?arch=amd64&upstream=libxfixes&distro=debian-11&package-id=e3618c5fcc11ca54", + "publisher": "Debian X Strike Force ", + "name": "libxfixes3", + "version": "1:5.0.3-2", + "cpe": "cpe:2.3:a:libxfixes3:libxfixes3:1\\:5.0.3-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxfixes3@1:5.0.3-2?arch=amd64&upstream=libxfixes&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxi6@2:1.7.10-1?arch=amd64&upstream=libxi&distro=debian-11&package-id=7f9e16f9019fd76a", + "publisher": "Debian X Strike Force ", + "name": "libxi6", + "version": "2:1.7.10-1", + "cpe": "cpe:2.3:a:libxi6:libxi6:2\\:1.7.10-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxi6@2:1.7.10-1?arch=amd64&upstream=libxi&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxinerama1@2:1.1.4-2?arch=amd64&upstream=libxinerama&distro=debian-11&package-id=d95c5d714ff087f2", + "publisher": "Debian X Strike Force ", + "name": "libxinerama1", + "version": "2:1.1.4-2", + "cpe": "cpe:2.3:a:libxinerama1:libxinerama1:2\\:1.1.4-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxinerama1@2:1.1.4-2?arch=amd64&upstream=libxinerama&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxml2@2.9.10+dfsg-6.7+deb11u3?arch=amd64&distro=debian-11&package-id=17dda21225ad6175", + "publisher": "Debian XML/SGML Group ", + "name": "libxml2", + "version": "2.9.10+dfsg-6.7+deb11u3", + "licenses": [ + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "MIT-1" + } + } + ], + "cpe": "cpe:2.3:a:libxml2:libxml2:2.9.10\\+dfsg-6.7\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxml2@2.9.10+dfsg-6.7+deb11u3?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxrandr2@2:1.5.1-1?arch=amd64&upstream=libxrandr&distro=debian-11&package-id=453a5e24b42f10c1", + "publisher": "Debian X Strike Force ", + "name": "libxrandr2", + "version": "2:1.5.1-1", + "cpe": "cpe:2.3:a:libxrandr2:libxrandr2:2\\:1.5.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxrandr2@2:1.5.1-1?arch=amd64&upstream=libxrandr&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxrender1@1:0.9.10-1?arch=amd64&upstream=libxrender&distro=debian-11&package-id=c0f2f2de266b969a", + "publisher": "Debian X Strike Force ", + "name": "libxrender1", + "version": "1:0.9.10-1", + "cpe": "cpe:2.3:a:libxrender1:libxrender1:1\\:0.9.10-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxrender1@1:0.9.10-1?arch=amd64&upstream=libxrender&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libxxhash0@0.8.0-2?arch=amd64&upstream=xxhash&distro=debian-11&package-id=edc71d7591d40133", + "publisher": "Norbert Preining ", + "name": "libxxhash0", + "version": "0.8.0-2", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libxxhash0:libxxhash0:0.8.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libxxhash0@0.8.0-2?arch=amd64&upstream=xxhash&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libyaml-0-2@0.2.2-1?arch=amd64&upstream=libyaml&distro=debian-11&package-id=6a475ea76d7af8e2", + "publisher": "Anders Kaseorg ", + "name": "libyaml-0-2", + "version": "0.2.2-1", + "licenses": [ + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:libyaml-0-2:libyaml-0-2:0.2.2-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libyaml-0-2@0.2.2-1?arch=amd64&upstream=libyaml&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libzstd1@1.4.8+dfsg-2.1?arch=amd64&upstream=libzstd&distro=debian-11&package-id=90e1680def07a674", + "publisher": "Debian Med Packaging Team ", + "name": "libzstd1", + "version": "1.4.8+dfsg-2.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libzstd1:libzstd1:1.4.8\\+dfsg-2.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libzstd1@1.4.8+dfsg-2.1?arch=amd64&upstream=libzstd&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/linux-libc-dev@5.10.149-2?arch=amd64&upstream=linux&distro=debian-11&package-id=369b8494e28fd277", + "publisher": "Debian Kernel Team ", + "name": "linux-libc-dev", + "version": "5.10.149-2", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "CRYPTOGAMS" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "Unicode-data" + } + }, + { + "license": { + "name": "Xen-interface" + } + } + ], + "cpe": "cpe:2.3:a:linux-libc-dev:linux-libc-dev:5.10.149-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/linux-libc-dev@5.10.149-2?arch=amd64&upstream=linux&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/login@1:4.8.1-1?arch=amd64&upstream=shadow&distro=debian-11&package-id=9cdbb92ea69c08a1", + "publisher": "Shadow package maintainers ", + "name": "login", + "version": "1:4.8.1-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:login:login:1\\:4.8.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/login@1:4.8.1-1?arch=amd64&upstream=shadow&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/logrotate@3.18.0-2+deb11u1?arch=amd64&distro=debian-11&package-id=660e7d1ac851e6d9", + "publisher": "Christian Göttsche ", + "name": "logrotate", + "version": "3.18.0-2+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:logrotate:logrotate:3.18.0-2\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/logrotate@3.18.0-2+deb11u1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/logsave@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11&package-id=77e8cce6db62952b", + "publisher": "Theodore Y. Ts'o ", + "name": "logsave", + "version": "1.46.2-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:logsave:logsave:1.46.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/logsave@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/lsb-base@11.1.0?arch=all&upstream=lsb&distro=debian-11&package-id=67f43d818d5952cf", + "publisher": "Debian sysvinit maintainers ", + "name": "lsb-base", + "version": "11.1.0", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:lsb-base:lsb-base:11.1.0:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/lsb-base@11.1.0?arch=all&upstream=lsb&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/lua-lpeg@1.0.2-1?arch=amd64&distro=debian-11&package-id=5b88e65f195b13f5", + "publisher": "Enrico Tassi ", + "name": "lua-lpeg", + "version": "1.0.2-1", + "licenses": [ + { + "license": { + "name": "MIT/X" + } + } + ], + "cpe": "cpe:2.3:a:lua-lpeg:lua-lpeg:1.0.2-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/lua-lpeg@1.0.2-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/make@4.3-4.1?arch=amd64&upstream=make-dfsg&distro=debian-11&package-id=54606893b2e0c6b3", + "publisher": "Manoj Srivastava ", + "name": "make", + "version": "4.3-4.1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:make:make:4.3-4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/make@4.3-4.1?arch=amd64&upstream=make-dfsg&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/mawk@1.3.4.20200120-2?arch=amd64&distro=debian-11&package-id=b91e181aea759ff5", + "publisher": "Boyuan Yang ", + "name": "mawk", + "version": "1.3.4.20200120-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:mawk:mawk:1.3.4.20200120-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/mawk@1.3.4.20200120-2?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/media-types@4.0.0?arch=all&distro=debian-11&package-id=8ad043b7c85813ad", + "publisher": "Mime-Support Packagers ", + "name": "media-types", + "version": "4.0.0", + "licenses": [ + { + "license": { + "name": "ad-hoc" + } + } + ], + "cpe": "cpe:2.3:a:media-types:media-types:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/media-types@4.0.0?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/mount@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11&package-id=c7ff86ae9a8937ca", + "publisher": "util-linux packagers ", + "name": "mount", + "version": "2.36.1-8+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:mount:mount:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/mount@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/mtr@0.94-1+deb11u1?arch=amd64&distro=debian-11&package-id=89b7573a9b715efa", + "publisher": "Robert Woodcock ", + "name": "mtr", + "version": "0.94-1+deb11u1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:mtr:mtr:0.94-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/mtr@0.94-1+deb11u1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ncdu@1.15.1-1?arch=amd64&distro=debian-11&package-id=226ba65f099181fa", + "publisher": "Eugene V. Lyubimkin ", + "name": "ncdu", + "version": "1.15.1-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ncdu:ncdu:1.15.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ncdu@1.15.1-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ncurses-base@6.2+20201114-2?arch=all&upstream=ncurses&distro=debian-11&package-id=9c2239a948284096", + "publisher": "Craig Small ", + "name": "ncurses-base", + "version": "6.2+20201114-2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "MIT/X11" + } + }, + { + "license": { + "id": "X11" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-base:ncurses-base:6.2\\+20201114-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ncurses-base@6.2+20201114-2?arch=all&upstream=ncurses&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ncurses-bin@6.2+20201114-2?arch=amd64&upstream=ncurses&distro=debian-11&package-id=d98c3c34aac1c97c", + "publisher": "Craig Small ", + "name": "ncurses-bin", + "version": "6.2+20201114-2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "MIT/X11" + } + }, + { + "license": { + "id": "X11" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-bin:ncurses-bin:6.2\\+20201114-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ncurses-bin@6.2+20201114-2?arch=amd64&upstream=ncurses&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/net-tools@1.60+git20181103.0eebece-1?arch=amd64&distro=debian-11&package-id=81c1633d72b6611d", + "publisher": "net-tools Team ", + "name": "net-tools", + "version": "1.60+git20181103.0eebece-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:net-tools:net-tools:1.60\\+git20181103.0eebece-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/net-tools@1.60+git20181103.0eebece-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/netcat-openbsd@1.217-3?arch=amd64&distro=debian-11&package-id=9432e634f83ba46", + "publisher": "Aron Xu ", + "name": "netcat-openbsd", + "version": "1.217-3", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:netcat-openbsd:netcat-openbsd:1.217-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/netcat-openbsd@1.217-3?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ngrep@1.47+ds1-2?arch=amd64&distro=debian-11&package-id=8961eb2703fc2bbc", + "publisher": "Romain Francoise ", + "name": "ngrep", + "version": "1.47+ds1-2", + "cpe": "cpe:2.3:a:ngrep:ngrep:1.47\\+ds1-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ngrep@1.47+ds1-2?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/nmap@7.91+dfsg1+really7.80+dfsg1-2?arch=amd64&distro=debian-11&package-id=344051c446c019fc", + "publisher": "Debian Security Tools ", + "name": "nmap", + "version": "7.91+dfsg1+really7.80+dfsg1-2", + "licenses": [ + { + "license": { + "name": "BSD-3-clause-author1" + } + }, + { + "license": { + "name": "BSD-3-clause-author2" + } + }, + { + "license": { + "name": "BSD-3-clause-authors-copyright-holders" + } + }, + { + "license": { + "name": "BSD-3-clause-copyright-holders-contributors" + } + }, + { + "license": { + "name": "BSD-3-clause-institute" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "name": "BSD-like-SVN" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "nmap-GPL-2" + } + }, + { + "license": { + "name": "preserve-copyright" + } + }, + { + "license": { + "name": "retain-copyright-cisco" + } + }, + { + "license": { + "name": "unlimited-retain-copyright" + } + } + ], + "cpe": "cpe:2.3:a:nmap:nmap:7.91\\+dfsg1\\+really7.80\\+dfsg1-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/nmap@7.91+dfsg1+really7.80+dfsg1-2?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/nmap-common@7.91+dfsg1+really7.80+dfsg1-2?arch=all&upstream=nmap&distro=debian-11&package-id=5802d12ee3c0ba5e", + "publisher": "Debian Security Tools ", + "name": "nmap-common", + "version": "7.91+dfsg1+really7.80+dfsg1-2", + "licenses": [ + { + "license": { + "name": "BSD-3-clause-author1" + } + }, + { + "license": { + "name": "BSD-3-clause-author2" + } + }, + { + "license": { + "name": "BSD-3-clause-authors-copyright-holders" + } + }, + { + "license": { + "name": "BSD-3-clause-copyright-holders-contributors" + } + }, + { + "license": { + "name": "BSD-3-clause-institute" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "name": "BSD-like-SVN" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "nmap-GPL-2" + } + }, + { + "license": { + "name": "preserve-copyright" + } + }, + { + "license": { + "name": "retain-copyright-cisco" + } + }, + { + "license": { + "name": "unlimited-retain-copyright" + } + } + ], + "cpe": "cpe:2.3:a:nmap-common:nmap-common:7.91\\+dfsg1\\+really7.80\\+dfsg1-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/nmap-common@7.91+dfsg1+really7.80+dfsg1-2?arch=all&upstream=nmap&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/openssl@1.1.1n-0+deb11u3?arch=amd64&distro=debian-11&package-id=265e51164bd97a68", + "publisher": "Debian OpenSSL Team ", + "name": "openssl", + "version": "1.1.1n-0+deb11u3", + "cpe": "cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/openssl@1.1.1n-0+deb11u3?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/passwd@1:4.8.1-1?arch=amd64&upstream=shadow&distro=debian-11&package-id=fdca5992b8d73b50", + "publisher": "Shadow package maintainers ", + "name": "passwd", + "version": "1:4.8.1-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:passwd:passwd:1\\:4.8.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/passwd@1:4.8.1-1?arch=amd64&upstream=shadow&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/patch@2.7.6-7?arch=amd64&distro=debian-11&package-id=d244a2dc66a77548", + "publisher": "Laszlo Boszormenyi (GCS) ", + "name": "patch", + "version": "2.7.6-7", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:patch:patch:2.7.6-7:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/patch@2.7.6-7?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/pci.ids@0.0~2021.02.08-1?arch=all&distro=debian-11&package-id=ffd90b5684d6b1f", + "publisher": "Guillem Jover ", + "name": "pci.ids", + "version": "0.0~2021.02.08-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:pci.ids:pci.ids:0.0\\~2021.02.08-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/pci.ids@0.0~2021.02.08-1?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/pciutils@1:3.7.0-5?arch=amd64&distro=debian-11&package-id=7f10ca5515fc096a", + "publisher": "Guillem Jover ", + "name": "pciutils", + "version": "1:3.7.0-5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:pciutils:pciutils:1\\:3.7.0-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/pciutils@1:3.7.0-5?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/perl@5.32.1-4+deb11u2?arch=amd64&distro=debian-11&package-id=4e5da8d7b4296672", + "publisher": "Niko Tyni ", + "name": "perl", + "version": "5.32.1-4+deb11u2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl:perl:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/perl@5.32.1-4+deb11u2?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/perl-base@5.32.1-4+deb11u2?arch=amd64&upstream=perl&distro=debian-11&package-id=96ea9246284c94e6", + "publisher": "Niko Tyni ", + "name": "perl-base", + "version": "5.32.1-4+deb11u2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl-base:perl-base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/perl-base@5.32.1-4+deb11u2?arch=amd64&upstream=perl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/perl-modules-5.32@5.32.1-4+deb11u2?arch=all&upstream=perl&distro=debian-11&package-id=e2a13f824792ebe3", + "publisher": "Niko Tyni ", + "name": "perl-modules-5.32", + "version": "5.32.1-4+deb11u2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl-modules-5.32:perl-modules-5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/perl-modules-5.32@5.32.1-4+deb11u2?arch=all&upstream=perl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/pkg-config@0.29.2-1?arch=amd64&distro=debian-11&package-id=1bfe7c497852bb22", + "publisher": "Tollef Fog Heen ", + "name": "pkg-config", + "version": "0.29.2-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:pkg-config:pkg-config:0.29.2-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/pkg-config@0.29.2-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/psmisc@23.4-2?arch=amd64&distro=debian-11&package-id=e6500613920b6f91", + "publisher": "Craig Small ", + "name": "psmisc", + "version": "23.4-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:psmisc:psmisc:23.4-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/psmisc@23.4-2?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/pv@1.6.6-1+b1?arch=amd64&upstream=pv%401.6.6-1&distro=debian-11&package-id=52298b1053c4f509", + "publisher": "Antoine Beaupré ", + "name": "pv", + "version": "1.6.6-1+b1", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:pv:pv:1.6.6-1\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/pv@1.6.6-1+b1?arch=amd64&upstream=pv%401.6.6-1&distro=debian-11" + }, + { + "type": "application", + "bom-ref": "pkg:generic/python@3.9.2?package-id=25c86cd31edb4ea2", + "name": "python", + "version": "3.9.2", + "cpe": "cpe:2.3:a:python_software_foundation:python:3.9.2:*:*:*:*:*:*:*", + "purl": "pkg:generic/python@3.9.2" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/python3@3.9.2-3?arch=amd64&upstream=python3-defaults&distro=debian-11&package-id=bcf7a2732ad48999", + "publisher": "Matthias Klose ", + "name": "python3", + "version": "3.9.2-3", + "cpe": "cpe:2.3:a:python3:python3:3.9.2-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/python3@3.9.2-3?arch=amd64&upstream=python3-defaults&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/python3-minimal@3.9.2-3?arch=amd64&upstream=python3-defaults&distro=debian-11&package-id=68272ff45d5cac4b", + "publisher": "Matthias Klose ", + "name": "python3-minimal", + "version": "3.9.2-3", + "cpe": "cpe:2.3:a:python3-minimal:python3-minimal:3.9.2-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/python3-minimal@3.9.2-3?arch=amd64&upstream=python3-defaults&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/python3.9@3.9.2-1?arch=amd64&distro=debian-11&package-id=2d05b0fb271e9f7f", + "publisher": "Matthias Klose ", + "name": "python3.9", + "version": "3.9.2-1", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:python3.9:python3.9:3.9.2-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/python3.9@3.9.2-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/python3.9-minimal@3.9.2-1?arch=amd64&upstream=python3.9&distro=debian-11&package-id=6068520cd08c8f05", + "publisher": "Matthias Klose ", + "name": "python3.9-minimal", + "version": "3.9.2-1", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:python3.9-minimal:python3.9-minimal:3.9.2-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/python3.9-minimal@3.9.2-1?arch=amd64&upstream=python3.9&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/readline-common@8.1-1?arch=all&upstream=readline&distro=debian-11&package-id=1db616197859926a", + "publisher": "Matthias Klose ", + "name": "readline-common", + "version": "8.1-1", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:readline-common:readline-common:8.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/readline-common@8.1-1?arch=all&upstream=readline&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/sed@4.7-1?arch=amd64&distro=debian-11&package-id=cd24b1a69c7b788a", + "publisher": "Clint Adams ", + "name": "sed", + "version": "4.7-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:sed:sed:4.7-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/sed@4.7-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/sensible-utils@0.0.14?arch=all&distro=debian-11&package-id=56274a0c1bc0afa2", + "publisher": "Anibal Monsalve Salazar ", + "name": "sensible-utils", + "version": "0.0.14", + "licenses": [ + { + "license": { + "name": "All-permissive" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "configure" + } + }, + { + "license": { + "name": "installsh" + } + } + ], + "cpe": "cpe:2.3:a:sensible-utils:sensible-utils:0.0.14:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/sensible-utils@0.0.14?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/shared-mime-info@2.0-1?arch=amd64&distro=debian-11&package-id=4d8d941a94c5ae02", + "publisher": "Debian freedesktop.org maintainers ", + "name": "shared-mime-info", + "version": "2.0-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:shared-mime-info:shared-mime-info:2.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/shared-mime-info@2.0-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/strace@5.10-1?arch=amd64&distro=debian-11&package-id=90641fcb37751807", + "publisher": "Steve McIntyre <93sam@debian.org>", + "name": "strace", + "version": "5.10-1", + "cpe": "cpe:2.3:a:strace:strace:5.10-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/strace@5.10-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/sysstat@12.5.2-2?arch=amd64&distro=debian-11&package-id=1a0e9434e2978afd", + "publisher": "Robert Luberda ", + "name": "sysstat", + "version": "12.5.2-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:sysstat:sysstat:12.5.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/sysstat@12.5.2-2?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/sysvinit-utils@2.96-7+deb11u1?arch=amd64&upstream=sysvinit&distro=debian-11&package-id=e0e95f2e10cb825e", + "publisher": "Debian sysvinit maintainers ", + "name": "sysvinit-utils", + "version": "2.96-7+deb11u1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:sysvinit-utils:sysvinit-utils:2.96-7\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/sysvinit-utils@2.96-7+deb11u1?arch=amd64&upstream=sysvinit&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tar@1.34+dfsg-1?arch=amd64&distro=debian-11&package-id=9511efaff0991270", + "publisher": "Janos Lenart ", + "name": "tar", + "version": "1.34+dfsg-1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:tar:tar:1.34\\+dfsg-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tar@1.34+dfsg-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tcpdump@4.99.0-2+deb11u1?arch=amd64&distro=debian-11&package-id=1f6f78dd6ed77517", + "publisher": "Romain Francoise ", + "name": "tcpdump", + "version": "4.99.0-2+deb11u1", + "cpe": "cpe:2.3:a:tcpdump:tcpdump:4.99.0-2\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tcpdump@4.99.0-2+deb11u1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tcpflow@1.5.2+repack1-1+b1?arch=amd64&upstream=tcpflow%401.5.2+repack1-1&distro=debian-11&package-id=4da2fbdbb9da176e", + "publisher": "Dima Kogan ", + "name": "tcpflow", + "version": "1.5.2+repack1-1+b1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2clause-MadoryPang" + } + }, + { + "license": { + "name": "BSD-3clause-Young" + } + }, + { + "license": { + "name": "BSD-3clause-uni" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "name": "Expat-Trifunovic" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:tcpflow:tcpflow:1.5.2\\+repack1-1\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tcpflow@1.5.2+repack1-1+b1?arch=amd64&upstream=tcpflow%401.5.2+repack1-1&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tmux@3.1c-1+deb11u1?arch=amd64&distro=debian-11&package-id=6992e6b0a0b2a36", + "publisher": "Romain Francoise ", + "name": "tmux", + "version": "3.1c-1+deb11u1", + "licenses": [ + { + "license": { + "name": "BSD-2" + } + }, + { + "license": { + "name": "BSD-3" + } + } + ], + "cpe": "cpe:2.3:a:tmux:tmux:3.1c-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tmux@3.1c-1+deb11u1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tree@1.8.0-1+b1?arch=amd64&upstream=tree%401.8.0-1&distro=debian-11&package-id=f01533e2596b8293", + "publisher": "Florian Ernst ", + "name": "tree", + "version": "1.8.0-1+b1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:tree:tree:1.8.0-1\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tree@1.8.0-1+b1?arch=amd64&upstream=tree%401.8.0-1&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tzdata@2021a-1+deb11u8?arch=all&distro=debian-11&package-id=116b456bca0486d4", + "publisher": "GNU Libc Maintainers ", + "name": "tzdata", + "version": "2021a-1+deb11u8", + "cpe": "cpe:2.3:a:tzdata:tzdata:2021a-1\\+deb11u8:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tzdata@2021a-1+deb11u8?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ucf@3.0043?arch=all&distro=debian-11&package-id=dfbd4fe9d1f6c201", + "publisher": "Manoj Srivastava ", + "name": "ucf", + "version": "3.0043", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ucf:ucf:3.0043:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ucf@3.0043?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/util-linux@2.36.1-8+deb11u1?arch=amd64&distro=debian-11&package-id=b8c872368f65d4a3", + "publisher": "util-linux packagers ", + "name": "util-linux", + "version": "2.36.1-8+deb11u1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:util-linux:util-linux:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/util-linux@2.36.1-8+deb11u1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/valgrind@1:3.16.1-1?arch=amd64&distro=debian-11&package-id=4463102b9d928a92", + "publisher": "Alessandro Ghedini ", + "name": "valgrind", + "version": "1:3.16.1-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "other" + } + } + ], + "cpe": "cpe:2.3:a:valgrind:valgrind:1\\:3.16.1-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/valgrind@1:3.16.1-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/vim@2:8.2.2434-3+deb11u1?arch=amd64&distro=debian-11&package-id=80d543c9baabc796", + "publisher": "Debian Vim Maintainers ", + "name": "vim", + "version": "2:8.2.2434-3+deb11u1", + "licenses": [ + { + "license": { + "name": "Apache" + } + }, + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-1.0" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Compaq" + } + }, + { + "license": { + "name": "EDL-1" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "OPL-1+" + } + }, + { + "license": { + "name": "SRA" + } + }, + { + "license": { + "name": "UC" + } + }, + { + "license": { + "id": "Vim" + } + }, + { + "license": { + "name": "Vim-Regexp" + } + }, + { + "license": { + "id": "X11" + } + }, + { + "license": { + "name": "XPM" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:vim:vim:2\\:8.2.2434-3\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/vim@2:8.2.2434-3+deb11u1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/vim-common@2:8.2.2434-3+deb11u1?arch=all&upstream=vim&distro=debian-11&package-id=ae1df820fcbdf74c", + "publisher": "Debian Vim Maintainers ", + "name": "vim-common", + "version": "2:8.2.2434-3+deb11u1", + "licenses": [ + { + "license": { + "name": "Apache" + } + }, + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-1.0" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Compaq" + } + }, + { + "license": { + "name": "EDL-1" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "OPL-1+" + } + }, + { + "license": { + "name": "SRA" + } + }, + { + "license": { + "name": "UC" + } + }, + { + "license": { + "id": "Vim" + } + }, + { + "license": { + "name": "Vim-Regexp" + } + }, + { + "license": { + "id": "X11" + } + }, + { + "license": { + "name": "XPM" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:vim-common:vim-common:2\\:8.2.2434-3\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/vim-common@2:8.2.2434-3+deb11u1?arch=all&upstream=vim&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/vim-runtime@2:8.2.2434-3+deb11u1?arch=all&upstream=vim&distro=debian-11&package-id=6254b405280fe12b", + "publisher": "Debian Vim Maintainers ", + "name": "vim-runtime", + "version": "2:8.2.2434-3+deb11u1", + "licenses": [ + { + "license": { + "name": "Apache" + } + }, + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-1.0" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Compaq" + } + }, + { + "license": { + "name": "EDL-1" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "OPL-1+" + } + }, + { + "license": { + "name": "SRA" + } + }, + { + "license": { + "name": "UC" + } + }, + { + "license": { + "id": "Vim" + } + }, + { + "license": { + "name": "Vim-Regexp" + } + }, + { + "license": { + "id": "X11" + } + }, + { + "license": { + "name": "XPM" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:vim-runtime:vim-runtime:2\\:8.2.2434-3\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/vim-runtime@2:8.2.2434-3+deb11u1?arch=all&upstream=vim&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/xxd@2:8.2.2434-3+deb11u1?arch=amd64&upstream=vim&distro=debian-11&package-id=2bc0641b2bda5a70", + "publisher": "Debian Vim Maintainers ", + "name": "xxd", + "version": "2:8.2.2434-3+deb11u1", + "licenses": [ + { + "license": { + "name": "Apache" + } + }, + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-1.0" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Compaq" + } + }, + { + "license": { + "name": "EDL-1" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "OPL-1+" + } + }, + { + "license": { + "name": "SRA" + } + }, + { + "license": { + "name": "UC" + } + }, + { + "license": { + "id": "Vim" + } + }, + { + "license": { + "name": "Vim-Regexp" + } + }, + { + "license": { + "id": "X11" + } + }, + { + "license": { + "name": "XPM" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:xxd:xxd:2\\:8.2.2434-3\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/xxd@2:8.2.2434-3+deb11u1?arch=amd64&upstream=vim&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/xz-utils@5.2.5-2.1~deb11u1?arch=amd64&distro=debian-11&package-id=2dc48701dfba1308", + "publisher": "Jonathan Nieder ", + "name": "xz-utils", + "version": "5.2.5-2.1~deb11u1", + "licenses": [ + { + "license": { + "name": "Autoconf" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "PD" + } + }, + { + "license": { + "name": "PD-debian" + } + }, + { + "license": { + "name": "config-h" + } + }, + { + "license": { + "name": "noderivs" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-nowarranty" + } + }, + { + "license": { + "name": "probably-PD" + } + } + ], + "cpe": "cpe:2.3:a:xz-utils:xz-utils:5.2.5-2.1\\~deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/xz-utils@5.2.5-2.1~deb11u1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/zlib1g@1:1.2.11.dfsg-2+deb11u2?arch=amd64&upstream=zlib&distro=debian-11&package-id=369e996115240b62", + "publisher": "Mark Brown ", + "name": "zlib1g", + "version": "1:1.2.11.dfsg-2+deb11u2", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib1g:zlib1g:1\\:1.2.11.dfsg-2\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/zlib1g@1:1.2.11.dfsg-2+deb11u2?arch=amd64&upstream=zlib&distro=debian-11" + }, + { + "type": "operating-system", + "name": "debian", + "version": "11", + "description": "Debian GNU/Linux 11 (bullseye)", + "swid": { + "tagId": "debian", + "name": "debian", + "version": "11" + }, + "externalReferences": [ + { + "url": "https://bugs.debian.org/", + "type": "issue-tracker" + }, + { + "url": "https://www.debian.org/", + "type": "website" + }, + { + "url": "https://www.debian.org/support", + "comment": "support", + "type": "other" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/base-files@11.1+deb11u5?arch=amd64&distro=debian-11&package-id=f3f2a2ef549813e7", + "publisher": "Santiago Vila ", + "name": "base-files", + "version": "11.1+deb11u5", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:11.1\\+deb11u5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/base-files@11.1+deb11u5?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/ca-certificates@20210119?arch=all&distro=debian-11&package-id=21646239c6ab680a", + "publisher": "Julien Cristau ", + "name": "ca-certificates", + "version": "20210119", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20210119:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/ca-certificates@20210119?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libatomic1@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=66ead67846bafb00", + "publisher": "Debian GCC Maintainers ", + "name": "libatomic1", + "version": "10.2.1-6", + "cpe": "cpe:2.3:a:libatomic1:libatomic1:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libatomic1@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libc6@2.31-13+deb11u5?arch=amd64&upstream=glibc&distro=debian-11&package-id=9d4972f76613a7a8", + "publisher": "GNU Libc Maintainers ", + "name": "libc6", + "version": "2.31-13+deb11u5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc6:libc6:2.31-13\\+deb11u5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libc6@2.31-13+deb11u5?arch=amd64&upstream=glibc&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libcom-err2@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11&package-id=39da134bbf8f09e3", + "publisher": "Theodore Y. Ts'o ", + "name": "libcom-err2", + "version": "1.46.2-2", + "cpe": "cpe:2.3:a:libcom-err2:libcom-err2:1.46.2-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libcom-err2@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libffi7@3.3-6?arch=amd64&upstream=libffi&distro=debian-11&package-id=c9a6310f4b1e892a", + "publisher": "Debian GCC Maintainers ", + "name": "libffi7", + "version": "3.3-6", + "cpe": "cpe:2.3:a:libffi7:libffi7:3.3-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libffi7@3.3-6?arch=amd64&upstream=libffi&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgcc-s1@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=a34cfbb99331195b", + "publisher": "Debian GCC Maintainers ", + "name": "libgcc-s1", + "version": "10.2.1-6", + "cpe": "cpe:2.3:a:libgcc-s1:libgcc-s1:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgcc-s1@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgcrypt20@1.8.7-6?arch=amd64&distro=debian-11&package-id=e4322ae6de6194e3", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libgcrypt20", + "version": "1.8.7-6", + "cpe": "cpe:2.3:a:libgcrypt20:libgcrypt20:1.8.7-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgcrypt20@1.8.7-6?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgmp10@2:6.2.1+dfsg-1+deb11u1?arch=amd64&upstream=gmp&distro=debian-11&package-id=fd50a8afffdb05ea", + "publisher": "Debian Science Team ", + "name": "libgmp10", + "version": "2:6.2.1+dfsg-1+deb11u1", + "cpe": "cpe:2.3:a:libgmp10:libgmp10:2\\:6.2.1\\+dfsg-1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgmp10@2:6.2.1+dfsg-1+deb11u1?arch=amd64&upstream=gmp&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgnutls30@3.7.1-5+deb11u2?arch=amd64&upstream=gnutls28&distro=debian-11&package-id=a7fb37e64b53a117", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libgnutls30", + "version": "3.7.1-5+deb11u2", + "cpe": "cpe:2.3:a:libgnutls30:libgnutls30:3.7.1-5\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgnutls30@3.7.1-5+deb11u2?arch=amd64&upstream=gnutls28&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgomp1@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=64874408d63158d7", + "publisher": "Debian GCC Maintainers ", + "name": "libgomp1", + "version": "10.2.1-6", + "cpe": "cpe:2.3:a:libgomp1:libgomp1:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgomp1@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgpg-error0@1.38-2?arch=amd64&upstream=libgpg-error&distro=debian-11&package-id=adbdf6119b3038eb", + "publisher": "Debian GnuPG Maintainers ", + "name": "libgpg-error0", + "version": "1.38-2", + "cpe": "cpe:2.3:a:libgpg-error0:libgpg-error0:1.38-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgpg-error0@1.38-2?arch=amd64&upstream=libgpg-error&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11&package-id=934eca1b2c81a866", + "publisher": "Sam Hartman ", + "name": "libgssapi-krb5-2", + "version": "1.18.3-6+deb11u3", + "cpe": "cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libhogweed6@3.7.3-1?arch=amd64&upstream=nettle&distro=debian-11&package-id=f6875fb73ea89a12", + "publisher": "Magnus Holmgren ", + "name": "libhogweed6", + "version": "3.7.3-1", + "cpe": "cpe:2.3:a:libhogweed6:libhogweed6:3.7.3-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libhogweed6@3.7.3-1?arch=amd64&upstream=nettle&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libidn2-0@2.3.0-5?arch=amd64&upstream=libidn2&distro=debian-11&package-id=742c5fa2e37418ba", + "publisher": "Debian Libidn team ", + "name": "libidn2-0", + "version": "2.3.0-5", + "cpe": "cpe:2.3:a:libidn2-0:libidn2-0:2.3.0-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libidn2-0@2.3.0-5?arch=amd64&upstream=libidn2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libk5crypto3@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11&package-id=163ad6c7e8920e2f", + "publisher": "Sam Hartman ", + "name": "libk5crypto3", + "version": "1.18.3-6+deb11u3", + "cpe": "cpe:2.3:a:libk5crypto3:libk5crypto3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libk5crypto3@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libkeyutils1@1.6.1-2?arch=amd64&upstream=keyutils&distro=debian-11&package-id=5210e45c85e35975", + "publisher": "Christian Kastner ", + "name": "libkeyutils1", + "version": "1.6.1-2", + "cpe": "cpe:2.3:a:libkeyutils1:libkeyutils1:1.6.1-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libkeyutils1@1.6.1-2?arch=amd64&upstream=keyutils&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libkrb5-3@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11&package-id=b7be2a5d0c5273d0", + "publisher": "Sam Hartman ", + "name": "libkrb5-3", + "version": "1.18.3-6+deb11u3", + "cpe": "cpe:2.3:a:libkrb5-3:libkrb5-3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libkrb5-3@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libkrb5support0@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11&package-id=1b425f24967037f8", + "publisher": "Sam Hartman ", + "name": "libkrb5support0", + "version": "1.18.3-6+deb11u3", + "cpe": "cpe:2.3:a:libkrb5support0:libkrb5support0:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libkrb5support0@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libldap-2.4-2@2.4.57+dfsg-3+deb11u1?arch=amd64&upstream=openldap&distro=debian-11&package-id=95095bfb4d81b655", + "publisher": "Debian OpenLDAP Maintainers ", + "name": "libldap-2.4-2", + "version": "2.4.57+dfsg-3+deb11u1", + "cpe": "cpe:2.3:a:libldap-2.4-2:libldap-2.4-2:2.4.57\\+dfsg-3\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libldap-2.4-2@2.4.57+dfsg-3+deb11u1?arch=amd64&upstream=openldap&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/liblz4-1@1.9.3-2?arch=amd64&upstream=lz4&distro=debian-11&package-id=8adf5003e74a859", + "publisher": "Nobuhiro Iwamatsu ", + "name": "liblz4-1", + "version": "1.9.3-2", + "cpe": "cpe:2.3:a:liblz4-1:liblz4-1:1.9.3-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/liblz4-1@1.9.3-2?arch=amd64&upstream=lz4&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/liblzma5@5.2.5-2.1~deb11u1?arch=amd64&upstream=xz-utils&distro=debian-11&package-id=d65da095c33495e", + "publisher": "Jonathan Nieder ", + "name": "liblzma5", + "version": "5.2.5-2.1~deb11u1", + "cpe": "cpe:2.3:a:liblzma5:liblzma5:5.2.5-2.1\\~deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/liblzma5@5.2.5-2.1~deb11u1?arch=amd64&upstream=xz-utils&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libnettle8@3.7.3-1?arch=amd64&upstream=nettle&distro=debian-11&package-id=7e23fb3542638810", + "publisher": "Magnus Holmgren ", + "name": "libnettle8", + "version": "3.7.3-1", + "cpe": "cpe:2.3:a:libnettle8:libnettle8:3.7.3-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libnettle8@3.7.3-1?arch=amd64&upstream=nettle&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libp11-kit0@0.23.22-1?arch=amd64&upstream=p11-kit&distro=debian-11&package-id=184f52603068dcd6", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libp11-kit0", + "version": "0.23.22-1", + "cpe": "cpe:2.3:a:libp11-kit0:libp11-kit0:0.23.22-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libp11-kit0@0.23.22-1?arch=amd64&upstream=p11-kit&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libpq5@13.8-0+deb11u1?arch=amd64&upstream=postgresql-13&distro=debian-11&package-id=c5bc819225796bb5", + "publisher": "Debian PostgreSQL Maintainers ", + "name": "libpq5", + "version": "13.8-0+deb11u1", + "cpe": "cpe:2.3:a:libpq5:libpq5:13.8-0\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libpq5@13.8-0+deb11u1?arch=amd64&upstream=postgresql-13&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsasl2-2@2.1.27+dfsg-2.1+deb11u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-11&package-id=770be1c1426e93f9", + "publisher": "Debian Cyrus Team ", + "name": "libsasl2-2", + "version": "2.1.27+dfsg-2.1+deb11u1", + "cpe": "cpe:2.3:a:libsasl2-2:libsasl2-2:2.1.27\\+dfsg-2.1\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsasl2-2@2.1.27+dfsg-2.1+deb11u1?arch=amd64&upstream=cyrus-sasl2&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libssl1.1@1.1.1n-0+deb11u3?arch=amd64&upstream=openssl&distro=debian-11&package-id=cc7cadd9628284e3", + "publisher": "Debian OpenSSL Team ", + "name": "libssl1.1", + "version": "1.1.1n-0+deb11u3", + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libssl1.1@1.1.1n-0+deb11u3?arch=amd64&upstream=openssl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libssl1.1@1.1.1n-0+deb11u3?arch=amd64&upstream=openssl&distro=debian-11&package-id=9fe2917c593fd4df", + "publisher": "Debian OpenSSL Team ", + "name": "libssl1.1", + "version": "1.1.1n-0+deb11u3", + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libssl1.1@1.1.1n-0+deb11u3?arch=amd64&upstream=openssl&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libstdc++6@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11&package-id=f0a0f8c906e2c621", + "publisher": "Debian GCC Maintainers ", + "name": "libstdc++6", + "version": "10.2.1-6", + "cpe": "cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:10.2.1-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libstdc++6@10.2.1-6?arch=amd64&upstream=gcc-10&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libsystemd0@247.3-7+deb11u1?arch=amd64&upstream=systemd&distro=debian-11&package-id=c7bb0d22fd707d2e", + "publisher": "Debian systemd Maintainers ", + "name": "libsystemd0", + "version": "247.3-7+deb11u1", + "cpe": "cpe:2.3:a:libsystemd0:libsystemd0:247.3-7\\+deb11u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libsystemd0@247.3-7+deb11u1?arch=amd64&upstream=systemd&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libtasn1-6@4.16.0-2?arch=amd64&distro=debian-11&package-id=ec9cc001dc839288", + "publisher": "Debian GnuTLS Maintainers ", + "name": "libtasn1-6", + "version": "4.16.0-2", + "cpe": "cpe:2.3:a:libtasn1-6:libtasn1-6:4.16.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libtasn1-6@4.16.0-2?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libunistring2@0.9.10-4?arch=amd64&upstream=libunistring&distro=debian-11&package-id=88a830d75a1b25bf", + "publisher": "Jörg Frings-Fürst ", + "name": "libunistring2", + "version": "0.9.10-4", + "cpe": "cpe:2.3:a:libunistring2:libunistring2:0.9.10-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libunistring2@0.9.10-4?arch=amd64&upstream=libunistring&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libyaml-0-2@0.2.2-1?arch=amd64&upstream=libyaml&distro=debian-11&package-id=e47482fee132aef7", + "publisher": "Anders Kaseorg ", + "name": "libyaml-0-2", + "version": "0.2.2-1", + "cpe": "cpe:2.3:a:libyaml-0-2:libyaml-0-2:0.2.2-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libyaml-0-2@0.2.2-1?arch=amd64&upstream=libyaml&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libzstd1@1.4.8+dfsg-2.1?arch=amd64&upstream=libzstd&distro=debian-11&package-id=ab332bfa1875542b", + "publisher": "Debian Med Packaging Team ", + "name": "libzstd1", + "version": "1.4.8+dfsg-2.1", + "cpe": "cpe:2.3:a:libzstd1:libzstd1:1.4.8\\+dfsg-2.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libzstd1@1.4.8+dfsg-2.1?arch=amd64&upstream=libzstd&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/netbase@6.3?arch=all&distro=debian-11&package-id=fdbf312837579aa", + "publisher": "Marco d'Itri ", + "name": "netbase", + "version": "6.3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:netbase:netbase:6.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/netbase@6.3?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/openssl@1.1.1n-0+deb11u3?arch=amd64&distro=debian-11&package-id=cba49180f2456de6", + "publisher": "Debian OpenSSL Team ", + "name": "openssl", + "version": "1.1.1n-0+deb11u3", + "cpe": "cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u3:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/openssl@1.1.1n-0+deb11u3?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/pkg-config@0.29.2-1?arch=amd64&distro=debian-11&package-id=52f98f355dc272b4", + "publisher": "Tollef Fog Heen ", + "name": "pkg-config", + "version": "0.29.2-1", + "cpe": "cpe:2.3:a:pkg-config:pkg-config:0.29.2-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/pkg-config@0.29.2-1?arch=amd64&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tzdata@2021a-1+deb11u8?arch=all&distro=debian-11&package-id=353681e57b634ada", + "publisher": "GNU Libc Maintainers ", + "name": "tzdata", + "version": "2021a-1+deb11u8", + "cpe": "cpe:2.3:a:tzdata:tzdata:2021a-1\\+deb11u8:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tzdata@2021a-1+deb11u8?arch=all&distro=debian-11" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/zlib1g@1:1.2.11.dfsg-2+deb11u2?arch=amd64&upstream=zlib&distro=debian-11&package-id=f6e0ab41c080f2fb", + "publisher": "Mark Brown ", + "name": "zlib1g", + "version": "1:1.2.11.dfsg-2+deb11u2", + "cpe": "cpe:2.3:a:zlib1g:zlib1g:1\\:1.2.11.dfsg-2\\+deb11u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/zlib1g@1:1.2.11.dfsg-2+deb11u2?arch=amd64&upstream=zlib&distro=debian-11" + }, + { + "type": "operating-system", + "name": "debian", + "version": "11", + "description": "Distroless", + "swid": { + "tagId": "debian", + "name": "debian", + "version": "11" + }, + "externalReferences": [ + { + "url": "https://github.com/GoogleContainerTools/distroless/issues/new", + "type": "issue-tracker" + }, + { + "url": "https://github.com/GoogleContainerTools/distroless", + "type": "website" + }, + { + "url": "https://github.com/GoogleContainerTools/distroless/blob/master/README.md", + "comment": "support", + "type": "other" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pynacl@1.4.0?package-id=6a95d529d7ec5789", + "author": "The PyNaCl developers ", + "name": "PyNaCl", + "version": "1.4.0", + "licenses": [ + { + "license": { + "name": "Apache License 2.0" + } + } + ], + "cpe": "cpe:2.3:a:pynacl_developers_project:python-PyNaCl:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/PyNaCl@1.4.0", + "externalReferences": [ + { + "url": "file:///var/lib/pb2/sb_1-10866539-1679468854.52/workdir/cache/wheels/cc/00/90/ef78796a9e7a492642aaf74b0c6d2759eef89decf7e3fc2221/PyNaCl-1.4.0-cp39-cp39-linux_x86_64.whl", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pyyaml@6.0?package-id=28b02e3a891344ca", + "author": "Kirill Simonov ", + "name": "PyYAML", + "version": "6.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:kirill_simonov_project:python-PyYAML:6.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/PyYAML@6.0", + "externalReferences": [ + { + "url": "file:///var/lib/pb2/sb_1-10866539-1679468854.52/workdir/cache/wheels/84/6b/7a/345964be4a602a502c5d16f126be67047adf2ec55b7e80bda6/PyYAML-6.0-cp39-cp39-linux_x86_64.whl", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/audit-libs@3.0.7-4.el8?arch=x86_64&upstream=audit-3.0.7-4.el8.src.rpm&distro=ol-8.7&package-id=72d440769b4fc89f", + "publisher": "Oracle America", + "name": "audit-libs", + "version": "3.0.7-4.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:audit-libs:3.0.7-4.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/audit-libs@3.0.7-4.el8?arch=x86_64&upstream=audit-3.0.7-4.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/basesystem@11-5.el8?arch=noarch&upstream=basesystem-11-5.el8.src.rpm&distro=ol-8.7&package-id=1e5af1bf1a956925", + "publisher": "Oracle America", + "name": "basesystem", + "version": "11-5.el8", + "licenses": [ + { + "license": { + "name": "Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:basesystem:11-5.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/basesystem@11-5.el8?arch=noarch&upstream=basesystem-11-5.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/bash@4.4.20-4.el8_6?arch=x86_64&upstream=bash-4.4.20-4.el8_6.src.rpm&distro=ol-8.7&package-id=97279da901f8ca4d", + "publisher": "Oracle America", + "name": "bash", + "version": "4.4.20-4.el8_6", + "licenses": [ + { + "license": { + "name": "GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:bash:4.4.20-4.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/bash@4.4.20-4.el8_6?arch=x86_64&upstream=bash-4.4.20-4.el8_6.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/bcrypt@3.2.2?package-id=e79c0d5020b0364d", + "author": "The Python Cryptographic Authority developers ", + "name": "bcrypt", + "version": "3.2.2", + "licenses": [ + { + "license": { + "name": "Apache License, Version 2.0" + } + } + ], + "cpe": "cpe:2.3:a:python_cryptographic_authority_developers_project:python-bcrypt:3.2.2:*:*:*:*:*:*:*", + "purl": "pkg:pypi/bcrypt@3.2.2", + "externalReferences": [ + { + "url": "file:///var/lib/pb2/sb_1-10866539-1679468854.52/workdir/cache/wheels/82/c7/41/3adc9e77f41856f1b7db31df8d5dd050e344407ddac232f9b3/bcrypt-3.2.2-cp39-cp39-linux_x86_64.whl", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/brotli@1.0.6-3.el8?arch=x86_64&upstream=brotli-1.0.6-3.el8.src.rpm&distro=ol-8.7&package-id=38fe1d3e6e44c60d", + "publisher": "Oracle America", + "name": "brotli", + "version": "1.0.6-3.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:brotli:1.0.6-3.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/brotli@1.0.6-3.el8?arch=x86_64&upstream=brotli-1.0.6-3.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/bzip2@1.0.6-26.el8?arch=x86_64&upstream=bzip2-1.0.6-26.el8.src.rpm&distro=ol-8.7&package-id=41333bf009bf2a5c", + "publisher": "Oracle America", + "name": "bzip2", + "version": "1.0.6-26.el8", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:bzip2:1.0.6-26.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/bzip2@1.0.6-26.el8?arch=x86_64&upstream=bzip2-1.0.6-26.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/bzip2-libs@1.0.6-26.el8?arch=x86_64&upstream=bzip2-1.0.6-26.el8.src.rpm&distro=ol-8.7&package-id=d402bb048f15a4e5", + "publisher": "Oracle America", + "name": "bzip2-libs", + "version": "1.0.6-26.el8", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:bzip2-libs:1.0.6-26.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/bzip2-libs@1.0.6-26.el8?arch=x86_64&upstream=bzip2-1.0.6-26.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/ca-certificates@2022.2.54-80.2.el8_6?arch=noarch&upstream=ca-certificates-2022.2.54-80.2.el8_6.src.rpm&distro=ol-8.7&package-id=c03be3db2a449eb4", + "publisher": "Oracle America", + "name": "ca-certificates", + "version": "2022.2.54-80.2.el8_6", + "licenses": [ + { + "license": { + "name": "Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:2022.2.54-80.2.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/ca-certificates@2022.2.54-80.2.el8_6?arch=noarch&upstream=ca-certificates-2022.2.54-80.2.el8_6.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/certifi@2022.12.7?package-id=5da3481ce07f8998", + "author": "Kenneth Reitz ", + "name": "certifi", + "version": "2022.12.7", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:kenneth_reitz_project:python-certifi:2022.12.7:*:*:*:*:*:*:*", + "purl": "pkg:pypi/certifi@2022.12.7", + "externalReferences": [ + { + "url": "file:///var/lib/pb2/sb_1-10866539-1679468854.52/workdir/cache/wheels/dc/0e/84/89514a3ad2036e12ac0886723fb2f4d89f8ba76aefec8dce2f/certifi-2022.12.7-py3-none-any.whl", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/cffi@1.15.1?package-id=2f0ee0e0b9aafaf0", + "author": "Armin Rigo, Maciej Fijalkowski ", + "name": "cffi", + "version": "1.15.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:armin_rigo\\,_maciej_fijalkowski_project:python-cffi:1.15.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/cffi@1.15.1", + "externalReferences": [ + { + "url": "file:///var/lib/pb2/sb_1-10866539-1679468854.52/workdir/cache/wheels/73/fe/16/c42d972e7e7e450c9cfbb51fc5c77239ec1a674f2fdad9167a/cffi-1.15.1-cp39-cp39-linux_x86_64.whl", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/chkconfig@1.19.1-1.0.1.el8?arch=x86_64&upstream=chkconfig-1.19.1-1.0.1.el8.src.rpm&distro=ol-8.7&package-id=7a246beb95abafdb", + "publisher": "Oracle America", + "name": "chkconfig", + "version": "1.19.1-1.0.1.el8", + "licenses": [ + { + "license": { + "name": "GPLv2" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:chkconfig:1.19.1-1.0.1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/chkconfig@1.19.1-1.0.1.el8?arch=x86_64&upstream=chkconfig-1.19.1-1.0.1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/circuitbreaker@1.4.0?package-id=cf5c41ed652728da", + "author": "Fabian Fuelling ", + "name": "circuitbreaker", + "version": "1.4.0", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:fabian_fuelling_project:python-circuitbreaker:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/circuitbreaker@1.4.0", + "externalReferences": [ + { + "url": "file:///var/lib/pb2/sb_1-10866539-1679468854.52/workdir/cache/wheels/95/50/c0/04ebbea6ff75a6482af2ad0241be2a795a7d00b4cd6863f76e/circuitbreaker-1.4.0-py3-none-any.whl", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/coreutils-single@8.30-13.0.1.el8?arch=x86_64&upstream=coreutils-8.30-13.0.1.el8.src.rpm&distro=ol-8.7&package-id=6921e1f650e2fff6", + "publisher": "Oracle America", + "name": "coreutils-single", + "version": "8.30-13.0.1.el8", + "licenses": [ + { + "license": { + "name": "GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:coreutils-single:coreutils-single:8.30-13.0.1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/coreutils-single@8.30-13.0.1.el8?arch=x86_64&upstream=coreutils-8.30-13.0.1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/crypto-policies@20211116-1.gitae470d6.el8?arch=noarch&upstream=crypto-policies-20211116-1.gitae470d6.el8.src.rpm&distro=ol-8.7&package-id=af518f988ecc36d3", + "publisher": "Oracle America", + "name": "crypto-policies", + "version": "20211116-1.gitae470d6.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:crypto-policies:crypto-policies:20211116-1.gitae470d6.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/crypto-policies@20211116-1.gitae470d6.el8?arch=noarch&upstream=crypto-policies-20211116-1.gitae470d6.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/cryptography@38.0.4?package-id=863ec3e60660431", + "author": "The Python Cryptographic Authority and individual contributors ", + "name": "cryptography", + "version": "38.0.4", + "licenses": [ + { + "license": { + "name": "BSD-3-Clause OR Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:python_cryptographic_authority_and_individual_contributors_project:python-cryptography:38.0.4:*:*:*:*:*:*:*", + "purl": "pkg:pypi/cryptography@38.0.4", + "externalReferences": [ + { + "url": "file:///var/lib/pb2/sb_1-10866539-1679468854.52/workdir/cache/wheels/bb/f3/07/5cb7a2af9be33b679dcc0f8444961074085140e939bb9dee82/cryptography-38.0.4-cp39-cp39-linux_x86_64.whl", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/curl@7.61.1-25.el8_7.3?arch=x86_64&upstream=curl-7.61.1-25.el8_7.3.src.rpm&distro=ol-8.7&package-id=93373e170c6ee494", + "publisher": "Oracle America", + "name": "curl", + "version": "7.61.1-25.el8_7.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:curl:7.61.1-25.el8_7.3:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/curl@7.61.1-25.el8_7.3?arch=x86_64&upstream=curl-7.61.1-25.el8_7.3.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/cyrus-sasl-lib@2.1.27-6.el8_5?arch=x86_64&upstream=cyrus-sasl-2.1.27-6.el8_5.src.rpm&distro=ol-8.7&package-id=666d92486a364948", + "publisher": "Oracle America", + "name": "cyrus-sasl-lib", + "version": "2.1.27-6.el8_5", + "licenses": [ + { + "license": { + "name": "BSD with advertising" + } + } + ], + "cpe": "cpe:2.3:a:cyrus-sasl-lib:cyrus-sasl-lib:2.1.27-6.el8_5:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/cyrus-sasl-lib@2.1.27-6.el8_5?arch=x86_64&upstream=cyrus-sasl-2.1.27-6.el8_5.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/elfutils-libelf@0.187-4.el8?arch=x86_64&upstream=elfutils-0.187-4.el8.src.rpm&distro=ol-8.7&package-id=c8d0b08a66c7d941", + "publisher": "Oracle America", + "name": "elfutils-libelf", + "version": "0.187-4.el8", + "licenses": [ + { + "license": { + "name": "GPLv2+ or LGPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:elfutils-libelf:elfutils-libelf:0.187-4.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/elfutils-libelf@0.187-4.el8?arch=x86_64&upstream=elfutils-0.187-4.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/expat@2.2.5-10.0.1.el8_7.1?arch=x86_64&upstream=expat-2.2.5-10.0.1.el8_7.1.src.rpm&distro=ol-8.7&package-id=7c3625052ee3f0a2", + "publisher": "Oracle America", + "name": "expat", + "version": "2.2.5-10.0.1.el8_7.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:expat:2.2.5-10.0.1.el8_7.1:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/expat@2.2.5-10.0.1.el8_7.1?arch=x86_64&upstream=expat-2.2.5-10.0.1.el8_7.1.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/file-libs@5.33-21.el8?arch=x86_64&upstream=file-5.33-21.el8.src.rpm&distro=ol-8.7&package-id=3bbde9dce6d295f5", + "publisher": "Oracle America", + "name": "file-libs", + "version": "5.33-21.el8", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:file-libs:5.33-21.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/file-libs@5.33-21.el8?arch=x86_64&upstream=file-5.33-21.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/filesystem@3.8-6.el8?arch=x86_64&upstream=filesystem-3.8-6.el8.src.rpm&distro=ol-8.7&package-id=8be707f9aeb3382e", + "publisher": "Oracle America", + "name": "filesystem", + "version": "3.8-6.el8", + "licenses": [ + { + "license": { + "name": "Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:filesystem:3.8-6.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/filesystem@3.8-6.el8?arch=x86_64&upstream=filesystem-3.8-6.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/findutils@4.6.0-20.el8?arch=x86_64&epoch=1&upstream=findutils-4.6.0-20.el8.src.rpm&distro=ol-8.7&package-id=9d8a854098c296a7", + "publisher": "Oracle America", + "name": "findutils", + "version": "1:4.6.0-20.el8", + "licenses": [ + { + "license": { + "name": "GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:findutils:1\\:4.6.0-20.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/findutils@4.6.0-20.el8?arch=x86_64&epoch=1&upstream=findutils-4.6.0-20.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/gawk@4.2.1-4.el8?arch=x86_64&upstream=gawk-4.2.1-4.el8.src.rpm&distro=ol-8.7&package-id=8786cc2accbc8fa5", + "publisher": "Oracle America", + "name": "gawk", + "version": "4.2.1-4.el8", + "licenses": [ + { + "license": { + "name": "GPLv3+ and GPLv2+ and LGPLv2+ and BSD" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:gawk:4.2.1-4.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/gawk@4.2.1-4.el8?arch=x86_64&upstream=gawk-4.2.1-4.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/gdbm-libs@1.18-2.el8?arch=x86_64&epoch=1&upstream=gdbm-1.18-2.el8.src.rpm&distro=ol-8.7&package-id=ab433ce5a4c81fd6", + "publisher": "Oracle America", + "name": "gdbm-libs", + "version": "1:1.18-2.el8", + "licenses": [ + { + "license": { + "name": "GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:gdbm-libs:1\\:1.18-2.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/gdbm-libs@1.18-2.el8?arch=x86_64&epoch=1&upstream=gdbm-1.18-2.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/opencontainers/runc@v1.1.0?package-id=acbe2d30b51946b3", + "name": "github.com/opencontainers/runc", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:opencontainers:runc:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/opencontainers/runc@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/tianon/gosu@(devel)?package-id=e8b054e24eb96bc6", + "name": "github.com/tianon/gosu", + "version": "(devel)", + "cpe": "cpe:2.3:a:tianon:gosu:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/tianon/gosu@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/glib2@2.56.4-159.0.1.el8?arch=x86_64&upstream=glib2-2.56.4-159.0.1.el8.src.rpm&distro=ol-8.7&package-id=bb0970beb154ce2b", + "publisher": "Oracle America", + "name": "glib2", + "version": "2.56.4-159.0.1.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:glib2:2.56.4-159.0.1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/glib2@2.56.4-159.0.1.el8?arch=x86_64&upstream=glib2-2.56.4-159.0.1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/glibc@2.28-211.0.1.el8?arch=x86_64&upstream=glibc-2.28-211.0.1.el8.src.rpm&distro=ol-8.7&package-id=c976ebab7eedfc9b", + "publisher": "Oracle America", + "name": "glibc", + "version": "2.28-211.0.1.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:glibc:2.28-211.0.1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/glibc@2.28-211.0.1.el8?arch=x86_64&upstream=glibc-2.28-211.0.1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/glibc-common@2.28-211.0.1.el8?arch=x86_64&upstream=glibc-2.28-211.0.1.el8.src.rpm&distro=ol-8.7&package-id=2a2eafc336ce7843", + "publisher": "Oracle America", + "name": "glibc-common", + "version": "2.28-211.0.1.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:glibc-common:2.28-211.0.1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/glibc-common@2.28-211.0.1.el8?arch=x86_64&upstream=glibc-2.28-211.0.1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/glibc-minimal-langpack@2.28-211.0.1.el8?arch=x86_64&upstream=glibc-2.28-211.0.1.el8.src.rpm&distro=ol-8.7&package-id=591b724235023c14", + "publisher": "Oracle America", + "name": "glibc-minimal-langpack", + "version": "2.28-211.0.1.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL" + } + } + ], + "cpe": "cpe:2.3:a:glibc-minimal-langpack:glibc-minimal-langpack:2.28-211.0.1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/glibc-minimal-langpack@2.28-211.0.1.el8?arch=x86_64&upstream=glibc-2.28-211.0.1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/gmp@6.1.2-10.el8?arch=x86_64&epoch=1&upstream=gmp-6.1.2-10.el8.src.rpm&distro=ol-8.7&package-id=ef1b37e39954f409", + "publisher": "Oracle America", + "name": "gmp", + "version": "1:6.1.2-10.el8", + "licenses": [ + { + "license": { + "name": "LGPLv3+ or GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:gmp:1\\:6.1.2-10.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/gmp@6.1.2-10.el8?arch=x86_64&epoch=1&upstream=gmp-6.1.2-10.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/gnupg2@2.2.20-3.el8_6?arch=x86_64&upstream=gnupg2-2.2.20-3.el8_6.src.rpm&distro=ol-8.7&package-id=a3b856b0ed9f2ddc", + "publisher": "Oracle America", + "name": "gnupg2", + "version": "2.2.20-3.el8_6", + "licenses": [ + { + "license": { + "name": "GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:gnupg2:2.2.20-3.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/gnupg2@2.2.20-3.el8_6?arch=x86_64&upstream=gnupg2-2.2.20-3.el8_6.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/gnutls@3.6.16-6.el8_7?arch=x86_64&upstream=gnutls-3.6.16-6.el8_7.src.rpm&distro=ol-8.7&package-id=2bfdd2b55dc81f31", + "publisher": "Oracle America", + "name": "gnutls", + "version": "3.6.16-6.el8_7", + "licenses": [ + { + "license": { + "name": "GPLv3+ and LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:gnutls:3.6.16-6.el8_7:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/gnutls@3.6.16-6.el8_7?arch=x86_64&upstream=gnutls-3.6.16-6.el8_7.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/gobject-introspection@1.56.1-1.el8?arch=x86_64&upstream=gobject-introspection-1.56.1-1.el8.src.rpm&distro=ol-8.7&package-id=32657c95510a09e1", + "publisher": "Oracle America", + "name": "gobject-introspection", + "version": "1.56.1-1.el8", + "licenses": [ + { + "license": { + "name": "GPLv2+, LGPLv2+, MIT" + } + } + ], + "cpe": "cpe:2.3:a:gobject-introspection:gobject-introspection:1.56.1-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/gobject-introspection@1.56.1-1.el8?arch=x86_64&upstream=gobject-introspection-1.56.1-1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd?package-id=3aa15d4598a266eb", + "name": "golang.org/x/sys", + "version": "v0.0.0-20220907062415-87db552b00fd", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20220907062415-87db552b00fd:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/gpg-pubkey@ad986da3-5cabf60d?distro=ol-8.7&package-id=7e39bb17ee46a24e", + "name": "gpg-pubkey", + "version": "ad986da3-5cabf60d", + "licenses": [ + { + "license": { + "name": "pubkey" + } + } + ], + "cpe": "cpe:2.3:a:gpg-pubkey:gpg-pubkey:ad986da3-5cabf60d:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/gpg-pubkey@ad986da3-5cabf60d?distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/gpgme@1.13.1-11.el8?arch=x86_64&upstream=gpgme-1.13.1-11.el8.src.rpm&distro=ol-8.7&package-id=10a5d40d8cf22f7", + "publisher": "Oracle America", + "name": "gpgme", + "version": "1.13.1-11.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+ and GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:gpgme:1.13.1-11.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/gpgme@1.13.1-11.el8?arch=x86_64&upstream=gpgme-1.13.1-11.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/grep@3.1-6.el8?arch=x86_64&upstream=grep-3.1-6.el8.src.rpm&distro=ol-8.7&package-id=1d4afcece34988b5", + "publisher": "Oracle America", + "name": "grep", + "version": "3.1-6.el8", + "licenses": [ + { + "license": { + "name": "GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:grep:3.1-6.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/grep@3.1-6.el8?arch=x86_64&upstream=grep-3.1-6.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/gzip@1.9-13.el8_5?arch=x86_64&upstream=gzip-1.9-13.el8_5.src.rpm&distro=ol-8.7&package-id=76a65536dee19f37", + "publisher": "Oracle America", + "name": "gzip", + "version": "1.9-13.el8_5", + "licenses": [ + { + "license": { + "name": "GPLv3+ and GFDL" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:gzip:1.9-13.el8_5:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/gzip@1.9-13.el8_5?arch=x86_64&upstream=gzip-1.9-13.el8_5.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/info@6.5-7.el8?arch=x86_64&upstream=texinfo-6.5-7.el8.src.rpm&distro=ol-8.7&package-id=429de88a1da8ab52", + "publisher": "Oracle America", + "name": "info", + "version": "6.5-7.el8", + "licenses": [ + { + "license": { + "name": "GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:info:6.5-7.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/info@6.5-7.el8?arch=x86_64&upstream=texinfo-6.5-7.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/json-c@0.13.1-3.el8?arch=x86_64&upstream=json-c-0.13.1-3.el8.src.rpm&distro=ol-8.7&package-id=bb1712edac77b57d", + "publisher": "Oracle America", + "name": "json-c", + "version": "0.13.1-3.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:json-c:0.13.1-3.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/json-c@0.13.1-3.el8?arch=x86_64&upstream=json-c-0.13.1-3.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/keyutils-libs@1.5.10-9.el8?arch=x86_64&upstream=keyutils-1.5.10-9.el8.src.rpm&distro=ol-8.7&package-id=2b8a9b00346b56d7", + "publisher": "Oracle America", + "name": "keyutils-libs", + "version": "1.5.10-9.el8", + "licenses": [ + { + "license": { + "name": "GPLv2+ and LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:keyutils-libs:keyutils-libs:1.5.10-9.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/keyutils-libs@1.5.10-9.el8?arch=x86_64&upstream=keyutils-1.5.10-9.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/krb5-libs@1.18.2-22.0.1.el8_7?arch=x86_64&upstream=krb5-1.18.2-22.0.1.el8_7.src.rpm&distro=ol-8.7&package-id=3efe7515888f4dbc", + "publisher": "Oracle America", + "name": "krb5-libs", + "version": "1.18.2-22.0.1.el8_7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:krb5-libs:1.18.2-22.0.1.el8_7:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/krb5-libs@1.18.2-22.0.1.el8_7?arch=x86_64&upstream=krb5-1.18.2-22.0.1.el8_7.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libacl@2.2.53-1.el8?arch=x86_64&upstream=acl-2.2.53-1.el8.src.rpm&distro=ol-8.7&package-id=947a345f9aea6e23", + "publisher": "Oracle America", + "name": "libacl", + "version": "2.2.53-1.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libacl:2.2.53-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libacl@2.2.53-1.el8?arch=x86_64&upstream=acl-2.2.53-1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libaio@0.3.112-1.el8?arch=x86_64&upstream=libaio-0.3.112-1.el8.src.rpm&distro=ol-8.7&package-id=6f33dd1d6c2f4f17", + "publisher": "Oracle America", + "name": "libaio", + "version": "0.3.112-1.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libaio:0.3.112-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libaio@0.3.112-1.el8?arch=x86_64&upstream=libaio-0.3.112-1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libarchive@3.3.3-4.el8?arch=x86_64&upstream=libarchive-3.3.3-4.el8.src.rpm&distro=ol-8.7&package-id=f73c9e5edab41106", + "publisher": "Oracle America", + "name": "libarchive", + "version": "3.3.3-4.el8", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libarchive:3.3.3-4.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libarchive@3.3.3-4.el8?arch=x86_64&upstream=libarchive-3.3.3-4.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libassuan@2.5.1-3.el8?arch=x86_64&upstream=libassuan-2.5.1-3.el8.src.rpm&distro=ol-8.7&package-id=be435c1a75778ca5", + "publisher": "Oracle America", + "name": "libassuan", + "version": "2.5.1-3.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+ and GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libassuan:2.5.1-3.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libassuan@2.5.1-3.el8?arch=x86_64&upstream=libassuan-2.5.1-3.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libattr@2.4.48-3.el8?arch=x86_64&upstream=attr-2.4.48-3.el8.src.rpm&distro=ol-8.7&package-id=d841cc67da1171d0", + "publisher": "Oracle America", + "name": "libattr", + "version": "2.4.48-3.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libattr:2.4.48-3.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libattr@2.4.48-3.el8?arch=x86_64&upstream=attr-2.4.48-3.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libblkid@2.32.1-39.el8_7?arch=x86_64&upstream=util-linux-2.32.1-39.el8_7.src.rpm&distro=ol-8.7&package-id=1a0cc7d8b79b1e17", + "publisher": "Oracle America", + "name": "libblkid", + "version": "2.32.1-39.el8_7", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libblkid:2.32.1-39.el8_7:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libblkid@2.32.1-39.el8_7?arch=x86_64&upstream=util-linux-2.32.1-39.el8_7.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libcap@2.48-4.el8?arch=x86_64&upstream=libcap-2.48-4.el8.src.rpm&distro=ol-8.7&package-id=767cfbbf82a6dd0d", + "publisher": "Oracle America", + "name": "libcap", + "version": "2.48-4.el8", + "licenses": [ + { + "license": { + "name": "BSD or GPLv2" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libcap:2.48-4.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libcap@2.48-4.el8?arch=x86_64&upstream=libcap-2.48-4.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libcap-ng@0.7.11-1.el8?arch=x86_64&upstream=libcap-ng-0.7.11-1.el8.src.rpm&distro=ol-8.7&package-id=a62c0fc807c78067", + "publisher": "Oracle America", + "name": "libcap-ng", + "version": "0.7.11-1.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libcap-ng:0.7.11-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libcap-ng@0.7.11-1.el8?arch=x86_64&upstream=libcap-ng-0.7.11-1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libcom_err@1.45.6-5.el8?arch=x86_64&upstream=e2fsprogs-1.45.6-5.el8.src.rpm&distro=ol-8.7&package-id=6cc3b4cf91eedd1f", + "publisher": "Oracle America", + "name": "libcom_err", + "version": "1.45.6-5.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libcom-err:1.45.6-5.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libcom_err@1.45.6-5.el8?arch=x86_64&upstream=e2fsprogs-1.45.6-5.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libcurl@7.61.1-25.el8_7.3?arch=x86_64&upstream=curl-7.61.1-25.el8_7.3.src.rpm&distro=ol-8.7&package-id=919eee383ee97744", + "publisher": "Oracle America", + "name": "libcurl", + "version": "7.61.1-25.el8_7.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libcurl:7.61.1-25.el8_7.3:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libcurl@7.61.1-25.el8_7.3?arch=x86_64&upstream=curl-7.61.1-25.el8_7.3.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libdb@5.3.28-42.el8_4?arch=x86_64&upstream=libdb-5.3.28-42.el8_4.src.rpm&distro=ol-8.7&package-id=76062f478c25488c", + "publisher": "Oracle America", + "name": "libdb", + "version": "5.3.28-42.el8_4", + "licenses": [ + { + "license": { + "name": "BSD and LGPLv2 and Sleepycat" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libdb:5.3.28-42.el8_4:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libdb@5.3.28-42.el8_4?arch=x86_64&upstream=libdb-5.3.28-42.el8_4.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libdb-utils@5.3.28-42.el8_4?arch=x86_64&upstream=libdb-5.3.28-42.el8_4.src.rpm&distro=ol-8.7&package-id=ed14a1b76ea03928", + "publisher": "Oracle America", + "name": "libdb-utils", + "version": "5.3.28-42.el8_4", + "licenses": [ + { + "license": { + "name": "BSD and LGPLv2 and Sleepycat" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libdb-utils:5.3.28-42.el8_4:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libdb-utils@5.3.28-42.el8_4?arch=x86_64&upstream=libdb-5.3.28-42.el8_4.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libdnf@0.63.0-11.1.0.1.el8?arch=x86_64&upstream=libdnf-0.63.0-11.1.0.1.el8.src.rpm&distro=ol-8.7&package-id=858d2edb994f03b", + "publisher": "Oracle America", + "name": "libdnf", + "version": "0.63.0-11.1.0.1.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libdnf:0.63.0-11.1.0.1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libdnf@0.63.0-11.1.0.1.el8?arch=x86_64&upstream=libdnf-0.63.0-11.1.0.1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libffi@3.1-23.el8?arch=x86_64&upstream=libffi-3.1-23.el8.src.rpm&distro=ol-8.7&package-id=ded74aa373c2cd7a", + "publisher": "Oracle America", + "name": "libffi", + "version": "3.1-23.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libffi:3.1-23.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libffi@3.1-23.el8?arch=x86_64&upstream=libffi-3.1-23.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libgcc@8.5.0-16.0.2.el8_7?arch=x86_64&upstream=gcc-8.5.0-16.0.2.el8_7.src.rpm&distro=ol-8.7&package-id=cda803488f9e07c4", + "publisher": "Oracle America", + "name": "libgcc", + "version": "8.5.0-16.0.2.el8_7", + "licenses": [ + { + "license": { + "name": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libgcc:8.5.0-16.0.2.el8_7:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libgcc@8.5.0-16.0.2.el8_7?arch=x86_64&upstream=gcc-8.5.0-16.0.2.el8_7.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libgcrypt@1.8.5-7.el8_6?arch=x86_64&upstream=libgcrypt-1.8.5-7.el8_6.src.rpm&distro=ol-8.7&package-id=88aa3a119bed5db7", + "publisher": "Oracle America", + "name": "libgcrypt", + "version": "1.8.5-7.el8_6", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libgcrypt:1.8.5-7.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libgcrypt@1.8.5-7.el8_6?arch=x86_64&upstream=libgcrypt-1.8.5-7.el8_6.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libgpg-error@1.31-1.el8?arch=x86_64&upstream=libgpg-error-1.31-1.el8.src.rpm&distro=ol-8.7&package-id=d3de1bbfffb2fc8c", + "publisher": "Oracle America", + "name": "libgpg-error", + "version": "1.31-1.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libgpg-error:1.31-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libgpg-error@1.31-1.el8?arch=x86_64&upstream=libgpg-error-1.31-1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libidn2@2.2.0-1.el8?arch=x86_64&upstream=libidn2-2.2.0-1.el8.src.rpm&distro=ol-8.7&package-id=c77c3918713346a2", + "publisher": "Oracle America", + "name": "libidn2", + "version": "2.2.0-1.el8", + "licenses": [ + { + "license": { + "name": "(GPLv2+ or LGPLv3+) and GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libidn2:2.2.0-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libidn2@2.2.0-1.el8?arch=x86_64&upstream=libidn2-2.2.0-1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libksba@1.3.5-9.el8_7?arch=x86_64&upstream=libksba-1.3.5-9.el8_7.src.rpm&distro=ol-8.7&package-id=bbc57a6342de112c", + "publisher": "Oracle America", + "name": "libksba", + "version": "1.3.5-9.el8_7", + "licenses": [ + { + "license": { + "name": "(LGPLv3+ or GPLv2+) and GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libksba:1.3.5-9.el8_7:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libksba@1.3.5-9.el8_7?arch=x86_64&upstream=libksba-1.3.5-9.el8_7.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libmodulemd@2.13.0-1.el8?arch=x86_64&upstream=libmodulemd-2.13.0-1.el8.src.rpm&distro=ol-8.7&package-id=5a4435a8150c8412", + "publisher": "Oracle America", + "name": "libmodulemd", + "version": "2.13.0-1.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libmodulemd:2.13.0-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libmodulemd@2.13.0-1.el8?arch=x86_64&upstream=libmodulemd-2.13.0-1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libmount@2.32.1-39.el8_7?arch=x86_64&upstream=util-linux-2.32.1-39.el8_7.src.rpm&distro=ol-8.7&package-id=68eef99727f4a61c", + "publisher": "Oracle America", + "name": "libmount", + "version": "2.32.1-39.el8_7", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libmount:2.32.1-39.el8_7:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libmount@2.32.1-39.el8_7?arch=x86_64&upstream=util-linux-2.32.1-39.el8_7.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libnghttp2@1.33.0-3.el8_2.1?arch=x86_64&upstream=nghttp2-1.33.0-3.el8_2.1.src.rpm&distro=ol-8.7&package-id=6dfb319411881b5c", + "publisher": "Oracle America", + "name": "libnghttp2", + "version": "1.33.0-3.el8_2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libnghttp2:1.33.0-3.el8_2.1:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libnghttp2@1.33.0-3.el8_2.1?arch=x86_64&upstream=nghttp2-1.33.0-3.el8_2.1.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libnsl2@1.2.0-2.20180605git4a062cf.el8?arch=x86_64&upstream=libnsl2-1.2.0-2.20180605git4a062cf.el8.src.rpm&distro=ol-8.7&package-id=58f5061bc8a025eb", + "publisher": "Oracle America", + "name": "libnsl2", + "version": "1.2.0-2.20180605git4a062cf.el8", + "licenses": [ + { + "license": { + "name": "BSD and LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libnsl2:1.2.0-2.20180605git4a062cf.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libnsl2@1.2.0-2.20180605git4a062cf.el8?arch=x86_64&upstream=libnsl2-1.2.0-2.20180605git4a062cf.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libpeas@1.22.0-6.el8?arch=x86_64&upstream=libpeas-1.22.0-6.el8.src.rpm&distro=ol-8.7&package-id=bf861813cb90a1f1", + "publisher": "Oracle America", + "name": "libpeas", + "version": "1.22.0-6.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libpeas:1.22.0-6.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libpeas@1.22.0-6.el8?arch=x86_64&upstream=libpeas-1.22.0-6.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libpsl@0.20.2-6.el8?arch=x86_64&upstream=libpsl-0.20.2-6.el8.src.rpm&distro=ol-8.7&package-id=58693d112aa15906", + "publisher": "Oracle America", + "name": "libpsl", + "version": "0.20.2-6.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libpsl:0.20.2-6.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libpsl@0.20.2-6.el8?arch=x86_64&upstream=libpsl-0.20.2-6.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/librepo@1.14.2-3.el8?arch=x86_64&upstream=librepo-1.14.2-3.el8.src.rpm&distro=ol-8.7&package-id=6f6b6b5b95acf4ba", + "publisher": "Oracle America", + "name": "librepo", + "version": "1.14.2-3.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:librepo:1.14.2-3.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/librepo@1.14.2-3.el8?arch=x86_64&upstream=librepo-1.14.2-3.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libselinux@2.9-6.el8?arch=x86_64&upstream=libselinux-2.9-6.el8.src.rpm&distro=ol-8.7&package-id=1c8d7d0c0cc9ce82", + "publisher": "Oracle America", + "name": "libselinux", + "version": "2.9-6.el8", + "licenses": [ + { + "license": { + "name": "Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libselinux:2.9-6.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libselinux@2.9-6.el8?arch=x86_64&upstream=libselinux-2.9-6.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libsemanage@2.9-9.el8_6?arch=x86_64&upstream=libsemanage-2.9-9.el8_6.src.rpm&distro=ol-8.7&package-id=254dfe945417481a", + "publisher": "Oracle America", + "name": "libsemanage", + "version": "2.9-9.el8_6", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libsemanage:2.9-9.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libsemanage@2.9-9.el8_6?arch=x86_64&upstream=libsemanage-2.9-9.el8_6.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libsepol@2.9-3.el8?arch=x86_64&upstream=libsepol-2.9-3.el8.src.rpm&distro=ol-8.7&package-id=8bc10f2c92887a7c", + "publisher": "Oracle America", + "name": "libsepol", + "version": "2.9-3.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libsepol:2.9-3.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libsepol@2.9-3.el8?arch=x86_64&upstream=libsepol-2.9-3.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libsigsegv@2.11-5.el8?arch=x86_64&upstream=libsigsegv-2.11-5.el8.src.rpm&distro=ol-8.7&package-id=3dd0b34668c25f8f", + "publisher": "Oracle America", + "name": "libsigsegv", + "version": "2.11-5.el8", + "licenses": [ + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libsigsegv:2.11-5.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libsigsegv@2.11-5.el8?arch=x86_64&upstream=libsigsegv-2.11-5.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libsmartcols@2.32.1-39.el8_7?arch=x86_64&upstream=util-linux-2.32.1-39.el8_7.src.rpm&distro=ol-8.7&package-id=13fae55b6eee01d6", + "publisher": "Oracle America", + "name": "libsmartcols", + "version": "2.32.1-39.el8_7", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libsmartcols:2.32.1-39.el8_7:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libsmartcols@2.32.1-39.el8_7?arch=x86_64&upstream=util-linux-2.32.1-39.el8_7.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libsolv@0.7.20-4.el8_7?arch=x86_64&upstream=libsolv-0.7.20-4.el8_7.src.rpm&distro=ol-8.7&package-id=7acb1b46b8ef74ca", + "publisher": "Oracle America", + "name": "libsolv", + "version": "0.7.20-4.el8_7", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libsolv:0.7.20-4.el8_7:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libsolv@0.7.20-4.el8_7?arch=x86_64&upstream=libsolv-0.7.20-4.el8_7.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libssh@0.9.6-3.el8?arch=x86_64&upstream=libssh-0.9.6-3.el8.src.rpm&distro=ol-8.7&package-id=f91185faca80875c", + "publisher": "Oracle America", + "name": "libssh", + "version": "0.9.6-3.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libssh:0.9.6-3.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libssh@0.9.6-3.el8?arch=x86_64&upstream=libssh-0.9.6-3.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libssh-config@0.9.6-3.el8?arch=noarch&upstream=libssh-0.9.6-3.el8.src.rpm&distro=ol-8.7&package-id=671fc31e1cabe36d", + "publisher": "Oracle America", + "name": "libssh-config", + "version": "0.9.6-3.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libssh-config:libssh-config:0.9.6-3.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libssh-config@0.9.6-3.el8?arch=noarch&upstream=libssh-0.9.6-3.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libstdc++@8.5.0-16.0.2.el8_7?arch=x86_64&upstream=gcc-8.5.0-16.0.2.el8_7.src.rpm&distro=ol-8.7&package-id=c2136b2c3c7ba1de", + "publisher": "Oracle America", + "name": "libstdc++", + "version": "8.5.0-16.0.2.el8_7", + "licenses": [ + { + "license": { + "name": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libstdc\\+\\+:8.5.0-16.0.2.el8_7:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libstdc++@8.5.0-16.0.2.el8_7?arch=x86_64&upstream=gcc-8.5.0-16.0.2.el8_7.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libtasn1@4.13-4.el8_7?arch=x86_64&upstream=libtasn1-4.13-4.el8_7.src.rpm&distro=ol-8.7&package-id=ab8d2660032a506b", + "publisher": "Oracle America", + "name": "libtasn1", + "version": "4.13-4.el8_7", + "licenses": [ + { + "license": { + "name": "GPLv3+ and LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libtasn1:4.13-4.el8_7:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libtasn1@4.13-4.el8_7?arch=x86_64&upstream=libtasn1-4.13-4.el8_7.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libtirpc@1.1.4-8.el8?arch=x86_64&upstream=libtirpc-1.1.4-8.el8.src.rpm&distro=ol-8.7&package-id=a74a2463b1f0aed5", + "publisher": "Oracle America", + "name": "libtirpc", + "version": "1.1.4-8.el8", + "licenses": [ + { + "license": { + "name": "SISSL and BSD" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libtirpc:1.1.4-8.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libtirpc@1.1.4-8.el8?arch=x86_64&upstream=libtirpc-1.1.4-8.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libunistring@0.9.9-3.el8?arch=x86_64&upstream=libunistring-0.9.9-3.el8.src.rpm&distro=ol-8.7&package-id=b33dd68084d51a1a", + "publisher": "Oracle America", + "name": "libunistring", + "version": "0.9.9-3.el8", + "licenses": [ + { + "license": { + "name": "GPLv2+ or LGPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libunistring:0.9.9-3.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libunistring@0.9.9-3.el8?arch=x86_64&upstream=libunistring-0.9.9-3.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libusbx@1.0.23-4.el8?arch=x86_64&upstream=libusbx-1.0.23-4.el8.src.rpm&distro=ol-8.7&package-id=691946e9302c756f", + "publisher": "Oracle America", + "name": "libusbx", + "version": "1.0.23-4.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libusbx:1.0.23-4.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libusbx@1.0.23-4.el8?arch=x86_64&upstream=libusbx-1.0.23-4.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libuuid@2.32.1-39.el8_7?arch=x86_64&upstream=util-linux-2.32.1-39.el8_7.src.rpm&distro=ol-8.7&package-id=41299e31e11888ac", + "publisher": "Oracle America", + "name": "libuuid", + "version": "2.32.1-39.el8_7", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libuuid:2.32.1-39.el8_7:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libuuid@2.32.1-39.el8_7?arch=x86_64&upstream=util-linux-2.32.1-39.el8_7.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libverto@0.3.2-2.el8?arch=x86_64&upstream=libverto-0.3.2-2.el8.src.rpm&distro=ol-8.7&package-id=6b382e0882feb5c3", + "publisher": "Oracle America", + "name": "libverto", + "version": "0.3.2-2.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libverto:0.3.2-2.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libverto@0.3.2-2.el8?arch=x86_64&upstream=libverto-0.3.2-2.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libxcrypt@4.1.1-6.el8?arch=x86_64&upstream=libxcrypt-4.1.1-6.el8.src.rpm&distro=ol-8.7&package-id=e91ea013c4fb9f33", + "publisher": "Oracle America", + "name": "libxcrypt", + "version": "4.1.1-6.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+ and BSD and Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libxcrypt:4.1.1-6.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libxcrypt@4.1.1-6.el8?arch=x86_64&upstream=libxcrypt-4.1.1-6.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libxml2@2.9.7-15.el8_7.1?arch=x86_64&upstream=libxml2-2.9.7-15.el8_7.1.src.rpm&distro=ol-8.7&package-id=500ca92c011313ee", + "publisher": "Oracle America", + "name": "libxml2", + "version": "2.9.7-15.el8_7.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libxml2:2.9.7-15.el8_7.1:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libxml2@2.9.7-15.el8_7.1?arch=x86_64&upstream=libxml2-2.9.7-15.el8_7.1.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libyaml@0.1.7-5.el8?arch=x86_64&upstream=libyaml-0.1.7-5.el8.src.rpm&distro=ol-8.7&package-id=4b5582801a6068fa", + "publisher": "Oracle America", + "name": "libyaml", + "version": "0.1.7-5.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libyaml:0.1.7-5.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libyaml@0.1.7-5.el8?arch=x86_64&upstream=libyaml-0.1.7-5.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/libzstd@1.4.4-1.0.1.el8?arch=x86_64&upstream=zstd-1.4.4-1.0.1.el8.src.rpm&distro=ol-8.7&package-id=a0e95baed275968a", + "publisher": "Oracle America", + "name": "libzstd", + "version": "1.4.4-1.0.1.el8", + "licenses": [ + { + "license": { + "name": "BSD and GPLv2" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:libzstd:1.4.4-1.0.1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/libzstd@1.4.4-1.0.1.el8?arch=x86_64&upstream=zstd-1.4.4-1.0.1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/lua-libs@5.3.4-12.el8?arch=x86_64&upstream=lua-5.3.4-12.el8.src.rpm&distro=ol-8.7&package-id=c37eda33497510c1", + "publisher": "Oracle America", + "name": "lua-libs", + "version": "5.3.4-12.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:lua-libs:5.3.4-12.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/lua-libs@5.3.4-12.el8?arch=x86_64&upstream=lua-5.3.4-12.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/lz4-libs@1.8.3-3.el8_4?arch=x86_64&upstream=lz4-1.8.3-3.el8_4.src.rpm&distro=ol-8.7&package-id=be86401f2c718b8d", + "publisher": "Oracle America", + "name": "lz4-libs", + "version": "1.8.3-3.el8_4", + "licenses": [ + { + "license": { + "name": "GPLv2+ and BSD" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:lz4-libs:1.8.3-3.el8_4:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/lz4-libs@1.8.3-3.el8_4?arch=x86_64&upstream=lz4-1.8.3-3.el8_4.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/microdnf@3.8.0-2.el8?arch=x86_64&upstream=microdnf-3.8.0-2.el8.src.rpm&distro=ol-8.7&package-id=9c575ad34c969036", + "publisher": "Oracle America", + "name": "microdnf", + "version": "3.8.0-2.el8", + "licenses": [ + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:microdnf:3.8.0-2.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/microdnf@3.8.0-2.el8?arch=x86_64&upstream=microdnf-3.8.0-2.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/mpfr@3.1.6-1.el8?arch=x86_64&upstream=mpfr-3.1.6-1.el8.src.rpm&distro=ol-8.7&package-id=bd41794f5f68c1f1", + "publisher": "Oracle America", + "name": "mpfr", + "version": "3.1.6-1.el8", + "licenses": [ + { + "license": { + "name": "LGPLv3+ and GPLv3+ and GFDL" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:mpfr:3.1.6-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/mpfr@3.1.6-1.el8?arch=x86_64&upstream=mpfr-3.1.6-1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/mysql-community-server-minimal@8.0.33-1.el8?arch=x86_64&upstream=mysql-community-minimal-8.0.33-1.el8.src.rpm&distro=ol-8.7&package-id=d8d79cfe19830b75", + "publisher": "Oracle and/or its affiliates", + "name": "mysql-community-server-minimal", + "version": "8.0.33-1.el8", + "licenses": [ + { + "license": { + "name": "Copyright (c) 2000, 2023, Oracle and/or its affiliates. Under GPLv2 license as shown in the Description field." + } + } + ], + "cpe": "cpe:2.3:a:mysql-community-server-minimal:mysql-community-server-minimal:8.0.33-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/mysql-community-server-minimal@8.0.33-1.el8?arch=x86_64&upstream=mysql-community-minimal-8.0.33-1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/mysql-shell@8.0.33-1.el8?arch=x86_64&upstream=mysql-shell-8.0.33-1.el8.src.rpm&distro=ol-8.7&package-id=857236a38e621f4f", + "name": "mysql-shell", + "version": "8.0.33-1.el8", + "licenses": [ + { + "license": { + "name": "GPLv2" + } + } + ], + "cpe": "cpe:2.3:a:mysql-shell:mysql-shell:8.0.33-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/mysql-shell@8.0.33-1.el8?arch=x86_64&upstream=mysql-shell-8.0.33-1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/ncurses-base@6.1-9.20180224.el8?arch=noarch&upstream=ncurses-6.1-9.20180224.el8.src.rpm&distro=ol-8.7&package-id=472d1235a72f8987", + "publisher": "Oracle America", + "name": "ncurses-base", + "version": "6.1-9.20180224.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:ncurses-base:6.1-9.20180224.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/ncurses-base@6.1-9.20180224.el8?arch=noarch&upstream=ncurses-6.1-9.20180224.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/ncurses-libs@6.1-9.20180224.el8?arch=x86_64&upstream=ncurses-6.1-9.20180224.el8.src.rpm&distro=ol-8.7&package-id=ca1f9d1000109598", + "publisher": "Oracle America", + "name": "ncurses-libs", + "version": "6.1-9.20180224.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:ncurses-libs:6.1-9.20180224.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/ncurses-libs@6.1-9.20180224.el8?arch=x86_64&upstream=ncurses-6.1-9.20180224.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/nettle@3.4.1-7.el8?arch=x86_64&upstream=nettle-3.4.1-7.el8.src.rpm&distro=ol-8.7&package-id=957b73d7046982e1", + "publisher": "Oracle America", + "name": "nettle", + "version": "3.4.1-7.el8", + "licenses": [ + { + "license": { + "name": "LGPLv3+ or GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:nettle:3.4.1-7.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/nettle@3.4.1-7.el8?arch=x86_64&upstream=nettle-3.4.1-7.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/npth@1.5-4.el8?arch=x86_64&upstream=npth-1.5-4.el8.src.rpm&distro=ol-8.7&package-id=6a18d496b862d465", + "publisher": "Oracle America", + "name": "npth", + "version": "1.5-4.el8", + "licenses": [ + { + "license": { + "name": "LGPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:npth:1.5-4.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/npth@1.5-4.el8?arch=x86_64&upstream=npth-1.5-4.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/oci@2.90.2?package-id=5613828303c541bf", + "author": "Oracle ", + "name": "oci", + "version": "2.90.2", + "licenses": [ + { + "license": { + "name": "Universal Permissive License 1.0 or Apache License 2.0" + } + } + ], + "cpe": "cpe:2.3:a:joe_levy_project:python-oci:2.90.2:*:*:*:*:*:*:*", + "purl": "pkg:pypi/oci@2.90.2", + "externalReferences": [ + { + "url": "file:///var/lib/pb2/sb_1-10866539-1679468854.52/workdir/cache/wheels/ae/b9/d5/f4e02150fe72eb4a3a498b88a7c1b710698297308782982c60/oci-2.90.2-py2.py3-none-any.whl", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/openldap@2.4.46-18.el8?arch=x86_64&upstream=openldap-2.4.46-18.el8.src.rpm&distro=ol-8.7&package-id=16036542ca1d4138", + "publisher": "Oracle America", + "name": "openldap", + "version": "2.4.46-18.el8", + "licenses": [ + { + "license": { + "name": "OpenLDAP" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:openldap:2.4.46-18.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/openldap@2.4.46-18.el8?arch=x86_64&upstream=openldap-2.4.46-18.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/openssl@1.1.1k-9.el8_7?arch=x86_64&epoch=1&upstream=openssl-1.1.1k-9.el8_7.src.rpm&distro=ol-8.7&package-id=d3f79ca423d643e3", + "publisher": "Oracle America", + "name": "openssl", + "version": "1:1.1.1k-9.el8_7", + "licenses": [ + { + "license": { + "name": "OpenSSL and ASL 2.0" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:openssl:1\\:1.1.1k-9.el8_7:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/openssl@1.1.1k-9.el8_7?arch=x86_64&epoch=1&upstream=openssl-1.1.1k-9.el8_7.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/openssl-libs@1.1.1k-9.el8_7?arch=x86_64&epoch=1&upstream=openssl-1.1.1k-9.el8_7.src.rpm&distro=ol-8.7&package-id=6c3510e13fd97d1b", + "publisher": "Oracle America", + "name": "openssl-libs", + "version": "1:1.1.1k-9.el8_7", + "licenses": [ + { + "license": { + "name": "OpenSSL and ASL 2.0" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:openssl-libs:1\\:1.1.1k-9.el8_7:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/openssl-libs@1.1.1k-9.el8_7?arch=x86_64&epoch=1&upstream=openssl-1.1.1k-9.el8_7.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/oraclelinux-release@8.7-1.0.6.el8?arch=x86_64&epoch=8&upstream=oraclelinux-release-8.7-1.0.6.el8.src.rpm&distro=ol-8.7&package-id=565cf53eae1d4083", + "publisher": "Oracle America", + "name": "oraclelinux-release", + "version": "8:8.7-1.0.6.el8", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:oraclelinux-release:oraclelinux-release:8\\:8.7-1.0.6.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/oraclelinux-release@8.7-1.0.6.el8?arch=x86_64&epoch=8&upstream=oraclelinux-release-8.7-1.0.6.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/oraclelinux-release-el8@1.0-28.el8?arch=x86_64&upstream=oraclelinux-release-el8-1.0-28.el8.src.rpm&distro=ol-8.7&package-id=c9b289ea3be674f1", + "publisher": "Oracle America", + "name": "oraclelinux-release-el8", + "version": "1.0-28.el8", + "licenses": [ + { + "license": { + "name": "GPLv2" + } + } + ], + "cpe": "cpe:2.3:a:oraclelinux-release-el8:oraclelinux-release-el8:1.0-28.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/oraclelinux-release-el8@1.0-28.el8?arch=x86_64&upstream=oraclelinux-release-el8-1.0-28.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/p11-kit@0.23.22-1.el8?arch=x86_64&upstream=p11-kit-0.23.22-1.el8.src.rpm&distro=ol-8.7&package-id=4479333660e38f31", + "publisher": "Oracle America", + "name": "p11-kit", + "version": "0.23.22-1.el8", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:p11-kit:0.23.22-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/p11-kit@0.23.22-1.el8?arch=x86_64&upstream=p11-kit-0.23.22-1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/p11-kit-trust@0.23.22-1.el8?arch=x86_64&upstream=p11-kit-0.23.22-1.el8.src.rpm&distro=ol-8.7&package-id=2e85f931f211b34a", + "publisher": "Oracle America", + "name": "p11-kit-trust", + "version": "0.23.22-1.el8", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:p11-kit-trust:0.23.22-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/p11-kit-trust@0.23.22-1.el8?arch=x86_64&upstream=p11-kit-0.23.22-1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/paramiko@2.11.0?package-id=21e0517702bc0916", + "author": "Jeff Forcier ", + "name": "paramiko", + "version": "2.11.0", + "licenses": [ + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:jeff_forcier_project:python-paramiko:2.11.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/paramiko@2.11.0", + "externalReferences": [ + { + "url": "file:///var/lib/pb2/sb_1-10866539-1679468854.52/workdir/cache/wheels/2c/d7/e5/2ec6bec7d1fb4a0210da4f1351f5be832a0309dbe7b6cdb69f/paramiko-2.11.0-py2.py3-none-any.whl", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/pcre@8.42-6.el8?arch=x86_64&upstream=pcre-8.42-6.el8.src.rpm&distro=ol-8.7&package-id=daf362191df22d01", + "publisher": "Oracle America", + "name": "pcre", + "version": "8.42-6.el8", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:pcre:8.42-6.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/pcre@8.42-6.el8?arch=x86_64&upstream=pcre-8.42-6.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/pcre2@10.32-3.el8_6?arch=x86_64&upstream=pcre2-10.32-3.el8_6.src.rpm&distro=ol-8.7&package-id=70339746572b0789", + "publisher": "Oracle America", + "name": "pcre2", + "version": "10.32-3.el8_6", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:pcre2:10.32-3.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/pcre2@10.32-3.el8_6?arch=x86_64&upstream=pcre2-10.32-3.el8_6.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pip@20.2.4?package-id=9f4fb97730eff790", + "author": "The pip developers ", + "name": "pip", + "version": "20.2.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pip_developers_project:python-pip:20.2.4:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pip@20.2.4" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/popt@1.18-1.el8?arch=x86_64&upstream=popt-1.18-1.el8.src.rpm&distro=ol-8.7&package-id=11dad195e8f044bb", + "publisher": "Oracle America", + "name": "popt", + "version": "1.18-1.el8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:popt:1.18-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/popt@1.18-1.el8?arch=x86_64&upstream=popt-1.18-1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/publicsuffix-list-dafsa@20180723-1.el8?arch=noarch&upstream=publicsuffix-list-20180723-1.el8.src.rpm&distro=ol-8.7&package-id=8b83ee6c7ce59ffb", + "publisher": "Oracle America", + "name": "publicsuffix-list-dafsa", + "version": "20180723-1.el8", + "licenses": [ + { + "license": { + "name": "MPLv2.0" + } + } + ], + "cpe": "cpe:2.3:a:publicsuffix-list-dafsa:publicsuffix-list-dafsa:20180723-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/publicsuffix-list-dafsa@20180723-1.el8?arch=noarch&upstream=publicsuffix-list-20180723-1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pyopenssl@22.1.0?package-id=87e045a78914624a", + "author": "The pyOpenSSL developers ", + "name": "pyOpenSSL", + "version": "22.1.0", + "licenses": [ + { + "license": { + "name": "Apache License, Version 2.0" + } + } + ], + "cpe": "cpe:2.3:a:pyopenssl_developers_project:python-pyOpenSSL:22.1.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pyOpenSSL@22.1.0", + "externalReferences": [ + { + "url": "file:///var/lib/pb2/sb_1-10866539-1679468854.52/workdir/cache/wheels/ac/f7/26/1ba45f8cd29b474d7690287c4d2874df6cc3f8c032750e8b52/pyOpenSSL-22.1.0-py3-none-any.whl", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pycparser@2.21?package-id=ab21419f0cb124ef", + "author": "Eli Bendersky ", + "name": "pycparser", + "version": "2.21", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:eli_bendersky_project:python-pycparser:2.21:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pycparser@2.21", + "externalReferences": [ + { + "url": "file:///var/lib/pb2/sb_1-10866539-1679468854.52/workdir/cache/wheels/25/4d/3e/18277469ffdbb7d91cf12f8cb58f69be429e1fa8c1443493ed/pycparser-2.21-py2.py3-none-any.whl", + "type": "vcs" + } + ] + }, + { + "type": "application", + "bom-ref": "pkg:generic/python@3.9.13?package-id=a8d7190987c6e1c1", + "name": "python", + "version": "3.9.13", + "cpe": "cpe:2.3:a:python_software_foundation:python:3.9.13:*:*:*:*:*:*:*", + "purl": "pkg:generic/python@3.9.13" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/python-dateutil@2.8.2?package-id=cce32312149a9e3b", + "author": "Gustavo Niemeyer ", + "name": "python-dateutil", + "version": "2.8.2", + "licenses": [ + { + "license": { + "name": "Dual License" + } + } + ], + "cpe": "cpe:2.3:a:gustavo_niemeyer_project:python-dateutil:2.8.2:*:*:*:*:*:*:*", + "purl": "pkg:pypi/python-dateutil@2.8.2", + "externalReferences": [ + { + "url": "file:///var/lib/pb2/sb_1-10866539-1679468854.52/workdir/cache/wheels/60/2e/f5/a018dabdf32658543060730e246fa03a24b41db63e7c4ed8a4/python_dateutil-2.8.2-py2.py3-none-any.whl", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/python39@3.9.13-2.module+el8.7.0+20879+a85b87b0?arch=x86_64&upstream=python39-3.9.13-2.module+el8.7.0+20879+a85b87b0.src.rpm&distro=ol-8.7&package-id=70659ab06fa85e0", + "publisher": "Oracle America", + "name": "python39", + "version": "3.9.13-2.module+el8.7.0+20879+a85b87b0", + "licenses": [ + { + "license": { + "name": "Python" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:python39:3.9.13-2.module\\+el8.7.0\\+20879\\+a85b87b0:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/python39@3.9.13-2.module+el8.7.0+20879+a85b87b0?arch=x86_64&upstream=python39-3.9.13-2.module+el8.7.0+20879+a85b87b0.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/python39-libs@3.9.13-2.module+el8.7.0+20879+a85b87b0?arch=x86_64&upstream=python39-3.9.13-2.module+el8.7.0+20879+a85b87b0.src.rpm&distro=ol-8.7&package-id=f3922b0b0b3c7316", + "publisher": "Oracle America", + "name": "python39-libs", + "version": "3.9.13-2.module+el8.7.0+20879+a85b87b0", + "licenses": [ + { + "license": { + "name": "Python" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:python39-libs:3.9.13-2.module\\+el8.7.0\\+20879\\+a85b87b0:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/python39-libs@3.9.13-2.module+el8.7.0+20879+a85b87b0?arch=x86_64&upstream=python39-3.9.13-2.module+el8.7.0+20879+a85b87b0.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/python39-pip@20.2.4-7.module+el8.6.0+20625+ee813db2?arch=noarch&upstream=python3x-pip-20.2.4-7.module+el8.6.0+20625+ee813db2.src.rpm&distro=ol-8.7&package-id=e55991233c680d8d", + "publisher": "Oracle America", + "name": "python39-pip", + "version": "20.2.4-7.module+el8.6.0+20625+ee813db2", + "licenses": [ + { + "license": { + "name": "MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:python39-pip:20.2.4-7.module\\+el8.6.0\\+20625\\+ee813db2:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/python39-pip@20.2.4-7.module+el8.6.0+20625+ee813db2?arch=noarch&upstream=python3x-pip-20.2.4-7.module+el8.6.0+20625+ee813db2.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/python39-pip-wheel@20.2.4-7.module+el8.6.0+20625+ee813db2?arch=noarch&upstream=python3x-pip-20.2.4-7.module+el8.6.0+20625+ee813db2.src.rpm&distro=ol-8.7&package-id=bc1784baa6ce6064", + "publisher": "Oracle America", + "name": "python39-pip-wheel", + "version": "20.2.4-7.module+el8.6.0+20625+ee813db2", + "licenses": [ + { + "license": { + "name": "MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)" + } + } + ], + "cpe": "cpe:2.3:a:python39-pip-wheel:python39-pip-wheel:20.2.4-7.module\\+el8.6.0\\+20625\\+ee813db2:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/python39-pip-wheel@20.2.4-7.module+el8.6.0+20625+ee813db2?arch=noarch&upstream=python3x-pip-20.2.4-7.module+el8.6.0+20625+ee813db2.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/python39-setuptools@50.3.2-4.module+el8.5.0+20364+c7fe1181?arch=noarch&upstream=python3x-setuptools-50.3.2-4.module+el8.5.0+20364+c7fe1181.src.rpm&distro=ol-8.7&package-id=45e36d78301d04ae", + "publisher": "Oracle America", + "name": "python39-setuptools", + "version": "50.3.2-4.module+el8.5.0+20364+c7fe1181", + "licenses": [ + { + "license": { + "name": "MIT and (BSD or ASL 2.0)" + } + } + ], + "cpe": "cpe:2.3:a:python39-setuptools:python39-setuptools:50.3.2-4.module\\+el8.5.0\\+20364\\+c7fe1181:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/python39-setuptools@50.3.2-4.module+el8.5.0+20364+c7fe1181?arch=noarch&upstream=python3x-setuptools-50.3.2-4.module+el8.5.0+20364+c7fe1181.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/python39-setuptools-wheel@50.3.2-4.module+el8.5.0+20364+c7fe1181?arch=noarch&upstream=python3x-setuptools-50.3.2-4.module+el8.5.0+20364+c7fe1181.src.rpm&distro=ol-8.7&package-id=d8e0aae00d12b93f", + "publisher": "Oracle America", + "name": "python39-setuptools-wheel", + "version": "50.3.2-4.module+el8.5.0+20364+c7fe1181", + "licenses": [ + { + "license": { + "name": "MIT and (BSD or ASL 2.0)" + } + } + ], + "cpe": "cpe:2.3:a:python39-setuptools-wheel:python39-setuptools-wheel:50.3.2-4.module\\+el8.5.0\\+20364\\+c7fe1181:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/python39-setuptools-wheel@50.3.2-4.module+el8.5.0+20364+c7fe1181?arch=noarch&upstream=python3x-setuptools-50.3.2-4.module+el8.5.0+20364+c7fe1181.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pytz@2022.7.1?package-id=6dcad9fac9ee238e", + "author": "Stuart Bishop ", + "name": "pytz", + "version": "2022.7.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stuart_bishop_project:python-pytz:2022.7.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pytz@2022.7.1", + "externalReferences": [ + { + "url": "file:///var/lib/pb2/sb_1-10866539-1679468854.52/workdir/cache/wheels/60/f7/41/190ae491adea3f866dbb51eaca6c8ed8c436c0791a44094027/pytz-2022.7.1-py3-none-any.whl", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/readline@7.0-10.el8?arch=x86_64&upstream=readline-7.0-10.el8.src.rpm&distro=ol-8.7&package-id=d14cbfeb7aa11f0", + "publisher": "Oracle America", + "name": "readline", + "version": "7.0-10.el8", + "licenses": [ + { + "license": { + "name": "GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:readline:7.0-10.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/readline@7.0-10.el8?arch=x86_64&upstream=readline-7.0-10.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/redhat-release@8.7-0.3.0.1.el8?arch=x86_64&epoch=2&upstream=redhat-release-8.7-0.3.0.1.el8.src.rpm&distro=ol-8.7&package-id=abf8958baac35f9a", + "publisher": "Oracle America", + "name": "redhat-release", + "version": "2:8.7-0.3.0.1.el8", + "licenses": [ + { + "license": { + "name": "GPLv2" + } + } + ], + "cpe": "cpe:2.3:a:redhat-release:redhat-release:2\\:8.7-0.3.0.1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/redhat-release@8.7-0.3.0.1.el8?arch=x86_64&epoch=2&upstream=redhat-release-8.7-0.3.0.1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/rpm@4.14.3-24.el8_7?arch=x86_64&upstream=rpm-4.14.3-24.el8_7.src.rpm&distro=ol-8.7&package-id=123a2bc82c27aedc", + "publisher": "Oracle America", + "name": "rpm", + "version": "4.14.3-24.el8_7", + "licenses": [ + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:rpm:4.14.3-24.el8_7:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/rpm@4.14.3-24.el8_7?arch=x86_64&upstream=rpm-4.14.3-24.el8_7.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/rpm-libs@4.14.3-24.el8_7?arch=x86_64&upstream=rpm-4.14.3-24.el8_7.src.rpm&distro=ol-8.7&package-id=beeb757503028b29", + "publisher": "Oracle America", + "name": "rpm-libs", + "version": "4.14.3-24.el8_7", + "licenses": [ + { + "license": { + "name": "GPLv2+ and LGPLv2+ with exceptions" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:rpm-libs:4.14.3-24.el8_7:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/rpm-libs@4.14.3-24.el8_7?arch=x86_64&upstream=rpm-4.14.3-24.el8_7.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/sed@4.5-5.el8?arch=x86_64&upstream=sed-4.5-5.el8.src.rpm&distro=ol-8.7&package-id=11fa6095ad0bf98a", + "publisher": "Oracle America", + "name": "sed", + "version": "4.5-5.el8", + "licenses": [ + { + "license": { + "name": "GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:sed:4.5-5.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/sed@4.5-5.el8?arch=x86_64&upstream=sed-4.5-5.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/setup@2.12.2-7.el8?arch=noarch&upstream=setup-2.12.2-7.el8.src.rpm&distro=ol-8.7&package-id=8d6dc6de2fa84f88", + "publisher": "Oracle America", + "name": "setup", + "version": "2.12.2-7.el8", + "licenses": [ + { + "license": { + "name": "Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:setup:2.12.2-7.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/setup@2.12.2-7.el8?arch=noarch&upstream=setup-2.12.2-7.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/setuptools@50.3.2?package-id=7e493d729111ea48", + "author": "Python Packaging Authority ", + "name": "setuptools", + "version": "50.3.2", + "licenses": [ + { + "license": { + "name": "UNKNOWN" + } + } + ], + "cpe": "cpe:2.3:a:python_packaging_authority_project:python-setuptools:50.3.2:*:*:*:*:*:*:*", + "purl": "pkg:pypi/setuptools@50.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/shadow-utils@4.6-17.el8?arch=x86_64&epoch=2&upstream=shadow-utils-4.6-17.el8.src.rpm&distro=ol-8.7&package-id=4d525b5700d8c2d0", + "publisher": "Oracle America", + "name": "shadow-utils", + "version": "2:4.6-17.el8", + "licenses": [ + { + "license": { + "name": "BSD and GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:shadow-utils:2\\:4.6-17.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/shadow-utils@4.6-17.el8?arch=x86_64&epoch=2&upstream=shadow-utils-4.6-17.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/six@1.16.0?package-id=5cca85e19738e858", + "author": "Benjamin Peterson ", + "name": "six", + "version": "1.16.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:benjamin_peterson_project:python-six:1.16.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/six@1.16.0", + "externalReferences": [ + { + "url": "file:///var/lib/pb2/sb_1-10866539-1679468854.52/workdir/cache/wheels/0d/b1/8d/6e1174b514b0582907d2a8c31d4ad28a1d0852ac79265617a6/six-1.16.0-py2.py3-none-any.whl", + "type": "vcs" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/sqlite-libs@3.26.0-17.el8_7?arch=x86_64&upstream=sqlite-3.26.0-17.el8_7.src.rpm&distro=ol-8.7&package-id=385ef50a325d1018", + "publisher": "Oracle America", + "name": "sqlite-libs", + "version": "3.26.0-17.el8_7", + "licenses": [ + { + "license": { + "name": "Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:sqlite-libs:3.26.0-17.el8_7:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/sqlite-libs@3.26.0-17.el8_7?arch=x86_64&upstream=sqlite-3.26.0-17.el8_7.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/systemd-libs@239-68.0.2.el8_7.4?arch=x86_64&upstream=systemd-239-68.0.2.el8_7.4.src.rpm&distro=ol-8.7&package-id=9dd1e178fb91163", + "publisher": "Oracle America", + "name": "systemd-libs", + "version": "239-68.0.2.el8_7.4", + "licenses": [ + { + "license": { + "name": "LGPLv2+ and MIT" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:systemd-libs:239-68.0.2.el8_7.4:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/systemd-libs@239-68.0.2.el8_7.4?arch=x86_64&upstream=systemd-239-68.0.2.el8_7.4.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/tar@1.30-6.el8_7.1?arch=x86_64&epoch=2&upstream=tar-1.30-6.el8_7.1.src.rpm&distro=ol-8.7&package-id=bd4a8fafe7ceb5fd", + "publisher": "Oracle America", + "name": "tar", + "version": "2:1.30-6.el8_7.1", + "licenses": [ + { + "license": { + "name": "GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:tar:2\\:1.30-6.el8_7.1:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/tar@1.30-6.el8_7.1?arch=x86_64&epoch=2&upstream=tar-1.30-6.el8_7.1.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/tzdata@2023c-1.el8?arch=noarch&upstream=tzdata-2023c-1.el8.src.rpm&distro=ol-8.7&package-id=77bc22ad98bc0cd6", + "publisher": "Oracle America", + "name": "tzdata", + "version": "2023c-1.el8", + "licenses": [ + { + "license": { + "name": "Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:tzdata:2023c-1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/tzdata@2023c-1.el8?arch=noarch&upstream=tzdata-2023c-1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/xz@5.2.4-4.el8_6?arch=x86_64&upstream=xz-5.2.4-4.el8_6.src.rpm&distro=ol-8.7&package-id=f0b4af1378e0a971", + "publisher": "Oracle America", + "name": "xz", + "version": "5.2.4-4.el8_6", + "licenses": [ + { + "license": { + "name": "GPLv2+ and Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:xz:5.2.4-4.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/xz@5.2.4-4.el8_6?arch=x86_64&upstream=xz-5.2.4-4.el8_6.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/xz-libs@5.2.4-4.el8_6?arch=x86_64&upstream=xz-5.2.4-4.el8_6.src.rpm&distro=ol-8.7&package-id=11e2b6636c8e566f", + "publisher": "Oracle America", + "name": "xz-libs", + "version": "5.2.4-4.el8_6", + "licenses": [ + { + "license": { + "name": "Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:xz-libs:5.2.4-4.el8_6:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/xz-libs@5.2.4-4.el8_6?arch=x86_64&upstream=xz-5.2.4-4.el8_6.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/zlib@1.2.11-21.el8_7?arch=x86_64&upstream=zlib-1.2.11-21.el8_7.src.rpm&distro=ol-8.7&package-id=9e29c03d605a517", + "publisher": "Oracle America", + "name": "zlib", + "version": "1.2.11-21.el8_7", + "licenses": [ + { + "license": { + "name": "zlib and Boost" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:zlib:1.2.11-21.el8_7:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/zlib@1.2.11-21.el8_7?arch=x86_64&upstream=zlib-1.2.11-21.el8_7.src.rpm&distro=ol-8.7" + }, + { + "type": "library", + "bom-ref": "pkg:rpm/ol/zstd@1.4.4-1.0.1.el8?arch=x86_64&upstream=zstd-1.4.4-1.0.1.el8.src.rpm&distro=ol-8.7&package-id=484a99a19892d833", + "publisher": "Oracle America", + "name": "zstd", + "version": "1.4.4-1.0.1.el8", + "licenses": [ + { + "license": { + "name": "BSD and GPLv2" + } + } + ], + "cpe": "cpe:2.3:a:oracleamerica:zstd:1.4.4-1.0.1.el8:*:*:*:*:*:*:*", + "purl": "pkg:rpm/ol/zstd@1.4.4-1.0.1.el8?arch=x86_64&upstream=zstd-1.4.4-1.0.1.el8.src.rpm&distro=ol-8.7" + }, + { + "type": "operating-system", + "name": "ol", + "version": "8.7", + "description": "Oracle Linux Server 8.7", + "cpe": "cpe:2.3:o:oracle:linux:8:7:server:*:*:*:*:*", + "swid": { + "tagId": "ol", + "name": "ol", + "version": "8.7" + }, + "externalReferences": [ + { + "url": "https://bugzilla.oracle.com/", + "type": "issue-tracker" + }, + { + "url": "https://linux.oracle.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.1.0-r0?arch=x86_64&distro=alpine-3.8.4&package-id=e56f802bf50c3ebc", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.1.0-r0", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.1.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.1.0-r0?arch=x86_64&distro=alpine-3.8.4", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.1-r1?arch=x86_64&distro=alpine-3.8.4&package-id=b4351671de76187a", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.1-r1", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.1-r1?arch=x86_64&distro=alpine-3.8.4", + "externalReferences": [ + { + "url": "http://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.10.1-r0?arch=x86_64&distro=alpine-3.8.4&package-id=e3a82a72fffc0cef", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.10.1-r0", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.10.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.10.1-r0?arch=x86_64&distro=alpine-3.8.4", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/apk-tools/", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "dec3f65e3de0551c", + "name": "busybox", + "version": "1.28.4", + "cpe": "cpe:2.3:a:busybox:busybox:1.28.4:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.28.4-r3?arch=x86_64&distro=alpine-3.8.4&package-id=fb08fd4ae3bd1b14", + "publisher": "Natanael Copa ", + "name": "busybox", + "version": "1.28.4-r3", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.28.4-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.28.4-r3?arch=x86_64&distro=alpine-3.8.4", + "externalReferences": [ + { + "url": "http://busybox.net", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/iptables@1.6.2-r0?arch=x86_64&distro=alpine-3.8.4&package-id=dfe40eb2abdb26eb", + "publisher": "Natanael Copa ", + "name": "iptables", + "version": "1.6.2-r0", + "description": "Linux kernel firewall, NAT and packet mangling tools", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:iptables:iptables:1.6.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/iptables@1.6.2-r0?arch=x86_64&distro=alpine-3.8.4", + "externalReferences": [ + { + "url": "http://www.netfilter.org/projects/iptables/index.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/jansson@2.11-r0?arch=x86_64&distro=alpine-3.8.4&package-id=36cff64285183ba9", + "publisher": "Natanael Copa ", + "name": "jansson", + "version": "2.11-r0", + "description": "lightweight JSON library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jansson:jansson:2.11-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/jansson@2.11-r0?arch=x86_64&distro=alpine-3.8.4", + "externalReferences": [ + { + "url": "http://www.digip.org/jansson/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.1-r0?arch=x86_64&upstream=libc-dev&distro=alpine-3.8.4&package-id=3bb228b328e73aaa", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.1-r0", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.1-r0?arch=x86_64&upstream=libc-dev&distro=alpine-3.8.4", + "externalReferences": [ + { + "url": "http://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libmnl@1.0.4-r0?arch=x86_64&distro=alpine-3.8.4&package-id=adf77cd7d691a4a3", + "publisher": "Francesco Colista ", + "name": "libmnl", + "version": "1.0.4-r0", + "description": "Library for minimalistic netlink", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libmnl:libmnl:1.0.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libmnl@1.0.4-r0?arch=x86_64&distro=alpine-3.8.4", + "externalReferences": [ + { + "url": "http://www.netfilter.org/projects/libmnl/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libnftnl-libs@1.1.1-r0?arch=x86_64&upstream=libnftnl&distro=alpine-3.8.4&package-id=24060b5e43a280f0", + "publisher": "Sören Tempel ", + "name": "libnftnl-libs", + "version": "1.1.1-r0", + "description": "Netfilter library providing interface to the nf_tables subsystem (libraries)", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libnftnl-libs:libnftnl-libs:1.1.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libnftnl-libs@1.1.1-r0?arch=x86_64&upstream=libnftnl&distro=alpine-3.8.4", + "externalReferences": [ + { + "url": "https://netfilter.org/projects/libnftnl", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libressl2.7-libcrypto@2.7.5-r0?arch=x86_64&upstream=libressl&distro=alpine-3.8.4&package-id=5146260aae7c273", + "publisher": "Orion ", + "name": "libressl2.7-libcrypto", + "version": "2.7.5-r0", + "description": "libressl libcrypto library", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libressl2.7-libcrypto:libressl2.7-libcrypto:2.7.5-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libressl2.7-libcrypto@2.7.5-r0?arch=x86_64&upstream=libressl&distro=alpine-3.8.4", + "externalReferences": [ + { + "url": "https://www.libressl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libressl2.7-libssl@2.7.5-r0?arch=x86_64&upstream=libressl&distro=alpine-3.8.4&package-id=a0d4a5c231780c49", + "publisher": "Orion ", + "name": "libressl2.7-libssl", + "version": "2.7.5-r0", + "description": "libressl libssl library", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libressl2.7-libssl:libressl2.7-libssl:2.7.5-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libressl2.7-libssl@2.7.5-r0?arch=x86_64&upstream=libressl&distro=alpine-3.8.4", + "externalReferences": [ + { + "url": "https://www.libressl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libressl2.7-libtls@2.7.5-r0?arch=x86_64&upstream=libressl&distro=alpine-3.8.4&package-id=4c55afdaf10e2a", + "publisher": "Orion ", + "name": "libressl2.7-libtls", + "version": "2.7.5-r0", + "description": "libressl libtls library", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libressl2.7-libtls:libressl2.7-libtls:2.7.5-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libressl2.7-libtls@2.7.5-r0?arch=x86_64&upstream=libressl&distro=alpine-3.8.4", + "externalReferences": [ + { + "url": "https://www.libressl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.1.19-r10?arch=x86_64&distro=alpine-3.8.4&package-id=b43d3dffedfa0034", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.1.19-r10", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.1.19-r10:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.1.19-r10?arch=x86_64&distro=alpine-3.8.4", + "externalReferences": [ + { + "url": "http://www.musl-libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.1.19-r10?arch=x86_64&upstream=musl&distro=alpine-3.8.4&package-id=a8132acb12c92c11", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.1.19-r10", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.1.19-r10:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.1.19-r10?arch=x86_64&upstream=musl&distro=alpine-3.8.4", + "externalReferences": [ + { + "url": "http://www.musl-libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.2.3-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.8.4&package-id=ef1ed8f4e16adccc", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.2.3-r0", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.2.3-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.2.3-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.8.4", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.28.4-r3?arch=x86_64&upstream=busybox&distro=alpine-3.8.4&package-id=cd5ebd3f135c0c9c", + "publisher": "Natanael Copa ", + "name": "ssl_client", + "version": "1.28.4-r3", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.28.4-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.28.4-r3?arch=x86_64&upstream=busybox&distro=alpine-3.8.4", + "externalReferences": [ + { + "url": "http://busybox.net", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.11-r1?arch=x86_64&distro=alpine-3.8.4&package-id=a42a0fc199f14a0c", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.11-r1", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.11-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.11-r1?arch=x86_64&distro=alpine-3.8.4", + "externalReferences": [ + { + "url": "http://zlib.net", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.8.4", + "description": "Alpine Linux v3.8", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.8.4" + }, + "externalReferences": [ + { + "url": "http://bugs.alpinelinux.org", + "type": "issue-tracker" + }, + { + "url": "http://alpinelinux.org", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/.python-rundeps@20230405.233153?arch=noarch&distro=alpine-3.16.5&package-id=e9dfc81376fa3d93", + "name": ".python-rundeps", + "version": "20230405.233153", + "description": "virtual meta package", + "licenses": [ + { + "license": {} + } + ], + "cpe": "cpe:2.3:a:.python-rundeps:.python-rundeps:20230405.233153:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/.python-rundeps@20230405.233153?arch=noarch&distro=alpine-3.16.5" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/datetime@5.1?package-id=c98b2f849408ee70", + "author": "Zope Foundation and Contributors ", + "name": "DateTime", + "version": "5.1", + "licenses": [ + { + "license": { + "name": "ZPL 2.1" + } + } + ], + "cpe": "cpe:2.3:a:zope_foundation_and_contributors_project:python-DateTime:5.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/DateTime@5.1" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/flask@2.0.2?package-id=168c7508d027efb3", + "author": "Armin Ronacher ", + "name": "Flask", + "version": "2.0.2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:armin_ronacher_project:python-Flask:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:pypi/Flask@2.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/flask-restful@0.3.9?package-id=97e28f1301f3f0f6", + "author": "Twilio API Team ", + "name": "Flask-RESTful", + "version": "0.3.9", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:twilio_api_team_project:python-Flask-RESTful:0.3.9:*:*:*:*:*:*:*", + "purl": "pkg:pypi/Flask-RESTful@0.3.9" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/jinja2@3.1.2?package-id=97594fade9112a12", + "author": "Armin Ronacher ", + "name": "Jinja2", + "version": "3.1.2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:armin_ronacher_project:python-Jinja2:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:pypi/Jinja2@3.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/markupsafe@2.1.2?package-id=994782edc4e3c1ef", + "author": "Armin Ronacher ", + "name": "MarkupSafe", + "version": "2.1.2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:armin_ronacher_project:python-MarkupSafe:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:pypi/MarkupSafe@2.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pynacl@1.5.0?package-id=5d4270bfbe9cd87b", + "author": "The PyNaCl developers ", + "name": "PyNaCl", + "version": "1.5.0", + "licenses": [ + { + "license": { + "name": "Apache License 2.0" + } + } + ], + "cpe": "cpe:2.3:a:pynacl_developers_project:python-PyNaCl:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/PyNaCl@1.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pyyaml@6.0?package-id=e2779300e3649026", + "author": "Kirill Simonov ", + "name": "PyYAML", + "version": "6.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:kirill_simonov_project:python-PyYAML:6.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/PyYAML@6.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/werkzeug@2.2.3?package-id=e1312db9b042abe6", + "author": "Armin Ronacher ", + "name": "Werkzeug", + "version": "2.2.3", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:armin_ronacher_project:python-Werkzeug:2.2.3:*:*:*:*:*:*:*", + "purl": "pkg:pypi/Werkzeug@2.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.2.0-r23?arch=x86_64&distro=alpine-3.16.5&package-id=61eac5ce8105d394", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.2.0-r23", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.2.0-r23:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.2.0-r23?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout-data@3.2.0-r23?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.16.5&package-id=e8c6fcc3a282ed4f", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout-data", + "version": "3.2.0-r23", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.2.0-r23:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout-data@3.2.0-r23?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.16.5&package-id=82d183eb300978cc", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.4-r1", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/aniso8601@9.0.1?package-id=c43f7de45e50a68", + "author": "Brandon Nielsen ", + "name": "aniso8601", + "version": "9.0.1", + "licenses": [ + { + "license": { + "name": "UNKNOWN" + } + } + ], + "cpe": "cpe:2.3:a:brandon_nielsen_project:python-aniso8601:9.0.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/aniso8601@9.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.9-r3?arch=x86_64&distro=alpine-3.16.5&package-id=42d502b764a37310", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.12.9-r3", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.12.9-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.12.9-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/bcrypt@4.0.1?package-id=5e17286c761d6c53", + "author": "The Python Cryptographic Authority developers ", + "name": "bcrypt", + "version": "4.0.1", + "licenses": [ + { + "license": { + "name": "Apache License, Version 2.0" + } + } + ], + "cpe": "cpe:2.3:a:python_cryptographic_authority_developers_project:python-bcrypt:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/bcrypt@4.0.1" + }, + { + "type": "application", + "bom-ref": "e14718c64f5147f4", + "name": "busybox", + "version": "1.35.0", + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=alpine-3.16.5&package-id=4b48ef6f6b983526", + "publisher": "Sören Tempel ", + "name": "busybox", + "version": "1.35.0-r17", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0-r17:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates@20220614-r0?arch=x86_64&distro=alpine-3.16.5&package-id=fbb1924ff870cc71", + "publisher": "Natanael Copa ", + "name": "ca-certificates", + "version": "20220614-r0", + "description": "Common CA certificates PEM files from Mozilla", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20220614-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates@20220614-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20220614-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.16.5&package-id=30622a1848b22bca", + "publisher": "Natanael Copa ", + "name": "ca-certificates-bundle", + "version": "20220614-r0", + "description": "Pre generated bundle of Mozilla certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20220614-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-bundle@20220614-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/certifi@2022.12.7?package-id=8ed6b1902e8d327d", + "author": "Kenneth Reitz ", + "name": "certifi", + "version": "2022.12.7", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:kenneth_reitz_project:python-certifi:2022.12.7:*:*:*:*:*:*:*", + "purl": "pkg:pypi/certifi@2022.12.7" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/cffi@1.15.1?package-id=cfa0bf0d260d6cea", + "author": "Armin Rigo, Maciej Fijalkowski ", + "name": "cffi", + "version": "1.15.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:armin_rigo\\,_maciej_fijalkowski_project:python-cffi:1.15.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/cffi@1.15.1" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/charset-normalizer@3.1.0?package-id=34faaf9d0ad0949a", + "author": "Ahmed TAHRI ", + "name": "charset-normalizer", + "version": "3.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:python-charset-normalizer:python-charset-normalizer:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/charset-normalizer@3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/ciscoconfparse@1.7.18?package-id=becf5390e3d03897", + "author": "Mike Pennington ", + "name": "ciscoconfparse", + "version": "1.7.18", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:mike_pennington_project:python-ciscoconfparse:1.7.18:*:*:*:*:*:*:*", + "purl": "pkg:pypi/ciscoconfparse@1.7.18" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/click@8.1.3?package-id=4f79f04c757ac8c4", + "author": "Armin Ronacher ", + "name": "click", + "version": "8.1.3", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:armin_ronacher_project:python-click:8.1.3:*:*:*:*:*:*:*", + "purl": "pkg:pypi/click@8.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/cryptography@40.0.1?package-id=9c8ef417fdbe8e31", + "author": "The Python Cryptographic Authority and individual contributors ", + "name": "cryptography", + "version": "40.0.1", + "licenses": [ + { + "license": { + "name": "(Apache-2.0 OR BSD-3-Clause) AND PSF-2.0" + } + } + ], + "cpe": "cpe:2.3:a:python_cryptographic_authority_and_individual_contributors_project:python-cryptography:40.0.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/cryptography@40.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/deprecat@2.1.1?package-id=914b179b6f388736", + "author": "Meenal Jhajharia ", + "name": "deprecat", + "version": "2.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:meenal_jhajharia_project:python-deprecat:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/deprecat@2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/dictdiffer@0.9.0?package-id=d89647248de0017e", + "author": "Invenio Collaboration ", + "name": "dictdiffer", + "version": "0.9.0", + "licenses": [ + { + "license": { + "name": "UNKNOWN" + } + } + ], + "cpe": "cpe:2.3:a:invenio_collaboration_project:python-dictdiffer:0.9.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/dictdiffer@0.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/dnspython@2.3.0?package-id=1a2c3a7b6a7e57f3", + "author": "Bob Halley ", + "name": "dnspython", + "version": "2.3.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:bob_halley_project:python-dnspython:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/dnspython@2.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/expat@2.5.0-r0?arch=x86_64&distro=alpine-3.16.5&package-id=473c10d9103a81b0", + "publisher": "Carlo Landmeter ", + "name": "expat", + "version": "2.5.0-r0", + "description": "XML Parser library written in C", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:expat:expat:2.5.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/expat@2.5.0-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://libexpat.github.io/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/future@0.18.3?package-id=e924c380b5788b59", + "author": "Ed Schofield ", + "name": "future", + "version": "0.18.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ed_schofield_project:python-future:0.18.3:*:*:*:*:*:*:*", + "purl": "pkg:pypi/future@0.18.3" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/gdbm@1.23-r0?arch=x86_64&distro=alpine-3.16.5&package-id=5a60c1f034fa6943", + "publisher": "Natanael Copa ", + "name": "gdbm", + "version": "1.23-r0", + "description": "GNU dbm is a set of database routines that use extensible hashing", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:gdbm:gdbm:1.23-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/gdbm@1.23-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/gdbm/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/gunicorn@20.1.0?package-id=24954f5c8ff06380", + "author": "Benoit Chesneau ", + "name": "gunicorn", + "version": "20.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:benoit_chesneau_project:python-gunicorn:20.1.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/gunicorn@20.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/idna@3.4?package-id=8d9319999a190c4e", + "author": "Kim Davies ", + "name": "idna", + "version": "3.4", + "cpe": "cpe:2.3:a:kim_davies_\\, Holger Krekel ", + "name": "iniconfig", + "version": "2.0.0", + "cpe": "cpe:2.3:a:ronny_pfannschmidt_\\", + "name": "itsdangerous", + "version": "2.1.2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:armin_ronacher_project:python-itsdangerous:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:pypi/itsdangerous@2.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/junos-eznc@2.6.7?package-id=3b69d9bcdb015215", + "author": "Jeremy Schulman, Nitin Kumar, Rick Sherman, Stacy Smith ", + "name": "junos-eznc", + "version": "2.6.7", + "licenses": [ + { + "license": { + "name": "Apache 2.0" + } + } + ], + "cpe": "cpe:2.3:a:jeremy_schulman\\,_nitin_kumar\\,_rick_sherman\\,_stacy_smith_project:python-junos-eznc:2.6.7:*:*:*:*:*:*:*", + "purl": "pkg:pypi/junos-eznc@2.6.7" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/keyutils-libs@1.6.3-r1?arch=x86_64&upstream=keyutils&distro=alpine-3.16.5&package-id=8ee597dfe194ab60", + "publisher": "Natanael Copa ", + "name": "keyutils-libs", + "version": "1.6.3-r1", + "description": "Key utilities library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:keyutils-libs:keyutils-libs:1.6.3-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/keyutils-libs@1.6.3-r1?arch=x86_64&upstream=keyutils&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://people.redhat.com/~dhowells/keyutils/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/krb5-conf@1.0-r2?arch=x86_64&distro=alpine-3.16.5&package-id=50afffc56cc7e53", + "publisher": "Natanael Copa ", + "name": "krb5-conf", + "version": "1.0-r2", + "description": "Shared krb5.conf for both MIT krb5 and heimdal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:krb5-conf:krb5-conf:1.0-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/krb5-conf@1.0-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://web.mit.edu/kerberos/www/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/krb5-libs@1.19.4-r0?arch=x86_64&upstream=krb5&distro=alpine-3.16.5&package-id=4cdf917c85417723", + "publisher": "Natanael Copa ", + "name": "krb5-libs", + "version": "1.19.4-r0", + "description": "The shared libraries used by Kerberos 5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:krb5-libs:krb5-libs:1.19.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/krb5-libs@1.19.4-r0?arch=x86_64&upstream=krb5&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://web.mit.edu/kerberos/www/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libbz2@1.0.8-r1?arch=x86_64&upstream=bzip2&distro=alpine-3.16.5&package-id=b681aee18ae0aa50", + "publisher": "Natanael Copa ", + "name": "libbz2", + "version": "1.0.8-r1", + "description": "Shared library for bz2", + "licenses": [ + { + "license": { + "id": "bzip2-1.0.6" + } + } + ], + "cpe": "cpe:2.3:a:libbz2:libbz2:1.0.8-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libbz2@1.0.8-r1?arch=x86_64&upstream=bzip2&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "http://sources.redhat.com/bzip2", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.16.5&package-id=2abd3b45f6fa4702", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r3", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcom_err@1.46.6-r0?arch=x86_64&upstream=e2fsprogs&distro=alpine-3.16.5&package-id=25b329ab3289e91c", + "publisher": "Natanael Copa ", + "name": "libcom_err", + "version": "1.46.6-r0", + "description": "Common error description library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libcom-err:libcom-err:1.46.6-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcom_err@1.46.6-r0?arch=x86_64&upstream=e2fsprogs&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "http://e2fsprogs.sourceforge.net", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5&package-id=13bc051822a24e8d", + "publisher": "Timo Teras ", + "name": "libcrypto1.1", + "version": "1.1.1t-r2", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1t-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libedit@20210910.3.1-r0?arch=x86_64&distro=alpine-3.16.5&package-id=306ebeb39081e8f5", + "publisher": "Drew DeVault ", + "name": "libedit", + "version": "20210910.3.1-r0", + "description": "BSD line editing library", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libedit:libedit:20210910.3.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libedit@20210910.3.1-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.thrysoee.dk/editline", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libffi@3.4.2-r1?arch=x86_64&distro=alpine-3.16.5&package-id=d9c90e0c86210cde", + "publisher": "Natanael Copa ", + "name": "libffi", + "version": "3.4.2-r1", + "description": "portable, high level programming interface to various calling conventions.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libffi:libffi:3.4.2-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libffi@3.4.2-r1?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://sourceware.org/libffi/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libintl@0.21-r2?arch=x86_64&upstream=gettext&distro=alpine-3.16.5&package-id=8a4b8fffbba0af61", + "publisher": "Carlo Landmeter ", + "name": "libintl", + "version": "0.21-r2", + "description": "GNU gettext runtime library", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libintl:libintl:0.21-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libintl@0.21-r2?arch=x86_64&upstream=gettext&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/gettext/gettext.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libnsl@2.0.0-r0?arch=x86_64&distro=alpine-3.16.5&package-id=684ad1c4c0c42987", + "publisher": "Valery Kartel ", + "name": "libnsl", + "version": "2.0.0-r0", + "description": "Public client interface for NIS(YP) and NIS+ in a IPv6 ready version", + "licenses": [ + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:thkukuk:libnsl:2.0.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libnsl@2.0.0-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://github.com/thkukuk/libnsl", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5&package-id=609cb94e63dc06dd", + "publisher": "Timo Teras ", + "name": "libssl1.1", + "version": "1.1.1t-r2", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1t-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libtirpc@1.3.2-r1?arch=x86_64&distro=alpine-3.16.5&package-id=7879d46219520605", + "publisher": "Natanael Copa ", + "name": "libtirpc", + "version": "1.3.2-r1", + "description": "Transport Independent RPC library (SunRPC replacement)", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc:libtirpc:1.3.2-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libtirpc@1.3.2-r1?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://sourceforge.net/projects/libtirpc", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libtirpc-conf@1.3.2-r1?arch=x86_64&upstream=libtirpc&distro=alpine-3.16.5&package-id=2473c071ab562d92", + "publisher": "Natanael Copa ", + "name": "libtirpc-conf", + "version": "1.3.2-r1", + "description": "Configuration files for TI-RPC", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc-conf:libtirpc-conf:1.3.2-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libtirpc-conf@1.3.2-r1?arch=x86_64&upstream=libtirpc&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://sourceforge.net/projects/libtirpc", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libuuid@2.38-r1?arch=x86_64&upstream=util-linux&distro=alpine-3.16.5&package-id=8732526a564c0dca", + "publisher": "Natanael Copa ", + "name": "libuuid", + "version": "2.38-r1", + "description": "DCE compatible Universally Unique Identifier library", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "AND" + } + } + ], + "cpe": "cpe:2.3:a:libuuid:libuuid:2.38-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libuuid@2.38-r1?arch=x86_64&upstream=util-linux&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://git.kernel.org/cgit/utils/util-linux/util-linux.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libverto@0.3.2-r0?arch=x86_64&distro=alpine-3.16.5&package-id=b3642afc50cf09b9", + "publisher": "Francesco Colista ", + "name": "libverto", + "version": "0.3.2-r0", + "description": "Main loop abstraction library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:npmccallum:libverto:0.3.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libverto@0.3.2-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://github.com/npmccallum/libverto", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/loguru@0.6.0?package-id=1f020ceb98fc515d", + "author": "Delgan ", + "name": "loguru", + "version": "0.6.0", + "licenses": [ + { + "license": { + "name": "MIT license" + } + } + ], + "cpe": "cpe:2.3:a:delgan_py_project:python-loguru:0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/loguru@0.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/lxml@4.9.2?package-id=3bf469ca0cb0292c", + "author": "lxml dev team ", + "name": "lxml", + "version": "4.9.2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:lxml_dev_team_project:python-lxml:4.9.2:*:*:*:*:*:*:*", + "purl": "pkg:pypi/lxml@4.9.2" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.2.3-r2?arch=x86_64&distro=alpine-3.16.5&package-id=24c6089b81ca7d19", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.2.3-r2", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.2.3-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.2.3-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.3-r2?arch=x86_64&upstream=musl&distro=alpine-3.16.5&package-id=d33c14d727ae74d1", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.2.3-r2", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.2.3-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.2.3-r2?arch=x86_64&upstream=musl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/napalm@3.3.1?package-id=4915e25f7f2f7086", + "author": "David Barroso, Kirk Byers, Mircea Ulinic ", + "name": "napalm", + "version": "3.3.1", + "licenses": [ + { + "license": { + "name": "Apache 2.0" + } + } + ], + "cpe": "cpe:2.3:a:david_barroso\\,_kirk_byers\\,_mircea_ulinic_project:python-napalm:3.3.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/napalm@3.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/napalm-sros@1.0.0?package-id=e812bfbdc7e04221", + "author": "Nokia", + "name": "napalm-sros", + "version": "1.0.0", + "licenses": [ + { + "license": { + "name": "UNKNOWN" + } + } + ], + "cpe": "cpe:2.3:a:python-napalm-sros:python-napalm-sros:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/napalm-sros@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/ncclient@0.6.13?package-id=b140dd2f97fa242b", + "author": "Shikhar Bhushan, Leonidas Poulopoulos, Ebben Aries, Einar Nilsen-Nygaard ", + "name": "ncclient", + "version": "0.6.13", + "licenses": [ + { + "license": { + "name": "Apache 2.0" + } + } + ], + "cpe": "cpe:2.3:a:shikhar_bhushan\\,_leonidas_poulopoulos\\,_ebben_aries\\,_einar_nilsen_nygaard_project:python-ncclient:0.6.13:*:*:*:*:*:*:*", + "purl": "pkg:pypi/ncclient@0.6.13" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ncurses-libs@6.3_p20220521-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.16.5&package-id=c2bd1192d3d60d2c", + "publisher": "Natanael Copa ", + "name": "ncurses-libs", + "version": "6.3_p20220521-r0", + "description": "Ncurses libraries", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-libs:ncurses-libs:6.3_p20220521-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ncurses-libs@6.3_p20220521-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://invisible-island.net/ncurses/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ncurses-terminfo-base@6.3_p20220521-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.16.5&package-id=28679685d0eccfdc", + "publisher": "Natanael Copa ", + "name": "ncurses-terminfo-base", + "version": "6.3_p20220521-r0", + "description": "Descriptions of common terminals", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-terminfo-base:ncurses-terminfo-base:6.3_p20220521-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ncurses-terminfo-base@6.3_p20220521-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://invisible-island.net/ncurses/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/netaddr@0.8.0?package-id=59d7a4595f698ba9", + "author": "David P. D. Moss, Stefan Nordhausen et al ", + "name": "netaddr", + "version": "0.8.0", + "licenses": [ + { + "license": { + "name": "BSD License" + } + } + ], + "cpe": "cpe:2.3:a:david_p__d__moss\\,_stefan_nordhausen_et_al_project:python-netaddr:0.8.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/netaddr@0.8.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/netmiko@3.4.0?package-id=cfb93ff534049a84", + "author": "Kirk Byers ", + "name": "netmiko", + "version": "3.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:kirk_byers_project:python-netmiko:3.4.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/netmiko@3.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/ntc-templates@3.3.0?package-id=a372be663225eb7e", + "author": "Network to Code ", + "name": "ntc-templates", + "version": "3.3.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:network_to_code_project:python-ntc-templates:3.3.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/ntc-templates@3.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/openssh@9.0_p1-r2?arch=x86_64&distro=alpine-3.16.5&package-id=be35bb8e9f7dd701", + "publisher": "Natanael Copa ", + "name": "openssh", + "version": "9.0_p1-r2", + "description": "Port of OpenBSD's free SSH release", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:openssh:openssh:9.0_p1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/openssh@9.0_p1-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssh.com/portable.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/openssh-client-common@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5&package-id=3fa98e2b8fec2d35", + "publisher": "Natanael Copa ", + "name": "openssh-client-common", + "version": "9.0_p1-r2", + "description": "OpenBSD's SSH client common files", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:openssh-client-common:openssh-client-common:9.0_p1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/openssh-client-common@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssh.com/portable.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/openssh-client-default@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5&package-id=e25c4647c0a314b5", + "publisher": "Natanael Copa ", + "name": "openssh-client-default", + "version": "9.0_p1-r2", + "description": "OpenBSD's SSH client", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:openssh-client-default:openssh-client-default:9.0_p1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/openssh-client-default@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssh.com/portable.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/openssh-keygen@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5&package-id=f68b16c70b1e9cd5", + "publisher": "Natanael Copa ", + "name": "openssh-keygen", + "version": "9.0_p1-r2", + "description": "ssh helper program for generating keys", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:openssh-keygen:openssh-keygen:9.0_p1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/openssh-keygen@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssh.com/portable.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/openssh-server@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5&package-id=c965d48edfd50c41", + "publisher": "Natanael Copa ", + "name": "openssh-server", + "version": "9.0_p1-r2", + "description": "OpenSSH server", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:openssh-server:openssh-server:9.0_p1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/openssh-server@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssh.com/portable.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/openssh-server-common@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5&package-id=28229e04c06729a4", + "publisher": "Natanael Copa ", + "name": "openssh-server-common", + "version": "9.0_p1-r2", + "description": "OpenSSH server configuration files", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:openssh-server-common:openssh-server-common:9.0_p1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/openssh-server-common@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssh.com/portable.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/openssh-sftp-server@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5&package-id=6fe5b21b307e0521", + "publisher": "Natanael Copa ", + "name": "openssh-sftp-server", + "version": "9.0_p1-r2", + "description": "ssh sftp server module", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:openssh-sftp-server:openssh-sftp-server:9.0_p1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/openssh-sftp-server@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssh.com/portable.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/packaging@23.1?package-id=5c5e049735e6f2b5", + "author": "Donald Stufft ", + "name": "packaging", + "version": "23.1", + "cpe": "cpe:2.3:a:donald_stufft_\\", + "name": "paramiko", + "version": "3.1.0", + "licenses": [ + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:jeff_forcier_project:python-paramiko:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/paramiko@3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/passlib@1.7.4?package-id=76971a360532b0d8", + "author": "Eli Collins ", + "name": "passlib", + "version": "1.7.4", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:eli_collins_project:python-passlib:1.7.4:*:*:*:*:*:*:*", + "purl": "pkg:pypi/passlib@1.7.4" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pip@22.3.1?package-id=3100cd295b5bdd40", + "author": "The pip developers ", + "name": "pip", + "version": "22.3.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pip_developers_project:python-pip:22.3.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pip@22.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pluggy@1.0.0?package-id=184fbb45f182aa4a", + "author": "Holger Krekel ", + "name": "pluggy", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:holger_krekel_project:python-pluggy:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pluggy@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pycparser@2.21?package-id=f34437f2d84117a3", + "author": "Eli Bendersky ", + "name": "pycparser", + "version": "2.21", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:eli_bendersky_project:python-pycparser:2.21:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pycparser@2.21" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pyeapi@0.8.4?package-id=529f6aea31ff502d", + "author": "Arista EOS+ CS ", + "name": "pyeapi", + "version": "0.8.4", + "licenses": [ + { + "license": { + "name": "BSD-3" + } + } + ], + "cpe": "cpe:2.3:a:arista_eos\\+_cs_project:python-pyeapi:0.8.4:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pyeapi@0.8.4" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pyparsing@3.0.9?package-id=fc99d3a216f5e080", + "author": "Paul McGuire ", + "name": "pyparsing", + "version": "3.0.9", + "cpe": "cpe:2.3:a:paul_mcguire_\\", + "name": "pyserial", + "version": "3.5", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:chris_liechti_project:python-pyserial:3.5:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pyserial@3.5" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pytest@7.3.0?package-id=32a2626534b62af2", + "author": "Holger Krekel, Bruno Oliveira, Ronny Pfannschmidt, Floris Bruynooghe, Brianna Laugher, Florian Bruhin and others", + "name": "pytest", + "version": "7.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:holger_krekel\\,_bruno_oliveira\\,_ronny_pfannschmidt\\,_floris_bruynooghe\\,_brianna_laugher\\,_florian_bruhin_and_others_project:python-pytest:7.3.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pytest@7.3.0" + }, + { + "type": "application", + "bom-ref": "pkg:generic/python@3.11.3?package-id=275c59959aad4c7", + "name": "python", + "version": "3.11.3", + "cpe": "cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*", + "purl": "pkg:generic/python@3.11.3" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pytz@2023.3?package-id=4809bae2b964082", + "author": "Stuart Bishop ", + "name": "pytz", + "version": "2023.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stuart_bishop_project:python-pytz:2023.3:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pytz@2023.3" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/readline@8.1.2-r0?arch=x86_64&distro=alpine-3.16.5&package-id=bb734bcc27e60920", + "publisher": "Natanael Copa ", + "name": "readline", + "version": "8.1.2-r0", + "description": "GNU readline library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:readline:readline:8.1.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/readline@8.1.2-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://tiswww.cwru.edu/php/chet/readline/rltop.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/requests@2.28.2?package-id=e59e5e16dc2d6839", + "author": "Kenneth Reitz ", + "name": "requests", + "version": "2.28.2", + "licenses": [ + { + "license": { + "name": "Apache 2.0" + } + } + ], + "cpe": "cpe:2.3:a:kenneth_reitz_project:python-requests:2.28.2:*:*:*:*:*:*:*", + "purl": "pkg:pypi/requests@2.28.2" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.3.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.16.5&package-id=206fdb47b3e980eb", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.3.4-r0", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.3.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.3.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/scp@0.14.5?package-id=7c66efd43ff9715d", + "author": "James Bardin ", + "name": "scp", + "version": "0.14.5", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:james_bardin_project:python-scp:0.14.5:*:*:*:*:*:*:*", + "purl": "pkg:pypi/scp@0.14.5" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/semantic-version@2.10.0?package-id=94885c64cc6167f5", + "author": "Raphaël Barrois ", + "name": "semantic-version", + "version": "2.10.0", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:raphael_barrois\\+semver_project:python-semantic-version:2.10.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/semantic-version@2.10.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/setuptools@65.5.1?package-id=e46aceb087f273c", + "author": "Python Packaging Authority ", + "name": "setuptools", + "version": "65.5.1", + "cpe": "cpe:2.3:a:python_packaging_authority_project:python-setuptools:65.5.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/setuptools@65.5.1" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/setuptools-rust@1.1.2?package-id=c6369cc9951ff5dd", + "author": "Nikolay Kim ", + "name": "setuptools-rust", + "version": "1.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:python-setuptools-rust:python-setuptools-rust:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:pypi/setuptools-rust@1.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/six@1.16.0?package-id=a4a34c5ad714238e", + "author": "Benjamin Peterson ", + "name": "six", + "version": "1.16.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:benjamin_peterson_project:python-six:1.16.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/six@1.16.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/sqlite-libs@3.38.5-r0?arch=x86_64&upstream=sqlite&distro=alpine-3.16.5&package-id=6127833655f3995a", + "publisher": "Carlo Landmeter ", + "name": "sqlite-libs", + "version": "3.38.5-r0", + "description": "Sqlite3 library", + "licenses": [ + { + "license": { + "id": "blessing" + } + } + ], + "cpe": "cpe:2.3:a:sqlite-libs:sqlite-libs:3.38.5-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/sqlite-libs@3.38.5-r0?arch=x86_64&upstream=sqlite&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.sqlite.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/sshpass@1.09-r0?arch=x86_64&distro=alpine-3.16.5&package-id=df8f395bc1f8e878", + "publisher": "Natanael Copa ", + "name": "sshpass", + "version": "1.09-r0", + "description": "Non-interactive SSH authentication utility", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:sshpass:sshpass:1.09-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/sshpass@1.09-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://sourceforge.net/projects/sshpass/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&upstream=busybox&distro=alpine-3.16.5&package-id=674d1e2fba4d633a", + "publisher": "Sören Tempel ", + "name": "ssl_client", + "version": "1.35.0-r17", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.35.0-r17:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&upstream=busybox&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/tenacity@8.2.2?package-id=d0539dcd5ce128de", + "author": "Julien Danjou ", + "name": "tenacity", + "version": "8.2.2", + "licenses": [ + { + "license": { + "name": "Apache 2.0" + } + } + ], + "cpe": "cpe:2.3:a:julien_danjou_project:python-tenacity:8.2.2:*:*:*:*:*:*:*", + "purl": "pkg:pypi/tenacity@8.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/textfsm@1.1.3?package-id=47205a218197a630", + "name": "textfsm", + "version": "1.1.3", + "licenses": [ + { + "license": { + "name": "Apache License, Version 2.0" + } + } + ], + "cpe": "cpe:2.3:a:python-textfsm:python-textfsm:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:pypi/textfsm@1.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/toml@0.10.2?package-id=40954de8de37c66b", + "author": "William Pearson ", + "name": "toml", + "version": "0.10.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:william_pearson_project:python-toml:0.10.2:*:*:*:*:*:*:*", + "purl": "pkg:pypi/toml@0.10.2" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/transitions@0.9.0?package-id=5cae5b615a5badb8", + "author": "Tal Yarkoni ", + "name": "transitions", + "version": "0.9.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tal_yarkoni_project:python-transitions:0.9.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/transitions@0.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/typing-extensions@4.5.0?package-id=acfb35510a672980", + "author": "\"Guido van Rossum, Jukka Lehtosalo, Łukasz Langa, Michael Lee\" ", + "name": "typing_extensions", + "version": "4.5.0", + "cpe": "cpe:2.3:a:python-typing-extensions:python-typing-extensions:4.5.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/typing_extensions@4.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/tzdata@2023c-r0?arch=x86_64&distro=alpine-3.16.5&package-id=c6c9b0e0277783a2", + "publisher": "Natanael Copa ", + "name": "tzdata", + "version": "2023c-r0", + "description": "Timezone data", + "licenses": [ + { + "license": { + "name": "Public-Domain" + } + } + ], + "cpe": "cpe:2.3:a:tzdata:tzdata:2023c-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/tzdata@2023c-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.iana.org/time-zones", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/urllib3@1.26.15?package-id=25acf2f0c10fb6d2", + "author": "Andrey Petrov ", + "name": "urllib3", + "version": "1.26.15", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:andrey_petrov_project:python-urllib3:1.26.15:*:*:*:*:*:*:*", + "purl": "pkg:pypi/urllib3@1.26.15" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/wheel@0.40.0?package-id=b5901a77ad9bd010", + "author": "Daniel Holth ", + "name": "wheel", + "version": "0.40.0", + "cpe": "cpe:2.3:a:daniel_holth_\\", + "name": "wrapt", + "version": "1.15.0", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:graham_dumpleton_project:python-wrapt:1.15.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/wrapt@1.15.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/xmltodict@0.13.0?package-id=8b8fec688a305949", + "author": "Martin Blech ", + "name": "xmltodict", + "version": "0.13.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:martin_blech_project:python-xmltodict:0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/xmltodict@0.13.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/xz-libs@5.2.5-r1?arch=x86_64&upstream=xz&distro=alpine-3.16.5&package-id=168e14fa822d49a0", + "publisher": "Natanael Copa ", + "name": "xz-libs", + "version": "5.2.5-r1", + "description": "Library and CLI tools for XZ and LZMA compressed files (libraries)", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "name": "Public-Domain" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:xz-libs:xz-libs:5.2.5-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/xz-libs@5.2.5-r1?arch=x86_64&upstream=xz&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://tukaani.org/xz", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/yamlordereddictloader@0.4.0?package-id=404a2c9cc53e974e", + "author": "François Ménabé ", + "name": "yamlordereddictloader", + "version": "0.4.0", + "licenses": [ + { + "license": { + "name": "MIT License" + } + } + ], + "cpe": "cpe:2.3:a:python-yamlordereddictloader:python-yamlordereddictloader:0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/yamlordereddictloader@0.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.12-r3?arch=x86_64&distro=alpine-3.16.5&package-id=75f0d92f695b4303", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.12-r3", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.12-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.12-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/zope.interface@6.0?package-id=5c2141abb7c153a7", + "author": "Zope Foundation and Contributors ", + "name": "zope.interface", + "version": "6.0", + "licenses": [ + { + "license": { + "name": "ZPL 2.1" + } + } + ], + "cpe": "cpe:2.3:a:zope_foundation_and_contributors_project:python-zope.interface:6.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/zope.interface@6.0" + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.16.5", + "description": "Alpine Linux v3.16", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.16.5" + }, + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.4.0-r0?arch=x86_64&distro=alpine-3.17.2&package-id=92b19c7750fb559d", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.4.0-r0", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.4.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.4.0-r0?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout-data@3.4.0-r0?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.17.2&package-id=291d1267b40d636f", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout-data", + "version": "3.4.0-r0", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout-data@3.4.0-r0?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.17.2&package-id=2b5e23d349b556cf", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.4-r1", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/aom-libs@3.5.0-r0?arch=x86_64&upstream=aom&distro=alpine-3.17.2&package-id=dda899beeecf55cd", + "publisher": "Oleg Titov ", + "name": "aom-libs", + "version": "3.5.0-r0", + "description": "Alliance for Open Media (AOM) AV1 codec SDK (libraries)", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:aom-libs:aom-libs:3.5.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/aom-libs@3.5.0-r0?arch=x86_64&upstream=aom&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://aomedia.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.10-r1?arch=x86_64&distro=alpine-3.17.2&package-id=e5f757b0df1f62bc", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.12.10-r1", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.12.10-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.12.10-r1?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/brotli-libs@1.0.9-r9?arch=x86_64&upstream=brotli&distro=alpine-3.17.2&package-id=b908173dd9145006", + "publisher": "prspkt ", + "name": "brotli-libs", + "version": "1.0.9-r9", + "description": "Generic lossless compressor (libraries)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brotli-libs:brotli-libs:1.0.9-r9:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/brotli-libs@1.0.9-r9?arch=x86_64&upstream=brotli&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://github.com/google/brotli", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "aa1ac704d327fec", + "name": "busybox", + "version": "1.35.0", + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=alpine-3.17.2&package-id=623d53216342d45e", + "publisher": "Sören Tempel ", + "name": "busybox", + "version": "1.35.0-r29", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0-r29:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.2&package-id=256fc96b4a8c4da8", + "publisher": "Sören Tempel ", + "name": "busybox-binsh", + "version": "1.35.0-r29", + "description": "busybox ash /bin/sh", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox-binsh:busybox-binsh:1.35.0-r29:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20220614-r4?arch=x86_64&upstream=ca-certificates&distro=alpine-3.17.2&package-id=b805d823ae624f04", + "publisher": "Natanael Copa ", + "name": "ca-certificates-bundle", + "version": "20220614-r4", + "description": "Pre generated bundle of Mozilla certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-bundle@20220614-r4?arch=x86_64&upstream=ca-certificates&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/fontconfig@2.14.1-r0?arch=x86_64&distro=alpine-3.17.2&package-id=adae4094ba998368", + "publisher": "Natanael Copa ", + "name": "fontconfig", + "version": "2.14.1-r0", + "description": "Library for configuring and customizing font access", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fontconfig:fontconfig:2.14.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/fontconfig@2.14.1-r0?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://www.freedesktop.org/wiki/Software/fontconfig", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/freetype@2.12.1-r0?arch=x86_64&distro=alpine-3.17.2&package-id=2b1bfc10343b9080", + "publisher": "Carlo Landmeter ", + "name": "freetype", + "version": "2.12.1-r0", + "description": "TrueType font rendering library", + "licenses": [ + { + "license": { + "id": "FTL" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:freetype:freetype:2.12.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/freetype@2.12.1-r0?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://www.freetype.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/gd@2.3.3-r3?arch=x86_64&distro=alpine-3.17.2&package-id=2510ca36802a2636", + "publisher": "Carlo Landmeter ", + "name": "gd", + "version": "2.3.3-r3", + "description": "Library for the dynamic creation of images by programmers", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:gd:gd:2.3.3-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/gd@2.3.3-r3?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://libgd.github.io/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/geoip@1.6.12-r3?arch=x86_64&distro=alpine-3.17.2&package-id=f4075f408016ba5b", + "publisher": "Leonardo Arena ", + "name": "geoip", + "version": "1.6.12-r3", + "description": "Lookup countries by IP addresses", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:geoip:geoip:1.6.12-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/geoip@1.6.12-r3?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "http://www.maxmind.com/app/ip-location", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libavif@0.11.1-r0?arch=x86_64&distro=alpine-3.17.2&package-id=f100fe0aa4e2f851", + "publisher": "Bart Ribbers ", + "name": "libavif", + "version": "0.11.1-r0", + "description": "Library for encoding and decoding .avif files", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libavif:libavif:0.11.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libavif@0.11.1-r0?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://aomediacodec.github.io/av1-avif/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libbsd@0.11.7-r0?arch=x86_64&distro=alpine-3.17.2&package-id=d55431c5897f9ced", + "publisher": "Drew DeVault ", + "name": "libbsd", + "version": "0.11.7-r0", + "description": "commonly-used BSD functions not implemented by all libcs", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libbsd:libbsd:0.11.7-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libbsd@0.11.7-r0?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://libbsd.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libbz2@1.0.8-r4?arch=x86_64&upstream=bzip2&distro=alpine-3.17.2&package-id=60a12fd5038efa61", + "publisher": "Natanael Copa ", + "name": "libbz2", + "version": "1.0.8-r4", + "description": "Shared library for bz2", + "licenses": [ + { + "license": { + "id": "bzip2-1.0.6" + } + } + ], + "cpe": "cpe:2.3:a:libbz2:libbz2:1.0.8-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libbz2@1.0.8-r4?arch=x86_64&upstream=bzip2&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://sourceware.org/bzip2/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.17.2&package-id=8126b232e2d3c608", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r3", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&upstream=openssl&distro=alpine-3.17.2&package-id=b0e92b2ef962ab6d", + "publisher": "Ariadne Conill ", + "name": "libcrypto3", + "version": "3.0.8-r0", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto3:libcrypto3:3.0.8-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&upstream=openssl&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.2&package-id=d3084c788891fb28", + "publisher": "Ariadne Conill ", + "name": "libcrypto3", + "version": "3.0.8-r3", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto3:libcrypto3:3.0.8-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libdav1d@1.0.0-r2?arch=x86_64&upstream=dav1d&distro=alpine-3.17.2&package-id=e65bcf5fb90c2e84", + "publisher": "Bart Ribbers ", + "name": "libdav1d", + "version": "1.0.0-r2", + "description": "small and fast AV1 Decoder (libraries)", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libdav1d:libdav1d:1.0.0-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libdav1d@1.0.0-r2?arch=x86_64&upstream=dav1d&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://code.videolan.org/videolan/dav1d", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libexpat@2.5.0-r0?arch=x86_64&upstream=expat&distro=alpine-3.17.2&package-id=3230d7655464b5cd", + "publisher": "Carlo Landmeter ", + "name": "libexpat", + "version": "2.5.0-r0", + "description": "XML Parser library written in C (libraries)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libexpat:libexpat:2.5.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libexpat@2.5.0-r0?arch=x86_64&upstream=expat&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://libexpat.github.io/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgcc@12.2.1_git20220924-r4?arch=x86_64&upstream=gcc&distro=alpine-3.17.2&package-id=4dbb63d06d9618e9", + "publisher": "Ariadne Conill ", + "name": "libgcc", + "version": "12.2.1_git20220924-r4", + "description": "GNU C compiler runtime libraries", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgcc:libgcc:12.2.1_git20220924-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgcc@12.2.1_git20220924-r4?arch=x86_64&upstream=gcc&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgcrypt@1.10.1-r0?arch=x86_64&distro=alpine-3.17.2&package-id=19cda171af31bddf", + "publisher": "Natanael Copa ", + "name": "libgcrypt", + "version": "1.10.1-r0", + "description": "General purpose crypto library based on the code used in GnuPG", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgcrypt:libgcrypt:1.10.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgcrypt@1.10.1-r0?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://www.gnupg.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgd@2.3.3-r3?arch=x86_64&upstream=gd&distro=alpine-3.17.2&package-id=c2197bc58668f729", + "publisher": "Carlo Landmeter ", + "name": "libgd", + "version": "2.3.3-r3", + "description": "Library for the dynamic creation of images by programmers (libraries)", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libgd:libgd:2.3.3-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgd@2.3.3-r3?arch=x86_64&upstream=gd&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://libgd.github.io/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgpg-error@1.46-r1?arch=x86_64&distro=alpine-3.17.2&package-id=a2ff8bdcd7e1dd79", + "publisher": "Natanael Copa ", + "name": "libgpg-error", + "version": "1.46-r1", + "description": "Support library for libgcrypt", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgpg-error:libgpg-error:1.46-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgpg-error@1.46-r1?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://www.gnupg.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libice@1.0.10-r1?arch=x86_64&distro=alpine-3.17.2&package-id=9972a03c39962bb9", + "publisher": "Natanael Copa ", + "name": "libice", + "version": "1.0.10-r1", + "description": "X11 Inter-Client Exchange library", + "licenses": [ + { + "license": { + "id": "X11" + } + } + ], + "cpe": "cpe:2.3:a:libice:libice:1.0.10-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libice@1.0.10-r1?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libjpeg-turbo@2.1.4-r0?arch=x86_64&distro=alpine-3.17.2&package-id=f1b99d9aedffa0e8", + "publisher": "Natanael Copa ", + "name": "libjpeg-turbo", + "version": "2.1.4-r0", + "description": "Accelerated baseline JPEG compression and decompression library", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "IJG" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libjpeg-turbo:libjpeg-turbo:2.1.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libjpeg-turbo@2.1.4-r0?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://libjpeg-turbo.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libmd@1.0.4-r0?arch=x86_64&distro=alpine-3.17.2&package-id=813b4dc93a907c78", + "publisher": "omni ", + "name": "libmd", + "version": "1.0.4-r0", + "description": "Message Digest functions from BSD systems", + "licenses": [ + { + "license": { + "name": "Public" + } + }, + { + "license": { + "name": "Domain" + } + } + ], + "cpe": "cpe:2.3:a:libmd:libmd:1.0.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libmd@1.0.4-r0?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://www.hadrons.org/software/libmd/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libpng@1.6.38-r0?arch=x86_64&distro=alpine-3.17.2&package-id=de4865c94634be51", + "publisher": "Natanael Copa ", + "name": "libpng", + "version": "1.6.38-r0", + "description": "Portable Network Graphics library", + "licenses": [ + { + "license": { + "id": "Libpng" + } + } + ], + "cpe": "cpe:2.3:a:libpng:libpng:1.6.38-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libpng@1.6.38-r0?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "http://www.libpng.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libsm@1.2.3-r1?arch=x86_64&distro=alpine-3.17.2&package-id=30bd714a5c7898c3", + "publisher": "Natanael Copa ", + "name": "libsm", + "version": "1.2.3-r1", + "description": "X11 Session Management library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libsm:libsm:1.2.3-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libsm@1.2.3-r1?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://xorg.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&upstream=openssl&distro=alpine-3.17.2&package-id=9005623d3896bb87", + "publisher": "Ariadne Conill ", + "name": "libssl3", + "version": "3.0.8-r0", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libssl3:libssl3:3.0.8-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&upstream=openssl&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.2&package-id=2a95f0251fba7a33", + "publisher": "Ariadne Conill ", + "name": "libssl3", + "version": "3.0.8-r3", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libssl3:libssl3:3.0.8-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libuuid@2.38.1-r1?arch=x86_64&upstream=util-linux&distro=alpine-3.17.2&package-id=f15daab9c9959397", + "publisher": "Natanael Copa ", + "name": "libuuid", + "version": "2.38.1-r1", + "description": "DCE compatible Universally Unique Identifier library", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libuuid:libuuid:2.38.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libuuid@2.38.1-r1?arch=x86_64&upstream=util-linux&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://git.kernel.org/cgit/utils/util-linux/util-linux.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libwebp@1.2.4-r1?arch=x86_64&distro=alpine-3.17.2&package-id=a51ecbb112e053a", + "publisher": "Natanael Copa ", + "name": "libwebp", + "version": "1.2.4-r1", + "description": "Libraries for working with WebP images", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libwebp:libwebp:1.2.4-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libwebp@1.2.4-r1?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://developers.google.com/speed/webp", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libx11@1.8.4-r0?arch=x86_64&distro=alpine-3.17.2&package-id=40301bca6410af1", + "publisher": "Natanael Copa ", + "name": "libx11", + "version": "1.8.4-r0", + "description": "X11 client-side library", + "licenses": [ + { + "license": { + "name": "custom:XFREE86" + } + } + ], + "cpe": "cpe:2.3:a:libx11:libx11:1.8.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libx11@1.8.4-r0?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxau@1.0.10-r0?arch=x86_64&distro=alpine-3.17.2&package-id=e2e56f47e511df94", + "publisher": "Natanael Copa ", + "name": "libxau", + "version": "1.0.10-r0", + "description": "X11 authorisation library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libxau:libxau:1.0.10-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxau@1.0.10-r0?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxcb@1.15-r0?arch=x86_64&distro=alpine-3.17.2&package-id=e9bc45b3f25e9dff", + "publisher": "Natanael Copa ", + "name": "libxcb", + "version": "1.15-r0", + "description": "X11 client-side library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libxcb:libxcb:1.15-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxcb@1.15-r0?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://xcb.freedesktop.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxdmcp@1.1.4-r0?arch=x86_64&distro=alpine-3.17.2&package-id=6bbb1cd47f559f9a", + "publisher": "Natanael Copa ", + "name": "libxdmcp", + "version": "1.1.4-r0", + "description": "X11 Display Manager Control Protocol library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libxdmcp:libxdmcp:1.1.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxdmcp@1.1.4-r0?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxext@1.3.5-r0?arch=x86_64&distro=alpine-3.17.2&package-id=ed11ed05f407d310", + "publisher": "Natanael Copa ", + "name": "libxext", + "version": "1.3.5-r0", + "description": "X11 miscellaneous extensions library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libxext:libxext:1.3.5-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxext@1.3.5-r0?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxml2@2.10.3-r1?arch=x86_64&distro=alpine-3.17.2&package-id=50c4714b5db74ae3", + "publisher": "Carlo Landmeter ", + "name": "libxml2", + "version": "2.10.3-r1", + "description": "XML parsing library, version 2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libxml2:libxml2:2.10.3-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxml2@2.10.3-r1?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "http://www.xmlsoft.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxpm@3.5.15-r0?arch=x86_64&distro=alpine-3.17.2&package-id=f8f56cc3f4eddcb4", + "publisher": "Natanael Copa ", + "name": "libxpm", + "version": "3.5.15-r0", + "description": "X11 pixmap library", + "licenses": [ + { + "license": { + "name": "custom:BELL" + } + } + ], + "cpe": "cpe:2.3:a:libxpm-project:libxpm:3.5.15-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxpm@3.5.15-r0?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxslt@1.1.37-r0?arch=x86_64&distro=alpine-3.17.2&package-id=67ac2ca91d10cec4", + "publisher": "Natanael Copa ", + "name": "libxslt", + "version": "1.1.37-r0", + "description": "XML stylesheet transformation library", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libxslt:libxslt:1.1.37-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxslt@1.1.37-r0?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "http://xmlsoft.org/XSLT/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxslt@1.1.37-r1?arch=x86_64&distro=alpine-3.17.2&package-id=df5746a44775ab80", + "publisher": "Natanael Copa ", + "name": "libxslt", + "version": "1.1.37-r1", + "description": "XML stylesheet transformation library", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libxslt:libxslt:1.1.37-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxslt@1.1.37-r1?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "http://xmlsoft.org/XSLT/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxt@1.2.1-r0?arch=x86_64&distro=alpine-3.17.2&package-id=ab1ee951123527a2", + "publisher": "Natanael Copa ", + "name": "libxt", + "version": "1.2.1-r0", + "description": "X11 toolkit intrinsics library", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libxt:libxt:1.2.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxt@1.2.1-r0?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "http://xorg.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.2.3-r4?arch=x86_64&distro=alpine-3.17.2&package-id=d9700f02cf26e8b8", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.2.3-r4", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.2.3-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.2.3-r4?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86_64&upstream=musl&distro=alpine-3.17.2&package-id=f71ecf5267e6c37b", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.2.3-r4", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.2.3-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86_64&upstream=musl&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.3.5-r1?arch=x86_64&upstream=pax-utils&distro=alpine-3.17.2&package-id=e903138d19e85b80", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.3.5-r1", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.3.5-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.3.5-r1?arch=x86_64&upstream=pax-utils&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.2&package-id=b15247aafcd4a647", + "publisher": "Sören Tempel ", + "name": "ssl_client", + "version": "1.35.0-r29", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.35.0-r29:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/tiff@4.4.0-r1?arch=x86_64&distro=alpine-3.17.2&package-id=e076958ae2c1ba97", + "publisher": "Michael Mason ", + "name": "tiff", + "version": "4.4.0-r1", + "description": "Provides support for the Tag Image File Format or TIFF", + "licenses": [ + { + "license": { + "id": "libtiff" + } + } + ], + "cpe": "cpe:2.3:a:libtiff:libtiff:4.4.0-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/tiff@4.4.0-r1?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://gitlab.com/libtiff/libtiff", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/tiff@4.4.0-r3?arch=x86_64&distro=alpine-3.17.2&package-id=fb358c813513b33d", + "publisher": "Michael Mason ", + "name": "tiff", + "version": "4.4.0-r3", + "description": "Provides support for the Tag Image File Format or TIFF", + "licenses": [ + { + "license": { + "id": "libtiff" + } + } + ], + "cpe": "cpe:2.3:a:libtiff:libtiff:4.4.0-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/tiff@4.4.0-r3?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://gitlab.com/libtiff/libtiff", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/xz-libs@5.2.9-r0?arch=x86_64&upstream=xz&distro=alpine-3.17.2&package-id=e48961a4a3ae9884", + "publisher": "Natanael Copa ", + "name": "xz-libs", + "version": "5.2.9-r0", + "description": "Library and CLI tools for XZ and LZMA compressed files (libraries)", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "name": "Public-Domain" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:xz-libs:xz-libs:5.2.9-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/xz-libs@5.2.9-r0?arch=x86_64&upstream=xz&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://tukaani.org/xz", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.13-r0?arch=x86_64&distro=alpine-3.17.2&package-id=94014313cfcd2b71", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.13-r0", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.13-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.13-r0?arch=x86_64&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zstd-libs@1.5.2-r9?arch=x86_64&upstream=zstd&distro=alpine-3.17.2&package-id=5b84a9f1259e3066", + "publisher": "psykose ", + "name": "zstd-libs", + "version": "1.5.2-r9", + "description": "Zstandard - Fast real-time compression algorithm (libraries)", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:zstd-libs:zstd-libs:1.5.2-r9:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zstd-libs@1.5.2-r9?arch=x86_64&upstream=zstd&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://www.zstd.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zstd-libs@1.5.5-r0?arch=x86_64&upstream=zstd&distro=alpine-3.17.2&package-id=63fdcc1e9d0cee84", + "publisher": "psykose ", + "name": "zstd-libs", + "version": "1.5.5-r0", + "description": "Zstandard - Fast real-time compression algorithm (libraries)", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:zstd-libs:zstd-libs:1.5.5-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zstd-libs@1.5.5-r0?arch=x86_64&upstream=zstd&distro=alpine-3.17.2", + "externalReferences": [ + { + "url": "https://www.zstd.net/", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.17.2", + "description": "Alpine Linux v3.17", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.17.2" + }, + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/.python-rundeps@20230330.012037?arch=noarch&distro=alpine-3.16.5&package-id=f4d111cafc76519b", + "name": ".python-rundeps", + "version": "20230330.012037", + "description": "virtual meta package", + "licenses": [ + { + "license": {} + } + ], + "cpe": "cpe:2.3:a:.python-rundeps:.python-rundeps:20230330.012037:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/.python-rundeps@20230330.012037?arch=noarch&distro=alpine-3.16.5" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/click@7.0?package-id=3a58fdeeff83cd9f", + "author": "Armin Ronacher ", + "name": "Click", + "version": "7.0", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:armin_ronacher_project:python-Click:7.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/Click@7.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/flask@1.0.3?package-id=c490aa95964872bc", + "author": "Armin Ronacher ", + "name": "Flask", + "version": "1.0.3", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:armin_ronacher_project:python-Flask:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:pypi/Flask@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/flask-restful@0.3.7?package-id=36f0193ab85cdce", + "author": "Twilio API Team ", + "name": "Flask-RESTful", + "version": "0.3.7", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:twilio_api_team_project:python-Flask-RESTful:0.3.7:*:*:*:*:*:*:*", + "purl": "pkg:pypi/Flask-RESTful@0.3.7" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/jinja2@2.10.1?package-id=17f1f8c145b55f04", + "author": "Armin Ronacher ", + "name": "Jinja2", + "version": "2.10.1", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:armin_ronacher_project:python-Jinja2:2.10.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/Jinja2@2.10.1" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/markupsafe@1.1.1?package-id=ab14f0ee3d649e1c", + "author": "Armin Ronacher ", + "name": "MarkupSafe", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:armin_ronacher_project:python-MarkupSafe:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/MarkupSafe@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pynacl@1.3.0?package-id=2a6bf39644edbb42", + "author": "The PyNaCl developers ", + "name": "PyNaCl", + "version": "1.3.0", + "licenses": [ + { + "license": { + "name": "Apache License 2.0" + } + } + ], + "cpe": "cpe:2.3:a:pynacl_developers_project:python-PyNaCl:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/PyNaCl@1.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pyyaml@5.1.1?package-id=f01fe7b1c18abc40", + "author": "Kirill Simonov ", + "name": "PyYAML", + "version": "5.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:kirill_simonov_project:python-PyYAML:5.1.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/PyYAML@5.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/werkzeug@2.1.2?package-id=c996e87894c79078", + "author": "Armin Ronacher ", + "name": "Werkzeug", + "version": "2.1.2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:armin_ronacher_project:python-Werkzeug:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:pypi/Werkzeug@2.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.2.0-r23?arch=x86_64&distro=alpine-3.16.5&package-id=61eac5ce8105d394", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.2.0-r23", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.2.0-r23:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.2.0-r23?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout-data@3.2.0-r23?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.16.5&package-id=e8c6fcc3a282ed4f", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout-data", + "version": "3.2.0-r23", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.2.0-r23:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout-data@3.2.0-r23?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.16.5&package-id=82d183eb300978cc", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.4-r1", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/aniso8601@7.0.0?package-id=6c5ef38e1512239c", + "author": "Brandon Nielsen ", + "name": "aniso8601", + "version": "7.0.0", + "licenses": [ + { + "license": { + "name": "UNKNOWN" + } + } + ], + "cpe": "cpe:2.3:a:brandon_nielsen_project:python-aniso8601:7.0.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/aniso8601@7.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/ansible@2.10.5?package-id=91615183194d623c", + "author": "Ansible, Inc. ", + "name": "ansible", + "version": "2.10.5", + "licenses": [ + { + "license": { + "name": "GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:ansible\\,_inc__project:python-ansible:2.10.5:*:*:*:*:*:*:*", + "purl": "pkg:pypi/ansible@2.10.5" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/ansible-base@2.10.17?package-id=f42670f5f93216c4", + "author": "Ansible, Inc. ", + "name": "ansible-base", + "version": "2.10.17", + "licenses": [ + { + "license": { + "name": "GPLv3+" + } + } + ], + "cpe": "cpe:2.3:a:ansible\\,_inc__project:python-ansible-base:2.10.17:*:*:*:*:*:*:*", + "purl": "pkg:pypi/ansible-base@2.10.17" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/ansible-runner@1.4.6?package-id=475f032d9bf23eb9", + "author": "Red Hat Ansible", + "name": "ansible-runner", + "version": "1.4.6", + "licenses": [ + { + "license": { + "name": "Apache" + } + } + ], + "cpe": "cpe:2.3:a:red_hat_ansible_project:python-ansible-runner:1.4.6:*:*:*:*:*:*:*", + "purl": "pkg:pypi/ansible-runner@1.4.6" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.9-r3?arch=x86_64&distro=alpine-3.16.5&package-id=42d502b764a37310", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.12.9-r3", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.12.9-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.12.9-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/appdirs@1.4.4?package-id=cb1ac44a9663d17e", + "author": "Jeff Rouse ", + "name": "appdirs", + "version": "1.4.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jeff_rouse_project:python-appdirs:1.4.4:*:*:*:*:*:*:*", + "purl": "pkg:pypi/appdirs@1.4.4" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/asn1crypto@0.24.0?package-id=42c09b43cf6cc05d", + "author": "wbond ", + "name": "asn1crypto", + "version": "0.24.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:python-asn1crypto:python-asn1crypto:0.24.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/asn1crypto@0.24.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/bcrypt@3.1.7?package-id=3abd7c44943769c3", + "author": "The Python Cryptographic Authority developers ", + "name": "bcrypt", + "version": "3.1.7", + "licenses": [ + { + "license": { + "name": "Apache License, Version 2.0" + } + } + ], + "cpe": "cpe:2.3:a:python_cryptographic_authority_developers_project:python-bcrypt:3.1.7:*:*:*:*:*:*:*", + "purl": "pkg:pypi/bcrypt@3.1.7" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/binutils@2.38-r3?arch=x86_64&distro=alpine-3.16.5&package-id=2ac308a9a0122ed5", + "publisher": "Ariadne Conill ", + "name": "binutils", + "version": "2.38-r3", + "description": "Tools necessary to build programs", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:binutils:binutils:2.38-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/binutils@2.38-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/binutils/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/build-base@0.5-r3?arch=x86_64&distro=alpine-3.16.5&package-id=680d5addf26f58dc", + "publisher": "Natanael Copa ", + "name": "build-base", + "version": "0.5-r3", + "description": "Meta package for build base", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:build-base:build-base:0.5-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/build-base@0.5-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "http://dev.alpinelinux.org/cgit", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/build-dependencies@20230412.220958?arch=noarch&distro=alpine-3.16.5&package-id=67aa61f73951db66", + "name": "build-dependencies", + "version": "20230412.220958", + "description": "virtual meta package", + "licenses": [ + { + "license": {} + } + ], + "cpe": "cpe:2.3:a:build-dependencies:build-dependencies:20230412.220958:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/build-dependencies@20230412.220958?arch=noarch&distro=alpine-3.16.5" + }, + { + "type": "application", + "bom-ref": "e14718c64f5147f4", + "name": "busybox", + "version": "1.35.0", + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=alpine-3.16.5&package-id=4b48ef6f6b983526", + "publisher": "Sören Tempel ", + "name": "busybox", + "version": "1.35.0-r17", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0-r17:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates@20220614-r0?arch=x86_64&distro=alpine-3.16.5&package-id=fbb1924ff870cc71", + "publisher": "Natanael Copa ", + "name": "ca-certificates", + "version": "20220614-r0", + "description": "Common CA certificates PEM files from Mozilla", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20220614-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates@20220614-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20220614-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.16.5&package-id=30622a1848b22bca", + "publisher": "Natanael Copa ", + "name": "ca-certificates-bundle", + "version": "20220614-r0", + "description": "Pre generated bundle of Mozilla certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20220614-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-bundle@20220614-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/certifi@2022.12.7?package-id=2842baa8fb4c9e59", + "author": "Kenneth Reitz ", + "name": "certifi", + "version": "2022.12.7", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:kenneth_reitz_project:python-certifi:2022.12.7:*:*:*:*:*:*:*", + "purl": "pkg:pypi/certifi@2022.12.7" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/cffi@1.12.3?package-id=705e5de3088777d9", + "author": "Armin Rigo, Maciej Fijalkowski ", + "name": "cffi", + "version": "1.12.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:armin_rigo\\,_maciej_fijalkowski_project:python-cffi:1.12.3:*:*:*:*:*:*:*", + "purl": "pkg:pypi/cffi@1.12.3" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/cffi@1.15.0?package-id=f72b5cfdb7616b9b", + "author": "Armin Rigo, Maciej Fijalkowski ", + "name": "cffi", + "version": "1.15.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:armin_rigo\\,_maciej_fijalkowski_project:python-cffi:1.15.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/cffi@1.15.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/charset-normalizer@3.1.0?package-id=bd5220db061862d8", + "author": "Ahmed TAHRI ", + "name": "charset-normalizer", + "version": "3.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:python-charset-normalizer:python-charset-normalizer:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/charset-normalizer@3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/contextlib2@21.6.0?package-id=33fd175a78c9d13b", + "author": "Nick Coghlan ", + "name": "contextlib2", + "version": "21.6.0", + "licenses": [ + { + "license": { + "name": "PSF License" + } + } + ], + "cpe": "cpe:2.3:a:nick_coghlan_project:python-contextlib2:21.6.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/contextlib2@21.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/cryptography@2.7?package-id=7349ba37dbf17083", + "author": "The cryptography developers ", + "name": "cryptography", + "version": "2.7", + "licenses": [ + { + "license": { + "name": "BSD or Apache License, Version 2.0" + } + } + ], + "cpe": "cpe:2.3:a:cryptography_developers_project:python-cryptography:2.7:*:*:*:*:*:*:*", + "purl": "pkg:pypi/cryptography@2.7" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/cryptography@3.4.8?package-id=6a15128fa64273e1", + "author": "The Python Cryptographic Authority and individual contributors ", + "name": "cryptography", + "version": "3.4.8", + "licenses": [ + { + "license": { + "name": "BSD or Apache License, Version 2.0" + } + } + ], + "cpe": "cpe:2.3:a:python_cryptographic_authority_and_individual_contributors_project:python-cryptography:3.4.8:*:*:*:*:*:*:*", + "purl": "pkg:pypi/cryptography@3.4.8" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/docutils@0.15.2?package-id=e5f409c603928af3", + "author": "David Goodger ", + "name": "docutils", + "version": "0.15.2", + "licenses": [ + { + "license": { + "name": "public domain, Python, 2-Clause BSD, GPL 3 (see COPYING.txt)" + } + } + ], + "cpe": "cpe:2.3:a:david_goodger_project:python-docutils:0.15.2:*:*:*:*:*:*:*", + "purl": "pkg:pypi/docutils@0.15.2" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/expat@2.5.0-r0?arch=x86_64&distro=alpine-3.16.5&package-id=473c10d9103a81b0", + "publisher": "Carlo Landmeter ", + "name": "expat", + "version": "2.5.0-r0", + "description": "XML Parser library written in C", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:expat:expat:2.5.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/expat@2.5.0-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://libexpat.github.io/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/file@5.41-r0?arch=x86_64&distro=alpine-3.16.5&package-id=3f0372cf7b07c5e3", + "publisher": "Natanael Copa ", + "name": "file", + "version": "5.41-r0", + "description": "File type identification utility", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:file:file:5.41-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/file@5.41-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.darwinsys.com/file/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/fortify-headers@1.1-r1?arch=x86_64&distro=alpine-3.16.5&package-id=7f54e229047913d6", + "publisher": "Timo Teräs ", + "name": "fortify-headers", + "version": "1.1-r1", + "description": "standalone fortify source implementation", + "licenses": [ + { + "license": { + "name": "BSD-0" + } + } + ], + "cpe": "cpe:2.3:a:fortify-headers:fortify-headers:1.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/fortify-headers@1.1-r1?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "http://git.2f30.org/fortify-headers/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/future@0.18.3?package-id=4d495d06d1d5bacd", + "author": "Ed Schofield ", + "name": "future", + "version": "0.18.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ed_schofield_project:python-future:0.18.3:*:*:*:*:*:*:*", + "purl": "pkg:pypi/future@0.18.3" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/g++@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5&package-id=eea03beb8fdff2d5", + "publisher": "Ariadne Conill ", + "name": "g++", + "version": "11.2.1_git20220219-r2", + "description": "GNU C++ standard library and compiler", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:g\\+\\+:g\\+\\+:11.2.1_git20220219-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/g++@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/gcc@11.2.1_git20220219-r2?arch=x86_64&distro=alpine-3.16.5&package-id=d036a3d91251717e", + "publisher": "Ariadne Conill ", + "name": "gcc", + "version": "11.2.1_git20220219-r2", + "description": "The GNU Compiler Collection", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:gcc:gcc:11.2.1_git20220219-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/gcc@11.2.1_git20220219-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/gdbm@1.23-r0?arch=x86_64&distro=alpine-3.16.5&package-id=5a60c1f034fa6943", + "publisher": "Natanael Copa ", + "name": "gdbm", + "version": "1.23-r0", + "description": "GNU dbm is a set of database routines that use extensible hashing", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:gdbm:gdbm:1.23-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/gdbm@1.23-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/gdbm/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/gevent@1.4.0?package-id=feb0a63c7d504da1", + "author": "Denis Bilenko ", + "name": "gevent", + "version": "1.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:denis_bilenko_project:python-gevent:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/gevent@1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/gmp@6.2.1-r2?arch=x86_64&distro=alpine-3.16.5&package-id=f6304e3cf143d3ea", + "publisher": "Natanael Copa ", + "name": "gmp", + "version": "6.2.1-r2", + "description": "free library for arbitrary precision arithmetic", + "licenses": [ + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "OR" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:gmp:gmp:6.2.1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/gmp@6.2.1-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gmplib.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/greenlet@0.4.15?package-id=7bf0a63a71eda55d", + "name": "greenlet", + "version": "0.4.15", + "licenses": [ + { + "license": { + "name": "MIT License" + } + } + ], + "cpe": "cpe:2.3:a:python-greenlet:python-greenlet:0.4.15:*:*:*:*:*:*:*", + "purl": "pkg:pypi/greenlet@0.4.15" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/gunicorn@19.9.0?package-id=541fb1f7a37c872d", + "author": "Benoit Chesneau ", + "name": "gunicorn", + "version": "19.9.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:benoit_chesneau_project:python-gunicorn:19.9.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/gunicorn@19.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/idna@3.3?package-id=69b0bf94e8a5e80", + "author": "Kim Davies ", + "name": "idna", + "version": "3.3", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:kim_davies_project:python-idna:3.3:*:*:*:*:*:*:*", + "purl": "pkg:pypi/idna@3.3" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/idna@3.4?package-id=a31834d389e46e0", + "author": "Kim Davies ", + "name": "idna", + "version": "3.4", + "cpe": "cpe:2.3:a:kim_davies_\\", + "name": "ipaddress", + "version": "1.0.23", + "licenses": [ + { + "license": { + "name": "Python Software Foundation License" + } + } + ], + "cpe": "cpe:2.3:a:philipp_hagemeister_project:python-ipaddress:1.0.23:*:*:*:*:*:*:*", + "purl": "pkg:pypi/ipaddress@1.0.23" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/isl22@0.22-r0?arch=x86_64&distro=alpine-3.16.5&package-id=fe68ca8546c4e97d", + "publisher": "Timo Teräs ", + "name": "isl22", + "version": "0.22-r0", + "description": "An Integer Set Library for the Polyhedral Model", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isl22:isl22:0.22-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/isl22@0.22-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "http://isl.gforge.inria.fr/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/itsdangerous@1.1.0?package-id=633bec45aabde3ce", + "author": "Armin Ronacher ", + "name": "itsdangerous", + "version": "1.1.0", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:armin_ronacher_project:python-itsdangerous:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/itsdangerous@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/keyutils-libs@1.6.3-r1?arch=x86_64&upstream=keyutils&distro=alpine-3.16.5&package-id=8ee597dfe194ab60", + "publisher": "Natanael Copa ", + "name": "keyutils-libs", + "version": "1.6.3-r1", + "description": "Key utilities library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:keyutils-libs:keyutils-libs:1.6.3-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/keyutils-libs@1.6.3-r1?arch=x86_64&upstream=keyutils&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://people.redhat.com/~dhowells/keyutils/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/krb5-conf@1.0-r2?arch=x86_64&distro=alpine-3.16.5&package-id=50afffc56cc7e53", + "publisher": "Natanael Copa ", + "name": "krb5-conf", + "version": "1.0-r2", + "description": "Shared krb5.conf for both MIT krb5 and heimdal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:krb5-conf:krb5-conf:1.0-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/krb5-conf@1.0-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://web.mit.edu/kerberos/www/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/krb5-libs@1.19.4-r0?arch=x86_64&upstream=krb5&distro=alpine-3.16.5&package-id=4cdf917c85417723", + "publisher": "Natanael Copa ", + "name": "krb5-libs", + "version": "1.19.4-r0", + "description": "The shared libraries used by Kerberos 5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:krb5-libs:krb5-libs:1.19.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/krb5-libs@1.19.4-r0?arch=x86_64&upstream=krb5&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://web.mit.edu/kerberos/www/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libatomic@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5&package-id=391e506485915ed6", + "publisher": "Ariadne Conill ", + "name": "libatomic", + "version": "11.2.1_git20220219-r2", + "description": "GCC Atomic library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libatomic:libatomic:11.2.1_git20220219-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libatomic@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libbz2@1.0.8-r1?arch=x86_64&upstream=bzip2&distro=alpine-3.16.5&package-id=b681aee18ae0aa50", + "publisher": "Natanael Copa ", + "name": "libbz2", + "version": "1.0.8-r1", + "description": "Shared library for bz2", + "licenses": [ + { + "license": { + "id": "bzip2-1.0.6" + } + } + ], + "cpe": "cpe:2.3:a:libbz2:libbz2:1.0.8-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libbz2@1.0.8-r1?arch=x86_64&upstream=bzip2&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "http://sources.redhat.com/bzip2", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-dev@0.7.2-r3?arch=x86_64&distro=alpine-3.16.5&package-id=ffa8d1e8b50ff4be", + "publisher": "Natanael Copa ", + "name": "libc-dev", + "version": "0.7.2-r3", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libc-dev:libc-dev:0.7.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-dev@0.7.2-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.16.5&package-id=2abd3b45f6fa4702", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r3", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcom_err@1.46.6-r0?arch=x86_64&upstream=e2fsprogs&distro=alpine-3.16.5&package-id=25b329ab3289e91c", + "publisher": "Natanael Copa ", + "name": "libcom_err", + "version": "1.46.6-r0", + "description": "Common error description library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libcom-err:libcom-err:1.46.6-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcom_err@1.46.6-r0?arch=x86_64&upstream=e2fsprogs&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "http://e2fsprogs.sourceforge.net", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5&package-id=13bc051822a24e8d", + "publisher": "Timo Teras ", + "name": "libcrypto1.1", + "version": "1.1.1t-r2", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1t-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libedit@20210910.3.1-r0?arch=x86_64&distro=alpine-3.16.5&package-id=306ebeb39081e8f5", + "publisher": "Drew DeVault ", + "name": "libedit", + "version": "20210910.3.1-r0", + "description": "BSD line editing library", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libedit:libedit:20210910.3.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libedit@20210910.3.1-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.thrysoee.dk/editline", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libffi@3.4.2-r1?arch=x86_64&distro=alpine-3.16.5&package-id=d9c90e0c86210cde", + "publisher": "Natanael Copa ", + "name": "libffi", + "version": "3.4.2-r1", + "description": "portable, high level programming interface to various calling conventions.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libffi:libffi:3.4.2-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libffi@3.4.2-r1?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://sourceware.org/libffi/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libffi-dev@3.4.2-r1?arch=x86_64&upstream=libffi&distro=alpine-3.16.5&package-id=7a3db6fd86ea285", + "publisher": "Natanael Copa ", + "name": "libffi-dev", + "version": "3.4.2-r1", + "description": "portable, high level programming interface to various calling conventions. (development files)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libffi-dev:libffi-dev:3.4.2-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libffi-dev@3.4.2-r1?arch=x86_64&upstream=libffi&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://sourceware.org/libffi/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgcc@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5&package-id=d2886381f1e7cdb2", + "publisher": "Ariadne Conill ", + "name": "libgcc", + "version": "11.2.1_git20220219-r2", + "description": "GNU C compiler runtime libraries", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgcc:libgcc:11.2.1_git20220219-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgcc@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgomp@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5&package-id=d3d0296e3355a335", + "publisher": "Ariadne Conill ", + "name": "libgomp", + "version": "11.2.1_git20220219-r2", + "description": "GCC shared-memory parallel programming API library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgomp:libgomp:11.2.1_git20220219-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgomp@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libintl@0.21-r2?arch=x86_64&upstream=gettext&distro=alpine-3.16.5&package-id=8a4b8fffbba0af61", + "publisher": "Carlo Landmeter ", + "name": "libintl", + "version": "0.21-r2", + "description": "GNU gettext runtime library", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libintl:libintl:0.21-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libintl@0.21-r2?arch=x86_64&upstream=gettext&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/gettext/gettext.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libmagic@5.41-r0?arch=x86_64&upstream=file&distro=alpine-3.16.5&package-id=cb8a148cd2dc6b35", + "publisher": "Natanael Copa ", + "name": "libmagic", + "version": "5.41-r0", + "description": "File type identification library", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libmagic:libmagic:5.41-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libmagic@5.41-r0?arch=x86_64&upstream=file&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.darwinsys.com/file/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libnsl@2.0.0-r0?arch=x86_64&distro=alpine-3.16.5&package-id=684ad1c4c0c42987", + "publisher": "Valery Kartel ", + "name": "libnsl", + "version": "2.0.0-r0", + "description": "Public client interface for NIS(YP) and NIS+ in a IPv6 ready version", + "licenses": [ + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:thkukuk:libnsl:2.0.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libnsl@2.0.0-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://github.com/thkukuk/libnsl", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5&package-id=609cb94e63dc06dd", + "publisher": "Timo Teras ", + "name": "libssl1.1", + "version": "1.1.1t-r2", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1t-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libstdc++@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5&package-id=9913678ca8fd323d", + "publisher": "Ariadne Conill ", + "name": "libstdc++", + "version": "11.2.1_git20220219-r2", + "description": "GNU C++ standard runtime library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:11.2.1_git20220219-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libstdc++@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libtirpc@1.3.2-r1?arch=x86_64&distro=alpine-3.16.5&package-id=7879d46219520605", + "publisher": "Natanael Copa ", + "name": "libtirpc", + "version": "1.3.2-r1", + "description": "Transport Independent RPC library (SunRPC replacement)", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc:libtirpc:1.3.2-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libtirpc@1.3.2-r1?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://sourceforge.net/projects/libtirpc", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libtirpc-conf@1.3.2-r1?arch=x86_64&upstream=libtirpc&distro=alpine-3.16.5&package-id=2473c071ab562d92", + "publisher": "Natanael Copa ", + "name": "libtirpc-conf", + "version": "1.3.2-r1", + "description": "Configuration files for TI-RPC", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc-conf:libtirpc-conf:1.3.2-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libtirpc-conf@1.3.2-r1?arch=x86_64&upstream=libtirpc&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://sourceforge.net/projects/libtirpc", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libuuid@2.38-r1?arch=x86_64&upstream=util-linux&distro=alpine-3.16.5&package-id=8732526a564c0dca", + "publisher": "Natanael Copa ", + "name": "libuuid", + "version": "2.38-r1", + "description": "DCE compatible Universally Unique Identifier library", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "AND" + } + } + ], + "cpe": "cpe:2.3:a:libuuid:libuuid:2.38-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libuuid@2.38-r1?arch=x86_64&upstream=util-linux&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://git.kernel.org/cgit/utils/util-linux/util-linux.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libverto@0.3.2-r0?arch=x86_64&distro=alpine-3.16.5&package-id=b3642afc50cf09b9", + "publisher": "Francesco Colista ", + "name": "libverto", + "version": "0.3.2-r0", + "description": "Main loop abstraction library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:npmccallum:libverto:0.3.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libverto@0.3.2-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://github.com/npmccallum/libverto", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/linux-headers@5.16.7-r1?arch=x86_64&distro=alpine-3.16.5&package-id=43e9a2c98b57e350", + "publisher": "Natanael Copa ", + "name": "linux-headers", + "version": "5.16.7-r1", + "description": "Linux system headers", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:linux-headers:linux-headers:5.16.7-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/linux-headers@5.16.7-r1?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://kernel.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/lockfile@0.12.2?package-id=10b97a5fb853fc77", + "author": "OpenStack ", + "name": "lockfile", + "version": "0.12.2", + "licenses": [ + { + "license": { + "name": "UNKNOWN" + } + } + ], + "cpe": "cpe:2.3:a:openstack_dev_project:python-lockfile:0.12.2:*:*:*:*:*:*:*", + "purl": "pkg:pypi/lockfile@0.12.2" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/make@4.3-r0?arch=x86_64&distro=alpine-3.16.5&package-id=d80635964dcc0aa2", + "publisher": "Natanael Copa ", + "name": "make", + "version": "4.3-r0", + "description": "GNU make utility to maintain groups of programs", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:make:make:4.3-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/make@4.3-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/make", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/more-itertools@8.13.0?package-id=54ab8b44d8723662", + "author": "Erik Rose ", + "name": "more-itertools", + "version": "8.13.0", + "cpe": "cpe:2.3:a:erik_rose_\\", + "name": "mpc1", + "version": "1.2.1-r0", + "description": "Multiprecision C library", + "licenses": [ + { + "license": { + "id": "LGPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:mpc1:mpc1:1.2.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/mpc1@1.2.1-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "http://www.multiprecision.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/mpdecimal@2.5.1-r1?arch=x86_64&distro=alpine-3.16.5&package-id=7451f4ae27110f16", + "publisher": "Stefan Stutz ", + "name": "mpdecimal", + "version": "2.5.1-r1", + "description": "complete implementation of the General Decimal Arithmetic Specification", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:mpdecimal:mpdecimal:2.5.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/mpdecimal@2.5.1-r1?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.bytereef.org/mpdecimal/index.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/mpfr4@4.1.0-r0?arch=x86_64&distro=alpine-3.16.5&package-id=c45fe989339766c4", + "publisher": "Natanael Copa ", + "name": "mpfr4", + "version": "4.1.0-r0", + "description": "multiple-precision floating-point library", + "licenses": [ + { + "license": { + "id": "LGPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:mpfr4:mpfr4:4.1.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/mpfr4@4.1.0-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.mpfr.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.2.3-r2?arch=x86_64&distro=alpine-3.16.5&package-id=24c6089b81ca7d19", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.2.3-r2", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.2.3-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.2.3-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-dev@1.2.3-r2?arch=x86_64&upstream=musl&distro=alpine-3.16.5&package-id=d85a38b286a3bde1", + "publisher": "Timo Teräs ", + "name": "musl-dev", + "version": "1.2.3-r2", + "description": "the musl c library (libc) implementation (development files)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl-dev:1.2.3-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-dev@1.2.3-r2?arch=x86_64&upstream=musl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.3-r2?arch=x86_64&upstream=musl&distro=alpine-3.16.5&package-id=d33c14d727ae74d1", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.2.3-r2", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.2.3-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.2.3-r2?arch=x86_64&upstream=musl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ncurses-libs@6.3_p20220521-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.16.5&package-id=c2bd1192d3d60d2c", + "publisher": "Natanael Copa ", + "name": "ncurses-libs", + "version": "6.3_p20220521-r0", + "description": "Ncurses libraries", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-libs:ncurses-libs:6.3_p20220521-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ncurses-libs@6.3_p20220521-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://invisible-island.net/ncurses/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ncurses-terminfo-base@6.3_p20220521-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.16.5&package-id=28679685d0eccfdc", + "publisher": "Natanael Copa ", + "name": "ncurses-terminfo-base", + "version": "6.3_p20220521-r0", + "description": "Descriptions of common terminals", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-terminfo-base:ncurses-terminfo-base:6.3_p20220521-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ncurses-terminfo-base@6.3_p20220521-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://invisible-island.net/ncurses/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/omsdk@1.2.503?package-id=4a4dbc5de5d52aeb", + "author": "Vaideeswaran Ganesan ", + "name": "omsdk", + "version": "1.2.503", + "licenses": [ + { + "license": { + "name": "Apache Software License" + } + } + ], + "cpe": "cpe:2.3:a:vaideeswaran_ganesan_project:python-omsdk:1.2.503:*:*:*:*:*:*:*", + "purl": "pkg:pypi/omsdk@1.2.503" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/openssh@9.0_p1-r2?arch=x86_64&distro=alpine-3.16.5&package-id=be35bb8e9f7dd701", + "publisher": "Natanael Copa ", + "name": "openssh", + "version": "9.0_p1-r2", + "description": "Port of OpenBSD's free SSH release", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:openssh:openssh:9.0_p1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/openssh@9.0_p1-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssh.com/portable.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/openssh-client-common@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5&package-id=3fa98e2b8fec2d35", + "publisher": "Natanael Copa ", + "name": "openssh-client-common", + "version": "9.0_p1-r2", + "description": "OpenBSD's SSH client common files", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:openssh-client-common:openssh-client-common:9.0_p1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/openssh-client-common@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssh.com/portable.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/openssh-client-default@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5&package-id=e25c4647c0a314b5", + "publisher": "Natanael Copa ", + "name": "openssh-client-default", + "version": "9.0_p1-r2", + "description": "OpenBSD's SSH client", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:openssh-client-default:openssh-client-default:9.0_p1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/openssh-client-default@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssh.com/portable.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/openssh-keygen@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5&package-id=f68b16c70b1e9cd5", + "publisher": "Natanael Copa ", + "name": "openssh-keygen", + "version": "9.0_p1-r2", + "description": "ssh helper program for generating keys", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:openssh-keygen:openssh-keygen:9.0_p1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/openssh-keygen@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssh.com/portable.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/openssh-server@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5&package-id=c965d48edfd50c41", + "publisher": "Natanael Copa ", + "name": "openssh-server", + "version": "9.0_p1-r2", + "description": "OpenSSH server", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:openssh-server:openssh-server:9.0_p1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/openssh-server@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssh.com/portable.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/openssh-server-common@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5&package-id=28229e04c06729a4", + "publisher": "Natanael Copa ", + "name": "openssh-server-common", + "version": "9.0_p1-r2", + "description": "OpenSSH server configuration files", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:openssh-server-common:openssh-server-common:9.0_p1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/openssh-server-common@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssh.com/portable.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/openssh-sftp-server@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5&package-id=6fe5b21b307e0521", + "publisher": "Natanael Copa ", + "name": "openssh-sftp-server", + "version": "9.0_p1-r2", + "description": "ssh sftp server module", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:openssh-sftp-server:openssh-sftp-server:9.0_p1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/openssh-sftp-server@9.0_p1-r2?arch=x86_64&upstream=openssh&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssh.com/portable.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/openssl@1.1.1t-r2?arch=x86_64&distro=alpine-3.16.5&package-id=d95cfbb74f91afb7", + "publisher": "Timo Teras ", + "name": "openssl", + "version": "1.1.1t-r2", + "description": "toolkit for transport layer security (TLS) - version 1.1", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:openssl:openssl:1.1.1t-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/openssl@1.1.1t-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/openssl-dev@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5&package-id=cb7667934e8f9a17", + "publisher": "Timo Teras ", + "name": "openssl-dev", + "version": "1.1.1t-r2", + "description": "toolkit for transport layer security (TLS) - version 1.1 (development files)", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:openssl-dev:openssl-dev:1.1.1t-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/openssl-dev@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/ordered-set@4.0.2?package-id=e389023f44616ed7", + "name": "ordered-set", + "version": "4.0.2", + "licenses": [ + { + "license": { + "name": "MIT-LICENSE" + } + } + ], + "cpe": "cpe:2.3:a:python-ordered-set:python-ordered-set:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:pypi/ordered-set@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/packaging@21.3?package-id=8adac1d6361364de", + "author": "Donald Stufft and individual contributors ", + "name": "packaging", + "version": "21.3", + "licenses": [ + { + "license": { + "name": "BSD-2-Clause or Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:donald_stufft_and_individual_contributors_project:python-packaging:21.3:*:*:*:*:*:*:*", + "purl": "pkg:pypi/packaging@21.3" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/packaging@23.1?package-id=5a324951ccac3547", + "author": "Donald Stufft ", + "name": "packaging", + "version": "23.1", + "cpe": "cpe:2.3:a:donald_stufft_\\", + "name": "paramiko", + "version": "2.6.0", + "licenses": [ + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:jeff_forcier_project:python-paramiko:2.6.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/paramiko@2.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/patch@2.7.6-r7?arch=x86_64&distro=alpine-3.16.5&package-id=74b77c27934e2cfc", + "publisher": "Natanael Copa ", + "name": "patch", + "version": "2.7.6-r7", + "description": "Utility to apply diffs to files", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:patch:patch:2.7.6-r7:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/patch@2.7.6-r7?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/patch/patch.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pep517@0.12.0?package-id=6112c8190029179c", + "author": "Thomas Kluyver ", + "name": "pep517", + "version": "0.12.0", + "licenses": [ + { + "license": { + "name": "UNKNOWN" + } + } + ], + "cpe": "cpe:2.3:a:thomas_kluyver_project:python-pep517:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pep517@0.12.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pexpect@4.7.0?package-id=7774c979cf213f91", + "author": "Noah Spurrier; Thomas Kluyver; Jeff Quast ", + "name": "pexpect", + "version": "4.7.0", + "licenses": [ + { + "license": { + "name": "ISC license" + } + } + ], + "cpe": "cpe:2.3:a:noah_spurrier\\;_thomas_kluyver\\;_jeff_quast_project:python-pexpect:4.7.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pexpect@4.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pip@22.0.4?package-id=2662dd9050ca781b", + "author": "The pip developers ", + "name": "pip", + "version": "22.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pip_developers_project:python-pip:22.0.4:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pip@22.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pip@22.1.1?package-id=1446eeabf64d1c52", + "author": "The pip developers ", + "name": "pip", + "version": "22.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pip_developers_project:python-pip:22.1.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pip@22.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pip@23.0.1?package-id=5db0c62dfc43a949", + "author": "The pip developers ", + "name": "pip", + "version": "23.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pip_developers_project:python-pip:23.0.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pip@23.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pip-licenses@4.2.0?package-id=60dc224797b0c9ce", + "author": "raimon ", + "name": "pip-licenses", + "version": "4.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:python-pip-licenses:python-pip-licenses:4.2.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pip-licenses@4.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/pkgconf@1.8.1-r0?arch=x86_64&distro=alpine-3.16.5&package-id=54d74b2ddb213964", + "publisher": "Ariadne Conill ", + "name": "pkgconf", + "version": "1.8.1-r0", + "description": "development framework configuration tools", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:pkgconf:pkgconf:1.8.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/pkgconf@1.8.1-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://git.sr.ht/~kaniini/pkgconf", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/ply@3.11?package-id=88cf0fb6dd1ec938", + "author": "David Beazley ", + "name": "ply", + "version": "3.11", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:david_beazley_project:python-ply:3.11:*:*:*:*:*:*:*", + "purl": "pkg:pypi/ply@3.11" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/prettytable@3.7.0?package-id=b276023c781fad69", + "author": "Luke Maurits ", + "name": "prettytable", + "version": "3.7.0", + "licenses": [ + { + "license": { + "name": "BSD (3 clause)" + } + } + ], + "cpe": "cpe:2.3:a:luke_maurits_\\", + "name": "psutil", + "version": "5.6.3", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:giampaolo_rodola_project:python-psutil:5.6.3:*:*:*:*:*:*:*", + "purl": "pkg:pypi/psutil@5.6.3" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/ptyprocess@0.6.0?package-id=f5f209a3f8eea68d", + "author": "Thomas Kluyver ", + "name": "ptyprocess", + "version": "0.6.0", + "licenses": [ + { + "license": { + "name": "UNKNOWN" + } + } + ], + "cpe": "cpe:2.3:a:thomas_kluyver_project:python-ptyprocess:0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/ptyprocess@0.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/py3-appdirs@1.4.4-r3?arch=x86_64&distro=alpine-3.16.5&package-id=485881cbb9104991", + "publisher": "Keith Maxwell ", + "name": "py3-appdirs", + "version": "1.4.4-r3", + "description": "A small Python module for determining appropriate platform-specific dirs.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:appdirs-project:py3-appdirs:1.4.4-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/py3-appdirs@1.4.4-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://pypi.org/project/appdirs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/py3-cffi@1.15.0-r0?arch=x86_64&distro=alpine-3.16.5&package-id=e841a659b3479dc4", + "name": "py3-cffi", + "version": "1.15.0-r0", + "description": "Foreign function interface for calling C code from Python3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cffi-project:py3-cffi:1.15.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/py3-cffi@1.15.0-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "http://cffi.readthedocs.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/py3-contextlib2@21.6.0-r2?arch=x86_64&distro=alpine-3.16.5&package-id=8e76c74c36f884f8", + "name": "py3-contextlib2", + "version": "21.6.0-r2", + "description": "Proving ground for contextlib from Python3", + "licenses": [ + { + "license": { + "id": "PSF-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:contextlib2-project:py3-contextlib2:21.6.0-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/py3-contextlib2@21.6.0-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://github.com/jazzband/contextlib2", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/py3-cparser@2.20-r2?arch=x86_64&distro=alpine-3.16.5&package-id=bdddc91ccde91e0f", + "name": "py3-cparser", + "version": "2.20-r2", + "description": "C parser written in Python3", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:cparser-project:py3-cparser:2.20-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/py3-cparser@2.20-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://github.com/eliben/pycparser", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/py3-cryptography@3.4.8-r1?arch=x86_64&distro=alpine-3.16.5&package-id=9a8ae52a62e5a5af", + "publisher": "August Klein ", + "name": "py3-cryptography", + "version": "3.4.8-r1", + "description": "Cryptographic recipes and primitives for Python", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "OR" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:python-cryptography-project:python-cryptography:3.4.8-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/py3-cryptography@3.4.8-r1?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://cryptography.io/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/py3-idna@3.3-r2?arch=x86_64&distro=alpine-3.16.5&package-id=92925b85f40ff209", + "publisher": "Francesco Colista ", + "name": "py3-idna", + "version": "3.3-r2", + "description": "IDNA 2008 and UTS #46 for Python3", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:idna-project:py3-idna:3.3-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/py3-idna@3.3-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://github.com/kjd/idna", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/py3-more-itertools@8.13.0-r0?arch=x86_64&distro=alpine-3.16.5&package-id=c539a2cdeed7752b", + "publisher": "TBK ", + "name": "py3-more-itertools", + "version": "8.13.0-r0", + "description": "More routines for operating on iterables, beyond itertools", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:more-itertools-project:py3-more-itertools:8.13.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/py3-more-itertools@8.13.0-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://github.com/more-itertools/more-itertools", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/py3-openssl@21.0.0-r1?arch=x86_64&distro=alpine-3.16.5&package-id=8e5b8dfff545e548", + "publisher": "Natanael Copa ", + "name": "py3-openssl", + "version": "21.0.0-r1", + "description": "Python3 wrapper module around the OpenSSL library", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:openssl-project:py3-openssl:21.0.0-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/py3-openssl@21.0.0-r1?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://github.com/pyca/pyopenssl", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/py3-ordered-set@4.0.2-r3?arch=x86_64&distro=alpine-3.16.5&package-id=ffc2d715e09abd5b", + "name": "py3-ordered-set", + "version": "4.0.2-r3", + "description": "MutableSet that remembers its order", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ordered-set-project:py3-ordered-set:4.0.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/py3-ordered-set@4.0.2-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://github.com/LuminosoInsight/ordered-set", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/py3-packaging@21.3-r0?arch=x86_64&distro=alpine-3.16.5&package-id=96cbdd2443a73b87", + "name": "py3-packaging", + "version": "21.3-r0", + "description": "Core utilities for Python3 packages", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:packaging-project:py3-packaging:21.3-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/py3-packaging@21.3-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://pypi.python.org/pypi/packaging", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/py3-parsing@2.4.7-r3?arch=x86_64&distro=alpine-3.16.5&package-id=56d00708afeded71", + "publisher": "Natanael Copa ", + "name": "py3-parsing", + "version": "2.4.7-r3", + "description": "An object-oriented approach to text processing", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:parsing-project:py3-parsing:2.4.7-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/py3-parsing@2.4.7-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://github.com/pyparsing/pyparsing", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/py3-pep517@0.12.0-r2?arch=x86_64&distro=alpine-3.16.5&package-id=ab4e2526e5fa9d87", + "publisher": "psykose ", + "name": "py3-pep517", + "version": "0.12.0-r2", + "description": "Wrappers to build python3 packgaes with PEP 517 hooks", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pep517-project:py3-pep517:0.12.0-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/py3-pep517@0.12.0-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://github.com/pypa/pep517", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/py3-pip@22.1.1-r0?arch=x86_64&distro=alpine-3.16.5&package-id=f3ffc4c5baf06fc0", + "publisher": "Fabian Affolter ", + "name": "py3-pip", + "version": "22.1.1-r0", + "description": "Tool for installing and managing Python packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pip-project:py3-pip:22.1.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/py3-pip@22.1.1-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "http://www.pip-installer.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/py3-retrying@1.3.3-r3?arch=x86_64&distro=alpine-3.16.5&package-id=33fa125381bfce5b", + "name": "py3-retrying", + "version": "1.3.3-r3", + "description": "General purpose Python3 retrying library", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:retrying-project:py3-retrying:1.3.3-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/py3-retrying@1.3.3-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://github.com/rholder/retrying/releases", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/py3-setuptools@59.4.0-r0?arch=x86_64&distro=alpine-3.16.5&package-id=52cce1a31d4319c7", + "publisher": "psykose ", + "name": "py3-setuptools", + "version": "59.4.0-r0", + "description": "Collection of enhancements to the Python3 distutils", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:setuptools-project:py3-setuptools:59.4.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/py3-setuptools@59.4.0-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://pypi.python.org/pypi/setuptools", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/py3-six@1.16.0-r1?arch=x86_64&distro=alpine-3.16.5&package-id=b3b1371f747548ed", + "publisher": "Drew DeVault ", + "name": "py3-six", + "version": "1.16.0-r1", + "description": "Python 2 and 3 compatibility library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:six-project:py3-six:1.16.0-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/py3-six@1.16.0-r1?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://pypi.python.org/pypi/six", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/py3-tomli@2.0.1-r1?arch=x86_64&distro=alpine-3.16.5&package-id=bb3a54ee1a02f369", + "publisher": "Michał Polański ", + "name": "py3-tomli", + "version": "2.0.1-r1", + "description": "Lil' TOML parser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tomli-project:py3-tomli:2.0.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/py3-tomli@2.0.1-r1?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://github.com/hukkin/tomli", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pyopenssl@21.0.0?package-id=1a476668d87426c5", + "author": "The pyOpenSSL developers ", + "name": "pyOpenSSL", + "version": "21.0.0", + "licenses": [ + { + "license": { + "name": "Apache License, Version 2.0" + } + } + ], + "cpe": "cpe:2.3:a:pyopenssl_developers_project:python-pyOpenSSL:21.0.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pyOpenSSL@21.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pyasn1@0.4.8?package-id=f1700db45a9a2342", + "author": "Ilya Etingof ", + "name": "pyasn1", + "version": "0.4.8", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:ilya_etingof_project:python-pyasn1:0.4.8:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pyasn1@0.4.8" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pycparser@2.19?package-id=2faf97ff113f6455", + "author": "Eli Bendersky ", + "name": "pycparser", + "version": "2.19", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:eli_bendersky_project:python-pycparser:2.19:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pycparser@2.19" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pycparser@2.20?package-id=2873718085b009eb", + "author": "Eli Bendersky ", + "name": "pycparser", + "version": "2.20", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:eli_bendersky_project:python-pycparser:2.20:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pycparser@2.20" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pycryptodomex@3.17?package-id=f00de750531e88db", + "author": "Helder Eijs ", + "name": "pycryptodomex", + "version": "3.17", + "licenses": [ + { + "license": { + "name": "BSD, Public Domain" + } + } + ], + "cpe": "cpe:2.3:a:python-pycryptodomex:python-pycryptodomex:3.17:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pycryptodomex@3.17" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pyparsing@2.4.7?package-id=489cb6c6c4b7eef", + "author": "Paul McGuire ", + "name": "pyparsing", + "version": "2.4.7", + "licenses": [ + { + "license": { + "name": "MIT License" + } + } + ], + "cpe": "cpe:2.3:a:paul_mcguire_project:python-pyparsing:2.4.7:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pyparsing@2.4.7" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pysmi@0.3.4?package-id=36f78e07dd7a0a77", + "author": "Ilya Etingof ", + "name": "pysmi", + "version": "0.3.4", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:ilya_etingof_project:python-pysmi:0.3.4:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pysmi@0.3.4" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pysnmp@4.4.12?package-id=8681507cf69b2f2d", + "author": "Ilya Etingof ", + "name": "pysnmp", + "version": "4.4.12", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:ilya_etingof_project:python-pysnmp:4.4.12:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pysnmp@4.4.12" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pysnmp-mibs@0.1.6?package-id=905d41feb3c02905", + "author": "Ilya Etingof ", + "name": "pysnmp-mibs", + "version": "0.1.6", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:ilya_etingof_\\_project:python-pysnmp-mibs:0.1.6:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pysnmp-mibs@0.1.6" + }, + { + "type": "application", + "bom-ref": "pkg:generic/python@3.10.11?package-id=4427f0aa35e83204", + "name": "python", + "version": "3.10.11", + "cpe": "cpe:2.3:a:python_software_foundation:python:3.10.11:*:*:*:*:*:*:*", + "purl": "pkg:generic/python@3.10.11" + }, + { + "type": "application", + "bom-ref": "pkg:generic/python@3.8.16?package-id=92f8822938c7aca6", + "name": "python", + "version": "3.8.16", + "cpe": "cpe:2.3:a:python_software_foundation:python:3.8.16:*:*:*:*:*:*:*", + "purl": "pkg:generic/python@3.8.16" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/python-daemon@2.2.3?package-id=7645ea87205522b3", + "author": "Ben Finney ", + "name": "python-daemon", + "version": "2.2.3", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:ben\\+python_project:python-daemon:2.2.3:*:*:*:*:*:*:*", + "purl": "pkg:pypi/python-daemon@2.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/python3@3.10.11-r0?arch=x86_64&distro=alpine-3.16.5&package-id=99c3fcfdc2714e19", + "publisher": "Natanael Copa ", + "name": "python3", + "version": "3.10.11-r0", + "description": "A high-level scripting language", + "licenses": [ + { + "license": { + "id": "PSF-2.0" + } + } + ], + "cpe": "cpe:2.3:a:python-software-foundation:python3:3.10.11-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/python3@3.10.11-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.python.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/python3-dev@3.10.11-r0?arch=x86_64&upstream=python3&distro=alpine-3.16.5&package-id=8cbfce2c6879df2d", + "publisher": "Natanael Copa ", + "name": "python3-dev", + "version": "3.10.11-r0", + "description": "A high-level scripting language (development files)", + "licenses": [ + { + "license": { + "id": "PSF-2.0" + } + } + ], + "cpe": "cpe:2.3:a:python3-dev:python3-dev:3.10.11-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/python3-dev@3.10.11-r0?arch=x86_64&upstream=python3&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.python.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pytz@2019.1?package-id=5349819edf2c8f6d", + "author": "Stuart Bishop ", + "name": "pytz", + "version": "2019.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stuart_bishop_project:python-pytz:2019.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pytz@2019.1" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/readline@8.1.2-r0?arch=x86_64&distro=alpine-3.16.5&package-id=bb734bcc27e60920", + "publisher": "Natanael Copa ", + "name": "readline", + "version": "8.1.2-r0", + "description": "GNU readline library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:readline:readline:8.1.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/readline@8.1.2-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://tiswww.cwru.edu/php/chet/readline/rltop.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/requests@2.28.2?package-id=f088117d32fc1dd2", + "author": "Kenneth Reitz ", + "name": "requests", + "version": "2.28.2", + "licenses": [ + { + "license": { + "name": "Apache 2.0" + } + } + ], + "cpe": "cpe:2.3:a:kenneth_reitz_project:python-requests:2.28.2:*:*:*:*:*:*:*", + "purl": "pkg:pypi/requests@2.28.2" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/retrying@1.3.3?package-id=ad684810dbe6c655", + "author": "Ray Holder", + "name": "retrying", + "version": "1.3.3", + "licenses": [ + { + "license": { + "name": "Apache 2.0" + } + } + ], + "cpe": "cpe:2.3:a:ray_holder_project:python-retrying:1.3.3:*:*:*:*:*:*:*", + "purl": "pkg:pypi/retrying@1.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.3.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.16.5&package-id=206fdb47b3e980eb", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.3.4-r0", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.3.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.3.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/setuptools@57.5.0?package-id=85835c335c6d8275", + "author": "Python Packaging Authority ", + "name": "setuptools", + "version": "57.5.0", + "licenses": [ + { + "license": { + "name": "UNKNOWN" + } + } + ], + "cpe": "cpe:2.3:a:python_packaging_authority_project:python-setuptools:57.5.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/setuptools@57.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/setuptools@59.4.0?package-id=81f8baf91e27227f", + "author": "Python Packaging Authority ", + "name": "setuptools", + "version": "59.4.0", + "licenses": [ + { + "license": { + "name": "UNKNOWN" + } + } + ], + "cpe": "cpe:2.3:a:python_packaging_authority_project:python-setuptools:59.4.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/setuptools@59.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/six@1.12.0?package-id=54167c3927512610", + "author": "Benjamin Peterson ", + "name": "six", + "version": "1.12.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:benjamin_peterson_project:python-six:1.12.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/six@1.12.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/six@1.16.0?package-id=d474e456e4b17d48", + "author": "Benjamin Peterson ", + "name": "six", + "version": "1.16.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:benjamin_peterson_project:python-six:1.16.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/six@1.16.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/sqlite-libs@3.38.5-r0?arch=x86_64&upstream=sqlite&distro=alpine-3.16.5&package-id=6127833655f3995a", + "publisher": "Carlo Landmeter ", + "name": "sqlite-libs", + "version": "3.38.5-r0", + "description": "Sqlite3 library", + "licenses": [ + { + "license": { + "id": "blessing" + } + } + ], + "cpe": "cpe:2.3:a:sqlite-libs:sqlite-libs:3.38.5-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/sqlite-libs@3.38.5-r0?arch=x86_64&upstream=sqlite&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.sqlite.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&upstream=busybox&distro=alpine-3.16.5&package-id=674d1e2fba4d633a", + "publisher": "Sören Tempel ", + "name": "ssl_client", + "version": "1.35.0-r17", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.35.0-r17:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&upstream=busybox&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/tomli@2.0.1?package-id=f75bcb5aa2886364", + "author": "Taneli Hukkinen ", + "name": "tomli", + "version": "2.0.1", + "cpe": "cpe:2.3:a:taneli_hukkinen_\\", + "name": "tzdata", + "version": "2023c-r0", + "description": "Timezone data", + "licenses": [ + { + "license": { + "name": "Public-Domain" + } + } + ], + "cpe": "cpe:2.3:a:tzdata:tzdata:2023c-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/tzdata@2023c-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.iana.org/time-zones", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/urllib3@1.26.15?package-id=57647ba98106cfc3", + "author": "Andrey Petrov ", + "name": "urllib3", + "version": "1.26.15", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:andrey_petrov_project:python-urllib3:1.26.15:*:*:*:*:*:*:*", + "purl": "pkg:pypi/urllib3@1.26.15" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/wcwidth@0.2.6?package-id=12cb303b2017161f", + "author": "Jeff Quast ", + "name": "wcwidth", + "version": "0.2.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jeff_quast_project:python-wcwidth:0.2.6:*:*:*:*:*:*:*", + "purl": "pkg:pypi/wcwidth@0.2.6" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/wheel@0.40.0?package-id=a5bbcb2514f67f7a", + "author": "Daniel Holth ", + "name": "wheel", + "version": "0.40.0", + "cpe": "cpe:2.3:a:daniel_holth_\\", + "name": "xz-libs", + "version": "5.2.5-r1", + "description": "Library and CLI tools for XZ and LZMA compressed files (libraries)", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "name": "Public-Domain" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:xz-libs:xz-libs:5.2.5-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/xz-libs@5.2.5-r1?arch=x86_64&upstream=xz&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://tukaani.org/xz", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.12-r3?arch=x86_64&distro=alpine-3.16.5&package-id=75f0d92f695b4303", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.12-r3", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.12-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.12-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.16.5", + "description": "Alpine Linux v3.16", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.16.5" + }, + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/adduser@3.118ubuntu2?arch=all&distro=ubuntu-20.04&package-id=69d1980477020fa3", + "publisher": "Ubuntu Core Developers ", + "name": "adduser", + "version": "3.118ubuntu2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:adduser:adduser:3.118ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/adduser@3.118ubuntu2?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/apt@2.0.6?arch=amd64&distro=ubuntu-20.04&package-id=55988ea1c6f336e3", + "publisher": "Ubuntu Developers ", + "name": "apt", + "version": "2.0.6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:apt:apt:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/apt@2.0.6?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/base-files@11ubuntu5.3?arch=amd64&distro=ubuntu-20.04&package-id=1c2af4464cd392e1", + "publisher": "Ubuntu Developers ", + "name": "base-files", + "version": "11ubuntu5.3", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:11ubuntu5.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/base-files@11ubuntu5.3?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/base-files@11ubuntu5.4?arch=amd64&distro=ubuntu-20.04&package-id=63c89c28c512e1db", + "publisher": "Ubuntu Developers ", + "name": "base-files", + "version": "11ubuntu5.4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:11ubuntu5.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/base-files@11ubuntu5.4?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/base-passwd@3.5.47?arch=amd64&distro=ubuntu-20.04&package-id=8b6e494dac6dab09", + "publisher": "Colin Watson ", + "name": "base-passwd", + "version": "3.5.47", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "PD" + } + } + ], + "cpe": "cpe:2.3:a:base-passwd:base-passwd:3.5.47:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/base-passwd@3.5.47?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/bash@5.0-6ubuntu1.1?arch=amd64&distro=ubuntu-20.04&package-id=e774a3e87113196b", + "publisher": "Ubuntu Developers ", + "name": "bash", + "version": "5.0-6ubuntu1.1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:bash:bash:5.0-6ubuntu1.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/bash@5.0-6ubuntu1.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/bsdutils@1:2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux%402.34-0.1ubuntu9.1&distro=ubuntu-20.04&package-id=20018d8de777eda9", + "publisher": "Ubuntu Developers ", + "name": "bsdutils", + "version": "1:2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:bsdutils:bsdutils:1\\:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/bsdutils@1:2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux%402.34-0.1ubuntu9.1&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/bzip2@1.0.8-2?arch=amd64&distro=ubuntu-20.04&package-id=97dab883cac4c956", + "publisher": "Ubuntu Developers ", + "name": "bzip2", + "version": "1.0.8-2", + "licenses": [ + { + "license": { + "name": "BSD-variant" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:bzip2:bzip2:1.0.8-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/bzip2@1.0.8-2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/coreutils@8.30-3ubuntu2?arch=amd64&distro=ubuntu-20.04&package-id=f77283ee51e117fa", + "publisher": "Ubuntu Developers ", + "name": "coreutils", + "version": "8.30-3ubuntu2", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:coreutils:coreutils:8.30-3ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/coreutils@8.30-3ubuntu2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/dash@0.5.10.2-6?arch=amd64&distro=ubuntu-20.04&package-id=fa0f613df8411b7", + "publisher": "Ubuntu Developers ", + "name": "dash", + "version": "0.5.10.2-6", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:dash:dash:0.5.10.2-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/dash@0.5.10.2-6?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/dbus@1.12.16-2ubuntu2.1?arch=amd64&distro=ubuntu-20.04&package-id=d48cd057ec28b1c0", + "publisher": "Ubuntu Developers ", + "name": "dbus", + "version": "1.12.16-2ubuntu2.1", + "licenses": [ + { + "license": { + "id": "AFL-2.1" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-generic" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "Tcl-BSDish" + } + }, + { + "license": { + "name": "g10-permissive" + } + } + ], + "cpe": "cpe:2.3:a:dbus:dbus:1.12.16-2ubuntu2.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/dbus@1.12.16-2ubuntu2.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/dbus-x11@1.12.16-2ubuntu2.1?arch=amd64&upstream=dbus&distro=ubuntu-20.04&package-id=ab4fab48ce6c6367", + "publisher": "Ubuntu Developers ", + "name": "dbus-x11", + "version": "1.12.16-2ubuntu2.1", + "licenses": [ + { + "license": { + "id": "AFL-2.1" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-generic" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "Tcl-BSDish" + } + }, + { + "license": { + "name": "g10-permissive" + } + } + ], + "cpe": "cpe:2.3:a:dbus-x11:dbus-x11:1.12.16-2ubuntu2.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/dbus-x11@1.12.16-2ubuntu2.1?arch=amd64&upstream=dbus&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/debconf@1.5.73?arch=all&distro=ubuntu-20.04&package-id=128eb6066f5ec19c", + "publisher": "Ubuntu Developers ", + "name": "debconf", + "version": "1.5.73", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:debconf:debconf:1.5.73:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/debconf@1.5.73?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/debianutils@4.9.1?arch=amd64&distro=ubuntu-20.04&package-id=328b1094024bda26", + "publisher": "Ubuntu Developers ", + "name": "debianutils", + "version": "4.9.1", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:debianutils:debianutils:4.9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/debianutils@4.9.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/diffutils@1:3.7-3?arch=amd64&distro=ubuntu-20.04&package-id=d21aefcaf9c9c9b6", + "publisher": "Ubuntu Developers ", + "name": "diffutils", + "version": "1:3.7-3", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:diffutils:diffutils:1\\:3.7-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/diffutils@1:3.7-3?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/dmsetup@2:1.02.167-1ubuntu1?arch=amd64&upstream=lvm2%402.03.07-1ubuntu1&distro=ubuntu-20.04&package-id=c0d6316be2747294", + "publisher": "Ubuntu Developers ", + "name": "dmsetup", + "version": "2:1.02.167-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:dmsetup:dmsetup:2\\:1.02.167-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/dmsetup@2:1.02.167-1ubuntu1?arch=amd64&upstream=lvm2%402.03.07-1ubuntu1&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/dpkg@1.19.7ubuntu3?arch=amd64&distro=ubuntu-20.04&package-id=e28aea5c134a7f8", + "publisher": "Ubuntu Developers ", + "name": "dpkg", + "version": "1.19.7ubuntu3", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain-md5" + } + }, + { + "license": { + "name": "public-domain-s-s-d" + } + } + ], + "cpe": "cpe:2.3:a:dpkg:dpkg:1.19.7ubuntu3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/dpkg@1.19.7ubuntu3?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/e2fsprogs@1.45.5-2ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=6a037357f3ebf47a", + "publisher": "Ubuntu Developers ", + "name": "e2fsprogs", + "version": "1.45.5-2ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:e2fsprogs:e2fsprogs:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/e2fsprogs@1.45.5-2ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/fdisk@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=a57a5f37c7970fe9", + "publisher": "Ubuntu Developers ", + "name": "fdisk", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:fdisk:fdisk:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/fdisk@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/file@1:5.38-4?arch=amd64&distro=ubuntu-20.04&package-id=e7f183ce6dc05cfb", + "publisher": "Ubuntu Developers ", + "name": "file", + "version": "1:5.38-4", + "licenses": [ + { + "license": { + "name": "BSD-2-Clause-alike" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-Clause-regents" + } + }, + { + "license": { + "name": "MIT-Old-Style-with-legal-disclaimer-2" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:file:file:1\\:5.38-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/file@1:5.38-4?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/findutils@4.7.0-1ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=103a5999463b7e08", + "publisher": "Ubuntu Developers ", + "name": "findutils", + "version": "4.7.0-1ubuntu1", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:findutils:findutils:4.7.0-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/findutils@4.7.0-1ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/gcc-10-base@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04&package-id=a268d6ad2986f239", + "publisher": "Ubuntu Core developers ", + "name": "gcc-10-base", + "version": "10.3.0-1ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:gcc-10-base:gcc-10-base:10.3.0-1ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/gcc-10-base@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/c9s/goprocinfo@v0.0.0-20170724085704-0010a05ce49f?package-id=5afefb79ba65d0ad", + "name": "github.com/c9s/goprocinfo", + "version": "v0.0.0-20170724085704-0010a05ce49f", + "cpe": "cpe:2.3:a:c9s:goprocinfo:v0.0.0-20170724085704-0010a05ce49f:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/c9s/goprocinfo@v0.0.0-20170724085704-0010a05ce49f" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0-20190314233015-f79a8a8ca69d?package-id=aba9920ef814788c", + "name": "github.com/cpuguy83/go-md2man/v2", + "version": "v2.0.0-20190314233015-f79a8a8ca69d", + "cpe": "cpe:2.3:a:cpuguy83:go-md2man\\/v2:v2.0.0-20190314233015-f79a8a8ca69d:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0-20190314233015-f79a8a8ca69d" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/longhorn/go-iscsi-helper@v0.0.0-20210330030558-49a327fb024e?package-id=8f8714a0cea08362", + "name": "github.com/longhorn/go-iscsi-helper", + "version": "v0.0.0-20210330030558-49a327fb024e", + "cpe": "cpe:2.3:a:longhorn:go-iscsi-helper:v0.0.0-20210330030558-49a327fb024e:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/longhorn/go-iscsi-helper@v0.0.0-20210330030558-49a327fb024e" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/longhorn/longhorn-share-manager@(devel)?package-id=a622c42a40ecccff", + "name": "github.com/longhorn/longhorn-share-manager", + "version": "(devel)", + "cpe": "cpe:2.3:a:longhorn:longhorn-share-manager:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/longhorn/longhorn-share-manager@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/russross/blackfriday/v2@v2.0.1?package-id=16d5d3d84d04c2ea", + "name": "github.com/russross/blackfriday/v2", + "version": "v2.0.1", + "cpe": "cpe:2.3:a:russross:blackfriday\\/v2:v2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/russross/blackfriday/v2@v2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/shurcool/sanitized_anchor_name@v1.0.0?package-id=249f5a2feb25f602", + "name": "github.com/shurcooL/sanitized_anchor_name", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:shurcooL:sanitized-anchor-name:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/shurcooL/sanitized_anchor_name@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.4.2?package-id=c5b63fc8fe490fde", + "name": "github.com/sirupsen/logrus", + "version": "v1.4.2", + "cpe": "cpe:2.3:a:sirupsen:logrus:v1.4.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/sirupsen/logrus@v1.4.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/urfave/cli@v1.22.1?package-id=2191036db3d08d14", + "name": "github.com/urfave/cli", + "version": "v1.22.1", + "cpe": "cpe:2.3:a:urfave:cli:v1.22.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/urfave/cli@v1.22.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20200930185726-fdedc70b468f?package-id=86f4aba6305ceccc", + "name": "golang.org/x/sys", + "version": "v0.0.0-20200930185726-fdedc70b468f", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20200930185726-fdedc70b468f:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20200930185726-fdedc70b468f" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/gpgv@2.2.19-3ubuntu2.1?arch=amd64&upstream=gnupg2&distro=ubuntu-20.04&package-id=b3a56223224b45d2", + "publisher": "Ubuntu Developers ", + "name": "gpgv", + "version": "2.2.19-3ubuntu2.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "RFC-Reference" + } + }, + { + "license": { + "name": "TinySCHEME" + } + }, + { + "license": { + "name": "permissive" + } + } + ], + "cpe": "cpe:2.3:a:gpgv:gpgv:2.2.19-3ubuntu2.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/gpgv@2.2.19-3ubuntu2.1?arch=amd64&upstream=gnupg2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/grep@3.4-1?arch=amd64&distro=ubuntu-20.04&package-id=e7af9af4b90473f", + "publisher": "Ubuntu Developers ", + "name": "grep", + "version": "3.4-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:grep:grep:3.4-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/grep@3.4-1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/gzip@1.10-0ubuntu4?arch=amd64&distro=ubuntu-20.04&package-id=a9696917d3b9f9fc", + "publisher": "Ubuntu Developers ", + "name": "gzip", + "version": "1.10-0ubuntu4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:gzip:gzip:1.10-0ubuntu4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/gzip@1.10-0ubuntu4?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/hostname@3.23?arch=amd64&distro=ubuntu-20.04&package-id=263dae70cc8e6a4f", + "publisher": "Ubuntu Developers ", + "name": "hostname", + "version": "3.23", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:hostname:hostname:3.23:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/hostname@3.23?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/init-system-helpers@1.57?arch=all&distro=ubuntu-20.04&package-id=b0e335d96f12154d", + "publisher": "Ubuntu Developers ", + "name": "init-system-helpers", + "version": "1.57", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:init-system-helpers:init-system-helpers:1.57:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/init-system-helpers@1.57?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/klog@v1.0.0?package-id=7a29956a571778b7", + "name": "k8s.io/klog", + "version": "v1.0.0", + "purl": "pkg:golang/k8s.io/klog@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/kubernetes@v1.16.15?package-id=e6f002049b6fc2e4", + "name": "k8s.io/kubernetes", + "version": "v1.16.15", + "purl": "pkg:golang/k8s.io/kubernetes@v1.16.15" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20190801114015-581e00157fb1?package-id=3a47bbf26714fca6", + "name": "k8s.io/utils", + "version": "v0.0.0-20190801114015-581e00157fb1", + "purl": "pkg:golang/k8s.io/utils@v0.0.0-20190801114015-581e00157fb1" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/keyutils@1.6-6ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=a61b8b47cf58815b", + "publisher": "Ubuntu Developers ", + "name": "keyutils", + "version": "1.6-6ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:keyutils:keyutils:1.6-6ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/keyutils@1.6-6ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/krb5-locales@1.17-6ubuntu4.1?arch=all&upstream=krb5&distro=ubuntu-20.04&package-id=87ea48972fb4adab", + "publisher": "Ubuntu Developers ", + "name": "krb5-locales", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:krb5-locales:krb5-locales:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/krb5-locales@1.17-6ubuntu4.1?arch=all&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libacl1@2.2.53-6?arch=amd64&upstream=acl&distro=ubuntu-20.04&package-id=5cec2c2009596050", + "publisher": "Ubuntu Developers ", + "name": "libacl1", + "version": "2.2.53-6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libacl1:libacl1:2.2.53-6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libacl1@2.2.53-6?arch=amd64&upstream=acl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libapparmor1@2.13.3-7ubuntu5.1?arch=amd64&upstream=apparmor&distro=ubuntu-20.04&package-id=efab527cfb41aa1b", + "publisher": "Ubuntu Developers ", + "name": "libapparmor1", + "version": "2.13.3-7ubuntu5.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libapparmor1:libapparmor1:2.13.3-7ubuntu5.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libapparmor1@2.13.3-7ubuntu5.1?arch=amd64&upstream=apparmor&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libapt-pkg6.0@2.0.6?arch=amd64&upstream=apt&distro=ubuntu-20.04&package-id=864e143f4c606a6c", + "publisher": "Ubuntu Developers ", + "name": "libapt-pkg6.0", + "version": "2.0.6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "GPLv2+" + } + } + ], + "cpe": "cpe:2.3:a:libapt-pkg6.0:libapt-pkg6.0:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libapt-pkg6.0@2.0.6?arch=amd64&upstream=apt&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libasn1-8-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=915f8cf154d1b7ce", + "publisher": "Ubuntu Developers ", + "name": "libasn1-8-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libasn1-8-heimdal:libasn1-8-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libasn1-8-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libattr1@1:2.4.48-5?arch=amd64&upstream=attr&distro=ubuntu-20.04&package-id=edf8dd62bd537bd5", + "publisher": "Ubuntu Developers ", + "name": "libattr1", + "version": "1:2.4.48-5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libattr1:libattr1:1\\:2.4.48-5:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libattr1@1:2.4.48-5?arch=amd64&upstream=attr&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libaudit-common@1:2.8.5-2ubuntu6?arch=all&upstream=audit&distro=ubuntu-20.04&package-id=4a463ab850d7c68c", + "publisher": "Ubuntu Developers ", + "name": "libaudit-common", + "version": "1:2.8.5-2ubuntu6", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit-common:libaudit-common:1\\:2.8.5-2ubuntu6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libaudit-common@1:2.8.5-2ubuntu6?arch=all&upstream=audit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libaudit1@1:2.8.5-2ubuntu6?arch=amd64&upstream=audit&distro=ubuntu-20.04&package-id=be9537deb8db616e", + "publisher": "Ubuntu Developers ", + "name": "libaudit1", + "version": "1:2.8.5-2ubuntu6", + "licenses": [ + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libaudit1:libaudit1:1\\:2.8.5-2ubuntu6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libaudit1@1:2.8.5-2ubuntu6?arch=amd64&upstream=audit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libblkid1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=e1d6f2e998332d7d", + "publisher": "Ubuntu Developers ", + "name": "libblkid1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libblkid1:libblkid1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libblkid1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libbsd0@0.10.0-1?arch=amd64&upstream=libbsd&distro=ubuntu-20.04&package-id=88ee716d66a17869", + "publisher": "Ubuntu Developers ", + "name": "libbsd0", + "version": "0.10.0-1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-clause-author" + } + }, + { + "license": { + "name": "BSD-2-clause-verbatim" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-John-Birrell" + } + }, + { + "license": { + "name": "BSD-3-clause-Regents" + } + }, + { + "license": { + "name": "BSD-3-clause-author" + } + }, + { + "license": { + "name": "BSD-4-clause-Christopher-G-Demetriou" + } + }, + { + "license": { + "name": "BSD-4-clause-Niels-Provos" + } + }, + { + "license": { + "name": "BSD-5-clause-Peter-Wemm" + } + }, + { + "license": { + "id": "Beerware" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "ISC-Original" + } + }, + { + "license": { + "name": "public-domain" + } + }, + { + "license": { + "name": "public-domain-Colin-Plumb" + } + } + ], + "cpe": "cpe:2.3:a:libbsd0:libbsd0:0.10.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libbsd0@0.10.0-1?arch=amd64&upstream=libbsd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libbz2-1.0@1.0.8-2?arch=amd64&upstream=bzip2&distro=ubuntu-20.04&package-id=fd8b0edf257b69b7", + "publisher": "Ubuntu Developers ", + "name": "libbz2-1.0", + "version": "1.0.8-2", + "licenses": [ + { + "license": { + "name": "BSD-variant" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libbz2-1.0:libbz2-1.0:1.0.8-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libbz2-1.0@1.0.8-2?arch=amd64&upstream=bzip2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.2?arch=amd64&upstream=glibc&distro=ubuntu-20.04&package-id=256facf7cbb95a65", + "publisher": "Ubuntu Developers ", + "name": "libc-bin", + "version": "2.31-0ubuntu9.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc-bin:libc-bin:2.31-0ubuntu9.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.2?arch=amd64&upstream=glibc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libc6@2.31-0ubuntu9.2?arch=amd64&upstream=glibc&distro=ubuntu-20.04&package-id=2a96b94fa4db214", + "publisher": "Ubuntu Developers ", + "name": "libc6", + "version": "2.31-0ubuntu9.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libc6:libc6:2.31-0ubuntu9.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libc6@2.31-0ubuntu9.2?arch=amd64&upstream=glibc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcap-ng0@0.7.9-2.1build1?arch=amd64&upstream=libcap-ng&distro=ubuntu-20.04&package-id=57ceb68462a99cb4", + "publisher": "Ubuntu Developers ", + "name": "libcap-ng0", + "version": "0.7.9-2.1build1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libcap-ng0:libcap-ng0:0.7.9-2.1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcap-ng0@0.7.9-2.1build1?arch=amd64&upstream=libcap-ng&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcap2@1:2.32-1?arch=amd64&distro=ubuntu-20.04&package-id=682f3e304c127762", + "publisher": "Ubuntu Developers ", + "name": "libcap2", + "version": "1:2.32-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libcap2:libcap2:1\\:2.32-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcap2@1:2.32-1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcom-err2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=fbaeb4c3d5d0f976", + "publisher": "Ubuntu Developers ", + "name": "libcom-err2", + "version": "1.45.5-2ubuntu1", + "cpe": "cpe:2.3:a:libcom-err2:libcom-err2:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcom-err2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libcrypt1@1:4.4.10-10ubuntu4?arch=amd64&upstream=libxcrypt&distro=ubuntu-20.04&package-id=8a4302e2e7027353", + "publisher": "Ubuntu Developers ", + "name": "libcrypt1", + "version": "1:4.4.10-10ubuntu4", + "cpe": "cpe:2.3:a:libcrypt1:libcrypt1:1\\:4.4.10-10ubuntu4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libcrypt1@1:4.4.10-10ubuntu4?arch=amd64&upstream=libxcrypt&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libdb5.3@5.3.28+dfsg1-0.6ubuntu2?arch=amd64&upstream=db5.3&distro=ubuntu-20.04&package-id=bc84b4da0031640d", + "publisher": "Ubuntu Developers ", + "name": "libdb5.3", + "version": "5.3.28+dfsg1-0.6ubuntu2", + "cpe": "cpe:2.3:a:libdb5.3:libdb5.3:5.3.28\\+dfsg1-0.6ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libdb5.3@5.3.28+dfsg1-0.6ubuntu2?arch=amd64&upstream=db5.3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libdbus-1-3@1.12.16-2ubuntu2.1?arch=amd64&upstream=dbus&distro=ubuntu-20.04&package-id=4d71ded07a82a0c8", + "publisher": "Ubuntu Developers ", + "name": "libdbus-1-3", + "version": "1.12.16-2ubuntu2.1", + "licenses": [ + { + "license": { + "id": "AFL-2.1" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-generic" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "Tcl-BSDish" + } + }, + { + "license": { + "name": "g10-permissive" + } + } + ], + "cpe": "cpe:2.3:a:libdbus-1-3:libdbus-1-3:1.12.16-2ubuntu2.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libdbus-1-3@1.12.16-2ubuntu2.1?arch=amd64&upstream=dbus&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libdebconfclient0@0.251ubuntu1?arch=amd64&upstream=cdebconf&distro=ubuntu-20.04&package-id=78bbe40d9c2ef9b5", + "publisher": "Ubuntu Developers ", + "name": "libdebconfclient0", + "version": "0.251ubuntu1", + "cpe": "cpe:2.3:a:libdebconfclient0:libdebconfclient0:0.251ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libdebconfclient0@0.251ubuntu1?arch=amd64&upstream=cdebconf&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libdevmapper1.02.1@2:1.02.167-1ubuntu1?arch=amd64&upstream=lvm2%402.03.07-1ubuntu1&distro=ubuntu-20.04&package-id=30b70188951a65f0", + "publisher": "Ubuntu Developers ", + "name": "libdevmapper1.02.1", + "version": "2:1.02.167-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libdevmapper1.02.1:libdevmapper1.02.1:2\\:1.02.167-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libdevmapper1.02.1@2:1.02.167-1ubuntu1?arch=amd64&upstream=lvm2%402.03.07-1ubuntu1&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libevent-2.1-7@2.1.11-stable-1?arch=amd64&upstream=libevent&distro=ubuntu-20.04&package-id=6b93a7dccfeb49e0", + "publisher": "Balint Reczey ", + "name": "libevent-2.1-7", + "version": "2.1.11-stable-1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-3-Clause~Kitware" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "FSFUL" + } + }, + { + "license": { + "id": "FSFULLR" + } + }, + { + "license": { + "name": "FSFULLR-No-Warranty" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "curl" + } + } + ], + "cpe": "cpe:2.3:a:libevent-2.1-7:libevent-2.1-7:2.1.11-stable-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libevent-2.1-7@2.1.11-stable-1?arch=amd64&upstream=libevent&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libexpat1@2.2.9-1build1?arch=amd64&upstream=expat&distro=ubuntu-20.04&package-id=f3ac75cd161f13c6", + "publisher": "Ubuntu Developers ", + "name": "libexpat1", + "version": "2.2.9-1build1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libexpat1:libexpat1:2.2.9-1build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libexpat1@2.2.9-1build1?arch=amd64&upstream=expat&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libext2fs2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=ec6113f55e73d1fd", + "publisher": "Ubuntu Developers ", + "name": "libext2fs2", + "version": "1.45.5-2ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libext2fs2:libext2fs2:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libext2fs2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libfdisk1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=486ce61647644619", + "publisher": "Ubuntu Developers ", + "name": "libfdisk1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libfdisk1:libfdisk1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libfdisk1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libffi7@3.3-4?arch=amd64&upstream=libffi&distro=ubuntu-20.04&package-id=b43b799d45da9d97", + "publisher": "Ubuntu Developers ", + "name": "libffi7", + "version": "3.3-4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libffi7:libffi7:3.3-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libffi7@3.3-4?arch=amd64&upstream=libffi&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgcc-s1@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04&package-id=f98ce69fd9e55bb8", + "publisher": "Ubuntu Core developers ", + "name": "libgcc-s1", + "version": "10.3.0-1ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcc-s1:libgcc-s1:10.3.0-1ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgcc-s1@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgcrypt20@1.8.5-5ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=c8a43aa5b28727a1", + "publisher": "Ubuntu Developers ", + "name": "libgcrypt20", + "version": "1.8.5-5ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcrypt20:libgcrypt20:1.8.5-5ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgcrypt20@1.8.5-5ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgmp10@2:6.2.0+dfsg-4?arch=amd64&upstream=gmp&distro=ubuntu-20.04&package-id=40fc269dcb8b3369", + "publisher": "Ubuntu Developers ", + "name": "libgmp10", + "version": "2:6.2.0+dfsg-4", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgmp10:libgmp10:2\\:6.2.0\\+dfsg-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgmp10@2:6.2.0+dfsg-4?arch=amd64&upstream=gmp&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.3?arch=amd64&upstream=gnutls28&distro=ubuntu-20.04&package-id=209bb478086322a1", + "publisher": "Ubuntu Developers ", + "name": "libgnutls30", + "version": "3.6.13-2ubuntu1.3", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPLv3+" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "name": "LGPLv2.1+" + } + }, + { + "license": { + "name": "LGPLv3+_or_GPLv2+" + } + }, + { + "license": { + "name": "The" + } + } + ], + "cpe": "cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.3?arch=amd64&upstream=gnutls28&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.6?arch=amd64&upstream=gnutls28&distro=ubuntu-20.04&package-id=7490f76da775c6e", + "publisher": "Ubuntu Developers ", + "name": "libgnutls30", + "version": "3.6.13-2ubuntu1.6", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "CC0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "GPLv3+" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "name": "LGPLv2.1+" + } + }, + { + "license": { + "name": "LGPLv3+_or_GPLv2+" + } + }, + { + "license": { + "name": "The" + } + } + ], + "cpe": "cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.6?arch=amd64&upstream=gnutls28&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgpg-error0@1.37-1?arch=amd64&upstream=libgpg-error&distro=ubuntu-20.04&package-id=37ef62d87edfe03", + "publisher": "Ubuntu Developers ", + "name": "libgpg-error0", + "version": "1.37-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "g10-permissive" + } + } + ], + "cpe": "cpe:2.3:a:libgpg-error0:libgpg-error0:1.37-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgpg-error0@1.37-1?arch=amd64&upstream=libgpg-error&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgssapi-krb5-2@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04&package-id=443eafe2785f5a4c", + "publisher": "Ubuntu Developers ", + "name": "libgssapi-krb5-2", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgssapi-krb5-2@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libgssapi3-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=17a37cca2446b615", + "publisher": "Ubuntu Developers ", + "name": "libgssapi3-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libgssapi3-heimdal:libgssapi3-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libgssapi3-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libhcrypto4-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=98098d582df76b44", + "publisher": "Ubuntu Developers ", + "name": "libhcrypto4-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libhcrypto4-heimdal:libhcrypto4-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libhcrypto4-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libheimbase1-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=f8dfc9a84c337835", + "publisher": "Ubuntu Developers ", + "name": "libheimbase1-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libheimbase1-heimdal:libheimbase1-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libheimbase1-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libheimntlm0-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=9992d88ac7d6e8e3", + "publisher": "Ubuntu Developers ", + "name": "libheimntlm0-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libheimntlm0-heimdal:libheimntlm0-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libheimntlm0-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libhogweed5@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04&package-id=3caecccf070e6760", + "publisher": "Ubuntu Developers ", + "name": "libhogweed5", + "version": "3.5.1+really3.5.1-2ubuntu0.2", + "licenses": [ + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libhogweed5:libhogweed5:3.5.1\\+really3.5.1-2ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libhogweed5@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libhx509-5-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=3b0bac5e4e8f23c5", + "publisher": "Ubuntu Developers ", + "name": "libhx509-5-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libhx509-5-heimdal:libhx509-5-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libhx509-5-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libicu66@66.1-2ubuntu2?arch=amd64&upstream=icu&distro=ubuntu-20.04&package-id=bcf598a9dea4cd38", + "publisher": "Ubuntu Developers ", + "name": "libicu66", + "version": "66.1-2ubuntu2", + "cpe": "cpe:2.3:a:libicu66:libicu66:66.1-2ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libicu66@66.1-2ubuntu2?arch=amd64&upstream=icu&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libidn2-0@2.2.0-2?arch=amd64&upstream=libidn2&distro=ubuntu-20.04&package-id=d2a82c3e28413bc1", + "publisher": "Ubuntu Developers ", + "name": "libidn2-0", + "version": "2.2.0-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "name": "Unicode" + } + } + ], + "cpe": "cpe:2.3:a:libidn2-0:libidn2-0:2.2.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libidn2-0@2.2.0-2?arch=amd64&upstream=libidn2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libk5crypto3@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04&package-id=f9479050b59432b4", + "publisher": "Ubuntu Developers ", + "name": "libk5crypto3", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libk5crypto3:libk5crypto3:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libk5crypto3@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkeyutils1@1.6-6ubuntu1?arch=amd64&upstream=keyutils&distro=ubuntu-20.04&package-id=e8692427b123ea73", + "publisher": "Ubuntu Developers ", + "name": "libkeyutils1", + "version": "1.6-6ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libkeyutils1:libkeyutils1:1.6-6ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkeyutils1@1.6-6ubuntu1?arch=amd64&upstream=keyutils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkrb5-26-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=2beb670b9378498e", + "publisher": "Ubuntu Developers ", + "name": "libkrb5-26-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5-26-heimdal:libkrb5-26-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkrb5-26-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkrb5-3@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04&package-id=fdb5970d8394a182", + "publisher": "Ubuntu Developers ", + "name": "libkrb5-3", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5-3:libkrb5-3:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkrb5-3@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libkrb5support0@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04&package-id=a8d21a32e178b211", + "publisher": "Ubuntu Developers ", + "name": "libkrb5support0", + "version": "1.17-6ubuntu4.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libkrb5support0:libkrb5support0:1.17-6ubuntu4.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libkrb5support0@1.17-6ubuntu4.1?arch=amd64&upstream=krb5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libldap-2.4-2@2.4.49+dfsg-2ubuntu1.8?arch=amd64&upstream=openldap&distro=ubuntu-20.04&package-id=efdc80a7ae6eae19", + "publisher": "Ubuntu Developers ", + "name": "libldap-2.4-2", + "version": "2.4.49+dfsg-2ubuntu1.8", + "cpe": "cpe:2.3:a:libldap-2.4-2:libldap-2.4-2:2.4.49\\+dfsg-2ubuntu1.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libldap-2.4-2@2.4.49+dfsg-2ubuntu1.8?arch=amd64&upstream=openldap&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libldap-common@2.4.49+dfsg-2ubuntu1.8?arch=all&upstream=openldap&distro=ubuntu-20.04&package-id=4d0b88f98b40786b", + "publisher": "Ubuntu Developers ", + "name": "libldap-common", + "version": "2.4.49+dfsg-2ubuntu1.8", + "cpe": "cpe:2.3:a:libldap-common:libldap-common:2.4.49\\+dfsg-2ubuntu1.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libldap-common@2.4.49+dfsg-2ubuntu1.8?arch=all&upstream=openldap&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/liblz4-1@1.9.2-2ubuntu0.20.04.1?arch=amd64&upstream=lz4&distro=ubuntu-20.04&package-id=6f2c431caeb4980a", + "publisher": "Ubuntu Developers ", + "name": "liblz4-1", + "version": "1.9.2-2ubuntu0.20.04.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:liblz4-1:liblz4-1:1.9.2-2ubuntu0.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/liblz4-1@1.9.2-2ubuntu0.20.04.1?arch=amd64&upstream=lz4&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/liblzma5@5.2.4-1ubuntu1?arch=amd64&upstream=xz-utils&distro=ubuntu-20.04&package-id=f1e9f3b6205a664a", + "publisher": "Ubuntu Developers ", + "name": "liblzma5", + "version": "5.2.4-1ubuntu1", + "licenses": [ + { + "license": { + "name": "Autoconf" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "PD" + } + }, + { + "license": { + "name": "PD-debian" + } + }, + { + "license": { + "name": "config-h" + } + }, + { + "license": { + "name": "noderivs" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-nowarranty" + } + }, + { + "license": { + "name": "probably-PD" + } + } + ], + "cpe": "cpe:2.3:a:liblzma5:liblzma5:5.2.4-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/liblzma5@5.2.4-1ubuntu1?arch=amd64&upstream=xz-utils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmagic-mgc@1:5.38-4?arch=amd64&upstream=file&distro=ubuntu-20.04&package-id=3b4f02792ccf99bb", + "publisher": "Ubuntu Developers ", + "name": "libmagic-mgc", + "version": "1:5.38-4", + "licenses": [ + { + "license": { + "name": "BSD-2-Clause-alike" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-Clause-regents" + } + }, + { + "license": { + "name": "MIT-Old-Style-with-legal-disclaimer-2" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmagic-mgc:libmagic-mgc:1\\:5.38-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmagic-mgc@1:5.38-4?arch=amd64&upstream=file&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmagic1@1:5.38-4?arch=amd64&upstream=file&distro=ubuntu-20.04&package-id=302b8497a938556", + "publisher": "Ubuntu Developers ", + "name": "libmagic1", + "version": "1:5.38-4", + "licenses": [ + { + "license": { + "name": "BSD-2-Clause-alike" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-2-Clause-regents" + } + }, + { + "license": { + "name": "MIT-Old-Style-with-legal-disclaimer-2" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmagic1:libmagic1:1\\:5.38-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmagic1@1:5.38-4?arch=amd64&upstream=file&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmount1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=39446194385ebce5", + "publisher": "Ubuntu Developers ", + "name": "libmount1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libmount1:libmount1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmount1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libmpdec2@2.4.2-3?arch=amd64&upstream=mpdecimal&distro=ubuntu-20.04&package-id=b45a0d57576ce262", + "publisher": "Ubuntu Developers ", + "name": "libmpdec2", + "version": "2.4.2-3", + "licenses": [ + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libmpdec2:libmpdec2:2.4.2-3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libmpdec2@2.4.2-3?arch=amd64&upstream=mpdecimal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libncurses6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=ed8fb166163a75b8", + "publisher": "Ubuntu Developers ", + "name": "libncurses6", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:libncurses6:libncurses6:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libncurses6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libncursesw6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=58525ddc073a008a", + "publisher": "Ubuntu Developers ", + "name": "libncursesw6", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:libncursesw6:libncursesw6:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libncursesw6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libnettle7@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04&package-id=3d185fbd6a7e56f", + "publisher": "Ubuntu Developers ", + "name": "libnettle7", + "version": "3.5.1+really3.5.1-2ubuntu0.2", + "licenses": [ + { + "license": { + "name": "GAP" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "other" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libnettle7:libnettle7:3.5.1\\+really3.5.1-2ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libnettle7@3.5.1+really3.5.1-2ubuntu0.2?arch=amd64&upstream=nettle&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libnfsidmap2@0.25-5.1ubuntu1?arch=amd64&upstream=libnfsidmap&distro=ubuntu-20.04&package-id=71bd574c47c02b75", + "publisher": "Ubuntu Developers ", + "name": "libnfsidmap2", + "version": "0.25-5.1ubuntu1", + "cpe": "cpe:2.3:a:libnfsidmap2:libnfsidmap2:0.25-5.1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libnfsidmap2@0.25-5.1ubuntu1?arch=amd64&upstream=libnfsidmap&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libp11-kit0@0.23.20-1ubuntu0.1?arch=amd64&upstream=p11-kit&distro=ubuntu-20.04&package-id=9fc0ca46e6d21557", + "publisher": "Ubuntu Developers ", + "name": "libp11-kit0", + "version": "0.23.20-1ubuntu0.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "name": "ISC+IBM" + } + }, + { + "license": { + "name": "permissive-like-automake-output" + } + }, + { + "license": { + "name": "same-as-rest-of-p11kit" + } + } + ], + "cpe": "cpe:2.3:a:libp11-kit0:libp11-kit0:0.23.20-1ubuntu0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libp11-kit0@0.23.20-1ubuntu0.1?arch=amd64&upstream=p11-kit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-modules@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04&package-id=e7be6c0ad703fc9a", + "publisher": "Ubuntu Developers ", + "name": "libpam-modules", + "version": "1.3.1-5ubuntu4.2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules:libpam-modules:1.3.1-5ubuntu4.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-modules@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-modules-bin@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04&package-id=7ff667273975da27", + "publisher": "Ubuntu Developers ", + "name": "libpam-modules-bin", + "version": "1.3.1-5ubuntu4.2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-modules-bin:libpam-modules-bin:1.3.1-5ubuntu4.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-modules-bin@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam-runtime@1.3.1-5ubuntu4.2?arch=all&upstream=pam&distro=ubuntu-20.04&package-id=47a743e8128a9af6", + "publisher": "Ubuntu Developers ", + "name": "libpam-runtime", + "version": "1.3.1-5ubuntu4.2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam-runtime:libpam-runtime:1.3.1-5ubuntu4.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam-runtime@1.3.1-5ubuntu4.2?arch=all&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpam0g@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04&package-id=e57fbdd1e7d57983", + "publisher": "Ubuntu Developers ", + "name": "libpam0g", + "version": "1.3.1-5ubuntu4.2", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:libpam0g:libpam0g:1.3.1-5ubuntu4.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpam0g@1.3.1-5ubuntu4.2?arch=amd64&upstream=pam&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpcre2-8-0@10.34-7?arch=amd64&upstream=pcre2&distro=ubuntu-20.04&package-id=ec9eb70008ed8b14", + "publisher": "Ubuntu Developers ", + "name": "libpcre2-8-0", + "version": "10.34-7", + "cpe": "cpe:2.3:a:libpcre2-8-0:libpcre2-8-0:10.34-7:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpcre2-8-0@10.34-7?arch=amd64&upstream=pcre2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpcre3@2:8.39-12build1?arch=amd64&upstream=pcre3&distro=ubuntu-20.04&package-id=f2af8e66c60a624", + "publisher": "Ubuntu Developers ", + "name": "libpcre3", + "version": "2:8.39-12build1", + "cpe": "cpe:2.3:a:libpcre3:libpcre3:2\\:8.39-12build1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpcre3@2:8.39-12build1?arch=amd64&upstream=pcre3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libprocps8@2:3.3.16-1ubuntu2.2?arch=amd64&upstream=procps&distro=ubuntu-20.04&package-id=1444db6c35de79c6", + "publisher": "Ubuntu Developers ", + "name": "libprocps8", + "version": "2:3.3.16-1ubuntu2.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libprocps8:libprocps8:2\\:3.3.16-1ubuntu2.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libprocps8@2:3.3.16-1ubuntu2.2?arch=amd64&upstream=procps&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpython3-stdlib@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04&package-id=b40e3316416bbdaf", + "publisher": "Ubuntu Developers ", + "name": "libpython3-stdlib", + "version": "3.8.2-0ubuntu2", + "cpe": "cpe:2.3:a:libpython3-stdlib:libpython3-stdlib:3.8.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpython3-stdlib@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpython3.8-minimal@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04&package-id=fb58dad98da64e3b", + "publisher": "Ubuntu Core Developers ", + "name": "libpython3.8-minimal", + "version": "3.8.10-0ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:libpython3.8-minimal:libpython3.8-minimal:3.8.10-0ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpython3.8-minimal@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libpython3.8-stdlib@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04&package-id=54e48e611df3b41d", + "publisher": "Ubuntu Core Developers ", + "name": "libpython3.8-stdlib", + "version": "3.8.10-0ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:libpython3.8-stdlib:libpython3.8-stdlib:3.8.10-0ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libpython3.8-stdlib@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libreadline5@5.2+dfsg-3build3?arch=amd64&upstream=readline5&distro=ubuntu-20.04&package-id=5763fb43bb0ba51a", + "publisher": "Ubuntu Developers ", + "name": "libreadline5", + "version": "5.2+dfsg-3build3", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libreadline5:libreadline5:5.2\\+dfsg-3build3:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libreadline5@5.2+dfsg-3build3?arch=amd64&upstream=readline5&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libreadline8@8.0-4?arch=amd64&upstream=readline&distro=ubuntu-20.04&package-id=67b876656fcd9e68", + "publisher": "Ubuntu Developers ", + "name": "libreadline8", + "version": "8.0-4", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libreadline8:libreadline8:8.0-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libreadline8@8.0-4?arch=amd64&upstream=readline&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libroken18-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=68e35bc456818613", + "publisher": "Ubuntu Developers ", + "name": "libroken18-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libroken18-heimdal:libroken18-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libroken18-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsasl2-2@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04&package-id=374396d82667544d", + "publisher": "Ubuntu Developers ", + "name": "libsasl2-2", + "version": "2.1.27+dfsg-2", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-2:libsasl2-2:2.1.27\\+dfsg-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsasl2-2@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsasl2-modules@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04&package-id=fb8d278d10c4a3cf", + "publisher": "Ubuntu Developers ", + "name": "libsasl2-modules", + "version": "2.1.27+dfsg-2", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-modules:libsasl2-modules:2.1.27\\+dfsg-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsasl2-modules@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsasl2-modules-db@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04&package-id=63c3c50d36ec1d13", + "publisher": "Ubuntu Developers ", + "name": "libsasl2-modules-db", + "version": "2.1.27+dfsg-2", + "licenses": [ + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsasl2-modules-db:libsasl2-modules-db:2.1.27\\+dfsg-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsasl2-modules-db@2.1.27+dfsg-2?arch=amd64&upstream=cyrus-sasl2&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libseccomp2@2.5.1-1ubuntu1~20.04.1?arch=amd64&upstream=libseccomp&distro=ubuntu-20.04&package-id=b2fd79b9c242e8e8", + "publisher": "Ubuntu Developers ", + "name": "libseccomp2", + "version": "2.5.1-1ubuntu1~20.04.1", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libseccomp2:libseccomp2:2.5.1-1ubuntu1\\~20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libseccomp2@2.5.1-1ubuntu1~20.04.1?arch=amd64&upstream=libseccomp&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libselinux1@3.0-1build2?arch=amd64&upstream=libselinux&distro=ubuntu-20.04&package-id=e5d4ae16ac79b901", + "publisher": "Ubuntu Developers ", + "name": "libselinux1", + "version": "3.0-1build2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libselinux1:libselinux1:3.0-1build2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libselinux1@3.0-1build2?arch=amd64&upstream=libselinux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsemanage-common@3.0-1build2?arch=all&upstream=libsemanage&distro=ubuntu-20.04&package-id=4c6cd9f68ce53262", + "publisher": "Ubuntu Developers ", + "name": "libsemanage-common", + "version": "3.0-1build2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage-common:libsemanage-common:3.0-1build2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsemanage-common@3.0-1build2?arch=all&upstream=libsemanage&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsemanage1@3.0-1build2?arch=amd64&upstream=libsemanage&distro=ubuntu-20.04&package-id=963297f19b339026", + "publisher": "Ubuntu Developers ", + "name": "libsemanage1", + "version": "3.0-1build2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsemanage1:libsemanage1:3.0-1build2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsemanage1@3.0-1build2?arch=amd64&upstream=libsemanage&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsepol1@3.0-1?arch=amd64&upstream=libsepol&distro=ubuntu-20.04&package-id=991afdd7bf17200c", + "publisher": "Ubuntu Developers ", + "name": "libsepol1", + "version": "3.0-1", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libsepol1:libsepol1:3.0-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsepol1@3.0-1?arch=amd64&upstream=libsepol&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsmartcols1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=b47d3a935260c518", + "publisher": "Ubuntu Developers ", + "name": "libsmartcols1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsmartcols1:libsmartcols1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsmartcols1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsqlite3-0@3.31.1-4ubuntu0.2?arch=amd64&upstream=sqlite3&distro=ubuntu-20.04&package-id=a7c7ccf11d3583d1", + "publisher": "Ubuntu Developers ", + "name": "libsqlite3-0", + "version": "3.31.1-4ubuntu0.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.31.1-4ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsqlite3-0@3.31.1-4ubuntu0.2?arch=amd64&upstream=sqlite3&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libss2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=4715894cb8165c", + "publisher": "Ubuntu Developers ", + "name": "libss2", + "version": "1.45.5-2ubuntu1", + "cpe": "cpe:2.3:a:libss2:libss2:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libss2@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.8?arch=amd64&upstream=openssl&distro=ubuntu-20.04&package-id=9228d1481eea75e3", + "publisher": "Ubuntu Developers ", + "name": "libssl1.1", + "version": "1.1.1f-1ubuntu2.8", + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.8?arch=amd64&upstream=openssl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libstdc++6@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04&package-id=241fcb3d9b65153a", + "publisher": "Ubuntu Core developers ", + "name": "libstdc++6", + "version": "10.3.0-1ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:10.3.0-1ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libstdc++6@10.3.0-1ubuntu1~20.04?arch=amd64&upstream=gcc-10&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libsystemd0@245.4-4ubuntu3.11?arch=amd64&upstream=systemd&distro=ubuntu-20.04&package-id=72d1f4b2fda6e155", + "publisher": "Ubuntu Developers ", + "name": "libsystemd0", + "version": "245.4-4ubuntu3.11", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libsystemd0:libsystemd0:245.4-4ubuntu3.11:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libsystemd0@245.4-4ubuntu3.11?arch=amd64&upstream=systemd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtasn1-6@4.16.0-2?arch=amd64&distro=ubuntu-20.04&package-id=a290c35fc0220ba0", + "publisher": "Ubuntu Developers ", + "name": "libtasn1-6", + "version": "4.16.0-2", + "licenses": [ + { + "license": { + "id": "GFDL-1.3-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtasn1-6:libtasn1-6:4.16.0-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtasn1-6@4.16.0-2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtinfo6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=72ad56d118fefea3", + "publisher": "Ubuntu Developers ", + "name": "libtinfo6", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:libtinfo6:libtinfo6:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtinfo6@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtirpc-common@1.2.5-1?arch=all&upstream=libtirpc&distro=ubuntu-20.04&package-id=ba22fe8af5722b24", + "publisher": "Ubuntu Developers ", + "name": "libtirpc-common", + "version": "1.2.5-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc-common:libtirpc-common:1.2.5-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtirpc-common@1.2.5-1?arch=all&upstream=libtirpc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libtirpc3@1.2.5-1?arch=amd64&upstream=libtirpc&distro=ubuntu-20.04&package-id=57b2bfa0a8467ab7", + "publisher": "Ubuntu Developers ", + "name": "libtirpc3", + "version": "1.2.5-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc3:libtirpc3:1.2.5-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libtirpc3@1.2.5-1?arch=amd64&upstream=libtirpc&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libudev1@245.4-4ubuntu3.11?arch=amd64&upstream=systemd&distro=ubuntu-20.04&package-id=28d962536291b482", + "publisher": "Ubuntu Developers ", + "name": "libudev1", + "version": "245.4-4ubuntu3.11", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libudev1:libudev1:245.4-4ubuntu3.11:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libudev1@245.4-4ubuntu3.11?arch=amd64&upstream=systemd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libunistring2@0.9.10-2?arch=amd64&upstream=libunistring&distro=ubuntu-20.04&package-id=3140ffa70dcd9831", + "publisher": "Ubuntu Developers ", + "name": "libunistring2", + "version": "0.9.10-2", + "licenses": [ + { + "license": { + "name": "FreeSoftware" + } + }, + { + "license": { + "id": "GFDL-1.2-only" + } + }, + { + "license": { + "name": "GFDL-1.2+" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libunistring2:libunistring2:0.9.10-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libunistring2@0.9.10-2?arch=amd64&upstream=libunistring&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/liburcu6@0.11.1-2?arch=amd64&upstream=liburcu&distro=ubuntu-20.04&package-id=555d9abce2448934", + "publisher": "Ubuntu Developers ", + "name": "liburcu6", + "version": "0.11.1-2", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "FSFUL" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "MIT-MINIMAL" + } + } + ], + "cpe": "cpe:2.3:a:liburcu6:liburcu6:0.11.1-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/liburcu6@0.11.1-2?arch=amd64&upstream=liburcu&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libuuid1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=5395a07c00002ea6", + "publisher": "Ubuntu Developers ", + "name": "libuuid1", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libuuid1:libuuid1:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libuuid1@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libwind0-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04&package-id=7b0e172efdb36a99", + "publisher": "Ubuntu Developers ", + "name": "libwind0-heimdal", + "version": "7.7.0+dfsg-1ubuntu1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libwind0-heimdal:libwind0-heimdal:7.7.0\\+dfsg-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libwind0-heimdal@7.7.0+dfsg-1ubuntu1?arch=amd64&upstream=heimdal&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libwrap0@7.6.q-30?arch=amd64&upstream=tcp-wrappers&distro=ubuntu-20.04&package-id=5b14391c61bb94f1", + "publisher": "Ubuntu Developers ", + "name": "libwrap0", + "version": "7.6.q-30", + "cpe": "cpe:2.3:a:libwrap0:libwrap0:7.6.q-30:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libwrap0@7.6.q-30?arch=amd64&upstream=tcp-wrappers&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libx11-6@2:1.6.9-2ubuntu1.2?arch=amd64&upstream=libx11&distro=ubuntu-20.04&package-id=50dc1220c10262c7", + "publisher": "Ubuntu Developers ", + "name": "libx11-6", + "version": "2:1.6.9-2ubuntu1.2", + "cpe": "cpe:2.3:a:libx11-6:libx11-6:2\\:1.6.9-2ubuntu1.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libx11-6@2:1.6.9-2ubuntu1.2?arch=amd64&upstream=libx11&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libx11-data@2:1.6.9-2ubuntu1.2?arch=all&upstream=libx11&distro=ubuntu-20.04&package-id=353f558ef0dbc884", + "publisher": "Ubuntu Developers ", + "name": "libx11-data", + "version": "2:1.6.9-2ubuntu1.2", + "cpe": "cpe:2.3:a:libx11-data:libx11-data:2\\:1.6.9-2ubuntu1.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libx11-data@2:1.6.9-2ubuntu1.2?arch=all&upstream=libx11&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libxau6@1:1.0.9-0ubuntu1?arch=amd64&upstream=libxau&distro=ubuntu-20.04&package-id=34dd47f551a496c4", + "publisher": "Ubuntu Developers ", + "name": "libxau6", + "version": "1:1.0.9-0ubuntu1", + "cpe": "cpe:2.3:a:libxau6:libxau6:1\\:1.0.9-0ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libxau6@1:1.0.9-0ubuntu1?arch=amd64&upstream=libxau&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libxcb1@1.14-2?arch=amd64&upstream=libxcb&distro=ubuntu-20.04&package-id=52f01a8807bc3bdf", + "publisher": "Ubuntu Developers ", + "name": "libxcb1", + "version": "1.14-2", + "cpe": "cpe:2.3:a:libxcb1:libxcb1:1.14-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libxcb1@1.14-2?arch=amd64&upstream=libxcb&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libxdmcp6@1:1.1.3-0ubuntu1?arch=amd64&upstream=libxdmcp&distro=ubuntu-20.04&package-id=491fd9e95ef4ddf4", + "publisher": "Ubuntu Developers ", + "name": "libxdmcp6", + "version": "1:1.1.3-0ubuntu1", + "cpe": "cpe:2.3:a:libxdmcp6:libxdmcp6:1\\:1.1.3-0ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libxdmcp6@1:1.1.3-0ubuntu1?arch=amd64&upstream=libxdmcp&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/libzstd1@1.4.4+dfsg-3ubuntu0.1?arch=amd64&upstream=libzstd&distro=ubuntu-20.04&package-id=47cff0564e160066", + "publisher": "Ubuntu Developers ", + "name": "libzstd1", + "version": "1.4.4+dfsg-3ubuntu0.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:libzstd1:libzstd1:1.4.4\\+dfsg-3ubuntu0.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/libzstd1@1.4.4+dfsg-3ubuntu0.1?arch=amd64&upstream=libzstd&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/login@1:4.8.1-1ubuntu5.20.04?arch=amd64&upstream=shadow&distro=ubuntu-20.04&package-id=bb92db08e65352ae", + "publisher": "Ubuntu Developers ", + "name": "login", + "version": "1:4.8.1-1ubuntu5.20.04", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:login:login:1\\:4.8.1-1ubuntu5.20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/login@1:4.8.1-1ubuntu5.20.04?arch=amd64&upstream=shadow&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/login@1:4.8.1-1ubuntu5.20.04.1?arch=amd64&upstream=shadow&distro=ubuntu-20.04&package-id=cb23947502a7c38d", + "publisher": "Ubuntu Developers ", + "name": "login", + "version": "1:4.8.1-1ubuntu5.20.04.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:login:login:1\\:4.8.1-1ubuntu5.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/login@1:4.8.1-1ubuntu5.20.04.1?arch=amd64&upstream=shadow&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/logsave@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04&package-id=4a92556bee4b4f91", + "publisher": "Ubuntu Developers ", + "name": "logsave", + "version": "1.45.5-2ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:logsave:logsave:1.45.5-2ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/logsave@1.45.5-2ubuntu1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/lsb-base@11.1.0ubuntu2?arch=all&upstream=lsb&distro=ubuntu-20.04&package-id=b76348b7f1282c61", + "publisher": "Ubuntu Developers ", + "name": "lsb-base", + "version": "11.1.0ubuntu2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:lsb-base:lsb-base:11.1.0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/lsb-base@11.1.0ubuntu2?arch=all&upstream=lsb&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/mawk@1.3.4.20200120-2?arch=amd64&distro=ubuntu-20.04&package-id=435885c82afbf721", + "publisher": "Ubuntu Developers ", + "name": "mawk", + "version": "1.3.4.20200120-2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:mawk:mawk:1.3.4.20200120-2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/mawk@1.3.4.20200120-2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/mime-support@3.64ubuntu1?arch=all&distro=ubuntu-20.04&package-id=405891a224258a92", + "publisher": "Ubuntu Developers ", + "name": "mime-support", + "version": "3.64ubuntu1", + "licenses": [ + { + "license": { + "name": "Bellcore" + } + }, + { + "license": { + "name": "ad-hoc" + } + } + ], + "cpe": "cpe:2.3:a:mime-support:mime-support:3.64ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/mime-support@3.64ubuntu1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/mount@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04&package-id=fa4ef6b12af7900c", + "publisher": "Ubuntu Developers ", + "name": "mount", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:mount:mount:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/mount@2.34-0.1ubuntu9.1?arch=amd64&upstream=util-linux&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ncurses-base@6.2-0ubuntu2?arch=all&upstream=ncurses&distro=ubuntu-20.04&package-id=d7393defd95e4554", + "publisher": "Ubuntu Developers ", + "name": "ncurses-base", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:ncurses-base:ncurses-base:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ncurses-base@6.2-0ubuntu2?arch=all&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ncurses-bin@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04&package-id=d6bdd43961b680f6", + "publisher": "Ubuntu Developers ", + "name": "ncurses-bin", + "version": "6.2-0ubuntu2", + "cpe": "cpe:2.3:a:ncurses-bin:ncurses-bin:6.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ncurses-bin@6.2-0ubuntu2?arch=amd64&upstream=ncurses&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/nfs-common@1:1.3.4-2.5ubuntu3.4?arch=amd64&upstream=nfs-utils&distro=ubuntu-20.04&package-id=6a00c331080f32b7", + "publisher": "Ubuntu Developers ", + "name": "nfs-common", + "version": "1:1.3.4-2.5ubuntu3.4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:nfs-common:nfs-common:1\\:1.3.4-2.5ubuntu3.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/nfs-common@1:1.3.4-2.5ubuntu3.4?arch=amd64&upstream=nfs-utils&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/passwd@1:4.8.1-1ubuntu5.20.04?arch=amd64&upstream=shadow&distro=ubuntu-20.04&package-id=d99390960eea7b3e", + "publisher": "Ubuntu Developers ", + "name": "passwd", + "version": "1:4.8.1-1ubuntu5.20.04", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:passwd:passwd:1\\:4.8.1-1ubuntu5.20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/passwd@1:4.8.1-1ubuntu5.20.04?arch=amd64&upstream=shadow&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/passwd@1:4.8.1-1ubuntu5.20.04.1?arch=amd64&upstream=shadow&distro=ubuntu-20.04&package-id=c4a1ed5267891532", + "publisher": "Ubuntu Developers ", + "name": "passwd", + "version": "1:4.8.1-1ubuntu5.20.04.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:passwd:passwd:1\\:4.8.1-1ubuntu5.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/passwd@1:4.8.1-1ubuntu5.20.04.1?arch=amd64&upstream=shadow&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/perl-base@5.30.0-9ubuntu0.2?arch=amd64&upstream=perl&distro=ubuntu-20.04&package-id=eab1752e76cf29f", + "publisher": "Ubuntu Developers ", + "name": "perl-base", + "version": "5.30.0-9ubuntu0.2", + "licenses": [ + { + "license": { + "name": "Artistic" + } + }, + { + "license": { + "id": "Artistic-2.0" + } + }, + { + "license": { + "name": "Artistic-dist" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "BSD-3-clause-GENERIC" + } + }, + { + "license": { + "name": "BSD-3-clause-with-weird-numbering" + } + }, + { + "license": { + "name": "BSD-4-clause-POWERDOG" + } + }, + { + "license": { + "name": "BZIP" + } + }, + { + "license": { + "name": "DONT-CHANGE-THE-GPL" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL-3+-WITH-BISON-EXCEPTION" + } + }, + { + "license": { + "name": "HSIEH-BSD" + } + }, + { + "license": { + "name": "HSIEH-DERIVATIVE" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "name": "REGCOMP" + } + }, + { + "license": { + "name": "REGCOMP," + } + }, + { + "license": { + "name": "RRA-KEEP-THIS-NOTICE" + } + }, + { + "license": { + "name": "SDBM-PUBLIC-DOMAIN" + } + }, + { + "license": { + "name": "TEXT-TABS" + } + }, + { + "license": { + "name": "Unicode" + } + }, + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:perl-base:perl-base:5.30.0-9ubuntu0.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/perl-base@5.30.0-9ubuntu0.2?arch=amd64&upstream=perl&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/procps@2:3.3.16-1ubuntu2.2?arch=amd64&distro=ubuntu-20.04&package-id=f177d21a50776ea7", + "publisher": "Ubuntu Developers ", + "name": "procps", + "version": "2:3.3.16-1ubuntu2.2", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:procps:procps:2\\:3.3.16-1ubuntu2.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/procps@2:3.3.16-1ubuntu2.2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "application", + "bom-ref": "pkg:generic/python@3.8.10?package-id=6a7506a1082aa1fd", + "name": "python", + "version": "3.8.10", + "cpe": "cpe:2.3:a:python_software_foundation:python:3.8.10:*:*:*:*:*:*:*", + "purl": "pkg:generic/python@3.8.10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/python3@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04&package-id=ca939acbf264771", + "publisher": "Ubuntu Developers ", + "name": "python3", + "version": "3.8.2-0ubuntu2", + "cpe": "cpe:2.3:a:python3:python3:3.8.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/python3@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/python3-minimal@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04&package-id=26eebf392e0b02cf", + "publisher": "Ubuntu Developers ", + "name": "python3-minimal", + "version": "3.8.2-0ubuntu2", + "cpe": "cpe:2.3:a:python3-minimal:python3-minimal:3.8.2-0ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/python3-minimal@3.8.2-0ubuntu2?arch=amd64&upstream=python3-defaults&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/python3.8@3.8.10-0ubuntu1~20.04?arch=amd64&distro=ubuntu-20.04&package-id=b1de928401abc554", + "publisher": "Ubuntu Core Developers ", + "name": "python3.8", + "version": "3.8.10-0ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:python3.8:python3.8:3.8.10-0ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/python3.8@3.8.10-0ubuntu1~20.04?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/python3.8-minimal@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04&package-id=91fa2bead1762d08", + "publisher": "Ubuntu Core Developers ", + "name": "python3.8-minimal", + "version": "3.8.10-0ubuntu1~20.04", + "licenses": [ + { + "license": { + "name": "By" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "Permission" + } + }, + { + "license": { + "name": "Redistribution" + } + }, + { + "license": { + "name": "This" + } + } + ], + "cpe": "cpe:2.3:a:python3.8-minimal:python3.8-minimal:3.8.10-0ubuntu1\\~20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/python3.8-minimal@3.8.10-0ubuntu1~20.04?arch=amd64&upstream=python3.8&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/readline-common@8.0-4?arch=all&upstream=readline&distro=ubuntu-20.04&package-id=34a85b4423ecbe7", + "publisher": "Ubuntu Developers ", + "name": "readline-common", + "version": "8.0-4", + "licenses": [ + { + "license": { + "name": "GFDL" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:readline-common:readline-common:8.0-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/readline-common@8.0-4?arch=all&upstream=readline&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/rpcbind@1.2.5-8?arch=amd64&distro=ubuntu-20.04&package-id=e98d3334085e4495", + "publisher": "Ubuntu Developers ", + "name": "rpcbind", + "version": "1.2.5-8", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "PERMISSIVE" + } + } + ], + "cpe": "cpe:2.3:a:rpcbind:rpcbind:1.2.5-8:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/rpcbind@1.2.5-8?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sed@4.7-1?arch=amd64&distro=ubuntu-20.04&package-id=24bbb8989a1870c7", + "publisher": "Ubuntu Developers ", + "name": "sed", + "version": "4.7-1", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:sed:sed:4.7-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sed@4.7-1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sensible-utils@0.0.12+nmu1?arch=all&distro=ubuntu-20.04&package-id=7e50cf6ac335106e", + "publisher": "Ubuntu Developers ", + "name": "sensible-utils", + "version": "0.0.12+nmu1", + "licenses": [ + { + "license": { + "name": "All-permissive" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "configure" + } + }, + { + "license": { + "name": "installsh" + } + } + ], + "cpe": "cpe:2.3:a:sensible-utils:sensible-utils:0.0.12\\+nmu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sensible-utils@0.0.12+nmu1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/sysvinit-utils@2.96-2.1ubuntu1?arch=amd64&upstream=sysvinit&distro=ubuntu-20.04&package-id=abc451774789c392", + "publisher": "Ubuntu Developers ", + "name": "sysvinit-utils", + "version": "2.96-2.1ubuntu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:sysvinit-utils:sysvinit-utils:2.96-2.1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/sysvinit-utils@2.96-2.1ubuntu1?arch=amd64&upstream=sysvinit&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/tar@1.30+dfsg-7ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04&package-id=4c6cd0d17cc842e", + "publisher": "Ubuntu Developers ", + "name": "tar", + "version": "1.30+dfsg-7ubuntu0.20.04.1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:tar:tar:1.30\\+dfsg-7ubuntu0.20.04.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/tar@1.30+dfsg-7ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/tzdata@2021a-0ubuntu0.20.04?arch=all&distro=ubuntu-20.04&package-id=aaae4a94d26494c0", + "publisher": "Ubuntu Developers ", + "name": "tzdata", + "version": "2021a-0ubuntu0.20.04", + "licenses": [ + { + "license": { + "id": "ICU" + } + } + ], + "cpe": "cpe:2.3:a:tzdata:tzdata:2021a-0ubuntu0.20.04:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/tzdata@2021a-0ubuntu0.20.04?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ubuntu-keyring@2020.02.11.4?arch=all&distro=ubuntu-20.04&package-id=6d2b18ebcbe1dab7", + "publisher": "Dimitri John Ledkov ", + "name": "ubuntu-keyring", + "version": "2020.02.11.4", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:ubuntu-keyring:ubuntu-keyring:2020.02.11.4:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ubuntu-keyring@2020.02.11.4?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/ucf@3.0038+nmu1?arch=all&distro=ubuntu-20.04&package-id=ab3b8cc8be7b5655", + "publisher": "Ubuntu Developers ", + "name": "ucf", + "version": "3.0038+nmu1", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ucf:ucf:3.0038\\+nmu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/ucf@3.0038+nmu1?arch=all&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/util-linux@2.34-0.1ubuntu9.1?arch=amd64&distro=ubuntu-20.04&package-id=33e86bd94ef763b6", + "publisher": "Ubuntu Developers ", + "name": "util-linux", + "version": "2.34-0.1ubuntu9.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "BSD-4-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "LGPL" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:util-linux:util-linux:2.34-0.1ubuntu9.1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/util-linux@2.34-0.1ubuntu9.1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/xfsprogs@5.3.0-1ubuntu2?arch=amd64&distro=ubuntu-20.04&package-id=bbefdc57cc2f7b90", + "publisher": "Ubuntu Developers ", + "name": "xfsprogs", + "version": "5.3.0-1ubuntu2", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + } + ], + "cpe": "cpe:2.3:a:xfsprogs:xfsprogs:5.3.0-1ubuntu2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/xfsprogs@5.3.0-1ubuntu2?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/xz-utils@5.2.4-1ubuntu1?arch=amd64&distro=ubuntu-20.04&package-id=46271b3ba3de19b6", + "publisher": "Ubuntu Developers ", + "name": "xz-utils", + "version": "5.2.4-1ubuntu1", + "licenses": [ + { + "license": { + "name": "Autoconf" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "PD" + } + }, + { + "license": { + "name": "PD-debian" + } + }, + { + "license": { + "name": "config-h" + } + }, + { + "license": { + "name": "noderivs" + } + }, + { + "license": { + "name": "permissive-fsf" + } + }, + { + "license": { + "name": "permissive-nowarranty" + } + }, + { + "license": { + "name": "probably-PD" + } + } + ], + "cpe": "cpe:2.3:a:xz-utils:xz-utils:5.2.4-1ubuntu1:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/xz-utils@5.2.4-1ubuntu1?arch=amd64&distro=ubuntu-20.04" + }, + { + "type": "library", + "bom-ref": "pkg:deb/ubuntu/zlib1g@1:1.2.11.dfsg-2ubuntu1.2?arch=amd64&upstream=zlib&distro=ubuntu-20.04&package-id=65361fdd213cfcf7", + "publisher": "Ubuntu Developers ", + "name": "zlib1g", + "version": "1:1.2.11.dfsg-2ubuntu1.2", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib1g:zlib1g:1\\:1.2.11.dfsg-2ubuntu1.2:*:*:*:*:*:*:*", + "purl": "pkg:deb/ubuntu/zlib1g@1:1.2.11.dfsg-2ubuntu1.2?arch=amd64&upstream=zlib&distro=ubuntu-20.04" + }, + { + "type": "operating-system", + "name": "ubuntu", + "version": "20.04", + "description": "Ubuntu 20.04.2 LTS", + "swid": { + "tagId": "ubuntu", + "name": "ubuntu", + "version": "20.04" + }, + "externalReferences": [ + { + "url": "https://bugs.launchpad.net/ubuntu/", + "type": "issue-tracker" + }, + { + "url": "https://www.ubuntu.com/", + "type": "website" + }, + { + "url": "https://help.ubuntu.com/", + "comment": "support", + "type": "other" + }, + { + "url": "https://www.ubuntu.com/legal/terms-and-policies/privacy-policy", + "comment": "privacyPolicy", + "type": "other" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular-builders/custom-webpack@8.4.1?package-id=65a6a85a9461c339", + "name": "@angular-builders/custom-webpack", + "version": "8.4.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular-builders\\/custom-webpack:\\@angular-builders\\/custom-webpack:8.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular-builders/custom-webpack@8.4.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular-devkit/architect@0.901.5?package-id=20c970ba017e9289", + "name": "@angular-devkit/architect", + "version": "0.901.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular-devkit\\/architect:\\@angular-devkit\\/architect:0.901.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular-devkit/architect@0.901.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular-devkit/build-angular@0.901.5?package-id=3b82877558261dc8", + "name": "@angular-devkit/build-angular", + "version": "0.901.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular-devkit\\/build-angular:\\@angular-devkit\\/build-angular:0.901.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular-devkit/build-angular@0.901.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular-devkit/build-ng-packagr@0.901.5?package-id=a6a8045ac0dfbed5", + "name": "@angular-devkit/build-ng-packagr", + "version": "0.901.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular-devkit\\/build-ng-packagr:\\@angular-devkit\\/build-ng-packagr:0.901.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular-devkit/build-ng-packagr@0.901.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular-devkit/build-optimizer@0.901.5?package-id=469615eb77adea78", + "name": "@angular-devkit/build-optimizer", + "version": "0.901.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular-devkit\\/build-optimizer:\\@angular-devkit\\/build-optimizer:0.901.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular-devkit/build-optimizer@0.901.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular-devkit/build-webpack@0.901.5?package-id=3356633268fe407c", + "name": "@angular-devkit/build-webpack", + "version": "0.901.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular-devkit\\/build-webpack:\\@angular-devkit\\/build-webpack:0.901.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular-devkit/build-webpack@0.901.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular-devkit/core@9.1.5?package-id=b1dfcb2b39b04984", + "name": "@angular-devkit/core", + "version": "9.1.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular-devkit\\/core:\\@angular-devkit\\/core:9.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular-devkit/core@9.1.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular-devkit/schematics@9.1.5?package-id=483bb688c0e6d34d", + "name": "@angular-devkit/schematics", + "version": "9.1.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular-devkit\\/schematics:\\@angular-devkit\\/schematics:9.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular-devkit/schematics@9.1.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular/animations@9.1.6?package-id=8b4a0fab4da7409d", + "name": "@angular/animations", + "version": "9.1.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular\\/animations:\\@angular\\/animations:9.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular/animations@9.1.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular/cdk@9.2.4?package-id=8bc107834503fff9", + "name": "@angular/cdk", + "version": "9.2.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular\\/cdk:\\@angular\\/cdk:9.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular/cdk@9.2.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular/cli@9.1.5?package-id=7dfcfe5bf1764697", + "name": "@angular/cli", + "version": "9.1.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular\\/cli:\\@angular\\/cli:9.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular/cli@9.1.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular/common@9.1.6?package-id=3bdc31324c9141ab", + "name": "@angular/common", + "version": "9.1.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular\\/common:\\@angular\\/common:9.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular/common@9.1.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular/compiler@9.1.6?package-id=d0b2cf9472eb09b3", + "name": "@angular/compiler", + "version": "9.1.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular\\/compiler:\\@angular\\/compiler:9.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular/compiler@9.1.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular/compiler-cli@9.1.6?package-id=c92beed6ee1f2512", + "name": "@angular/compiler-cli", + "version": "9.1.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular\\/compiler-cli:\\@angular\\/compiler-cli:9.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular/compiler-cli@9.1.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular/core@9.1.6?package-id=adc97d9579952242", + "name": "@angular/core", + "version": "9.1.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular\\/core:\\@angular\\/core:9.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular/core@9.1.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular/flex-layout@9.0.0-beta.29?package-id=1c707a58bda8926f", + "name": "@angular/flex-layout", + "version": "9.0.0-beta.29", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular\\/flex-layout:\\@angular\\/flex-layout:9.0.0-beta.29:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular/flex-layout@9.0.0-beta.29" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular/forms@9.1.6?package-id=c3c27873b11cbb62", + "name": "@angular/forms", + "version": "9.1.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular\\/forms:\\@angular\\/forms:9.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular/forms@9.1.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular/language-service@9.1.6?package-id=96daab093c63c94b", + "name": "@angular/language-service", + "version": "9.1.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular\\/language-service:\\@angular\\/language-service:9.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular/language-service@9.1.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular/material@9.2.3?package-id=725e46d7723454aa", + "name": "@angular/material", + "version": "9.2.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular\\/material:\\@angular\\/material:9.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular/material@9.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular/platform-browser@9.1.12?package-id=afaac4964b462152", + "name": "@angular/platform-browser", + "version": "9.1.12", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular\\/platform-browser:\\@angular\\/platform-browser:9.1.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular/platform-browser@9.1.12" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular/platform-browser-dynamic@9.1.12?package-id=414b3fd15a2a5303", + "name": "@angular/platform-browser-dynamic", + "version": "9.1.12", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular\\/platform-browser-dynamic:\\@angular\\/platform-browser-dynamic:9.1.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular/platform-browser-dynamic@9.1.12" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40angular/router@9.1.6?package-id=807c39b67e76af25", + "name": "@angular/router", + "version": "9.1.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@angular\\/router:\\@angular\\/router:9.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40angular/router@9.1.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40auth0/angular-jwt@4.0.0?package-id=830a1d453a317d71", + "name": "@auth0/angular-jwt", + "version": "4.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@auth0\\/angular-jwt:\\@auth0\\/angular-jwt:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40auth0/angular-jwt@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/code-frame@7.16.0?package-id=bee470a99e4b72bd", + "name": "@babel/code-frame", + "version": "7.16.0", + "cpe": "cpe:2.3:a:\\@babel\\/code-frame:\\@babel\\/code-frame:7.16.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/code-frame@7.16.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/code-frame@7.8.3?package-id=9ca105f273df8d67", + "name": "@babel/code-frame", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/code-frame:\\@babel\\/code-frame:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/code-frame@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/compat-data@7.16.4?package-id=bc8dc757b0d00c5f", + "name": "@babel/compat-data", + "version": "7.16.4", + "cpe": "cpe:2.3:a:\\@babel\\/compat-data:\\@babel\\/compat-data:7.16.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/compat-data@7.16.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/compat-data@7.9.6?package-id=f8494aeaba94e8c5", + "name": "@babel/compat-data", + "version": "7.9.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/compat-data:\\@babel\\/compat-data:7.9.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/compat-data@7.9.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/core@7.16.0?package-id=b1c39ba071ca671e", + "name": "@babel/core", + "version": "7.16.0", + "cpe": "cpe:2.3:a:\\@babel\\/core:\\@babel\\/core:7.16.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/core@7.16.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/core@7.9.0?package-id=6ade38a7ccf25dc", + "name": "@babel/core", + "version": "7.9.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/core:\\@babel\\/core:7.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/core@7.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/generator@7.16.0?package-id=6caa7df3c62b8fb5", + "name": "@babel/generator", + "version": "7.16.0", + "cpe": "cpe:2.3:a:\\@babel\\/generator:\\@babel\\/generator:7.16.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/generator@7.16.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/generator@7.7.7?package-id=4483f97d87906db9", + "name": "@babel/generator", + "version": "7.7.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/generator:\\@babel\\/generator:7.7.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/generator@7.7.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-annotate-as-pure@7.8.3?package-id=7b145ba77c592d9c", + "name": "@babel/helper-annotate-as-pure", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-annotate-as-pure:\\@babel\\/helper-annotate-as-pure:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-annotate-as-pure@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-builder-binary-assignment-operator-visitor@7.8.3?package-id=42c29b761549cf9f", + "name": "@babel/helper-builder-binary-assignment-operator-visitor", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-builder-binary-assignment-operator-visitor:\\@babel\\/helper-builder-binary-assignment-operator-visitor:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-builder-binary-assignment-operator-visitor@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-compilation-targets@7.16.3?package-id=829d4599c14988af", + "name": "@babel/helper-compilation-targets", + "version": "7.16.3", + "cpe": "cpe:2.3:a:\\@babel\\/helper-compilation-targets:\\@babel\\/helper-compilation-targets:7.16.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-compilation-targets@7.16.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-compilation-targets@7.9.6?package-id=f6baae0091194cba", + "name": "@babel/helper-compilation-targets", + "version": "7.9.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-compilation-targets:\\@babel\\/helper-compilation-targets:7.9.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-compilation-targets@7.9.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-create-regexp-features-plugin@7.8.8?package-id=9ee5b6fa8f863806", + "name": "@babel/helper-create-regexp-features-plugin", + "version": "7.8.8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-create-regexp-features-plugin:\\@babel\\/helper-create-regexp-features-plugin:7.8.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-create-regexp-features-plugin@7.8.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-define-map@7.8.3?package-id=b4973563eb9e3109", + "name": "@babel/helper-define-map", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-define-map:\\@babel\\/helper-define-map:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-define-map@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-explode-assignable-expression@7.8.3?package-id=d5e096d13eb77ada", + "name": "@babel/helper-explode-assignable-expression", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-explode-assignable-expression:\\@babel\\/helper-explode-assignable-expression:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-explode-assignable-expression@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-function-name@7.16.0?package-id=4644724a9b7aa68b", + "name": "@babel/helper-function-name", + "version": "7.16.0", + "cpe": "cpe:2.3:a:\\@babel\\/helper-function-name:\\@babel\\/helper-function-name:7.16.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-function-name@7.16.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-function-name@7.8.3?package-id=1ee3e14d1dcda792", + "name": "@babel/helper-function-name", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-function-name:\\@babel\\/helper-function-name:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-function-name@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-get-function-arity@7.16.0?package-id=4fc4c2d36f247154", + "name": "@babel/helper-get-function-arity", + "version": "7.16.0", + "cpe": "cpe:2.3:a:\\@babel\\/helper-get-function-arity:\\@babel\\/helper-get-function-arity:7.16.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-get-function-arity@7.16.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-get-function-arity@7.8.3?package-id=90fe11d7659dd69", + "name": "@babel/helper-get-function-arity", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-get-function-arity:\\@babel\\/helper-get-function-arity:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-get-function-arity@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-hoist-variables@7.16.0?package-id=9b3f77bb939160eb", + "name": "@babel/helper-hoist-variables", + "version": "7.16.0", + "cpe": "cpe:2.3:a:\\@babel\\/helper-hoist-variables:\\@babel\\/helper-hoist-variables:7.16.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-hoist-variables@7.16.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-hoist-variables@7.8.3?package-id=668dfde0b760ca58", + "name": "@babel/helper-hoist-variables", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-hoist-variables:\\@babel\\/helper-hoist-variables:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-hoist-variables@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-member-expression-to-functions@7.16.0?package-id=1fa4354257b57aae", + "name": "@babel/helper-member-expression-to-functions", + "version": "7.16.0", + "cpe": "cpe:2.3:a:\\@babel\\/helper-member-expression-to-functions:\\@babel\\/helper-member-expression-to-functions:7.16.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-member-expression-to-functions@7.16.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-member-expression-to-functions@7.8.3?package-id=692b82bcb37a0044", + "name": "@babel/helper-member-expression-to-functions", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-member-expression-to-functions:\\@babel\\/helper-member-expression-to-functions:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-member-expression-to-functions@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-module-imports@7.16.0?package-id=3dd1245f9190ab36", + "name": "@babel/helper-module-imports", + "version": "7.16.0", + "cpe": "cpe:2.3:a:\\@babel\\/helper-module-imports:\\@babel\\/helper-module-imports:7.16.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-module-imports@7.16.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-module-imports@7.8.3?package-id=4fabcbb147622b98", + "name": "@babel/helper-module-imports", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-module-imports:\\@babel\\/helper-module-imports:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-module-imports@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-module-transforms@7.16.0?package-id=627b6b30f99931d3", + "name": "@babel/helper-module-transforms", + "version": "7.16.0", + "cpe": "cpe:2.3:a:\\@babel\\/helper-module-transforms:\\@babel\\/helper-module-transforms:7.16.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-module-transforms@7.16.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-module-transforms@7.9.0?package-id=bcd7b3259cf77aa7", + "name": "@babel/helper-module-transforms", + "version": "7.9.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-module-transforms:\\@babel\\/helper-module-transforms:7.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-module-transforms@7.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-optimise-call-expression@7.16.0?package-id=699ba633ce3382f5", + "name": "@babel/helper-optimise-call-expression", + "version": "7.16.0", + "cpe": "cpe:2.3:a:\\@babel\\/helper-optimise-call-expression:\\@babel\\/helper-optimise-call-expression:7.16.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-optimise-call-expression@7.16.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-optimise-call-expression@7.8.3?package-id=8d6729b1808f23bc", + "name": "@babel/helper-optimise-call-expression", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-optimise-call-expression:\\@babel\\/helper-optimise-call-expression:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-optimise-call-expression@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-plugin-utils@7.8.3?package-id=336e40e60c6d9cca", + "name": "@babel/helper-plugin-utils", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-plugin-utils:\\@babel\\/helper-plugin-utils:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-plugin-utils@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-regex@7.8.3?package-id=ae72b4e36781d118", + "name": "@babel/helper-regex", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-regex:\\@babel\\/helper-regex:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-regex@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-remap-async-to-generator@7.8.3?package-id=a6a2b9bd6dbec36e", + "name": "@babel/helper-remap-async-to-generator", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-remap-async-to-generator:\\@babel\\/helper-remap-async-to-generator:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-remap-async-to-generator@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-replace-supers@7.16.0?package-id=697998e25a48bf1f", + "name": "@babel/helper-replace-supers", + "version": "7.16.0", + "cpe": "cpe:2.3:a:\\@babel\\/helper-replace-supers:\\@babel\\/helper-replace-supers:7.16.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-replace-supers@7.16.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-replace-supers@7.9.6?package-id=4f435516289e65fd", + "name": "@babel/helper-replace-supers", + "version": "7.9.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-replace-supers:\\@babel\\/helper-replace-supers:7.9.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-replace-supers@7.9.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-simple-access@7.16.0?package-id=dd74a9684a296589", + "name": "@babel/helper-simple-access", + "version": "7.16.0", + "cpe": "cpe:2.3:a:\\@babel\\/helper-simple-access:\\@babel\\/helper-simple-access:7.16.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-simple-access@7.16.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-simple-access@7.8.3?package-id=ef91b1be670ec20c", + "name": "@babel/helper-simple-access", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-simple-access:\\@babel\\/helper-simple-access:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-simple-access@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-split-export-declaration@7.16.0?package-id=c39852d92c0ac21c", + "name": "@babel/helper-split-export-declaration", + "version": "7.16.0", + "cpe": "cpe:2.3:a:\\@babel\\/helper-split-export-declaration:\\@babel\\/helper-split-export-declaration:7.16.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-split-export-declaration@7.16.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-split-export-declaration@7.8.3?package-id=6094414cd49cb945", + "name": "@babel/helper-split-export-declaration", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-split-export-declaration:\\@babel\\/helper-split-export-declaration:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-split-export-declaration@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-validator-identifier@7.15.7?package-id=89582dfacb43b62b", + "name": "@babel/helper-validator-identifier", + "version": "7.15.7", + "cpe": "cpe:2.3:a:\\@babel\\/helper-validator-identifier:\\@babel\\/helper-validator-identifier:7.15.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-validator-identifier@7.15.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-validator-identifier@7.9.0?package-id=229ebec2a4162a2f", + "name": "@babel/helper-validator-identifier", + "version": "7.9.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-validator-identifier:\\@babel\\/helper-validator-identifier:7.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-validator-identifier@7.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-validator-option@7.14.5?package-id=f609e7e49eaf98ee", + "name": "@babel/helper-validator-option", + "version": "7.14.5", + "cpe": "cpe:2.3:a:\\@babel\\/helper-validator-option:\\@babel\\/helper-validator-option:7.14.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-validator-option@7.14.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helper-wrap-function@7.8.3?package-id=d187d308a7b0f64f", + "name": "@babel/helper-wrap-function", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-wrap-function:\\@babel\\/helper-wrap-function:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-wrap-function@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helpers@7.16.3?package-id=3368bdd7cfb5147e", + "name": "@babel/helpers", + "version": "7.16.3", + "cpe": "cpe:2.3:a:\\@babel\\/helpers:\\@babel\\/helpers:7.16.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helpers@7.16.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/helpers@7.9.6?package-id=4dad7d3a654ba583", + "name": "@babel/helpers", + "version": "7.9.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helpers:\\@babel\\/helpers:7.9.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helpers@7.9.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/highlight@7.16.0?package-id=97d77e48713a7bd2", + "name": "@babel/highlight", + "version": "7.16.0", + "cpe": "cpe:2.3:a:\\@babel\\/highlight:\\@babel\\/highlight:7.16.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/highlight@7.16.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/highlight@7.9.0?package-id=9ae6242c096ddbb9", + "name": "@babel/highlight", + "version": "7.9.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/highlight:\\@babel\\/highlight:7.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/highlight@7.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/parser@7.16.4?package-id=b3119cd619e83667", + "name": "@babel/parser", + "version": "7.16.4", + "cpe": "cpe:2.3:a:\\@babel\\/parser:\\@babel\\/parser:7.16.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/parser@7.16.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/parser@7.9.3?package-id=5bc9e941dc82ed2e", + "name": "@babel/parser", + "version": "7.9.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/parser:\\@babel\\/parser:7.9.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/parser@7.9.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-async-generator-functions@7.8.3?package-id=42ea39c7e504aee7", + "name": "@babel/plugin-proposal-async-generator-functions", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-proposal-async-generator-functions:\\@babel\\/plugin-proposal-async-generator-functions:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-proposal-async-generator-functions@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-dynamic-import@7.8.3?package-id=de8f272e2e2eccc6", + "name": "@babel/plugin-proposal-dynamic-import", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-proposal-dynamic-import:\\@babel\\/plugin-proposal-dynamic-import:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-proposal-dynamic-import@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-json-strings@7.8.3?package-id=6288c9a9d74eeab9", + "name": "@babel/plugin-proposal-json-strings", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-proposal-json-strings:\\@babel\\/plugin-proposal-json-strings:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-proposal-json-strings@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-nullish-coalescing-operator@7.8.3?package-id=76633ca0f7062ece", + "name": "@babel/plugin-proposal-nullish-coalescing-operator", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-proposal-nullish-coalescing-operator:\\@babel\\/plugin-proposal-nullish-coalescing-operator:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-proposal-nullish-coalescing-operator@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-numeric-separator@7.8.3?package-id=f04378ac7fadaeed", + "name": "@babel/plugin-proposal-numeric-separator", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-proposal-numeric-separator:\\@babel\\/plugin-proposal-numeric-separator:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-proposal-numeric-separator@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-object-rest-spread@7.9.6?package-id=cd5a480d1b63514e", + "name": "@babel/plugin-proposal-object-rest-spread", + "version": "7.9.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-proposal-object-rest-spread:\\@babel\\/plugin-proposal-object-rest-spread:7.9.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-proposal-object-rest-spread@7.9.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-optional-catch-binding@7.8.3?package-id=6b5aa5d7d155dedc", + "name": "@babel/plugin-proposal-optional-catch-binding", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-proposal-optional-catch-binding:\\@babel\\/plugin-proposal-optional-catch-binding:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-proposal-optional-catch-binding@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-optional-chaining@7.9.0?package-id=824b9237010c1110", + "name": "@babel/plugin-proposal-optional-chaining", + "version": "7.9.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-proposal-optional-chaining:\\@babel\\/plugin-proposal-optional-chaining:7.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-proposal-optional-chaining@7.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-proposal-unicode-property-regex@7.8.8?package-id=f9b2b0a59f380474", + "name": "@babel/plugin-proposal-unicode-property-regex", + "version": "7.8.8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-proposal-unicode-property-regex:\\@babel\\/plugin-proposal-unicode-property-regex:7.8.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-proposal-unicode-property-regex@7.8.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-async-generators@7.8.4?package-id=a5b2fcd86fd50f83", + "name": "@babel/plugin-syntax-async-generators", + "version": "7.8.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-syntax-async-generators:\\@babel\\/plugin-syntax-async-generators:7.8.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-syntax-async-generators@7.8.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-dynamic-import@7.8.3?package-id=2b9ab2f1c2c512cb", + "name": "@babel/plugin-syntax-dynamic-import", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-syntax-dynamic-import:\\@babel\\/plugin-syntax-dynamic-import:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-syntax-dynamic-import@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-json-strings@7.8.3?package-id=9cd9eb0c5bb74e95", + "name": "@babel/plugin-syntax-json-strings", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-syntax-json-strings:\\@babel\\/plugin-syntax-json-strings:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-syntax-json-strings@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-nullish-coalescing-operator@7.8.3?package-id=bb6420e9088d2514", + "name": "@babel/plugin-syntax-nullish-coalescing-operator", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-syntax-nullish-coalescing-operator:\\@babel\\/plugin-syntax-nullish-coalescing-operator:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-syntax-nullish-coalescing-operator@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-numeric-separator@7.8.3?package-id=cb5eb414aab76ed2", + "name": "@babel/plugin-syntax-numeric-separator", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-syntax-numeric-separator:\\@babel\\/plugin-syntax-numeric-separator:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-syntax-numeric-separator@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-object-rest-spread@7.8.3?package-id=e0e4b24163fa804d", + "name": "@babel/plugin-syntax-object-rest-spread", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-syntax-object-rest-spread:\\@babel\\/plugin-syntax-object-rest-spread:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-syntax-object-rest-spread@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-optional-catch-binding@7.8.3?package-id=5d6d49f1a6ee8f52", + "name": "@babel/plugin-syntax-optional-catch-binding", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-syntax-optional-catch-binding:\\@babel\\/plugin-syntax-optional-catch-binding:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-syntax-optional-catch-binding@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-optional-chaining@7.8.3?package-id=92d1da1c193f5f8f", + "name": "@babel/plugin-syntax-optional-chaining", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-syntax-optional-chaining:\\@babel\\/plugin-syntax-optional-chaining:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-syntax-optional-chaining@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-syntax-top-level-await@7.8.3?package-id=724fa3d0f2e3fbf0", + "name": "@babel/plugin-syntax-top-level-await", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-syntax-top-level-await:\\@babel\\/plugin-syntax-top-level-await:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-syntax-top-level-await@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-arrow-functions@7.8.3?package-id=376ffafc440e5aa7", + "name": "@babel/plugin-transform-arrow-functions", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-arrow-functions:\\@babel\\/plugin-transform-arrow-functions:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-arrow-functions@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-async-to-generator@7.8.3?package-id=763edda70ca558ba", + "name": "@babel/plugin-transform-async-to-generator", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-async-to-generator:\\@babel\\/plugin-transform-async-to-generator:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-async-to-generator@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-block-scoped-functions@7.8.3?package-id=bfa8d481233f4c0b", + "name": "@babel/plugin-transform-block-scoped-functions", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-block-scoped-functions:\\@babel\\/plugin-transform-block-scoped-functions:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-block-scoped-functions@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-block-scoping@7.8.3?package-id=b05b0226ef72745b", + "name": "@babel/plugin-transform-block-scoping", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-block-scoping:\\@babel\\/plugin-transform-block-scoping:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-block-scoping@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-classes@7.9.5?package-id=19497cd3085287b6", + "name": "@babel/plugin-transform-classes", + "version": "7.9.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-classes:\\@babel\\/plugin-transform-classes:7.9.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-classes@7.9.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-computed-properties@7.8.3?package-id=990cd68175d40a17", + "name": "@babel/plugin-transform-computed-properties", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-computed-properties:\\@babel\\/plugin-transform-computed-properties:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-computed-properties@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-destructuring@7.9.5?package-id=6fd673beeb619fad", + "name": "@babel/plugin-transform-destructuring", + "version": "7.9.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-destructuring:\\@babel\\/plugin-transform-destructuring:7.9.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-destructuring@7.9.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-dotall-regex@7.8.3?package-id=c906b380ccf53d3b", + "name": "@babel/plugin-transform-dotall-regex", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-dotall-regex:\\@babel\\/plugin-transform-dotall-regex:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-dotall-regex@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-duplicate-keys@7.8.3?package-id=7b28b004bd7eac67", + "name": "@babel/plugin-transform-duplicate-keys", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-duplicate-keys:\\@babel\\/plugin-transform-duplicate-keys:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-duplicate-keys@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-exponentiation-operator@7.8.3?package-id=9cd81e6127d1b968", + "name": "@babel/plugin-transform-exponentiation-operator", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-exponentiation-operator:\\@babel\\/plugin-transform-exponentiation-operator:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-exponentiation-operator@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-for-of@7.9.0?package-id=66c5377010dedc14", + "name": "@babel/plugin-transform-for-of", + "version": "7.9.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-for-of:\\@babel\\/plugin-transform-for-of:7.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-for-of@7.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-function-name@7.8.3?package-id=4e4d1ac81be58da3", + "name": "@babel/plugin-transform-function-name", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-function-name:\\@babel\\/plugin-transform-function-name:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-function-name@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-literals@7.8.3?package-id=2a36fc82aafe4d25", + "name": "@babel/plugin-transform-literals", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-literals:\\@babel\\/plugin-transform-literals:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-literals@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-member-expression-literals@7.8.3?package-id=df930e219dd1a131", + "name": "@babel/plugin-transform-member-expression-literals", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-member-expression-literals:\\@babel\\/plugin-transform-member-expression-literals:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-member-expression-literals@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-modules-amd@7.9.6?package-id=481e380d0013659c", + "name": "@babel/plugin-transform-modules-amd", + "version": "7.9.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-modules-amd:\\@babel\\/plugin-transform-modules-amd:7.9.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-modules-amd@7.9.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-modules-commonjs@7.9.6?package-id=8d671e16bd543a5", + "name": "@babel/plugin-transform-modules-commonjs", + "version": "7.9.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-modules-commonjs:\\@babel\\/plugin-transform-modules-commonjs:7.9.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-modules-commonjs@7.9.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-modules-systemjs@7.9.6?package-id=8cc2c10038ad5ffe", + "name": "@babel/plugin-transform-modules-systemjs", + "version": "7.9.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-modules-systemjs:\\@babel\\/plugin-transform-modules-systemjs:7.9.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-modules-systemjs@7.9.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-modules-umd@7.9.0?package-id=719dccaf8412875a", + "name": "@babel/plugin-transform-modules-umd", + "version": "7.9.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-modules-umd:\\@babel\\/plugin-transform-modules-umd:7.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-modules-umd@7.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-named-capturing-groups-regex@7.8.3?package-id=a6c1df4f0b37343e", + "name": "@babel/plugin-transform-named-capturing-groups-regex", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-named-capturing-groups-regex:\\@babel\\/plugin-transform-named-capturing-groups-regex:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-named-capturing-groups-regex@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-new-target@7.8.3?package-id=cf362202094bf57a", + "name": "@babel/plugin-transform-new-target", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-new-target:\\@babel\\/plugin-transform-new-target:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-new-target@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-object-super@7.8.3?package-id=b17795f428821730", + "name": "@babel/plugin-transform-object-super", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-object-super:\\@babel\\/plugin-transform-object-super:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-object-super@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-parameters@7.9.5?package-id=62a808b7386fffcb", + "name": "@babel/plugin-transform-parameters", + "version": "7.9.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-parameters:\\@babel\\/plugin-transform-parameters:7.9.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-parameters@7.9.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-property-literals@7.8.3?package-id=67a7ba3381d8d371", + "name": "@babel/plugin-transform-property-literals", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-property-literals:\\@babel\\/plugin-transform-property-literals:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-property-literals@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-regenerator@7.8.7?package-id=848f305780c0445b", + "name": "@babel/plugin-transform-regenerator", + "version": "7.8.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-regenerator:\\@babel\\/plugin-transform-regenerator:7.8.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-regenerator@7.8.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-reserved-words@7.8.3?package-id=182f4fc93a66510d", + "name": "@babel/plugin-transform-reserved-words", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-reserved-words:\\@babel\\/plugin-transform-reserved-words:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-reserved-words@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-shorthand-properties@7.8.3?package-id=d896029a1725dcc2", + "name": "@babel/plugin-transform-shorthand-properties", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-shorthand-properties:\\@babel\\/plugin-transform-shorthand-properties:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-shorthand-properties@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-spread@7.8.3?package-id=3365398a5759255a", + "name": "@babel/plugin-transform-spread", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-spread:\\@babel\\/plugin-transform-spread:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-spread@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-sticky-regex@7.8.3?package-id=51734186e74bd3c3", + "name": "@babel/plugin-transform-sticky-regex", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-sticky-regex:\\@babel\\/plugin-transform-sticky-regex:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-sticky-regex@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-template-literals@7.8.3?package-id=e9bbd1906620ee39", + "name": "@babel/plugin-transform-template-literals", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-template-literals:\\@babel\\/plugin-transform-template-literals:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-template-literals@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-typeof-symbol@7.8.4?package-id=1bcbbb9d469c0574", + "name": "@babel/plugin-transform-typeof-symbol", + "version": "7.8.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-typeof-symbol:\\@babel\\/plugin-transform-typeof-symbol:7.8.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-typeof-symbol@7.8.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/plugin-transform-unicode-regex@7.8.3?package-id=4cf39fe4bada5ea5", + "name": "@babel/plugin-transform-unicode-regex", + "version": "7.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-unicode-regex:\\@babel\\/plugin-transform-unicode-regex:7.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-unicode-regex@7.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/preset-env@7.9.0?package-id=8c805bfa8e62bda8", + "name": "@babel/preset-env", + "version": "7.9.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/preset-env:\\@babel\\/preset-env:7.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/preset-env@7.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/preset-modules@0.1.3?package-id=468495008edf04a", + "name": "@babel/preset-modules", + "version": "0.1.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/preset-modules:\\@babel\\/preset-modules:0.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/preset-modules@0.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/runtime@7.9.6?package-id=3eeeda72ef9ff35c", + "name": "@babel/runtime", + "version": "7.9.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/runtime:\\@babel\\/runtime:7.9.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/runtime@7.9.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/template@7.16.0?package-id=8e8c991aee661483", + "name": "@babel/template", + "version": "7.16.0", + "cpe": "cpe:2.3:a:\\@babel\\/template:\\@babel\\/template:7.16.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/template@7.16.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/template@7.8.6?package-id=52137a9ea9752332", + "name": "@babel/template", + "version": "7.8.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/template:\\@babel\\/template:7.8.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/template@7.8.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/traverse@7.16.3?package-id=ad159e6b788dfed", + "name": "@babel/traverse", + "version": "7.16.3", + "cpe": "cpe:2.3:a:\\@babel\\/traverse:\\@babel\\/traverse:7.16.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/traverse@7.16.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/traverse@7.9.0?package-id=47e8aabd72855d28", + "name": "@babel/traverse", + "version": "7.9.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/traverse:\\@babel\\/traverse:7.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/traverse@7.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/types@7.16.0?package-id=da26d6635bf027ef", + "name": "@babel/types", + "version": "7.16.0", + "cpe": "cpe:2.3:a:\\@babel\\/types:\\@babel\\/types:7.16.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/types@7.16.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40babel/types@7.9.0?package-id=41107ac5f721106", + "name": "@babel/types", + "version": "7.9.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/types:\\@babel\\/types:7.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/types@7.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40danielmoncada/angular-datetime-picker@9.2.2?package-id=ecc3079f36271532", + "name": "@danielmoncada/angular-datetime-picker", + "version": "9.2.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@danielmoncada\\/angular-datetime-picker:\\@danielmoncada\\/angular-datetime-picker:9.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40danielmoncada/angular-datetime-picker@9.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40fortawesome/fontawesome-free@5.13.0?package-id=5745cff27cbf8704", + "name": "@fortawesome/fontawesome-free", + "version": "5.13.0", + "licenses": [ + { + "license": { + "name": "(CC-BY-4.0 AND OFL-1.1 AND MIT)" + } + } + ], + "cpe": "cpe:2.3:a:\\@fortawesome\\/fontawesome-free:\\@fortawesome\\/fontawesome-free:5.13.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40fortawesome/fontawesome-free@5.13.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40fusioncharts/accessibility@1.5.0?package-id=ccaac893cfa8d5b5", + "name": "@fusioncharts/accessibility", + "version": "1.5.0", + "licenses": [ + { + "license": { + "name": "https://www.fusioncharts.com/buy/" + } + } + ], + "cpe": "cpe:2.3:a:\\@fusioncharts\\/accessibility:\\@fusioncharts\\/accessibility:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40fusioncharts/accessibility@1.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40fusioncharts/charts@3.18.0?package-id=e8c58a09e0903572", + "name": "@fusioncharts/charts", + "version": "3.18.0", + "licenses": [ + { + "license": { + "name": "https://www.fusioncharts.com/buy/" + } + } + ], + "cpe": "cpe:2.3:a:\\@fusioncharts\\/charts:\\@fusioncharts\\/charts:3.18.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40fusioncharts/charts@3.18.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40fusioncharts/constructor@1.5.0?package-id=a25e0e6b4e7f76af", + "name": "@fusioncharts/constructor", + "version": "1.5.0", + "licenses": [ + { + "license": { + "name": "https://www.fusioncharts.com/buy/" + } + } + ], + "cpe": "cpe:2.3:a:\\@fusioncharts\\/constructor:\\@fusioncharts\\/constructor:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40fusioncharts/constructor@1.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40fusioncharts/core@1.5.0?package-id=52994e30a525bf2c", + "name": "@fusioncharts/core", + "version": "1.5.0", + "licenses": [ + { + "license": { + "name": "https://www.fusioncharts.com/buy/" + } + } + ], + "cpe": "cpe:2.3:a:\\@fusioncharts\\/core:\\@fusioncharts\\/core:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40fusioncharts/core@1.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40fusioncharts/datatable@1.5.0?package-id=133f60ce1e679d89", + "name": "@fusioncharts/datatable", + "version": "1.5.0", + "licenses": [ + { + "license": { + "name": "https://www.fusioncharts.com/buy/" + } + } + ], + "cpe": "cpe:2.3:a:\\@fusioncharts\\/datatable:\\@fusioncharts\\/datatable:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40fusioncharts/datatable@1.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40fusioncharts/features@1.5.0?package-id=3513eeb2f8d2984d", + "name": "@fusioncharts/features", + "version": "1.5.0", + "licenses": [ + { + "license": { + "name": "https://www.fusioncharts.com/buy/" + } + } + ], + "cpe": "cpe:2.3:a:\\@fusioncharts\\/features:\\@fusioncharts\\/features:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40fusioncharts/features@1.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40fusioncharts/fusiontime@2.6.0?package-id=ea7b517fcdf8499b", + "name": "@fusioncharts/fusiontime", + "version": "2.6.0", + "licenses": [ + { + "license": { + "name": "https://www.fusioncharts.com/buy/" + } + } + ], + "cpe": "cpe:2.3:a:\\@fusioncharts\\/fusiontime:\\@fusioncharts\\/fusiontime:2.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40fusioncharts/fusiontime@2.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40fusioncharts/maps@3.18.0?package-id=ddeb948a0e76454e", + "name": "@fusioncharts/maps", + "version": "3.18.0", + "licenses": [ + { + "license": { + "name": "https://www.fusioncharts.com/buy/" + } + } + ], + "cpe": "cpe:2.3:a:\\@fusioncharts\\/maps:\\@fusioncharts\\/maps:3.18.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40fusioncharts/maps@3.18.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40fusioncharts/powercharts@3.18.0?package-id=fba29609e85a5317", + "name": "@fusioncharts/powercharts", + "version": "3.18.0", + "licenses": [ + { + "license": { + "name": "https://www.fusioncharts.com/buy/" + } + } + ], + "cpe": "cpe:2.3:a:\\@fusioncharts\\/powercharts:\\@fusioncharts\\/powercharts:3.18.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40fusioncharts/powercharts@3.18.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40fusioncharts/utils@1.5.0?package-id=c4521bdf2ed42757", + "name": "@fusioncharts/utils", + "version": "1.5.0", + "licenses": [ + { + "license": { + "name": "https://www.fusioncharts.com/buy/" + } + } + ], + "cpe": "cpe:2.3:a:\\@fusioncharts\\/utils:\\@fusioncharts\\/utils:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40fusioncharts/utils@1.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40fusioncharts/widgets@3.18.0?package-id=76752811338fb1ee", + "name": "@fusioncharts/widgets", + "version": "3.18.0", + "licenses": [ + { + "license": { + "name": "https://www.fusioncharts.com/buy/" + } + } + ], + "cpe": "cpe:2.3:a:\\@fusioncharts\\/widgets:\\@fusioncharts\\/widgets:3.18.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40fusioncharts/widgets@3.18.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40istanbuljs/load-nyc-config@1.1.0?package-id=ffc1250b23ab4f66", + "name": "@istanbuljs/load-nyc-config", + "version": "1.1.0", + "cpe": "cpe:2.3:a:\\@istanbuljs\\/load-nyc-config:\\@istanbuljs\\/load-nyc-config:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40istanbuljs/load-nyc-config@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40istanbuljs/nyc-config-typescript@1.0.2?package-id=a61ff9b0683bbe10", + "name": "@istanbuljs/nyc-config-typescript", + "version": "1.0.2", + "cpe": "cpe:2.3:a:\\@istanbuljs\\/nyc-config-typescript:\\@istanbuljs\\/nyc-config-typescript:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40istanbuljs/nyc-config-typescript@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40istanbuljs/schema@0.1.2?package-id=14140c9f62a6d1af", + "name": "@istanbuljs/schema", + "version": "0.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@istanbuljs\\/schema:\\@istanbuljs\\/schema:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40istanbuljs/schema@0.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40istanbuljs/schema@0.1.3?package-id=de00d81bf9e1c2f0", + "name": "@istanbuljs/schema", + "version": "0.1.3", + "cpe": "cpe:2.3:a:\\@istanbuljs\\/schema:\\@istanbuljs\\/schema:0.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40istanbuljs/schema@0.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40jsdevtools/coverage-istanbul-loader@3.0.3?package-id=6bf8dd60eda8fd70", + "name": "@jsdevtools/coverage-istanbul-loader", + "version": "3.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@jsdevtools\\/coverage-istanbul-loader:\\@jsdevtools\\/coverage-istanbul-loader:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40jsdevtools/coverage-istanbul-loader@3.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40ng-idle/core@8.0.0-beta.4?package-id=d231fc6f1a18706b", + "name": "@ng-idle/core", + "version": "8.0.0-beta.4", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:\\@ng-idle\\/core:\\@ng-idle\\/core:8.0.0-beta.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40ng-idle/core@8.0.0-beta.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40ng-idle/keepalive@8.0.0-beta.4?package-id=8e1ba6a985f12b6b", + "name": "@ng-idle/keepalive", + "version": "8.0.0-beta.4", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:\\@ng-idle\\/keepalive:\\@ng-idle\\/keepalive:8.0.0-beta.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40ng-idle/keepalive@8.0.0-beta.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40ngtools/webpack@9.1.5?package-id=61b2231ee647c46e", + "name": "@ngtools/webpack", + "version": "9.1.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@ngtools\\/webpack:\\@ngtools\\/webpack:9.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40ngtools/webpack@9.1.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40ngx-translate/core@12.1.2?package-id=bb0b519f24e1e0a0", + "name": "@ngx-translate/core", + "version": "12.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@ngx-translate\\/core:\\@ngx-translate\\/core:12.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40ngx-translate/core@12.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40ngx-translate/http-loader@4.0.0?package-id=623d2531d1c584dd", + "name": "@ngx-translate/http-loader", + "version": "4.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@ngx-translate\\/http-loader:\\@ngx-translate\\/http-loader:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40ngx-translate/http-loader@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40ngxd/core@9.0.4?package-id=f69b6f926eb9ed5b", + "name": "@ngxd/core", + "version": "9.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@ngxd\\/core:\\@ngxd\\/core:9.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40ngxd/core@9.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40pliant/front-common@1.40.0?package-id=4b4ad3e4787cbe52", + "name": "@pliant/front-common", + "version": "1.40.0", + "cpe": "cpe:2.3:a:\\@pliant\\/front-common:\\@pliant\\/front-common:1.40.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40pliant/front-common@1.40.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40scarf/scarf@0.1.5?package-id=6d9fd92722bd54ba", + "name": "@scarf/scarf", + "version": "0.1.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@scarf\\/scarf:\\@scarf\\/scarf:0.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40scarf/scarf@0.1.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40schematics/angular@9.1.5?package-id=25852a1240f02a56", + "name": "@schematics/angular", + "version": "9.1.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@schematics\\/angular:\\@schematics\\/angular:9.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40schematics/angular@9.1.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40schematics/update@0.901.5?package-id=34af53a28c36635", + "name": "@schematics/update", + "version": "0.901.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@schematics\\/update:\\@schematics\\/update:0.901.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40schematics/update@0.901.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/adm-zip@0.4.32?package-id=1e8013f3d387caa7", + "name": "@types/adm-zip", + "version": "0.4.32", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/adm-zip:\\@types\\/adm-zip:0.4.32:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/adm-zip@0.4.32" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/caseless@0.12.2?package-id=75897190b3b61e35", + "name": "@types/caseless", + "version": "0.12.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/caseless:\\@types\\/caseless:0.12.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/caseless@0.12.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/color-name@1.1.1?package-id=633c64821381411f", + "name": "@types/color-name", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/color-name:\\@types\\/color-name:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/color-name@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/deep-diff@1.0.0?package-id=7422ab5cfb219543", + "name": "@types/deep-diff", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/deep-diff:\\@types\\/deep-diff:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/deep-diff@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/events@3.0.0?package-id=e846ede1fb2fcc3d", + "name": "@types/events", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/events:\\@types\\/events:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/events@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/file-saver@2.0.1?package-id=d3eea93dddba2f87", + "name": "@types/file-saver", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/file-saver:\\@types\\/file-saver:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/file-saver@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/fusioncharts@3.12.3?package-id=7fcb9e6abd4be415", + "name": "@types/fusioncharts", + "version": "3.12.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/fusioncharts:\\@types\\/fusioncharts:3.12.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/fusioncharts@3.12.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/glob@7.1.1?package-id=3a65280f87be668", + "name": "@types/glob", + "version": "7.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/glob:\\@types\\/glob:7.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/glob@7.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/hammerjs@2.0.36?package-id=a0b0d49459ae32aa", + "name": "@types/hammerjs", + "version": "2.0.36", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/hammerjs:\\@types\\/hammerjs:2.0.36:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/hammerjs@2.0.36" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/jasmine@3.5.10?package-id=32150cffb9668dc7", + "name": "@types/jasmine", + "version": "3.5.10", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/jasmine:\\@types\\/jasmine:3.5.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/jasmine@3.5.10" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/jasminewd2@2.0.8?package-id=d5cc5fad5d6656b9", + "name": "@types/jasminewd2", + "version": "2.0.8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/jasminewd2:\\@types\\/jasminewd2:2.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/jasminewd2@2.0.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/js-yaml@4.0.5?package-id=f07ecbd189290a4b", + "name": "@types/js-yaml", + "version": "4.0.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/js-yaml:\\@types\\/js-yaml:4.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/js-yaml@4.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/json-js@1.1.0?package-id=ea3456ee328e9806", + "name": "@types/json-js", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/json-js:\\@types\\/json-js:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/json-js@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/json-schema@7.0.4?package-id=6d32e19f8d197923", + "name": "@types/json-schema", + "version": "7.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/json-schema:\\@types\\/json-schema:7.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/json-schema@7.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/jszip@3.1.7?package-id=41883d0a0cee6429", + "name": "@types/jszip", + "version": "3.1.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/jszip:\\@types\\/jszip:3.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/jszip@3.1.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/lodash@4.14.149?package-id=2d6c1d507beb3b38", + "name": "@types/lodash", + "version": "4.14.149", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/lodash:\\@types\\/lodash:4.14.149:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/lodash@4.14.149" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/minimatch@3.0.3?package-id=f8c0561365eb879c", + "name": "@types/minimatch", + "version": "3.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/minimatch:\\@types\\/minimatch:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/minimatch@3.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/node@13.9.3?package-id=bc7448565e133b70", + "name": "@types/node", + "version": "13.9.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/node:\\@types\\/node:13.9.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/node@13.9.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/prettier@1.19.1?package-id=2e03117674f43eaf", + "name": "@types/prettier", + "version": "1.19.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/prettier:\\@types\\/prettier:1.19.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/prettier@1.19.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/pretty-ms@5.0.1?package-id=72fd3841a269544e", + "name": "@types/pretty-ms", + "version": "5.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/pretty-ms:\\@types\\/pretty-ms:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/pretty-ms@5.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/q@1.5.2?package-id=6c76118ac72dc9f3", + "name": "@types/q", + "version": "1.5.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/q:\\@types\\/q:1.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/q@1.5.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/request@2.48.4?package-id=fca2893202b499ef", + "name": "@types/request", + "version": "2.48.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/request:\\@types\\/request:2.48.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/request@2.48.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/request-promise-native@1.0.17?package-id=ad56e8cefd8a459", + "name": "@types/request-promise-native", + "version": "1.0.17", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/request-promise-native:\\@types\\/request-promise-native:1.0.17:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/request-promise-native@1.0.17" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/selenium-webdriver@3.0.17?package-id=dc5589093f088ab1", + "name": "@types/selenium-webdriver", + "version": "3.0.17", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/selenium-webdriver:\\@types\\/selenium-webdriver:3.0.17:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/selenium-webdriver@3.0.17" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/source-list-map@0.1.2?package-id=b489d800c4257000", + "name": "@types/source-list-map", + "version": "0.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/source-list-map:\\@types\\/source-list-map:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/source-list-map@0.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/tough-cookie@2.3.6?package-id=ae885c19ad27b02e", + "name": "@types/tough-cookie", + "version": "2.3.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/tough-cookie:\\@types\\/tough-cookie:2.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/tough-cookie@2.3.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/webpack-sources@0.1.7?package-id=2ead707bc311a3f", + "name": "@types/webpack-sources", + "version": "0.1.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/webpack-sources:\\@types\\/webpack-sources:0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/webpack-sources@0.1.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40webassemblyjs/ast@1.8.5?package-id=f79d5342dca363d9", + "name": "@webassemblyjs/ast", + "version": "1.8.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@webassemblyjs\\/ast:\\@webassemblyjs\\/ast:1.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40webassemblyjs/ast@1.8.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40webassemblyjs/floating-point-hex-parser@1.8.5?package-id=709fb7e11c87bdc6", + "name": "@webassemblyjs/floating-point-hex-parser", + "version": "1.8.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@webassemblyjs\\/floating-point-hex-parser:\\@webassemblyjs\\/floating-point-hex-parser:1.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40webassemblyjs/floating-point-hex-parser@1.8.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40webassemblyjs/helper-api-error@1.8.5?package-id=5f1895df229abb0f", + "name": "@webassemblyjs/helper-api-error", + "version": "1.8.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@webassemblyjs\\/helper-api-error:\\@webassemblyjs\\/helper-api-error:1.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40webassemblyjs/helper-api-error@1.8.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40webassemblyjs/helper-buffer@1.8.5?package-id=cdd6e103795b86ff", + "name": "@webassemblyjs/helper-buffer", + "version": "1.8.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@webassemblyjs\\/helper-buffer:\\@webassemblyjs\\/helper-buffer:1.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40webassemblyjs/helper-buffer@1.8.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40webassemblyjs/helper-code-frame@1.8.5?package-id=7d7900f3da03207b", + "name": "@webassemblyjs/helper-code-frame", + "version": "1.8.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@webassemblyjs\\/helper-code-frame:\\@webassemblyjs\\/helper-code-frame:1.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40webassemblyjs/helper-code-frame@1.8.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40webassemblyjs/helper-fsm@1.8.5?package-id=cdaab87e8f28f79", + "name": "@webassemblyjs/helper-fsm", + "version": "1.8.5", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@webassemblyjs\\/helper-fsm:\\@webassemblyjs\\/helper-fsm:1.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40webassemblyjs/helper-fsm@1.8.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40webassemblyjs/helper-module-context@1.8.5?package-id=fc41cef853245a72", + "name": "@webassemblyjs/helper-module-context", + "version": "1.8.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@webassemblyjs\\/helper-module-context:\\@webassemblyjs\\/helper-module-context:1.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40webassemblyjs/helper-module-context@1.8.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40webassemblyjs/helper-wasm-bytecode@1.8.5?package-id=6019d5e0e08c4dd4", + "name": "@webassemblyjs/helper-wasm-bytecode", + "version": "1.8.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@webassemblyjs\\/helper-wasm-bytecode:\\@webassemblyjs\\/helper-wasm-bytecode:1.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40webassemblyjs/helper-wasm-bytecode@1.8.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40webassemblyjs/helper-wasm-section@1.8.5?package-id=b501c9d2cf2475e7", + "name": "@webassemblyjs/helper-wasm-section", + "version": "1.8.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@webassemblyjs\\/helper-wasm-section:\\@webassemblyjs\\/helper-wasm-section:1.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40webassemblyjs/helper-wasm-section@1.8.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40webassemblyjs/ieee754@1.8.5?package-id=a05643ab885a8a4f", + "name": "@webassemblyjs/ieee754", + "version": "1.8.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@webassemblyjs\\/ieee754:\\@webassemblyjs\\/ieee754:1.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40webassemblyjs/ieee754@1.8.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40webassemblyjs/leb128@1.8.5?package-id=fe68dea2221ca38f", + "name": "@webassemblyjs/leb128", + "version": "1.8.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@webassemblyjs\\/leb128:\\@webassemblyjs\\/leb128:1.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40webassemblyjs/leb128@1.8.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40webassemblyjs/utf8@1.8.5?package-id=e1f86e86411e84b4", + "name": "@webassemblyjs/utf8", + "version": "1.8.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@webassemblyjs\\/utf8:\\@webassemblyjs\\/utf8:1.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40webassemblyjs/utf8@1.8.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40webassemblyjs/wasm-edit@1.8.5?package-id=af87c4e12b95a901", + "name": "@webassemblyjs/wasm-edit", + "version": "1.8.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@webassemblyjs\\/wasm-edit:\\@webassemblyjs\\/wasm-edit:1.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40webassemblyjs/wasm-edit@1.8.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40webassemblyjs/wasm-gen@1.8.5?package-id=7a3c763b9ca96a34", + "name": "@webassemblyjs/wasm-gen", + "version": "1.8.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@webassemblyjs\\/wasm-gen:\\@webassemblyjs\\/wasm-gen:1.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40webassemblyjs/wasm-gen@1.8.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40webassemblyjs/wasm-opt@1.8.5?package-id=1744b8e4ca7aecb3", + "name": "@webassemblyjs/wasm-opt", + "version": "1.8.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@webassemblyjs\\/wasm-opt:\\@webassemblyjs\\/wasm-opt:1.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40webassemblyjs/wasm-opt@1.8.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40webassemblyjs/wasm-parser@1.8.5?package-id=7b5e6997a437fad1", + "name": "@webassemblyjs/wasm-parser", + "version": "1.8.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@webassemblyjs\\/wasm-parser:\\@webassemblyjs\\/wasm-parser:1.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40webassemblyjs/wasm-parser@1.8.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40webassemblyjs/wast-parser@1.8.5?package-id=b0a8d1bc948af684", + "name": "@webassemblyjs/wast-parser", + "version": "1.8.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@webassemblyjs\\/wast-parser:\\@webassemblyjs\\/wast-parser:1.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40webassemblyjs/wast-parser@1.8.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40webassemblyjs/wast-printer@1.8.5?package-id=457ea3e170e8b376", + "name": "@webassemblyjs/wast-printer", + "version": "1.8.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@webassemblyjs\\/wast-printer:\\@webassemblyjs\\/wast-printer:1.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40webassemblyjs/wast-printer@1.8.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40xtuc/ieee754@1.2.0?package-id=90dd6251389c626e", + "name": "@xtuc/ieee754", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@xtuc\\/ieee754:\\@xtuc\\/ieee754:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40xtuc/ieee754@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40xtuc/long@4.2.2?package-id=35d9e1e74aa133a6", + "name": "@xtuc/long", + "version": "4.2.2", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:\\@xtuc\\/long:\\@xtuc\\/long:4.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40xtuc/long@4.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40yarnpkg/lockfile@1.1.0?package-id=a65496646e0a88ec", + "name": "@yarnpkg/lockfile", + "version": "1.1.0", + "cpe": "cpe:2.3:a:\\@yarnpkg\\/lockfile:\\@yarnpkg\\/lockfile:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40yarnpkg/lockfile@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40yarnpkg/lockfile@1.1.0?package-id=4a82189e7fefaf87", + "name": "@yarnpkg/lockfile", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@yarnpkg\\/lockfile:\\@yarnpkg\\/lockfile:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40yarnpkg/lockfile@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/JSONStream@1.3.5?package-id=98ba9b672d23e385", + "name": "JSONStream", + "version": "1.3.5", + "licenses": [ + { + "license": { + "name": "(MIT OR Apache-2.0)" + } + } + ], + "cpe": "cpe:2.3:a:JSONStream:JSONStream:1.3.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/JSONStream@1.3.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/abbrev@1.1.1?package-id=4dda3196e00a2f3f", + "name": "abbrev", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:abbrev:abbrev:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/abbrev@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/accepts@1.3.7?package-id=4f77c64c8b500c81", + "name": "accepts", + "version": "1.3.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:accepts:accepts:1.3.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/accepts@1.3.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/acorn@7.1.1?package-id=6497e500661e039c", + "name": "acorn", + "version": "7.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:acorn:acorn:7.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/acorn@7.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/acorn-loose@8.3.0?package-id=d64624fc9708283", + "name": "acorn-loose", + "version": "8.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:acorn-loose:acorn-loose:8.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/acorn-loose@8.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/acorn-walk@7.1.1?package-id=14b46b1befa7d735", + "name": "acorn-walk", + "version": "7.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:acorn-walk:acorn-walk:7.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/acorn-walk@7.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/adm-zip@0.4.14?package-id=c081844bb31abc85", + "name": "adm-zip", + "version": "0.4.14", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:adm-zip:adm-zip:0.4.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/adm-zip@0.4.14" + }, + { + "type": "library", + "bom-ref": "pkg:npm/after@0.8.2?package-id=787e2b0bd5693e71", + "name": "after", + "version": "0.8.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:after:after:0.8.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/after@0.8.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/agent-base@4.3.0?package-id=e0deb8aae8247e9", + "name": "agent-base", + "version": "4.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:agent-base:agent-base:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/agent-base@4.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/agentkeepalive@3.5.2?package-id=75fb84d54125e89a", + "name": "agentkeepalive", + "version": "3.5.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:agentkeepalive:agentkeepalive:3.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/agentkeepalive@3.5.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/aggregate-error@3.0.1?package-id=ff9029a78d810f6d", + "name": "aggregate-error", + "version": "3.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:aggregate-error:aggregate-error:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/aggregate-error@3.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/aggregate-error@3.1.0?package-id=8ebad62baf7518ca", + "name": "aggregate-error", + "version": "3.1.0", + "cpe": "cpe:2.3:a:aggregate-error:aggregate-error:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aggregate-error@3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ajv@6.10.2?package-id=938328ec589a13bd", + "name": "ajv", + "version": "6.10.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ajv:ajv:6.10.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ajv@6.10.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ajv-errors@1.0.1?package-id=f126b12d459993a5", + "name": "ajv-errors", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ajv-errors:ajv-errors:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ajv-errors@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ajv-keywords@3.4.1?package-id=42d3e5ab58cc8baf", + "name": "ajv-keywords", + "version": "3.4.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ajv-keywords:ajv-keywords:3.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ajv-keywords@3.4.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/alphanum-sort@1.0.2?package-id=dde89216f81ea21f", + "name": "alphanum-sort", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alphanum-sort:alphanum-sort:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/alphanum-sort@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/amdefine@1.0.1?package-id=8173edb4cab0b9e", + "name": "amdefine", + "version": "1.0.1", + "licenses": [ + { + "license": { + "name": "BSD-3-Clause OR MIT" + } + } + ], + "cpe": "cpe:2.3:a:amdefine:amdefine:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/amdefine@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/angular-cdp%40github:Gefix/angular-cdp%238776a59b9ec81343cf0a976052e3f4b8bc82e895?package-id=5893d32d0c0fd58d", + "name": "angular-cdp", + "version": "github:Gefix/angular-cdp#8776a59b9ec81343cf0a976052e3f4b8bc82e895", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:angular-cdp:angular-cdp:github\\:Gefix\\/angular-cdp\\#8776a59b9ec81343cf0a976052e3f4b8bc82e895:*:*:*:*:*:*:*", + "purl": "pkg:npm/angular-cdp@github:Gefix/angular-cdp%238776a59b9ec81343cf0a976052e3f4b8bc82e895" + }, + { + "type": "library", + "bom-ref": "pkg:npm/angular-fusioncharts@3.0.4?package-id=5bdfa74375e8415b", + "name": "angular-fusioncharts", + "version": "3.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:angular-fusioncharts:angular-fusioncharts:3.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/angular-fusioncharts@3.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/angular-gridster2@9.3.3?package-id=b866683be9a4f17c", + "name": "angular-gridster2", + "version": "9.3.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:angular-gridster2:angular-gridster2:9.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/angular-gridster2@9.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/angular-resizable-element@3.3.0?package-id=a947a1cb0c9b3205", + "name": "angular-resizable-element", + "version": "3.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:angular-resizable-element:angular-resizable-element:3.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/angular-resizable-element@3.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/angular-resize-event@2.1.0?package-id=5a4b7e9921cb83ad", + "name": "angular-resize-event", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:angular-resize-event:angular-resize-event:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/angular-resize-event@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-colors@3.2.4?package-id=edea7e2720756b6d", + "name": "ansi-colors", + "version": "3.2.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-colors:ansi-colors:3.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-colors@3.2.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-escapes@4.3.1?package-id=8de90a9db5569a8a", + "name": "ansi-escapes", + "version": "4.3.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-escapes:ansi-escapes:4.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-escapes@4.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-html@0.0.7?package-id=e5254bc3192cc2c7", + "name": "ansi-html", + "version": "0.0.7", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:ansi-html:ansi-html:0.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-html@0.0.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@2.1.1?package-id=4c3f33d730c3d141", + "name": "ansi-regex", + "version": "2.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@5.0.1?package-id=4083d0234e484d9c", + "name": "ansi-regex", + "version": "5.0.1", + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@5.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-styles@3.2.1?package-id=f071209e8844227d", + "name": "ansi-styles", + "version": "3.2.1", + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:3.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@3.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-styles@3.2.1?package-id=dd584a845b779ccd", + "name": "ansi-styles", + "version": "3.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:3.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@3.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/any-promise@1.3.0?package-id=f28a7c07043ce752", + "name": "any-promise", + "version": "1.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:any-promise:any-promise:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/any-promise@1.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/anymatch@3.1.1?package-id=e2bd4213fa7416ba", + "name": "anymatch", + "version": "3.1.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:anymatch:anymatch:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/anymatch@3.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/app-root-path@2.2.1?package-id=d11e3981172a392", + "name": "app-root-path", + "version": "2.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:app-root-path:app-root-path:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/app-root-path@2.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/append-transform@1.0.0?package-id=6a4ac832863276cc", + "name": "append-transform", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:append-transform:append-transform:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/append-transform@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/append-transform@2.0.0?package-id=7079a97c0aa712a3", + "name": "append-transform", + "version": "2.0.0", + "cpe": "cpe:2.3:a:append-transform:append-transform:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/append-transform@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/aproba@1.2.0?package-id=26312ccc3db233c7", + "name": "aproba", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:aproba:aproba:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aproba@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/archy@1.0.0?package-id=7a8ddc96c4302a00", + "name": "archy", + "version": "1.0.0", + "cpe": "cpe:2.3:a:archy:archy:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/archy@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/are-we-there-yet@1.1.5?package-id=11fae05134c64fa6", + "name": "are-we-there-yet", + "version": "1.1.5", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:are-we-there-yet:are-we-there-yet:1.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/are-we-there-yet@1.1.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/arg@4.1.3?package-id=ab47977515b621d7", + "name": "arg", + "version": "4.1.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:arg:arg:4.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/arg@4.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/argparse@1.0.10?package-id=8220f116e6648beb", + "name": "argparse", + "version": "1.0.10", + "cpe": "cpe:2.3:a:argparse:argparse:1.0.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/argparse@1.0.10" + }, + { + "type": "library", + "bom-ref": "pkg:npm/argparse@2.0.1?package-id=81734116745253e0", + "name": "argparse", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "Python-2.0" + } + } + ], + "cpe": "cpe:2.3:a:argparse:argparse:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/argparse@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/aria-query@3.0.0?package-id=1a836b764df86d00", + "name": "aria-query", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:aria-query:aria-query:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aria-query@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/arr-diff@4.0.0?package-id=78b26b18eb1635a7", + "name": "arr-diff", + "version": "4.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:arr-diff:arr-diff:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/arr-diff@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/arr-flatten@1.1.0?package-id=88395b85061ad198", + "name": "arr-flatten", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:arr-flatten:arr-flatten:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/arr-flatten@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/arr-union@3.1.0?package-id=8c2279d86846bdd8", + "name": "arr-union", + "version": "3.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:arr-union:arr-union:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/arr-union@3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/array-find-index@1.0.2?package-id=5189f5348b9a726c", + "name": "array-find-index", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:array-find-index:array-find-index:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/array-find-index@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/array-flatten@2.1.2?package-id=920330be94b99f7f", + "name": "array-flatten", + "version": "2.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:array-flatten:array-flatten:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/array-flatten@2.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/array-union@1.0.2?package-id=4559fd093daca1af", + "name": "array-union", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:array-union:array-union:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/array-union@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/array-uniq@1.0.3?package-id=4b36d749d0008df2", + "name": "array-uniq", + "version": "1.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:array-uniq:array-uniq:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/array-uniq@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/array-unique@0.3.2?package-id=8553b80422783880", + "name": "array-unique", + "version": "0.3.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:array-unique:array-unique:0.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/array-unique@0.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/arraybuffer.slice@0.0.7?package-id=52673ec6562cb836", + "name": "arraybuffer.slice", + "version": "0.0.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:arraybuffer.slice:arraybuffer.slice:0.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/arraybuffer.slice@0.0.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/arrify@1.0.1?package-id=d3bd2823b5a514bf", + "name": "arrify", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:arrify:arrify:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/arrify@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/asap@2.0.6?package-id=2345b3eca7fb914c", + "name": "asap", + "version": "2.0.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:asap:asap:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/asap@2.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/asn1@0.2.4?package-id=c94afbf24b23465d", + "name": "asn1", + "version": "0.2.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:asn1:asn1:0.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/asn1@0.2.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/asn1.js@4.10.1?package-id=58b36969d7e7b65a", + "name": "asn1.js", + "version": "4.10.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:asn1.js:asn1.js:4.10.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/asn1.js@4.10.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/assert@1.5.0?package-id=942fc878822354e6", + "name": "assert", + "version": "1.5.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:assert:assert:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/assert@1.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/assert-plus@1.0.0?package-id=5390131abace4c0", + "name": "assert-plus", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:assert-plus:assert-plus:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/assert-plus@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/assign-symbols@1.0.0?package-id=95b61e83770f8f1a", + "name": "assign-symbols", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:assign-symbols:assign-symbols:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/assign-symbols@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ast-types@0.13.3?package-id=c9be805e2b791814", + "name": "ast-types", + "version": "0.13.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ast-types:ast-types:0.13.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/ast-types@0.13.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ast-types-flow@0.0.7?package-id=129890ff62c8555c", + "name": "ast-types-flow", + "version": "0.0.7", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ast-types-flow:ast-types-flow:0.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/ast-types-flow@0.0.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/async@2.6.3?package-id=2404c94cc2ed3c23", + "name": "async", + "version": "2.6.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:async:async:2.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/async@2.6.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/async-each@1.0.3?package-id=53464a83d9092baa", + "name": "async-each", + "version": "1.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:async-each:async-each:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/async-each@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/async-foreach@0.1.3?package-id=1ee09f4c46b450fa", + "name": "async-foreach", + "version": "0.1.3", + "cpe": "cpe:2.3:a:async-foreach:async-foreach:0.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/async-foreach@0.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/async-limiter@1.0.1?package-id=37f39b275bd1ee5", + "name": "async-limiter", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:async-limiter:async-limiter:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/async-limiter@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/asynckit@0.4.0?package-id=4cfcce01cadf2d8d", + "name": "asynckit", + "version": "0.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:asynckit:asynckit:0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/asynckit@0.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/atob@2.1.2?package-id=49889b9737f90938", + "name": "atob", + "version": "2.1.2", + "licenses": [ + { + "license": { + "name": "(MIT OR Apache-2.0)" + } + } + ], + "cpe": "cpe:2.3:a:atob:atob:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/atob@2.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/autoprefixer@9.7.4?package-id=94fae67881307ea8", + "name": "autoprefixer", + "version": "9.7.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:autoprefixer:autoprefixer:9.7.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/autoprefixer@9.7.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/aws-sign2@0.7.0?package-id=f85b64dcabe1f3b7", + "name": "aws-sign2", + "version": "0.7.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:aws-sign2:aws-sign2:0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aws-sign2@0.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/aws4@1.9.1?package-id=c97e0f1abd082974", + "name": "aws4", + "version": "1.9.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:aws4:aws4:1.9.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/aws4@1.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/axobject-query@2.0.2?package-id=8d08c05f7a95c74e", + "name": "axobject-query", + "version": "2.0.2", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:axobject-query:axobject-query:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/axobject-query@2.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/babel-loader@8.0.6?package-id=29fc960e6dadef10", + "name": "babel-loader", + "version": "8.0.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:babel-loader:babel-loader:8.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/babel-loader@8.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/babel-plugin-dynamic-import-node@2.3.3?package-id=6885171457c66541", + "name": "babel-plugin-dynamic-import-node", + "version": "2.3.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:babel-plugin-dynamic-import-node:babel-plugin-dynamic-import-node:2.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/babel-plugin-dynamic-import-node@2.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/backo2@1.0.2?package-id=781332b0421ed054", + "name": "backo2", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:backo2:backo2:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/backo2@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/balanced-match@1.0.0?package-id=44cdae6d6aae2b61", + "name": "balanced-match", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/balanced-match@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/balanced-match@1.0.2?package-id=f3d52b8c6e34630e", + "name": "balanced-match", + "version": "1.0.2", + "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/balanced-match@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/base@0.11.2?package-id=8f952781effa3d46", + "name": "base", + "version": "0.11.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:base:base:0.11.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/base@0.11.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/base64-arraybuffer@0.1.5?package-id=49c0a9a6d1fa6a8d", + "name": "base64-arraybuffer", + "version": "0.1.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:base64-arraybuffer:base64-arraybuffer:0.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/base64-arraybuffer@0.1.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/base64-js@1.3.1?package-id=3b4bc2b19c2e72d8", + "name": "base64-js", + "version": "1.3.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:base64-js:base64-js:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/base64-js@1.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/base64id@1.0.0?package-id=c850b19cf8498f6e", + "name": "base64id", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:base64id:base64id:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/base64id@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/batch@0.6.1?package-id=7dc4ebe578aa16c1", + "name": "batch", + "version": "0.6.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:batch:batch:0.6.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/batch@0.6.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2?package-id=935adf4faa5810fe", + "name": "bcrypt-pbkdf", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:bcrypt-pbkdf:bcrypt-pbkdf:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/bcrypt-pbkdf@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/better-assert@1.0.2?package-id=128a19e7b2d338cb", + "name": "better-assert", + "version": "1.0.2", + "cpe": "cpe:2.3:a:better-assert:better-assert:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/better-assert@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/bfj@6.1.2?package-id=6e69cc00e96d3302", + "name": "bfj", + "version": "6.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bfj:bfj:6.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/bfj@6.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/big.js@5.2.2?package-id=4844c320524e3188", + "name": "big.js", + "version": "5.2.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:big.js:big.js:5.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/big.js@5.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/binary-extensions@2.0.0?package-id=d19134edb59aa4f1", + "name": "binary-extensions", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:binary-extensions:binary-extensions:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/binary-extensions@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/bindings@1.5.0?package-id=40b4748b387a8b1b", + "name": "bindings", + "version": "1.5.0", + "cpe": "cpe:2.3:a:bindings:bindings:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/bindings@1.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/blob@0.0.5?package-id=cc51854807e9a24b", + "name": "blob", + "version": "0.0.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:blob:blob:0.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/blob@0.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/block-stream@0.0.9?package-id=71a5010090f8be4a", + "name": "block-stream", + "version": "0.0.9", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:block-stream:block-stream:0.0.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/block-stream@0.0.9" + }, + { + "type": "library", + "bom-ref": "pkg:npm/blocking-proxy@1.0.1?package-id=d80488fa490e5db8", + "name": "blocking-proxy", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:blocking-proxy:blocking-proxy:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/blocking-proxy@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/bluebird@3.7.2?package-id=b78a7f922dc9e95d", + "name": "bluebird", + "version": "3.7.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bluebird:bluebird:3.7.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/bluebird@3.7.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/bn.js@5.1.1?package-id=f6dbcceba7ba15a2", + "name": "bn.js", + "version": "5.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bn.js:bn.js:5.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/bn.js@5.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/body-parser@1.19.0?package-id=9574f2f81e9b5edd", + "name": "body-parser", + "version": "1.19.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:body-parser:body-parser:1.19.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/body-parser@1.19.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/bonjour@3.5.0?package-id=92506ef6dbbf0ec", + "name": "bonjour", + "version": "3.5.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bonjour:bonjour:3.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/bonjour@3.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/boolbase@1.0.0?package-id=b37d9e93d5eaa107", + "name": "boolbase", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:boolbase:boolbase:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/boolbase@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/bootstrap@4.4.1?package-id=58fe9b6acbd3c737", + "name": "bootstrap", + "version": "4.4.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bootstrap:bootstrap:4.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/bootstrap@4.4.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=37e08395667c67e0", + "name": "brace-expansion", + "version": "1.1.11", + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11" + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=5a34efcf67357245", + "name": "brace-expansion", + "version": "1.1.11", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11" + }, + { + "type": "library", + "bom-ref": "pkg:npm/braces@3.0.2?package-id=4074d65cb7604a13", + "name": "braces", + "version": "3.0.2", + "cpe": "cpe:2.3:a:braces:braces:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/braces@3.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/braces@3.0.2?package-id=b18e4006b7025b7a", + "name": "braces", + "version": "3.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:braces:braces:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/braces@3.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/brorand@1.1.0?package-id=523881e49561cc0c", + "name": "brorand", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brorand:brorand:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/brorand@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/browserify-aes@1.2.0?package-id=7aab4f800bf40bb", + "name": "browserify-aes", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:browserify-aes:browserify-aes:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/browserify-aes@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/browserify-cipher@1.0.1?package-id=f2f4bd1da62abcd8", + "name": "browserify-cipher", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:browserify-cipher:browserify-cipher:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/browserify-cipher@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/browserify-des@1.0.2?package-id=7c5bc6027a946e81", + "name": "browserify-des", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:browserify-des:browserify-des:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/browserify-des@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/browserify-rsa@4.0.1?package-id=8f7da4c1e9d73649", + "name": "browserify-rsa", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:browserify-rsa:browserify-rsa:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/browserify-rsa@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/browserify-sign@4.1.0?package-id=46d7ea0d164a6c7d", + "name": "browserify-sign", + "version": "4.1.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:browserify-sign:browserify-sign:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/browserify-sign@4.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/browserify-zlib@0.2.0?package-id=ef6baa34f1e38080", + "name": "browserify-zlib", + "version": "0.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:browserify-zlib:browserify-zlib:0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/browserify-zlib@0.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/browserslist@4.12.0?package-id=8d0fe9ed789317ec", + "name": "browserslist", + "version": "4.12.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:browserslist:browserslist:4.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/browserslist@4.12.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/browserslist@4.18.1?package-id=df1ca7e35f23f435", + "name": "browserslist", + "version": "4.18.1", + "cpe": "cpe:2.3:a:browserslist:browserslist:4.18.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/browserslist@4.18.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/browserstack@1.5.3?package-id=9277d3c0a34e71ae", + "name": "browserstack", + "version": "1.5.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:browserstack:browserstack:1.5.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/browserstack@1.5.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer@4.9.2?package-id=56adac4b18102679", + "name": "buffer", + "version": "4.9.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer:buffer:4.9.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer@4.9.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-from@1.1.1?package-id=dbee95bc31744fad", + "name": "buffer-from", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-from:buffer-from:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-from@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-indexof@1.1.1?package-id=1abea3f51e1570d2", + "name": "buffer-indexof", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-indexof:buffer-indexof:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-indexof@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-xor@1.0.3?package-id=ef30b1daaf4fab86", + "name": "buffer-xor", + "version": "1.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-xor:buffer-xor:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-xor@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/builtin-modules@1.1.1?package-id=31064f37063f81ee", + "name": "builtin-modules", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:builtin-modules:builtin-modules:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/builtin-modules@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/builtin-status-codes@3.0.0?package-id=b2843420d446906f", + "name": "builtin-status-codes", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:builtin-status-codes:builtin-status-codes:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/builtin-status-codes@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/builtins@1.0.3?package-id=c10c626541113433", + "name": "builtins", + "version": "1.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:builtins:builtins:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/builtins@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/bytes@3.0.0?package-id=25655770bea399b3", + "name": "bytes", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bytes:bytes:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/bytes@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cacache@15.0.0?package-id=3bb376be6c6d3685", + "name": "cacache", + "version": "15.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cacache:cacache:15.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cacache@15.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cache-base@1.0.1?package-id=45a70e1316c1db9c", + "name": "cache-base", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cache-base:cache-base:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/cache-base@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/caching-transform@4.0.0?package-id=3dde9b4daece0148", + "name": "caching-transform", + "version": "4.0.0", + "cpe": "cpe:2.3:a:caching-transform:caching-transform:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/caching-transform@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/call-me-maybe@1.0.1?package-id=62147265eb3a4bed", + "name": "call-me-maybe", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:call-me-maybe:call-me-maybe:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/call-me-maybe@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/caller-callsite@2.0.0?package-id=268c4e17d7a884d5", + "name": "caller-callsite", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:caller-callsite:caller-callsite:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/caller-callsite@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/caller-path@2.0.0?package-id=4f6dc334a59f16ff", + "name": "caller-path", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:caller-path:caller-path:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/caller-path@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/callsite@1.0.0?package-id=d87b691258b9ad54", + "name": "callsite", + "version": "1.0.0", + "cpe": "cpe:2.3:a:callsite:callsite:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/callsite@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/callsites@2.0.0?package-id=45edd85f19fbc078", + "name": "callsites", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:callsites:callsites:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/callsites@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/camelcase@5.3.1?package-id=64418a45e773aa3c", + "name": "camelcase", + "version": "5.3.1", + "cpe": "cpe:2.3:a:camelcase:camelcase:5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/camelcase@5.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/camelcase@5.3.1?package-id=3c63d98a548b1002", + "name": "camelcase", + "version": "5.3.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:camelcase:camelcase:5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/camelcase@5.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/camelcase-keys@2.1.0?package-id=aa0734a45a296254", + "name": "camelcase-keys", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:camelcase-keys:camelcase-keys:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/camelcase-keys@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/can-use-dom@0.1.0?package-id=5731bd9daec3136e", + "name": "can-use-dom", + "version": "0.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:can-use-dom:can-use-dom:0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/can-use-dom@0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/caniuse-api@3.0.0?package-id=3a6b5418ba85bf55", + "name": "caniuse-api", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:caniuse-api:caniuse-api:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/caniuse-api@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/caniuse-lite@1.0.30001055?package-id=611d15b1524279d7", + "name": "caniuse-lite", + "version": "1.0.30001055", + "licenses": [ + { + "license": { + "id": "CC-BY-4.0" + } + } + ], + "cpe": "cpe:2.3:a:caniuse-lite:caniuse-lite:1.0.30001055:*:*:*:*:*:*:*", + "purl": "pkg:npm/caniuse-lite@1.0.30001055" + }, + { + "type": "library", + "bom-ref": "pkg:npm/caniuse-lite@1.0.30001285?package-id=56f3c39cc6419cf5", + "name": "caniuse-lite", + "version": "1.0.30001285", + "cpe": "cpe:2.3:a:caniuse-lite:caniuse-lite:1.0.30001285:*:*:*:*:*:*:*", + "purl": "pkg:npm/caniuse-lite@1.0.30001285" + }, + { + "type": "library", + "bom-ref": "pkg:npm/canonical-path@1.0.0?package-id=7c0b085ae0502b98", + "name": "canonical-path", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:canonical-path:canonical-path:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/canonical-path@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/caseless@0.12.0?package-id=810c24f06aebfc6a", + "name": "caseless", + "version": "0.12.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:caseless:caseless:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/caseless@0.12.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/chalk@2.4.2?package-id=89e1b1cd85b232ec", + "name": "chalk", + "version": "2.4.2", + "cpe": "cpe:2.3:a:chalk:chalk:2.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/chalk@2.4.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/chalk@2.4.2?package-id=91533e2075528b50", + "name": "chalk", + "version": "2.4.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chalk:chalk:2.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/chalk@2.4.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/chardet@0.7.0?package-id=e22e7a2265bb041e", + "name": "chardet", + "version": "0.7.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chardet:chardet:0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/chardet@0.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/charenc@0.0.2?package-id=f547358339ca8c04", + "name": "charenc", + "version": "0.0.2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:charenc:charenc:0.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/charenc@0.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/check-types@8.0.3?package-id=8161d4b8418b95da", + "name": "check-types", + "version": "8.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:check-types:check-types:8.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/check-types@8.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/chokidar@3.3.1?package-id=8db25f2f4984f00c", + "name": "chokidar", + "version": "3.3.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chokidar:chokidar:3.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/chokidar@3.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/chownr@1.1.4?package-id=8b60213f0177e0", + "name": "chownr", + "version": "1.1.4", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:chownr:chownr:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/chownr@1.1.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/chrome-trace-event@1.0.2?package-id=4136cd1420862470", + "name": "chrome-trace-event", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chrome-trace-event:chrome-trace-event:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/chrome-trace-event@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ci-info@2.0.0?package-id=bf8ac6d1b254b397", + "name": "ci-info", + "version": "2.0.0", + "cpe": "cpe:2.3:a:ci-info:ci-info:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ci-info@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ci-info@2.0.0?package-id=4b0fb1e5aa5f5b2", + "name": "ci-info", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ci-info:ci-info:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ci-info@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cipher-base@1.0.4?package-id=2e12432545be02d9", + "name": "cipher-base", + "version": "1.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cipher-base:cipher-base:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/cipher-base@1.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/circular-dependency-plugin@5.2.0?package-id=d90c5a2da527318c", + "name": "circular-dependency-plugin", + "version": "5.2.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:circular-dependency-plugin:circular-dependency-plugin:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/circular-dependency-plugin@5.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/circular-json@0.3.3?package-id=9a46aa10e528d6b9", + "name": "circular-json", + "version": "0.3.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:circular-json:circular-json:0.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/circular-json@0.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/class-utils@0.3.6?package-id=b176fd4426480b1a", + "name": "class-utils", + "version": "0.3.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:class-utils:class-utils:0.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/class-utils@0.3.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/clean-stack@2.2.0?package-id=5cb897b6a342e151", + "name": "clean-stack", + "version": "2.2.0", + "cpe": "cpe:2.3:a:clean-stack:clean-stack:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/clean-stack@2.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/clean-stack@2.2.0?package-id=7144d645960bf80b", + "name": "clean-stack", + "version": "2.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clean-stack:clean-stack:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/clean-stack@2.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-color@1.4.0?package-id=ded11711f4a82246", + "name": "cli-color", + "version": "1.4.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cli-color:cli-color:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-color@1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-cursor@3.1.0?package-id=5e58859331dad80e", + "name": "cli-cursor", + "version": "3.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cli-cursor:cli-cursor:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-cursor@3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-spinners@2.3.0?package-id=769cc7f0f537a3b4", + "name": "cli-spinners", + "version": "2.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cli-spinners:cli-spinners:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-spinners@2.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-width@2.2.1?package-id=235f7f40ecd4a093", + "name": "cli-width", + "version": "2.2.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cli-width:cli-width:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-width@2.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cliui@4.1.0?package-id=55298089117992b4", + "name": "cliui", + "version": "4.1.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cliui:cliui:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cliui@4.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cliui@6.0.0?package-id=d3c09406207d0198", + "name": "cliui", + "version": "6.0.0", + "cpe": "cpe:2.3:a:cliui:cliui:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cliui@6.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/clone@2.1.2?package-id=4b667ae9156999fe", + "name": "clone", + "version": "2.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clone:clone:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/clone@2.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/clone-deep@4.0.1?package-id=57302f4a707255fa", + "name": "clone-deep", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clone-deep:clone-deep:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/clone-deep@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/coa@2.0.2?package-id=620bc3849a0ac193", + "name": "coa", + "version": "2.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:coa:coa:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/coa@2.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/code-point-at@1.1.0?package-id=ab8b6eab1355b484", + "name": "code-point-at", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:code-point-at:code-point-at:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/code-point-at@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/codelyzer@5.2.1?package-id=dc45ed26cf7939e4", + "name": "codelyzer", + "version": "5.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:codelyzer:codelyzer:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/codelyzer@5.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/collection-visit@1.0.0?package-id=f354930f2a512d8f", + "name": "collection-visit", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:collection-visit:collection-visit:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/collection-visit@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/color@3.1.2?package-id=acab57ea26363867", + "name": "color", + "version": "3.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color:color:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/color@3.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-convert@1.9.3?package-id=30cf2b4a6155954d", + "name": "color-convert", + "version": "1.9.3", + "cpe": "cpe:2.3:a:color-convert:color-convert:1.9.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@1.9.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-convert@1.9.3?package-id=8abd6aeba19b0077", + "name": "color-convert", + "version": "1.9.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:1.9.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@1.9.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-name@1.1.3?package-id=e1848df3a480a07f", + "name": "color-name", + "version": "1.1.3", + "cpe": "cpe:2.3:a:color-name:color-name:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-name@1.1.3?package-id=36c508d3e88fcfb9", + "name": "color-name", + "version": "1.1.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-string@1.5.3?package-id=f1bffe86f07267f6", + "name": "color-string", + "version": "1.5.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-string:color-string:1.5.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-string@1.5.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/colors@1.1.2?package-id=27061b1e60d90c86", + "name": "colors", + "version": "1.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:colors:colors:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/colors@1.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/combined-stream@1.0.8?package-id=4f057a90b0a5913d", + "name": "combined-stream", + "version": "1.0.8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:combined-stream:combined-stream:1.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/combined-stream@1.0.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/commander@2.20.3?package-id=c0490df2a859f33d", + "name": "commander", + "version": "2.20.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:commander:commander:2.20.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/commander@2.20.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/commondir@1.0.1?package-id=816b0223f83c2662", + "name": "commondir", + "version": "1.0.1", + "cpe": "cpe:2.3:a:commondir:commondir:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/commondir@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/commondir@1.0.1?package-id=7c31acee47c7da35", + "name": "commondir", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:commondir:commondir:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/commondir@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/compare-versions@3.6.0?package-id=7669949217bc386b", + "name": "compare-versions", + "version": "3.6.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:compare-versions:compare-versions:3.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/compare-versions@3.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/component-bind@1.0.0?package-id=a60bb99a503c2d00", + "name": "component-bind", + "version": "1.0.0", + "cpe": "cpe:2.3:a:component-bind:component-bind:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/component-bind@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/component-emitter@1.3.0?package-id=7b1497dc9da9601f", + "name": "component-emitter", + "version": "1.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:component-emitter:component-emitter:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/component-emitter@1.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/component-inherit@0.0.3?package-id=c83660bba6b0e35a", + "name": "component-inherit", + "version": "0.0.3", + "cpe": "cpe:2.3:a:component-inherit:component-inherit:0.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/component-inherit@0.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/compressible@2.0.18?package-id=caa8692952611d7c", + "name": "compressible", + "version": "2.0.18", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:compressible:compressible:2.0.18:*:*:*:*:*:*:*", + "purl": "pkg:npm/compressible@2.0.18" + }, + { + "type": "library", + "bom-ref": "pkg:npm/compression@1.7.4?package-id=f57461b79ef6469", + "name": "compression", + "version": "1.7.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:compression:compression:1.7.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/compression@1.7.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=f1b52a2042917070", + "name": "concat-map", + "version": "0.0.1", + "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-map@0.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=f3eceba3e6995ea8", + "name": "concat-map", + "version": "0.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-map@0.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-stream@1.6.2?package-id=d4a4c77d67e3c278", + "name": "concat-stream", + "version": "1.6.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-stream:concat-stream:1.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-stream@1.6.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/connect@3.7.0?package-id=d688c922a841a699", + "name": "connect", + "version": "3.7.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:connect:connect:3.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/connect@3.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/connect-history-api-fallback@1.6.0?package-id=d7e7db31f71fae02", + "name": "connect-history-api-fallback", + "version": "1.6.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:connect-history-api-fallback:connect-history-api-fallback:1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/connect-history-api-fallback@1.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/console-browserify@1.2.0?package-id=532d52f6d8cb48ca", + "name": "console-browserify", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:console-browserify:console-browserify:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/console-browserify@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/console-control-strings@1.1.0?package-id=e4ee3706312c50a2", + "name": "console-control-strings", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:console-control-strings:console-control-strings:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/console-control-strings@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/constants-browserify@1.0.0?package-id=edb9e62a33097618", + "name": "constants-browserify", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:constants-browserify:constants-browserify:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/constants-browserify@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/content-disposition@0.5.3?package-id=4a154cdcf7cd9b04", + "name": "content-disposition", + "version": "0.5.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:content-disposition:content-disposition:0.5.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/content-disposition@0.5.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/content-type@1.0.4?package-id=3e3158d7ba5f8373", + "name": "content-type", + "version": "1.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:content-type:content-type:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/content-type@1.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/convert-source-map@1.7.0?package-id=94f7b0511bd71d81", + "name": "convert-source-map", + "version": "1.7.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:convert-source-map:convert-source-map:1.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/convert-source-map@1.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/convert-source-map@1.8.0?package-id=6cfef4cc1e75765d", + "name": "convert-source-map", + "version": "1.8.0", + "cpe": "cpe:2.3:a:convert-source-map:convert-source-map:1.8.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/convert-source-map@1.8.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cookie@0.4.0?package-id=846d28d1845728ce", + "name": "cookie", + "version": "0.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie:cookie:0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie@0.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cookie-signature@1.0.6?package-id=d495cd881cb3ef03", + "name": "cookie-signature", + "version": "1.0.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie-signature:cookie-signature:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie-signature@1.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/copy-concurrently@1.0.5?package-id=110b50014bbf7c92", + "name": "copy-concurrently", + "version": "1.0.5", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:copy-concurrently:copy-concurrently:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/copy-concurrently@1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/copy-descriptor@0.1.1?package-id=3670e211c7526458", + "name": "copy-descriptor", + "version": "0.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:copy-descriptor:copy-descriptor:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/copy-descriptor@0.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/copy-webpack-plugin@5.1.1?package-id=20a05d97aa06c648", + "name": "copy-webpack-plugin", + "version": "5.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:copy-webpack-plugin:copy-webpack-plugin:5.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/copy-webpack-plugin@5.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/core-js@3.6.4?package-id=cf79aa4bc063539", + "name": "core-js", + "version": "3.6.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:core-js:core-js:3.6.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/core-js@3.6.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/core-js-compat@3.6.5?package-id=4b744c0f8168f279", + "name": "core-js-compat", + "version": "3.6.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:core-js-compat:core-js-compat:3.6.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/core-js-compat@3.6.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/core-util-is@1.0.2?package-id=fec8addd97f2c2cb", + "name": "core-util-is", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:core-util-is:core-util-is:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/core-util-is@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cosmiconfig@5.2.1?package-id=f1527290c145a017", + "name": "cosmiconfig", + "version": "5.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cosmiconfig:cosmiconfig:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/cosmiconfig@5.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/create-ecdh@4.0.3?package-id=a9f5ea69374b87", + "name": "create-ecdh", + "version": "4.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:create-ecdh:create-ecdh:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/create-ecdh@4.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/create-hash@1.2.0?package-id=5e8b0d75b591418c", + "name": "create-hash", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:create-hash:create-hash:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/create-hash@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/create-hmac@1.1.7?package-id=7616d38c185d49b1", + "name": "create-hmac", + "version": "1.1.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:create-hmac:create-hmac:1.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/create-hmac@1.1.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cross-spawn@6.0.5?package-id=fdb0d03f4cf3e137", + "name": "cross-spawn", + "version": "6.0.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cross-spawn:cross-spawn:6.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/cross-spawn@6.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cross-spawn@7.0.3?package-id=674d42754b5110d5", + "name": "cross-spawn", + "version": "7.0.3", + "cpe": "cpe:2.3:a:cross-spawn:cross-spawn:7.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/cross-spawn@7.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/crypt@0.0.2?package-id=a6a288ec635fa3ed", + "name": "crypt", + "version": "0.0.2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:crypt:crypt:0.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/crypt@0.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/crypto-browserify@3.12.0?package-id=af91b20de638212b", + "name": "crypto-browserify", + "version": "3.12.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crypto-browserify:crypto-browserify:3.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/crypto-browserify@3.12.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/css@2.2.4?package-id=4c03350ae514a59c", + "name": "css", + "version": "2.2.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:css:css:2.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/css@2.2.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/css-color-names@0.0.4?package-id=4cd56214e48c9b6a", + "name": "css-color-names", + "version": "0.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:css-color-names:css-color-names:0.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/css-color-names@0.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/css-declaration-sorter@4.0.1?package-id=59352d9a807ac137", + "name": "css-declaration-sorter", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:css-declaration-sorter:css-declaration-sorter:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/css-declaration-sorter@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/css-element-queries@1.2.3?package-id=fb23e05eccf328f9", + "name": "css-element-queries", + "version": "1.2.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:css-element-queries:css-element-queries:1.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/css-element-queries@1.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/css-loader@3.5.1?package-id=f20acf9477799bcd", + "name": "css-loader", + "version": "3.5.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:css-loader:css-loader:3.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/css-loader@3.5.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/css-parse@2.0.0?package-id=bf81cf827c2318ad", + "name": "css-parse", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:css-parse:css-parse:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/css-parse@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/css-select@2.1.0?package-id=cd663b0f2aa105e0", + "name": "css-select", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:css-select:css-select:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/css-select@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/css-select-base-adapter@0.1.1?package-id=34effe5a909bce28", + "name": "css-select-base-adapter", + "version": "0.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:css-select-base-adapter:css-select-base-adapter:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/css-select-base-adapter@0.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/css-selector-tokenizer@0.7.2?package-id=55657b36ca9122b5", + "name": "css-selector-tokenizer", + "version": "0.7.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:css-selector-tokenizer:css-selector-tokenizer:0.7.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/css-selector-tokenizer@0.7.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/css-tree@1.0.0-alpha.37?package-id=70617fa4e3e6e5f3", + "name": "css-tree", + "version": "1.0.0-alpha.37", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:css-tree:css-tree:1.0.0-alpha.37:*:*:*:*:*:*:*", + "purl": "pkg:npm/css-tree@1.0.0-alpha.37" + }, + { + "type": "library", + "bom-ref": "pkg:npm/css-what@3.2.1?package-id=dff3098a88407f33", + "name": "css-what", + "version": "3.2.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:css-what:css-what:3.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/css-what@3.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cssauron@1.4.0?package-id=6ff6719f92ab448d", + "name": "cssauron", + "version": "1.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cssauron:cssauron:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cssauron@1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cssesc@3.0.0?package-id=b76dcc9aebf0c0d5", + "name": "cssesc", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cssesc:cssesc:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cssesc@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cssnano@4.1.10?package-id=caaf6969fb878f7c", + "name": "cssnano", + "version": "4.1.10", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cssnano:cssnano:4.1.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/cssnano@4.1.10" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cssnano-preset-default@4.0.7?package-id=be907e42a89f3447", + "name": "cssnano-preset-default", + "version": "4.0.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cssnano-preset-default:cssnano-preset-default:4.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/cssnano-preset-default@4.0.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cssnano-util-get-arguments@4.0.0?package-id=8fa35af14f3decd6", + "name": "cssnano-util-get-arguments", + "version": "4.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cssnano-util-get-arguments:cssnano-util-get-arguments:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cssnano-util-get-arguments@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cssnano-util-get-match@4.0.0?package-id=94a2880738865b06", + "name": "cssnano-util-get-match", + "version": "4.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cssnano-util-get-match:cssnano-util-get-match:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cssnano-util-get-match@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cssnano-util-raw-cache@4.0.1?package-id=5f36e95f93f994ec", + "name": "cssnano-util-raw-cache", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cssnano-util-raw-cache:cssnano-util-raw-cache:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/cssnano-util-raw-cache@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cssnano-util-same-parent@4.0.1?package-id=5efd4653c64ff25c", + "name": "cssnano-util-same-parent", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cssnano-util-same-parent:cssnano-util-same-parent:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/cssnano-util-same-parent@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/csso@4.0.3?package-id=febf0756ad53b944", + "name": "csso", + "version": "4.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:csso:csso:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/csso@4.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/currently-unhandled@0.4.1?package-id=6d59e825ee212ea", + "name": "currently-unhandled", + "version": "0.4.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:currently-unhandled:currently-unhandled:0.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/currently-unhandled@0.4.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/custom-event@1.0.1?package-id=b717896396fb7012", + "name": "custom-event", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:custom-event:custom-event:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/custom-event@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/cyclist@1.0.1?package-id=b0a95cc6aff92d21", + "name": "cyclist", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cyclist:cyclist:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/cyclist@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/d@1.0.1?package-id=855e26b4f7bf1b8f", + "name": "d", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:d:d:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/d@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/d3-path@1.0.9?package-id=6b08e966eddca93c", + "name": "d3-path", + "version": "1.0.9", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:d3-path:d3-path:1.0.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/d3-path@1.0.9" + }, + { + "type": "library", + "bom-ref": "pkg:npm/d3-shape@1.3.7?package-id=afc0f695a91a4aaf", + "name": "d3-shape", + "version": "1.3.7", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:d3-shape:d3-shape:1.3.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/d3-shape@1.3.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/dag-map@1.0.2?package-id=6b3923fe0906da31", + "name": "dag-map", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dag-map:dag-map:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/dag-map@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/damerau-levenshtein@1.0.6?package-id=61ac5a4d259bb92f", + "name": "damerau-levenshtein", + "version": "1.0.6", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:damerau-levenshtein:damerau-levenshtein:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/damerau-levenshtein@1.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/dashdash@1.14.1?package-id=1f0eeaff816ac0ca", + "name": "dashdash", + "version": "1.14.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dashdash:dashdash:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/dashdash@1.14.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/date-format@2.1.0?package-id=3d142a66a7a87fc6", + "name": "date-format", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:date-format:date-format:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/date-format@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@4.1.1?package-id=49f5d7f2b31ffc47", + "name": "debug", + "version": "4.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debug:debug:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@4.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@4.3.3?package-id=45a3f504c622be2b", + "name": "debug", + "version": "4.3.3", + "cpe": "cpe:2.3:a:debug:debug:4.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@4.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/debuglog@1.0.1?package-id=448a1fd2691c167", + "name": "debuglog", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debuglog:debuglog:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/debuglog@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/decamelize@1.2.0?package-id=2bda384177a425a1", + "name": "decamelize", + "version": "1.2.0", + "cpe": "cpe:2.3:a:decamelize:decamelize:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/decamelize@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/decamelize@1.2.0?package-id=1eaa9b894a49a0df", + "name": "decamelize", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decamelize:decamelize:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/decamelize@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/decode-uri-component@0.2.0?package-id=bb3b2583ac1a0d4", + "name": "decode-uri-component", + "version": "0.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decode-uri-component:decode-uri-component:0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/decode-uri-component@0.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/deep-diff@1.0.2?package-id=1cb29cd8c59af1ca", + "name": "deep-diff", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:deep-diff:deep-diff:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/deep-diff@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/deep-equal@1.1.1?package-id=56f0c403ce52752d", + "name": "deep-equal", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:deep-equal:deep-equal:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/deep-equal@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/default-gateway@4.2.0?package-id=c7c731640fb2aec0", + "name": "default-gateway", + "version": "4.2.0", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:default-gateway:default-gateway:4.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/default-gateway@4.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/default-require-extensions@2.0.0?package-id=623c65b6f7d0f65f", + "name": "default-require-extensions", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:default-require-extensions:default-require-extensions:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/default-require-extensions@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/default-require-extensions@3.0.0?package-id=ebdf1e3d3873440c", + "name": "default-require-extensions", + "version": "3.0.0", + "cpe": "cpe:2.3:a:default-require-extensions:default-require-extensions:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/default-require-extensions@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/defaults@1.0.3?package-id=58e23781ef16471b", + "name": "defaults", + "version": "1.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:defaults:defaults:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/defaults@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/define-properties@1.1.3?package-id=f046d30f6116e85d", + "name": "define-properties", + "version": "1.1.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:define-properties:define-properties:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/define-properties@1.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/define-property@2.0.2?package-id=15b2391ac9a56b8d", + "name": "define-property", + "version": "2.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:define-property:define-property:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/define-property@2.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/del@4.1.1?package-id=91a36331fca3031a", + "name": "del", + "version": "4.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:del:del:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/del@4.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/delayed-stream@1.0.0?package-id=cd45040a62713265", + "name": "delayed-stream", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:delayed-stream:delayed-stream:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/delayed-stream@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/delegates@1.0.0?package-id=57d2eba423f14db2", + "name": "delegates", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:delegates:delegates:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/delegates@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/depd@1.1.2?package-id=fd22d7f044ec01be", + "name": "depd", + "version": "1.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:depd:depd:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/depd@1.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/dependency-graph@0.7.2?package-id=2cee83396f34c102", + "name": "dependency-graph", + "version": "0.7.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dependency-graph:dependency-graph:0.7.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/dependency-graph@0.7.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/des.js@1.0.1?package-id=56a75bd236f4cd3b", + "name": "des.js", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:des.js:des.js:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/des.js@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/destroy@1.0.4?package-id=85e95adef566650c", + "name": "destroy", + "version": "1.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:destroy:destroy:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/destroy@1.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/detect-node@2.0.4?package-id=df0beac52d8e4d4c", + "name": "detect-node", + "version": "2.0.4", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:detect-node:detect-node:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/detect-node@2.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/dezalgo@1.0.3?package-id=cc4b56cda913de4d", + "name": "dezalgo", + "version": "1.0.3", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:dezalgo:dezalgo:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/dezalgo@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/di@0.0.1?package-id=f6a7d77796f329cb", + "name": "di", + "version": "0.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:di:di:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/di@0.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/diff@4.0.2?package-id=9c1c0e886cbb9dd8", + "name": "diff", + "version": "4.0.2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:diff:diff:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/diff@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/diffie-hellman@5.0.3?package-id=fa6771ec6a0f956d", + "name": "diffie-hellman", + "version": "5.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:diffie-hellman:diffie-hellman:5.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/diffie-hellman@5.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/dir-glob@2.2.2?package-id=109d1efdb00451db", + "name": "dir-glob", + "version": "2.2.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dir-glob:dir-glob:2.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/dir-glob@2.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/dns-equal@1.0.0?package-id=29454a712931d5f7", + "name": "dns-equal", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dns-equal:dns-equal:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/dns-equal@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/dns-packet@1.3.1?package-id=be981317084fc73c", + "name": "dns-packet", + "version": "1.3.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dns-packet:dns-packet:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/dns-packet@1.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/dns-txt@2.0.2?package-id=7a9a696528b7de23", + "name": "dns-txt", + "version": "2.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dns-txt:dns-txt:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/dns-txt@2.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/dom-serialize@2.2.1?package-id=8c4b20c40abd0517", + "name": "dom-serialize", + "version": "2.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dom-serialize:dom-serialize:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/dom-serialize@2.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/dom-serializer@0.2.2?package-id=ad41dac74f47b2d9", + "name": "dom-serializer", + "version": "0.2.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dom-serializer:dom-serializer:0.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/dom-serializer@0.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/domain-browser@1.2.0?package-id=92a442a438c3a0d4", + "name": "domain-browser", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:domain-browser:domain-browser:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/domain-browser@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/domelementtype@1.3.1?package-id=79ee616135962fa1", + "name": "domelementtype", + "version": "1.3.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:domelementtype:domelementtype:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/domelementtype@1.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/domutils@1.7.0?package-id=badceeb043c0bdfa", + "name": "domutils", + "version": "1.7.0", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:domutils:domutils:1.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/domutils@1.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/dot-prop@5.2.0?package-id=8fd5537242eb4386", + "name": "dot-prop", + "version": "5.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dot-prop:dot-prop:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/dot-prop@5.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/duplexer@0.1.1?package-id=41e23d61d577380", + "name": "duplexer", + "version": "0.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:duplexer:duplexer:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/duplexer@0.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/duplexify@3.7.1?package-id=db63fa71104335d3", + "name": "duplexify", + "version": "3.7.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:duplexify:duplexify:3.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/duplexify@3.7.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ecc-jsbn@0.1.2?package-id=cc938104d42b6760", + "name": "ecc-jsbn", + "version": "0.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ecc-jsbn:ecc-jsbn:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ecc-jsbn@0.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ee-first@1.1.1?package-id=80bdd04ec6db3a57", + "name": "ee-first", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ee-first:ee-first:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ee-first@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ejs@2.7.4?package-id=ff55aec28cae4023", + "name": "ejs", + "version": "2.7.4", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:ejs:ejs:2.7.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/ejs@2.7.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/electron-to-chromium@1.3.433?package-id=4f55d3cc745678d9", + "name": "electron-to-chromium", + "version": "1.3.433", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:electron-to-chromium:electron-to-chromium:1.3.433:*:*:*:*:*:*:*", + "purl": "pkg:npm/electron-to-chromium@1.3.433" + }, + { + "type": "library", + "bom-ref": "pkg:npm/electron-to-chromium@1.4.13?package-id=9ef5b79c703c152", + "name": "electron-to-chromium", + "version": "1.4.13", + "cpe": "cpe:2.3:a:electron-to-chromium:electron-to-chromium:1.4.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/electron-to-chromium@1.4.13" + }, + { + "type": "library", + "bom-ref": "pkg:npm/elliptic@6.5.2?package-id=345e91e597c67b98", + "name": "elliptic", + "version": "6.5.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:elliptic:elliptic:6.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/elliptic@6.5.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/emoji-regex@8.0.0?package-id=a3ee899a356c844a", + "name": "emoji-regex", + "version": "8.0.0", + "cpe": "cpe:2.3:a:emoji-regex:emoji-regex:8.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/emoji-regex@8.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/emoji-regex@8.0.0?package-id=99ba91235e6f01bb", + "name": "emoji-regex", + "version": "8.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:emoji-regex:emoji-regex:8.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/emoji-regex@8.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/emojis-list@3.0.0?package-id=9d621aca0a494c9e", + "name": "emojis-list", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:emojis-list:emojis-list:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/emojis-list@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/encodeurl@1.0.2?package-id=d84f18f685255929", + "name": "encodeurl", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:encodeurl:encodeurl:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/encodeurl@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/encoding@0.1.12?package-id=56f3fd791939fb45", + "name": "encoding", + "version": "0.1.12", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:encoding:encoding:0.1.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/encoding@0.1.12" + }, + { + "type": "library", + "bom-ref": "pkg:npm/end-of-stream@1.4.4?package-id=4e51e9b811cd77c1", + "name": "end-of-stream", + "version": "1.4.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:end-of-stream:end-of-stream:1.4.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/end-of-stream@1.4.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/engine.io@3.2.1?package-id=1cb3ad3a4b6b444a", + "name": "engine.io", + "version": "3.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:engine.io:engine.io:3.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/engine.io@3.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/engine.io-client@3.2.1?package-id=803793384e77dba6", + "name": "engine.io-client", + "version": "3.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:engine.io-client:engine.io-client:3.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/engine.io-client@3.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/engine.io-parser@2.1.3?package-id=bf7c07a1545343a0", + "name": "engine.io-parser", + "version": "2.1.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:engine.io-parser:engine.io-parser:2.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/engine.io-parser@2.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/enhanced-resolve@4.1.1?package-id=a159485c533def40", + "name": "enhanced-resolve", + "version": "4.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:enhanced-resolve:enhanced-resolve:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/enhanced-resolve@4.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ent@2.2.0?package-id=1ccc00680667d71a", + "name": "ent", + "version": "2.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ent:ent:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ent@2.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/entities@2.0.2?package-id=6d7206c48acebef0", + "name": "entities", + "version": "2.0.2", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:entities:entities:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/entities@2.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/err-code@1.1.2?package-id=5090af9f2b1d3338", + "name": "err-code", + "version": "1.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:err-code:err-code:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/err-code@1.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/errno@0.1.7?package-id=a5287fdd9a028341", + "name": "errno", + "version": "0.1.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:errno:errno:0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/errno@0.1.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/error-ex@1.3.2?package-id=2c26e7d8b21341c1", + "name": "error-ex", + "version": "1.3.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:error-ex:error-ex:1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/error-ex@1.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/es-abstract@1.17.5?package-id=d12dccbb8354d40d", + "name": "es-abstract", + "version": "1.17.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:es-abstract:es-abstract:1.17.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/es-abstract@1.17.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/es-to-primitive@1.2.1?package-id=edb146437b9fce1f", + "name": "es-to-primitive", + "version": "1.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:es-to-primitive:es-to-primitive:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/es-to-primitive@1.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/es5-ext@0.10.53?package-id=ee86d9902808de60", + "name": "es5-ext", + "version": "0.10.53", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:es5-ext:es5-ext:0.10.53:*:*:*:*:*:*:*", + "purl": "pkg:npm/es5-ext@0.10.53" + }, + { + "type": "library", + "bom-ref": "pkg:npm/es6-error@4.1.1?package-id=894abcc38c04c11d", + "name": "es6-error", + "version": "4.1.1", + "cpe": "cpe:2.3:a:es6-error:es6-error:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/es6-error@4.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/es6-iterator@2.0.3?package-id=5dd6fc0e6048ebbc", + "name": "es6-iterator", + "version": "2.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:es6-iterator:es6-iterator:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/es6-iterator@2.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/es6-promise@4.2.8?package-id=861d99e03aeae9b2", + "name": "es6-promise", + "version": "4.2.8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:es6-promise:es6-promise:4.2.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/es6-promise@4.2.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/es6-promisify@5.0.0?package-id=fde5458a4f9d0300", + "name": "es6-promisify", + "version": "5.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:es6-promisify:es6-promisify:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/es6-promisify@5.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/es6-symbol@3.1.3?package-id=370407680b5b5874", + "name": "es6-symbol", + "version": "3.1.3", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:es6-symbol:es6-symbol:3.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/es6-symbol@3.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/es6-weak-map@2.0.3?package-id=3f53f9ef8c3d68ae", + "name": "es6-weak-map", + "version": "2.0.3", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:es6-weak-map:es6-weak-map:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/es6-weak-map@2.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/escalade@3.1.1?package-id=4bd26dc4f96cd732", + "name": "escalade", + "version": "3.1.1", + "cpe": "cpe:2.3:a:escalade:escalade:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/escalade@3.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/escape-html@1.0.3?package-id=335e075a5ff270f0", + "name": "escape-html", + "version": "1.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:escape-html:escape-html:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/escape-html@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/escape-string-regexp@1.0.5?package-id=667d680785306240", + "name": "escape-string-regexp", + "version": "1.0.5", + "cpe": "cpe:2.3:a:escape-string-regexp:escape-string-regexp:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/escape-string-regexp@1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/escape-string-regexp@1.0.5?package-id=311ccccf5d94a5cb", + "name": "escape-string-regexp", + "version": "1.0.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:escape-string-regexp:escape-string-regexp:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/escape-string-regexp@1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/eslint-scope@4.0.3?package-id=37eb099d06d2675b", + "name": "eslint-scope", + "version": "4.0.3", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:eslint-scope:eslint-scope:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/eslint-scope@4.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/esprima@4.0.1?package-id=701448f4689ebee6", + "name": "esprima", + "version": "4.0.1", + "cpe": "cpe:2.3:a:esprima:esprima:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/esprima@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/esprima@4.0.1?package-id=a4f4d6726ec2ca", + "name": "esprima", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:esprima:esprima:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/esprima@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/esrecurse@4.2.1?package-id=1d0bd1c39ef3a80", + "name": "esrecurse", + "version": "4.2.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:esrecurse:esrecurse:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/esrecurse@4.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/estraverse@4.3.0?package-id=dead21bda6fdd12e", + "name": "estraverse", + "version": "4.3.0", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:estraverse:estraverse:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/estraverse@4.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/esutils@2.0.3?package-id=bd4300a8410703e5", + "name": "esutils", + "version": "2.0.3", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:esutils:esutils:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/esutils@2.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/etag@1.8.1?package-id=1ed619612608c762", + "name": "etag", + "version": "1.8.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:etag:etag:1.8.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/etag@1.8.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/event-emitter@0.3.5?package-id=7a537a2a49063935", + "name": "event-emitter", + "version": "0.3.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:event-emitter:event-emitter:0.3.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/event-emitter@0.3.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/eventemitter3@4.0.0?package-id=cc23bb8b72579491", + "name": "eventemitter3", + "version": "4.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:eventemitter3:eventemitter3:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/eventemitter3@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/events@3.1.0?package-id=5126d21288b75415", + "name": "events", + "version": "3.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:events:events:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/events@3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/eventsource@1.0.7?package-id=ab7df1636d12fa8b", + "name": "eventsource", + "version": "1.0.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:eventsource:eventsource:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/eventsource@1.0.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/evp_bytestokey@1.0.3?package-id=eca26733d6aad8c3", + "name": "evp_bytestokey", + "version": "1.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:evp-bytestokey:evp-bytestokey:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/evp_bytestokey@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/execa@1.0.0?package-id=4809ab789ba79f5d", + "name": "execa", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:execa:execa:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/execa@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/exit@0.1.2?package-id=d6a21120268923a8", + "name": "exit", + "version": "0.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:exit:exit:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/exit@0.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/expand-brackets@2.1.4?package-id=c0fb9dbc998ab3dd", + "name": "expand-brackets", + "version": "2.1.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:expand-brackets:expand-brackets:2.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/expand-brackets@2.1.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/express@4.17.1?package-id=a8db0737ed48d8fc", + "name": "express", + "version": "4.17.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:express:express:4.17.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/express@4.17.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ext@1.4.0?package-id=9361bb4450aa8cad", + "name": "ext", + "version": "1.4.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ext:ext:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ext@1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/extend@3.0.2?package-id=1985b9e710517a00", + "name": "extend", + "version": "3.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:extend:extend:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/extend@3.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/extend-shallow@3.0.2?package-id=f35d4f258719094c", + "name": "extend-shallow", + "version": "3.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:extend-shallow:extend-shallow:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/extend-shallow@3.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/external-editor@3.1.0?package-id=557b6a5f06ccefd0", + "name": "external-editor", + "version": "3.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:external-editor:external-editor:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/external-editor@3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/extglob@2.0.4?package-id=74526de1f9bd7e1a", + "name": "extglob", + "version": "2.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:extglob:extglob:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/extglob@2.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/extsprintf@1.3.0?package-id=6e3b15c094722f53", + "name": "extsprintf", + "version": "1.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:extsprintf:extsprintf:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/extsprintf@1.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-deep-equal@3.1.1?package-id=9ce50f0b38646836", + "name": "fast-deep-equal", + "version": "3.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-deep-equal:fast-deep-equal:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-deep-equal@3.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-json-patch@3.1.0?package-id=80f123e0b5cc3c38", + "name": "fast-json-patch", + "version": "3.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-json-patch:fast-json-patch:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-json-patch@3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-json-stable-stringify@2.0.0?package-id=4f3459ba7fc5deee", + "name": "fast-json-stable-stringify", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-json-stable-stringify:fast-json-stable-stringify:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-json-stable-stringify@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fastparse@1.1.2?package-id=352f889d2f2225e2", + "name": "fastparse", + "version": "1.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fastparse:fastparse:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/fastparse@1.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/faye-websocket@0.10.0?package-id=fb84a187b1a22a5c", + "name": "faye-websocket", + "version": "0.10.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:faye-websocket:faye-websocket:0.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/faye-websocket@0.10.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fflate@0.7.1?package-id=949186a3f746d697", + "name": "fflate", + "version": "0.7.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fflate:fflate:0.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/fflate@0.7.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/figgy-pudding@3.5.2?package-id=17be0eee0f782243", + "name": "figgy-pudding", + "version": "3.5.2", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:figgy-pudding:figgy-pudding:3.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/figgy-pudding@3.5.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/figures@3.2.0?package-id=afe6d032392b9034", + "name": "figures", + "version": "3.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:figures:figures:3.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/figures@3.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/file-loader@6.0.0?package-id=d9065f556392274", + "name": "file-loader", + "version": "6.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:file-loader:file-loader:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/file-loader@6.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/file-saver@2.0.2?package-id=ba0d0f5a56dba4d3", + "name": "file-saver", + "version": "2.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:file-saver:file-saver:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/file-saver@2.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/file-uri-to-path@1.0.0?package-id=6cc68e3b181d5513", + "name": "file-uri-to-path", + "version": "1.0.0", + "cpe": "cpe:2.3:a:file-uri-to-path:file-uri-to-path:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/file-uri-to-path@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fileset@2.0.3?package-id=b64ebdf4a96052cc", + "name": "fileset", + "version": "2.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fileset:fileset:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/fileset@2.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/filesize@3.6.1?package-id=762606d64c7833dc", + "name": "filesize", + "version": "3.6.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:filesize:filesize:3.6.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/filesize@3.6.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fill-range@7.0.1?package-id=22d5f2a796cd5138", + "name": "fill-range", + "version": "7.0.1", + "cpe": "cpe:2.3:a:fill-range:fill-range:7.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/fill-range@7.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fill-range@7.0.1?package-id=ed1ef2c9380551d6", + "name": "fill-range", + "version": "7.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fill-range:fill-range:7.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/fill-range@7.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/finalhandler@1.1.2?package-id=a9dedbe02122910c", + "name": "finalhandler", + "version": "1.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:finalhandler:finalhandler:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/finalhandler@1.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/find-cache-dir@3.3.1?package-id=23d9a6ad20be2a60", + "name": "find-cache-dir", + "version": "3.3.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:find-cache-dir:find-cache-dir:3.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/find-cache-dir@3.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/find-cache-dir@3.3.2?package-id=b622f76a51816d68", + "name": "find-cache-dir", + "version": "3.3.2", + "cpe": "cpe:2.3:a:find-cache-dir:find-cache-dir:3.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/find-cache-dir@3.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/find-parent-dir@0.3.0?package-id=1088f3f3c7aa92c4", + "name": "find-parent-dir", + "version": "0.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:find-parent-dir:find-parent-dir:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/find-parent-dir@0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/find-up@3.0.0?package-id=658277bbddefb284", + "name": "find-up", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:find-up:find-up:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/find-up@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/find-up@4.1.0?package-id=dd45a1ee8a127d0f", + "name": "find-up", + "version": "4.1.0", + "cpe": "cpe:2.3:a:find-up:find-up:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/find-up@4.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/find-yarn-workspace-root@1.2.1?package-id=9b45ec73f348d891", + "name": "find-yarn-workspace-root", + "version": "1.2.1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:find-yarn-workspace-root:find-yarn-workspace-root:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/find-yarn-workspace-root@1.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/find-yarn-workspace-root@2.0.0?package-id=12d7019945f13d32", + "name": "find-yarn-workspace-root", + "version": "2.0.0", + "cpe": "cpe:2.3:a:find-yarn-workspace-root:find-yarn-workspace-root:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/find-yarn-workspace-root@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/flatted@2.0.2?package-id=d56eacb6f8d9f6b4", + "name": "flatted", + "version": "2.0.2", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:flatted:flatted:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/flatted@2.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/flush-write-stream@1.1.1?package-id=5227c57c78230933", + "name": "flush-write-stream", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:flush-write-stream:flush-write-stream:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/flush-write-stream@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/follow-redirects@1.10.0?package-id=9eefc9ad21056f9f", + "name": "follow-redirects", + "version": "1.10.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:follow-redirects:follow-redirects:1.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/follow-redirects@1.10.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/for-in@1.0.2?package-id=8f39fcaa134d9342", + "name": "for-in", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:for-in:for-in:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/for-in@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/foreground-child@2.0.0?package-id=fcda9784ab78b494", + "name": "foreground-child", + "version": "2.0.0", + "cpe": "cpe:2.3:a:foreground-child:foreground-child:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/foreground-child@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/forever-agent@0.6.1?package-id=ba24fa234f7565ab", + "name": "forever-agent", + "version": "0.6.1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:forever-agent:forever-agent:0.6.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/forever-agent@0.6.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/form-data@2.3.3?package-id=e8062fbce3e10599", + "name": "form-data", + "version": "2.3.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:form-data:form-data:2.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/form-data@2.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/format-util@1.0.5?package-id=b3f003abff771603", + "name": "format-util", + "version": "1.0.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:format-util:format-util:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/format-util@1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/forwarded@0.1.2?package-id=771e3f2fad0e4cb5", + "name": "forwarded", + "version": "0.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:forwarded:forwarded:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/forwarded@0.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fragment-cache@0.2.1?package-id=cd2dd1c76259c538", + "name": "fragment-cache", + "version": "0.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fragment-cache:fragment-cache:0.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/fragment-cache@0.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fresh@0.5.2?package-id=64faea44e405af57", + "name": "fresh", + "version": "0.5.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fresh:fresh:0.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/fresh@0.5.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/from2@2.3.0?package-id=8ebfbab1dd04d756", + "name": "from2", + "version": "2.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:from2:from2:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/from2@2.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fromentries@1.3.2?package-id=415667e3595d1b75", + "name": "fromentries", + "version": "1.3.2", + "cpe": "cpe:2.3:a:fromentries:fromentries:1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/fromentries@1.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-extra@4.0.2?package-id=5cf09adc3d2c6dc0", + "name": "fs-extra", + "version": "4.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fs-extra:fs-extra:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-extra@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-extra@7.0.1?package-id=e7687c3b14abdf8b", + "name": "fs-extra", + "version": "7.0.1", + "cpe": "cpe:2.3:a:fs-extra:fs-extra:7.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-extra@7.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-minipass@2.1.0?package-id=8d6dc03f1f15a124", + "name": "fs-minipass", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-minipass@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-write-stream-atomic@1.0.10?package-id=34bcc9d39b7f883d", + "name": "fs-write-stream-atomic", + "version": "1.0.10", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs-write-stream-atomic:fs-write-stream-atomic:1.0.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-write-stream-atomic@1.0.10" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=3e6c94601df3fbb", + "name": "fs.realpath", + "version": "1.0.0", + "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs.realpath@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=98f1c8011455e3c0", + "name": "fs.realpath", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs.realpath@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fsevents@2.1.2?package-id=969df83614793d40", + "name": "fsevents", + "version": "2.1.2", + "cpe": "cpe:2.3:a:fsevents:fsevents:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/fsevents@2.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fstream@1.0.12?package-id=6aa064dac7c55c50", + "name": "fstream", + "version": "1.0.12", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fstream:fstream:1.0.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/fstream@1.0.12" + }, + { + "type": "library", + "bom-ref": "pkg:npm/function-bind@1.1.1?package-id=56c3a01f3c742c82", + "name": "function-bind", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:function-bind:function-bind:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/function-bind@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/fusioncharts@3.18.0?package-id=79a2c75fa4101f64", + "name": "fusioncharts", + "version": "3.18.0", + "licenses": [ + { + "license": { + "name": "http://www.fusioncharts.com/buy/" + } + } + ], + "cpe": "cpe:2.3:a:fusioncharts:fusioncharts:3.18.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fusioncharts@3.18.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/gauge@2.7.4?package-id=8c30a5acf94c1546", + "name": "gauge", + "version": "2.7.4", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:gauge:gauge:2.7.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/gauge@2.7.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/gaze@1.1.3?package-id=77dee6cc44284377", + "name": "gaze", + "version": "1.1.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:gaze:gaze:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/gaze@1.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/genfun@5.0.0?package-id=d83ab6667c0d43f0", + "name": "genfun", + "version": "5.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:genfun:genfun:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/genfun@5.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/gensync@1.0.0-beta.1?package-id=962d83779c6bb8ac", + "name": "gensync", + "version": "1.0.0-beta.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:gensync:gensync:1.0.0-beta.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/gensync@1.0.0-beta.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/gensync@1.0.0-beta.2?package-id=25e40c6ab36609ba", + "name": "gensync", + "version": "1.0.0-beta.2", + "cpe": "cpe:2.3:a:gensync:gensync:1.0.0-beta.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/gensync@1.0.0-beta.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-caller-file@1.0.3?package-id=9a46bf030fd683d8", + "name": "get-caller-file", + "version": "1.0.3", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:get-caller-file:get-caller-file:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-caller-file@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-caller-file@2.0.5?package-id=b105eb74e25a730", + "name": "get-caller-file", + "version": "2.0.5", + "cpe": "cpe:2.3:a:get-caller-file:get-caller-file:2.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-caller-file@2.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-package-type@0.1.0?package-id=e9cd5e6d06b22624", + "name": "get-package-type", + "version": "0.1.0", + "cpe": "cpe:2.3:a:get-package-type:get-package-type:0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-package-type@0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-stdin@4.0.1?package-id=3e8600b4d1a888c2", + "name": "get-stdin", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:get-stdin:get-stdin:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-stdin@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-stream@4.1.0?package-id=674f46c3d4e751aa", + "name": "get-stream", + "version": "4.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:get-stream:get-stream:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-stream@4.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-value@2.0.6?package-id=1e25415a5886166d", + "name": "get-value", + "version": "2.0.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:get-value:get-value:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-value@2.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/getpass@0.1.7?package-id=8fbe9dc611eb5d31", + "name": "getpass", + "version": "0.1.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:getpass:getpass:0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/getpass@0.1.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.1.5?package-id=d49b5710e254b035", + "name": "glob", + "version": "7.1.5", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:glob:glob:7.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.1.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.2.0?package-id=2ce135fbc8852949", + "name": "glob", + "version": "7.2.0", + "cpe": "cpe:2.3:a:glob:glob:7.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob-parent@3.1.0?package-id=f0170f0368b7e6d1", + "name": "glob-parent", + "version": "3.1.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:glob-parent:glob-parent:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob-parent@3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/globals@11.12.0?package-id=68db12ff2e119d71", + "name": "globals", + "version": "11.12.0", + "cpe": "cpe:2.3:a:globals:globals:11.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/globals@11.12.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/globals@11.12.0?package-id=cb72971e8458cd68", + "name": "globals", + "version": "11.12.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:globals:globals:11.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/globals@11.12.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/globby@7.1.1?package-id=b1ffbf24ffadb19a", + "name": "globby", + "version": "7.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:globby:globby:7.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/globby@7.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/globule@1.3.2?package-id=fffc322bb09b7af1", + "name": "globule", + "version": "1.3.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:globule:globule:1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/globule@1.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/graceful-fs@4.2.3?package-id=24f7ee8365a5fa0f", + "name": "graceful-fs", + "version": "4.2.3", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/graceful-fs@4.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/graceful-fs@4.2.8?package-id=2c7402059e043bcf", + "name": "graceful-fs", + "version": "4.2.8", + "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/graceful-fs@4.2.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/gzip-size@5.1.1?package-id=6c96e7520ae9839f", + "name": "gzip-size", + "version": "5.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:gzip-size:gzip-size:5.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/gzip-size@5.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/hammerjs@2.0.8?package-id=e03a8be071ae6ace", + "name": "hammerjs", + "version": "2.0.8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hammerjs:hammerjs:2.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/hammerjs@2.0.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/handle-thing@2.0.1?package-id=1a7091dfed90703f", + "name": "handle-thing", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:handle-thing:handle-thing:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/handle-thing@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/har-schema@2.0.0?package-id=b1a2ebde8b267bd6", + "name": "har-schema", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:har-schema:har-schema:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/har-schema@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/har-validator@5.1.3?package-id=ac87909b9cd270ec", + "name": "har-validator", + "version": "5.1.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:har-validator:har-validator:5.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/har-validator@5.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/has@1.0.3?package-id=8c4936faeea3f824", + "name": "has", + "version": "1.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has:has:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/has@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-ansi@2.0.0?package-id=849e1c8d8e724418", + "name": "has-ansi", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-ansi:has-ansi:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-ansi@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-binary2@1.0.3?package-id=e3ef0424eef21c0f", + "name": "has-binary2", + "version": "1.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-binary2:has-binary2:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-binary2@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-cors@1.1.0?package-id=c8e145f596e318fb", + "name": "has-cors", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-cors:has-cors:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-cors@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-flag@3.0.0?package-id=a41cf4f7a73cd697", + "name": "has-flag", + "version": "3.0.0", + "cpe": "cpe:2.3:a:has-flag:has-flag:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-flag@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-flag@3.0.0?package-id=58c61d96d70626ca", + "name": "has-flag", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-flag:has-flag:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-flag@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-symbols@1.0.1?package-id=fc7f29f46370bd6e", + "name": "has-symbols", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-symbols:has-symbols:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-symbols@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-unicode@2.0.1?package-id=35b66e4a60ec8bb0", + "name": "has-unicode", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:has-unicode:has-unicode:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-unicode@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-value@1.0.0?package-id=d5032b241ba02e1d", + "name": "has-value", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-value:has-value:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-value@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-values@1.0.0?package-id=45a2f61c5944e0d5", + "name": "has-values", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-values:has-values:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-values@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/hash-base@3.1.0?package-id=b929cbdf581d2bcf", + "name": "hash-base", + "version": "3.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hash-base:hash-base:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/hash-base@3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/hash.js@1.1.7?package-id=2b2472c5da730ea5", + "name": "hash.js", + "version": "1.1.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hash.js:hash.js:1.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/hash.js@1.1.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/hasha@5.2.2?package-id=8c40fdee7bf5379", + "name": "hasha", + "version": "5.2.2", + "cpe": "cpe:2.3:a:hasha:hasha:5.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/hasha@5.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/hat@0.0.3?package-id=f8c1c7ec65337bea", + "name": "hat", + "version": "0.0.3", + "licenses": [ + { + "license": { + "name": "MIT/X11" + } + } + ], + "cpe": "cpe:2.3:a:hat:hat:0.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/hat@0.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/hex-color-regex@1.1.0?package-id=3ed2479126656f54", + "name": "hex-color-regex", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hex-color-regex:hex-color-regex:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/hex-color-regex@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/hmac-drbg@1.0.1?package-id=4d346510bcb9b857", + "name": "hmac-drbg", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hmac-drbg:hmac-drbg:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/hmac-drbg@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/hoopy@0.1.4?package-id=8a3c82c4b8b53d58", + "name": "hoopy", + "version": "0.1.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hoopy:hoopy:0.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/hoopy@0.1.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/hosted-git-info@3.0.4?package-id=c9bc7aa70fe41772", + "name": "hosted-git-info", + "version": "3.0.4", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:hosted-git-info:hosted-git-info:3.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/hosted-git-info@3.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/hpack.js@2.1.6?package-id=3469ea053800e8cd", + "name": "hpack.js", + "version": "2.1.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hpack.js:hpack.js:2.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/hpack.js@2.1.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/hsl-regex@1.0.0?package-id=1b8de35627eda758", + "name": "hsl-regex", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hsl-regex:hsl-regex:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/hsl-regex@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/hsla-regex@1.0.0?package-id=a672b177632a1bad", + "name": "hsla-regex", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hsla-regex:hsla-regex:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/hsla-regex@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/html-comment-regex@1.1.2?package-id=5b75e28fce5492b2", + "name": "html-comment-regex", + "version": "1.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:html-comment-regex:html-comment-regex:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/html-comment-regex@1.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/html-entities@1.3.1?package-id=2477f7e10710393f", + "name": "html-entities", + "version": "1.3.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:html-entities:html-entities:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/html-entities@1.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/html-escaper@2.0.1?package-id=8be027f2fefcc741", + "name": "html-escaper", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:html-escaper:html-escaper:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/html-escaper@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/html-escaper@2.0.2?package-id=f66ca240d366936d", + "name": "html-escaper", + "version": "2.0.2", + "cpe": "cpe:2.3:a:html-escaper:html-escaper:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/html-escaper@2.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-cache-semantics@3.8.1?package-id=17b1c363d3bf4d01", + "name": "http-cache-semantics", + "version": "3.8.1", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:http-cache-semantics:http-cache-semantics:3.8.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-cache-semantics@3.8.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-deceiver@1.2.7?package-id=1def39a1440b77c1", + "name": "http-deceiver", + "version": "1.2.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-deceiver:http-deceiver:1.2.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-deceiver@1.2.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-errors@1.7.2?package-id=5457dca65bc234e8", + "name": "http-errors", + "version": "1.7.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-errors:http-errors:1.7.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-errors@1.7.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-parser-js@0.4.10?package-id=9a252ee8177aabdb", + "name": "http-parser-js", + "version": "0.4.10", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-parser-js:http-parser-js:0.4.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-parser-js@0.4.10" + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-proxy@1.18.0?package-id=42b97d843a5f395a", + "name": "http-proxy", + "version": "1.18.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-proxy:http-proxy:1.18.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-proxy@1.18.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-proxy-agent@2.1.0?package-id=a7281ff79a7e5fbf", + "name": "http-proxy-agent", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-proxy-agent:http-proxy-agent:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-proxy-agent@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-proxy-middleware@0.19.1?package-id=12f8434105025a62", + "name": "http-proxy-middleware", + "version": "0.19.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-proxy-middleware:http-proxy-middleware:0.19.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-proxy-middleware@0.19.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-signature@1.2.0?package-id=eab31ef7fd190da4", + "name": "http-signature", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-signature:http-signature:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-signature@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/https-browserify@1.0.0?package-id=26447787cd73bc73", + "name": "https-browserify", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:https-browserify:https-browserify:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/https-browserify@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/https-proxy-agent@2.2.4?package-id=b3137d38baec4ac7", + "name": "https-proxy-agent", + "version": "2.2.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:https-proxy-agent:https-proxy-agent:2.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/https-proxy-agent@2.2.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/humanize-ms@1.2.1?package-id=509082d97e002281", + "name": "humanize-ms", + "version": "1.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:humanize-ms:humanize-ms:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/humanize-ms@1.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/iconv-lite@0.4.24?package-id=999c06134ef677a5", + "name": "iconv-lite", + "version": "0.4.24", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:iconv-lite:iconv-lite:0.4.24:*:*:*:*:*:*:*", + "purl": "pkg:npm/iconv-lite@0.4.24" + }, + { + "type": "library", + "bom-ref": "pkg:npm/icss-utils@4.1.1?package-id=2da5415f3a1d199a", + "name": "icss-utils", + "version": "4.1.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:icss-utils:icss-utils:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/icss-utils@4.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ieee754@1.1.13?package-id=ab79705531d245ef", + "name": "ieee754", + "version": "1.1.13", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:ieee754:ieee754:1.1.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/ieee754@1.1.13" + }, + { + "type": "library", + "bom-ref": "pkg:npm/iferr@0.1.5?package-id=32ffbc67ac16f742", + "name": "iferr", + "version": "0.1.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:iferr:iferr:0.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/iferr@0.1.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/igniteui-angular@9.0.13?package-id=af0ef079dcaf299d", + "name": "igniteui-angular", + "version": "9.0.13", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:igniteui-angular:igniteui-angular:9.0.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/igniteui-angular@9.0.13" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ignore@3.3.10?package-id=af4a22a7d221add6", + "name": "ignore", + "version": "3.3.10", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ignore:ignore:3.3.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/ignore@3.3.10" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ignore-walk@3.0.3?package-id=efbcd5495c0c263d", + "name": "ignore-walk", + "version": "3.0.3", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ignore-walk:ignore-walk:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/ignore-walk@3.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/image-size@0.5.5?package-id=bea483365ffd6b74", + "name": "image-size", + "version": "0.5.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:image-size:image-size:0.5.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/image-size@0.5.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/imgmsglib@1.0.8?package-id=86e27893b5a3dc50", + "name": "imgmsglib", + "version": "1.0.8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:imgmsglib:imgmsglib:1.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/imgmsglib@1.0.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/immediate@3.0.6?package-id=b377a4b1b606461f", + "name": "immediate", + "version": "3.0.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:immediate:immediate:3.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/immediate@3.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/immutable@3.8.2?package-id=35d07eb9e86042db", + "name": "immutable", + "version": "3.8.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:immutable:immutable:3.8.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/immutable@3.8.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/import-cwd@2.1.0?package-id=6cd3dd7757e2f906", + "name": "import-cwd", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:import-cwd:import-cwd:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/import-cwd@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/import-fresh@2.0.0?package-id=7f311c3fb51b4a09", + "name": "import-fresh", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:import-fresh:import-fresh:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/import-fresh@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/import-from@2.1.0?package-id=c1758ee89db82851", + "name": "import-from", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:import-from:import-from:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/import-from@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/import-local@2.0.0?package-id=bb1590ab8e47b5e4", + "name": "import-local", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:import-local:import-local:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/import-local@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/imurmurhash@0.1.4?package-id=e18262ead668693e", + "name": "imurmurhash", + "version": "0.1.4", + "cpe": "cpe:2.3:a:imurmurhash:imurmurhash:0.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/imurmurhash@0.1.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/imurmurhash@0.1.4?package-id=86c7a2e4e034e22a", + "name": "imurmurhash", + "version": "0.1.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:imurmurhash:imurmurhash:0.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/imurmurhash@0.1.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/in-publish@2.0.1?package-id=2f7597e50fe7a038", + "name": "in-publish", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:in-publish:in-publish:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/in-publish@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/indent-string@4.0.0?package-id=d19a8114ee99a286", + "name": "indent-string", + "version": "4.0.0", + "cpe": "cpe:2.3:a:indent-string:indent-string:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/indent-string@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/indent-string@4.0.0?package-id=58d20a5c6d0b4f4d", + "name": "indent-string", + "version": "4.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indent-string:indent-string:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/indent-string@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/indexes-of@1.0.1?package-id=afe8b9a4504a2997", + "name": "indexes-of", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indexes-of:indexes-of:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/indexes-of@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/indexof@0.0.1?package-id=ba8e070fb1e835f3", + "name": "indexof", + "version": "0.0.1", + "cpe": "cpe:2.3:a:indexof:indexof:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/indexof@0.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/infer-owner@1.0.4?package-id=905292bd4dd8c25e", + "name": "infer-owner", + "version": "1.0.4", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:infer-owner:infer-owner:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/infer-owner@1.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/inflight@1.0.6?package-id=9cf3e158cdc14617", + "name": "inflight", + "version": "1.0.6", + "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/inflight@1.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/inflight@1.0.6?package-id=68ea27fe6f57bae9", + "name": "inflight", + "version": "1.0.6", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/inflight@1.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.4?package-id=4e54902333c52de3", + "name": "inherits", + "version": "2.0.4", + "cpe": "cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.4?package-id=e8aa2200e9737250", + "name": "inherits", + "version": "2.0.4", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ini@1.3.5?package-id=4e456614ed9b7853", + "name": "ini", + "version": "1.3.5", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ini:ini:1.3.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/ini@1.3.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/inquirer@7.1.0?package-id=8fe63daa61aa2b96", + "name": "inquirer", + "version": "7.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:inquirer:inquirer:7.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/inquirer@7.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/internal-ip@4.3.0?package-id=e48f4fce2853aa09", + "name": "internal-ip", + "version": "4.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:internal-ip:internal-ip:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/internal-ip@4.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/invariant@2.2.4?package-id=3c9df78fcad9b293", + "name": "invariant", + "version": "2.2.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:invariant:invariant:2.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/invariant@2.2.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/invert-kv@2.0.0?package-id=a3ccc519f4037eb5", + "name": "invert-kv", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:invert-kv:invert-kv:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/invert-kv@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ip@1.1.5?package-id=b133e25a7dfe0990", + "name": "ip", + "version": "1.1.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ip:ip:1.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/ip@1.1.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ip-regex@2.1.0?package-id=82ea9fd16233217e", + "name": "ip-regex", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ip-regex:ip-regex:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ip-regex@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ipaddr.js@1.9.1?package-id=95696907ab3dfa3a", + "name": "ipaddr.js", + "version": "1.9.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ipaddr.js:ipaddr.js:1.9.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ipaddr.js@1.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-absolute-url@2.1.0?package-id=b214b3c502d4913", + "name": "is-absolute-url", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-absolute-url:is-absolute-url:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-absolute-url@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-accessor-descriptor@0.1.6?package-id=52778fed0ceeaaac", + "name": "is-accessor-descriptor", + "version": "0.1.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-accessor-descriptor:is-accessor-descriptor:0.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-accessor-descriptor@0.1.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-arguments@1.0.4?package-id=b3de7e5d9fc396e8", + "name": "is-arguments", + "version": "1.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-arguments:is-arguments:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-arguments@1.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-arrayish@0.2.1?package-id=e67c63a84964794c", + "name": "is-arrayish", + "version": "0.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-arrayish:is-arrayish:0.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-arrayish@0.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-binary-path@2.1.0?package-id=be32f8f31b09657c", + "name": "is-binary-path", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-binary-path:is-binary-path:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-binary-path@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-buffer@1.1.6?package-id=8a6b8aeccfd36bf9", + "name": "is-buffer", + "version": "1.1.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-buffer:is-buffer:1.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-buffer@1.1.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-callable@1.1.5?package-id=b6f41fd3cb712eb6", + "name": "is-callable", + "version": "1.1.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-callable:is-callable:1.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-callable@1.1.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-ci@2.0.0?package-id=12adf7b9c264c122", + "name": "is-ci", + "version": "2.0.0", + "cpe": "cpe:2.3:a:is-ci:is-ci:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-ci@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-ci@2.0.0?package-id=dec910c961ec01c6", + "name": "is-ci", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-ci:is-ci:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-ci@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-color-stop@1.1.0?package-id=a83e8bf419489f3e", + "name": "is-color-stop", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-color-stop:is-color-stop:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-color-stop@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-data-descriptor@0.1.4?package-id=8f5cd91611f398aa", + "name": "is-data-descriptor", + "version": "0.1.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-data-descriptor:is-data-descriptor:0.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-data-descriptor@0.1.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-date-object@1.0.2?package-id=eff1c4270f2fd8af", + "name": "is-date-object", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-date-object:is-date-object:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-date-object@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-descriptor@0.1.6?package-id=cd7e3cb0b81c1a1f", + "name": "is-descriptor", + "version": "0.1.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-descriptor:is-descriptor:0.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-descriptor@0.1.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-directory@0.3.1?package-id=3243a241678a73ed", + "name": "is-directory", + "version": "0.3.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-directory:is-directory:0.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-directory@0.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-docker@2.0.0?package-id=32fd27b0de0cca4c", + "name": "is-docker", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-docker:is-docker:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-docker@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-docker@2.2.1?package-id=97f82b6f01e7b7c5", + "name": "is-docker", + "version": "2.2.1", + "cpe": "cpe:2.3:a:is-docker:is-docker:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-docker@2.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-extendable@0.1.1?package-id=46b3e22deca7021", + "name": "is-extendable", + "version": "0.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-extendable:is-extendable:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-extendable@0.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-extglob@1.0.0?package-id=f8a292608b987a8f", + "name": "is-extglob", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-extglob:is-extglob:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-extglob@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-finite@1.1.0?package-id=80d5e21017816012", + "name": "is-finite", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-finite:is-finite:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-finite@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0?package-id=3a83b589f02db0", + "name": "is-fullwidth-code-point", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0?package-id=c4a0ce514ed2bdc1", + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-glob@2.0.1?package-id=2831d0cd33897761", + "name": "is-glob", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-glob:is-glob:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-glob@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-interactive@1.0.0?package-id=7c0a4fd7ef0792fe", + "name": "is-interactive", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-interactive:is-interactive:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-interactive@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-invalid-path@0.1.0?package-id=8b20d4d3ed93b67a", + "name": "is-invalid-path", + "version": "0.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-invalid-path:is-invalid-path:0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-invalid-path@0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-number@7.0.0?package-id=795e1d1e82106cf3", + "name": "is-number", + "version": "7.0.0", + "cpe": "cpe:2.3:a:is-number:is-number:7.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-number@7.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-number@7.0.0?package-id=98fc2971ac328cef", + "name": "is-number", + "version": "7.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-number:is-number:7.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-number@7.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-obj@2.0.0?package-id=daee69d950c7f8d3", + "name": "is-obj", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-obj:is-obj:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-obj@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-path-cwd@2.2.0?package-id=9d29689f13fee97a", + "name": "is-path-cwd", + "version": "2.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-path-cwd:is-path-cwd:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-path-cwd@2.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-path-in-cwd@2.1.0?package-id=8d866a4eaaa71f43", + "name": "is-path-in-cwd", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-path-in-cwd:is-path-in-cwd:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-path-in-cwd@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-path-inside@2.1.0?package-id=b68dc63164117e", + "name": "is-path-inside", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-path-inside:is-path-inside:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-path-inside@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-plain-obj@1.1.0?package-id=e82e68e16e9802af", + "name": "is-plain-obj", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-plain-obj:is-plain-obj:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-plain-obj@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-plain-object@2.0.4?package-id=2de9894e27c11cc3", + "name": "is-plain-object", + "version": "2.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-plain-object:is-plain-object:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-plain-object@2.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-promise@2.1.0?package-id=d9604e6dd3fff002", + "name": "is-promise", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-promise:is-promise:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-promise@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-regex@1.0.5?package-id=1da33a1716d0ca35", + "name": "is-regex", + "version": "1.0.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-regex:is-regex:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-regex@1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-resolvable@1.1.0?package-id=2051d5196acb1078", + "name": "is-resolvable", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:is-resolvable:is-resolvable:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-resolvable@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-stream@1.1.0?package-id=290af436785fa663", + "name": "is-stream", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-stream:is-stream:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-stream@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-stream@2.0.1?package-id=b7020eef79da7a2f", + "name": "is-stream", + "version": "2.0.1", + "cpe": "cpe:2.3:a:is-stream:is-stream:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-stream@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-svg@3.0.0?package-id=448d25753dcf6755", + "name": "is-svg", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-svg:is-svg:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-svg@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-symbol@1.0.3?package-id=a86a8b57006b79e0", + "name": "is-symbol", + "version": "1.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-symbol:is-symbol:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-symbol@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-typedarray@1.0.0?package-id=1237946ebc1127a3", + "name": "is-typedarray", + "version": "1.0.0", + "cpe": "cpe:2.3:a:is-typedarray:is-typedarray:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-typedarray@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-typedarray@1.0.0?package-id=a8a7526a7be6ffaf", + "name": "is-typedarray", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-typedarray:is-typedarray:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-typedarray@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-utf8@0.2.1?package-id=b50b42f55203de82", + "name": "is-utf8", + "version": "0.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-utf8:is-utf8:0.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-utf8@0.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-valid-path@0.1.1?package-id=d614436521b5b67f", + "name": "is-valid-path", + "version": "0.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-valid-path:is-valid-path:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-valid-path@0.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-windows@1.0.2?package-id=c4d75db58bbb41d0", + "name": "is-windows", + "version": "1.0.2", + "cpe": "cpe:2.3:a:is-windows:is-windows:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-windows@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-windows@1.0.2?package-id=3e910a9c661cf434", + "name": "is-windows", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-windows:is-windows:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-windows@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-wsl@2.2.0?package-id=c4ac676a9af6c51c", + "name": "is-wsl", + "version": "2.2.0", + "cpe": "cpe:2.3:a:is-wsl:is-wsl:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-wsl@2.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-wsl@2.2.0?package-id=4d541859b87a4641", + "name": "is-wsl", + "version": "2.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-wsl:is-wsl:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-wsl@2.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/isarray@1.0.0?package-id=2601df04effb6ad2", + "name": "isarray", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isarray:isarray:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isarray@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/isbinaryfile@4.0.6?package-id=fa5278a6ed911ec8", + "name": "isbinaryfile", + "version": "4.0.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isbinaryfile:isbinaryfile:4.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/isbinaryfile@4.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/isexe@2.0.0?package-id=76b24c61d8683af9", + "name": "isexe", + "version": "2.0.0", + "cpe": "cpe:2.3:a:isexe:isexe:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isexe@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/isexe@2.0.0?package-id=684a241c6286581e", + "name": "isexe", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isexe:isexe:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isexe@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/isobject@3.0.1?package-id=5fe8984746338c7e", + "name": "isobject", + "version": "3.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isobject:isobject:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/isobject@3.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/isstream@0.1.2?package-id=6de000f9ce16c1f", + "name": "isstream", + "version": "0.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isstream:isstream:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/isstream@0.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/istanbul-api@2.1.6?package-id=1ae0ce4b3f2fae9b", + "name": "istanbul-api", + "version": "2.1.6", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:istanbul-api:istanbul-api:2.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/istanbul-api@2.1.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/istanbul-lib-coverage@3.0.0?package-id=f2a8580ece8bf2da", + "name": "istanbul-lib-coverage", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:istanbul-lib-coverage:istanbul-lib-coverage:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/istanbul-lib-coverage@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/istanbul-lib-coverage@3.2.0?package-id=6c21a800a9a1c352", + "name": "istanbul-lib-coverage", + "version": "3.2.0", + "cpe": "cpe:2.3:a:istanbul-lib-coverage:istanbul-lib-coverage:3.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/istanbul-lib-coverage@3.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/istanbul-lib-hook@2.0.7?package-id=b963d91e2ffc20f9", + "name": "istanbul-lib-hook", + "version": "2.0.7", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:istanbul-lib-hook:istanbul-lib-hook:2.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/istanbul-lib-hook@2.0.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/istanbul-lib-hook@3.0.0?package-id=98c2f2466f66817c", + "name": "istanbul-lib-hook", + "version": "3.0.0", + "cpe": "cpe:2.3:a:istanbul-lib-hook:istanbul-lib-hook:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/istanbul-lib-hook@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/istanbul-lib-instrument@4.0.3?package-id=9c4745f614c9052c", + "name": "istanbul-lib-instrument", + "version": "4.0.3", + "cpe": "cpe:2.3:a:istanbul-lib-instrument:istanbul-lib-instrument:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/istanbul-lib-instrument@4.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/istanbul-lib-instrument@4.0.3?package-id=eef49cc6b9533f3c", + "name": "istanbul-lib-instrument", + "version": "4.0.3", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:istanbul-lib-instrument:istanbul-lib-instrument:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/istanbul-lib-instrument@4.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/istanbul-lib-processinfo@2.0.2?package-id=11627e0744ec4db8", + "name": "istanbul-lib-processinfo", + "version": "2.0.2", + "cpe": "cpe:2.3:a:istanbul-lib-processinfo:istanbul-lib-processinfo:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/istanbul-lib-processinfo@2.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/istanbul-lib-report@2.0.8?package-id=55cbe824d2d41d16", + "name": "istanbul-lib-report", + "version": "2.0.8", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:istanbul-lib-report:istanbul-lib-report:2.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/istanbul-lib-report@2.0.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/istanbul-lib-report@3.0.0?package-id=37695f9c0ad2a5ef", + "name": "istanbul-lib-report", + "version": "3.0.0", + "cpe": "cpe:2.3:a:istanbul-lib-report:istanbul-lib-report:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/istanbul-lib-report@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/istanbul-lib-source-maps@3.0.6?package-id=6aa7c0e8df334cba", + "name": "istanbul-lib-source-maps", + "version": "3.0.6", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:istanbul-lib-source-maps:istanbul-lib-source-maps:3.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/istanbul-lib-source-maps@3.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/istanbul-lib-source-maps@4.0.1?package-id=66e12c5dbe587c84", + "name": "istanbul-lib-source-maps", + "version": "4.0.1", + "cpe": "cpe:2.3:a:istanbul-lib-source-maps:istanbul-lib-source-maps:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/istanbul-lib-source-maps@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/istanbul-reports@2.2.7?package-id=2906b5296966651", + "name": "istanbul-reports", + "version": "2.2.7", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:istanbul-reports:istanbul-reports:2.2.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/istanbul-reports@2.2.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/istanbul-reports@3.1.1?package-id=1a5f71a74e360c81", + "name": "istanbul-reports", + "version": "3.1.1", + "cpe": "cpe:2.3:a:istanbul-reports:istanbul-reports:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/istanbul-reports@3.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jasmine@2.8.0?package-id=b391cde6ad1e059c", + "name": "jasmine", + "version": "2.8.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jasmine:jasmine:2.8.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/jasmine@2.8.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jasmine@3.10.0?package-id=25c2a74931ecd303", + "name": "jasmine", + "version": "3.10.0", + "cpe": "cpe:2.3:a:jasmine:jasmine:3.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/jasmine@3.10.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/jasmine-core@2.8.0?package-id=ff9145efd2fe77f6", + "author": "Pivotal Labs ", + "name": "jasmine-core", + "version": "2.8.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pivotal_labs_project:python-jasmine-core:2.8.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/jasmine-core@2.8.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jasmine-core@3.10.1?package-id=35769132186911a9", + "name": "jasmine-core", + "version": "3.10.1", + "cpe": "cpe:2.3:a:jasmine-core:jasmine-core:3.10.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jasmine-core@3.10.1" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/jasmine-core@3.4.0?package-id=add2b0c5f5a7f430", + "author": "Pivotal Labs ", + "name": "jasmine-core", + "version": "3.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pivotal_labs_project:python-jasmine-core:3.4.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/jasmine-core@3.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jasmine-core@3.5.0?package-id=2d97ad9cc207fc7c", + "name": "jasmine-core", + "version": "3.5.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jasmine-core:jasmine-core:3.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/jasmine-core@3.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jasmine-reporters@2.3.2?package-id=b5429c8dfc6991eb", + "name": "jasmine-reporters", + "version": "2.3.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jasmine-reporters:jasmine-reporters:2.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/jasmine-reporters@2.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jasmine-spec-reporter@4.2.1?package-id=5f15908a83562069", + "name": "jasmine-spec-reporter", + "version": "4.2.1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:jasmine-spec-reporter:jasmine-spec-reporter:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jasmine-spec-reporter@4.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jasminewd2@2.2.0?package-id=4ba46c906cad0b60", + "name": "jasminewd2", + "version": "2.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jasminewd2:jasminewd2:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/jasminewd2@2.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jest-worker@25.1.0?package-id=3b2cd35086a54b20", + "name": "jest-worker", + "version": "25.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jest-worker:jest-worker:25.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/jest-worker@25.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/js-base64@2.6.4?package-id=927724999fb6f7ce", + "name": "js-base64", + "version": "2.6.4", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:js-base64:js-base64:2.6.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/js-base64@2.6.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/js-tokens@4.0.0?package-id=8a34e1032629186", + "name": "js-tokens", + "version": "4.0.0", + "cpe": "cpe:2.3:a:js-tokens:js-tokens:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/js-tokens@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/js-tokens@4.0.0?package-id=a45a406ab9f66024", + "name": "js-tokens", + "version": "4.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:js-tokens:js-tokens:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/js-tokens@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/js-yaml@3.14.1?package-id=454e8e5807feb0a3", + "name": "js-yaml", + "version": "3.14.1", + "cpe": "cpe:2.3:a:js-yaml:js-yaml:3.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/js-yaml@3.14.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/js-yaml@4.1.0?package-id=4b57901fe7459101", + "name": "js-yaml", + "version": "4.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:js-yaml:js-yaml:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/js-yaml@4.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsbn@0.1.1?package-id=180bcccaba7b462f", + "name": "jsbn", + "version": "0.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jsbn:jsbn:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsbn@0.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsesc@2.5.2?package-id=cb3180fc14c12ded", + "name": "jsesc", + "version": "2.5.2", + "cpe": "cpe:2.3:a:jsesc:jsesc:2.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsesc@2.5.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsesc@2.5.2?package-id=d1ecf8a72db4a15f", + "name": "jsesc", + "version": "2.5.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jsesc:jsesc:2.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsesc@2.5.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-cycle@1.3.0?package-id=47076b86e448a8a4", + "name": "json-cycle", + "version": "1.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-cycle:json-cycle:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-cycle@1.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-parse-better-errors@1.0.2?package-id=75dc908c71be93a8", + "name": "json-parse-better-errors", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-parse-better-errors:json-parse-better-errors:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-parse-better-errors@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema@0.2.3?package-id=e4cfa487fbbcfb8e", + "name": "json-schema", + "version": "0.2.3", + "licenses": [ + { + "license": { + "name": "AFLv2.1" + } + }, + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:json-schema:json-schema:0.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema@0.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema-deref-sync@0.10.1?package-id=2b165e30354fe13d", + "name": "json-schema-deref-sync", + "version": "0.10.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-schema-deref-sync:json-schema-deref-sync:0.10.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema-deref-sync@0.10.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema-ref-parser@6.1.0?package-id=ce00f28d631428fb", + "name": "json-schema-ref-parser", + "version": "6.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-schema-ref-parser:json-schema-ref-parser:6.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema-ref-parser@6.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema-to-typescript@7.1.0?package-id=5635b07b4361e9f5", + "name": "json-schema-to-typescript", + "version": "7.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-schema-to-typescript:json-schema-to-typescript:7.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema-to-typescript@7.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema-traverse@0.4.1?package-id=cbb857d85748c1e4", + "name": "json-schema-traverse", + "version": "0.4.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-schema-traverse:json-schema-traverse:0.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema-traverse@0.4.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-stringify-safe@5.0.1?package-id=2609f143751fda00", + "name": "json-stringify-safe", + "version": "5.0.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:json-stringify-safe:json-stringify-safe:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-stringify-safe@5.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/json3@3.3.3?package-id=25d604a40fbe9dfd", + "name": "json3", + "version": "3.3.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json3:json3:3.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/json3@3.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/json5@1.0.1?package-id=cd7530dc6fa406c3", + "name": "json5", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json5:json5:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json5@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/json5@2.2.0?package-id=f25d6fe164d07e25", + "name": "json5", + "version": "2.2.0", + "cpe": "cpe:2.3:a:json5:json5:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/json5@2.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonc-parser@3.2.0?package-id=e41da41ef5c1a79", + "name": "jsonc-parser", + "version": "3.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jsonc-parser:jsonc-parser:3.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonc-parser@3.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonfile@4.0.0?package-id=2d13bd9d0a025121", + "name": "jsonfile", + "version": "4.0.0", + "cpe": "cpe:2.3:a:jsonfile:jsonfile:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonfile@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonfile@4.0.0?package-id=40d9e4d00b74202f", + "name": "jsonfile", + "version": "4.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jsonfile:jsonfile:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonfile@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonparse@1.3.1?package-id=fd6c63440aefcc7d", + "name": "jsonparse", + "version": "1.3.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jsonparse:jsonparse:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonparse@1.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonschema@1.4.1?package-id=2802f0bacf4414a2", + "name": "jsonschema", + "version": "1.4.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jsonschema:jsonschema:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonschema@1.4.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsprim@1.4.1?package-id=196b972bd5fc97eb", + "name": "jsprim", + "version": "1.4.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jsprim:jsprim:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsprim@1.4.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/jszip@3.2.2?package-id=8175927f908c011b", + "name": "jszip", + "version": "3.2.2", + "licenses": [ + { + "license": { + "name": "(MIT OR GPL-3.0)" + } + } + ], + "cpe": "cpe:2.3:a:jszip:jszip:3.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/jszip@3.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/karma@5.0.1?package-id=309c45d3b04c27f1", + "name": "karma", + "version": "5.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:karma:karma:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/karma@5.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/karma-chrome-launcher@3.1.0?package-id=d49d7fcfb45fe3", + "name": "karma-chrome-launcher", + "version": "3.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:karma-chrome-launcher:karma-chrome-launcher:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/karma-chrome-launcher@3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/karma-coverage-istanbul-reporter@2.1.1?package-id=3af22972b63f621c", + "name": "karma-coverage-istanbul-reporter", + "version": "2.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:karma-coverage-istanbul-reporter:karma-coverage-istanbul-reporter:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/karma-coverage-istanbul-reporter@2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/karma-jasmine@3.1.1?package-id=d422198d5fce7824", + "name": "karma-jasmine", + "version": "3.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:karma-jasmine:karma-jasmine:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/karma-jasmine@3.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/karma-jasmine-html-reporter@1.5.2?package-id=ac8d099d67f54085", + "name": "karma-jasmine-html-reporter", + "version": "1.5.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:karma-jasmine-html-reporter:karma-jasmine-html-reporter:1.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/karma-jasmine-html-reporter@1.5.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/karma-source-map-support@1.4.0?package-id=67f3cee4e9209f1e", + "name": "karma-source-map-support", + "version": "1.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:karma-source-map-support:karma-source-map-support:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/karma-source-map-support@1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/killable@1.0.1?package-id=93ffdb96dd98bf41", + "name": "killable", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:killable:killable:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/killable@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/kind-of@6.0.3?package-id=e8ab60871ec14903", + "name": "kind-of", + "version": "6.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:kind-of:kind-of:6.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/kind-of@6.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/klaw-sync@6.0.0?package-id=b09bc8cbe7e40ac1", + "name": "klaw-sync", + "version": "6.0.0", + "cpe": "cpe:2.3:a:klaw-sync:klaw-sync:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/klaw-sync@6.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/klaw-sync@6.0.0?package-id=843e1f7e755c6d7", + "name": "klaw-sync", + "version": "6.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:klaw-sync:klaw-sync:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/klaw-sync@6.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lcid@2.0.0?package-id=efe8a3f66501df0f", + "name": "lcid", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lcid:lcid:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lcid@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/less@3.11.1?package-id=356a20b387d05e12", + "name": "less", + "version": "3.11.1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:less:less:3.11.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/less@3.11.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/less-loader@5.0.0?package-id=3e0c657447443b9e", + "name": "less-loader", + "version": "5.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:less-loader:less-loader:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/less-loader@5.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/leven@3.1.0?package-id=43c5be4dad2db792", + "name": "leven", + "version": "3.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:leven:leven:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/leven@3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/levenary@1.1.1?package-id=149f4c147b272447", + "name": "levenary", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:levenary:levenary:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/levenary@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/license-webpack-plugin@2.1.4?package-id=fb5508918414df22", + "name": "license-webpack-plugin", + "version": "2.1.4", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:license-webpack-plugin:license-webpack-plugin:2.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/license-webpack-plugin@2.1.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lie@3.3.0?package-id=c5fcf15e35110845", + "name": "lie", + "version": "3.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lie:lie:3.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lie@3.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/load-json-file@1.1.0?package-id=5f582fbce7b08bb9", + "name": "load-json-file", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:load-json-file:load-json-file:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/load-json-file@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/loader-runner@2.4.0?package-id=2bbdf9ddb27124ec", + "name": "loader-runner", + "version": "2.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:loader-runner:loader-runner:2.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/loader-runner@2.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/loader-utils@1.4.0?package-id=7e3c9dbecc9b6ad7", + "name": "loader-utils", + "version": "1.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:loader-utils:loader-utils:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/loader-utils@1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/locate-path@3.0.0?package-id=2459735fd9c97d60", + "name": "locate-path", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:locate-path:locate-path:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/locate-path@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/locate-path@5.0.0?package-id=957582ccf8a83d8c", + "name": "locate-path", + "version": "5.0.0", + "cpe": "cpe:2.3:a:locate-path:locate-path:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/locate-path@5.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash@4.17.15?package-id=8fc70fcf143cc0f1", + "name": "lodash", + "version": "4.17.15", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash:lodash:4.17.15:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash@4.17.15" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.clonedeep@4.5.0?package-id=febc1ffcde2ededb", + "name": "lodash.clonedeep", + "version": "4.5.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.clonedeep:lodash.clonedeep:4.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.clonedeep@4.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.debounce@4.0.8?package-id=a24e0ef4641e05de", + "name": "lodash.debounce", + "version": "4.0.8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.debounce:lodash.debounce:4.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.debounce@4.0.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.flattendeep@4.4.0?package-id=6cbf628c8b1ea6de", + "name": "lodash.flattendeep", + "version": "4.4.0", + "cpe": "cpe:2.3:a:lodash.flattendeep:lodash.flattendeep:4.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.flattendeep@4.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.memoize@4.1.2?package-id=94979cb4ceba5f94", + "name": "lodash.memoize", + "version": "4.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.memoize:lodash.memoize:4.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.memoize@4.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.throttle@4.1.1?package-id=5e78db1c97e493ba", + "name": "lodash.throttle", + "version": "4.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.throttle:lodash.throttle:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.throttle@4.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.uniq@4.5.0?package-id=b5770eedfc257e9b", + "name": "lodash.uniq", + "version": "4.5.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.uniq:lodash.uniq:4.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.uniq@4.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/log-symbols@3.0.0?package-id=edefb05eab9e2feb", + "name": "log-symbols", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:log-symbols:log-symbols:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/log-symbols@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/log4js@4.5.1?package-id=7147a3cd22bf6c45", + "name": "log4js", + "version": "4.5.1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:log4js:log4js:4.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/log4js@4.5.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/loglevel@1.6.8?package-id=80ce6842e3489425", + "name": "loglevel", + "version": "1.6.8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:loglevel:loglevel:1.6.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/loglevel@1.6.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/loose-envify@1.4.0?package-id=5cbfaf24327ae16f", + "name": "loose-envify", + "version": "1.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:loose-envify:loose-envify:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/loose-envify@1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/loud-rejection@1.6.0?package-id=bd8ed016e8f7a88c", + "name": "loud-rejection", + "version": "1.6.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:loud-rejection:loud-rejection:1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/loud-rejection@1.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lru-cache@5.1.1?package-id=efb4f97816cd3dea", + "name": "lru-cache", + "version": "5.1.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lru-cache:lru-cache:5.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru-cache@5.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/lru-queue@0.1.0?package-id=623769448f36df86", + "name": "lru-queue", + "version": "0.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lru-queue:lru-queue:0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru-queue@0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/magic-string@0.25.7?package-id=9250e37883e0b636", + "name": "magic-string", + "version": "0.25.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:magic-string:magic-string:0.25.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/magic-string@0.25.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/make-dir@2.1.0?package-id=f522a1a71d75593f", + "name": "make-dir", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:make-dir:make-dir:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-dir@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/make-dir@3.1.0?package-id=120153f25eeb68e7", + "name": "make-dir", + "version": "3.1.0", + "cpe": "cpe:2.3:a:make-dir:make-dir:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-dir@3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/make-error@1.3.6?package-id=f941e8f95ca1e399", + "name": "make-error", + "version": "1.3.6", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:make-error:make-error:1.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-error@1.3.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/make-fetch-happen@5.0.2?package-id=58ecdc589af92947", + "name": "make-fetch-happen", + "version": "5.0.2", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:make-fetch-happen:make-fetch-happen:5.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-fetch-happen@5.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/make-plural@4.3.0?package-id=160293f143b39fd5", + "name": "make-plural", + "version": "4.3.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:make-plural:make-plural:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-plural@4.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mamacro@0.0.3?package-id=2fcfdc8624ce520c", + "name": "mamacro", + "version": "0.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mamacro:mamacro:0.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/mamacro@0.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/map-age-cleaner@0.1.3?package-id=56361233da5a887", + "name": "map-age-cleaner", + "version": "0.1.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:map-age-cleaner:map-age-cleaner:0.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/map-age-cleaner@0.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/map-cache@0.2.2?package-id=dce1fea67eed03ec", + "name": "map-cache", + "version": "0.2.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:map-cache:map-cache:0.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/map-cache@0.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/map-obj@1.0.1?package-id=b705e7a0e76c9c6b", + "name": "map-obj", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:map-obj:map-obj:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/map-obj@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/map-visit@1.0.0?package-id=5718ccddc5416bcd", + "name": "map-visit", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:map-visit:map-visit:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/map-visit@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/material-design-icons@3.0.1?package-id=21e30ca2f460492b", + "name": "material-design-icons", + "version": "3.0.1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:material-design-icons:material-design-icons:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/material-design-icons@3.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/md5@2.2.1?package-id=800a88672a48643d", + "name": "md5", + "version": "2.2.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:md5:md5:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/md5@2.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/md5.js@1.3.5?package-id=77b1f5bb6464ec80", + "name": "md5.js", + "version": "1.3.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:md5.js:md5.js:1.3.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/md5.js@1.3.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mdn-data@2.0.4?package-id=472d5418be1af51", + "name": "mdn-data", + "version": "2.0.4", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "cpe": "cpe:2.3:a:mdn-data:mdn-data:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/mdn-data@2.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/media-typer@0.3.0?package-id=ca48d6b56e4fc502", + "name": "media-typer", + "version": "0.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:media-typer:media-typer:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/media-typer@0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mem@4.3.0?package-id=4763427674c2e30b", + "name": "mem", + "version": "4.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mem:mem:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mem@4.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/memoizee@0.4.14?package-id=a98d62d96a090606", + "name": "memoizee", + "version": "0.4.14", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:memoizee:memoizee:0.4.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/memoizee@0.4.14" + }, + { + "type": "library", + "bom-ref": "pkg:npm/memory-cache@0.2.0?package-id=dc76999d25bf8aec", + "name": "memory-cache", + "version": "0.2.0", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:memory-cache:memory-cache:0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/memory-cache@0.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/memory-fs@0.5.0?package-id=835a482066c109d9", + "name": "memory-fs", + "version": "0.5.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:memory-fs:memory-fs:0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/memory-fs@0.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/meow@3.7.0?package-id=d6ca1246457d6581", + "name": "meow", + "version": "3.7.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:meow:meow:3.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/meow@3.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/merge-descriptors@1.0.1?package-id=b3a54c67bd87d9b4", + "name": "merge-descriptors", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:merge-descriptors:merge-descriptors:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/merge-descriptors@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/merge-source-map@1.1.0?package-id=a5da2b3ceea5d559", + "name": "merge-source-map", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:merge-source-map:merge-source-map:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/merge-source-map@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/merge-stream@2.0.0?package-id=13c60b24bc18ddc1", + "name": "merge-stream", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:merge-stream:merge-stream:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/merge-stream@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/messageformat@2.3.0?package-id=58942b14cde58e60", + "name": "messageformat", + "version": "2.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:messageformat:messageformat:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/messageformat@2.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/messageformat-formatters@2.0.1?package-id=ece43a41f43df5a4", + "name": "messageformat-formatters", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:messageformat-formatters:messageformat-formatters:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/messageformat-formatters@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/messageformat-parser@4.1.2?package-id=c645b1bc35ae8458", + "name": "messageformat-parser", + "version": "4.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:messageformat-parser:messageformat-parser:4.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/messageformat-parser@4.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/methods@1.1.2?package-id=7cf6621b8f94cdb", + "name": "methods", + "version": "1.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:methods:methods:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/methods@1.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/micromatch@3.1.10?package-id=859bae501355cf8d", + "name": "micromatch", + "version": "3.1.10", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:micromatch:micromatch:3.1.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/micromatch@3.1.10" + }, + { + "type": "library", + "bom-ref": "pkg:npm/micromatch@4.0.4?package-id=70db87ed40b38bef", + "name": "micromatch", + "version": "4.0.4", + "cpe": "cpe:2.3:a:micromatch:micromatch:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/micromatch@4.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/miller-rabin@4.0.1?package-id=63e2cca7f77bc8f", + "name": "miller-rabin", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:miller-rabin:miller-rabin:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/miller-rabin@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime@1.6.0?package-id=b2183e468b37566b", + "name": "mime", + "version": "1.6.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime:mime:1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime@1.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-db@1.43.0?package-id=46a9ce8ec5654417", + "name": "mime-db", + "version": "1.43.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-db:mime-db:1.43.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-db@1.43.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-types@2.1.26?package-id=adfbe56a0ffaec05", + "name": "mime-types", + "version": "2.1.26", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-types:mime-types:2.1.26:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-types@2.1.26" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mimic-fn@2.1.0?package-id=58a044b09ce3ee39", + "name": "mimic-fn", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mimic-fn:mimic-fn:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mimic-fn@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mini-css-extract-plugin@0.9.0?package-id=ee7457c4ca9748f7", + "name": "mini-css-extract-plugin", + "version": "0.9.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mini-css-extract-plugin:mini-css-extract-plugin:0.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mini-css-extract-plugin@0.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.eclipsesource.minimal-json/minimal-json@0.9.4?package-id=99263807019f1a53", + "group": "com.eclipsesource.minimal-json", + "name": "minimal-json", + "version": "0.9.4", + "cpe": "cpe:2.3:a:eclipsesource:minimal-json:0.9.4:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.eclipsesource.minimal-json/minimal-json@0.9.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimalistic-assert@1.0.1?package-id=705ca3e3f6e7eb02", + "name": "minimalistic-assert", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimalistic-assert:minimalistic-assert:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimalistic-assert@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimalistic-crypto-utils@1.0.1?package-id=45d367331e8404fa", + "name": "minimalistic-crypto-utils", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minimalistic-crypto-utils:minimalistic-crypto-utils:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimalistic-crypto-utils@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.0.4?package-id=ee00f3cf2b87f404", + "name": "minimatch", + "version": "3.0.4", + "cpe": "cpe:2.3:a:minimatch:minimatch:3.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.0.4?package-id=c5e9ed4b28717954", + "name": "minimatch", + "version": "3.0.4", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimist@0.0.10?package-id=1c07596d9c4c0832", + "name": "minimist", + "version": "0.0.10", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minimist:minimist:0.0.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimist@0.0.10" + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimist@1.2.5?package-id=3db111d71d3ecf68", + "name": "minimist", + "version": "1.2.5", + "cpe": "cpe:2.3:a:minimist:minimist:1.2.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimist@1.2.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass@3.1.1?package-id=5249402b96ad198b", + "name": "minipass", + "version": "3.1.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@3.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-collect@1.0.2?package-id=13cc293ff0489da7", + "name": "minipass-collect", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-collect:minipass-collect:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-collect@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-flush@1.0.5?package-id=44b66fdb41c47d06", + "name": "minipass-flush", + "version": "1.0.5", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-flush:minipass-flush:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-flush@1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-pipeline@1.2.2?package-id=39b7ae6c094ea9d8", + "name": "minipass-pipeline", + "version": "1.2.2", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-pipeline:minipass-pipeline:1.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-pipeline@1.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/minizlib@2.1.0?package-id=19a156c3174a5e27", + "name": "minizlib", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minizlib:minizlib:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/minizlib@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mississippi@3.0.0?package-id=506cfdbeb502a4cb", + "name": "mississippi", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:mississippi:mississippi:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mississippi@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mixin-deep@1.3.2?package-id=e949ad29dd481b21", + "name": "mixin-deep", + "version": "1.3.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mixin-deep:mixin-deep:1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/mixin-deep@1.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp@0.5.4?package-id=9357305f8b408ea7", + "name": "mkdirp", + "version": "0.5.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mkdirp:mkdirp:0.5.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp@0.5.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/moment@2.29.4?package-id=b2d2faac48e64687", + "name": "moment", + "version": "2.29.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:moment:moment:2.29.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/moment@2.29.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/moment-timezone@0.5.31?package-id=36bb7eb6ae8ca03c", + "name": "moment-timezone", + "version": "0.5.31", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:moment-timezone:moment-timezone:0.5.31:*:*:*:*:*:*:*", + "purl": "pkg:npm/moment-timezone@0.5.31" + }, + { + "type": "library", + "bom-ref": "pkg:npm/monaco-editor@0.17.1?package-id=5f86c0cbc5976c03", + "name": "monaco-editor", + "version": "0.17.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:monaco-editor:monaco-editor:0.17.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/monaco-editor@0.17.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/monaco-editor-webpack-plugin@1.9.1?package-id=72d7eeb8439ac76c", + "name": "monaco-editor-webpack-plugin", + "version": "1.9.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:monaco-editor-webpack-plugin:monaco-editor-webpack-plugin:1.9.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/monaco-editor-webpack-plugin@1.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/monaco-yaml@2.4.1?package-id=aec8422e10db7c9", + "name": "monaco-yaml", + "version": "2.4.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:monaco-yaml:monaco-yaml:2.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/monaco-yaml@2.4.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/move-concurrently@1.0.1?package-id=91aab6a1c52a589c", + "name": "move-concurrently", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:move-concurrently:move-concurrently:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/move-concurrently@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.2?package-id=1fe678a2cf218002", + "name": "ms", + "version": "2.1.2", + "cpe": "cpe:2.3:a:ms:ms:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.2?package-id=d4db9576c4da8b3f", + "name": "ms", + "version": "2.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ms:ms:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/multicast-dns@6.2.3?package-id=c8911e08631e93a5", + "name": "multicast-dns", + "version": "6.2.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:multicast-dns:multicast-dns:6.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/multicast-dns@6.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/multicast-dns-service-types@1.1.0?package-id=5b9518852354f54f", + "name": "multicast-dns-service-types", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:multicast-dns-service-types:multicast-dns-service-types:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/multicast-dns-service-types@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mutationobserver-shim@0.3.7?package-id=a8d9d4109de8b10e", + "name": "mutationobserver-shim", + "version": "0.3.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mutationobserver-shim:mutationobserver-shim:0.3.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/mutationobserver-shim@0.3.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mute-stream@0.0.8?package-id=230bc8ae18ec3049", + "name": "mute-stream", + "version": "0.0.8", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:mute-stream:mute-stream:0.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/mute-stream@0.0.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/mz@2.7.0?package-id=86237e547714020f", + "name": "mz", + "version": "2.7.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mz:mz:2.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mz@2.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/nan@2.14.0?package-id=7ee02793c83db419", + "name": "nan", + "version": "2.14.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nan:nan:2.14.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/nan@2.14.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/nanomatch@1.2.13?package-id=9bf9e8048dbb257f", + "name": "nanomatch", + "version": "1.2.13", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nanomatch:nanomatch:1.2.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/nanomatch@1.2.13" + }, + { + "type": "library", + "bom-ref": "pkg:npm/negotiator@0.6.2?package-id=a20c54adaf57fd29", + "name": "negotiator", + "version": "0.6.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:negotiator:negotiator:0.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/negotiator@0.6.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/neo-async@2.6.1?package-id=73e73df2a810fbb7", + "name": "neo-async", + "version": "2.6.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:neo-async:neo-async:2.6.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/neo-async@2.6.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/next-tick@1.0.0?package-id=355dcda553672f5e", + "name": "next-tick", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:next-tick:next-tick:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/next-tick@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ng-table-virtual-scroll@1.3.5?package-id=682f8addcd3bf45a", + "name": "ng-table-virtual-scroll", + "version": "1.3.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ng-table-virtual-scroll:ng-table-virtual-scroll:1.3.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/ng-table-virtual-scroll@1.3.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ngx-clipboard@12.3.1?package-id=d4b766a1055c4a66", + "name": "ngx-clipboard", + "version": "12.3.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ngx-clipboard:ngx-clipboard:12.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ngx-clipboard@12.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ngx-color-picker@9.0.0?package-id=1d9a53d19729380b", + "name": "ngx-color-picker", + "version": "9.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ngx-color-picker:ngx-color-picker:9.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ngx-color-picker@9.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ngx-infinite-scroll@9.0.0?package-id=9be67accd97c49cd", + "name": "ngx-infinite-scroll", + "version": "9.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ngx-infinite-scroll:ngx-infinite-scroll:9.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ngx-infinite-scroll@9.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ngx-json-viewer@2.4.0?package-id=4b0a64dbd5fda21", + "name": "ngx-json-viewer", + "version": "2.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ngx-json-viewer:ngx-json-viewer:2.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ngx-json-viewer@2.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ngx-moment@3.5.0?package-id=8c5f9e7e8506e9df", + "name": "ngx-moment", + "version": "3.5.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ngx-moment:ngx-moment:3.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ngx-moment@3.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ngx-toastr@12.0.0?package-id=a8b8c3a1f0fe3f2f", + "name": "ngx-toastr", + "version": "12.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ngx-toastr:ngx-toastr:12.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ngx-toastr@12.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ngx-translate-messageformat-compiler@4.6.0?package-id=f50acdc845b59e6d", + "name": "ngx-translate-messageformat-compiler", + "version": "4.6.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ngx-translate-messageformat-compiler:ngx-translate-messageformat-compiler:4.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ngx-translate-messageformat-compiler@4.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ngx-window-token@2.0.1?package-id=3e622697f4c22b9", + "name": "ngx-window-token", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ngx-window-token:ngx-window-token:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ngx-window-token@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/nice-try@1.0.5?package-id=ff7bfcc027d13c4b", + "name": "nice-try", + "version": "1.0.5", + "cpe": "cpe:2.3:a:nice-try:nice-try:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/nice-try@1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/nice-try@1.0.5?package-id=5471e73f8a2a771e", + "name": "nice-try", + "version": "1.0.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nice-try:nice-try:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/nice-try@1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-fetch-npm@2.0.4?package-id=201ea80691a31b76", + "name": "node-fetch-npm", + "version": "2.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-fetch-npm:node-fetch-npm:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-fetch-npm@2.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-forge@0.9.0?package-id=8348f60849f936f4", + "name": "node-forge", + "version": "0.9.0", + "licenses": [ + { + "license": { + "name": "(BSD-3-Clause OR GPL-2.0)" + } + } + ], + "cpe": "cpe:2.3:a:node-forge:node-forge:0.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-forge@0.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-gyp@3.8.0?package-id=9ac9a76e4c586aeb", + "name": "node-gyp", + "version": "3.8.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-gyp:node-gyp:3.8.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-gyp@3.8.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-libs-browser@2.2.1?package-id=9ac758a83a8ee74b", + "name": "node-libs-browser", + "version": "2.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-libs-browser:node-libs-browser:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-libs-browser@2.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-preload@0.2.1?package-id=b3c94ad6812671fe", + "name": "node-preload", + "version": "0.2.1", + "cpe": "cpe:2.3:a:node-preload:node-preload:0.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-preload@0.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-releases@1.1.55?package-id=2b79507dd448b67e", + "name": "node-releases", + "version": "1.1.55", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-releases:node-releases:1.1.55:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-releases@1.1.55" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-releases@2.0.1?package-id=f3118a50b9b9e3bb", + "name": "node-releases", + "version": "2.0.1", + "cpe": "cpe:2.3:a:node-releases:node-releases:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-releases@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-sass@4.14.1?package-id=175e686cc9a898f9", + "name": "node-sass", + "version": "4.14.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-sass:node-sass:4.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-sass@4.14.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-sass-tilde-importer@1.0.2?package-id=8b7d9e8e52ccf606", + "name": "node-sass-tilde-importer", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:node-sass-tilde-importer:node-sass-tilde-importer:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-sass-tilde-importer@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/nopt@3.0.6?package-id=b76541de1284e7c9", + "name": "nopt", + "version": "3.0.6", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:nopt:nopt:3.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/nopt@3.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/normalize-package-data@2.5.0?package-id=8a1d44a0d0c7b3aa", + "name": "normalize-package-data", + "version": "2.5.0", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:normalize-package-data:normalize-package-data:2.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/normalize-package-data@2.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/normalize-path@3.0.0?package-id=f19edc9ce3987dc0", + "name": "normalize-path", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:normalize-path:normalize-path:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/normalize-path@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/normalize-range@0.1.2?package-id=26d707dcfcfae96f", + "name": "normalize-range", + "version": "0.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:normalize-range:normalize-range:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/normalize-range@0.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/normalize-url@3.3.0?package-id=286b50f7a270f3ff", + "name": "normalize-url", + "version": "3.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:normalize-url:normalize-url:3.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/normalize-url@3.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-bundled@1.1.1?package-id=ec675f588ad2775f", + "name": "npm-bundled", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-bundled:npm-bundled:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-bundled@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-install-checks@4.0.0?package-id=4cbc06560a9bd399", + "name": "npm-install-checks", + "version": "4.0.0", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:npm-install-checks:npm-install-checks:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-install-checks@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@1.0.1?package-id=6ca14d45fb962159", + "name": "npm-normalize-package-bin", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-package-arg@8.0.1?package-id=2230c36d68a29478", + "name": "npm-package-arg", + "version": "8.0.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-package-arg:npm-package-arg:8.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-package-arg@8.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-packlist@1.4.8?package-id=10dbede298814310", + "name": "npm-packlist", + "version": "1.4.8", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-packlist:npm-packlist:1.4.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-packlist@1.4.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-pick-manifest@6.0.0?package-id=88d99ca50639259d", + "name": "npm-pick-manifest", + "version": "6.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-pick-manifest:npm-pick-manifest:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-pick-manifest@6.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-registry-fetch@4.0.4?package-id=feaa429003f5ed54", + "name": "npm-registry-fetch", + "version": "4.0.4", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-registry-fetch:npm-registry-fetch:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-registry-fetch@4.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-run-path@2.0.2?package-id=954bfc4210051a5c", + "name": "npm-run-path", + "version": "2.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:npm-run-path:npm-run-path:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-run-path@2.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/npmlog@4.1.2?package-id=de2a40c813be8859", + "name": "npmlog", + "version": "4.1.2", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npmlog:npmlog:4.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npmlog@4.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/nth-check@1.0.2?package-id=492954811633dedb", + "name": "nth-check", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:nth-check:nth-check:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/nth-check@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/num2fraction@1.2.2?package-id=ab62e338a560ceab", + "name": "num2fraction", + "version": "1.2.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:num2fraction:num2fraction:1.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/num2fraction@1.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/number-is-nan@1.0.1?package-id=98721ac55be8e513", + "name": "number-is-nan", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:number-is-nan:number-is-nan:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/number-is-nan@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/nyc@15.1.0?package-id=18149d32195be3ea", + "name": "nyc", + "version": "15.1.0", + "cpe": "cpe:2.3:a:nyc:nyc:15.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/nyc@15.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/oauth-sign@0.9.0?package-id=cd8ae3e717266c46", + "name": "oauth-sign", + "version": "0.9.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:oauth-sign:oauth-sign:0.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/oauth-sign@0.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-assign@4.1.1?package-id=f802ff55095a284", + "name": "object-assign", + "version": "4.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-assign:object-assign:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-assign@4.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-component@0.0.3?package-id=7a5e45b312bff6cb", + "name": "object-component", + "version": "0.0.3", + "cpe": "cpe:2.3:a:object-component:object-component:0.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-component@0.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-copy@0.1.0?package-id=7b96df2f0017d75d", + "name": "object-copy", + "version": "0.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-copy:object-copy:0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-copy@0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-inspect@1.7.0?package-id=1d5a7430ad1048c4", + "name": "object-inspect", + "version": "1.7.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-inspect:object-inspect:1.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-inspect@1.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-is@1.1.2?package-id=8ed7e8a36435619b", + "name": "object-is", + "version": "1.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-is:object-is:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-is@1.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-keys@1.1.1?package-id=dba8c714ae361736", + "name": "object-keys", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-keys:object-keys:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-keys@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-visit@1.0.1?package-id=acf46af56f21e74d", + "name": "object-visit", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-visit:object-visit:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-visit@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/object.assign@4.1.0?package-id=595d5cd4ab087dae", + "name": "object.assign", + "version": "4.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object.assign:object.assign:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/object.assign@4.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/object.getownpropertydescriptors@2.1.0?package-id=dbf57f521eccb13a", + "name": "object.getownpropertydescriptors", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object.getownpropertydescriptors:object.getownpropertydescriptors:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/object.getownpropertydescriptors@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/object.pick@1.3.0?package-id=7ecfb7d893f545fd", + "name": "object.pick", + "version": "1.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object.pick:object.pick:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/object.pick@1.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/object.values@1.1.1?package-id=76b5624ad475d74b", + "name": "object.values", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object.values:object.values:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/object.values@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/obuf@1.1.2?package-id=9b2e636c7589b423", + "name": "obuf", + "version": "1.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:obuf:obuf:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/obuf@1.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.squareup.okhttp3/okhttp@3.8.1?package-id=b9725050a73769b4", + "group": "com.squareup.okhttp3", + "name": "okhttp", + "version": "3.8.1", + "cpe": "cpe:2.3:a:squareup:okhttp:3.8.1:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.squareup.okhttp3/okhttp@3.8.1" + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.squareup.okio/okio@1.13.0?package-id=8a0842d7394a63c", + "group": "com.squareup.okio", + "name": "okio", + "version": "1.13.0", + "cpe": "cpe:2.3:a:squareup:okio:1.13.0:*:*:*:*:*:*:*", + "purl": "pkg:maven/com.squareup.okio/okio@1.13.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/on-finished@2.3.0?package-id=9899269e1935c0be", + "name": "on-finished", + "version": "2.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:on-finished:on-finished:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/on-finished@2.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/on-headers@1.0.2?package-id=ed63e70859bf35cc", + "name": "on-headers", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:on-headers:on-headers:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/on-headers@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/once@1.4.0?package-id=6bdec02a68ee8f59", + "name": "once", + "version": "1.4.0", + "cpe": "cpe:2.3:a:once:once:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/once@1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/once@1.4.0?package-id=8c181f3657a90187", + "name": "once", + "version": "1.4.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:once:once:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/once@1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/onetime@5.1.0?package-id=826b8ebb00dc4ca", + "name": "onetime", + "version": "5.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:onetime:onetime:5.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/onetime@5.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ono@4.0.11?package-id=fa451b6cb5b87d8b", + "name": "ono", + "version": "4.0.11", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ono:ono:4.0.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/ono@4.0.11" + }, + { + "type": "library", + "bom-ref": "pkg:npm/open@7.0.3?package-id=e322f447d74a3239", + "name": "open", + "version": "7.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:open:open:7.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/open@7.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/open@7.4.2?package-id=a9b236167b5e7692", + "name": "open", + "version": "7.4.2", + "cpe": "cpe:2.3:a:open:open:7.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/open@7.4.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/opencollective-postinstall@2.0.3?package-id=9d6d28fa89f8f1c2", + "name": "opencollective-postinstall", + "version": "2.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:opencollective-postinstall:opencollective-postinstall:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/opencollective-postinstall@2.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/opener@1.5.1?package-id=ce5e8fa3d5729c13", + "name": "opener", + "version": "1.5.1", + "licenses": [ + { + "license": { + "name": "(WTFPL OR MIT)" + } + } + ], + "cpe": "cpe:2.3:a:opener:opener:1.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/opener@1.5.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/opn@5.5.0?package-id=e9ac4f5b202c5c49", + "name": "opn", + "version": "5.5.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:opn:opn:5.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/opn@5.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/optimist@0.6.1?package-id=94bb7757583dd2b9", + "name": "optimist", + "version": "0.6.1", + "licenses": [ + { + "license": { + "name": "MIT/X11" + } + } + ], + "cpe": "cpe:2.3:a:optimist:optimist:0.6.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/optimist@0.6.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ora@4.0.3?package-id=3c8edc1c2ac9b394", + "name": "ora", + "version": "4.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ora:ora:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/ora@4.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/ordereddict@1.1?package-id=e10911d86c0762c", + "name": "ordereddict", + "version": "1.1", + "cpe": "cpe:2.3:a:python-ordereddict:python-ordereddict:1.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/ordereddict@1.1" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/ordereddict@1.1?package-id=dad3802fefb38d7", + "name": "ordereddict", + "version": "1.1", + "cpe": "cpe:2.3:a:python-ordereddict:python-ordereddict:1.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/ordereddict@1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/original@1.0.2?package-id=bc3dc5d20a385aa2", + "name": "original", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:original:original:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/original@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/os-browserify@0.3.0?package-id=f1b0eb3e8d70757f", + "name": "os-browserify", + "version": "0.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:os-browserify:os-browserify:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/os-browserify@0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/os-homedir@1.0.2?package-id=e2069ccb6e776763", + "name": "os-homedir", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:os-homedir:os-homedir:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/os-homedir@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/os-locale@3.1.0?package-id=6085dae6b90f6cd6", + "name": "os-locale", + "version": "3.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:os-locale:os-locale:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/os-locale@3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/os-tmpdir@1.0.2?package-id=bc79766395558f38", + "name": "os-tmpdir", + "version": "1.0.2", + "cpe": "cpe:2.3:a:os-tmpdir:os-tmpdir:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/os-tmpdir@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/os-tmpdir@1.0.2?package-id=56963e28e9ca14c7", + "name": "os-tmpdir", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:os-tmpdir:os-tmpdir:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/os-tmpdir@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/osenv@0.1.5?package-id=f39619a86bfaf17b", + "name": "osenv", + "version": "0.1.5", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:osenv:osenv:0.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/osenv@0.1.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-defer@1.0.0?package-id=bb096c20e423fe08", + "name": "p-defer", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-defer:p-defer:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-defer@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-finally@1.0.0?package-id=a3966c804dcfe154", + "name": "p-finally", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-finally:p-finally:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-finally@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-is-promise@2.1.0?package-id=56f76838055ab1f1", + "name": "p-is-promise", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-is-promise:p-is-promise:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-is-promise@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-limit@2.2.2?package-id=88dca81416a59dc0", + "name": "p-limit", + "version": "2.2.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-limit:p-limit:2.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-limit@2.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-limit@2.3.0?package-id=cbb5402e301ecef8", + "name": "p-limit", + "version": "2.3.0", + "cpe": "cpe:2.3:a:p-limit:p-limit:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-limit@2.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-locate@3.0.0?package-id=e72c01b7e2b633da", + "name": "p-locate", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-locate:p-locate:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-locate@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-locate@4.1.0?package-id=71adf0f15627119b", + "name": "p-locate", + "version": "4.1.0", + "cpe": "cpe:2.3:a:p-locate:p-locate:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-locate@4.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-map@3.0.0?package-id=9934f9b6b41be60a", + "name": "p-map", + "version": "3.0.0", + "cpe": "cpe:2.3:a:p-map:p-map:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-map@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-map@3.0.0?package-id=37709a083faa225b", + "name": "p-map", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-map:p-map:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-map@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-retry@3.0.1?package-id=94daf3326a3ade66", + "name": "p-retry", + "version": "3.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-retry:p-retry:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-retry@3.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-try@2.2.0?package-id=63e742e03485e670", + "name": "p-try", + "version": "2.2.0", + "cpe": "cpe:2.3:a:p-try:p-try:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-try@2.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-try@2.2.0?package-id=dc056082b22f425c", + "name": "p-try", + "version": "2.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-try:p-try:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-try@2.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/package-hash@4.0.0?package-id=7437fc0765ca9c6b", + "name": "package-hash", + "version": "4.0.0", + "cpe": "cpe:2.3:a:package-hash:package-hash:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/package-hash@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pacote@9.5.12?package-id=2de0c4b4341bfb80", + "name": "pacote", + "version": "9.5.12", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pacote:pacote:9.5.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/pacote@9.5.12" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pako@1.0.11?package-id=4ba4360c0ee4894b", + "name": "pako", + "version": "1.0.11", + "licenses": [ + { + "license": { + "name": "(MIT AND Zlib)" + } + } + ], + "cpe": "cpe:2.3:a:pako:pako:1.0.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/pako@1.0.11" + }, + { + "type": "library", + "bom-ref": "pkg:npm/parallel-transform@1.2.0?package-id=f9cd3dfe0a235120", + "name": "parallel-transform", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:parallel-transform:parallel-transform:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/parallel-transform@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/parse-asn1@5.1.5?package-id=f731f96f925b1c96", + "name": "parse-asn1", + "version": "5.1.5", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:parse-asn1:parse-asn1:5.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/parse-asn1@5.1.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/parse-json@4.0.0?package-id=3a70074f86ba1403", + "name": "parse-json", + "version": "4.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:parse-json:parse-json:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/parse-json@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/parse-ms@2.1.0?package-id=7edc7327741c8b27", + "name": "parse-ms", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:parse-ms:parse-ms:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/parse-ms@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/parse5@5.1.1?package-id=e09fd15ec4102db5", + "name": "parse5", + "version": "5.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:parse5:parse5:5.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/parse5@5.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/parseqs@0.0.5?package-id=7510723b232c24e", + "name": "parseqs", + "version": "0.0.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:parseqs:parseqs:0.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/parseqs@0.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/parseuri@0.0.5?package-id=b085e30065129e86", + "name": "parseuri", + "version": "0.0.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:parseuri:parseuri:0.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/parseuri@0.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/parseurl@1.3.3?package-id=7837722feef427b0", + "name": "parseurl", + "version": "1.3.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:parseurl:parseurl:1.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/parseurl@1.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pascalcase@0.1.1?package-id=31b2fc8a0ab447b", + "name": "pascalcase", + "version": "0.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pascalcase:pascalcase:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/pascalcase@0.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/patch-package@6.2.1?package-id=45fc37626f7c5fbc", + "name": "patch-package", + "version": "6.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:patch-package:patch-package:6.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/patch-package@6.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/patch-package@6.4.7?package-id=311beb23575c9675", + "name": "patch-package", + "version": "6.4.7", + "cpe": "cpe:2.3:a:patch-package:patch-package:6.4.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/patch-package@6.4.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-browserify@0.0.1?package-id=2106fb448613a61a", + "name": "path-browserify", + "version": "0.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-browserify:path-browserify:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-browserify@0.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-dirname@1.0.2?package-id=e9c68a37b691f1ff", + "name": "path-dirname", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-dirname:path-dirname:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-dirname@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-exists@3.0.0?package-id=af7c0f633d70e35c", + "name": "path-exists", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-exists:path-exists:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-exists@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-exists@4.0.0?package-id=2aee643c9e3d5aea", + "name": "path-exists", + "version": "4.0.0", + "cpe": "cpe:2.3:a:path-exists:path-exists:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-exists@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=ec076698e4ff14d9", + "name": "path-is-absolute", + "version": "1.0.1", + "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-is-absolute@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=63efebde31dd6c2e", + "name": "path-is-absolute", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-is-absolute@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-is-inside@1.0.2?package-id=15494330bf8439ac", + "name": "path-is-inside", + "version": "1.0.2", + "licenses": [ + { + "license": { + "name": "(WTFPL OR MIT)" + } + } + ], + "cpe": "cpe:2.3:a:path-is-inside:path-is-inside:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-is-inside@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-key@2.0.1?package-id=25ad1fccaa12bbab", + "name": "path-key", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-key:path-key:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-key@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-key@3.1.1?package-id=be67c15828e3e42f", + "name": "path-key", + "version": "3.1.1", + "cpe": "cpe:2.3:a:path-key:path-key:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-key@3.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-parse@1.0.6?package-id=f1487de331d27b67", + "name": "path-parse", + "version": "1.0.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-parse:path-parse:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-parse@1.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-to-regexp@0.1.7?package-id=e51d6c6e1168ef53", + "name": "path-to-regexp", + "version": "0.1.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-to-regexp:path-to-regexp:0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-to-regexp@0.1.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-type@3.0.0?package-id=fa7835cbc3b97160", + "name": "path-type", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-type:path-type:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-type@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pbkdf2@3.0.17?package-id=360e47123f033ff3", + "name": "pbkdf2", + "version": "3.0.17", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pbkdf2:pbkdf2:3.0.17:*:*:*:*:*:*:*", + "purl": "pkg:npm/pbkdf2@3.0.17" + }, + { + "type": "library", + "bom-ref": "pkg:npm/performance-now@2.1.0?package-id=1f9e7e0e96f42aad", + "name": "performance-now", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:performance-now:performance-now:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/performance-now@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/picocolors@1.0.0?package-id=90b8a17c0c3a911a", + "name": "picocolors", + "version": "1.0.0", + "cpe": "cpe:2.3:a:picocolors:picocolors:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/picocolors@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/picomatch@2.2.2?package-id=8655f465988fd9d8", + "name": "picomatch", + "version": "2.2.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:picomatch:picomatch:2.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/picomatch@2.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/picomatch@2.3.0?package-id=f54a001bdd7adc19", + "name": "picomatch", + "version": "2.3.0", + "cpe": "cpe:2.3:a:picomatch:picomatch:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/picomatch@2.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pify@4.0.1?package-id=ce60dbe1432661fd", + "name": "pify", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pify:pify:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/pify@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pinkie@2.0.4?package-id=2b435bfd00559c92", + "name": "pinkie", + "version": "2.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pinkie:pinkie:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/pinkie@2.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pinkie-promise@2.0.1?package-id=d9e4d2b200a9349a", + "name": "pinkie-promise", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pinkie-promise:pinkie-promise:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/pinkie-promise@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pkg-dir@3.0.0?package-id=ba8b2adac549ac5f", + "name": "pkg-dir", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pkg-dir:pkg-dir:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pkg-dir@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pkg-dir@4.2.0?package-id=96e3abb5ab075eea", + "name": "pkg-dir", + "version": "4.2.0", + "cpe": "cpe:2.3:a:pkg-dir:pkg-dir:4.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pkg-dir@4.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pkg-up@2.0.0?package-id=3a917d27e3e19195", + "name": "pkg-up", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pkg-up:pkg-up:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pkg-up@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/portfinder@1.0.26?package-id=eac9a95db5b0879a", + "name": "portfinder", + "version": "1.0.26", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:portfinder:portfinder:1.0.26:*:*:*:*:*:*:*", + "purl": "pkg:npm/portfinder@1.0.26" + }, + { + "type": "library", + "bom-ref": "pkg:npm/posix-character-classes@0.1.1?package-id=594578edf526d2f7", + "name": "posix-character-classes", + "version": "0.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:posix-character-classes:posix-character-classes:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/posix-character-classes@0.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss@7.0.27?package-id=246d7045cf33bca6", + "name": "postcss", + "version": "7.0.27", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss:postcss:7.0.27:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss@7.0.27" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-calc@7.0.2?package-id=2887da09cd05fb51", + "name": "postcss-calc", + "version": "7.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-calc:postcss-calc:7.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-calc@7.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-colormin@4.0.3?package-id=1075b84e9814a64c", + "name": "postcss-colormin", + "version": "4.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-colormin:postcss-colormin:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-colormin@4.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-convert-values@4.0.1?package-id=39911a4fd7dad9ba", + "name": "postcss-convert-values", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-convert-values:postcss-convert-values:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-convert-values@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-discard-comments@4.0.2?package-id=3e4dfec1cd395e10", + "name": "postcss-discard-comments", + "version": "4.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-discard-comments:postcss-discard-comments:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-discard-comments@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-discard-duplicates@4.0.2?package-id=ce373ff9ffc9e72e", + "name": "postcss-discard-duplicates", + "version": "4.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-discard-duplicates:postcss-discard-duplicates:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-discard-duplicates@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-discard-empty@4.0.1?package-id=5f205034080ef129", + "name": "postcss-discard-empty", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-discard-empty:postcss-discard-empty:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-discard-empty@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-discard-overridden@4.0.1?package-id=ac66f7015238d771", + "name": "postcss-discard-overridden", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-discard-overridden:postcss-discard-overridden:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-discard-overridden@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-import@12.0.1?package-id=e9238285c3c0c403", + "name": "postcss-import", + "version": "12.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-import:postcss-import:12.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-import@12.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-load-config@2.1.0?package-id=de748ebac04b3320", + "name": "postcss-load-config", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-load-config:postcss-load-config:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-load-config@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-loader@3.0.0?package-id=784d6ea551e576ee", + "name": "postcss-loader", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-loader:postcss-loader:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-loader@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-merge-longhand@4.0.11?package-id=fd995756c137ec3d", + "name": "postcss-merge-longhand", + "version": "4.0.11", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-merge-longhand:postcss-merge-longhand:4.0.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-merge-longhand@4.0.11" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-merge-rules@4.0.3?package-id=260b237820203746", + "name": "postcss-merge-rules", + "version": "4.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-merge-rules:postcss-merge-rules:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-merge-rules@4.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-minify-font-values@4.0.2?package-id=3b050db57cb988ac", + "name": "postcss-minify-font-values", + "version": "4.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-minify-font-values:postcss-minify-font-values:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-minify-font-values@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-minify-gradients@4.0.2?package-id=da6f909de3c07682", + "name": "postcss-minify-gradients", + "version": "4.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-minify-gradients:postcss-minify-gradients:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-minify-gradients@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-minify-params@4.0.2?package-id=924998d027e0124b", + "name": "postcss-minify-params", + "version": "4.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-minify-params:postcss-minify-params:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-minify-params@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-minify-selectors@4.0.2?package-id=1c97c10f882d209b", + "name": "postcss-minify-selectors", + "version": "4.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-minify-selectors:postcss-minify-selectors:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-minify-selectors@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-modules-extract-imports@2.0.0?package-id=78cf0307c20ef65f", + "name": "postcss-modules-extract-imports", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:postcss-modules-extract-imports:postcss-modules-extract-imports:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-modules-extract-imports@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-modules-local-by-default@3.0.2?package-id=431f5d7d099c64bc", + "name": "postcss-modules-local-by-default", + "version": "3.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-modules-local-by-default:postcss-modules-local-by-default:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-modules-local-by-default@3.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-modules-scope@2.2.0?package-id=f8c925c63ae1eac0", + "name": "postcss-modules-scope", + "version": "2.2.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:postcss-modules-scope:postcss-modules-scope:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-modules-scope@2.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-modules-values@3.0.0?package-id=2ba7ee6f26ef5a6b", + "name": "postcss-modules-values", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:postcss-modules-values:postcss-modules-values:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-modules-values@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-normalize-charset@4.0.1?package-id=992f5f490c026e24", + "name": "postcss-normalize-charset", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-normalize-charset:postcss-normalize-charset:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-normalize-charset@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-normalize-display-values@4.0.2?package-id=3087b710a7f9b59f", + "name": "postcss-normalize-display-values", + "version": "4.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-normalize-display-values:postcss-normalize-display-values:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-normalize-display-values@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-normalize-positions@4.0.2?package-id=13a1b159e2363643", + "name": "postcss-normalize-positions", + "version": "4.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-normalize-positions:postcss-normalize-positions:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-normalize-positions@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-normalize-repeat-style@4.0.2?package-id=75b3e01e4566f9b0", + "name": "postcss-normalize-repeat-style", + "version": "4.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-normalize-repeat-style:postcss-normalize-repeat-style:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-normalize-repeat-style@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-normalize-string@4.0.2?package-id=563a19e0f405a82", + "name": "postcss-normalize-string", + "version": "4.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-normalize-string:postcss-normalize-string:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-normalize-string@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-normalize-timing-functions@4.0.2?package-id=83f8f4618880d9d6", + "name": "postcss-normalize-timing-functions", + "version": "4.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-normalize-timing-functions:postcss-normalize-timing-functions:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-normalize-timing-functions@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-normalize-unicode@4.0.1?package-id=1bd095fda8e2d03b", + "name": "postcss-normalize-unicode", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-normalize-unicode:postcss-normalize-unicode:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-normalize-unicode@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-normalize-url@4.0.1?package-id=dab635957f6883e", + "name": "postcss-normalize-url", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-normalize-url:postcss-normalize-url:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-normalize-url@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-normalize-whitespace@4.0.2?package-id=d0d558d27a083d78", + "name": "postcss-normalize-whitespace", + "version": "4.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-normalize-whitespace:postcss-normalize-whitespace:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-normalize-whitespace@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-ordered-values@4.1.2?package-id=cea3f2c3dcba83db", + "name": "postcss-ordered-values", + "version": "4.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-ordered-values:postcss-ordered-values:4.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-ordered-values@4.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-reduce-initial@4.0.3?package-id=5e098d4ba83a4055", + "name": "postcss-reduce-initial", + "version": "4.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-reduce-initial:postcss-reduce-initial:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-reduce-initial@4.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-reduce-transforms@4.0.2?package-id=ca27c2b2c773c37f", + "name": "postcss-reduce-transforms", + "version": "4.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-reduce-transforms:postcss-reduce-transforms:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-reduce-transforms@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-selector-parser@6.0.2?package-id=a2e46a351dde45eb", + "name": "postcss-selector-parser", + "version": "6.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-selector-parser:postcss-selector-parser:6.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-selector-parser@6.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-svgo@4.0.2?package-id=ba2251abcf979f57", + "name": "postcss-svgo", + "version": "4.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-svgo:postcss-svgo:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-svgo@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-unique-selectors@4.0.1?package-id=a96d3dbb52682610", + "name": "postcss-unique-selectors", + "version": "4.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-unique-selectors:postcss-unique-selectors:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-unique-selectors@4.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-value-parser@4.1.0?package-id=7471211623391218", + "name": "postcss-value-parser", + "version": "4.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-value-parser:postcss-value-parser:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-value-parser@4.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/prepend-http@1.0.4?package-id=aea29c46e49b2f46", + "name": "prepend-http", + "version": "1.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:prepend-http:prepend-http:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/prepend-http@1.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/prettier@1.19.1?package-id=fe0b8232df243c65", + "name": "prettier", + "version": "1.19.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:prettier:prettier:1.19.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/prettier@1.19.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pretty-checkbox@3.0.3?package-id=22de522bdb50c64d", + "name": "pretty-checkbox", + "version": "3.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pretty-checkbox:pretty-checkbox:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/pretty-checkbox@3.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pretty-ms@6.0.1?package-id=7d48550cbd0fe6be", + "name": "pretty-ms", + "version": "6.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pretty-ms:pretty-ms:6.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/pretty-ms@6.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/private@0.1.8?package-id=d36b80883148095f", + "name": "private", + "version": "0.1.8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:private:private:0.1.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/private@0.1.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/process@0.11.10?package-id=20d4f594afd5a93d", + "name": "process", + "version": "0.11.10", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:process:process:0.11.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/process@0.11.10" + }, + { + "type": "library", + "bom-ref": "pkg:npm/process-nextick-args@2.0.1?package-id=c28603c1f456c61", + "name": "process-nextick-args", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:process-nextick-args:process-nextick-args:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/process-nextick-args@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/process-on-spawn@1.0.0?package-id=f100305603116cea", + "name": "process-on-spawn", + "version": "1.0.0", + "cpe": "cpe:2.3:a:process-on-spawn:process-on-spawn:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/process-on-spawn@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise@7.3.1?package-id=388c95e4365039d5", + "name": "promise", + "version": "7.3.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:promise:promise:7.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise@7.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-inflight@1.0.1?package-id=e6a9bc0e89e81222", + "name": "promise-inflight", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promise-inflight:promise-inflight:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-inflight@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-polyfill@8.2.1?package-id=fce25f1082426660", + "name": "promise-polyfill", + "version": "8.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:promise-polyfill:promise-polyfill:8.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-polyfill@8.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-retry@1.1.1?package-id=1e09d42d4a165dca", + "name": "promise-retry", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:promise-retry:promise-retry:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-retry@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/protoduck@5.0.1?package-id=19018fe2c8d93ecd", + "name": "protoduck", + "version": "5.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:protoduck:protoduck:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/protoduck@5.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/protractor@5.4.3?package-id=59f6df420d1b84f1", + "name": "protractor", + "version": "5.4.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:protractor:protractor:5.4.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/protractor@5.4.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/protractor-beautiful-reporter@1.3.6?package-id=f02b19e4e729aca2", + "name": "protractor-beautiful-reporter", + "version": "1.3.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:protractor-beautiful-reporter:protractor-beautiful-reporter:1.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/protractor-beautiful-reporter@1.3.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/protractor-jasmine2-screenshot-reporter@0.5.0?package-id=51e830b3573538c1", + "name": "protractor-jasmine2-screenshot-reporter", + "version": "0.5.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:protractor-jasmine2-screenshot-reporter:protractor-jasmine2-screenshot-reporter:0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/protractor-jasmine2-screenshot-reporter@0.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/proxy-addr@2.0.6?package-id=9dd760f33511f985", + "name": "proxy-addr", + "version": "2.0.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:proxy-addr:proxy-addr:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/proxy-addr@2.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/prr@1.0.1?package-id=86708f0420595e28", + "name": "prr", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:prr:prr:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/prr@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pseudomap@1.0.2?package-id=3bc60dc92b6f3858", + "name": "pseudomap", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:pseudomap:pseudomap:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/pseudomap@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/psl@1.7.0?package-id=ed79cb1c8ea88468", + "name": "psl", + "version": "1.7.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:psl:psl:1.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/psl@1.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/public-encrypt@4.0.3?package-id=6d9daff267cc3797", + "name": "public-encrypt", + "version": "4.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:public-encrypt:public-encrypt:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/public-encrypt@4.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pump@3.0.0?package-id=da201e2347bcef10", + "name": "pump", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pump:pump:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pump@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pumpify@1.5.1?package-id=8008ef6a6b1f2344", + "name": "pumpify", + "version": "1.5.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pumpify:pumpify:1.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/pumpify@1.5.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/punycode@1.3.2?package-id=7173498793a41163", + "name": "punycode", + "version": "1.3.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:punycode:punycode:1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/punycode@1.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/q@1.5.1?package-id=7c157b6ddcdbf3b3", + "name": "q", + "version": "1.5.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:q:q:1.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/q@1.5.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/qjobs@1.2.0?package-id=13d974ee22ed3f8", + "name": "qjobs", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:qjobs:qjobs:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/qjobs@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/qs@6.5.2?package-id=9d82cde2c8f92c38", + "name": "qs", + "version": "6.5.2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:qs:qs:6.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/qs@6.5.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/query-string@4.3.4?package-id=b467b74e753bb357", + "name": "query-string", + "version": "4.3.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:query-string:query-string:4.3.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/query-string@4.3.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/querystring@0.2.0?package-id=cc0e7a8744153abb", + "name": "querystring", + "version": "0.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:querystring:querystring:0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/querystring@0.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/querystring-es3@0.2.1?package-id=afc2e57875341023", + "name": "querystring-es3", + "version": "0.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:querystring-es3:querystring-es3:0.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/querystring-es3@0.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/querystringify@2.1.1?package-id=b1cbe39b483176e0", + "name": "querystringify", + "version": "2.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:querystringify:querystringify:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/querystringify@2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ramda@0.25.0?package-id=188615358cc0a968", + "name": "ramda", + "version": "0.25.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ramda:ramda:0.25.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ramda@0.25.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/randombytes@2.1.0?package-id=c17750c48e6ea6ec", + "name": "randombytes", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:randombytes:randombytes:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/randombytes@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/randomfill@1.0.4?package-id=9426a6a54e52f952", + "name": "randomfill", + "version": "1.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:randomfill:randomfill:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/randomfill@1.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/range-parser@1.2.1?package-id=6ab0f3a46dedd336", + "name": "range-parser", + "version": "1.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:range-parser:range-parser:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/range-parser@1.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/raw-body@2.4.0?package-id=382b72783914bebe", + "name": "raw-body", + "version": "2.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:raw-body:raw-body:2.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/raw-body@2.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/raw-loader@4.0.0?package-id=6a368c3d5898b172", + "name": "raw-loader", + "version": "4.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:raw-loader:raw-loader:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/raw-loader@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-cache@1.0.0?package-id=c9c02548e6e5c768", + "name": "read-cache", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:read-cache:read-cache:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-cache@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-package-json@2.1.1?package-id=cb58b2704453cd4f", + "name": "read-package-json", + "version": "2.1.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-package-json:read-package-json:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-package-json@2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-package-tree@5.3.1?package-id=1c19dafd709abd3c", + "name": "read-package-tree", + "version": "5.3.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-package-tree:read-package-tree:5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-package-tree@5.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-pkg@1.1.0?package-id=dd8706131c77dafa", + "name": "read-pkg", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:read-pkg:read-pkg:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-pkg@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-pkg-up@1.0.1?package-id=b98e55f3e6645d6", + "name": "read-pkg-up", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:read-pkg-up:read-pkg-up:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-pkg-up@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.7?package-id=37e94b9d3967def8", + "name": "readable-stream", + "version": "2.3.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/readdir-scoped-modules@1.1.0?package-id=a72d7b0c99b081fe", + "name": "readdir-scoped-modules", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:readdir-scoped-modules:readdir-scoped-modules:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/readdir-scoped-modules@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/readdirp@3.3.0?package-id=886d02d356678608", + "name": "readdirp", + "version": "3.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readdirp:readdirp:3.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/readdirp@3.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/recast@0.19.1?package-id=33fe5b12dde2bc4a", + "name": "recast", + "version": "0.19.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:recast:recast:0.19.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/recast@0.19.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/redent@1.0.0?package-id=d3c398bd6fb56a2a", + "name": "redent", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:redent:redent:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/redent@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/reflect-metadata@0.1.13?package-id=f81d1b46f7ec482c", + "name": "reflect-metadata", + "version": "0.1.13", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:reflect-metadata:reflect-metadata:0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/reflect-metadata@0.1.13" + }, + { + "type": "library", + "bom-ref": "pkg:npm/regenerate@1.4.0?package-id=e6776e7063ca7e1a", + "name": "regenerate", + "version": "1.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:regenerate:regenerate:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/regenerate@1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/regenerate-unicode-properties@8.2.0?package-id=f2b481c75753751d", + "name": "regenerate-unicode-properties", + "version": "8.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:regenerate-unicode-properties:regenerate-unicode-properties:8.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/regenerate-unicode-properties@8.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/regenerator-runtime@0.13.5?package-id=e60ca585418462c7", + "name": "regenerator-runtime", + "version": "0.13.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:regenerator-runtime:regenerator-runtime:0.13.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/regenerator-runtime@0.13.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/regenerator-transform@0.14.4?package-id=f3fa9fff2cac387e", + "name": "regenerator-transform", + "version": "0.14.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:regenerator-transform:regenerator-transform:0.14.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/regenerator-transform@0.14.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/regex-not@1.0.2?package-id=db256d17333d9b26", + "name": "regex-not", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:regex-not:regex-not:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/regex-not@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/regexp.prototype.flags@1.3.0?package-id=99aabe9b3916e4a2", + "name": "regexp.prototype.flags", + "version": "1.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:regexp.prototype.flags:regexp.prototype.flags:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/regexp.prototype.flags@1.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/regexpu-core@4.7.0?package-id=898d6e3142949b37", + "name": "regexpu-core", + "version": "4.7.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:regexpu-core:regexpu-core:4.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/regexpu-core@4.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/regjsgen@0.5.1?package-id=5220fef0b074ca5f", + "name": "regjsgen", + "version": "0.5.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:regjsgen:regjsgen:0.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/regjsgen@0.5.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/regjsparser@0.6.4?package-id=1980156de22a4857", + "name": "regjsparser", + "version": "0.6.4", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:regjsparser:regjsparser:0.6.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/regjsparser@0.6.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/release-zalgo@1.0.0?package-id=db5703d1bd7bba58", + "name": "release-zalgo", + "version": "1.0.0", + "cpe": "cpe:2.3:a:release-zalgo:release-zalgo:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/release-zalgo@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/remove-trailing-separator@1.1.0?package-id=bdd0025381df0592", + "name": "remove-trailing-separator", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:remove-trailing-separator:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/remove-trailing-separator@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/repeat-element@1.1.3?package-id=7a5628791419538c", + "name": "repeat-element", + "version": "1.1.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:repeat-element:repeat-element:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/repeat-element@1.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/repeat-string@1.6.1?package-id=389a9f24ee816b1d", + "name": "repeat-string", + "version": "1.6.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:repeat-string:repeat-string:1.6.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/repeat-string@1.6.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/repeating@2.0.1?package-id=b75c2d3ed822953", + "name": "repeating", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:repeating:repeating:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/repeating@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/request@2.88.2?package-id=4634e70e292d207a", + "name": "request", + "version": "2.88.2", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:request:request:2.88.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/request@2.88.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/request-promise-core@1.1.3?package-id=f1b498835581058f", + "name": "request-promise-core", + "version": "1.1.3", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:request-promise-core:request-promise-core:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/request-promise-core@1.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/request-promise-native@1.0.8?package-id=8a01800dc1815499", + "name": "request-promise-native", + "version": "1.0.8", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:request-promise-native:request-promise-native:1.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/request-promise-native@1.0.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/require-directory@2.1.1?package-id=2ed1ecf732e63081", + "name": "require-directory", + "version": "2.1.1", + "cpe": "cpe:2.3:a:require-directory:require-directory:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/require-directory@2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/require-directory@2.1.1?package-id=d50a6fdfc44fabcb", + "name": "require-directory", + "version": "2.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:require-directory:require-directory:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/require-directory@2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/require-main-filename@1.0.1?package-id=350a6468a29f76c0", + "name": "require-main-filename", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:require-main-filename:require-main-filename:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/require-main-filename@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/require-main-filename@2.0.0?package-id=8abd518d7d234eba", + "name": "require-main-filename", + "version": "2.0.0", + "cpe": "cpe:2.3:a:require-main-filename:require-main-filename:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/require-main-filename@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/requires-port@1.0.0?package-id=6a273325b79a1db9", + "name": "requires-port", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:requires-port:requires-port:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/requires-port@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/resize-observer-polyfill@1.5.1?package-id=89a08d4f3d5e5c61", + "name": "resize-observer-polyfill", + "version": "1.5.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:resize-observer-polyfill:resize-observer-polyfill:1.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/resize-observer-polyfill@1.5.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/resolve@1.15.1?package-id=39bfb438c9d35862", + "name": "resolve", + "version": "1.15.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:resolve:resolve:1.15.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/resolve@1.15.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/resolve-cwd@2.0.0?package-id=d535f68a0696c34a", + "name": "resolve-cwd", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:resolve-cwd:resolve-cwd:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/resolve-cwd@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/resolve-from@3.0.0?package-id=d1aefd38347cbb84", + "name": "resolve-from", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:resolve-from:resolve-from:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/resolve-from@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/resolve-from@5.0.0?package-id=30c4894f8cd93901", + "name": "resolve-from", + "version": "5.0.0", + "cpe": "cpe:2.3:a:resolve-from:resolve-from:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/resolve-from@5.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/resolve-url@0.2.1?package-id=f499f186cfcb1f57", + "name": "resolve-url", + "version": "0.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:resolve-url:resolve-url:0.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/resolve-url@0.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/restore-cursor@3.1.0?package-id=ae480bf27ec3e497", + "name": "restore-cursor", + "version": "3.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:restore-cursor:restore-cursor:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/restore-cursor@3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ret@0.1.15?package-id=29098e150f3c8d92", + "name": "ret", + "version": "0.1.15", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ret:ret:0.1.15:*:*:*:*:*:*:*", + "purl": "pkg:npm/ret@0.1.15" + }, + { + "type": "library", + "bom-ref": "pkg:npm/retry@0.12.0?package-id=248c574d879f4d9a", + "name": "retry", + "version": "0.12.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:retry:retry:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/retry@0.12.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/rfdc@1.1.4?package-id=7a645a2919b48d2b", + "name": "rfdc", + "version": "1.1.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:rfdc:rfdc:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/rfdc@1.1.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/rgb-regex@1.0.1?package-id=47dc7272ea584193", + "name": "rgb-regex", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:rgb-regex:rgb-regex:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/rgb-regex@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/rgba-regex@1.0.0?package-id=770424dcbd7bcc5", + "name": "rgba-regex", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:rgba-regex:rgba-regex:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/rgba-regex@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/rimraf@3.0.2?package-id=202bff53aafddeef", + "name": "rimraf", + "version": "3.0.2", + "cpe": "cpe:2.3:a:rimraf:rimraf:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/rimraf@3.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/rimraf@3.0.2?package-id=e94efbdfea35d1c0", + "name": "rimraf", + "version": "3.0.2", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:rimraf:rimraf:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/rimraf@3.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ripemd160@2.0.2?package-id=9f2124f0db9d4c1f", + "name": "ripemd160", + "version": "2.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ripemd160:ripemd160:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ripemd160@2.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/rollup@2.1.0?package-id=f85ea06044ecca4a", + "name": "rollup", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:rollup:rollup:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/rollup@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/run-async@2.4.1?package-id=7b855d78f0ad1d83", + "name": "run-async", + "version": "2.4.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:run-async:run-async:2.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/run-async@2.4.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/run-queue@1.0.3?package-id=9551cdeefb2e4ce5", + "name": "run-queue", + "version": "1.0.3", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:run-queue:run-queue:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/run-queue@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/rxjs@6.5.5?package-id=6c4d06e06259ee5f", + "name": "rxjs", + "version": "6.5.5", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:rxjs:rxjs:6.5.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/rxjs@6.5.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=2fdf92a5fa50bede", + "name": "safe-buffer", + "version": "5.1.2", + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=49d265d1cbcc6263", + "name": "safe-buffer", + "version": "5.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-regex@1.1.0?package-id=228b9a748da4df4c", + "name": "safe-regex", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-regex:safe-regex:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-regex@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=8590432c1ecbd629", + "name": "safer-buffer", + "version": "2.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safer-buffer@2.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/sanitize-filename@1.6.3?package-id=bbd35a31ba18223c", + "name": "sanitize-filename", + "version": "1.6.3", + "licenses": [ + { + "license": { + "name": "WTFPL OR ISC" + } + } + ], + "cpe": "cpe:2.3:a:sanitize-filename:sanitize-filename:1.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/sanitize-filename@1.6.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/sass@1.26.3?package-id=f22da0d35db962b1", + "name": "sass", + "version": "1.26.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sass:sass:1.26.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/sass@1.26.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/sass-graph@2.2.5?package-id=194903adf33b1dfe", + "name": "sass-graph", + "version": "2.2.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sass-graph:sass-graph:2.2.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/sass-graph@2.2.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/sass-loader@8.0.2?package-id=7c45a3c99c46e60f", + "name": "sass-loader", + "version": "8.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sass-loader:sass-loader:8.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/sass-loader@8.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/saucelabs@1.5.0?package-id=a5f8c67fa665ea6f", + "name": "saucelabs", + "version": "1.5.0", + "cpe": "cpe:2.3:a:saucelabs:saucelabs:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/saucelabs@1.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/sax@1.2.4?package-id=f596b5408ec8797f", + "name": "sax", + "version": "1.2.4", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:sax:sax:1.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/sax@1.2.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/schema-utils@2.6.6?package-id=b03b87eeebe46a7f", + "name": "schema-utils", + "version": "2.6.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:schema-utils:schema-utils:2.6.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/schema-utils@2.6.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/scss-tokenizer@0.2.3?package-id=8565406882d430c6", + "name": "scss-tokenizer", + "version": "0.2.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:scss-tokenizer:scss-tokenizer:0.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/scss-tokenizer@0.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/select-hose@2.0.0?package-id=8af66a5b2fd8e7e9", + "name": "select-hose", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:select-hose:select-hose:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/select-hose@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/selenium-webdriver@3.6.0?package-id=d533dd4a412f8494", + "name": "selenium-webdriver", + "version": "3.6.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:selenium-webdriver:selenium-webdriver:3.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/selenium-webdriver@3.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/selfsigned@1.10.7?package-id=bad3f3a650ae9088", + "name": "selfsigned", + "version": "1.10.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:selfsigned:selfsigned:1.10.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/selfsigned@1.10.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver@6.3.0?package-id=9efb7de7198fcb1b", + "name": "semver", + "version": "6.3.0", + "cpe": "cpe:2.3:a:semver:semver:6.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver@6.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver@6.3.0?package-id=6c0c5fa7aaf83396", + "name": "semver", + "version": "6.3.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:semver:semver:6.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver@6.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver-dsl@1.0.1?package-id=de7fe536e7bf9f94", + "name": "semver-dsl", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:semver-dsl:semver-dsl:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver-dsl@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver-intersect@1.4.0?package-id=cec5404734249cf8", + "name": "semver-intersect", + "version": "1.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:semver-intersect:semver-intersect:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver-intersect@1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/send@0.17.1?package-id=f1e7d9325db96d69", + "name": "send", + "version": "0.17.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:send:send:0.17.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/send@0.17.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/serialize-javascript@2.1.2?package-id=cec685fec3ee75d0", + "name": "serialize-javascript", + "version": "2.1.2", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:serialize-javascript:serialize-javascript:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/serialize-javascript@2.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/serve-index@1.9.1?package-id=a5c034e8f1db52c3", + "name": "serve-index", + "version": "1.9.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:serve-index:serve-index:1.9.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/serve-index@1.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/serve-static@1.14.1?package-id=5ae5bf07d57ad84c", + "name": "serve-static", + "version": "1.14.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:serve-static:serve-static:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/serve-static@1.14.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/set-blocking@2.0.0?package-id=1c62830232d6b690", + "name": "set-blocking", + "version": "2.0.0", + "cpe": "cpe:2.3:a:set-blocking:set-blocking:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/set-blocking@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/set-blocking@2.0.0?package-id=b1db40006369094d", + "name": "set-blocking", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:set-blocking:set-blocking:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/set-blocking@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/set-immediate-shim@1.0.1?package-id=6f1975be32135d7a", + "name": "set-immediate-shim", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:set-immediate-shim:set-immediate-shim:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/set-immediate-shim@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/set-value@2.0.1?package-id=cfa5c525718fdfb0", + "name": "set-value", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:set-value:set-value:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/set-value@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/setimmediate@1.0.5?package-id=bda696b52b2c73e4", + "name": "setimmediate", + "version": "1.0.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:setimmediate:setimmediate:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/setimmediate@1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/setprototypeof@1.1.1?package-id=a6f8366ddad4e2ae", + "name": "setprototypeof", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:setprototypeof:setprototypeof:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/setprototypeof@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/sha.js@2.4.11?package-id=e604810b235b3e30", + "name": "sha.js", + "version": "2.4.11", + "licenses": [ + { + "license": { + "name": "(MIT AND BSD-3-Clause)" + } + } + ], + "cpe": "cpe:2.3:a:sha.js:sha.js:2.4.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/sha.js@2.4.11" + }, + { + "type": "library", + "bom-ref": "pkg:npm/shallow-clone@3.0.1?package-id=86cc63a08b71bac1", + "name": "shallow-clone", + "version": "3.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shallow-clone:shallow-clone:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/shallow-clone@3.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/shebang-command@1.2.0?package-id=f8d4581415e4d4fe", + "name": "shebang-command", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shebang-command:shebang-command:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/shebang-command@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/shebang-command@2.0.0?package-id=8579f0fff10cc36c", + "name": "shebang-command", + "version": "2.0.0", + "cpe": "cpe:2.3:a:shebang-command:shebang-command:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/shebang-command@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/shebang-regex@1.0.0?package-id=5e14111fb14d2b5d", + "name": "shebang-regex", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shebang-regex:shebang-regex:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/shebang-regex@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/shebang-regex@3.0.0?package-id=8014040af7436731", + "name": "shebang-regex", + "version": "3.0.0", + "cpe": "cpe:2.3:a:shebang-regex:shebang-regex:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/shebang-regex@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/signal-exit@3.0.2?package-id=e96b7c4fa861a759", + "name": "signal-exit", + "version": "3.0.2", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:signal-exit:signal-exit:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/signal-exit@3.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/signal-exit@3.0.6?package-id=d52743fe48622c2b", + "name": "signal-exit", + "version": "3.0.6", + "cpe": "cpe:2.3:a:signal-exit:signal-exit:3.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/signal-exit@3.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/simple-swizzle@0.2.2?package-id=2c4c9f3679a73ac5", + "name": "simple-swizzle", + "version": "0.2.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:simple-swizzle:simple-swizzle:0.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/simple-swizzle@0.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/simplebar@5.1.0?package-id=bc0efdadf560dc6f", + "name": "simplebar", + "version": "5.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:simplebar:simplebar:5.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/simplebar@5.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/slash@1.0.0?package-id=bd0b23f8bb345aad", + "name": "slash", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:slash:slash:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/slash@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/slash@2.0.0?package-id=f62873fcb76d27ee", + "name": "slash", + "version": "2.0.0", + "cpe": "cpe:2.3:a:slash:slash:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/slash@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/smart-buffer@4.1.0?package-id=dec604430e751566", + "name": "smart-buffer", + "version": "4.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:smart-buffer:smart-buffer:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/smart-buffer@4.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/snapdragon@0.8.2?package-id=80fc60dfbdc25075", + "name": "snapdragon", + "version": "0.8.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:snapdragon:snapdragon:0.8.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/snapdragon@0.8.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/snapdragon-node@2.1.1?package-id=e5efe3f8e05298e", + "name": "snapdragon-node", + "version": "2.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:snapdragon-node:snapdragon-node:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/snapdragon-node@2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/snapdragon-util@3.0.1?package-id=2f48154bfc653cd", + "name": "snapdragon-util", + "version": "3.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:snapdragon-util:snapdragon-util:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/snapdragon-util@3.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/socket.io@2.1.1?package-id=ac1fdda089a51e5c", + "name": "socket.io", + "version": "2.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:socket.io:socket.io:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/socket.io@2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/socket.io-adapter@1.1.2?package-id=3502577d010b417", + "name": "socket.io-adapter", + "version": "1.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:socket.io-adapter:socket.io-adapter:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/socket.io-adapter@1.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/socket.io-client@2.1.1?package-id=a9152ab398f7100e", + "name": "socket.io-client", + "version": "2.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:socket.io-client:socket.io-client:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/socket.io-client@2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/socket.io-parser@3.2.0?package-id=ee9ad0eda662c3e9", + "name": "socket.io-parser", + "version": "3.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:socket.io-parser:socket.io-parser:3.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/socket.io-parser@3.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/sockjs@0.3.19?package-id=1c18d0cfea55e740", + "name": "sockjs", + "version": "0.3.19", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sockjs:sockjs:0.3.19:*:*:*:*:*:*:*", + "purl": "pkg:npm/sockjs@0.3.19" + }, + { + "type": "library", + "bom-ref": "pkg:npm/sockjs-client@1.4.0?package-id=3afdfeaa1a019e5a", + "name": "sockjs-client", + "version": "1.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sockjs-client:sockjs-client:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/sockjs-client@1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/socks@2.3.3?package-id=e440ec4211ce2113", + "name": "socks", + "version": "2.3.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:socks:socks:2.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/socks@2.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/socks-proxy-agent@4.0.2?package-id=afaefe86263fde98", + "name": "socks-proxy-agent", + "version": "4.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:socks-proxy-agent:socks-proxy-agent:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/socks-proxy-agent@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/sonar-scanner@3.1.0?package-id=925bc7a907bcbaec", + "name": "sonar-scanner", + "version": "3.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sonar-scanner:sonar-scanner:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/sonar-scanner@3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.sonarsource.scanner.api/sonar-scanner-api@2.10.0.1189?package-id=e8f695e72a1af729", + "group": "org.sonarsource.scanner.api", + "name": "sonar-scanner-api", + "version": "2.10.0.1189", + "cpe": "cpe:2.3:a:sonar-scanner-api:sonar-scanner-api:2.10.0.1189:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.sonarsource.scanner.api/sonar-scanner-api@2.10.0.1189" + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.sonarsource.scanner.api/sonar-scanner-api-batch@2.10.0.1189?package-id=7098ec9f6897fb2a", + "group": "org.sonarsource.scanner.api", + "name": "sonar-scanner-api-batch", + "version": "2.10.0.1189", + "cpe": "cpe:2.3:a:sonar-scanner-api-batch:sonar-scanner-api-batch:2.10.0.1189:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.sonarsource.scanner.api/sonar-scanner-api-batch@2.10.0.1189", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "4b98aee77d09ba6d20a8896d4d0d30976c94c7d7" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.sonarsource.scanner.api/sonar-scanner-api-batch-interface@2.10.0.1189?package-id=9e14b585ee06ab0a", + "group": "org.sonarsource.scanner.api", + "name": "sonar-scanner-api-batch-interface", + "version": "2.10.0.1189", + "cpe": "cpe:2.3:a:sonar-scanner-api-batch-interface:sonar-scanner-api-batch-interface:2.10.0.1189:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.sonarsource.scanner.api/sonar-scanner-api-batch-interface@2.10.0.1189" + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.sonarsource.scanner.cli/sonar-scanner-cli@3.1.0.1141?package-id=9277d9626f11e7e0", + "group": "org.sonarsource.scanner.cli", + "name": "sonar-scanner-cli", + "version": "3.1.0.1141", + "cpe": "cpe:2.3:a:sonar-scanner-cli:sonar-scanner-cli:3.1.0.1141:*:*:*:*:*:*:*", + "purl": "pkg:maven/org.sonarsource.scanner.cli/sonar-scanner-cli@3.1.0.1141", + "externalReferences": [ + { + "type": "build-meta", + "hashes": [ + { + "alg": "SHA-1", + "content": "0dfdbd41fa7e907bd3a570d44283839852e4a56e" + } + ] + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sort-keys@1.1.2?package-id=8d95b9ca88e891e", + "name": "sort-keys", + "version": "1.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sort-keys:sort-keys:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/sort-keys@1.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/source-list-map@2.0.1?package-id=dae4f6d5c918177c", + "name": "source-list-map", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:source-list-map:source-list-map:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/source-list-map@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/source-map@0.5.7?package-id=8a1e52c37677cd24", + "name": "source-map", + "version": "0.5.7", + "cpe": "cpe:2.3:a:source-map:source-map:0.5.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/source-map@0.5.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/source-map@0.6.1?package-id=f13d135e292145b9", + "name": "source-map", + "version": "0.6.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:source-map:source-map:0.6.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/source-map@0.6.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/source-map-loader@0.2.4?package-id=4a70a96d21be7dfb", + "name": "source-map-loader", + "version": "0.2.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:source-map-loader:source-map-loader:0.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/source-map-loader@0.2.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/source-map-resolve@0.5.3?package-id=8d1d0e5f1afcfcd1", + "name": "source-map-resolve", + "version": "0.5.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:source-map-resolve:source-map-resolve:0.5.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/source-map-resolve@0.5.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/source-map-support@0.5.16?package-id=bc90170976046bbc", + "name": "source-map-support", + "version": "0.5.16", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:source-map-support:source-map-support:0.5.16:*:*:*:*:*:*:*", + "purl": "pkg:npm/source-map-support@0.5.16" + }, + { + "type": "library", + "bom-ref": "pkg:npm/source-map-url@0.4.0?package-id=20992552e2d651e6", + "name": "source-map-url", + "version": "0.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:source-map-url:source-map-url:0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/source-map-url@0.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/sourcemap-codec@1.4.8?package-id=fac41e2acf7ecff3", + "name": "sourcemap-codec", + "version": "1.4.8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sourcemap-codec:sourcemap-codec:1.4.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/sourcemap-codec@1.4.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/spawn-wrap@2.0.0?package-id=3d4bf9279d50409c", + "name": "spawn-wrap", + "version": "2.0.0", + "cpe": "cpe:2.3:a:spawn-wrap:spawn-wrap:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/spawn-wrap@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-correct@3.1.0?package-id=af5bde02c5e3b75c", + "name": "spdx-correct", + "version": "3.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-correct:spdx-correct:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-correct@3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-exceptions@2.2.0?package-id=4f1b92c95c794575", + "name": "spdx-exceptions", + "version": "2.2.0", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-exceptions:spdx-exceptions:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-exceptions@2.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-expression-parse@3.0.0?package-id=e1029c066ad8773b", + "name": "spdx-expression-parse", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:spdx-expression-parse:spdx-expression-parse:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-expression-parse@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-license-ids@3.0.5?package-id=e887036491a70859", + "name": "spdx-license-ids", + "version": "3.0.5", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-license-ids:spdx-license-ids:3.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-license-ids@3.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdy@4.0.2?package-id=c6550c2183a35a4e", + "name": "spdy", + "version": "4.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:spdy:spdy:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdy@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdy-transport@3.0.0?package-id=9e2e3b8693650584", + "name": "spdy-transport", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:spdy-transport:spdy-transport:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdy-transport@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/speed-measure-webpack-plugin@1.3.1?package-id=974cf7c3ce9f496e", + "name": "speed-measure-webpack-plugin", + "version": "1.3.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:speed-measure-webpack-plugin:speed-measure-webpack-plugin:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/speed-measure-webpack-plugin@1.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/split-string@3.1.0?package-id=d5a5faee1ecb8cee", + "name": "split-string", + "version": "3.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:split-string:split-string:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/split-string@3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/sprintf-js@1.0.3?package-id=81d702a2ba232950", + "name": "sprintf-js", + "version": "1.0.3", + "cpe": "cpe:2.3:a:sprintf-js:sprintf-js:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/sprintf-js@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/sprintf-js@1.0.3?package-id=2cb96d8a67fafc54", + "name": "sprintf-js", + "version": "1.0.3", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:sprintf-js:sprintf-js:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/sprintf-js@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/sshpk@1.16.1?package-id=86482c783da2ad02", + "name": "sshpk", + "version": "1.16.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sshpk:sshpk:1.16.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/sshpk@1.16.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ssri@8.0.0?package-id=674a60afc735c41b", + "name": "ssri", + "version": "8.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ssri:ssri:8.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ssri@8.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/stable@0.1.8?package-id=ea6e9bfa58bd21a5", + "name": "stable", + "version": "0.1.8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stable:stable:0.1.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/stable@0.1.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/static-extend@0.1.2?package-id=9c49771e1198aa88", + "name": "static-extend", + "version": "0.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:static-extend:static-extend:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/static-extend@0.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/statuses@1.5.0?package-id=1c69a1b07671503c", + "name": "statuses", + "version": "1.5.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:statuses:statuses:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/statuses@1.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/stdin@0.0.1?package-id=7685cf6694747caf", + "name": "stdin", + "version": "0.0.1", + "cpe": "cpe:2.3:a:stdin:stdin:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/stdin@0.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/stdout-stream@1.4.1?package-id=d823acca9fecf669", + "name": "stdout-stream", + "version": "1.4.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stdout-stream:stdout-stream:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/stdout-stream@1.4.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/stealthy-require@1.1.1?package-id=af959e080f157f47", + "name": "stealthy-require", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:stealthy-require:stealthy-require:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/stealthy-require@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/stream-browserify@2.0.2?package-id=f71f4de3bce4e88d", + "name": "stream-browserify", + "version": "2.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stream-browserify:stream-browserify:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/stream-browserify@2.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/stream-each@1.2.3?package-id=c4fa6d471369bdd1", + "name": "stream-each", + "version": "1.2.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stream-each:stream-each:1.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/stream-each@1.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/stream-http@2.8.3?package-id=b425e201c0a15172", + "name": "stream-http", + "version": "2.8.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stream-http:stream-http:2.8.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/stream-http@2.8.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/stream-shift@1.0.1?package-id=3eb8c981419452ac", + "name": "stream-shift", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stream-shift:stream-shift:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/stream-shift@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/streamroller@1.0.6?package-id=d3662b3d0a3ab4d3", + "name": "streamroller", + "version": "1.0.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:streamroller:streamroller:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/streamroller@1.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/strict-uri-encode@1.1.0?package-id=f1e948970f198aaf", + "name": "strict-uri-encode", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strict-uri-encode:strict-uri-encode:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strict-uri-encode@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-replace-loader@3.1.0?package-id=e2db261ea5876eb", + "name": "string-replace-loader", + "version": "3.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-replace-loader:string-replace-loader:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-replace-loader@3.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@2.1.1?package-id=5d048e5899c828d1", + "name": "string-width", + "version": "2.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-width:string-width:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@4.2.3?package-id=42ca78d9e8f4f721", + "name": "string-width", + "version": "4.2.3", + "cpe": "cpe:2.3:a:string-width:string-width:4.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@4.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/string.prototype.startswith@0.2.0?package-id=eb521011ea37f889", + "name": "string.prototype.startswith", + "version": "0.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string.prototype.startswith:string.prototype.startswith:0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string.prototype.startswith@0.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/string.prototype.trimend@1.0.1?package-id=eaaf2691d7faf493", + "name": "string.prototype.trimend", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string.prototype.trimend:string.prototype.trimend:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string.prototype.trimend@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/string.prototype.trimleft@2.1.2?package-id=6cac466bdbcdd601", + "name": "string.prototype.trimleft", + "version": "2.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string.prototype.trimleft:string.prototype.trimleft:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/string.prototype.trimleft@2.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/string.prototype.trimright@2.1.2?package-id=dd68fec03fc29df", + "name": "string.prototype.trimright", + "version": "2.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string.prototype.trimright:string.prototype.trimright:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/string.prototype.trimright@2.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/string.prototype.trimstart@1.0.1?package-id=25879e71ff62096e", + "name": "string.prototype.trimstart", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string.prototype.trimstart:string.prototype.trimstart:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string.prototype.trimstart@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=9e0c8a452fbb441c", + "name": "string_decoder", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@3.0.1?package-id=87989198efbc839f", + "name": "strip-ansi", + "version": "3.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@3.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@6.0.1?package-id=2db1d34d0f45aa9d", + "name": "strip-ansi", + "version": "6.0.1", + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@6.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-bom@3.0.0?package-id=60246f878ad090f0", + "name": "strip-bom", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-bom:strip-bom:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-bom@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-bom@4.0.0?package-id=d83238cfecbf5262", + "name": "strip-bom", + "version": "4.0.0", + "cpe": "cpe:2.3:a:strip-bom:strip-bom:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-bom@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-eof@1.0.0?package-id=8fab5bcf59d0307f", + "name": "strip-eof", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-eof:strip-eof:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-eof@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-indent@1.0.1?package-id=f7b51efdc131be2a", + "name": "strip-indent", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-indent:strip-indent:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-indent@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/style-loader@1.1.3?package-id=af29aa58a55ff953", + "name": "style-loader", + "version": "1.1.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:style-loader:style-loader:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/style-loader@1.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/stylehacks@4.0.3?package-id=8c3b1e7e6a683f01", + "name": "stylehacks", + "version": "4.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stylehacks:stylehacks:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/stylehacks@4.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/stylus@0.54.7?package-id=1be17e684715a25", + "name": "stylus", + "version": "0.54.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stylus:stylus:0.54.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/stylus@0.54.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/stylus-loader@3.0.2?package-id=a57da5531e01038d", + "name": "stylus-loader", + "version": "3.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stylus-loader:stylus-loader:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/stylus-loader@3.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-color@5.5.0?package-id=39e040d2ad2327f0", + "name": "supports-color", + "version": "5.5.0", + "cpe": "cpe:2.3:a:supports-color:supports-color:5.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-color@5.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-color@5.5.0?package-id=6223b7363a1a1a8b", + "name": "supports-color", + "version": "5.5.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-color:supports-color:5.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-color@5.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/svgo@1.3.2?package-id=a9ef8dbc5cadd27d", + "name": "svgo", + "version": "1.3.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:svgo:svgo:1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/svgo@1.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/symbol-observable@1.2.0?package-id=7a64e840ca76a512", + "name": "symbol-observable", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:symbol-observable:symbol-observable:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/symbol-observable@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tapable@1.1.3?package-id=239052b860ebde2a", + "name": "tapable", + "version": "1.1.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tapable:tapable:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/tapable@1.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tar@6.0.2?package-id=3289c5b100673942", + "name": "tar", + "version": "6.0.2", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:tar:tar:6.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/tar@6.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/terser@4.6.10?package-id=4d569bbfaf3b1959", + "name": "terser", + "version": "4.6.10", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:terser:terser:4.6.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/terser@4.6.10" + }, + { + "type": "library", + "bom-ref": "pkg:npm/terser-webpack-plugin@2.3.3?package-id=22d863943de06d06", + "name": "terser-webpack-plugin", + "version": "2.3.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:terser-webpack-plugin:terser-webpack-plugin:2.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/terser-webpack-plugin@2.3.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/test-exclude@6.0.0?package-id=666871ee39441051", + "name": "test-exclude", + "version": "6.0.0", + "cpe": "cpe:2.3:a:test-exclude:test-exclude:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/test-exclude@6.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/thenify@3.3.0?package-id=c15d981cbccddda3", + "name": "thenify", + "version": "3.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:thenify:thenify:3.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/thenify@3.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/thenify-all@1.6.0?package-id=7b6677ab1a8c7e52", + "name": "thenify-all", + "version": "1.6.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:thenify-all:thenify-all:1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/thenify-all@1.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/through@2.3.8?package-id=59da2d5c89a5f3ea", + "name": "through", + "version": "2.3.8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:through:through:2.3.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/through@2.3.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/through2@2.0.5?package-id=680db15354d84d6a", + "name": "through2", + "version": "2.0.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:through2:through2:2.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/through2@2.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/thunky@1.1.0?package-id=d787c6eea1ae59f2", + "name": "thunky", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:thunky:thunky:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/thunky@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/timers-browserify@2.0.11?package-id=78c13348dd9e29d", + "name": "timers-browserify", + "version": "2.0.11", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:timers-browserify:timers-browserify:2.0.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/timers-browserify@2.0.11" + }, + { + "type": "library", + "bom-ref": "pkg:npm/timers-ext@0.1.7?package-id=a62c78e5a49031b4", + "name": "timers-ext", + "version": "0.1.7", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:timers-ext:timers-ext:0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/timers-ext@0.1.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/timsort@0.3.0?package-id=3417b0753cba11ba", + "name": "timsort", + "version": "0.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:timsort:timsort:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/timsort@0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tmp@0.0.33?package-id=99174617889eed27", + "name": "tmp", + "version": "0.0.33", + "cpe": "cpe:2.3:a:tmp:tmp:0.0.33:*:*:*:*:*:*:*", + "purl": "pkg:npm/tmp@0.0.33" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tmp@0.0.33?package-id=79107498e110a960", + "name": "tmp", + "version": "0.0.33", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tmp:tmp:0.0.33:*:*:*:*:*:*:*", + "purl": "pkg:npm/tmp@0.0.33" + }, + { + "type": "library", + "bom-ref": "pkg:npm/to-array@0.1.4?package-id=a42b56d7344b1ef5", + "name": "to-array", + "version": "0.1.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:to-array:to-array:0.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/to-array@0.1.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/to-arraybuffer@1.0.1?package-id=fccba201ded544b7", + "name": "to-arraybuffer", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:to-arraybuffer:to-arraybuffer:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/to-arraybuffer@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/to-fast-properties@2.0.0?package-id=5688ffa75461a929", + "name": "to-fast-properties", + "version": "2.0.0", + "cpe": "cpe:2.3:a:to-fast-properties:to-fast-properties:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/to-fast-properties@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/to-fast-properties@2.0.0?package-id=c26717bbb393789c", + "name": "to-fast-properties", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:to-fast-properties:to-fast-properties:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/to-fast-properties@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/to-object-path@0.3.0?package-id=ea690cd126e39706", + "name": "to-object-path", + "version": "0.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:to-object-path:to-object-path:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/to-object-path@0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/to-regex@3.0.2?package-id=fef71205c49ca38c", + "name": "to-regex", + "version": "3.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:to-regex:to-regex:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/to-regex@3.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/to-regex-range@5.0.1?package-id=c9085ffaa04a98e8", + "name": "to-regex-range", + "version": "5.0.1", + "cpe": "cpe:2.3:a:to-regex-range:to-regex-range:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/to-regex-range@5.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/to-regex-range@5.0.1?package-id=57510c54f6c59af8", + "name": "to-regex-range", + "version": "5.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:to-regex-range:to-regex-range:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/to-regex-range@5.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/toidentifier@1.0.0?package-id=42e8a0332c24f064", + "name": "toidentifier", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:toidentifier:toidentifier:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/toidentifier@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tough-cookie@2.5.0?package-id=eddf34eff8e47610", + "name": "tough-cookie", + "version": "2.5.0", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:tough-cookie:tough-cookie:2.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tough-cookie@2.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/traverse@0.6.6?package-id=3a9ba654ce5af4e9", + "name": "traverse", + "version": "0.6.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:traverse:traverse:0.6.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/traverse@0.6.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tree-kill@1.2.2?package-id=60e5ab6fd2fb7df6", + "name": "tree-kill", + "version": "1.2.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tree-kill:tree-kill:1.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/tree-kill@1.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/trim-newlines@1.0.0?package-id=7c816eb7b0f5956b", + "name": "trim-newlines", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:trim-newlines:trim-newlines:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/trim-newlines@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/true-case-path@1.0.3?package-id=10590dec6bc9ef4", + "name": "true-case-path", + "version": "1.0.3", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:true-case-path:true-case-path:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/true-case-path@1.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/truncate-utf8-bytes@1.0.2?package-id=6c457f8c2194f1e5", + "name": "truncate-utf8-bytes", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "WTFPL" + } + } + ], + "cpe": "cpe:2.3:a:truncate-utf8-bytes:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/truncate-utf8-bytes@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tryer@1.0.1?package-id=a61b5b6a53c2e46f", + "name": "tryer", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tryer:tryer:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/tryer@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ts-node@8.8.1?package-id=3edad8bca011dfb7", + "name": "ts-node", + "version": "8.8.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ts-node:ts-node:8.8.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ts-node@8.8.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslib@1.11.1?package-id=b220cfe8cff08714", + "name": "tslib", + "version": "1.11.1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:tslib:tslib:1.11.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslib@1.11.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslint@6.1.0?package-id=612310248b471309", + "name": "tslint", + "version": "6.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:tslint:tslint:6.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslint@6.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslint-sonarts@1.9.0?package-id=167ec1ee58f83208", + "name": "tslint-sonarts", + "version": "1.9.0", + "licenses": [ + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:tslint-sonarts:tslint-sonarts:1.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslint-sonarts@1.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tsutils@2.29.0?package-id=f53978a11863eea4", + "name": "tsutils", + "version": "2.29.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tsutils:tsutils:2.29.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tsutils@2.29.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tty-browserify@0.0.0?package-id=d884a3760f467d67", + "name": "tty-browserify", + "version": "0.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tty-browserify:tty-browserify:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tty-browserify@0.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tunnel-agent@0.6.0?package-id=ca049987a582a89c", + "name": "tunnel-agent", + "version": "0.6.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:tunnel-agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tunnel-agent@0.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/tweetnacl@0.14.5?package-id=49aff99863163f8d", + "name": "tweetnacl", + "version": "0.14.5", + "licenses": [ + { + "license": { + "id": "Unlicense" + } + } + ], + "cpe": "cpe:2.3:a:tweetnacl:tweetnacl:0.14.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/tweetnacl@0.14.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/type@1.2.0?package-id=ed0a25a474d7af8", + "name": "type", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:type:type:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/type@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/type-fest@0.11.0?package-id=70ae5ef2778315c", + "name": "type-fest", + "version": "0.11.0", + "licenses": [ + { + "license": { + "name": "(MIT OR CC0-1.0)" + } + } + ], + "cpe": "cpe:2.3:a:type-fest:type-fest:0.11.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/type-fest@0.11.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/type-fest@0.8.1?package-id=eaafa4d63af648e2", + "name": "type-fest", + "version": "0.8.1", + "cpe": "cpe:2.3:a:type-fest:type-fest:0.8.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/type-fest@0.8.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/type-is@1.6.18?package-id=abecd6ccd968e17a", + "name": "type-is", + "version": "1.6.18", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:type-is:type-is:1.6.18:*:*:*:*:*:*:*", + "purl": "pkg:npm/type-is@1.6.18" + }, + { + "type": "library", + "bom-ref": "pkg:npm/typedarray@0.0.6?package-id=faf25266527325bf", + "name": "typedarray", + "version": "0.0.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:typedarray:typedarray:0.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/typedarray@0.0.6" + }, + { + "type": "library", + "bom-ref": "pkg:npm/typedarray-to-buffer@3.1.5?package-id=ce8a4e35b41de8ed", + "name": "typedarray-to-buffer", + "version": "3.1.5", + "cpe": "cpe:2.3:a:typedarray-to-buffer:typedarray-to-buffer:3.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/typedarray-to-buffer@3.1.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/typescript@3.7.5?package-id=28da239670879666", + "name": "typescript", + "version": "3.7.5", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:typescript:typescript:3.7.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/typescript@3.7.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ua-parser-js@0.7.21?package-id=b951501830cc61e0", + "name": "ua-parser-js", + "version": "0.7.21", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ua-parser-js:ua-parser-js:0.7.21:*:*:*:*:*:*:*", + "purl": "pkg:npm/ua-parser-js@0.7.21" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ultron@1.1.1?package-id=7afe554e7e1e2c78", + "name": "ultron", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ultron:ultron:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ultron@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/unicode-canonical-property-names-ecmascript@1.0.4?package-id=fd75918e3a809f9", + "name": "unicode-canonical-property-names-ecmascript", + "version": "1.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unicode-canonical-property-names-ecmascript:unicode-canonical-property-names-ecmascript:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/unicode-canonical-property-names-ecmascript@1.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/unicode-match-property-ecmascript@1.0.4?package-id=4c03460f6eb6d9a", + "name": "unicode-match-property-ecmascript", + "version": "1.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unicode-match-property-ecmascript:unicode-match-property-ecmascript:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/unicode-match-property-ecmascript@1.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/unicode-match-property-value-ecmascript@1.2.0?package-id=9a086af5f5363e1d", + "name": "unicode-match-property-value-ecmascript", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unicode-match-property-value-ecmascript:unicode-match-property-value-ecmascript:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unicode-match-property-value-ecmascript@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/unicode-property-aliases-ecmascript@1.1.0?package-id=9debf1995fb31829", + "name": "unicode-property-aliases-ecmascript", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unicode-property-aliases-ecmascript:unicode-property-aliases-ecmascript:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unicode-property-aliases-ecmascript@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/union-value@1.0.1?package-id=9ad216dfd9b336c9", + "name": "union-value", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:union-value:union-value:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/union-value@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/uniq@1.0.1?package-id=c5228021d904ff2f", + "name": "uniq", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:uniq:uniq:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/uniq@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/uniqs@2.0.0?package-id=4e42cb56c0afef43", + "name": "uniqs", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:uniqs:uniqs:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/uniqs@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/unique-filename@1.1.1?package-id=851a0d45e78532d9", + "name": "unique-filename", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:unique-filename:unique-filename:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-filename@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/unique-slug@2.0.2?package-id=dadc7fc5bb4adba3", + "name": "unique-slug", + "version": "2.0.2", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:unique-slug:unique-slug:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-slug@2.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/universal-analytics@0.4.20?package-id=346eeb3f93163e4a", + "name": "universal-analytics", + "version": "0.4.20", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:universal-analytics:universal-analytics:0.4.20:*:*:*:*:*:*:*", + "purl": "pkg:npm/universal-analytics@0.4.20" + }, + { + "type": "library", + "bom-ref": "pkg:npm/universalify@0.1.2?package-id=1d4ab21b7015a3d8", + "name": "universalify", + "version": "0.1.2", + "cpe": "cpe:2.3:a:universalify:universalify:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/universalify@0.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/universalify@0.1.2?package-id=7d5822aa41c42a5a", + "name": "universalify", + "version": "0.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:universalify:universalify:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/universalify@0.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/unpipe@1.0.0?package-id=f078a47603f29069", + "name": "unpipe", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unpipe:unpipe:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unpipe@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/unquote@1.1.1?package-id=7fa8c84c840a7f83", + "name": "unquote", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unquote:unquote:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/unquote@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/unset-value@1.0.0?package-id=c8efcbd77f5bc98b", + "name": "unset-value", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unset-value:unset-value:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unset-value@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/upath@1.2.0?package-id=469841a6a0018255", + "name": "upath", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:upath:upath:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/upath@1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/uri-js@4.2.2?package-id=bdb26b64854d360e", + "name": "uri-js", + "version": "4.2.2", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:uri-js:uri-js:4.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/uri-js@4.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/urix@0.1.0?package-id=17cd96143e718d11", + "name": "urix", + "version": "0.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:urix:urix:0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/urix@0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/url@0.11.0?package-id=3358c639b38985fd", + "name": "url", + "version": "0.11.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:url:url:0.11.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/url@0.11.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/url-parse@1.4.7?package-id=56ce9a8077fe9c82", + "name": "url-parse", + "version": "1.4.7", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:url-parse:url-parse:1.4.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/url-parse@1.4.7" + }, + { + "type": "library", + "bom-ref": "pkg:npm/use@3.1.1?package-id=9a007160bb332d13", + "name": "use", + "version": "3.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:use:use:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/use@3.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/utf8-byte-length@1.0.4?package-id=3c6a5ad65f57c028", + "name": "utf8-byte-length", + "version": "1.0.4", + "licenses": [ + { + "license": { + "id": "WTFPL" + } + } + ], + "cpe": "cpe:2.3:a:utf8-byte-length:utf8-byte-length:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/utf8-byte-length@1.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/util@0.11.1?package-id=4ac1679209cb9ade", + "name": "util", + "version": "0.11.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util:util:0.11.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/util@0.11.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=9f39f1de5aacfdc1", + "name": "util-deprecate", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-deprecate@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/util-promisify@2.1.0?package-id=3743593500092103", + "name": "util-promisify", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-promisify:util-promisify:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-promisify@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/util.promisify@1.0.1?package-id=a6e893d8d569ed31", + "name": "util.promisify", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util.promisify:util.promisify:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/util.promisify@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/utils-merge@1.0.1?package-id=a35c86b4b23cd909", + "name": "utils-merge", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:utils-merge:utils-merge:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/utils-merge@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/uuid@3.4.0?package-id=adda9612fdfbd5e0", + "name": "uuid", + "version": "3.4.0", + "cpe": "cpe:2.3:a:uuid:uuid:3.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/uuid@3.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/uuid@3.4.0?package-id=526a445e72519ff5", + "name": "uuid", + "version": "3.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:uuid:uuid:3.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/uuid@3.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/valid-url@1.0.9?package-id=e5171ec401d801b7", + "name": "valid-url", + "version": "1.0.9", + "cpe": "cpe:2.3:a:valid-url:valid-url:1.0.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/valid-url@1.0.9" + }, + { + "type": "library", + "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4?package-id=2f44de4551532c24", + "name": "validate-npm-package-license", + "version": "3.0.4", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:validate-npm-package-license:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/validate-npm-package-license@3.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/validate-npm-package-name@3.0.0?package-id=b051bcd8fd49eb5c", + "name": "validate-npm-package-name", + "version": "3.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:validate-npm-package-name:validate-npm-package-name:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/validate-npm-package-name@3.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/vary@1.1.2?package-id=5cba249fd3455c18", + "name": "vary", + "version": "1.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vary:vary:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/vary@1.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/vendors@1.0.4?package-id=25d42f021d2b8e25", + "name": "vendors", + "version": "1.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vendors:vendors:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/vendors@1.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/verror@1.10.0?package-id=7d34167865ed5df2", + "name": "verror", + "version": "1.10.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:verror:verror:1.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/verror@1.10.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/vm-browserify@1.1.2?package-id=c1a04c8848ec7b61", + "name": "vm-browserify", + "version": "1.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vm-browserify:vm-browserify:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/vm-browserify@1.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/void-elements@2.0.1?package-id=d9945ea8ffc2d7c7", + "name": "void-elements", + "version": "2.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:void-elements:void-elements:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/void-elements@2.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/vscode-json-languageservice@3.11.0?package-id=63f5bac078487c13", + "name": "vscode-json-languageservice", + "version": "3.11.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vscode-json-languageservice:vscode-json-languageservice:3.11.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/vscode-json-languageservice@3.11.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/vscode-jsonrpc@4.0.0?package-id=5cce3600f987ab53", + "name": "vscode-jsonrpc", + "version": "4.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vscode-jsonrpc:vscode-jsonrpc:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/vscode-jsonrpc@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/vscode-languageserver@5.2.1?package-id=fc0fc9f558e4ac0e", + "name": "vscode-languageserver", + "version": "5.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vscode-languageserver:vscode-languageserver:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/vscode-languageserver@5.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/vscode-languageserver-protocol@3.14.1?package-id=db0a6589a566e4d9", + "name": "vscode-languageserver-protocol", + "version": "3.14.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vscode-languageserver-protocol:vscode-languageserver-protocol:3.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/vscode-languageserver-protocol@3.14.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/vscode-languageserver-textdocument@1.0.8?package-id=5a3f417d6261c4f2", + "name": "vscode-languageserver-textdocument", + "version": "1.0.8", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vscode-languageserver-textdocument:vscode-languageserver-textdocument:1.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/vscode-languageserver-textdocument@1.0.8" + }, + { + "type": "library", + "bom-ref": "pkg:npm/vscode-languageserver-types@3.16.0-next.2?package-id=daeb3cb12a924d55", + "name": "vscode-languageserver-types", + "version": "3.16.0-next.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vscode-languageserver-types:vscode-languageserver-types:3.16.0-next.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/vscode-languageserver-types@3.16.0-next.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/vscode-nls@5.2.0?package-id=89db238ca76e249e", + "name": "vscode-nls", + "version": "5.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vscode-nls:vscode-nls:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/vscode-nls@5.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/vscode-uri@2.1.2?package-id=4ad50ec5691d9ca7", + "name": "vscode-uri", + "version": "2.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vscode-uri:vscode-uri:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/vscode-uri@2.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/watchpack@1.6.1?package-id=6572d5b09c0aeb93", + "name": "watchpack", + "version": "1.6.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:watchpack:watchpack:1.6.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/watchpack@1.6.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/wbuf@1.7.3?package-id=ffefb1f942a74ca8", + "name": "wbuf", + "version": "1.7.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:wbuf:wbuf:1.7.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/wbuf@1.7.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/wcwidth@1.0.1?package-id=4f1f480301e68521", + "name": "wcwidth", + "version": "1.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:wcwidth:wcwidth:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/wcwidth@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/webdriver-js-extender@2.1.0?package-id=c59c1ca78d4de866", + "name": "webdriver-js-extender", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:webdriver-js-extender:webdriver-js-extender:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/webdriver-js-extender@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/webpack@4.42.0?package-id=d87224f9c91bfbcc", + "name": "webpack", + "version": "4.42.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:webpack:webpack:4.42.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/webpack@4.42.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/webpack-bundle-analyzer@3.7.0?package-id=c9c9605700bed457", + "name": "webpack-bundle-analyzer", + "version": "3.7.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:webpack-bundle-analyzer:webpack-bundle-analyzer:3.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/webpack-bundle-analyzer@3.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/webpack-dev-middleware@3.7.2?package-id=be5e79fa0667a363", + "name": "webpack-dev-middleware", + "version": "3.7.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:webpack-dev-middleware:webpack-dev-middleware:3.7.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/webpack-dev-middleware@3.7.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/webpack-dev-server@3.10.3?package-id=80df98f57af988bd", + "name": "webpack-dev-server", + "version": "3.10.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:webpack-dev-server:webpack-dev-server:3.10.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/webpack-dev-server@3.10.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/webpack-log@2.0.0?package-id=bfc1be3e83b857d7", + "name": "webpack-log", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:webpack-log:webpack-log:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/webpack-log@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/webpack-merge@4.2.2?package-id=d5d5404110191779", + "name": "webpack-merge", + "version": "4.2.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:webpack-merge:webpack-merge:4.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/webpack-merge@4.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/webpack-sources@1.4.3?package-id=7ab8848da0705aa6", + "name": "webpack-sources", + "version": "1.4.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:webpack-sources:webpack-sources:1.4.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/webpack-sources@1.4.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/webpack-subresource-integrity@1.4.0?package-id=5ee874d0acd57e26", + "name": "webpack-subresource-integrity", + "version": "1.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:webpack-subresource-integrity:webpack-subresource-integrity:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/webpack-subresource-integrity@1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/websocket-driver@0.7.3?package-id=df09dd834ce5545b", + "name": "websocket-driver", + "version": "0.7.3", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:websocket-driver:websocket-driver:0.7.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/websocket-driver@0.7.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/websocket-extensions@0.1.3?package-id=61a75f670f245c1c", + "name": "websocket-extensions", + "version": "0.1.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:websocket-extensions:websocket-extensions:0.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/websocket-extensions@0.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/when@3.6.4?package-id=762ab53968652324", + "name": "when", + "version": "3.6.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:when:when:3.6.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/when@3.6.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/which@1.3.1?package-id=c6dc767d8b803349", + "name": "which", + "version": "1.3.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:which:which:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/which@1.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/which@2.0.2?package-id=716f72eb7e276298", + "name": "which", + "version": "2.0.2", + "cpe": "cpe:2.3:a:which:which:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/which@2.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/which-module@2.0.0?package-id=2c95a66942473455", + "name": "which-module", + "version": "2.0.0", + "cpe": "cpe:2.3:a:which-module:which-module:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/which-module@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/which-module@2.0.0?package-id=c1c927273bfbdd31", + "name": "which-module", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:which-module:which-module:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/which-module@2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/wide-align@1.1.3?package-id=2711dcb2b1321f1f", + "name": "wide-align", + "version": "1.1.3", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wide-align:wide-align:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/wide-align@1.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/wordwrap@0.0.3?package-id=d963e67273277de5", + "name": "wordwrap", + "version": "0.0.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:wordwrap:wordwrap:0.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/wordwrap@0.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/worker-farm@1.7.0?package-id=ae14fe475961d31f", + "name": "worker-farm", + "version": "1.7.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:worker-farm:worker-farm:1.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/worker-farm@1.7.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/worker-plugin@4.0.3?package-id=c1d543d41d9df883", + "name": "worker-plugin", + "version": "4.0.3", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:worker-plugin:worker-plugin:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/worker-plugin@4.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrap-ansi@2.1.0?package-id=8cf1ed916be4346d", + "name": "wrap-ansi", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrap-ansi@2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrap-ansi@6.2.0?package-id=52d9dd08ad02c54d", + "name": "wrap-ansi", + "version": "6.2.0", + "cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:6.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrap-ansi@6.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=1d6c164011bb8f76", + "name": "wrappy", + "version": "1.0.2", + "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrappy@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=dd6d0718da9fb963", + "name": "wrappy", + "version": "1.0.2", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrappy@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/write-file-atomic@3.0.3?package-id=964b80b9a38726d9", + "name": "write-file-atomic", + "version": "3.0.3", + "cpe": "cpe:2.3:a:write-file-atomic:write-file-atomic:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/write-file-atomic@3.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ws@6.2.1?package-id=f5aea639e59cdd77", + "name": "ws", + "version": "6.2.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ws:ws:6.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ws@6.2.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/xml2js@0.4.23?package-id=8a1a1332606bd50f", + "name": "xml2js", + "version": "0.4.23", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:xml2js:xml2js:0.4.23:*:*:*:*:*:*:*", + "purl": "pkg:npm/xml2js@0.4.23" + }, + { + "type": "library", + "bom-ref": "pkg:npm/xmlbuilder@11.0.1?package-id=ea247fd9c6bc1e81", + "name": "xmlbuilder", + "version": "11.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:xmlbuilder:xmlbuilder:11.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/xmlbuilder@11.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/xmldom@0.1.31?package-id=80963bb0acb5f02a", + "name": "xmldom", + "version": "0.1.31", + "licenses": [ + { + "license": { + "name": "(LGPL-2.0 or MIT)" + } + } + ], + "cpe": "cpe:2.3:a:xmldom:xmldom:0.1.31:*:*:*:*:*:*:*", + "purl": "pkg:npm/xmldom@0.1.31" + }, + { + "type": "library", + "bom-ref": "pkg:npm/xmlhttprequest-ssl@1.5.5?package-id=4019aa9edd054aae", + "name": "xmlhttprequest-ssl", + "version": "1.5.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:xmlhttprequest-ssl:xmlhttprequest-ssl:1.5.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/xmlhttprequest-ssl@1.5.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/xtend@4.0.2?package-id=b451db5ef40dd530", + "name": "xtend", + "version": "4.0.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:xtend:xtend:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/xtend@4.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/xxhash@0.3.0?package-id=730c49ff2cdfb7eb", + "name": "xxhash", + "version": "0.3.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:xxhash:xxhash:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/xxhash@0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/y18n@4.0.0?package-id=f66f03e93949de0", + "name": "y18n", + "version": "4.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:y18n:y18n:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/y18n@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/y18n@4.0.3?package-id=b1b1dd50751d52bb", + "name": "y18n", + "version": "4.0.3", + "cpe": "cpe:2.3:a:y18n:y18n:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/y18n@4.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/yallist@4.0.0?package-id=b9ba8a2c34ea0780", + "name": "yallist", + "version": "4.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/yargs@12.0.5?package-id=4f7c0bb9af8d0c21", + "name": "yargs", + "version": "12.0.5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:yargs:yargs:12.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/yargs@12.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:npm/yargs@15.4.1?package-id=8f403ae8dc97313c", + "name": "yargs", + "version": "15.4.1", + "cpe": "cpe:2.3:a:yargs:yargs:15.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/yargs@15.4.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/yargs-parser@11.1.1?package-id=c315772eeb3c67b0", + "name": "yargs-parser", + "version": "11.1.1", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yargs-parser:yargs-parser:11.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/yargs-parser@11.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/yargs-parser@18.1.3?package-id=491b18b9acc674c0", + "name": "yargs-parser", + "version": "18.1.3", + "cpe": "cpe:2.3:a:yargs-parser:yargs-parser:18.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/yargs-parser@18.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/yeast@0.1.2?package-id=38ec3e9d597f589d", + "name": "yeast", + "version": "0.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:yeast:yeast:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/yeast@0.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/yn@3.1.1?package-id=4af1448b028059fc", + "name": "yn", + "version": "3.1.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:yn:yn:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/yn@3.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/zone.js@0.10.3?package-id=2b98aef0b39e3c6f", + "name": "zone.js", + "version": "0.10.3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:zone.js:zone.js:0.10.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/zone.js@0.10.3" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/base-files@10.3+deb10u10?arch=amd64&distro=debian-10&package-id=8417cfe24eb4f844", + "publisher": "Santiago Vila ", + "name": "base-files", + "version": "10.3+deb10u10", + "licenses": [ + { + "license": { + "name": "GPL" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:10.3\\+deb10u10:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/base-files@10.3+deb10u10?arch=amd64&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=1373de25eb1ce15c", + "name": "github.com/beorn7/perks", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/beorn7/perks@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/blang/semver@v3.5.1+incompatible?package-id=558b902810b3683", + "name": "github.com/blang/semver", + "version": "v3.5.1+incompatible", + "cpe": "cpe:2.3:a:blang:semver:v3.5.1\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/blang/semver@v3.5.1+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.1.1?package-id=a4500c6524355d5", + "name": "github.com/cespare/xxhash/v2", + "version": "v2.1.1", + "cpe": "cpe:2.3:a:cespare:xxhash\\/v2:v2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/container-storage-interface/spec@v1.5.0?package-id=682e9054f0046643", + "name": "github.com/container-storage-interface/spec", + "version": "v1.5.0", + "cpe": "cpe:2.3:a:container-storage-interface:spec:v1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/container-storage-interface/spec@v1.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-logr/logr@v0.4.0?package-id=21104c6324cec563", + "name": "github.com/go-logr/logr", + "version": "v0.4.0", + "cpe": "cpe:2.3:a:go-logr:logr:v0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-logr/logr@v0.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2?package-id=4b08277535ad294d", + "name": "github.com/gogo/protobuf", + "version": "v1.3.2", + "cpe": "cpe:2.3:a:gogo:protobuf:v1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.2?package-id=4b231e481c8c31e9", + "name": "github.com/golang/protobuf", + "version": "v1.5.2", + "cpe": "cpe:2.3:a:golang:protobuf:v1.5.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/kubernetes-csi/csi-lib-utils@v0.10.0?package-id=30cd18d3182b8b35", + "name": "github.com/kubernetes-csi/csi-lib-utils", + "version": "v0.10.0", + "cpe": "cpe:2.3:a:kubernetes-csi:csi-lib-utils:v0.10.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/kubernetes-csi/csi-lib-utils@v0.10.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/kubernetes-csi/node-driver-registrar@(devel)?package-id=9bcd1f0df82a70fb", + "name": "github.com/kubernetes-csi/node-driver-registrar", + "version": "(devel)", + "cpe": "cpe:2.3:a:kubernetes-csi:node-driver-registrar:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/kubernetes-csi/node-driver-registrar@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.2-0.20181231171920-c182affec369?package-id=427769f3e350e261", + "name": "github.com/matttproud/golang_protobuf_extensions", + "version": "v1.0.2-0.20181231171920-c182affec369", + "cpe": "cpe:2.3:a:matttproud:golang-protobuf-extensions:v1.0.2-0.20181231171920-c182affec369:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.2-0.20181231171920-c182affec369" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/client_golang@v1.11.0?package-id=9da8e2f7193f2269", + "name": "github.com/prometheus/client_golang", + "version": "v1.11.0", + "cpe": "cpe:2.3:a:prometheus:client-golang:v1.11.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_golang@v1.11.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/client_model@v0.2.0?package-id=5b2fe3826403a99c", + "name": "github.com/prometheus/client_model", + "version": "v0.2.0", + "cpe": "cpe:2.3:a:prometheus:client-model:v0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_model@v0.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/common@v0.26.0?package-id=343129a169270e41", + "name": "github.com/prometheus/common", + "version": "v0.26.0", + "cpe": "cpe:2.3:a:prometheus:common:v0.26.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/common@v0.26.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/procfs@v0.6.0?package-id=e35748e48a0d85c8", + "name": "github.com/prometheus/procfs", + "version": "v0.6.0", + "cpe": "cpe:2.3:a:prometheus:procfs:v0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/procfs@v0.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5?package-id=83c8c6260baef0e8", + "name": "github.com/spf13/pflag", + "version": "v1.0.5", + "cpe": "cpe:2.3:a:spf13:pflag:v1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023?package-id=7328e3c8a7d7bd9d", + "name": "golang.org/x/net", + "version": "v0.0.0-20210520170846-37e1c6afe023", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.0.0-20210520170846-37e1c6afe023:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20210616094352-59db8d763f22?package-id=cfa7d037f05b2996", + "name": "golang.org/x/sys", + "version": "v0.0.0-20210616094352-59db8d763f22", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20210616094352-59db8d763f22:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20210616094352-59db8d763f22" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/text@v0.3.6?package-id=8007f29f97ec86f6", + "name": "golang.org/x/text", + "version": "v0.3.6", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.3.6:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.3.6" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20210602131652-f16073e35f0c?package-id=6d46869942b8cea7", + "name": "google.golang.org/genproto", + "version": "v0.0.0-20210602131652-f16073e35f0c", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20210602131652-f16073e35f0c:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20210602131652-f16073e35f0c" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.38.0?package-id=bd89b6ef53ebc93", + "name": "google.golang.org/grpc", + "version": "v1.38.0", + "cpe": "cpe:2.3:a:google:grpc:v1.38.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.38.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.26.0?package-id=cf64bd4d8f5c1d68", + "name": "google.golang.org/protobuf", + "version": "v1.26.0", + "cpe": "cpe:2.3:a:google:protobuf:v1.26.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/protobuf@v1.26.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.22.0?package-id=a42b5adccc518eec", + "name": "k8s.io/apimachinery", + "version": "v0.22.0", + "purl": "pkg:golang/k8s.io/apimachinery@v0.22.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/component-base@v0.22.0?package-id=8c3ce154d5c535d7", + "name": "k8s.io/component-base", + "version": "v0.22.0", + "purl": "pkg:golang/k8s.io/component-base@v0.22.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/klog/v2@v2.9.0?package-id=975d54cb9167375e", + "name": "k8s.io/klog/v2", + "version": "v2.9.0", + "cpe": "cpe:2.3:a:klog:v2:v2.9.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/k8s.io/klog/v2@v2.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/kubelet@v0.22.0?package-id=e029cdf7d5cafa88", + "name": "k8s.io/kubelet", + "version": "v0.22.0", + "purl": "pkg:golang/k8s.io/kubelet@v0.22.0" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/netbase@5.6?arch=all&distro=debian-10&package-id=d657af39f8b794b0", + "publisher": "Marco d'Itri ", + "name": "netbase", + "version": "5.6", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:netbase:netbase:5.6:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/netbase@5.6?arch=all&distro=debian-10" + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/tzdata@2021a-0+deb10u1?arch=all&distro=debian-10&package-id=90047fe80701a227", + "publisher": "GNU Libc Maintainers ", + "name": "tzdata", + "version": "2021a-0+deb10u1", + "cpe": "cpe:2.3:a:tzdata:tzdata:2021a-0\\+deb10u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tzdata@2021a-0+deb10u1?arch=all&distro=debian-10" + }, + { + "type": "operating-system", + "name": "debian", + "version": "10", + "description": "Distroless", + "swid": { + "tagId": "debian", + "name": "debian", + "version": "10" + }, + "externalReferences": [ + { + "url": "https://github.com/GoogleContainerTools/distroless/issues/new", + "type": "issue-tracker" + }, + { + "url": "https://github.com/GoogleContainerTools/distroless", + "type": "website" + }, + { + "url": "https://github.com/GoogleContainerTools/distroless/blob/master/README.md", + "comment": "support", + "type": "other" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:golang/cloud.google.com/go@v0.41.0?package-id=10279645d7d42a93", + "name": "cloud.google.com/go", + "version": "v0.41.0", + "purl": "pkg:golang/cloud.google.com/go@v0.41.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go@v32.6.0+incompatible?package-id=6eb9570d3790789e", + "name": "github.com/Azure/azure-sdk-for-go", + "version": "v32.6.0+incompatible", + "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go:v32.6.0\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go@v32.6.0+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest@v0.10.0?package-id=a9a5550991947e08", + "name": "github.com/Azure/go-autorest/autorest", + "version": "v0.10.0", + "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest:v0.10.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/go-autorest/autorest@v0.10.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.8.2?package-id=c33735d07f8eff52", + "name": "github.com/Azure/go-autorest/autorest/adal", + "version": "v0.8.2", + "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/adal:v0.8.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/adal@v0.8.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/azure/auth@v0.4.2?package-id=e63721c8dab7170", + "name": "github.com/Azure/go-autorest/autorest/azure/auth", + "version": "v0.4.2", + "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/azure\\/auth:v0.4.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/azure/auth@v0.4.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/azure/cli@v0.3.1?package-id=ed5c5a689bfdf7a3", + "name": "github.com/Azure/go-autorest/autorest/azure/cli", + "version": "v0.3.1", + "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/azure\\/cli:v0.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/azure/cli@v0.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/date@v0.2.0?package-id=34d73b12c5c763b3", + "name": "github.com/Azure/go-autorest/autorest/date", + "version": "v0.2.0", + "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/date:v0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/date@v0.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/to@v0.2.0?package-id=9f7d20d4068f1a6a", + "name": "github.com/Azure/go-autorest/autorest/to", + "version": "v0.2.0", + "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/to:v0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/to@v0.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/go-autorest/logger@v0.1.0?package-id=216af3ec5d3ce06e", + "name": "github.com/Azure/go-autorest/logger", + "version": "v0.1.0", + "cpe": "cpe:2.3:a:Azure:go-autorest\\/logger:v0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/go-autorest/logger@v0.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/azure/go-autorest/tracing@v0.5.0?package-id=8ff34c29d03533db", + "name": "github.com/Azure/go-autorest/tracing", + "version": "v0.5.0", + "cpe": "cpe:2.3:a:Azure:go-autorest\\/tracing:v0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/go-autorest/tracing@v0.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/datadog/datadog-go@v3.3.1+incompatible?package-id=a27076a3c047cab8", + "name": "github.com/DataDog/datadog-go", + "version": "v3.3.1+incompatible", + "cpe": "cpe:2.3:a:DataDog:datadog-go:v3.3.1\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/DataDog/datadog-go@v3.3.1+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/shopify/sarama@v1.21.0?package-id=eaf221d2c7aa6df", + "name": "github.com/Shopify/sarama", + "version": "v1.21.0", + "cpe": "cpe:2.3:a:Shopify:sarama:v1.21.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Shopify/sarama@v1.21.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/apache/thrift@v0.13.0?package-id=e147fcd461da7ff9", + "name": "github.com/apache/thrift", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:apache:thrift:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/apache/thrift@v0.13.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go@v1.29.29?package-id=a9224af25cdbeb54", + "name": "github.com/aws/aws-sdk-go", + "version": "v1.29.29", + "cpe": "cpe:2.3:a:aws:aws-sdk-go:v1.29.29:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go@v1.29.29" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=52930b3fc29070df", + "name": "github.com/beorn7/perks", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/beorn7/perks@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/caddyserver/caddy@v1.0.5?package-id=85600a527e25b4f2", + "name": "github.com/caddyserver/caddy", + "version": "v1.0.5", + "cpe": "cpe:2.3:a:caddyserver:caddy:v1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/caddyserver/caddy@v1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v4@v4.0.0?package-id=13171ee0beff187", + "name": "github.com/cenkalti/backoff/v4", + "version": "v4.0.0", + "cpe": "cpe:2.3:a:cenkalti:backoff\\/v4:v4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cenkalti/backoff/v4@v4.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.1.1?package-id=f101b92cbfbc152", + "name": "github.com/cespare/xxhash/v2", + "version": "v2.1.1", + "cpe": "cpe:2.3:a:cespare:xxhash\\/v2:v2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/coredns/coredns@(devel)?package-id=117d02899ebaf332", + "name": "github.com/coredns/coredns", + "version": "(devel)", + "cpe": "cpe:2.3:a:coredns:coredns:\\(devel\\):*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/coredns/coredns@(devel)" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/coredns/federation@v0.0.0-20190818181423-e032b096babe?package-id=20a3e7a725074e68", + "name": "github.com/coredns/federation", + "version": "v0.0.0-20190818181423-e032b096babe", + "cpe": "cpe:2.3:a:coredns:federation:v0.0.0-20190818181423-e032b096babe:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/coredns/federation@v0.0.0-20190818181423-e032b096babe" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/coreos/go-systemd/v22@v22.0.0?package-id=53b6a598910d7157", + "name": "github.com/coreos/go-systemd/v22", + "version": "v22.0.0", + "cpe": "cpe:2.3:a:coreos:go-systemd\\/v22:v22.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/coreos/go-systemd/v22@v22.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1?package-id=54fd106147d0f8a9", + "name": "github.com/davecgh/go-spew", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:davecgh:go-spew:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/dgrijalva/jwt-go@v3.2.0+incompatible?package-id=7fffbbbff5c5f499", + "name": "github.com/dgrijalva/jwt-go", + "version": "v3.2.0+incompatible", + "cpe": "cpe:2.3:a:dgrijalva:jwt-go:v3.2.0\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/dgrijalva/jwt-go@v3.2.0+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/dimchansky/utfbom@v1.1.0?package-id=267caa0b6cc85b26", + "name": "github.com/dimchansky/utfbom", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:dimchansky:utfbom:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/dimchansky/utfbom@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/dnstap/golang-dnstap@v0.0.0-20170829151710-2cf77a2b5e11?package-id=c3c57d3bc2519d7a", + "name": "github.com/dnstap/golang-dnstap", + "version": "v0.0.0-20170829151710-2cf77a2b5e11", + "cpe": "cpe:2.3:a:dnstap:golang-dnstap:v0.0.0-20170829151710-2cf77a2b5e11:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/dnstap/golang-dnstap@v0.0.0-20170829151710-2cf77a2b5e11" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/eapache/go-resiliency@v1.1.0?package-id=488d14a1475ed628", + "name": "github.com/eapache/go-resiliency", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:eapache:go-resiliency:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/eapache/go-resiliency@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/eapache/go-xerial-snappy@v0.0.0-20180814174437-776d5712da21?package-id=8d0eb6dd97d40e96", + "name": "github.com/eapache/go-xerial-snappy", + "version": "v0.0.0-20180814174437-776d5712da21", + "cpe": "cpe:2.3:a:eapache:go-xerial-snappy:v0.0.0-20180814174437-776d5712da21:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/eapache/go-xerial-snappy@v0.0.0-20180814174437-776d5712da21" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/eapache/queue@v1.1.0?package-id=91394bfa341034b2", + "name": "github.com/eapache/queue", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:eapache:queue:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/eapache/queue@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/farsightsec/golang-framestream@v0.0.0-20181102145529-8a0cb8ba8710?package-id=f84e52938be3ec4f", + "name": "github.com/farsightsec/golang-framestream", + "version": "v0.0.0-20181102145529-8a0cb8ba8710", + "cpe": "cpe:2.3:a:farsightsec:golang-framestream:v0.0.0-20181102145529-8a0cb8ba8710:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/farsightsec/golang-framestream@v0.0.0-20181102145529-8a0cb8ba8710" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/flynn/go-shlex@v0.0.0-20150515145356-3f9db97f8568?package-id=4c58da22ef286b06", + "name": "github.com/flynn/go-shlex", + "version": "v0.0.0-20150515145356-3f9db97f8568", + "cpe": "cpe:2.3:a:flynn:go-shlex:v0.0.0-20150515145356-3f9db97f8568:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/flynn/go-shlex@v0.0.0-20150515145356-3f9db97f8568" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-logfmt/logfmt@v0.4.0?package-id=48bd83d6ce1cf750", + "name": "github.com/go-logfmt/logfmt", + "version": "v0.4.0", + "cpe": "cpe:2.3:a:go-logfmt:logfmt:v0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-logfmt/logfmt@v0.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d?package-id=d32a4438e8a16d2f", + "name": "github.com/gogo/protobuf", + "version": "v1.2.2-0.20190723190241-65acae22fc9d", + "cpe": "cpe:2.3:a:gogo:protobuf:v1.2.2-0.20190723190241-65acae22fc9d:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.3.5?package-id=182ac6739304deb1", + "name": "github.com/golang/protobuf", + "version": "v1.3.5", + "cpe": "cpe:2.3:a:golang:protobuf:v1.3.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.3.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/snappy@v0.0.0-20180518054509-2e65f85255db?package-id=af4bab8bcb4ba040", + "name": "github.com/golang/snappy", + "version": "v0.0.0-20180518054509-2e65f85255db", + "cpe": "cpe:2.3:a:golang:snappy:v0.0.0-20180518054509-2e65f85255db:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/snappy@v0.0.0-20180518054509-2e65f85255db" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.4.0?package-id=742d87db6dc9fbe", + "name": "github.com/google/go-cmp", + "version": "v0.4.0", + "cpe": "cpe:2.3:a:google:go-cmp:v0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-cmp@v0.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/gofuzz@v1.0.0?package-id=80937add7745a5ac", + "name": "github.com/google/gofuzz", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:google:gofuzz:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/gofuzz@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/uuid@v1.1.1?package-id=3c8fa4339403903", + "name": "github.com/google/uuid", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:google:uuid:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/uuid@v1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/googleapis/gax-go/v2@v2.0.5?package-id=4169ac774adb8d2d", + "name": "github.com/googleapis/gax-go/v2", + "version": "v2.0.5", + "cpe": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.0.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/googleapis/gax-go/v2@v2.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/googleapis/gnostic@v0.2.0?package-id=d40e0ca1859eb9b2", + "name": "github.com/googleapis/gnostic", + "version": "v0.2.0", + "cpe": "cpe:2.3:a:googleapis:gnostic:v0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/googleapis/gnostic@v0.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gophercloud/gophercloud@v0.3.0?package-id=6d9d2dffd7ff65b5", + "name": "github.com/gophercloud/gophercloud", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:gophercloud:gophercloud:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gophercloud/gophercloud@v0.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/grpc-ecosystem/grpc-opentracing@v0.0.0-20180507213350-8e809c8a8645?package-id=9d69f6483f11d50", + "name": "github.com/grpc-ecosystem/grpc-opentracing", + "version": "v0.0.0-20180507213350-8e809c8a8645", + "cpe": "cpe:2.3:a:grpc-ecosystem:grpc-opentracing:v0.0.0-20180507213350-8e809c8a8645:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/grpc-ecosystem/grpc-opentracing@v0.0.0-20180507213350-8e809c8a8645" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/hashicorp/golang-lru@v0.5.3?package-id=1e13b7a41e65a84b", + "name": "github.com/hashicorp/golang-lru", + "version": "v0.5.3", + "cpe": "cpe:2.3:a:hashicorp:golang-lru:v0.5.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/golang-lru@v0.5.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.7?package-id=254f34919256cafd", + "name": "github.com/imdario/mergo", + "version": "v0.3.7", + "cpe": "cpe:2.3:a:imdario:mergo:v0.3.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/imdario/mergo@v0.3.7" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/infobloxopen/go-trees@v0.0.0-20190313150506-2af4e13f9062?package-id=dba1f0cd6944902c", + "name": "github.com/infobloxopen/go-trees", + "version": "v0.0.0-20190313150506-2af4e13f9062", + "cpe": "cpe:2.3:a:infobloxopen:go-trees:v0.0.0-20190313150506-2af4e13f9062:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/infobloxopen/go-trees@v0.0.0-20190313150506-2af4e13f9062" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/jmespath/go-jmespath@v0.0.0-20180206201540-c2b33e8439af?package-id=47fce3ef1132ef06", + "name": "github.com/jmespath/go-jmespath", + "version": "v0.0.0-20180206201540-c2b33e8439af", + "cpe": "cpe:2.3:a:jmespath:go-jmespath:v0.0.0-20180206201540-c2b33e8439af:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jmespath/go-jmespath@v0.0.0-20180206201540-c2b33e8439af" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.9?package-id=d97080d5d5518148", + "name": "github.com/json-iterator/go", + "version": "v1.1.9", + "cpe": "cpe:2.3:a:json-iterator:go:v1.1.9:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/json-iterator/go@v1.1.9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.1?package-id=5820405d5aabd892", + "name": "github.com/matttproud/golang_protobuf_extensions", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:matttproud:golang-protobuf-extensions:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/matttproud/golang_protobuf_extensions@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/miekg/dns@v1.1.29?package-id=c66cc2c7565f5bc3", + "name": "github.com/miekg/dns", + "version": "v1.1.29", + "cpe": "cpe:2.3:a:miekg:dns:v1.1.29:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/miekg/dns@v1.1.29" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0?package-id=b09eab509586ff1b", + "name": "github.com/mitchellh/go-homedir", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=afda18af5747b2ef", + "name": "github.com/modern-go/concurrent", + "version": "v0.0.0-20180306012644-bacd9c7ef1dd", + "cpe": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.1?package-id=e8aca82a6c9a5b9c", + "name": "github.com/modern-go/reflect2", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:modern-go:reflect2:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/opentracing-contrib/go-observer@v0.0.0-20170622124052-a52f23424492?package-id=6f6f55dce43fe782", + "name": "github.com/opentracing-contrib/go-observer", + "version": "v0.0.0-20170622124052-a52f23424492", + "cpe": "cpe:2.3:a:opentracing-contrib:go-observer:v0.0.0-20170622124052-a52f23424492:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/opentracing-contrib/go-observer@v0.0.0-20170622124052-a52f23424492" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/opentracing/opentracing-go@v1.1.0?package-id=994d66ab2a1908ec", + "name": "github.com/opentracing/opentracing-go", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:opentracing:opentracing-go:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/opentracing/opentracing-go@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/openzipkin-contrib/zipkin-go-opentracing@v0.3.5?package-id=bc287321e74232db", + "name": "github.com/openzipkin-contrib/zipkin-go-opentracing", + "version": "v0.3.5", + "cpe": "cpe:2.3:a:openzipkin-contrib:zipkin-go-opentracing:v0.3.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/openzipkin-contrib/zipkin-go-opentracing@v0.3.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/philhofer/fwd@v1.0.0?package-id=cbde36ae73f92538", + "name": "github.com/philhofer/fwd", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:philhofer:fwd:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/philhofer/fwd@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/pierrec/lz4@v2.0.5+incompatible?package-id=dd15741fb4470eff", + "name": "github.com/pierrec/lz4", + "version": "v2.0.5+incompatible", + "cpe": "cpe:2.3:a:pierrec:lz4:v2.0.5\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pierrec/lz4@v2.0.5+incompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/client_golang@v1.5.1?package-id=447e1d1a0ff5dd38", + "name": "github.com/prometheus/client_golang", + "version": "v1.5.1", + "cpe": "cpe:2.3:a:prometheus:client-golang:v1.5.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_golang@v1.5.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/client_model@v0.2.0?package-id=e3df7afe3464948b", + "name": "github.com/prometheus/client_model", + "version": "v0.2.0", + "cpe": "cpe:2.3:a:prometheus:client-model:v0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_model@v0.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/common@v0.9.1?package-id=b19454d9abddffd9", + "name": "github.com/prometheus/common", + "version": "v0.9.1", + "cpe": "cpe:2.3:a:prometheus:common:v0.9.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/common@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/procfs@v0.0.8?package-id=d68ec0c5e71e41b3", + "name": "github.com/prometheus/procfs", + "version": "v0.0.8", + "cpe": "cpe:2.3:a:prometheus:procfs:v0.0.8:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/procfs@v0.0.8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20181016184325-3113b8401b8a?package-id=8319912f7878c97c", + "name": "github.com/rcrowley/go-metrics", + "version": "v0.0.0-20181016184325-3113b8401b8a", + "cpe": "cpe:2.3:a:rcrowley:go-metrics:v0.0.0-20181016184325-3113b8401b8a:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20181016184325-3113b8401b8a" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5?package-id=2e52528de2accf8d", + "name": "github.com/spf13/pflag", + "version": "v1.0.5", + "cpe": "cpe:2.3:a:spf13:pflag:v1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/tinylib/msgp@v1.1.0?package-id=696ba0694aae735b", + "name": "github.com/tinylib/msgp", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:tinylib:msgp:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/tinylib/msgp@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/go.etcd.io/etcd@v0.5.0-alpha.5.0.20200306183522-221f0cc107cb?package-id=2cee92e1001a2476", + "name": "go.etcd.io/etcd", + "version": "v0.5.0-alpha.5.0.20200306183522-221f0cc107cb", + "purl": "pkg:golang/go.etcd.io/etcd@v0.5.0-alpha.5.0.20200306183522-221f0cc107cb" + }, + { + "type": "library", + "bom-ref": "pkg:golang/go.opencensus.io@v0.22.0?package-id=a0616ad2a36e4034", + "name": "go.opencensus.io", + "version": "v0.22.0", + "purl": "pkg:golang/go.opencensus.io@v0.22.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/go.uber.org/atomic@v1.3.2?package-id=2a39faa0f3230070", + "name": "go.uber.org/atomic", + "version": "v1.3.2", + "purl": "pkg:golang/go.uber.org/atomic@v1.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/go.uber.org/multierr@v1.1.0?package-id=effdf300515b1f94", + "name": "go.uber.org/multierr", + "version": "v1.1.0", + "purl": "pkg:golang/go.uber.org/multierr@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/go.uber.org/zap@v1.10.0?package-id=4b22a63eff48bf8a", + "name": "go.uber.org/zap", + "version": "v1.10.0", + "purl": "pkg:golang/go.uber.org/zap@v1.10.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975?package-id=c817b8c5d1b638a5", + "name": "golang.org/x/crypto", + "version": "v0.0.0-20200220183623-bac4c82f6975", + "cpe": "cpe:2.3:a:golang:x\\/crypto:v0.0.0-20200220183623-bac4c82f6975:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/net@v0.0.0-20200301022130-244492dfa37a?package-id=f57e17a8358bc41e", + "name": "golang.org/x/net", + "version": "v0.0.0-20200301022130-244492dfa37a", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.0.0-20200301022130-244492dfa37a:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.0.0-20200301022130-244492dfa37a" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45?package-id=a298d2a53105424b", + "name": "golang.org/x/oauth2", + "version": "v0.0.0-20190604053449-0f29369cfe45", + "cpe": "cpe:2.3:a:golang:x\\/oauth2:v0.0.0-20190604053449-0f29369cfe45:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20200302150141-5c8b2ff67527?package-id=f5f7c5a77df583bc", + "name": "golang.org/x/sys", + "version": "v0.0.0-20200302150141-5c8b2ff67527", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20200302150141-5c8b2ff67527:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20200302150141-5c8b2ff67527" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/text@v0.3.2?package-id=dcd9383671547619", + "name": "golang.org/x/text", + "version": "v0.3.2", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.3.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.3.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20190921001708-c4c64cad1fd0?package-id=5db059bbf199f875", + "name": "golang.org/x/time", + "version": "v0.0.0-20190921001708-c4c64cad1fd0", + "cpe": "cpe:2.3:a:golang:x\\/time:v0.0.0-20190921001708-c4c64cad1fd0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/time@v0.0.0-20190921001708-c4c64cad1fd0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/xerrors@v0.0.0-20191204190536-9bdfabe68543?package-id=6a9aab521781cc2f", + "name": "golang.org/x/xerrors", + "version": "v0.0.0-20191204190536-9bdfabe68543", + "cpe": "cpe:2.3:a:golang:x\\/xerrors:v0.0.0-20191204190536-9bdfabe68543:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/xerrors@v0.0.0-20191204190536-9bdfabe68543" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/api@v0.20.0?package-id=5e838a1ae37c8cfe", + "name": "google.golang.org/api", + "version": "v0.20.0", + "cpe": "cpe:2.3:a:google:api:v0.20.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/api@v0.20.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20200306153348-d950eab6f860?package-id=4c5af900d9214f0", + "name": "google.golang.org/genproto", + "version": "v0.0.0-20200306153348-d950eab6f860", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20200306153348-d950eab6f860:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20200306153348-d950eab6f860" + }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.28.0?package-id=550e07a29e73a208", + "name": "google.golang.org/grpc", + "version": "v1.28.0", + "cpe": "cpe:2.3:a:google:grpc:v1.28.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.28.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/datadog/dd-trace-go.v1@v1.22.0?package-id=b48918261d35f740", + "name": "gopkg.in/DataDog/dd-trace-go.v1", + "version": "v1.22.0", + "purl": "pkg:golang/gopkg.in/DataDog/dd-trace-go.v1@v1.22.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=82157cafd8b9aa57", + "name": "gopkg.in/inf.v0", + "version": "v0.9.1", + "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/yaml.v2@v2.2.8?package-id=b86f3ff646b0bc81", + "name": "gopkg.in/yaml.v2", + "version": "v2.2.8", + "purl": "pkg:golang/gopkg.in/yaml.v2@v2.2.8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/api@v0.17.4?package-id=27d3d20550bfc7b0", + "name": "k8s.io/api", + "version": "v0.17.4", + "purl": "pkg:golang/k8s.io/api@v0.17.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.17.4?package-id=abe2c5340b4f9ea9", + "name": "k8s.io/apimachinery", + "version": "v0.17.4", + "purl": "pkg:golang/k8s.io/apimachinery@v0.17.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/client-go@v0.17.4?package-id=49a2583a16fb9045", + "name": "k8s.io/client-go", + "version": "v0.17.4", + "purl": "pkg:golang/k8s.io/client-go@v0.17.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/klog@v1.0.0?package-id=a77c58bffd70a218", + "name": "k8s.io/klog", + "version": "v1.0.0", + "purl": "pkg:golang/k8s.io/klog@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20191114184206-e782cd3c129f?package-id=32763778c820f5fe", + "name": "k8s.io/utils", + "version": "v0.0.0-20191114184206-e782cd3c129f", + "purl": "pkg:golang/k8s.io/utils@v0.0.0-20191114184206-e782cd3c129f" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.1.0?package-id=fb50a811ed5a17d2", + "name": "sigs.k8s.io/yaml", + "version": "v1.1.0", + "purl": "pkg:golang/sigs.k8s.io/yaml@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40iarna/cli@2.1.0?package-id=e39ea33aa6c9ff9d", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "@iarna/cli", + "version": "2.1.0", + "description": "Some simple CLI scaffolding for promise returning applications.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@iarna\\/cli:\\@iarna\\/cli:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40iarna/cli@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/cli.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/cli#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nestjs/common@7.6.18?package-id=15f33be32bd9864d", + "author": "Kamil Mysliwiec", + "name": "@nestjs/common", + "version": "7.6.18", + "description": "Nest - modern, fast, powerful node.js web framework (@common)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nestjs\\/common:\\@nestjs\\/common:7.6.18:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nestjs/common@7.6.18", + "externalReferences": [ + { + "url": "git+https://github.com/nestjs/nest.git", + "type": "distribution" + }, + { + "url": "https://nestjs.com", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nestjs/core@7.6.18?package-id=4d7655cc53622cb7", + "author": "Kamil Mysliwiec", + "name": "@nestjs/core", + "version": "7.6.18", + "description": "Nest - modern, fast, powerful node.js web framework (@core)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nestjs\\/core:\\@nestjs\\/core:7.6.18:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nestjs/core@7.6.18", + "externalReferences": [ + { + "url": "git+https://github.com/nestjs/nest.git", + "type": "distribution" + }, + { + "url": "https://nestjs.com", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nestjs/mapped-types@0.4.1?package-id=30cd22e03cad921d", + "author": "Kamil Mysliwiec", + "name": "@nestjs/mapped-types", + "version": "0.4.1", + "description": "Nest - modern, fast, powerful node.js web framework (@mapped-types)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nestjs\\/mapped-types:\\@nestjs\\/mapped-types:0.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nestjs/mapped-types@0.4.1", + "externalReferences": [ + { + "url": "git+https://github.com/nestjs/mapped-types.git", + "type": "distribution" + }, + { + "url": "https://github.com/nestjs/mapped-types#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nestjs/platform-express@7.6.18?package-id=5a518de16ca11f9a", + "author": "Kamil Mysliwiec", + "name": "@nestjs/platform-express", + "version": "7.6.18", + "description": "Nest - modern, fast, powerful node.js web framework (@platform-express)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nestjs\\/platform-express:\\@nestjs\\/platform-express:7.6.18:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nestjs/platform-express@7.6.18", + "externalReferences": [ + { + "url": "git+https://github.com/nestjs/nest.git", + "type": "distribution" + }, + { + "url": "https://nestjs.com", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nestjs/schedule@0.4.3?package-id=f520b9b7b48d992a", + "author": "Kamil Mysliwiec", + "name": "@nestjs/schedule", + "version": "0.4.3", + "description": "Nest - modern, fast, powerful node.js web framework (@schedule)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nestjs\\/schedule:\\@nestjs\\/schedule:0.4.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nestjs/schedule@0.4.3", + "externalReferences": [ + { + "url": "git+https://github.com/nestjs/schedule.git", + "type": "distribution" + }, + { + "url": "https://github.com/nestjs/schedule#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nestjs/swagger@4.8.2?package-id=e22c6871989630c3", + "author": "Kamil Mysliwiec", + "name": "@nestjs/swagger", + "version": "4.8.2", + "description": "Nest - modern, fast, powerful node.js web framework (@swagger)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nestjs\\/swagger:\\@nestjs\\/swagger:4.8.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nestjs/swagger@4.8.2", + "externalReferences": [ + { + "url": "git+https://github.com/nestjs/swagger.git", + "type": "distribution" + }, + { + "url": "https://github.com/nestjs/swagger#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nuxtjs/opencollective@0.3.2?package-id=4e66d3ddcbf4b722", + "name": "@nuxtjs/opencollective", + "version": "0.3.2", + "description": "[![npm version][npm-v-src]][npm-v-href] [![npm downloads][npm-d-src]][npm-d-href] [![status][github-actions-src]][github-actions-href]", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nuxtjs\\/opencollective:\\@nuxtjs\\/opencollective:0.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nuxtjs/opencollective@0.3.2", + "externalReferences": [ + { + "url": "git+https://github.com/nuxt-contrib/opencollective.git", + "type": "distribution" + }, + { + "url": "https://github.com/nuxt-contrib/opencollective#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40sentry/core@6.8.0?package-id=e09e279d0fe5f83", + "author": "Sentry", + "name": "@sentry/core", + "version": "6.8.0", + "description": "Base implementation for all Sentry JavaScript SDKs", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@sentry\\/core:\\@sentry\\/core:6.8.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40sentry/core@6.8.0", + "externalReferences": [ + { + "url": "git://github.com/getsentry/sentry-javascript.git", + "type": "distribution" + }, + { + "url": "https://github.com/getsentry/sentry-javascript/tree/master/packages/core", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40sentry/hub@6.8.0?package-id=264e93d5eeea3c3b", + "author": "Sentry", + "name": "@sentry/hub", + "version": "6.8.0", + "description": "Sentry hub which handles global state managment.", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@sentry\\/hub:\\@sentry\\/hub:6.8.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40sentry/hub@6.8.0", + "externalReferences": [ + { + "url": "git://github.com/getsentry/sentry-javascript.git", + "type": "distribution" + }, + { + "url": "https://github.com/getsentry/sentry-javascript/tree/master/packages/hub", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40sentry/minimal@6.8.0?package-id=1c0e795092dbb615", + "author": "Sentry", + "name": "@sentry/minimal", + "version": "6.8.0", + "description": "Sentry minimal library that can be used in other packages", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@sentry\\/minimal:\\@sentry\\/minimal:6.8.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40sentry/minimal@6.8.0", + "externalReferences": [ + { + "url": "git://github.com/getsentry/sentry-javascript.git", + "type": "distribution" + }, + { + "url": "https://github.com/getsentry/sentry-javascript/tree/master/packages/minimal", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40sentry/node@6.8.0?package-id=aca96b468acd8fc4", + "author": "Sentry", + "name": "@sentry/node", + "version": "6.8.0", + "description": "Official Sentry SDK for Node.js", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@sentry\\/node:\\@sentry\\/node:6.8.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40sentry/node@6.8.0", + "externalReferences": [ + { + "url": "git://github.com/getsentry/sentry-javascript.git", + "type": "distribution" + }, + { + "url": "https://github.com/getsentry/sentry-javascript/tree/master/packages/node", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40sentry/tracing@6.8.0?package-id=fa9fe474b43b09ae", + "author": "Sentry", + "name": "@sentry/tracing", + "version": "6.8.0", + "description": "Extensions for Sentry AM", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@sentry\\/tracing:\\@sentry\\/tracing:6.8.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40sentry/tracing@6.8.0", + "externalReferences": [ + { + "url": "git://github.com/getsentry/sentry-javascript.git", + "type": "distribution" + }, + { + "url": "https://github.com/getsentry/sentry-javascript/tree/master/packages/tracing", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40sentry/types@6.8.0?package-id=c356428ce47be4ef", + "author": "Sentry", + "name": "@sentry/types", + "version": "6.8.0", + "description": "Types for all Sentry JavaScript SDKs", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@sentry\\/types:\\@sentry\\/types:6.8.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40sentry/types@6.8.0", + "externalReferences": [ + { + "url": "git://github.com/getsentry/sentry-javascript.git", + "type": "distribution" + }, + { + "url": "https://github.com/getsentry/sentry-javascript/tree/master/packages/types", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40sentry/utils@6.8.0?package-id=a6c0d87fb7094269", + "author": "Sentry", + "name": "@sentry/utils", + "version": "6.8.0", + "description": "Utilities for all Sentry JavaScript SDKs", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@sentry\\/utils:\\@sentry\\/utils:6.8.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40sentry/utils@6.8.0", + "externalReferences": [ + { + "url": "git://github.com/getsentry/sentry-javascript.git", + "type": "distribution" + }, + { + "url": "https://github.com/getsentry/sentry-javascript/tree/master/packages/utils", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/validator@13.0.0?package-id=df4b0f14d888b090", + "name": "@types/validator", + "version": "13.0.0", + "description": "TypeScript definitions for validator.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/validator:\\@types\\/validator:13.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/validator@13.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/JSONStream@1.3.5?package-id=362f19a26f622e0", + "author": "Dominic Tarr (http://bit.ly/dominictarr)", + "name": "JSONStream", + "version": "1.3.5", + "description": "rawStream.pipe(JSONStream.parse()).pipe(streamOfObjects)", + "licenses": [ + { + "license": { + "name": "(MIT OR Apache-2.0)" + } + } + ], + "cpe": "cpe:2.3:a:dominictarr:JSONStream:1.3.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/JSONStream@1.3.5", + "externalReferences": [ + { + "url": "git://github.com/dominictarr/JSONStream.git", + "type": "distribution" + }, + { + "url": "http://github.com/dominictarr/JSONStream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/abbrev@1.1.1?package-id=79936430981a8702", + "author": "Isaac Z. Schlueter ", + "name": "abbrev", + "version": "1.1.1", + "description": "Like ruby's abbrev module, but in js", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:abbrev:abbrev:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/abbrev@1.1.1", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/isaacs/abbrev-js.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/abbrev-js#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/accepts@1.3.7?package-id=bbbf816fe622ef49", + "name": "accepts", + "version": "1.3.7", + "description": "Higher-level content negotiation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:accepts:accepts:1.3.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/accepts@1.3.7", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/accepts.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/accepts#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/agent-base@4.2.1?package-id=5fc4c61198f37ad3", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "agent-base", + "version": "4.2.1", + "description": "Turn a function into an `http.Agent` instance", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:TooTallNate:agent-base:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/agent-base@4.2.1", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/agent-base@4.3.0?package-id=5ba0b4e2347e7c24", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "agent-base", + "version": "4.3.0", + "description": "Turn a function into an `http.Agent` instance", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:TooTallNate:agent-base:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/agent-base@4.3.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/agent-base@6.0.2?package-id=b1bf7cf127c6dcdf", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "agent-base", + "version": "6.0.2", + "description": "Turn a function into an `http.Agent` instance", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:TooTallNate:agent-base:6.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/agent-base@6.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/agentkeepalive@3.5.2?package-id=1b7d5bc0186ab4c", + "author": "fengmk2 (https://fengmk2.com)", + "name": "agentkeepalive", + "version": "3.5.2", + "description": "Missing keepalive http.Agent", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:agentkeepalive:agentkeepalive:3.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/agentkeepalive@3.5.2", + "externalReferences": [ + { + "url": "git://github.com/node-modules/agentkeepalive.git", + "type": "distribution" + }, + { + "url": "https://github.com/node-modules/agentkeepalive#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ajv@6.12.6?package-id=9ec92091a2859d9f", + "author": "Evgeny Poberezkin", + "name": "ajv", + "version": "6.12.6", + "description": "Another JSON Schema Validator", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ajv-validator:ajv:6.12.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/ajv@6.12.6", + "externalReferences": [ + { + "url": "git+https://github.com/ajv-validator/ajv.git", + "type": "distribution" + }, + { + "url": "https://github.com/ajv-validator/ajv", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ajv@6.12.6?package-id=d362ede6e3c68fc2", + "author": "Evgeny Poberezkin", + "name": "ajv", + "version": "6.12.6", + "description": "Another JSON Schema Validator", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ajv-validator:ajv:6.12.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/ajv@6.12.6", + "externalReferences": [ + { + "url": "git+https://github.com/ajv-validator/ajv.git", + "type": "distribution" + }, + { + "url": "https://github.com/ajv-validator/ajv", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.4.0-r0?arch=x86_64&distro=alpine-3.17.3&package-id=92b19c7750fb559d", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.4.0-r0", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.4.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.4.0-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout-data@3.4.0-r0?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.17.3&package-id=291d1267b40d636f", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout-data", + "version": "3.4.0-r0", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout-data@3.4.0-r0?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.17.3&package-id=2b5e23d349b556cf", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.4-r1", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/amqplib@0.8.0?package-id=8f58df27c489bc6e", + "author": "Michael Bridgen ", + "name": "amqplib", + "version": "0.8.0", + "description": "An AMQP 0-9-1 (e.g., RabbitMQ) library and client.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:amqplib:amqplib:0.8.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/amqplib@0.8.0", + "externalReferences": [ + { + "url": "git+https://github.com/squaremo/amqp.node.git", + "type": "distribution" + }, + { + "url": "http://squaremo.github.io/amqp.node/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/amqplib-tutorials@0.0.1?package-id=3d2fec40696d1aab", + "author": "Michael Bridgen ", + "name": "amqplib-tutorials", + "version": "0.0.1", + "description": "The RabbitMQ tutorials, ported to amqplib", + "licenses": [ + { + "license": { + "name": "MPL 2.0" + } + } + ], + "cpe": "cpe:2.3:a:amqplib-tutorials:amqplib-tutorials:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/amqplib-tutorials@0.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-align@2.0.0?package-id=d1d8dd5f88203c8", + "author": "nexdrew", + "name": "ansi-align", + "version": "2.0.0", + "description": "align-text with ANSI support for CLIs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ansi-align:ansi-align:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-align@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/nexdrew/ansi-align.git", + "type": "distribution" + }, + { + "url": "https://github.com/nexdrew/ansi-align#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@2.1.1?package-id=b7526b5cc6e97d15", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "2.1.1", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@2.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@3.0.0?package-id=f6bd6cc6b4b0fe11", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "3.0.0", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@4.1.0?package-id=1898e7de5ccb0b04", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "4.1.0", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@4.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@4.1.1?package-id=5d5c8bf716d3dada", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "4.1.1", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@4.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@4.1.1?package-id=4c2cae6839d80ac9", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "4.1.1", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@4.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-styles@3.2.1?package-id=822983e67603ef84", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-styles", + "version": "3.2.1", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:3.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@3.2.1", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/ansi-styles.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/ansi-styles#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-styles@4.3.0?package-id=45c620984a9fcd36", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-styles", + "version": "4.3.0", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@4.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/ansi-styles.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/ansi-styles#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansicolors@0.3.2?package-id=b232b7afe5d99ae2", + "author": "Thorsten Lorenz (thlorenz.com)", + "name": "ansicolors", + "version": "0.3.2", + "description": "Functions that surround a string with ansicolor codes so it prints in color.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansicolors:ansicolors:0.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansicolors@0.3.2", + "externalReferences": [ + { + "url": "git://github.com/thlorenz/ansicolors.git", + "type": "distribution" + }, + { + "url": "https://github.com/thlorenz/ansicolors#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansistyles@0.1.3?package-id=3ab660f779efda37", + "author": "Thorsten Lorenz (thlorenz.com)", + "name": "ansistyles", + "version": "0.1.3", + "description": "Functions that surround a string with ansistyle codes so it prints in style.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansistyles:ansistyles:0.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansistyles@0.1.3", + "externalReferences": [ + { + "url": "git://github.com/thlorenz/ansistyles.git", + "type": "distribution" + }, + { + "url": "https://github.com/thlorenz/ansistyles#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.10-r1?arch=x86_64&distro=alpine-3.17.3&package-id=e5f757b0df1f62bc", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.12.10-r1", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.12.10-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.12.10-r1?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/append-field@1.0.0?package-id=b4d8c83b22bdf90a", + "author": "Linus Unnebäck ", + "name": "append-field", + "version": "1.0.0", + "description": "A [W3C HTML JSON forms spec](http://www.w3.org/TR/html-json-forms/) compliant field appender (for lack of a better name). Useful for people implementing `application/x-www-form-urlencoded` and `multipart/form-data` parsers.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:append-field:append-field:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/append-field@1.0.0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/LinusU/node-append-field.git", + "type": "distribution" + }, + { + "url": "https://github.com/LinusU/node-append-field#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aproba@1.2.0?package-id=46ad585877d1bee7", + "author": "Rebecca Turner ", + "name": "aproba", + "version": "1.2.0", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:aproba:aproba:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aproba@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aproba@1.2.0?package-id=9379102f72715cd", + "author": "Rebecca Turner ", + "name": "aproba", + "version": "1.2.0", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:aproba:aproba:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aproba@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aproba@1.2.0?package-id=b0b533a70d15e523", + "author": "Rebecca Turner ", + "name": "aproba", + "version": "1.2.0", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:aproba:aproba:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aproba@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aproba@1.2.0?package-id=79645860424278c4", + "author": "Rebecca Turner ", + "name": "aproba", + "version": "1.2.0", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:aproba:aproba:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aproba@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aproba@1.2.0?package-id=811071cd19319711", + "author": "Rebecca Turner ", + "name": "aproba", + "version": "1.2.0", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:aproba:aproba:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aproba@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aproba@2.0.0?package-id=1375db1ef28ee546", + "author": "Rebecca Turner ", + "name": "aproba", + "version": "2.0.0", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:aproba:aproba:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aproba@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/archy@1.0.0?package-id=b81fc5a638c3732d", + "author": "James Halliday (http://substack.net)", + "name": "archy", + "version": "1.0.0", + "description": "render nested hierarchies `npm ls` style with unicode pipes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:substack:archy:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/archy@1.0.0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/substack/node-archy.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/node-archy#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/are-we-there-yet@1.1.4?package-id=13183467f0c1f82b", + "author": "Rebecca Turner (http://re-becca.org)", + "name": "are-we-there-yet", + "version": "1.1.4", + "description": "Keep track of the overall completion of many disparate processes", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:are-we-there-yet:are-we-there-yet:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/are-we-there-yet@1.1.4", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/are-we-there-yet.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/are-we-there-yet", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/array-flatten@1.1.1?package-id=a0792ccdcca020ca", + "author": "Blake Embrey (http://blakeembrey.me)", + "name": "array-flatten", + "version": "1.1.1", + "description": "Flatten an array of nested arrays into a single flat array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:array-flatten:array-flatten:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/array-flatten@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/blakeembrey/array-flatten.git", + "type": "distribution" + }, + { + "url": "https://github.com/blakeembrey/array-flatten", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asap@2.0.6?package-id=56ea014550752625", + "name": "asap", + "version": "2.0.6", + "description": "High-priority task queue for Node.js and browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:kriskowal:asap:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/asap@2.0.6", + "externalReferences": [ + { + "url": "git+https://github.com/kriskowal/asap.git", + "type": "distribution" + }, + { + "url": "https://github.com/kriskowal/asap#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asn1@0.2.4?package-id=1eee44d8949c5741", + "author": "Joyent (joyent.com)", + "name": "asn1", + "version": "0.2.4", + "description": "Contains parsers and serializers for ASN.1 (currently BER only)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:joyent:asn1:0.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/asn1@0.2.4", + "externalReferences": [ + { + "url": "git://github.com/joyent/node-asn1.git", + "type": "distribution" + }, + { + "url": "https://github.com/joyent/node-asn1#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asn1@0.2.6?package-id=aa063fc4d0b38997", + "author": "Joyent (joyent.com)", + "name": "asn1", + "version": "0.2.6", + "description": "Contains parsers and serializers for ASN.1 (currently BER only)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:joyent:asn1:0.2.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/asn1@0.2.6", + "externalReferences": [ + { + "url": "git+https://github.com/joyent/node-asn1.git", + "type": "distribution" + }, + { + "url": "https://github.com/joyent/node-asn1#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/assert-plus@1.0.0?package-id=eb6ed49fde38c7ca", + "author": "Mark Cavage ", + "name": "assert-plus", + "version": "1.0.0", + "description": "Extra assertions on top of node's assert module", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:assert-plus:assert-plus:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/assert-plus@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/mcavage/node-assert-plus.git", + "type": "distribution" + }, + { + "url": "https://github.com/mcavage/node-assert-plus#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/assert-plus@1.0.0?package-id=7b7c9640aad220f0", + "author": "Mark Cavage ", + "name": "assert-plus", + "version": "1.0.0", + "description": "Extra assertions on top of node's assert module", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:assert-plus:assert-plus:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/assert-plus@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/mcavage/node-assert-plus.git", + "type": "distribution" + }, + { + "url": "https://github.com/mcavage/node-assert-plus#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asynckit@0.4.0?package-id=1f30a832887b0ff8", + "author": "Alex Indigo ", + "name": "asynckit", + "version": "0.4.0", + "description": "Minimal async jobs utility library, with streams support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alexindigo:asynckit:0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/asynckit@0.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/alexindigo/asynckit.git", + "type": "distribution" + }, + { + "url": "https://github.com/alexindigo/asynckit#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asynckit@0.4.0?package-id=7f18bf9a25c0da72", + "author": "Alex Indigo ", + "name": "asynckit", + "version": "0.4.0", + "description": "Minimal async jobs utility library, with streams support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alexindigo:asynckit:0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/asynckit@0.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/alexindigo/asynckit.git", + "type": "distribution" + }, + { + "url": "https://github.com/alexindigo/asynckit#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aws-sign2@0.7.0?package-id=241ea8f613278aa8", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "aws-sign2", + "version": "0.7.0", + "description": "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor in request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:aws-sign2:aws-sign2:0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aws-sign2@0.7.0", + "externalReferences": [ + { + "url": "git+https://github.com/mikeal/aws-sign.git", + "type": "distribution" + }, + { + "url": "https://github.com/mikeal/aws-sign#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aws-sign2@0.7.0?package-id=f8fe112c8da3e39f", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "aws-sign2", + "version": "0.7.0", + "description": "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor in request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:aws-sign2:aws-sign2:0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aws-sign2@0.7.0", + "externalReferences": [ + { + "url": "git+https://github.com/mikeal/aws-sign.git", + "type": "distribution" + }, + { + "url": "https://github.com/mikeal/aws-sign#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aws4@1.11.0?package-id=85277638076a826d", + "author": "Michael Hart (https://github.com/mhart)", + "name": "aws4", + "version": "1.11.0", + "description": "Signs and prepares requests using AWS Signature Version 4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mhart:aws4:1.11.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aws4@1.11.0", + "externalReferences": [ + { + "url": "git+https://github.com/mhart/aws4.git", + "type": "distribution" + }, + { + "url": "https://github.com/mhart/aws4#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aws4@1.11.0?package-id=aa99a0c281a3b3e5", + "author": "Michael Hart (https://github.com/mhart)", + "name": "aws4", + "version": "1.11.0", + "description": "Signs and prepares requests using AWS Signature Version 4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mhart:aws4:1.11.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aws4@1.11.0", + "externalReferences": [ + { + "url": "git+https://github.com/mhart/aws4.git", + "type": "distribution" + }, + { + "url": "https://github.com/mhart/aws4#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/axios@0.21.1?package-id=5a7030bf3c0c089c", + "author": "Matt Zabriskie", + "name": "axios", + "version": "0.21.1", + "description": "Promise based HTTP client for the browser and node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:axios:axios:0.21.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/axios@0.21.1", + "externalReferences": [ + { + "url": "git+https://github.com/axios/axios.git", + "type": "distribution" + }, + { + "url": "https://github.com/axios/axios", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/balanced-match@1.0.2?package-id=adb20dac41a9f796", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "balanced-match", + "version": "1.0.2", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/balanced-match@1.0.2?package-id=c15b2106d0ae19d4", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "balanced-match", + "version": "1.0.2", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2?package-id=3fb909193f37318a", + "name": "bcrypt-pbkdf", + "version": "1.0.2", + "description": "Port of the OpenBSD bcrypt_pbkdf function to pure JS", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:bcrypt-pbkdf:bcrypt-pbkdf:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/bcrypt-pbkdf@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/joyent/node-bcrypt-pbkdf.git", + "type": "distribution" + }, + { + "url": "https://github.com/joyent/node-bcrypt-pbkdf#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2?package-id=b345fa0f3bee37c", + "name": "bcrypt-pbkdf", + "version": "1.0.2", + "description": "Port of the OpenBSD bcrypt_pbkdf function to pure JS", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:bcrypt-pbkdf:bcrypt-pbkdf:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/bcrypt-pbkdf@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/joyent/node-bcrypt-pbkdf.git", + "type": "distribution" + }, + { + "url": "https://github.com/joyent/node-bcrypt-pbkdf#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bin-links@1.1.8?package-id=d51f215e6a9beb3e", + "author": "Mike Sherov", + "name": "bin-links", + "version": "1.1.8", + "description": "JavaScript package binary linker", + "licenses": [ + { + "license": { + "id": "Artistic-2.0" + } + } + ], + "cpe": "cpe:2.3:a:bin-links:bin-links:1.1.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/bin-links@1.1.8", + "externalReferences": [ + { + "url": "git://github.com/npm/bin-links.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/bin-links#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bintrees@1.0.1?package-id=5a6d9e1f935c3a8d", + "author": "Vadim Graboys ", + "name": "bintrees", + "version": "1.0.1", + "description": "Binary Search Trees", + "cpe": "cpe:2.3:a:bintrees:bintrees:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/bintrees@1.0.1", + "externalReferences": [ + { + "url": "git://github.com/vadimg/js_bintrees.git", + "type": "distribution" + }, + { + "url": "https://github.com/vadimg/js_bintrees#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bitsyntax@0.1.0?package-id=77f9fde493f2554e", + "author": "Michael Bridgen <", + "name": "bitsyntax", + "version": "0.1.0", + "description": "Pattern-matching on byte buffers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bitsyntax:bitsyntax:0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/bitsyntax@0.1.0", + "externalReferences": [ + { + "url": "git://github.com/squaremo/bitsyntax-js.git", + "type": "distribution" + }, + { + "url": "https://github.com/squaremo/bitsyntax-js#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bluebird@3.7.2?package-id=6c0c7cff468c2153", + "author": "Petka Antonov (http://github.com/petkaantonov/)", + "name": "bluebird", + "version": "3.7.2", + "description": "Full featured Promises/A+ implementation with exceptionally good performance", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:petkaantonov:bluebird:3.7.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/bluebird@3.7.2", + "externalReferences": [ + { + "url": "git://github.com/petkaantonov/bluebird.git", + "type": "distribution" + }, + { + "url": "https://github.com/petkaantonov/bluebird", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bluebird@3.7.2?package-id=6c7af820904460af", + "author": "Petka Antonov (http://github.com/petkaantonov/)", + "name": "bluebird", + "version": "3.7.2", + "description": "Full featured Promises/A+ implementation with exceptionally good performance", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:petkaantonov:bluebird:3.7.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/bluebird@3.7.2", + "externalReferences": [ + { + "url": "git://github.com/petkaantonov/bluebird.git", + "type": "distribution" + }, + { + "url": "https://github.com/petkaantonov/bluebird", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/body-parser@1.19.0?package-id=be42f3aef28246c", + "name": "body-parser", + "version": "1.19.0", + "description": "Node.js body parsing middleware", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:body-parser:body-parser:1.19.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/body-parser@1.19.0", + "externalReferences": [ + { + "url": "git+https://github.com/expressjs/body-parser.git", + "type": "distribution" + }, + { + "url": "https://github.com/expressjs/body-parser#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/boolean@3.1.2?package-id=942b43c6d3950300", + "name": "boolean", + "version": "3.1.2", + "description": "boolean converts lots of things to boolean.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:thenativeweb:boolean:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/boolean@3.1.2", + "externalReferences": [ + { + "url": "git://github.com/thenativeweb/boolean.git", + "type": "distribution" + }, + { + "url": "https://github.com/thenativeweb/boolean#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/boxen@1.3.0?package-id=9733e2ac66f5ce9b", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "boxen", + "version": "1.3.0", + "description": "Create boxes in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:boxen:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/boxen@1.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/boxen.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/boxen#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=b2f1259ad317cd31", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "1.1.11", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=a3ea8e119b765a4b", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "1.1.11", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-equal-constant-time@1.0.1?package-id=b79c7a98ecd19a5a", + "author": "GoInstant Inc., a salesforce.com company", + "name": "buffer-equal-constant-time", + "version": "1.0.1", + "description": "Constant-time comparison of Buffers", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:buffer-equal-constant-time:buffer-equal-constant-time:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-equal-constant-time@1.0.1", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/goinstant/buffer-equal-constant-time.git", + "type": "distribution" + }, + { + "url": "https://github.com/goinstant/buffer-equal-constant-time#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-from@1.0.0?package-id=679ef1b5d74ace0f", + "name": "buffer-from", + "version": "1.0.0", + "description": "A [ponyfill](https://ponyfill.com) for `Buffer.from`, uses native implementation if available.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-from:buffer-from:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-from@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/LinusU/buffer-from.git", + "type": "distribution" + }, + { + "url": "https://github.com/LinusU/buffer-from#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-from@1.1.1?package-id=f79feba1e77ff417", + "name": "buffer-from", + "version": "1.1.1", + "description": "A [ponyfill](https://ponyfill.com) for `Buffer.from`, uses native implementation if available.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-from:buffer-from:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-from@1.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/LinusU/buffer-from.git", + "type": "distribution" + }, + { + "url": "https://github.com/LinusU/buffer-from#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-more-ints@1.0.0?package-id=7a3a5c0d6bcfa79e", + "author": "David Wragg ", + "name": "buffer-more-ints", + "version": "1.0.0", + "description": "Add support for more integer widths to Buffer", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-more-ints:buffer-more-ints:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-more-ints@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/dpw/node-buffer-more-ints.git", + "type": "distribution" + }, + { + "url": "https://github.com/dpw/node-buffer-more-ints", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/builder-pattern@2.1.0?package-id=9f419aafc0da866c", + "name": "builder-pattern", + "version": "2.1.0", + "description": "Create a builder pattern for Typescript using ES6 proxy.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:builder-pattern:builder-pattern:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/builder-pattern@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/Vincent-Pang/builder-pattern.git", + "type": "distribution" + }, + { + "url": "https://github.com/Vincent-Pang/builder-pattern#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/builtins@1.0.3?package-id=38ca391b8ca0276a", + "name": "builtins", + "version": "1.0.3", + "description": "List of node.js builtin modules", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juliangruber:builtins:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/builtins@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/juliangruber/builtins.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/builtins#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/busboy@0.2.14?package-id=b320ea57e5b5ba6a", + "author": "Brian White ", + "name": "busboy", + "version": "0.2.14", + "description": "A streaming parser for HTML form data for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:busboy:busboy:0.2.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/busboy@0.2.14", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/mscdex/busboy.git", + "type": "distribution" + }, + { + "url": "https://github.com/mscdex/busboy#readme", + "type": "website" + } + ] + }, + { + "type": "application", + "bom-ref": "e6c9486419cbb84e", + "name": "busybox", + "version": "1.35.0", + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=alpine-3.17.3&package-id=623d53216342d45e", + "publisher": "Sören Tempel ", + "name": "busybox", + "version": "1.35.0-r29", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0-r29:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.3&package-id=256fc96b4a8c4da8", + "publisher": "Sören Tempel ", + "name": "busybox-binsh", + "version": "1.35.0-r29", + "description": "busybox ash /bin/sh", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox-binsh:busybox-binsh:1.35.0-r29:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/byline@5.0.0?package-id=bc8643b43cbc314e", + "author": "John Hewson", + "name": "byline", + "version": "5.0.0", + "description": "simple line-by-line stream reader", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jahewson:byline:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/byline@5.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/jahewson/node-byline.git", + "type": "distribution" + }, + { + "url": "https://github.com/jahewson/node-byline", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/byte-size@5.0.1?package-id=ca5e03ebe208c5ec", + "author": "Lloyd Brookes <75pound@gmail.com>", + "name": "byte-size", + "version": "5.0.1", + "description": "Convert a bytes (and octets) value to a more human-readable format. Choose between metric or IEC units.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:byte-size:byte-size:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/byte-size@5.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/75lb/byte-size.git", + "type": "distribution" + }, + { + "url": "https://github.com/75lb/byte-size#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bytes@3.1.0?package-id=b4af9154bbf6604c", + "author": "TJ Holowaychuk (http://tjholowaychuk.com)", + "name": "bytes", + "version": "3.1.0", + "description": "Utility to parse a string bytes to bytes and vice-versa", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:visionmedia:bytes:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/bytes@3.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/visionmedia/bytes.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/visionmedia/bytes.js#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20220614-r4?arch=x86_64&upstream=ca-certificates&distro=alpine-3.17.3&package-id=b805d823ae624f04", + "publisher": "Natanael Copa ", + "name": "ca-certificates-bundle", + "version": "20220614-r4", + "description": "Pre generated bundle of Mozilla certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-bundle@20220614-r4?arch=x86_64&upstream=ca-certificates&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cacache@12.0.4?package-id=7680a280caff40ac", + "author": "Kat Marchán ", + "name": "cacache", + "version": "12.0.4", + "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cacache:cacache:12.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/cacache@12.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/npm/cacache.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/cacache#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/call-limit@1.1.1?package-id=94eefbf82cd78b25", + "author": "Rebecca Turner ", + "name": "call-limit", + "version": "1.1.1", + "description": "Limit the number of simultaneous calls to an async function", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:call-limit:call-limit:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/call-limit@1.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/call-limit.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/packages/call-limit", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/camelcase@4.1.0?package-id=be57efd9d82defbf", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "camelcase", + "version": "4.1.0", + "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:camelcase:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/camelcase@4.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/camelcase.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/camelcase#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/camelcase@5.3.1?package-id=4d249508c958ea3b", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "camelcase", + "version": "5.3.1", + "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:camelcase:5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/camelcase@5.3.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/camelcase.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/camelcase#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/capture-stack-trace@1.0.0?package-id=12efd23d12d8a98f", + "author": "Vsevolod Strukchinsky (github.com/floatdrop)", + "name": "capture-stack-trace", + "version": "1.0.0", + "description": "Error.captureStackTrace ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:capture-stack-trace:capture-stack-trace:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/capture-stack-trace@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/floatdrop/capture-stack-trace.git", + "type": "distribution" + }, + { + "url": "https://github.com/floatdrop/capture-stack-trace#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/caseless@0.12.0?package-id=604b9cbc6038dc91", + "author": "Mikeal Rogers ", + "name": "caseless", + "version": "0.12.0", + "description": "Caseless object set/get/has, very useful when working with HTTP headers.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:caseless:caseless:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/caseless@0.12.0", + "externalReferences": [ + { + "url": "git+https://github.com/mikeal/caseless.git", + "type": "distribution" + }, + { + "url": "https://github.com/mikeal/caseless#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/caseless@0.12.0?package-id=748962a916b10431", + "author": "Mikeal Rogers ", + "name": "caseless", + "version": "0.12.0", + "description": "Caseless object set/get/has, very useful when working with HTTP headers.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:caseless:caseless:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/caseless@0.12.0", + "externalReferences": [ + { + "url": "git+https://github.com/mikeal/caseless.git", + "type": "distribution" + }, + { + "url": "https://github.com/mikeal/caseless#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chalk@2.4.1?package-id=772c80d6136b5c7c", + "name": "chalk", + "version": "2.4.1", + "description": "Terminal string styling done right", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chalk:chalk:2.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/chalk@2.4.1", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/chalk.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/chalk#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chalk@4.1.1?package-id=1a82e45c62ac7e11", + "name": "chalk", + "version": "4.1.1", + "description": "Terminal string styling done right", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chalk:chalk:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/chalk@4.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/chalk.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/chalk#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chownr@1.1.4?package-id=8e7f2809309b2b87", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "chownr", + "version": "1.1.4", + "description": "like `chown -R`", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:chownr:chownr:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/chownr@1.1.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/chownr.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/chownr#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ci-info@1.6.0?package-id=55ea54d1f904bd5e", + "author": "Thomas Watson Steen (https://twitter.com/wa7son)", + "name": "ci-info", + "version": "1.6.0", + "description": "Get details about the current Continuous Integration environment", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ci-info:ci-info:1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ci-info@1.6.0", + "externalReferences": [ + { + "url": "git+https://github.com/watson/ci-info.git", + "type": "distribution" + }, + { + "url": "https://github.com/watson/ci-info", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ci-info@2.0.0?package-id=16574bf0190b83e7", + "author": "Thomas Watson Steen (https://twitter.com/wa7son)", + "name": "ci-info", + "version": "2.0.0", + "description": "Get details about the current Continuous Integration environment", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ci-info:ci-info:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ci-info@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/watson/ci-info.git", + "type": "distribution" + }, + { + "url": "https://github.com/watson/ci-info", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cidr-regex@2.0.10?package-id=444a2d33b9bb6cf8", + "author": "silverwind ", + "name": "cidr-regex", + "version": "2.0.10", + "description": "Regular expression for matching IP addresses in CIDR notation", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:cidr-regex:cidr-regex:2.0.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/cidr-regex@2.0.10", + "externalReferences": [ + { + "url": "git+https://github.com/silverwind/cidr-regex.git", + "type": "distribution" + }, + { + "url": "https://github.com/silverwind/cidr-regex#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/class-transformer@0.3.1?package-id=e7a380cceb8414d2", + "author": "Umed Khudoiberdiev ", + "name": "class-transformer", + "version": "0.3.1", + "description": "Proper decorator-based transformation / serialization / deserialization of plain javascript objects to class constructors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:class-transformer:class-transformer:0.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/class-transformer@0.3.1", + "externalReferences": [ + { + "url": "git+https://github.com/typestack/class-transformer.git", + "type": "distribution" + }, + { + "url": "https://github.com/typestack/class-transformer#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/class-validator@0.12.2?package-id=c94eed0c9e7dc64a", + "author": "Umed Khudoiberdiev ", + "name": "class-validator", + "version": "0.12.2", + "description": "Class-based validation with Typescript / ES6 / ES5 using decorators or validation schemas. Supports both node.js and browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:class-validator:class-validator:0.12.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/class-validator@0.12.2", + "externalReferences": [ + { + "url": "git+https://github.com/typestack/class-validator.git", + "type": "distribution" + }, + { + "url": "https://github.com/typestack/class-validator#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-boxes@1.0.0?package-id=9c02e7f0cdd715b7", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "cli-boxes", + "version": "1.0.0", + "description": "Boxes for use in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:cli-boxes:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-boxes@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/cli-boxes.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/cli-boxes#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-columns@3.1.2?package-id=e9543de12daa768f", + "author": "Shannon Moeller (http://shannonmoeller.com)", + "name": "cli-columns", + "version": "3.1.2", + "description": "Columnated lists for the CLI.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shannonmoeller:cli-columns:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-columns@3.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/shannonmoeller/cli-columns.git", + "type": "distribution" + }, + { + "url": "https://github.com/shannonmoeller/cli-columns#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-table3@0.5.1?package-id=65433b3fd2fe95a6", + "author": "James Talmage", + "name": "cli-table3", + "version": "0.5.1", + "description": "Pretty unicode tables for the command line. Based on the original cli-table.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cli-table3:cli-table3:0.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-table3@0.5.1", + "externalReferences": [ + { + "url": "git+https://github.com/cli-table/cli-table3.git", + "type": "distribution" + }, + { + "url": "https://github.com/cli-table/cli-table3", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cliui@5.0.0?package-id=9c059219de8ff0b6", + "author": "Ben Coe ", + "name": "cliui", + "version": "5.0.0", + "description": "easily create complex multi-column command-line-interfaces", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cliui:cliui:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cliui@5.0.0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/yargs/cliui.git", + "type": "distribution" + }, + { + "url": "https://github.com/yargs/cliui#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/clone@1.0.4?package-id=13cad0458880c288", + "author": "Paul Vorbach (http://paul.vorba.ch/)", + "name": "clone", + "version": "1.0.4", + "description": "deep cloning of objects and arrays", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clone:clone:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/clone@1.0.4", + "externalReferences": [ + { + "url": "git://github.com/pvorb/node-clone.git", + "type": "distribution" + }, + { + "url": "https://github.com/pvorb/node-clone#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cmd-shim@3.0.3?package-id=6d36801ba84205fb", + "name": "cmd-shim", + "version": "3.0.3", + "description": "Used in npm for command line application support", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cmd-shim:cmd-shim:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/cmd-shim@3.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/npm/cmd-shim.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/cmd-shim#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/code-point-at@1.1.0?package-id=cdc2db70d5aa7113", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "code-point-at", + "version": "1.1.0", + "description": "ES2015 `String#codePointAt()` ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:code-point-at:code-point-at:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/code-point-at@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/code-point-at.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/code-point-at#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-convert@1.9.1?package-id=6a9f0408fc41f63d", + "author": "Heather Arthur ", + "name": "color-convert", + "version": "1.9.1", + "description": "Plain color conversion functions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:1.9.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@1.9.1", + "externalReferences": [ + { + "url": "git+https://github.com/Qix-/color-convert.git", + "type": "distribution" + }, + { + "url": "https://github.com/Qix-/color-convert#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-convert@2.0.1?package-id=417528da04af2cd8", + "author": "Heather Arthur ", + "name": "color-convert", + "version": "2.0.1", + "description": "Plain color conversion functions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@2.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/Qix-/color-convert.git", + "type": "distribution" + }, + { + "url": "https://github.com/Qix-/color-convert#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-name@1.1.3?package-id=55fdc340e318670", + "author": "DY ", + "name": "color-name", + "version": "1.1.3", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.3", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/dfcreative/color-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/dfcreative/color-name", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-name@1.1.4?package-id=f1798456080e41f3", + "author": "DY ", + "name": "color-name", + "version": "1.1.4", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.4", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/colorjs/color-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/colorjs/color-name", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/colors@1.3.3?package-id=c0b370b3fbefe8a8", + "author": "Marak Squires", + "name": "colors", + "version": "1.3.3", + "description": "get colors in your node.js console", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:colors:colors:1.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/colors@1.3.3", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/Marak/colors.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/Marak/colors.js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/columnify@1.5.4?package-id=c10dc5491c1ec9ba", + "author": "Tim Oxley", + "name": "columnify", + "version": "1.5.4", + "description": "Render data in text columns. Supports in-column text-wrap.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:columnify:columnify:1.5.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/columnify@1.5.4", + "externalReferences": [ + { + "url": "git://github.com/timoxley/columnify.git", + "type": "distribution" + }, + { + "url": "https://github.com/timoxley/columnify", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/combined-stream@1.0.8?package-id=1815a102a95b1ebf", + "author": "Felix Geisendörfer (http://debuggable.com/)", + "name": "combined-stream", + "version": "1.0.8", + "description": "A stream that emits multiple other streams one after another.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:combined-stream:combined-stream:1.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/combined-stream@1.0.8", + "externalReferences": [ + { + "url": "git://github.com/felixge/node-combined-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/felixge/node-combined-stream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/combined-stream@1.0.8?package-id=b5f6265c23d4a45d", + "author": "Felix Geisendörfer (http://debuggable.com/)", + "name": "combined-stream", + "version": "1.0.8", + "description": "A stream that emits multiple other streams one after another.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:combined-stream:combined-stream:1.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/combined-stream@1.0.8", + "externalReferences": [ + { + "url": "git://github.com/felixge/node-combined-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/felixge/node-combined-stream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=cae0cd90b1194aad", + "author": "James Halliday (http://substack.net)", + "name": "concat-map", + "version": "0.0.1", + "description": "concatenative mapdashery", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/node-concat-map#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=329fc63deaa5be87", + "author": "James Halliday (http://substack.net)", + "name": "concat-map", + "version": "0.0.1", + "description": "concatenative mapdashery", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/node-concat-map#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-stream@1.6.2?package-id=bc1b41c56853527e", + "author": "Max Ogden ", + "name": "concat-stream", + "version": "1.6.2", + "description": "writable stream that concatenates strings or binary data and calls a callback with the result", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-stream:concat-stream:1.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-stream@1.6.2", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/maxogden/concat-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/maxogden/concat-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-stream@1.6.2?package-id=a6eeed3b9d53d4b7", + "author": "Max Ogden ", + "name": "concat-stream", + "version": "1.6.2", + "description": "writable stream that concatenates strings or binary data and calls a callback with the result", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-stream:concat-stream:1.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-stream@1.6.2", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/maxogden/concat-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/maxogden/concat-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/config-chain@1.1.13?package-id=15f9933a1e5292dc", + "author": "Dominic Tarr (http://dominictarr.com)", + "name": "config-chain", + "version": "1.1.13", + "description": "HANDLE CONFIGURATION ONCE AND FOR ALL", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:config-chain:config-chain:1.1.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/config-chain@1.1.13", + "externalReferences": [ + { + "url": "git+https://github.com/dominictarr/config-chain.git", + "type": "distribution" + }, + { + "url": "http://github.com/dominictarr/config-chain", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/configstore@3.1.5?package-id=cbe4550eb45f019", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "configstore", + "version": "3.1.5", + "description": "Easily load and save config without having to think about where and how", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:configstore:configstore:3.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/configstore@3.1.5", + "externalReferences": [ + { + "url": "git+https://github.com/yeoman/configstore.git", + "type": "distribution" + }, + { + "url": "https://github.com/yeoman/configstore#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/consola@2.15.3?package-id=9b03a0585128a93a", + "name": "consola", + "version": "2.15.3", + "description": "Elegant Console Logger for Node.js and Browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:consola:consola:2.15.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/consola@2.15.3", + "externalReferences": [ + { + "url": "git+https://github.com/nuxt/consola.git", + "type": "distribution" + }, + { + "url": "https://github.com/nuxt/consola#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/console-control-strings@1.1.0?package-id=40a4233e59daf424", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "console-control-strings", + "version": "1.1.0", + "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:console-control-strings:console-control-strings:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/console-control-strings@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/console-control-strings.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/console-control-strings#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/content-disposition@0.5.3?package-id=9818af4848590460", + "author": "Douglas Christopher Wilson ", + "name": "content-disposition", + "version": "0.5.3", + "description": "Create and parse Content-Disposition header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:content-disposition:content-disposition:0.5.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/content-disposition@0.5.3", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/content-disposition.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/content-disposition#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/content-type@1.0.4?package-id=e516a2b57e9346c6", + "author": "Douglas Christopher Wilson ", + "name": "content-type", + "version": "1.0.4", + "description": "Create and parse HTTP Content-Type header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:content-type:content-type:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/content-type@1.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/content-type.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/content-type#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cookie@0.4.0?package-id=e25ee84e7f2e33ad", + "author": "Roman Shtylman ", + "name": "cookie", + "version": "0.4.0", + "description": "HTTP server cookie parsing and serialization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie:cookie:0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie@0.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/cookie.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/cookie#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cookie@0.4.1?package-id=9bd323a72ea5cc8", + "author": "Roman Shtylman ", + "name": "cookie", + "version": "0.4.1", + "description": "HTTP server cookie parsing and serialization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie:cookie:0.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie@0.4.1", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/cookie.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/cookie#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cookie-signature@1.0.6?package-id=a948a26643209509", + "author": "TJ Holowaychuk ", + "name": "cookie-signature", + "version": "1.0.6", + "description": "Sign and unsign cookies", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie-signature:cookie-signature:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie-signature@1.0.6", + "externalReferences": [ + { + "url": "git+https://github.com/visionmedia/node-cookie-signature.git", + "type": "distribution" + }, + { + "url": "https://github.com/visionmedia/node-cookie-signature#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/copy-concurrently@1.0.5?package-id=edf05ca839b08cd4", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "copy-concurrently", + "version": "1.0.5", + "description": "Promises of copies of files, directories and symlinks, with concurrency controls and win32 junction fallback.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:copy-concurrently:copy-concurrently:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/copy-concurrently@1.0.5", + "externalReferences": [ + { + "url": "git+https://github.com/npm/copy-concurrently.git", + "type": "distribution" + }, + { + "url": "https://www.npmjs.com/package/copy-concurrently", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/core-util-is@1.0.2?package-id=88273ea59dd04956", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "core-util-is", + "version": "1.0.2", + "description": "The `util.is*` functions introduced in Node v0.12.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:core-util-is:core-util-is:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/core-util-is@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/core-util-is.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/core-util-is#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/core-util-is@1.0.2?package-id=c0eb72d0948fdcd7", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "core-util-is", + "version": "1.0.2", + "description": "The `util.is*` functions introduced in Node v0.12.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:core-util-is:core-util-is:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/core-util-is@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/core-util-is.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/core-util-is#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/corepack@0.15.1?package-id=ceed1cd3d200ed93", + "name": "corepack", + "version": "0.15.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:corepack:corepack:0.15.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/corepack@0.15.1", + "externalReferences": [ + { + "url": "https://github.com/nodejs/corepack.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/corepack#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cors@2.8.5?package-id=9e15e0015d5f6152", + "author": "Troy Goode (https://github.com/troygoode/)", + "name": "cors", + "version": "2.8.5", + "description": "Node.js CORS middleware", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:expressjs:cors:2.8.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/cors@2.8.5", + "externalReferences": [ + { + "url": "git+https://github.com/expressjs/cors.git", + "type": "distribution" + }, + { + "url": "https://github.com/expressjs/cors#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/create-error-class@3.0.2?package-id=bf8293b4fe00649d", + "author": "Vsevolod Strukchinsky (github.com/floatdrop)", + "name": "create-error-class", + "version": "3.0.2", + "description": "Create Error classes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:create-error-class:create-error-class:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/create-error-class@3.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/floatdrop/create-error-class.git", + "type": "distribution" + }, + { + "url": "https://github.com/floatdrop/create-error-class#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cron@1.7.2?package-id=babf2d6a1138bfb", + "author": "Nick Campbell (http://github.com/ncb000gt)", + "name": "cron", + "version": "1.7.2", + "description": "Cron jobs for your node", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:kelektiv:cron:1.7.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/cron@1.7.2", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/kelektiv/node-cron.git", + "type": "distribution" + }, + { + "url": "https://github.com/kelektiv/node-cron#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cross-spawn@5.1.0?package-id=61672b0d32e13073", + "author": "IndigoUnited (http://indigounited.com)", + "name": "cross-spawn", + "version": "5.1.0", + "description": "Cross platform child_process#spawn and child_process#spawnSync", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:IndigoUnited:cross-spawn:5.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cross-spawn@5.1.0", + "externalReferences": [ + { + "url": "git://github.com/IndigoUnited/node-cross-spawn.git", + "type": "distribution" + }, + { + "url": "https://github.com/IndigoUnited/node-cross-spawn#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/crypto-random-string@1.0.0?package-id=e95397a312b450f1", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "crypto-random-string", + "version": "1.0.0", + "description": "Generate a cryptographically strong random string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crypto-random-string:crypto-random-string:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/crypto-random-string@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/crypto-random-string.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/crypto-random-string#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cyclist@0.2.2?package-id=f1897ed52fc1db0d", + "author": "Mathias Buus Madsen ", + "name": "cyclist", + "version": "0.2.2", + "description": "Cyclist is an efficient cyclic list implemention.", + "cpe": "cpe:2.3:a:mafintosh:cyclist:0.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/cyclist@0.2.2", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/cyclist.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/cyclist#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dashdash@1.14.1?package-id=a70b954493bc3675", + "author": "Trent Mick (http://trentm.com)", + "name": "dashdash", + "version": "1.14.1", + "description": "A light, featureful and explicit option parsing library.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dashdash:dashdash:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/dashdash@1.14.1", + "externalReferences": [ + { + "url": "git://github.com/trentm/node-dashdash.git", + "type": "distribution" + }, + { + "url": "https://github.com/trentm/node-dashdash#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dashdash@1.14.1?package-id=d46834cee3b39d41", + "author": "Trent Mick (http://trentm.com)", + "name": "dashdash", + "version": "1.14.1", + "description": "A light, featureful and explicit option parsing library.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dashdash:dashdash:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/dashdash@1.14.1", + "externalReferences": [ + { + "url": "git://github.com/trentm/node-dashdash.git", + "type": "distribution" + }, + { + "url": "https://github.com/trentm/node-dashdash#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@2.6.9?package-id=678b02f17fe3e102", + "author": "TJ Holowaychuk ", + "name": "debug", + "version": "2.6.9", + "description": "small debugging utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:visionmedia:debug:2.6.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@2.6.9", + "externalReferences": [ + { + "url": "git://github.com/visionmedia/debug.git", + "type": "distribution" + }, + { + "url": "https://github.com/visionmedia/debug#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@2.6.9?package-id=f480d8ebdb9f09dd", + "author": "TJ Holowaychuk ", + "name": "debug", + "version": "2.6.9", + "description": "small debugging utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:visionmedia:debug:2.6.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@2.6.9", + "externalReferences": [ + { + "url": "git://github.com/visionmedia/debug.git", + "type": "distribution" + }, + { + "url": "https://github.com/visionmedia/debug#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@2.6.9?package-id=63e404b9b646a741", + "author": "TJ Holowaychuk ", + "name": "debug", + "version": "2.6.9", + "description": "small debugging utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:visionmedia:debug:2.6.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@2.6.9", + "externalReferences": [ + { + "url": "git://github.com/visionmedia/debug.git", + "type": "distribution" + }, + { + "url": "https://github.com/visionmedia/debug#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@2.6.9?package-id=b5f8830607027ee7", + "author": "TJ Holowaychuk ", + "name": "debug", + "version": "2.6.9", + "description": "small debugging utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:visionmedia:debug:2.6.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@2.6.9", + "externalReferences": [ + { + "url": "git://github.com/visionmedia/debug.git", + "type": "distribution" + }, + { + "url": "https://github.com/visionmedia/debug#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@2.6.9?package-id=dcdc6158b4334038", + "author": "TJ Holowaychuk ", + "name": "debug", + "version": "2.6.9", + "description": "small debugging utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:visionmedia:debug:2.6.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@2.6.9", + "externalReferences": [ + { + "url": "git://github.com/visionmedia/debug.git", + "type": "distribution" + }, + { + "url": "https://github.com/visionmedia/debug#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@3.1.0?package-id=6cd8fab77e7f9acc", + "author": "TJ Holowaychuk ", + "name": "debug", + "version": "3.1.0", + "description": "small debugging utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:visionmedia:debug:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@3.1.0", + "externalReferences": [ + { + "url": "git://github.com/visionmedia/debug.git", + "type": "distribution" + }, + { + "url": "https://github.com/visionmedia/debug#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@4.3.2?package-id=e3424c7439ad0435", + "author": "TJ Holowaychuk ", + "name": "debug", + "version": "4.3.2", + "description": "small debugging utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:visionmedia:debug:4.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@4.3.2", + "externalReferences": [ + { + "url": "git://github.com/visionmedia/debug.git", + "type": "distribution" + }, + { + "url": "https://github.com/visionmedia/debug#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debuglog@1.0.1?package-id=abf6b1b40c49bc95", + "author": "Sam Roberts ", + "name": "debuglog", + "version": "1.0.1", + "description": "backport of util.debuglog from node v0.11", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sam-github:debuglog:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/debuglog@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sam-github/node-debuglog.git", + "type": "distribution" + }, + { + "url": "https://github.com/sam-github/node-debuglog#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/decamelize@1.2.0?package-id=ad1f772c12d9a9f", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "decamelize", + "version": "1.2.0", + "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:decamelize:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/decamelize@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/decamelize.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/decamelize#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/decode-uri-component@0.2.2?package-id=c1c36d4917da6909", + "author": "Sam Verschueren (github.com/SamVerschueren)", + "name": "decode-uri-component", + "version": "0.2.2", + "description": "A better decodeURIComponent", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decode-uri-component:decode-uri-component:0.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/decode-uri-component@0.2.2", + "externalReferences": [ + { + "url": "git+https://github.com/SamVerschueren/decode-uri-component.git", + "type": "distribution" + }, + { + "url": "https://github.com/SamVerschueren/decode-uri-component#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/deep-extend@0.6.0?package-id=249a5a2e595cbcf5", + "author": "Viacheslav Lotsmanov ", + "name": "deep-extend", + "version": "0.6.0", + "description": "Recursive object extending", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:deep-extend:deep-extend:0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/deep-extend@0.6.0", + "externalReferences": [ + { + "url": "git://github.com/unclechu/node-deep-extend.git", + "type": "distribution" + }, + { + "url": "https://github.com/unclechu/node-deep-extend", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/deepmerge@4.2.2?package-id=13a27b81ced9569c", + "name": "deepmerge", + "version": "4.2.2", + "description": "A library for deep (recursive) merging of Javascript objects", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:TehShrike:deepmerge:4.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/deepmerge@4.2.2", + "externalReferences": [ + { + "url": "git://github.com/TehShrike/deepmerge.git", + "type": "distribution" + }, + { + "url": "https://github.com/TehShrike/deepmerge", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/defaults@1.0.3?package-id=b87ef5ac001f1810", + "author": "Elijah Insua ", + "name": "defaults", + "version": "1.0.3", + "description": "merge single level defaults over a config object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:defaults:defaults:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/defaults@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/tmpvar/defaults.git", + "type": "distribution" + }, + { + "url": "https://github.com/tmpvar/defaults#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/define-properties@1.1.3?package-id=6f151d17ca4e763e", + "author": "Jordan Harband", + "name": "define-properties", + "version": "1.1.3", + "description": "Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:define-properties:define-properties:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/define-properties@1.1.3", + "externalReferences": [ + { + "url": "git://github.com/ljharb/define-properties.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/define-properties#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/define-properties@1.1.3?package-id=b4b6e57cfdee31b8", + "author": "Jordan Harband", + "name": "define-properties", + "version": "1.1.3", + "description": "Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:define-properties:define-properties:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/define-properties@1.1.3", + "externalReferences": [ + { + "url": "git://github.com/ljharb/define-properties.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/delay@5.0.0?package-id=1fdfc0742e38417a", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "delay", + "version": "5.0.0", + "description": "Delay a promise a specified amount of time", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:delay:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/delay@5.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/delay.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/delay#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/delayed-stream@1.0.0?package-id=f797cfc3ebbb05a9", + "author": "Felix Geisendörfer (http://debuggable.com/)", + "name": "delayed-stream", + "version": "1.0.0", + "description": "Buffers events from a stream until you are ready to handle them.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:delayed-stream:delayed-stream:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/delayed-stream@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/felixge/node-delayed-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/felixge/node-delayed-stream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/delayed-stream@1.0.0?package-id=a195d79ef31bc579", + "author": "Felix Geisendörfer (http://debuggable.com/)", + "name": "delayed-stream", + "version": "1.0.0", + "description": "Buffers events from a stream until you are ready to handle them.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:delayed-stream:delayed-stream:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/delayed-stream@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/felixge/node-delayed-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/felixge/node-delayed-stream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/delegates@1.0.0?package-id=611fe8c99f30481e", + "name": "delegates", + "version": "1.0.0", + "description": "delegate methods and accessors to another property", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:visionmedia:delegates:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/delegates@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/visionmedia/node-delegates.git", + "type": "distribution" + }, + { + "url": "https://github.com/visionmedia/node-delegates#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/depd@1.1.2?package-id=b4e3a373f4fec0b8", + "author": "Douglas Christopher Wilson ", + "name": "depd", + "version": "1.1.2", + "description": "Deprecate all the things", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dougwilson:depd:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/depd@1.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/dougwilson/nodejs-depd.git", + "type": "distribution" + }, + { + "url": "https://github.com/dougwilson/nodejs-depd#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/destroy@1.0.4?package-id=d0ece580645e4cd1", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "destroy", + "version": "1.0.4", + "description": "destroy a stream if possible", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stream-utils:destroy:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/destroy@1.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/stream-utils/destroy.git", + "type": "distribution" + }, + { + "url": "https://github.com/stream-utils/destroy#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/detect-indent@5.0.0?package-id=cbccbb5dd754391", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "detect-indent", + "version": "5.0.0", + "description": "Detect the indentation of code", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:detect-indent:detect-indent:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/detect-indent@5.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/detect-indent.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/detect-indent#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/detect-newline@2.1.0?package-id=9759ace33b9872ed", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "detect-newline", + "version": "2.1.0", + "description": "Detect the dominant newline character of a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:detect-newline:detect-newline:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/detect-newline@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/detect-newline.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/detect-newline#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/detect-node@2.1.0?package-id=1f525b60a1ca3255", + "author": "Ilya Kantor", + "name": "detect-node", + "version": "2.1.0", + "description": "Detect Node.JS (as opposite to browser environment) (reliable)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:detect-node:detect-node:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/detect-node@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/iliakan/detect-node.git", + "type": "distribution" + }, + { + "url": "https://github.com/iliakan/detect-node", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dezalgo@1.0.4?package-id=8c098b6c7c66a9ca", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "dezalgo", + "version": "1.0.4", + "description": "Contain async insanity so that the dark pony lord doesn't eat souls", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:dezalgo:dezalgo:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/dezalgo@1.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/npm/dezalgo.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/dezalgo", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dicer@0.2.5?package-id=a8a869ccc4536dc8", + "author": "Brian White ", + "name": "dicer", + "version": "0.2.5", + "description": "A very fast streaming multipart parser for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mscdex:dicer:0.2.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/dicer@0.2.5", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/mscdex/dicer.git", + "type": "distribution" + }, + { + "url": "https://github.com/mscdex/dicer#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dot-prop@4.2.1?package-id=d49bd91a9d2691c0", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "dot-prop", + "version": "4.2.1", + "description": "Get, set, or delete a property from a nested object using a dot path", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:dot-prop:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/dot-prop@4.2.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/dot-prop.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/dot-prop#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dotenv@10.0.0?package-id=116cfbf727d31b6f", + "name": "dotenv", + "version": "10.0.0", + "description": "Loads environment variables from .env file", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:motdotla:dotenv:10.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/dotenv@10.0.0", + "externalReferences": [ + { + "url": "git://github.com/motdotla/dotenv.git", + "type": "distribution" + }, + { + "url": "https://github.com/motdotla/dotenv#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dotenv@5.0.1?package-id=52ed2ee809f10570", + "author": "scottmotte", + "name": "dotenv", + "version": "5.0.1", + "description": "Loads environment variables from .env file", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:motdotla:dotenv:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/dotenv@5.0.1", + "externalReferences": [ + { + "url": "git://github.com/motdotla/dotenv.git", + "type": "distribution" + }, + { + "url": "https://github.com/motdotla/dotenv#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/duplexer3@0.1.4?package-id=98204faeb1e0cfb8", + "author": "Conrad Pankoff (http://www.fknsrs.biz/)", + "name": "duplexer3", + "version": "0.1.4", + "description": "Like duplexer but using streams3", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:duplexer3:duplexer3:0.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/duplexer3@0.1.4", + "externalReferences": [ + { + "url": "git+https://github.com/floatdrop/duplexer3.git", + "type": "distribution" + }, + { + "url": "https://github.com/floatdrop/duplexer3#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/duplexify@3.6.0?package-id=80b25920959c0055", + "author": "Mathias Buus", + "name": "duplexify", + "version": "3.6.0", + "description": "Turn a writable and readable stream into a streams2 duplex stream with support for async initialization and streams1/streams2 input", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:duplexify:duplexify:3.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/duplexify@3.6.0", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/duplexify.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/duplexify", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ecc-jsbn@0.1.2?package-id=74cef8cdd38faaa", + "author": "Jeremie Miller (http://jeremie.com/)", + "name": "ecc-jsbn", + "version": "0.1.2", + "description": "ECC JS code based on JSBN", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:quartzjer:ecc-jsbn:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ecc-jsbn@0.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/quartzjer/ecc-jsbn.git", + "type": "distribution" + }, + { + "url": "https://github.com/quartzjer/ecc-jsbn", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ecc-jsbn@0.1.2?package-id=13a413a168a6381f", + "author": "Jeremie Miller (http://jeremie.com/)", + "name": "ecc-jsbn", + "version": "0.1.2", + "description": "ECC JS code based on JSBN", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:quartzjer:ecc-jsbn:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ecc-jsbn@0.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/quartzjer/ecc-jsbn.git", + "type": "distribution" + }, + { + "url": "https://github.com/quartzjer/ecc-jsbn", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ecdsa-sig-formatter@1.0.11?package-id=641fb1a75989c2b9", + "author": "D2L Corporation", + "name": "ecdsa-sig-formatter", + "version": "1.0.11", + "description": "Translate ECDSA signatures between ASN.1/DER and JOSE-style concatenation", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:ecdsa-sig-formatter:ecdsa-sig-formatter:1.0.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/ecdsa-sig-formatter@1.0.11", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/Brightspace/node-ecdsa-sig-formatter.git", + "type": "distribution" + }, + { + "url": "https://github.com/Brightspace/node-ecdsa-sig-formatter#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/editor@1.0.0?package-id=57824e36461985c2", + "author": "James Halliday (http://substack.net)", + "name": "editor", + "version": "1.0.0", + "description": "launch $EDITOR in your program", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:substack:editor:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/editor@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/substack/node-editor.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/node-editor", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ee-first@1.1.1?package-id=64407a6fdf5ac08b", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "ee-first", + "version": "1.1.1", + "description": "return the first event in a set of ee/event pairs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonathanong:ee-first:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ee-first@1.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/jonathanong/ee-first.git", + "type": "distribution" + }, + { + "url": "https://github.com/jonathanong/ee-first#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/emoji-regex@7.0.3?package-id=67c6a2d66166ba44", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "emoji-regex", + "version": "7.0.3", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:emoji-regex:emoji-regex:7.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/emoji-regex@7.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/mathiasbynens/emoji-regex.git", + "type": "distribution" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/encodeurl@1.0.2?package-id=6de19f90b58f26e3", + "name": "encodeurl", + "version": "1.0.2", + "description": "Encode a URL to a percent-encoded form, excluding already-encoded sequences", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:encodeurl:encodeurl:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/encodeurl@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/pillarjs/encodeurl.git", + "type": "distribution" + }, + { + "url": "https://github.com/pillarjs/encodeurl#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/encoding@0.1.12?package-id=871fd80324ab2784", + "author": "Andris Reinman", + "name": "encoding", + "version": "0.1.12", + "description": "Convert encodings, uses iconv by default and fallbacks to iconv-lite if needed", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:encoding:encoding:0.1.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/encoding@0.1.12", + "externalReferences": [ + { + "url": "git+https://github.com/andris9/encoding.git", + "type": "distribution" + }, + { + "url": "https://github.com/andris9/encoding#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/end-of-stream@1.4.1?package-id=6a3ff5d2005a6a76", + "author": "Mathias Buus ", + "name": "end-of-stream", + "version": "1.4.1", + "description": "Call a callback when a readable/writable/duplex stream has completed or failed.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:end-of-stream:end-of-stream:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/end-of-stream@1.4.1", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/end-of-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/end-of-stream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/env-paths@2.2.1?package-id=6167f6188e6fdd99", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "env-paths", + "version": "2.2.1", + "description": "Get paths for storing things like data, config, cache, etc", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:env-paths:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/env-paths@2.2.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/env-paths.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/env-paths#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/err-code@1.1.2?package-id=47b4e2b3e9659ed4", + "author": "IndigoUnited (http://indigounited.com)", + "name": "err-code", + "version": "1.1.2", + "description": "Create an error with a code", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:IndigoUnited:err-code:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/err-code@1.1.2", + "externalReferences": [ + { + "url": "git://github.com/IndigoUnited/js-err-code.git", + "type": "distribution" + }, + { + "url": "https://github.com/IndigoUnited/js-err-code#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/errno@0.1.7?package-id=1f6d7a00a99768b0", + "name": "errno", + "version": "0.1.7", + "description": "libuv errno details exposed", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:errno:errno:0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/errno@0.1.7", + "externalReferences": [ + { + "url": "git+https://github.com/rvagg/node-errno.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/node-errno#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/es-abstract@1.12.0?package-id=a2b6224dc1972289", + "author": "Jordan Harband (http://ljharb.codes)", + "name": "es-abstract", + "version": "1.12.0", + "description": "ECMAScript spec abstract operations.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:es-abstract:es-abstract:1.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/es-abstract@1.12.0", + "externalReferences": [ + { + "url": "git://github.com/ljharb/es-abstract.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/es-to-primitive@1.2.0?package-id=ff185285dcd118b3", + "author": "Jordan Harband", + "name": "es-to-primitive", + "version": "1.2.0", + "description": "ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:es-to-primitive:es-to-primitive:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/es-to-primitive@1.2.0", + "externalReferences": [ + { + "url": "git://github.com/ljharb/es-to-primitive.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/es6-promise@4.2.8?package-id=7acd7eff273aea0f", + "author": "Yehuda Katz, Tom Dale, Stefan Penner and contributors (Conversion to ES6 API by Jake Archibald)", + "name": "es6-promise", + "version": "4.2.8", + "description": "A lightweight library that provides tools for organizing asynchronous code", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stefanpenner:es6-promise:4.2.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/es6-promise@4.2.8", + "externalReferences": [ + { + "url": "git://github.com/stefanpenner/es6-promise.git", + "type": "distribution" + }, + { + "url": "https://github.com/stefanpenner/es6-promise", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/es6-promisify@5.0.0?package-id=922e6b6cb34c0449", + "author": "Mike Hall ", + "name": "es6-promisify", + "version": "5.0.0", + "description": "Converts callback-based functions to ES6 Promises", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:digitaldesignlabs:es6-promisify:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/es6-promisify@5.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/digitaldesignlabs/es6-promisify.git", + "type": "distribution" + }, + { + "url": "https://github.com/digitaldesignlabs/es6-promisify#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/escape-html@1.0.3?package-id=fc052a8fdf6a88f1", + "name": "escape-html", + "version": "1.0.3", + "description": "Escape string for use in HTML", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:escape-html:escape-html:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/escape-html@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/component/escape-html.git", + "type": "distribution" + }, + { + "url": "https://github.com/component/escape-html#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/escape-string-regexp@1.0.5?package-id=4ab0b66784f88a18", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "escape-string-regexp", + "version": "1.0.5", + "description": "Escape RegExp special characters", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:escape-string-regexp:escape-string-regexp:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/escape-string-regexp@1.0.5", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/escape-string-regexp.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/escape-string-regexp#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/etag@1.8.1?package-id=3601ed58fabb680", + "name": "etag", + "version": "1.8.1", + "description": "Create simple HTTP ETags", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jshttp:etag:1.8.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/etag@1.8.1", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/etag.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/etag#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/execa@0.7.0?package-id=cb39ab257461721b", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "execa", + "version": "0.7.0", + "description": "A better `child_process`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:execa:0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/execa@0.7.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/execa.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/execa#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/express@4.17.1?package-id=b158c53a8f877dac", + "author": "TJ Holowaychuk ", + "name": "express", + "version": "4.17.1", + "description": "Fast, unopinionated, minimalist web framework", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:express:express:4.17.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/express@4.17.1", + "externalReferences": [ + { + "url": "git+https://github.com/expressjs/express.git", + "type": "distribution" + }, + { + "url": "http://expressjs.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/express-prom-bundle@6.3.6?package-id=dcf2eacb49838111", + "author": "Konstantin Pogorelov ", + "name": "express-prom-bundle", + "version": "6.3.6", + "description": "express middleware with popular prometheus metrics in one bundle", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:express-prom-bundle:express-prom-bundle:6.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/express-prom-bundle@6.3.6", + "externalReferences": [ + { + "url": "git+https://github.com/jochen-schweizer/express-prom-bundle.git", + "type": "distribution" + }, + { + "url": "https://github.com/jochen-schweizer/express-prom-bundle#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/extend@3.0.2?package-id=6bab12d733b687f3", + "author": "Stefan Thomas (http://www.justmoon.net)", + "name": "extend", + "version": "3.0.2", + "description": "Port of jQuery.extend for node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:justmoon:extend:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/extend@3.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/justmoon/node-extend.git", + "type": "distribution" + }, + { + "url": "https://github.com/justmoon/node-extend#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/extend@3.0.2?package-id=6a93821e99ea76cf", + "author": "Stefan Thomas (http://www.justmoon.net)", + "name": "extend", + "version": "3.0.2", + "description": "Port of jQuery.extend for node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:justmoon:extend:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/extend@3.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/justmoon/node-extend.git", + "type": "distribution" + }, + { + "url": "https://github.com/justmoon/node-extend#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/extsprintf@1.3.0?package-id=6d772acc2a99f13", + "name": "extsprintf", + "version": "1.3.0", + "description": "extended POSIX-style sprintf", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:davepacheco:extsprintf:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/extsprintf@1.3.0", + "externalReferences": [ + { + "url": "git://github.com/davepacheco/node-extsprintf.git", + "type": "distribution" + }, + { + "url": "https://github.com/davepacheco/node-extsprintf#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/extsprintf@1.3.0?package-id=c9c71fa4864f843a", + "name": "extsprintf", + "version": "1.3.0", + "description": "extended POSIX-style sprintf", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:davepacheco:extsprintf:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/extsprintf@1.3.0", + "externalReferences": [ + { + "url": "git://github.com/davepacheco/node-extsprintf.git", + "type": "distribution" + }, + { + "url": "https://github.com/davepacheco/node-extsprintf#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-deep-equal@3.1.3?package-id=50fc8df9c652bfea", + "author": "Evgeny Poberezkin", + "name": "fast-deep-equal", + "version": "3.1.3", + "description": "Fast deep equal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-deep-equal:fast-deep-equal:3.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-deep-equal@3.1.3", + "externalReferences": [ + { + "url": "git+https://github.com/epoberezkin/fast-deep-equal.git", + "type": "distribution" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-deep-equal@3.1.3?package-id=6bf670068a1ba042", + "author": "Evgeny Poberezkin", + "name": "fast-deep-equal", + "version": "3.1.3", + "description": "Fast deep equal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-deep-equal:fast-deep-equal:3.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-deep-equal@3.1.3", + "externalReferences": [ + { + "url": "git+https://github.com/epoberezkin/fast-deep-equal.git", + "type": "distribution" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-json-stable-stringify@2.0.0?package-id=2012b0c94dfc94ce", + "author": "James Halliday (http://substack.net)", + "name": "fast-json-stable-stringify", + "version": "2.0.0", + "description": "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-json-stable-stringify:fast-json-stable-stringify:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-json-stable-stringify@2.0.0", + "externalReferences": [ + { + "url": "git://github.com/epoberezkin/fast-json-stable-stringify.git", + "type": "distribution" + }, + { + "url": "https://github.com/epoberezkin/fast-json-stable-stringify", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-json-stable-stringify@2.1.0?package-id=4c56416a0a0165fc", + "author": "James Halliday (http://substack.net)", + "name": "fast-json-stable-stringify", + "version": "2.1.0", + "description": "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-json-stable-stringify:fast-json-stable-stringify:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-json-stable-stringify@2.1.0", + "externalReferences": [ + { + "url": "git://github.com/epoberezkin/fast-json-stable-stringify.git", + "type": "distribution" + }, + { + "url": "https://github.com/epoberezkin/fast-json-stable-stringify", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-json-stringify@2.7.7?package-id=549c1c17dce79771", + "author": "Matteo Collina ", + "name": "fast-json-stringify", + "version": "2.7.7", + "description": "Stringify your JSON at max speed", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-json-stringify:fast-json-stringify:2.7.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-json-stringify@2.7.7", + "externalReferences": [ + { + "url": "git+https://github.com/fastify/fast-json-stringify.git", + "type": "distribution" + }, + { + "url": "https://github.com/fastify/fast-json-stringify#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-printf@1.6.6?package-id=848b72b46bada36b", + "author": "Gajus Kuizinas (http://gajus.com)", + "name": "fast-printf", + "version": "1.6.6", + "description": "Fast and spec-compliant printf implementation for Node.js and browser.", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:fast-printf:fast-printf:1.6.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-printf@1.6.6", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/gajus/fast-printf.git", + "type": "distribution" + }, + { + "url": "https://github.com/gajus/fast-printf#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-safe-stringify@2.0.7?package-id=c12cba20e0a81013", + "author": "David Mark Clements", + "name": "fast-safe-stringify", + "version": "2.0.7", + "description": "Safely and quickly serialize JavaScript objects", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-safe-stringify:fast-safe-stringify:2.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-safe-stringify@2.0.7", + "externalReferences": [ + { + "url": "git+https://github.com/davidmarkclements/fast-safe-stringify.git", + "type": "distribution" + }, + { + "url": "https://github.com/davidmarkclements/fast-safe-stringify#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/figgy-pudding@3.5.2?package-id=81ce152b3d17f962", + "author": "Kat Marchán ", + "name": "figgy-pudding", + "version": "3.5.2", + "description": "Delicious, festive, cascading config/opts definitions", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:figgy-pudding:figgy-pudding:3.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/figgy-pudding@3.5.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/figgy-pudding.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/figgy-pudding#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/filter-obj@1.1.0?package-id=f88d731707c42b6", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "filter-obj", + "version": "1.1.0", + "description": "Filter object keys and values into a new object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:filter-obj:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/filter-obj@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/filter-obj.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/filter-obj#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/finalhandler@1.1.2?package-id=6259b7a0001a9b91", + "author": "Douglas Christopher Wilson ", + "name": "finalhandler", + "version": "1.1.2", + "description": "Node.js final http responder", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:finalhandler:finalhandler:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/finalhandler@1.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/pillarjs/finalhandler.git", + "type": "distribution" + }, + { + "url": "https://github.com/pillarjs/finalhandler#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/find-npm-prefix@1.0.2?package-id=52a36cf455f307ab", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "find-npm-prefix", + "version": "1.0.2", + "description": "Find the npm project directory associated with for a given directory", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:find-npm-prefix:find-npm-prefix:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/find-npm-prefix@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/find-npm-prefix.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/find-npm-prefix#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/find-up@3.0.0?package-id=74983d480f9ee68a", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "find-up", + "version": "3.0.0", + "description": "Find a file or directory by walking up parent directories", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:find-up:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/find-up@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/find-up.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/find-up#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/find-up@3.0.0?package-id=9716c27e89885f20", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "find-up", + "version": "3.0.0", + "description": "Find a file or directory by walking up parent directories", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:find-up:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/find-up@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/find-up.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/find-up#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/flush-write-stream@1.0.3?package-id=e1274c36a6d8d9af", + "author": "Mathias Buus (@mafintosh)", + "name": "flush-write-stream", + "version": "1.0.3", + "description": "A write stream constructor that supports a flush function that is called before finish is emitted", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:flush-write-stream:flush-write-stream:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/flush-write-stream@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/mafintosh/flush-write-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/flush-write-stream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/follow-redirects@1.14.1?package-id=4b652173b205fb20", + "author": "Ruben Verborgh (https://ruben.verborgh.org/)", + "name": "follow-redirects", + "version": "1.14.1", + "description": "HTTP and HTTPS modules that follow redirects.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:follow-redirects:follow-redirects:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/follow-redirects@1.14.1", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/follow-redirects/follow-redirects.git", + "type": "distribution" + }, + { + "url": "https://github.com/follow-redirects/follow-redirects", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/forever-agent@0.6.1?package-id=98a3d322631e6154", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "forever-agent", + "version": "0.6.1", + "description": "HTTP Agent that keeps socket connections alive between keep-alive requests. Formerly part of mikeal/request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:forever-agent:forever-agent:0.6.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/forever-agent@0.6.1", + "externalReferences": [ + { + "url": "git+https://github.com/mikeal/forever-agent.git", + "type": "distribution" + }, + { + "url": "https://github.com/mikeal/forever-agent#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/forever-agent@0.6.1?package-id=f246b38c6ee5f71b", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "forever-agent", + "version": "0.6.1", + "description": "HTTP Agent that keeps socket connections alive between keep-alive requests. Formerly part of mikeal/request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:forever-agent:forever-agent:0.6.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/forever-agent@0.6.1", + "externalReferences": [ + { + "url": "git+https://github.com/mikeal/forever-agent.git", + "type": "distribution" + }, + { + "url": "https://github.com/mikeal/forever-agent#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/form-data@2.3.3?package-id=d6e8268dcb37667b", + "author": "Felix Geisendörfer (http://debuggable.com/)", + "name": "form-data", + "version": "2.3.3", + "description": "A library to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:form-data:form-data:2.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/form-data@2.3.3", + "externalReferences": [ + { + "url": "git://github.com/form-data/form-data.git", + "type": "distribution" + }, + { + "url": "https://github.com/form-data/form-data#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/form-data@2.3.3?package-id=1d49afe3df30119c", + "author": "Felix Geisendörfer (http://debuggable.com/)", + "name": "form-data", + "version": "2.3.3", + "description": "A library to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:form-data:form-data:2.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/form-data@2.3.3", + "externalReferences": [ + { + "url": "git://github.com/form-data/form-data.git", + "type": "distribution" + }, + { + "url": "https://github.com/form-data/form-data#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/forwarded@0.2.0?package-id=7586805f75eddd56", + "name": "forwarded", + "version": "0.2.0", + "description": "Parse HTTP X-Forwarded-For header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:forwarded:forwarded:0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/forwarded@0.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/forwarded.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/forwarded#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fresh@0.5.2?package-id=1aacf9842bb86f3e", + "author": "TJ Holowaychuk (http://tjholowaychuk.com)", + "name": "fresh", + "version": "0.5.2", + "description": "HTTP response freshness testing", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jshttp:fresh:0.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/fresh@0.5.2", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/fresh.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/fresh#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/from2@1.3.0?package-id=c7f3a7e49c7e8f25", + "author": "Hugh Kennedy (http://hughsk.io/)", + "name": "from2", + "version": "1.3.0", + "description": "Convenience wrapper for ReadableStream, with an API lifted from \"from\" and \"through2\"", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hughsk:from2:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/from2@1.3.0", + "externalReferences": [ + { + "url": "git://github.com/hughsk/from2.git", + "type": "distribution" + }, + { + "url": "https://github.com/hughsk/from2", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/from2@2.3.0?package-id=ee2d6b417c35bfd2", + "author": "Hugh Kennedy (http://hughsk.io/)", + "name": "from2", + "version": "2.3.0", + "description": "Convenience wrapper for ReadableStream, with an API lifted from \"from\" and \"through2\"", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hughsk:from2:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/from2@2.3.0", + "externalReferences": [ + { + "url": "git://github.com/hughsk/from2.git", + "type": "distribution" + }, + { + "url": "https://github.com/hughsk/from2", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-minipass@1.2.7?package-id=2e904f22ead50ae2", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs-minipass", + "version": "1.2.7", + "description": "fs read and write streams based on minipass", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:1.2.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-minipass@1.2.7", + "externalReferences": [ + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-vacuum@1.2.10?package-id=b9aa5d16af1961b0", + "author": "Forrest L Norvell ", + "name": "fs-vacuum", + "version": "1.2.10", + "description": "recursively remove empty directories -- to a point", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs-vacuum:fs-vacuum:1.2.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-vacuum@1.2.10", + "externalReferences": [ + { + "url": "git+https://github.com/npm/fs-vacuum.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/fs-vacuum", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-write-stream-atomic@1.0.10?package-id=7b08016bb08061fe", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs-write-stream-atomic", + "version": "1.0.10", + "description": "Like `fs.createWriteStream(...)`, but atomic.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs-write-stream-atomic:fs-write-stream-atomic:1.0.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-write-stream-atomic@1.0.10", + "externalReferences": [ + { + "url": "git+https://github.com/npm/fs-write-stream-atomic.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/fs-write-stream-atomic", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=9584ea0c034d1c3c", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs.realpath", + "version": "1.0.0", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/fs.realpath#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=ac3c818d9ca6548d", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs.realpath", + "version": "1.0.0", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/fs.realpath#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/function-bind@1.1.1?package-id=44648bf09db15f6c", + "author": "Raynos ", + "name": "function-bind", + "version": "1.1.1", + "description": "Implementation of Function.prototype.bind", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:function-bind:function-bind:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/function-bind@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/Raynos/function-bind.git", + "type": "distribution" + }, + { + "url": "https://github.com/Raynos/function-bind", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/gauge@2.7.4?package-id=ea01ccd89b49fe1f", + "author": "Rebecca Turner ", + "name": "gauge", + "version": "2.7.4", + "description": "A terminal based horizontal guage", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:gauge:gauge:2.7.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/gauge@2.7.4", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/gauge.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/gauge", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/genfun@5.0.0?package-id=6ca73a56321ec465", + "author": "Kat Marchán ", + "name": "genfun", + "version": "5.0.0", + "description": "Fast, prototype-friendly multimethods.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:genfun:genfun:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/genfun@5.0.0", + "externalReferences": [ + { + "url": "git://github.com/zkat/genfun.git", + "type": "distribution" + }, + { + "url": "http://github.com/zkat/genfun", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/gentle-fs@2.3.1?package-id=9e57430eae250bbf", + "author": "Mike Sherov", + "name": "gentle-fs", + "version": "2.3.1", + "description": "Gentle Filesystem operations", + "licenses": [ + { + "license": { + "id": "Artistic-2.0" + } + } + ], + "cpe": "cpe:2.3:a:gentle-fs:gentle-fs:2.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/gentle-fs@2.3.1", + "externalReferences": [ + { + "url": "git://github.com/npm/gentle-fs.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/gentle-fs#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-caller-file@2.0.5?package-id=c3a7c0e90ec1bd2a", + "author": "Stefan Penner", + "name": "get-caller-file", + "version": "2.0.5", + "description": "[![Build Status](https://travis-ci.org/stefanpenner/get-caller-file.svg?branch=master)](https://travis-ci.org/stefanpenner/get-caller-file) [![Build status](https://ci.appveyor.com/api/projects/status/ol2q94g1932cy14a/branch/master?svg=true)](https://ci.appveyor.com/project/embercli/get-caller-file/branch/master)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:get-caller-file:get-caller-file:2.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-caller-file@2.0.5", + "externalReferences": [ + { + "url": "git+https://github.com/stefanpenner/get-caller-file.git", + "type": "distribution" + }, + { + "url": "https://github.com/stefanpenner/get-caller-file#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-stream@3.0.0?package-id=1101f5258c5b4846", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "get-stream", + "version": "3.0.0", + "description": "Get a stream as a string, buffer, or array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:get-stream:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-stream@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/get-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/get-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-stream@3.0.0?package-id=d5ca602593287b20", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "get-stream", + "version": "3.0.0", + "description": "Get a stream as a string, buffer, or array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:get-stream:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-stream@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/get-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/get-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-stream@4.1.0?package-id=d90dfcea848a9fbf", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "get-stream", + "version": "4.1.0", + "description": "Get a stream as a string, buffer, or array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:get-stream:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-stream@4.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/get-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/get-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/getpass@0.1.7?package-id=784c884394bb087a", + "author": "Alex Wilson ", + "name": "getpass", + "version": "0.1.7", + "description": "getpass for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:arekinath:getpass:0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/getpass@0.1.7", + "externalReferences": [ + { + "url": "git+https://github.com/arekinath/node-getpass.git", + "type": "distribution" + }, + { + "url": "https://github.com/arekinath/node-getpass#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/getpass@0.1.7?package-id=25b6b9755ea147b4", + "author": "Alex Wilson ", + "name": "getpass", + "version": "0.1.7", + "description": "getpass for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:arekinath:getpass:0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/getpass@0.1.7", + "externalReferences": [ + { + "url": "git+https://github.com/arekinath/node-getpass.git", + "type": "distribution" + }, + { + "url": "https://github.com/arekinath/node-getpass#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.1.7?package-id=5fc600d283c6cdae", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.1.7", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.1.7", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/node-glob#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.2.3?package-id=ea6094df5684c0c2", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.2.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/node-glob#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/global-dirs@0.1.1?package-id=a81eae1ffee86ac6", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "global-dirs", + "version": "0.1.1", + "description": "Get the directory of globally installed packages and binaries", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:global-dirs:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/global-dirs@0.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/global-dirs.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/global-dirs#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/globalthis@1.0.2?package-id=825611a4936e82c6", + "author": "Jordan Harband ", + "name": "globalthis", + "version": "1.0.2", + "description": "ECMAScript spec-compliant polyfill/shim for `globalThis`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:globalthis:globalthis:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/globalthis@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/ljharb/System.global.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/System.global#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/google-libphonenumber@3.2.21?package-id=937f5c110b8ffec0", + "author": "Rui Marinho ", + "name": "google-libphonenumber", + "version": "3.2.21", + "description": "The up-to-date and reliable Google's libphonenumber package for node.js.", + "licenses": [ + { + "license": { + "name": "(MIT AND Apache-2.0)" + } + } + ], + "cpe": "cpe:2.3:a:google-libphonenumber:google-libphonenumber:3.2.21:*:*:*:*:*:*:*", + "purl": "pkg:npm/google-libphonenumber@3.2.21", + "externalReferences": [ + { + "url": "git+https://github.com/ruimarinho/google-libphonenumber.git", + "type": "distribution" + }, + { + "url": "https://ruimarinho.github.io/google-libphonenumber/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/got@6.7.1?package-id=ab6c4d5a78007334", + "name": "got", + "version": "6.7.1", + "description": "Simplified HTTP requests", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:got:6.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/got@6.7.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/got.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/got#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/graceful-fs@4.2.10?package-id=8d7d97b42a53b928", + "name": "graceful-fs", + "version": "4.2.10", + "description": "A drop-in replacement for fs, making various improvements.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/graceful-fs@4.2.10", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/node-graceful-fs.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/node-graceful-fs#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/har-schema@2.0.0?package-id=7234725dbed89a88", + "author": "Ahmad Nassri (https://www.ahmadnassri.com/)", + "name": "har-schema", + "version": "2.0.0", + "description": "JSON Schema for HTTP Archive (HAR)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ahmadnassri:har-schema:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/har-schema@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/ahmadnassri/har-schema.git", + "type": "distribution" + }, + { + "url": "https://github.com/ahmadnassri/har-schema", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/har-schema@2.0.0?package-id=df1ab60f5188f58f", + "author": "Ahmad Nassri (https://www.ahmadnassri.com/)", + "name": "har-schema", + "version": "2.0.0", + "description": "JSON Schema for HTTP Archive (HAR)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ahmadnassri:har-schema:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/har-schema@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/ahmadnassri/har-schema.git", + "type": "distribution" + }, + { + "url": "https://github.com/ahmadnassri/har-schema", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/har-validator@5.1.5?package-id=82e75ee6b2a15bbd", + "author": "Ahmad Nassri (https://www.ahmadnassri.com/)", + "name": "har-validator", + "version": "5.1.5", + "description": "Extremely fast HTTP Archive (HAR) validator using JSON Schema", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:har-validator:har-validator:5.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/har-validator@5.1.5", + "externalReferences": [ + { + "url": "git+https://github.com/ahmadnassri/node-har-validator.git", + "type": "distribution" + }, + { + "url": "https://github.com/ahmadnassri/node-har-validator", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/har-validator@5.1.5?package-id=9cf5dbba4ee808aa", + "author": "Ahmad Nassri (https://www.ahmadnassri.com/)", + "name": "har-validator", + "version": "5.1.5", + "description": "Extremely fast HTTP Archive (HAR) validator using JSON Schema", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:har-validator:har-validator:5.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/har-validator@5.1.5", + "externalReferences": [ + { + "url": "git+https://github.com/ahmadnassri/node-har-validator.git", + "type": "distribution" + }, + { + "url": "https://github.com/ahmadnassri/node-har-validator", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has@1.0.3?package-id=57072cf8ae347274", + "author": "Thiago de Arruda ", + "name": "has", + "version": "1.0.3", + "description": "Object.prototype.hasOwnProperty.call shortcut", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tarruda:has:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/has@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/tarruda/has.git", + "type": "distribution" + }, + { + "url": "https://github.com/tarruda/has", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-flag@3.0.0?package-id=d1a82ebb7b8ff26c", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "has-flag", + "version": "3.0.0", + "description": "Check if argv has a specific flag", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:has-flag:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-flag@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/has-flag.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/has-flag#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-flag@4.0.0?package-id=de3b59daaf6d7165", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "has-flag", + "version": "4.0.0", + "description": "Check if argv has a specific flag", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:has-flag:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-flag@4.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/has-flag.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/has-flag#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-symbols@1.0.0?package-id=9bd065ba951794af", + "author": "Jordan Harband (http://ljharb.codes)", + "name": "has-symbols", + "version": "1.0.0", + "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-symbols:has-symbols:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-symbols@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/ljharb/has-symbols.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-unicode@2.0.1?package-id=c2a2690b355e1e80", + "author": "Rebecca Turner ", + "name": "has-unicode", + "version": "2.0.1", + "description": "Try to guess if your terminal supports unicode", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:has-unicode:has-unicode:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-unicode@2.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/has-unicode.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/has-unicode", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/hosted-git-info@2.8.9?package-id=d8c63249d170a0bb", + "author": "Rebecca Turner (http://re-becca.org)", + "name": "hosted-git-info", + "version": "2.8.9", + "description": "Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:hosted-git-info:hosted-git-info:2.8.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/hosted-git-info@2.8.9", + "externalReferences": [ + { + "url": "git+https://github.com/npm/hosted-git-info.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/hosted-git-info", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-cache-semantics@3.8.1?package-id=be50af68f0bf4318", + "author": "Kornel Lesiński (https://kornel.ski/)", + "name": "http-cache-semantics", + "version": "3.8.1", + "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:http-cache-semantics:http-cache-semantics:3.8.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-cache-semantics@3.8.1", + "externalReferences": [ + { + "url": "git+https://github.com/pornel/http-cache-semantics.git", + "type": "distribution" + }, + { + "url": "https://github.com/pornel/http-cache-semantics#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-errors@1.7.2?package-id=caf9fdc642308a1c", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "http-errors", + "version": "1.7.2", + "description": "Create HTTP error objects", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-errors:http-errors:1.7.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-errors@1.7.2", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/http-errors.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/http-errors#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-proxy-agent@2.1.0?package-id=f58ccb0049d952d2", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "http-proxy-agent", + "version": "2.1.0", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-proxy-agent:http-proxy-agent:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-proxy-agent@2.1.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-http-proxy-agent.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/node-http-proxy-agent#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-signature@1.2.0?package-id=9a991d3938b7d038", + "author": "Joyent, Inc", + "name": "http-signature", + "version": "1.2.0", + "description": "Reference implementation of Joyent's HTTP Signature scheme.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-signature:http-signature:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-signature@1.2.0", + "externalReferences": [ + { + "url": "git://github.com/joyent/node-http-signature.git", + "type": "distribution" + }, + { + "url": "https://github.com/joyent/node-http-signature/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-signature@1.2.0?package-id=ec4c21581261e6af", + "author": "Joyent, Inc", + "name": "http-signature", + "version": "1.2.0", + "description": "Reference implementation of Joyent's HTTP Signature scheme.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-signature:http-signature:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-signature@1.2.0", + "externalReferences": [ + { + "url": "git://github.com/joyent/node-http-signature.git", + "type": "distribution" + }, + { + "url": "https://github.com/joyent/node-http-signature/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-status-codes@2.1.4?package-id=e81fc481d00d8b1b", + "author": "Bryce Neal", + "name": "http-status-codes", + "version": "2.1.4", + "description": "Constants enumerating the HTTP status codes. Based on the Java Apache HttpStatus API.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-status-codes:http-status-codes:2.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-status-codes@2.1.4", + "externalReferences": [ + { + "url": "git+https://github.com/prettymuchbryce/node-http-status.git", + "type": "distribution" + }, + { + "url": "https://github.com/prettymuchbryce/node-http-status#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-terminator@3.0.0?package-id=5ff94849b2033551", + "author": "Gajus Kuizinas (http://gajus.com)", + "name": "http-terminator", + "version": "3.0.0", + "description": "Gracefully terminates HTTP(S) server.", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:http-terminator:http-terminator:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-terminator@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/gajus/http-terminator.git", + "type": "distribution" + }, + { + "url": "https://github.com/gajus/http-terminator#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/https-proxy-agent@2.2.4?package-id=3865d5b676fac485", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "https-proxy-agent", + "version": "2.2.4", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:https-proxy-agent:https-proxy-agent:2.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/https-proxy-agent@2.2.4", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-https-proxy-agent.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/https-proxy-agent@5.0.0?package-id=7e73792ebc0ee608", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "https-proxy-agent", + "version": "5.0.0", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:https-proxy-agent:https-proxy-agent:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/https-proxy-agent@5.0.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-https-proxy-agent.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/humanize-ms@1.2.1?package-id=6269f846c887d763", + "author": "dead-horse (http://deadhorse.me)", + "name": "humanize-ms", + "version": "1.2.1", + "description": "transform humanize time to ms", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-modules:humanize-ms:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/humanize-ms@1.2.1", + "externalReferences": [ + { + "url": "git+https://github.com/node-modules/humanize-ms.git", + "type": "distribution" + }, + { + "url": "https://github.com/node-modules/humanize-ms#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iconv-lite@0.4.23?package-id=72aa978f928b8369", + "author": "Alexander Shtuchkin ", + "name": "iconv-lite", + "version": "0.4.23", + "description": "Convert character encodings in pure javascript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.4.23:*:*:*:*:*:*:*", + "purl": "pkg:npm/iconv-lite@0.4.23", + "externalReferences": [ + { + "url": "git://github.com/ashtuchkin/iconv-lite.git", + "type": "distribution" + }, + { + "url": "https://github.com/ashtuchkin/iconv-lite", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iconv-lite@0.4.24?package-id=5b9a586d4ff6589f", + "author": "Alexander Shtuchkin ", + "name": "iconv-lite", + "version": "0.4.24", + "description": "Convert character encodings in pure javascript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.4.24:*:*:*:*:*:*:*", + "purl": "pkg:npm/iconv-lite@0.4.24", + "externalReferences": [ + { + "url": "git://github.com/ashtuchkin/iconv-lite.git", + "type": "distribution" + }, + { + "url": "https://github.com/ashtuchkin/iconv-lite", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iferr@0.1.5?package-id=240c8b7b718f7cca", + "author": "Nadav Ivgi", + "name": "iferr", + "version": "0.1.5", + "description": "Higher-order functions for easier error handling", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shesek:iferr:0.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/iferr@0.1.5", + "externalReferences": [ + { + "url": "git+https://github.com/shesek/iferr.git", + "type": "distribution" + }, + { + "url": "https://github.com/shesek/iferr", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iferr@0.1.5?package-id=78ea6eb1d1172c78", + "author": "Nadav Ivgi", + "name": "iferr", + "version": "0.1.5", + "description": "Higher-order functions for easier error handling", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shesek:iferr:0.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/iferr@0.1.5", + "externalReferences": [ + { + "url": "git+https://github.com/shesek/iferr.git", + "type": "distribution" + }, + { + "url": "https://github.com/shesek/iferr", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iferr@0.1.5?package-id=394fba8c06946b1c", + "author": "Nadav Ivgi", + "name": "iferr", + "version": "0.1.5", + "description": "Higher-order functions for easier error handling", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shesek:iferr:0.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/iferr@0.1.5", + "externalReferences": [ + { + "url": "git+https://github.com/shesek/iferr.git", + "type": "distribution" + }, + { + "url": "https://github.com/shesek/iferr", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iferr@1.0.2?package-id=23983836ee47095c", + "author": "Nadav Ivgi", + "name": "iferr", + "version": "1.0.2", + "description": "Higher-order functions for easier error handling", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shesek:iferr:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/iferr@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/shesek/iferr.git", + "type": "distribution" + }, + { + "url": "https://github.com/shesek/iferr", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ignore-walk@3.0.3?package-id=4b3b7cbce830d44b", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "ignore-walk", + "version": "3.0.3", + "description": "Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ignore-walk:ignore-walk:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/ignore-walk@3.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/ignore-walk.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/ignore-walk#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/import-lazy@2.1.0?package-id=af14ea31551b29b", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "import-lazy", + "version": "2.1.0", + "description": "Import modules lazily", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:import-lazy:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/import-lazy@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/import-lazy.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/import-lazy#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/imurmurhash@0.1.4?package-id=209f0ed2459f2a66", + "author": "Jens Taylor (https://github.com/homebrewing)", + "name": "imurmurhash", + "version": "0.1.4", + "description": "An incremental implementation of MurmurHash3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:imurmurhash:imurmurhash:0.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/imurmurhash@0.1.4", + "externalReferences": [ + { + "url": "git+https://github.com/jensyt/imurmurhash-js.git", + "type": "distribution" + }, + { + "url": "https://github.com/jensyt/imurmurhash-js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/infer-owner@1.0.4?package-id=ff8bebe3c92e29be", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "infer-owner", + "version": "1.0.4", + "description": "Infer the owner of a path based on the owner of its nearest existing parent", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:infer-owner:infer-owner:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/infer-owner@1.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/npm/infer-owner.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/infer-owner#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inflight@1.0.6?package-id=7f4a1389d99344e1", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "inflight", + "version": "1.0.6", + "description": "Add callbacks to requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "git+https://github.com/npm/inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inflight@1.0.6?package-id=699ceddffcda4478", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "inflight", + "version": "1.0.6", + "description": "Add callbacks to requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "git+https://github.com/npm/inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.3?package-id=9e94bf16095bed86", + "name": "inherits", + "version": "2.0.3", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/inherits.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/inherits#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.4?package-id=c75e2d1e61a335c0", + "name": "inherits", + "version": "2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/inherits.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/inherits#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ini@1.3.8?package-id=1144947c22b83407", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "ini", + "version": "1.3.8", + "description": "An ini encoder/decoder for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:ini:1.3.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/ini@1.3.8", + "externalReferences": [ + { + "url": "git://github.com/isaacs/ini.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/ini#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/init-package-json@1.10.3?package-id=612217504bf238b9", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "init-package-json", + "version": "1.10.3", + "description": "A node module to get your node module started", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:init-package-json:init-package-json:1.10.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/init-package-json@1.10.3", + "externalReferences": [ + { + "url": "git+https://github.com/npm/init-package-json.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/init-package-json#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ip@1.1.5?package-id=40b78732d677da70", + "author": "Fedor Indutny ", + "name": "ip", + "version": "1.1.5", + "description": "[![](https://badge.fury.io/js/ip.svg)](https://www.npmjs.com/package/ip)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indutny:ip:1.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/ip@1.1.5", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/indutny/node-ip.git", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/node-ip", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ip-regex@2.1.0?package-id=7de70bcecf1718ee", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ip-regex", + "version": "2.1.0", + "description": "Regular expression for matching IP addresses (IPv4 & IPv6)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:ip-regex:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ip-regex@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/ip-regex.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/ip-regex#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ipaddr.js@1.9.1?package-id=79e3881762ad8396", + "author": "whitequark ", + "name": "ipaddr.js", + "version": "1.9.1", + "description": "A library for manipulating IPv4 and IPv6 addresses in JavaScript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:whitequark:ipaddr.js:1.9.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ipaddr.js@1.9.1", + "externalReferences": [ + { + "url": "git://github.com/whitequark/ipaddr.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/whitequark/ipaddr.js#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-callable@1.1.4?package-id=1dc6d2322f00d7bb", + "author": "Jordan Harband (http://ljharb.codes)", + "name": "is-callable", + "version": "1.1.4", + "description": "Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-callable:is-callable:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-callable@1.1.4", + "externalReferences": [ + { + "url": "git://github.com/ljharb/is-callable.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-ci@1.2.1?package-id=33144f04a12b9be2", + "author": "Thomas Watson Steen (https://twitter.com/wa7son)", + "name": "is-ci", + "version": "1.2.1", + "description": "Detect if the current environment is a CI server", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:watson:is-ci:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-ci@1.2.1", + "externalReferences": [ + { + "url": "git+https://github.com/watson/is-ci.git", + "type": "distribution" + }, + { + "url": "https://github.com/watson/is-ci", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-cidr@3.1.1?package-id=66ca7deffeed6b5f", + "author": "silverwind ", + "name": "is-cidr", + "version": "3.1.1", + "description": "Check if a string is an IP address in CIDR notation", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:silverwind:is-cidr:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-cidr@3.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/silverwind/is-cidr.git", + "type": "distribution" + }, + { + "url": "https://github.com/silverwind/is-cidr#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-circular@1.0.2?package-id=ca261a9295461146", + "author": "Tejesh Mehta", + "name": "is-circular", + "version": "1.0.2", + "description": "high-performance, zero-dependency circular reference check for objects (or arrays)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-circular:is-circular:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-circular@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/tjmehta/is-circular.git", + "type": "distribution" + }, + { + "url": "https://github.com/tjmehta/is-circular", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-date-object@1.0.1?package-id=92b971217126a920", + "author": "Jordan Harband", + "name": "is-date-object", + "version": "1.0.1", + "description": "Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-date-object:is-date-object:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-date-object@1.0.1", + "externalReferences": [ + { + "url": "git://github.com/ljharb/is-date-object.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@1.0.0?package-id=5e069f3bee1f8e8c", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "1.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0?package-id=c9e52c69ac61a15d", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "2.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0?package-id=18d3c43bb481b40e", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "2.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0?package-id=bc292caf09c7f0a6", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "2.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0?package-id=b4b1a80d5cc6ed9f", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "2.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-installed-globally@0.1.0?package-id=52068e84c707b28e", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-installed-globally", + "version": "0.1.0", + "description": "Check if your package was installed globally", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-installed-globally:is-installed-globally:0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-installed-globally@0.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-installed-globally.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-installed-globally#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-npm@1.0.0?package-id=a091bf82a35edad5", + "author": "Sindre Sorhus (http://sindresorhus.com)", + "name": "is-npm", + "version": "1.0.0", + "description": "Check if your code is running as an npm script", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:is-npm:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-npm@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-npm.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-npm#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-obj@1.0.1?package-id=7979f769260859e3", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-obj", + "version": "1.0.1", + "description": "Check if a value is an object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:is-obj:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-obj@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-obj.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-obj#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-path-inside@1.0.1?package-id=62bf5e53df19f8af", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-path-inside", + "version": "1.0.1", + "description": "Check if a path is inside another path", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-path-inside:is-path-inside:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-path-inside@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-path-inside.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-path-inside#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-redirect@1.0.0?package-id=a4990c9b97577de8", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-redirect", + "version": "1.0.0", + "description": "Check if a number is a redirect HTTP status code", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:is-redirect:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-redirect@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-redirect.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-redirect#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-regex@1.0.4?package-id=f0395380adf7d3e7", + "author": "Jordan Harband", + "name": "is-regex", + "version": "1.0.4", + "description": "Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-regex:is-regex:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-regex@1.0.4", + "externalReferences": [ + { + "url": "git://github.com/ljharb/is-regex.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/is-regex", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-retry-allowed@1.2.0?package-id=b30668148b87771", + "author": "Vsevolod Strukchinsky (github.com/floatdrop)", + "name": "is-retry-allowed", + "version": "1.2.0", + "description": "Is retry allowed for Error?", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-retry-allowed:is-retry-allowed:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-retry-allowed@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/floatdrop/is-retry-allowed.git", + "type": "distribution" + }, + { + "url": "https://github.com/floatdrop/is-retry-allowed#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-stream@1.1.0?package-id=e2a191b14586fcc2", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-stream", + "version": "1.1.0", + "description": "Check if something is a Node.js stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:is-stream:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-stream@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/is-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/is-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-symbol@1.0.2?package-id=6f84bf274f444b99", + "author": "Jordan Harband", + "name": "is-symbol", + "version": "1.0.2", + "description": "Determine if a value is an ES6 Symbol or not.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-symbol:is-symbol:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-symbol@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/ljharb/is-symbol.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-typedarray@1.0.0?package-id=e719ed77b7d38e33", + "author": "Hugh Kennedy (http://hughsk.io/)", + "name": "is-typedarray", + "version": "1.0.0", + "description": "Detect whether or not an object is a Typed Array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-typedarray:is-typedarray:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-typedarray@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/hughsk/is-typedarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/hughsk/is-typedarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-typedarray@1.0.0?package-id=4614424f10a58ef7", + "author": "Hugh Kennedy (http://hughsk.io/)", + "name": "is-typedarray", + "version": "1.0.0", + "description": "Detect whether or not an object is a Typed Array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-typedarray:is-typedarray:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-typedarray@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/hughsk/is-typedarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/hughsk/is-typedarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is_js@0.9.0?package-id=e1e4ef3227e07c61", + "name": "is_js", + "version": "0.9.0", + "description": "micro check library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-js:is-js:0.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is_js@0.9.0", + "externalReferences": [ + { + "url": "git+https://github.com/arasatasaygin/is.js.git", + "type": "distribution" + }, + { + "url": "http://is.js.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isarray@0.0.1?package-id=4eab13fd6138583f", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "isarray", + "version": "0.0.1", + "description": "Array#isArray for older browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juliangruber:isarray:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/isarray@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/isarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/isarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isarray@0.0.1?package-id=9165d82d33f922a9", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "isarray", + "version": "0.0.1", + "description": "Array#isArray for older browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juliangruber:isarray:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/isarray@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/isarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/isarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isarray@1.0.0?package-id=67e7a38d852b614a", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "isarray", + "version": "1.0.0", + "description": "Array#isArray for older browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juliangruber:isarray:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isarray@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/isarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/isarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isarray@1.0.0?package-id=2d92be2d9c6d102e", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "isarray", + "version": "1.0.0", + "description": "Array#isArray for older browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juliangruber:isarray:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isarray@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/isarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/isarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isexe@2.0.0?package-id=cac2857ecac9cad9", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "isexe", + "version": "2.0.0", + "description": "Minimal module to check if a file is executable.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:isexe:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isexe@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/isexe.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/isexe#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isstream@0.1.2?package-id=686f3e26c1aa6a0c", + "author": "Rod Vagg ", + "name": "isstream", + "version": "0.1.2", + "description": "Determine if an object is a Stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isstream:isstream:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/isstream@0.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/rvagg/isstream.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/isstream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isstream@0.1.2?package-id=fd7d0a75eb876e94", + "author": "Rod Vagg ", + "name": "isstream", + "version": "0.1.2", + "description": "Determine if an object is a Stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isstream:isstream:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/isstream@0.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/rvagg/isstream.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/isstream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iterare@1.2.1?package-id=f6ab001f5555d5ae", + "author": "Felix Becker ", + "name": "iterare", + "version": "1.2.1", + "description": "Array methods for ES6 Iterators", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:felixfbecker:iterare:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/iterare@1.2.1", + "externalReferences": [ + { + "url": "git+https://github.com/felixfbecker/iterare.git", + "type": "distribution" + }, + { + "url": "https://github.com/felixfbecker/iterare#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsbn@0.1.1?package-id=c1d64005f57cac41", + "author": "Tom Wu", + "name": "jsbn", + "version": "0.1.1", + "description": "The jsbn library is a fast, portable implementation of large-number math in pure JavaScript, enabling public-key crypto and other applications on desktop and mobile browsers.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:andyperlitch:jsbn:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsbn@0.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/andyperlitch/jsbn.git", + "type": "distribution" + }, + { + "url": "https://github.com/andyperlitch/jsbn#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsbn@0.1.1?package-id=5423bb90883d31d3", + "author": "Tom Wu", + "name": "jsbn", + "version": "0.1.1", + "description": "The jsbn library is a fast, portable implementation of large-number math in pure JavaScript, enabling public-key crypto and other applications on desktop and mobile browsers.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:andyperlitch:jsbn:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsbn@0.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/andyperlitch/jsbn.git", + "type": "distribution" + }, + { + "url": "https://github.com/andyperlitch/jsbn#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-parse-better-errors@1.0.2?package-id=988410d00081283c", + "author": "Kat Marchán ", + "name": "json-parse-better-errors", + "version": "1.0.2", + "description": "JSON.parse with context information on error", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-parse-better-errors:json-parse-better-errors:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-parse-better-errors@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/zkat/json-parse-better-errors.git", + "type": "distribution" + }, + { + "url": "https://github.com/zkat/json-parse-better-errors#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-parse-even-better-errors@2.3.1?package-id=e3a4f4f6a9d728a1", + "author": "Kat Marchán ", + "name": "json-parse-even-better-errors", + "version": "2.3.1", + "description": "JSON.parse with context information on error", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-parse-even-better-errors:json-parse-even-better-errors:2.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-parse-even-better-errors@2.3.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/json-parse-even-better-errors.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/json-parse-even-better-errors#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema@0.2.3?package-id=234e47fff2e6bdb1", + "author": "Kris Zyp", + "name": "json-schema", + "version": "0.2.3", + "description": "JSON Schema validation and specifications", + "licenses": [ + { + "license": { + "name": "AFLv2.1" + } + }, + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:json-schema:json-schema:0.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema@0.2.3", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/kriszyp/json-schema.git", + "type": "distribution" + }, + { + "url": "https://github.com/kriszyp/json-schema#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema@0.4.0?package-id=45c9a86c44dd53da", + "author": "Kris Zyp", + "name": "json-schema", + "version": "0.4.0", + "description": "JSON Schema validation and specifications", + "licenses": [ + { + "license": { + "name": "(AFL-2.1 OR BSD-3-Clause)" + } + } + ], + "cpe": "cpe:2.3:a:json-schema:json-schema:0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema@0.4.0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/kriszyp/json-schema.git", + "type": "distribution" + }, + { + "url": "https://github.com/kriszyp/json-schema#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema-traverse@0.4.1?package-id=285c4d6d5ff842", + "author": "Evgeny Poberezkin", + "name": "json-schema-traverse", + "version": "0.4.1", + "description": "Traverse JSON Schema passing each schema object to callback", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-schema-traverse:json-schema-traverse:0.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema-traverse@0.4.1", + "externalReferences": [ + { + "url": "git+https://github.com/epoberezkin/json-schema-traverse.git", + "type": "distribution" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema-traverse@0.4.1?package-id=93d700e76c4d5de0", + "author": "Evgeny Poberezkin", + "name": "json-schema-traverse", + "version": "0.4.1", + "description": "Traverse JSON Schema passing each schema object to callback", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-schema-traverse:json-schema-traverse:0.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema-traverse@0.4.1", + "externalReferences": [ + { + "url": "git+https://github.com/epoberezkin/json-schema-traverse.git", + "type": "distribution" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-stringify-safe@5.0.1?package-id=e5a8c4c13dc7283f", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "json-stringify-safe", + "version": "5.0.1", + "description": "Like JSON.stringify, but doesn't blow up on circular refs.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:json-stringify-safe:json-stringify-safe:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-stringify-safe@5.0.1", + "externalReferences": [ + { + "url": "git://github.com/isaacs/json-stringify-safe.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/json-stringify-safe", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-stringify-safe@5.0.1?package-id=1e6af39edc851fec", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "json-stringify-safe", + "version": "5.0.1", + "description": "Like JSON.stringify, but doesn't blow up on circular refs.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:json-stringify-safe:json-stringify-safe:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-stringify-safe@5.0.1", + "externalReferences": [ + { + "url": "git://github.com/isaacs/json-stringify-safe.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/json-stringify-safe", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonparse@1.3.1?package-id=b1e13c9869e6a60e", + "author": "Tim Caswell ", + "name": "jsonparse", + "version": "1.3.1", + "description": "This is a pure-js JSON streaming parser for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:creationix:jsonparse:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonparse@1.3.1", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/creationix/jsonparse.git", + "type": "distribution" + }, + { + "url": "https://github.com/creationix/jsonparse#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonwebtoken@8.5.1?package-id=b3e48ce9623ce630", + "author": "auth0", + "name": "jsonwebtoken", + "version": "8.5.1", + "description": "JSON Web Token implementation (symmetric and asymmetric)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jsonwebtoken:jsonwebtoken:8.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonwebtoken@8.5.1", + "externalReferences": [ + { + "url": "git+https://github.com/auth0/node-jsonwebtoken.git", + "type": "distribution" + }, + { + "url": "https://github.com/auth0/node-jsonwebtoken#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsprim@1.4.1?package-id=747de2b21741eefd", + "name": "jsprim", + "version": "1.4.1", + "description": "utilities for primitive JavaScript types", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:joyent:jsprim:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsprim@1.4.1", + "externalReferences": [ + { + "url": "git://github.com/joyent/node-jsprim.git", + "type": "distribution" + }, + { + "url": "https://github.com/joyent/node-jsprim#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsprim@1.4.2?package-id=1555634d1f1bf190", + "name": "jsprim", + "version": "1.4.2", + "description": "utilities for primitive JavaScript types", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:joyent:jsprim:1.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsprim@1.4.2", + "externalReferences": [ + { + "url": "git://github.com/joyent/node-jsprim.git", + "type": "distribution" + }, + { + "url": "https://github.com/joyent/node-jsprim#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jwa@1.4.1?package-id=122db8bb4f546a61", + "author": "Brian J. Brennan ", + "name": "jwa", + "version": "1.4.1", + "description": "JWA implementation (supports all JWS algorithms)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brianloveswords:jwa:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jwa@1.4.1", + "externalReferences": [ + { + "url": "git://github.com/brianloveswords/node-jwa.git", + "type": "distribution" + }, + { + "url": "https://github.com/brianloveswords/node-jwa#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jws@3.2.2?package-id=51d56ae8e8bad5c9", + "author": "Brian J Brennan", + "name": "jws", + "version": "3.2.2", + "description": "Implementation of JSON Web Signatures", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brianloveswords:jws:3.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/jws@3.2.2", + "externalReferences": [ + { + "url": "git://github.com/brianloveswords/node-jws.git", + "type": "distribution" + }, + { + "url": "https://github.com/brianloveswords/node-jws#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/latest-version@3.1.0?package-id=112a46fc0e19bff6", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "latest-version", + "version": "3.1.0", + "description": "Get the latest version of an npm package", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:latest-version:latest-version:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/latest-version@3.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/latest-version.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/latest-version#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lazy-property@1.0.0?package-id=3cdbabf15e025def", + "author": "Mikola Lysenko", + "name": "lazy-property", + "version": "1.0.0", + "description": "Lazily initialized properties for objects", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lazy-property:lazy-property:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lazy-property@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/mikolalysenko/lazy-property.git", + "type": "distribution" + }, + { + "url": "https://github.com/mikolalysenko/lazy-property#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.17.3&package-id=8126b232e2d3c608", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r3", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libcipm@4.0.8?package-id=939bd2c33a65cf65", + "author": "Kat Marchán ", + "name": "libcipm", + "version": "4.0.8", + "description": "programmatic API for cipm: a ci-oriented package installer for npm", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libcipm:libcipm:4.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/libcipm@4.0.8", + "externalReferences": [ + { + "url": "git+https://github.com/npm/libcipm.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/libcipm#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.3&package-id=d3084c788891fb28", + "publisher": "Ariadne Conill ", + "name": "libcrypto3", + "version": "3.0.8-r3", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto3:libcrypto3:3.0.8-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgcc@12.2.1_git20220924-r4?arch=x86_64&upstream=gcc&distro=alpine-3.17.3&package-id=4dbb63d06d9618e9", + "publisher": "Ariadne Conill ", + "name": "libgcc", + "version": "12.2.1_git20220924-r4", + "description": "GNU C compiler runtime libraries", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgcc:libgcc:12.2.1_git20220924-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgcc@12.2.1_git20220924-r4?arch=x86_64&upstream=gcc&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpm@3.0.1?package-id=8765b2a6f6c0fa16", + "author": "Kat Marchán ", + "name": "libnpm", + "version": "3.0.1", + "description": "Collection of programmatic APIs for the npm CLI", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpm:libnpm:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpm@3.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/libnpm.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/libnpm#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmaccess@3.0.2?package-id=5341f660eccfba6b", + "author": "Kat Marchán ", + "name": "libnpmaccess", + "version": "3.0.2", + "description": "programmatic library for `npm access` commands", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmaccess:libnpmaccess:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmaccess@3.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/libnpmaccess.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmaccess", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmconfig@1.2.1?package-id=db2a17ecbb5c09ba", + "author": "Kat Marchán ", + "name": "libnpmconfig", + "version": "1.2.1", + "description": "Standalone library for reading/writing/managing npm configurations", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmconfig:libnpmconfig:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmconfig@1.2.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/libnpmconfig.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmconfig", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmhook@5.0.3?package-id=15a009beffa78fc4", + "author": "Kat Marchán ", + "name": "libnpmhook", + "version": "5.0.3", + "description": "programmatic API for managing npm registry hooks", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmhook:libnpmhook:5.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmhook@5.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/npm/libnpmhook.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/libnpmhook#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmorg@1.0.1?package-id=8b6fdd9d34b188a7", + "author": "Kat Marchán ", + "name": "libnpmorg", + "version": "1.0.1", + "description": "Programmatic api for `npm org` commands", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmorg:libnpmorg:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmorg@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/libnpmorg.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmorg", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmpublish@1.1.2?package-id=4940e26c16b646a2", + "author": "Kat Marchán ", + "name": "libnpmpublish", + "version": "1.1.2", + "description": "Programmatic API for the bits behind npm publish and unpublish", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmpublish:libnpmpublish:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmpublish@1.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/libnpmpublish.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmpublish", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmsearch@2.0.2?package-id=4152eb0fada08f68", + "author": "Kat Marchán ", + "name": "libnpmsearch", + "version": "2.0.2", + "description": "Programmatic API for searching in npm and compatible registries.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmsearch:libnpmsearch:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmsearch@2.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/libnpmsearch.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmsearch", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmteam@1.0.2?package-id=ab825ae6bda4b852", + "author": "Kat Marchán ", + "name": "libnpmteam", + "version": "1.0.2", + "description": "npm Team management APIs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmteam:libnpmteam:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmteam@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/libnpmteam.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmteam", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpx@10.2.4?package-id=670932cf0842993", + "author": "Kat Marchán ", + "name": "libnpx", + "version": "10.2.4", + "description": "support library for npx -- an tool for executing npm-based packages.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpx:libnpx:10.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpx@10.2.4", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npx.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npx#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.3&package-id=2a95f0251fba7a33", + "publisher": "Ariadne Conill ", + "name": "libssl3", + "version": "3.0.8-r3", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libssl3:libssl3:3.0.8-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libstdc++@12.2.1_git20220924-r4?arch=x86_64&upstream=gcc&distro=alpine-3.17.3&package-id=3c33807c48d3ddd2", + "publisher": "Ariadne Conill ", + "name": "libstdc++", + "version": "12.2.1_git20220924-r4", + "description": "GNU C++ standard runtime library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:12.2.1_git20220924-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libstdc++@12.2.1_git20220924-r4?arch=x86_64&upstream=gcc&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lightship@6.7.2?package-id=5af666ec0e8182cf", + "author": "Gajus Kuizinas (http://gajus.com)", + "name": "lightship", + "version": "6.7.2", + "description": "Abstracts readiness, liveness and startup checks and graceful shutdown of Node.js services running in Kubernetes.", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:lightship:lightship:6.7.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/lightship@6.7.2", + "externalReferences": [ + { + "url": "git+https://github.com/gajus/lightship.git", + "type": "distribution" + }, + { + "url": "https://github.com/gajus/lightship#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/locate-path@3.0.0?package-id=6a3c95978434a1d0", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "locate-path", + "version": "3.0.0", + "description": "Get the first path that exists on disk of multiple paths", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:locate-path:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/locate-path@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/locate-path.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/locate-path#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/locate-path@3.0.0?package-id=e9f822cde2a9982c", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "locate-path", + "version": "3.0.0", + "description": "Get the first path that exists on disk of multiple paths", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:locate-path:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/locate-path@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/locate-path.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/locate-path#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lock-verify@2.2.2?package-id=dd47271ff433350c", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "lock-verify", + "version": "2.2.2", + "description": "Report if your package.json is out of sync with your package-lock.json.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lock-verify:lock-verify:2.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/lock-verify@2.2.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/lock-verify.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/lock-verify#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lockfile@1.0.4?package-id=ebdf70a73ac68f2d", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "lockfile", + "version": "1.0.4", + "description": "A very polite lock file utility, which endeavors to not litter, and to wait patiently for others.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lockfile:lockfile:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/lockfile@1.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/npm/lockfile.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/lockfile#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash@4.17.21?package-id=7618d12e7ca896e", + "author": "John-David Dalton ", + "name": "lodash", + "version": "4.17.21", + "description": "Lodash modular utilities.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash:lodash:4.17.21:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash@4.17.21", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash._baseindexof@3.1.0?package-id=38efd060e3a4d336", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash._baseindexof", + "version": "3.1.0", + "description": "The modern build of lodash’s internal `baseIndexOf` as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.-baseindexof:lodash.-baseindexof:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash._baseindexof@3.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash._baseuniq@4.6.0?package-id=f3cad3a8a8778d94", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash._baseuniq", + "version": "4.6.0", + "description": "The internal lodash function `baseUniq` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.-baseuniq:lodash.-baseuniq:4.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash._baseuniq@4.6.0", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash._bindcallback@3.0.1?package-id=aceccd904d52fec7", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash._bindcallback", + "version": "3.0.1", + "description": "The modern build of lodash’s internal `bindCallback` as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.-bindcallback:lodash.-bindcallback:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash._bindcallback@3.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash._cacheindexof@3.0.2?package-id=9366742db20085f0", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash._cacheindexof", + "version": "3.0.2", + "description": "The modern build of lodash’s internal `cacheIndexOf` as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.-cacheindexof:lodash.-cacheindexof:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash._cacheindexof@3.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash._createcache@3.1.2?package-id=edbe9d8077eb16ba", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash._createcache", + "version": "3.1.2", + "description": "The modern build of lodash’s internal `createCache` as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.-createcache:lodash.-createcache:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash._createcache@3.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash._createset@4.0.3?package-id=27ed42f7fc9601ba", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash._createset", + "version": "4.0.3", + "description": "The internal lodash function `createSet` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.-createset:lodash.-createset:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash._createset@4.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash._getnative@3.9.1?package-id=b817ace9e00c6dc1", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash._getnative", + "version": "3.9.1", + "description": "The modern build of lodash’s internal `getNative` as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.-getnative:lodash.-getnative:3.9.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash._getnative@3.9.1", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash._root@3.0.1?package-id=3975d2ad53d321e8", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash._root", + "version": "3.0.1", + "description": "The internal lodash function `root` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.-root:lodash.-root:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash._root@3.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.clonedeep@4.5.0?package-id=60a70c19659c0615", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.clonedeep", + "version": "4.5.0", + "description": "The lodash method `_.cloneDeep` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.clonedeep:lodash.clonedeep:4.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.clonedeep@4.5.0", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.includes@4.3.0?package-id=8166ba1464ace388", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.includes", + "version": "4.3.0", + "description": "The lodash method `_.includes` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.includes:lodash.includes:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.includes@4.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.isboolean@3.0.3?package-id=2ce6d56af658279b", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.isboolean", + "version": "3.0.3", + "description": "The lodash method `_.isBoolean` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.isboolean:lodash.isboolean:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.isboolean@3.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.isinteger@4.0.4?package-id=db88e86d62c15e0f", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.isinteger", + "version": "4.0.4", + "description": "The lodash method `_.isInteger` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.isinteger:lodash.isinteger:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.isinteger@4.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.isnumber@3.0.3?package-id=d5752336f4b6197d", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.isnumber", + "version": "3.0.3", + "description": "The lodash method `_.isNumber` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.isnumber:lodash.isnumber:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.isnumber@3.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.isplainobject@4.0.6?package-id=34ce0402948a5797", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.isplainobject", + "version": "4.0.6", + "description": "The lodash method `_.isPlainObject` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.isplainobject:lodash.isplainobject:4.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.isplainobject@4.0.6", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.isstring@4.0.1?package-id=4fdb57a723b6cfe9", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.isstring", + "version": "4.0.1", + "description": "The lodash method `_.isString` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.isstring:lodash.isstring:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.isstring@4.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.once@4.1.1?package-id=d27a89150566b5d7", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.once", + "version": "4.1.1", + "description": "The lodash method `_.once` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.once:lodash.once:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.once@4.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.restparam@3.6.1?package-id=cd218c729d0105b1", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.restparam", + "version": "3.6.1", + "description": "The modern build of lodash’s `_.restParam` as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.restparam:lodash.restparam:3.6.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.restparam@3.6.1", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.union@4.6.0?package-id=fd1f76b549051dc5", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.union", + "version": "4.6.0", + "description": "The lodash method `_.union` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.union:lodash.union:4.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.union@4.6.0", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.uniq@4.5.0?package-id=ff80c2262d287958", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.uniq", + "version": "4.5.0", + "description": "The lodash method `_.uniq` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.uniq:lodash.uniq:4.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.uniq@4.5.0", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash.without@4.4.0?package-id=284f38c0ca8041d8", + "author": "John-David Dalton (http://allyoucanleet.com/)", + "name": "lodash.without", + "version": "4.4.0", + "description": "The lodash method `_.without` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.without:lodash.without:4.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.without@4.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lowercase-keys@1.0.1?package-id=409c8833cd49dbdb", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "lowercase-keys", + "version": "1.0.1", + "description": "Lowercase the keys of an object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lowercase-keys:lowercase-keys:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lowercase-keys@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/lowercase-keys.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/lowercase-keys#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lru-cache@4.1.5?package-id=eef94188c4c5e168", + "author": "Isaac Z. Schlueter ", + "name": "lru-cache", + "version": "4.1.5", + "description": "A cache object that deletes the least-recently-used items.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lru-cache:lru-cache:4.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru-cache@4.1.5", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-lru-cache.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/node-lru-cache#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lru-cache@5.1.1?package-id=6e978256c4691a8c", + "author": "Isaac Z. Schlueter ", + "name": "lru-cache", + "version": "5.1.1", + "description": "A cache object that deletes the least-recently-used items.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lru-cache:lru-cache:5.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru-cache@5.1.1", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-lru-cache.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/node-lru-cache#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lru_map@0.3.3?package-id=8593166d4c692511", + "author": "Rasmus Andersson ", + "name": "lru_map", + "version": "0.3.3", + "description": "Finite key-value map using the Least Recently Used (LRU) algorithm where the most recently used objects are keept in the map while less recently used items are evicted to make room for new ones.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lru-map:lru-map:0.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru_map@0.3.3", + "externalReferences": [ + { + "url": "git+https://github.com/rsms/js-lru.git", + "type": "distribution" + }, + { + "url": "https://github.com/rsms/js-lru#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/make-dir@1.3.0?package-id=8c1dc4a13ddd1f8b", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "make-dir", + "version": "1.3.0", + "description": "Make a directory and its parents if needed - Think `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:make-dir:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-dir@1.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/make-dir.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/make-dir#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/make-fetch-happen@5.0.2?package-id=b812e5c3d8342059", + "author": "Kat Marchán ", + "name": "make-fetch-happen", + "version": "5.0.2", + "description": "Opinionated, caching, retrying fetch client", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:make-fetch-happen:make-fetch-happen:5.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-fetch-happen@5.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/zkat/make-fetch-happen.git", + "type": "distribution" + }, + { + "url": "https://github.com/zkat/make-fetch-happen#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/meant@1.0.3?package-id=f7939cd7c299412e", + "author": "Daijiro Wachi", + "name": "meant", + "version": "1.0.3", + "description": "Like the `Did you mean?` in git for npm", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:watilde:meant:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/meant@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/watilde/meant.git", + "type": "distribution" + }, + { + "url": "https://github.com/watilde/meant#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/media-typer@0.3.0?package-id=33c04253526b5d6b", + "author": "Douglas Christopher Wilson ", + "name": "media-typer", + "version": "0.3.0", + "description": "Simple RFC 6838 media type parser and formatter", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:media-typer:media-typer:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/media-typer@0.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/media-typer.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/media-typer#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/merge-descriptors@1.0.1?package-id=c7a60e972125bba3", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "merge-descriptors", + "version": "1.0.1", + "description": "Merge objects using descriptors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:merge-descriptors:merge-descriptors:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/merge-descriptors@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/component/merge-descriptors.git", + "type": "distribution" + }, + { + "url": "https://github.com/component/merge-descriptors#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/methods@1.1.2?package-id=96ba5c582a21e3ad", + "name": "methods", + "version": "1.1.2", + "description": "HTTP methods that node supports", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:methods:methods:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/methods@1.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/methods.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/methods#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime@1.6.0?package-id=e5feb4f33fab3438", + "author": "Robert Kieffer (http://github.com/broofa)", + "name": "mime", + "version": "1.6.0", + "description": "A comprehensive library for mime-type mapping", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:broofa:mime:1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime@1.6.0", + "externalReferences": [ + { + "url": "git+https://github.com/broofa/node-mime.git", + "type": "distribution" + }, + { + "url": "https://github.com/broofa/node-mime#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-db@1.35.0?package-id=c25238efc221af78", + "name": "mime-db", + "version": "1.35.0", + "description": "Media Type Database", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-db:mime-db:1.35.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-db@1.35.0", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/mime-db.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/mime-db#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-db@1.48.0?package-id=eea4ac905892bff2", + "name": "mime-db", + "version": "1.48.0", + "description": "Media Type Database", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-db:mime-db:1.48.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-db@1.48.0", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/mime-db.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/mime-db#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-types@2.1.19?package-id=62a25db5618d2057", + "name": "mime-types", + "version": "2.1.19", + "description": "The ultimate javascript content-type utility.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-types:mime-types:2.1.19:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-types@2.1.19", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/mime-types.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/mime-types#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-types@2.1.31?package-id=8fc592adbce7fc36", + "name": "mime-types", + "version": "2.1.31", + "description": "The ultimate javascript content-type utility.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-types:mime-types:2.1.31:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-types@2.1.31", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/mime-types.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/mime-types#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.0.4?package-id=7fcd6e247b4522bb", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.0.4", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.0.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/minimatch#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.1.2?package-id=83649e55dcb9188", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.1.2", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/minimatch#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.1.2?package-id=c7c070a6bd46c27c", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.1.2", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/minimatch#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimist@1.2.5?package-id=7e33f89f406fa4cd", + "author": "James Halliday (http://substack.net)", + "name": "minimist", + "version": "1.2.5", + "description": "parse argument options", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minimist:minimist:1.2.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimist@1.2.5", + "externalReferences": [ + { + "url": "git://github.com/substack/minimist.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/minimist", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimist@1.2.6?package-id=65c18082a40e8fdd", + "author": "James Halliday (http://substack.net)", + "name": "minimist", + "version": "1.2.6", + "description": "parse argument options", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minimist:minimist:1.2.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimist@1.2.6", + "externalReferences": [ + { + "url": "git://github.com/substack/minimist.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/minimist", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass@2.9.0?package-id=f2f474de24692541", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "2.9.0", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:2.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@2.9.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass@2.9.0?package-id=5d775be3798a9729", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "2.9.0", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:2.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@2.9.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass@2.9.0?package-id=e33a08c31794e287", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "2.9.0", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:2.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@2.9.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass@2.9.0?package-id=535794a8ced5f304", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "2.9.0", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:2.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@2.9.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minizlib@1.3.3?package-id=140f93595fa83c95", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minizlib", + "version": "1.3.3", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minizlib:minizlib:1.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/minizlib@1.3.3", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/minizlib#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mississippi@3.0.0?package-id=9436d1be28573634", + "author": "max ogden", + "name": "mississippi", + "version": "3.0.0", + "description": "a collection of useful streams", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:mississippi:mississippi:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mississippi@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/maxogden/mississippi.git", + "type": "distribution" + }, + { + "url": "https://github.com/maxogden/mississippi#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp@0.5.5?package-id=85fdcef12cbeea83", + "author": "James Halliday (http://substack.net)", + "name": "mkdirp", + "version": "0.5.5", + "description": "Recursively mkdir, like `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:substack:mkdirp:0.5.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp@0.5.5", + "externalReferences": [ + { + "url": "git+https://github.com/substack/node-mkdirp.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/node-mkdirp#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp@0.5.6?package-id=197267e394c01d60", + "author": "James Halliday (http://substack.net)", + "name": "mkdirp", + "version": "0.5.6", + "description": "Recursively mkdir, like `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:substack:mkdirp:0.5.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp@0.5.6", + "externalReferences": [ + { + "url": "git+https://github.com/substack/node-mkdirp.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/node-mkdirp#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/moment@2.29.1?package-id=8da2db2786540a61", + "author": "Iskren Ivov Chernev (https://github.com/ichernev)", + "name": "moment", + "version": "2.29.1", + "description": "Parse, validate, manipulate, and display dates", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:moment:moment:2.29.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/moment@2.29.1", + "externalReferences": [ + { + "url": "git+https://github.com/moment/moment.git", + "type": "distribution" + }, + { + "url": "https://momentjs.com", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/moment-timezone@0.5.33?package-id=d72a641ddce5ae2d", + "author": "Tim Wood (http://timwoodcreates.com/)", + "name": "moment-timezone", + "version": "0.5.33", + "description": "Parse and display moments in any timezone.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:moment-timezone:moment-timezone:0.5.33:*:*:*:*:*:*:*", + "purl": "pkg:npm/moment-timezone@0.5.33", + "externalReferences": [ + { + "url": "git+https://github.com/moment/moment-timezone.git", + "type": "distribution" + }, + { + "url": "http://momentjs.com/timezone/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/move-concurrently@1.0.1?package-id=bd433a898366d4cd", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "move-concurrently", + "version": "1.0.1", + "description": "Promises of moves of files or directories with rename, falling back to recursive rename/copy on EXDEV errors, with configurable concurrency and win32 junction support.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:move-concurrently:move-concurrently:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/move-concurrently@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/move-concurrently.git", + "type": "distribution" + }, + { + "url": "https://www.npmjs.com/package/move-concurrently", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.0.0?package-id=f2303b808f773f8a", + "name": "ms", + "version": "2.0.0", + "description": "Tiny milisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:zeit:ms:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/zeit/ms.git", + "type": "distribution" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.0.0?package-id=e80bdbf70c59171", + "name": "ms", + "version": "2.0.0", + "description": "Tiny milisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:zeit:ms:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/zeit/ms.git", + "type": "distribution" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.0.0?package-id=c642cad8fb676cc7", + "name": "ms", + "version": "2.0.0", + "description": "Tiny milisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:zeit:ms:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/zeit/ms.git", + "type": "distribution" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.0.0?package-id=bf9a829bc7ce752e", + "name": "ms", + "version": "2.0.0", + "description": "Tiny milisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:zeit:ms:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/zeit/ms.git", + "type": "distribution" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.0.0?package-id=aa47d5271ed463be", + "name": "ms", + "version": "2.0.0", + "description": "Tiny milisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:zeit:ms:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/zeit/ms.git", + "type": "distribution" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.0.0?package-id=489a012f564610ef", + "name": "ms", + "version": "2.0.0", + "description": "Tiny milisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:zeit:ms:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/zeit/ms.git", + "type": "distribution" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.1?package-id=8d2514ddd40cc73b", + "name": "ms", + "version": "2.1.1", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:zeit:ms:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/zeit/ms.git", + "type": "distribution" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.1?package-id=c3b6931e886fa739", + "name": "ms", + "version": "2.1.1", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:zeit:ms:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/zeit/ms.git", + "type": "distribution" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.2?package-id=11f1e1926128121e", + "name": "ms", + "version": "2.1.2", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:zeit:ms:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/zeit/ms.git", + "type": "distribution" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/multer@1.4.2?package-id=cd7acf9d44738a70", + "name": "multer", + "version": "1.4.2", + "description": "Middleware for handling `multipart/form-data`.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:expressjs:multer:1.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/multer@1.4.2", + "externalReferences": [ + { + "url": "git+https://github.com/expressjs/multer.git", + "type": "distribution" + }, + { + "url": "https://github.com/expressjs/multer#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.2.3-r4?arch=x86_64&distro=alpine-3.17.3&package-id=d9700f02cf26e8b8", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.2.3-r4", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.2.3-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.2.3-r4?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86_64&upstream=musl&distro=alpine-3.17.3&package-id=f71ecf5267e6c37b", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.2.3-r4", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.2.3-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86_64&upstream=musl&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mute-stream@0.0.7?package-id=ab0b4d84af6e6552", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "mute-stream", + "version": "0.0.7", + "description": "Bytes go in, but they don't come out (when muted).", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:mute-stream:mute-stream:0.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/mute-stream@0.0.7", + "externalReferences": [ + { + "url": "git://github.com/isaacs/mute-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/mute-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/negotiator@0.6.2?package-id=ad18b750d9f88ada", + "name": "negotiator", + "version": "0.6.2", + "description": "HTTP content negotiation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:negotiator:negotiator:0.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/negotiator@0.6.2", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/negotiator.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/negotiator#readme", + "type": "website" + } + ] + }, + { + "type": "application", + "bom-ref": "pkg:generic/node@14.21.3?package-id=fc0c6404af16f935", + "name": "node", + "version": "14.21.3", + "cpe": "cpe:2.3:a:nodejs:node.js:14.21.3:*:*:*:*:*:*:*", + "purl": "pkg:generic/node@14.21.3" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-fetch@2.6.1?package-id=ff97b9d822553e25", + "author": "David Frank", + "name": "node-fetch", + "version": "2.6.1", + "description": "A light-weight module that brings window.fetch to node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-fetch:node-fetch:2.6.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-fetch@2.6.1", + "externalReferences": [ + { + "url": "git+https://github.com/bitinn/node-fetch.git", + "type": "distribution" + }, + { + "url": "https://github.com/bitinn/node-fetch", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-fetch-npm@2.0.2?package-id=adeeb0d4a244c44", + "author": "David Frank", + "name": "node-fetch-npm", + "version": "2.0.2", + "description": "An npm cli-oriented fork of the excellent node-fetch", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-fetch-npm:node-fetch-npm:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-fetch-npm@2.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/node-fetch-npm.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/node-fetch-npm", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-gyp@5.1.1?package-id=4b12c9ba8fe75ec8", + "author": "Nathan Rajlich (http://tootallnate.net)", + "name": "node-gyp", + "version": "5.1.1", + "description": "Node.js native addon build tool", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-gyp:node-gyp:5.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-gyp@5.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/node-gyp.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/node-gyp#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/nopt@4.0.3?package-id=2f83f388c5e5a214", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "nopt", + "version": "4.0.3", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:nopt:nopt:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/nopt@4.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/npm/nopt.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/nopt#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/normalize-package-data@2.5.0?package-id=8439f54251b29848", + "author": "Meryn Stol ", + "name": "normalize-package-data", + "version": "2.5.0", + "description": "Normalizes data that can be found in package.json files.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:normalize-package-data:normalize-package-data:2.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/normalize-package-data@2.5.0", + "externalReferences": [ + { + "url": "git://github.com/npm/normalize-package-data.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/normalize-package-data#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm@6.14.18?package-id=f654a78607d1d312", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "npm", + "version": "6.14.18", + "description": "a package manager for JavaScript", + "licenses": [ + { + "license": { + "id": "Artistic-2.0" + } + } + ], + "cpe": "cpe:2.3:a:npm:npm:6.14.18:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm@6.14.18", + "externalReferences": [ + { + "url": "https://github.com/npm/cli", + "type": "distribution" + }, + { + "url": "https://docs.npmjs.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-audit-report@1.3.3?package-id=cfbfbebf3fce8431", + "author": "Adam Baldwin", + "name": "npm-audit-report", + "version": "1.3.3", + "description": "Given a response from the npm security api, render it into a variety of security reports", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-audit-report:npm-audit-report:1.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-audit-report@1.3.3", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-audit-report.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-audit-report#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-bundled@1.1.1?package-id=9e77c8c8f13f445a", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "npm-bundled", + "version": "1.1.1", + "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-bundled:npm-bundled:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-bundled@1.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-bundled.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-bundled#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-cache-filename@1.0.2?package-id=cb5b8efb67903585", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "npm-cache-filename", + "version": "1.0.2", + "description": "Given a cache folder and url, return the appropriate cache folder.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-cache-filename:npm-cache-filename:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-cache-filename@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/npm/npm-cache-filename.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-cache-filename", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-init@0.0.0?package-id=e58118b5aaeeedd7", + "name": "npm-init", + "version": "0.0.0", + "description": "an initter you init wit, innit?", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:npm-init:npm-init:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-init@0.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-install-checks@3.0.2?package-id=cbed4ef3ca50d013", + "author": "Robert Kowalski ", + "name": "npm-install-checks", + "version": "3.0.2", + "description": "checks that npm runs during the installation of a module", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:npm-install-checks:npm-install-checks:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-install-checks@3.0.2", + "externalReferences": [ + { + "url": "git://github.com/npm/npm-install-checks.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-install-checks", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-lifecycle@3.1.5?package-id=b6ff96c0c3bbf7d2", + "author": "Mike Sherov", + "name": "npm-lifecycle", + "version": "3.1.5", + "description": "JavaScript package lifecycle hook runner", + "licenses": [ + { + "license": { + "id": "Artistic-2.0" + } + } + ], + "cpe": "cpe:2.3:a:npm-lifecycle:npm-lifecycle:3.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-lifecycle@3.1.5", + "externalReferences": [ + { + "url": "git://github.com/npm/lifecycle.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/lifecycle#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-logical-tree@1.2.1?package-id=441198ebc020e01d", + "author": "Kat Marchán ", + "name": "npm-logical-tree", + "version": "1.2.1", + "description": "Calculate 'logical' trees from a package.json + package-lock", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-logical-tree:npm-logical-tree:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-logical-tree@1.2.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/logical-tree.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/logical-tree#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@1.0.1?package-id=faf8a116dafcc8d", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "npm-normalize-package-bin", + "version": "1.0.1", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-normalize-package-bin#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-package-arg@6.1.1?package-id=361cb151e33b38b8", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "npm-package-arg", + "version": "6.1.1", + "description": "Parse the things that can be arguments to `npm install`", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-package-arg:npm-package-arg:6.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-package-arg@6.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-package-arg.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-package-arg", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-packlist@1.4.8?package-id=45dd5db953381614", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "npm-packlist", + "version": "1.4.8", + "description": "Get a list of the files to add from a folder into an npm package", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-packlist:npm-packlist:1.4.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-packlist@1.4.8", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-packlist.git", + "type": "distribution" + }, + { + "url": "https://www.npmjs.com/package/npm-packlist", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-pick-manifest@3.0.2?package-id=eaeea9720b4d5360", + "author": "Kat Marchán ", + "name": "npm-pick-manifest", + "version": "3.0.2", + "description": "Resolves a matching manifest from a package metadata document according to standard npm semver resolution rules.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-pick-manifest:npm-pick-manifest:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-pick-manifest@3.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-pick-manifest.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-pick-manifest#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-profile@4.0.4?package-id=4d9e591b42474ecb", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "npm-profile", + "version": "4.0.4", + "description": "Library for updating an npmjs.com profile", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-profile:npm-profile:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-profile@4.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-profile.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-profile/tree/latest/lib#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-registry-fetch@4.0.7?package-id=ff298f561e427135", + "author": "Kat Marchán ", + "name": "npm-registry-fetch", + "version": "4.0.7", + "description": "Fetch-based http client for use with npm registry APIs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-registry-fetch:npm-registry-fetch:4.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-registry-fetch@4.0.7", + "externalReferences": [ + { + "url": "git+https://github.com/npm/registry-fetch.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/registry-fetch#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-run-path@2.0.2?package-id=affacdccaca7f37f", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "npm-run-path", + "version": "2.0.2", + "description": "Get your PATH prepended with locally installed binaries", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:npm-run-path:npm-run-path:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-run-path@2.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/npm-run-path.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/npm-run-path#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-user-validate@1.0.1?package-id=9cb265c5d2df8131", + "author": "Robert Kowalski ", + "name": "npm-user-validate", + "version": "1.0.1", + "description": "User validations for npm", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:npm-user-validate:npm-user-validate:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-user-validate@1.0.1", + "externalReferences": [ + { + "url": "git://github.com/npm/npm-user-validate.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-user-validate#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npmlog@4.1.2?package-id=25b4bcebeb6b5003", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "npmlog", + "version": "4.1.2", + "description": "logger for npm", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npmlog:npmlog:4.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npmlog@4.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npmlog.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npmlog#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/number-is-nan@1.0.1?package-id=52229f13f55aa483", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "number-is-nan", + "version": "1.0.1", + "description": "ES2015 Number.isNaN() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:number-is-nan:number-is-nan:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/number-is-nan@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/number-is-nan.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/number-is-nan#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/oauth-sign@0.9.0?package-id=90154505370ab919", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "oauth-sign", + "version": "0.9.0", + "description": "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:oauth-sign:oauth-sign:0.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/oauth-sign@0.9.0", + "externalReferences": [ + { + "url": "git+https://github.com/mikeal/oauth-sign.git", + "type": "distribution" + }, + { + "url": "https://github.com/mikeal/oauth-sign#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/oauth-sign@0.9.0?package-id=ca46b51b0266a848", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "oauth-sign", + "version": "0.9.0", + "description": "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:oauth-sign:oauth-sign:0.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/oauth-sign@0.9.0", + "externalReferences": [ + { + "url": "git+https://github.com/mikeal/oauth-sign.git", + "type": "distribution" + }, + { + "url": "https://github.com/mikeal/oauth-sign#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-assign@4.1.1?package-id=ae257450c890715a", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "object-assign", + "version": "4.1.1", + "description": "ES2015 `Object.assign()` ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-assign:object-assign:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-assign@4.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/object-assign.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/object-assign#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-assign@4.1.1?package-id=4352ef57ca64ac71", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "object-assign", + "version": "4.1.1", + "description": "ES2015 `Object.assign()` ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-assign:object-assign:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-assign@4.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/object-assign.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/object-assign#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-hash@2.1.1?package-id=1a268c519d95fecd", + "author": "Scott Puleo ", + "name": "object-hash", + "version": "2.1.1", + "description": "Generate hashes from javascript objects in node and the browser.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-hash:object-hash:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-hash@2.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/puleos/object-hash.git", + "type": "distribution" + }, + { + "url": "https://github.com/puleos/object-hash", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-keys@1.0.12?package-id=553c1830da4c0f15", + "author": "Jordan Harband (http://ljharb.codes)", + "name": "object-keys", + "version": "1.0.12", + "description": "An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-keys:object-keys:1.0.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-keys@1.0.12", + "externalReferences": [ + { + "url": "git://github.com/ljharb/object-keys.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-keys@1.1.1?package-id=319eacbf6a0ef5d", + "author": "Jordan Harband (http://ljharb.codes)", + "name": "object-keys", + "version": "1.1.1", + "description": "An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-keys:object-keys:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-keys@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/ljharb/object-keys.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/object-keys#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object.getownpropertydescriptors@2.0.3?package-id=5a48ed26122d77f7", + "author": "Jordan Harband", + "name": "object.getownpropertydescriptors", + "version": "2.0.3", + "description": "ES2017 spec-compliant shim for `Object.getOwnPropertyDescriptors` that works in ES5.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object.getownpropertydescriptors:object.getownpropertydescriptors:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/object.getownpropertydescriptors@2.0.3", + "externalReferences": [ + { + "url": "git://github.com/ljharb/object.getownpropertydescriptors.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/object.getownpropertydescriptors#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/on-finished@2.3.0?package-id=ce866b6fa0101af5", + "name": "on-finished", + "version": "2.3.0", + "description": "Execute a callback when a request closes, finishes, or errors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:on-finished:on-finished:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/on-finished@2.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/on-finished.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/on-finished#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/once@1.4.0?package-id=acd9aa54ac049a0e", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "once", + "version": "1.4.0", + "description": "Run a function exactly one time", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:once:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/once.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/once#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/once@1.4.0?package-id=56789787f3e05aa7", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "once", + "version": "1.4.0", + "description": "Run a function exactly one time", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:once:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/once.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/once#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/opener@1.5.2?package-id=7e147c5eae081fba", + "author": "Domenic Denicola (https://domenic.me/)", + "name": "opener", + "version": "1.5.2", + "description": "Opens stuff, like webpages and files and executables, cross-platform", + "licenses": [ + { + "license": { + "name": "(WTFPL OR MIT)" + } + } + ], + "cpe": "cpe:2.3:a:domenic:opener:1.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/opener@1.5.2", + "externalReferences": [ + { + "url": "git+https://github.com/domenic/opener.git", + "type": "distribution" + }, + { + "url": "https://github.com/domenic/opener#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/os-homedir@1.0.2?package-id=8f5251251e0a2862", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "os-homedir", + "version": "1.0.2", + "description": "Node.js 4 `os.homedir()` ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:os-homedir:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/os-homedir@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/os-homedir.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/os-homedir#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/os-tmpdir@1.0.2?package-id=319f8a779adc8672", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "os-tmpdir", + "version": "1.0.2", + "description": "Node.js os.tmpdir() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:os-tmpdir:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/os-tmpdir@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/os-tmpdir.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/os-tmpdir#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/osenv@0.1.5?package-id=299bd30a410ad76d", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "osenv", + "version": "0.1.5", + "description": "Look up environment settings specific to different operating systems", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:osenv:osenv:0.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/osenv@0.1.5", + "externalReferences": [ + { + "url": "git+https://github.com/npm/osenv.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/osenv#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-finally@1.0.0?package-id=ee6201c5c1a7fb4d", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-finally", + "version": "1.0.0", + "description": "`Promise#finally()` ponyfill - Invoked when the promise is settled regardless of outcome", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:p-finally:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-finally@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/p-finally.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/p-finally#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-limit@2.2.0?package-id=8e8636a82737dbe8", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-limit", + "version": "2.2.0", + "description": "Run multiple promise-returning & async functions with limited concurrency", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:p-limit:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-limit@2.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/p-limit.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/p-limit#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-limit@2.3.0?package-id=55e0eb9e24d434b9", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-limit", + "version": "2.3.0", + "description": "Run multiple promise-returning & async functions with limited concurrency", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:p-limit:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-limit@2.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/p-limit.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/p-limit#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-locate@3.0.0?package-id=caacbeef8553cb8b", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-locate", + "version": "3.0.0", + "description": "Get the first fulfilled promise that satisfies the provided testing function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:p-locate:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-locate@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/p-locate.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/p-locate#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-locate@3.0.0?package-id=f95bdff20b3ee519", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-locate", + "version": "3.0.0", + "description": "Get the first fulfilled promise that satisfies the provided testing function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:p-locate:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-locate@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/p-locate.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/p-locate#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-try@2.2.0?package-id=c42ca8af78a02fe7", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-try", + "version": "2.2.0", + "description": "`Start a promise chain", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:p-try:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-try@2.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/p-try.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/p-try#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-try@2.2.0?package-id=c6cc8bcd8e8c6777", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-try", + "version": "2.2.0", + "description": "`Start a promise chain", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:p-try:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-try@2.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/p-try.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/p-try#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/package-json@4.0.1?package-id=4e92e688a7ce2a15", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "package-json", + "version": "4.0.1", + "description": "Get metadata of a package from the npm registry", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:package-json:package-json:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/package-json@4.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/package-json.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/package-json#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pacote@9.5.12?package-id=140141515a255620", + "author": "Kat Marchán ", + "name": "pacote", + "version": "9.5.12", + "description": "JavaScript package downloader", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pacote:pacote:9.5.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/pacote@9.5.12", + "externalReferences": [ + { + "url": "git+https://github.com/npm/pacote.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/pacote#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/parallel-transform@1.1.0?package-id=62f72bf19fb9ed91", + "author": "Mathias Buus Madsen ", + "name": "parallel-transform", + "version": "1.1.0", + "description": "Transform stream that allows you to run your transforms in parallel without changing the order", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:parallel-transform:parallel-transform:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/parallel-transform@1.1.0", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/parallel-transform.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/parallel-transform#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/parseurl@1.3.3?package-id=a522a78fd0867f72", + "name": "parseurl", + "version": "1.3.3", + "description": "parse a url with memoization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:parseurl:parseurl:1.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/parseurl@1.3.3", + "externalReferences": [ + { + "url": "git+https://github.com/pillarjs/parseurl.git", + "type": "distribution" + }, + { + "url": "https://github.com/pillarjs/parseurl#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-exists@3.0.0?package-id=e62b33d309c41526", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-exists", + "version": "3.0.0", + "description": "Check if a path exists", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:path-exists:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-exists@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/path-exists.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/path-exists#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=b30d6bddac8e825a", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-is-absolute", + "version": "1.0.1", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/path-is-absolute.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=89d0f4a70e07b9bf", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-is-absolute", + "version": "1.0.1", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/path-is-absolute.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-is-inside@1.0.2?package-id=9b511c0f5818d466", + "author": "Domenic Denicola (https://domenic.me)", + "name": "path-is-inside", + "version": "1.0.2", + "description": "Tests whether one path is inside another path", + "licenses": [ + { + "license": { + "name": "(WTFPL OR MIT)" + } + } + ], + "cpe": "cpe:2.3:a:path-is-inside:path-is-inside:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-is-inside@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/domenic/path-is-inside.git", + "type": "distribution" + }, + { + "url": "https://github.com/domenic/path-is-inside#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-key@2.0.1?package-id=2de86124def740fb", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-key", + "version": "2.0.1", + "description": "Get the PATH environment variable key cross-platform", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:path-key:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-key@2.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/path-key.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/path-key#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-parse@1.0.7?package-id=8726bfd9ba83e33b", + "author": "Javier Blanco ", + "name": "path-parse", + "version": "1.0.7", + "description": "Node.js path.parse() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jbgutierrez:path-parse:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-parse@1.0.7", + "externalReferences": [ + { + "url": "git+https://github.com/jbgutierrez/path-parse.git", + "type": "distribution" + }, + { + "url": "https://github.com/jbgutierrez/path-parse#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-to-regexp@0.1.7?package-id=c5bea2fa2a46ed82", + "name": "path-to-regexp", + "version": "0.1.7", + "description": "Express style path to RegExp utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-to-regexp:path-to-regexp:0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-to-regexp@0.1.7", + "externalReferences": [ + { + "url": "git+https://github.com/component/path-to-regexp.git", + "type": "distribution" + }, + { + "url": "https://github.com/component/path-to-regexp#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-to-regexp@3.2.0?package-id=89f78191777fd1c7", + "name": "path-to-regexp", + "version": "3.2.0", + "description": "Express style path to RegExp utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-to-regexp:path-to-regexp:3.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-to-regexp@3.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/pillarjs/path-to-regexp.git", + "type": "distribution" + }, + { + "url": "https://github.com/pillarjs/path-to-regexp#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/performance-now@2.1.0?package-id=33fda45cab4efc34", + "author": "Braveg1rl ", + "name": "performance-now", + "version": "2.1.0", + "description": "Implements performance.now (based on process.hrtime).", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:performance-now:performance-now:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/performance-now@2.1.0", + "externalReferences": [ + { + "url": "git://github.com/braveg1rl/performance-now.git", + "type": "distribution" + }, + { + "url": "https://github.com/braveg1rl/performance-now", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/performance-now@2.1.0?package-id=111ced796010edab", + "author": "Braveg1rl ", + "name": "performance-now", + "version": "2.1.0", + "description": "Implements performance.now (based on process.hrtime).", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:performance-now:performance-now:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/performance-now@2.1.0", + "externalReferences": [ + { + "url": "git://github.com/braveg1rl/performance-now.git", + "type": "distribution" + }, + { + "url": "https://github.com/braveg1rl/performance-now", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pify@3.0.0?package-id=fbdbb56dc0a20970", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "pify", + "version": "3.0.0", + "description": "Promisify a callback-style function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:pify:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pify@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/pify.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/pify#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pliant-app-gateway@1.0.0?package-id=b3314afd9dc66477", + "name": "pliant-app-gateway", + "version": "1.0.0", + "description": "Nest TypeScript starter repository", + "licenses": [ + { + "license": { + "name": "UNLICENSED" + } + } + ], + "cpe": "cpe:2.3:a:pliant-app-gateway:pliant-app-gateway:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pliant-app-gateway@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/prepend-http@1.0.4?package-id=5a1dd47457f85ce5", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "prepend-http", + "version": "1.0.4", + "description": "Prepend `http://` to humanized URLs like todomvc.com and localhost", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:prepend-http:prepend-http:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/prepend-http@1.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/prepend-http.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/prepend-http#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/process-nextick-args@2.0.0?package-id=8bbb7c6bdbbf3e62", + "name": "process-nextick-args", + "version": "2.0.0", + "description": "process.nextTick but always with args", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:process-nextick-args:process-nextick-args:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/process-nextick-args@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/calvinmetcalf/process-nextick-args.git", + "type": "distribution" + }, + { + "url": "https://github.com/calvinmetcalf/process-nextick-args", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/process-nextick-args@2.0.1?package-id=19dd49024e39231", + "name": "process-nextick-args", + "version": "2.0.1", + "description": "process.nextTick but always with args", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:process-nextick-args:process-nextick-args:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/process-nextick-args@2.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/calvinmetcalf/process-nextick-args.git", + "type": "distribution" + }, + { + "url": "https://github.com/calvinmetcalf/process-nextick-args", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/prom-client@13.1.0?package-id=a80065ec112e95c8", + "author": "Simon Nyberg", + "name": "prom-client", + "version": "13.1.0", + "description": "Client for prometheus", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:prom-client:prom-client:13.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/prom-client@13.1.0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/siimon/prom-client.git", + "type": "distribution" + }, + { + "url": "https://github.com/siimon/prom-client", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-inflight@1.0.1?package-id=8ae6caef1e6290fe", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "promise-inflight", + "version": "1.0.1", + "description": "One promise for multiple requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promise-inflight:promise-inflight:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-inflight@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/promise-inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/promise-inflight#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-retry@1.1.1?package-id=4d71993cfae70c18", + "author": "IndigoUnited (http://indigounited.com)", + "name": "promise-retry", + "version": "1.1.1", + "description": "Retries a function that returns a promise, leveraging the power of the retry module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:promise-retry:promise-retry:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-retry@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/IndigoUnited/node-promise-retry.git", + "type": "distribution" + }, + { + "url": "https://github.com/IndigoUnited/node-promise-retry#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promzard@0.3.0?package-id=c6cc33c4ce6e7c43", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "promzard", + "version": "0.3.0", + "description": "prompting wizardly", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promzard:promzard:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/promzard@0.3.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/promzard.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/promzard#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/proto-list@1.2.4?package-id=c43196d550bdd95d", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "proto-list", + "version": "1.2.4", + "description": "A utility for managing a prototype chain", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:proto-list:proto-list:1.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/proto-list@1.2.4", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/proto-list.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/proto-list#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/protoduck@5.0.1?package-id=b68f59ea3292e512", + "author": "Kat Marchán ", + "name": "protoduck", + "version": "5.0.1", + "description": "Fancy duck typing for the most serious of ducks.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:protoduck:protoduck:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/protoduck@5.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/zkat/protoduck.git", + "type": "distribution" + }, + { + "url": "https://github.com/zkat/protoduck#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/proxy-addr@2.0.7?package-id=9c608dd4da227136", + "author": "Douglas Christopher Wilson ", + "name": "proxy-addr", + "version": "2.0.7", + "description": "Determine address of proxied request", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:proxy-addr:proxy-addr:2.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/proxy-addr@2.0.7", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/proxy-addr.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/proxy-addr#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/prr@1.0.1?package-id=63f1d318228c3928", + "author": "Rod Vagg (https://github.com/rvagg)", + "name": "prr", + "version": "1.0.1", + "description": "A better Object.defineProperty()", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:rvagg:prr:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/prr@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/rvagg/prr.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/prr", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pseudomap@1.0.2?package-id=ad27150a47cebf68", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "pseudomap", + "version": "1.0.2", + "description": "A thing that is a lot like ES6 `Map`, but without iterators, for use in environments where `for..of` syntax and `Map` are not available.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:pseudomap:pseudomap:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/pseudomap@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/pseudomap.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/pseudomap#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/psl@1.8.0?package-id=9caee14baaff012", + "author": "Lupo Montero (https://lupomontero.com/)", + "name": "psl", + "version": "1.8.0", + "description": "Domain name parser based on the Public Suffix List", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lupomontero:psl:1.8.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/psl@1.8.0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/lupomontero/psl.git", + "type": "distribution" + }, + { + "url": "https://github.com/lupomontero/psl#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/psl@1.9.0?package-id=aa041879bf1f56aa", + "author": "Lupo Montero (https://lupomontero.com/)", + "name": "psl", + "version": "1.9.0", + "description": "Domain name parser based on the Public Suffix List", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lupomontero:psl:1.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/psl@1.9.0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/lupomontero/psl.git", + "type": "distribution" + }, + { + "url": "https://github.com/lupomontero/psl#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pump@2.0.1?package-id=a8def469cb4dfeae", + "author": "Mathias Buus Madsen ", + "name": "pump", + "version": "2.0.1", + "description": "pipe streams together and close all of them if one of them closes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mafintosh:pump:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/pump@2.0.1", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/pump.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/pump#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pump@3.0.0?package-id=3312119136f0c5b9", + "author": "Mathias Buus Madsen ", + "name": "pump", + "version": "3.0.0", + "description": "pipe streams together and close all of them if one of them closes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mafintosh:pump:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pump@3.0.0", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/pump.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/pump#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pumpify@1.5.1?package-id=dfd38f508d390c3c", + "author": "Mathias Buus", + "name": "pumpify", + "version": "1.5.1", + "description": "Combine an array of streams into a single duplex stream using pump and duplexify", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mafintosh:pumpify:1.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/pumpify@1.5.1", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/pumpify.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/pumpify", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/punycode@2.1.1?package-id=a14c3d9d17c7ad6a", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "punycode", + "version": "2.1.1", + "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:punycode:punycode:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/punycode@2.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/bestiejs/punycode.js.git", + "type": "distribution" + }, + { + "url": "https://mths.be/punycode", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/punycode@2.1.1?package-id=82a8dc98ce1c8f82", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "punycode", + "version": "2.1.1", + "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:punycode:punycode:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/punycode@2.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/bestiejs/punycode.js.git", + "type": "distribution" + }, + { + "url": "https://mths.be/punycode", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/punycode@2.1.1?package-id=c670851ee62b8607", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "punycode", + "version": "2.1.1", + "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:punycode:punycode:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/punycode@2.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/bestiejs/punycode.js.git", + "type": "distribution" + }, + { + "url": "https://mths.be/punycode", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/qrcode-terminal@0.12.0?package-id=12a4e61b4c7723ca", + "name": "qrcode-terminal", + "version": "0.12.0", + "description": "QRCodes, in the terminal", + "licenses": [ + { + "license": { + "name": "Apache 2.0" + } + } + ], + "cpe": "cpe:2.3:a:qrcode-terminal:qrcode-terminal:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/qrcode-terminal@0.12.0", + "externalReferences": [ + { + "url": "git+https://github.com/gtanner/qrcode-terminal.git", + "type": "distribution" + }, + { + "url": "https://github.com/gtanner/qrcode-terminal", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/qs@6.5.2?package-id=1078fe4d646c4d63", + "name": "qs", + "version": "6.5.2", + "description": "A querystring parser that supports nesting and arrays, with a depth limit", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:ljharb:qs:6.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/qs@6.5.2", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/qs.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/qs", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/qs@6.5.3?package-id=d8f004c9ed9b4316", + "name": "qs", + "version": "6.5.3", + "description": "A querystring parser that supports nesting and arrays, with a depth limit", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:ljharb:qs:6.5.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/qs@6.5.3", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/qs.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/qs", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/qs@6.7.0?package-id=1e95eebb398f373b", + "name": "qs", + "version": "6.7.0", + "description": "A querystring parser that supports nesting and arrays, with a depth limit", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:ljharb:qs:6.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/qs@6.7.0", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/qs.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/qs", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/query-string@6.14.1?package-id=2abe4614025ed153", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "query-string", + "version": "6.14.1", + "description": "Parse and stringify URL query strings", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:query-string:query-string:6.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/query-string@6.14.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/query-string.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/query-string#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/querystringify@2.2.0?package-id=4369c662d6e803ab", + "author": "Arnout Kazemier", + "name": "querystringify", + "version": "2.2.0", + "description": "Querystringify - Small, simple but powerful query string parser.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:querystringify:querystringify:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/querystringify@2.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/unshiftio/querystringify.git", + "type": "distribution" + }, + { + "url": "https://github.com/unshiftio/querystringify", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/qw@1.0.2?package-id=b5fcf11b7efc24e7", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "qw", + "version": "1.0.2", + "description": "Quoted word literals!", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:iarna:qw:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/qw@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/node-qw.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/node-qw#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/range-parser@1.2.1?package-id=5f29bd6f8c12ae73", + "author": "TJ Holowaychuk (http://tjholowaychuk.com)", + "name": "range-parser", + "version": "1.2.1", + "description": "Range header field string parser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:range-parser:range-parser:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/range-parser@1.2.1", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/range-parser.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/range-parser#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/raw-body@2.4.0?package-id=94f992c82048f5e8", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "raw-body", + "version": "2.4.0", + "description": "Get and validate the raw body of a readable stream.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stream-utils:raw-body:2.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/raw-body@2.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/stream-utils/raw-body.git", + "type": "distribution" + }, + { + "url": "https://github.com/stream-utils/raw-body#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rc@1.2.8?package-id=4eb7e0d572bcca8b", + "author": "Dominic Tarr (dominictarr.com)", + "name": "rc", + "version": "1.2.8", + "description": "hardwired configuration loader", + "licenses": [ + { + "license": { + "name": "(BSD-2-Clause OR MIT OR Apache-2.0)" + } + } + ], + "cpe": "cpe:2.3:a:dominictarr:rc:1.2.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/rc@1.2.8", + "externalReferences": [ + { + "url": "git+https://github.com/dominictarr/rc.git", + "type": "distribution" + }, + { + "url": "https://github.com/dominictarr/rc#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read@1.0.7?package-id=c9bc8b81b738d1cf", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "read", + "version": "1.0.7", + "description": "read(1) for node programs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:read:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/read@1.0.7", + "externalReferences": [ + { + "url": "git://github.com/isaacs/read.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/read#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-cmd-shim@1.0.5?package-id=f4070b859bc3daec", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "read-cmd-shim", + "version": "1.0.5", + "description": "Figure out what a cmd-shim is pointing at. This acts as the equivalent of fs.readlink.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-cmd-shim:read-cmd-shim:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-cmd-shim@1.0.5", + "externalReferences": [ + { + "url": "git+https://github.com/npm/read-cmd-shim.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/read-cmd-shim#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-installed@4.0.3?package-id=9b81d092221c4f30", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "read-installed", + "version": "4.0.3", + "description": "Read all the installed packages in a folder, and return a tree structure with all the data.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-installed:read-installed:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-installed@4.0.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/read-installed.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/read-installed#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-package-json@2.1.2?package-id=9ea97c610d50ae18", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "read-package-json", + "version": "2.1.2", + "description": "The thing npm uses to read package.json files with semantics and defaults and validation", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-package-json:read-package-json:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-package-json@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/read-package-json.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/read-package-json#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-package-tree@5.3.1?package-id=ae8f6f2464715ed7", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "read-package-tree", + "version": "5.3.1", + "description": "Read the contents of node_modules.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-package-tree:read-package-tree:5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-package-tree@5.3.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/read-package-tree.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/read-package-tree", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@1.1.14?package-id=8757df08ac8f65d0", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "readable-stream", + "version": "1.1.14", + "description": "Streams3, a user-land copy of the stream library from Node.js v0.11.x", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:1.1.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@1.1.14", + "externalReferences": [ + { + "url": "git://github.com/isaacs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@1.1.14?package-id=48b97f0045dc6076", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "readable-stream", + "version": "1.1.14", + "description": "Streams3, a user-land copy of the stream library from Node.js v0.11.x", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:1.1.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@1.1.14", + "externalReferences": [ + { + "url": "git://github.com/isaacs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.6?package-id=7353d87f1c25d400", + "name": "readable-stream", + "version": "2.3.6", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.6", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.6?package-id=fe3065896055c182", + "name": "readable-stream", + "version": "2.3.6", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.6", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.6?package-id=ee88dc9eaec41878", + "name": "readable-stream", + "version": "2.3.6", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.6", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.6?package-id=de77726bf8112b61", + "name": "readable-stream", + "version": "2.3.6", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.6", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.6?package-id=a2ed95a02f789ed0", + "name": "readable-stream", + "version": "2.3.6", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.6", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.6?package-id=4bf24eaec254b2f5", + "name": "readable-stream", + "version": "2.3.6", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.6", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.6?package-id=fbc5f578bd8a0000", + "name": "readable-stream", + "version": "2.3.6", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.6", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.6?package-id=7cd5df9449d0f2a5", + "name": "readable-stream", + "version": "2.3.6", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.6", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.6?package-id=e6f05a441c42f027", + "name": "readable-stream", + "version": "2.3.6", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.6", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.7?package-id=b99a917b60ecef17", + "name": "readable-stream", + "version": "2.3.7", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.7", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@3.6.0?package-id=e68425c0a847320d", + "name": "readable-stream", + "version": "3.6.0", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:3.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@3.6.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readdir-scoped-modules@1.1.0?package-id=faa5c279a92af9df", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "readdir-scoped-modules", + "version": "1.1.0", + "description": "Like `fs.readdir` but handling `@org/module` dirs as if they were a single entry.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:readdir-scoped-modules:readdir-scoped-modules:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/readdir-scoped-modules@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/readdir-scoped-modules.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/readdir-scoped-modules", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/reflect-metadata@0.1.13?package-id=c10a8a0418712a9f", + "author": "Ron Buckton (http://github.com/rbuckton)", + "name": "reflect-metadata", + "version": "0.1.13", + "description": "Polyfill for Metadata Reflection API", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:reflect-metadata:reflect-metadata:0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/reflect-metadata@0.1.13", + "externalReferences": [ + { + "url": "git+https://github.com/rbuckton/reflect-metadata.git", + "type": "distribution" + }, + { + "url": "http://rbuckton.github.io/reflect-metadata", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/registry-auth-token@3.4.0?package-id=7b8cdd936c12baa6", + "author": "Espen Hovlandsdal ", + "name": "registry-auth-token", + "version": "3.4.0", + "description": "Get the auth token set for an npm registry (if any)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:registry-auth-token:registry-auth-token:3.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/registry-auth-token@3.4.0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/rexxars/registry-auth-token.git", + "type": "distribution" + }, + { + "url": "https://github.com/rexxars/registry-auth-token#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/registry-url@3.1.0?package-id=fcf8f05cbd852c57", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "registry-url", + "version": "3.1.0", + "description": "Get the set npm registry URL", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:registry-url:registry-url:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/registry-url@3.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/registry-url.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/registry-url#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/request@2.88.2?package-id=f13bacf801b96d31", + "author": "Mikeal Rogers ", + "name": "request", + "version": "2.88.2", + "description": "Simplified HTTP request client.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:request:request:2.88.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/request@2.88.2", + "externalReferences": [ + { + "url": "git+https://github.com/request/request.git", + "type": "distribution" + }, + { + "url": "https://github.com/request/request#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/request@2.88.2?package-id=ec2b63086d2826ec", + "author": "Mikeal Rogers ", + "name": "request", + "version": "2.88.2", + "description": "Simplified HTTP request client.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:request:request:2.88.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/request@2.88.2", + "externalReferences": [ + { + "url": "git+https://github.com/request/request.git", + "type": "distribution" + }, + { + "url": "https://github.com/request/request#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/request-ip@2.1.3?package-id=14411df53ce38d13", + "author": "Petar Bojinov ", + "name": "request-ip", + "version": "2.1.3", + "description": "A small node.js module to retrieve the request's IP address", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:request-ip:request-ip:2.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/request-ip@2.1.3", + "externalReferences": [ + { + "url": "git+https://github.com/pbojinov/request-ip.git", + "type": "distribution" + }, + { + "url": "https://github.com/pbojinov/request-ip", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/request-promise-core@1.1.4?package-id=cace198e93a0ac1a", + "author": "Nicolai Kamenzky (https://github.com/analog-nico)", + "name": "request-promise-core", + "version": "1.1.4", + "description": "Core Promise support implementation for the simplified HTTP request client 'request'.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:request-promise-core:request-promise-core:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/request-promise-core@1.1.4", + "externalReferences": [ + { + "url": "git+https://github.com/request/promise-core.git", + "type": "distribution" + }, + { + "url": "https://github.com/request/promise-core#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/request-promise-native@1.0.9?package-id=aaa680f997a6fc93", + "author": "Nicolai Kamenzky (https://github.com/analog-nico)", + "name": "request-promise-native", + "version": "1.0.9", + "description": "The simplified HTTP request client 'request' with Promise support. Powered by native ES6 promises.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:request-promise-native:request-promise-native:1.0.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/request-promise-native@1.0.9", + "externalReferences": [ + { + "url": "git+https://github.com/request/request-promise-native.git", + "type": "distribution" + }, + { + "url": "https://github.com/request/request-promise-native#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/require-directory@2.1.1?package-id=bec44f06abee329", + "author": "Troy Goode (http://github.com/troygoode/)", + "name": "require-directory", + "version": "2.1.1", + "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:require-directory:require-directory:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/require-directory@2.1.1", + "externalReferences": [ + { + "url": "git://github.com/troygoode/node-require-directory.git", + "type": "distribution" + }, + { + "url": "https://github.com/troygoode/node-require-directory/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/require-main-filename@2.0.0?package-id=90371ac30591c486", + "author": "Ben Coe ", + "name": "require-main-filename", + "version": "2.0.0", + "description": "shim for require.main.filename() that works in as many environments as possible", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:require-main-filename:require-main-filename:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/require-main-filename@2.0.0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/yargs/require-main-filename.git", + "type": "distribution" + }, + { + "url": "https://github.com/yargs/require-main-filename#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/requires-port@1.0.0?package-id=d9c0fcb42cffe28d", + "author": "Arnout Kazemier", + "name": "requires-port", + "version": "1.0.0", + "description": "Check if a protocol requires a certain port number to be added to an URL.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:requires-port:requires-port:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/requires-port@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/unshiftio/requires-port.git", + "type": "distribution" + }, + { + "url": "https://github.com/unshiftio/requires-port", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/resolve@1.10.0?package-id=dd5261f69051c0d3", + "author": "James Halliday (http://substack.net)", + "name": "resolve", + "version": "1.10.0", + "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:browserify:resolve:1.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/resolve@1.10.0", + "externalReferences": [ + { + "url": "git://github.com/browserify/resolve.git", + "type": "distribution" + }, + { + "url": "https://github.com/browserify/resolve#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/resolve-from@4.0.0?package-id=8184b04db20ef759", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "resolve-from", + "version": "4.0.0", + "description": "Resolve the path of a module like `require.resolve()` but from a given path", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:resolve-from:resolve-from:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/resolve-from@4.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/resolve-from.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/resolve-from#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/retry@0.10.1?package-id=baef3799d7cf16e1", + "author": "Tim Koschützki (http://debuggable.com/)", + "name": "retry", + "version": "0.10.1", + "description": "Abstraction for exponential and custom retry strategies for failed operations.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tim-kos:retry:0.10.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/retry@0.10.1", + "externalReferences": [ + { + "url": "git://github.com/tim-kos/node-retry.git", + "type": "distribution" + }, + { + "url": "https://github.com/tim-kos/node-retry", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/retry@0.12.0?package-id=c3f319915fd297ec", + "author": "Tim Koschützki (http://debuggable.com/)", + "name": "retry", + "version": "0.12.0", + "description": "Abstraction for exponential and custom retry strategies for failed operations.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tim-kos:retry:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/retry@0.12.0", + "externalReferences": [ + { + "url": "git://github.com/tim-kos/node-retry.git", + "type": "distribution" + }, + { + "url": "https://github.com/tim-kos/node-retry", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rfdc@1.3.0?package-id=c42ea943f6301922", + "author": "David Mark Clements ", + "name": "rfdc", + "version": "1.3.0", + "description": "Really Fast Deep Clone", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:davidmarkclements:rfdc:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/rfdc@1.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/davidmarkclements/rfdc.git", + "type": "distribution" + }, + { + "url": "https://github.com/davidmarkclements/rfdc#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rimraf@2.7.1?package-id=be161be7f66aefcd", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "rimraf", + "version": "2.7.1", + "description": "A deep deletion module for node (like `rm -rf`)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:rimraf:2.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/rimraf@2.7.1", + "externalReferences": [ + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/rimraf#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rimraf@3.0.2?package-id=e01ebaeecf917be8", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "rimraf", + "version": "3.0.2", + "description": "A deep deletion module for node (like `rm -rf`)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:rimraf:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/rimraf@3.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/rimraf#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/roarr@4.2.5?package-id=60ce0734aa2de4aa", + "author": "Gajus Kuizinas (http://gajus.com)", + "name": "roarr", + "version": "4.2.5", + "description": "JSON logger for Node.js and browser.", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:gajus:roarr:4.2.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/roarr@4.2.5", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/gajus/roarr.git", + "type": "distribution" + }, + { + "url": "https://github.com/gajus/roarr#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/run-queue@1.0.3?package-id=442b305f6fbe55fa", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "run-queue", + "version": "1.0.3", + "description": "A promise based, dynamic priority queue runner, with concurrency limiting.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:run-queue:run-queue:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/run-queue@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/run-queue.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/run-queue", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rxjs@6.6.7?package-id=5afc7aa01923f872", + "author": "Ben Lesh ", + "name": "rxjs", + "version": "6.6.7", + "description": "Reactive Extensions for modern JavaScript", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:ReactiveX:rxjs:6.6.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/rxjs@6.6.7", + "externalReferences": [ + { + "url": "git+https://github.com/reactivex/rxjs.git", + "type": "distribution" + }, + { + "url": "https://github.com/ReactiveX/RxJS", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=50ecc5e6df6e58c5", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=f0f95c766e1aa1fd", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=1ac233da63df5c6b", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=e65ba2caaac63542", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=2097d653343f69eb", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=55a5a59b48ba893a", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=b1ce5f000c6bdf4a", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=bab19573381c4f", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=bcd939ee4de99ceb", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=1b2cd7c38c3a4930", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=5fcc1d2be46f8c79", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=2ac939eb28d1db11", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=841e94729b3d33d4", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=94afc1a0a505941a", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=81532a293d323c55", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=77bb2c4ce84fae64", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=840e31219814c3f0", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=d0d967c81d071eef", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=5e0db037d77ed863", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=cbafbaa46c5fde16", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=7dee1fb23bc0c5b5", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=e7607a2d4713bcd6", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.2.0?package-id=516952fe04a9e096", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.2.0", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.2.0", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=cd66034a1b1f8a60", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "safe-buffer", + "version": "5.2.1", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=5521c324233fe89", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "safe-buffer", + "version": "5.2.1", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=edf513d3ab46bee", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "safe-buffer", + "version": "5.2.1", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=94bc01ba89de1a5", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "safe-buffer", + "version": "5.2.1", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=7c597e987a69726c", + "author": "Nikita Skovoroda (https://github.com/ChALkeR)", + "name": "safer-buffer", + "version": "2.1.2", + "description": "Modern Buffer API polyfill without footguns", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safer-buffer@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/ChALkeR/safer-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/ChALkeR/safer-buffer#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=1bec84d27ea929ed", + "author": "Nikita Skovoroda (https://github.com/ChALkeR)", + "name": "safer-buffer", + "version": "2.1.2", + "description": "Modern Buffer API polyfill without footguns", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safer-buffer@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/ChALkeR/safer-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/ChALkeR/safer-buffer#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.3.5-r1?arch=x86_64&upstream=pax-utils&distro=alpine-3.17.3&package-id=e903138d19e85b80", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.3.5-r1", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.3.5-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.3.5-r1?arch=x86_64&upstream=pax-utils&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver@5.7.1?package-id=718847389317e4c8", + "name": "semver", + "version": "5.7.1", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:semver:semver:5.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver@5.7.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver@5.7.1?package-id=3d4365fad3b89b36", + "name": "semver", + "version": "5.7.1", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:semver:semver:5.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver@5.7.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver-compare@1.0.0?package-id=e18fbcae955a3a19", + "author": "James Halliday (http://substack.net)", + "name": "semver-compare", + "version": "1.0.0", + "description": "compare two semver version strings, returning -1, 0, or 1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:semver-compare:semver-compare:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver-compare@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/substack/semver-compare.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/semver-compare", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver-diff@2.1.0?package-id=8addb1f46fbb0950", + "author": "Sindre Sorhus (http://sindresorhus.com)", + "name": "semver-diff", + "version": "2.1.0", + "description": "Get the diff type of two semver versions: 0.0.1 0.0.2 → patch", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:semver-diff:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver-diff@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/semver-diff.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/semver-diff#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/send@0.17.1?package-id=39fd424f16226051", + "author": "TJ Holowaychuk ", + "name": "send", + "version": "0.17.1", + "description": "Better streaming static file server with Range and conditional-GET support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pillarjs:send:0.17.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/send@0.17.1", + "externalReferences": [ + { + "url": "git+https://github.com/pillarjs/send.git", + "type": "distribution" + }, + { + "url": "https://github.com/pillarjs/send#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/serialize-error@8.1.0?package-id=e5fdc9cccc69c57b", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "serialize-error", + "version": "8.1.0", + "description": "Serialize/deserialize an error into a plain object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:serialize-error:serialize-error:8.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/serialize-error@8.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/serialize-error.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/serialize-error#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/serve-static@1.14.1?package-id=8a14231746896ad1", + "author": "Douglas Christopher Wilson ", + "name": "serve-static", + "version": "1.14.1", + "description": "Serve static files", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:serve-static:serve-static:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/serve-static@1.14.1", + "externalReferences": [ + { + "url": "git+https://github.com/expressjs/serve-static.git", + "type": "distribution" + }, + { + "url": "https://github.com/expressjs/serve-static#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/set-blocking@2.0.0?package-id=bac85cbb844de9c9", + "author": "Ben Coe ", + "name": "set-blocking", + "version": "2.0.0", + "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:set-blocking:set-blocking:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/set-blocking@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/yargs/set-blocking.git", + "type": "distribution" + }, + { + "url": "https://github.com/yargs/set-blocking#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/setprototypeof@1.1.1?package-id=48c9427615459103", + "author": "Wes Todd", + "name": "setprototypeof", + "version": "1.1.1", + "description": "A small polyfill for Object.setprototypeof", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:setprototypeof:setprototypeof:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/setprototypeof@1.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/wesleytodd/setprototypeof.git", + "type": "distribution" + }, + { + "url": "https://github.com/wesleytodd/setprototypeof", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sha@3.0.0?package-id=64341d7e8de754f6", + "name": "sha", + "version": "3.0.0", + "description": "Check and get file hashes", + "licenses": [ + { + "license": { + "name": "(BSD-2-Clause OR MIT)" + } + } + ], + "cpe": "cpe:2.3:a:ForbesLindesay:sha:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/sha@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/ForbesLindesay/sha.git", + "type": "distribution" + }, + { + "url": "https://github.com/ForbesLindesay/sha#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/shebang-command@1.2.0?package-id=31728ea7868ca29", + "author": "Kevin Martensson (github.com/kevva)", + "name": "shebang-command", + "version": "1.2.0", + "description": "Get the command from a shebang", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shebang-command:shebang-command:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/shebang-command@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/kevva/shebang-command.git", + "type": "distribution" + }, + { + "url": "https://github.com/kevva/shebang-command#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/shebang-regex@1.0.0?package-id=3ee6cea199436243", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "shebang-regex", + "version": "1.0.0", + "description": "Regular expression for matching a shebang", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shebang-regex:shebang-regex:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/shebang-regex@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/shebang-regex.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/shebang-regex#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/signal-exit@3.0.2?package-id=5f81e92f345b2dca", + "author": "Ben Coe ", + "name": "signal-exit", + "version": "3.0.2", + "description": "when you want to fire an event no matter how a process exits.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:signal-exit:signal-exit:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/signal-exit@3.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/tapjs/signal-exit.git", + "type": "distribution" + }, + { + "url": "https://github.com/tapjs/signal-exit", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/slide@1.1.6?package-id=67c80effc5f2e06c", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "slide", + "version": "1.1.6", + "description": "A flow control lib small enough to fit on in a slide presentation. Derived live at Oak.JS", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:slide:1.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/slide@1.1.6", + "externalReferences": [ + { + "url": "git://github.com/isaacs/slide-flow-control.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/slide-flow-control#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/smart-buffer@4.1.0?package-id=8a098cd7b95880b2", + "author": "Josh Glazebrook", + "name": "smart-buffer", + "version": "4.1.0", + "description": "smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:JoshGlazebrook:smart-buffer:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/smart-buffer@4.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/JoshGlazebrook/smart-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/JoshGlazebrook/smart-buffer/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/socks@2.3.3?package-id=df90bddac1fc2e9b", + "author": "Josh Glazebrook", + "name": "socks", + "version": "2.3.3", + "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:JoshGlazebrook:socks:2.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/socks@2.3.3", + "externalReferences": [ + { + "url": "git+https://github.com/JoshGlazebrook/socks.git", + "type": "distribution" + }, + { + "url": "https://github.com/JoshGlazebrook/socks/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/socks-proxy-agent@4.0.2?package-id=467552ce30535bfb", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "socks-proxy-agent", + "version": "4.0.2", + "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:socks-proxy-agent:socks-proxy-agent:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/socks-proxy-agent@4.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-socks-proxy-agent.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/node-socks-proxy-agent#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sorted-object@2.0.1?package-id=b1d8024e52e50f32", + "author": "Domenic Denicola (https://domenic.me/)", + "name": "sorted-object", + "version": "2.0.1", + "description": "Returns a copy of an object with its keys sorted", + "licenses": [ + { + "license": { + "name": "(WTFPL OR MIT)" + } + } + ], + "cpe": "cpe:2.3:a:sorted-object:sorted-object:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/sorted-object@2.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/domenic/sorted-object.git", + "type": "distribution" + }, + { + "url": "https://github.com/domenic/sorted-object#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sorted-union-stream@2.1.3?package-id=6fde9400f65d4713", + "author": "Mathias Buus Madsen ", + "name": "sorted-union-stream", + "version": "2.1.3", + "description": "Get the union of two sorted streams", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sorted-union-stream:sorted-union-stream:2.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/sorted-union-stream@2.1.3", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/sorted-union-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/sorted-union-stream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-correct@3.0.0?package-id=73531364f1007a1", + "author": "Kyle E. Mitchell (https://kemitchell.com)", + "name": "spdx-correct", + "version": "3.0.0", + "description": "correct invalid SPDX expressions", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-correct:spdx-correct:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-correct@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/jslicense/spdx-correct.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/jslicense/spdx-correct.js#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-exceptions@2.1.0?package-id=1e5a7f3e71a3aea6", + "author": "The Linux Foundation", + "name": "spdx-exceptions", + "version": "2.1.0", + "description": "list of SPDX standard license exceptions", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-exceptions:spdx-exceptions:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-exceptions@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/kemitchell/spdx-exceptions.json.git", + "type": "distribution" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-expression-parse@3.0.0?package-id=71a0de12075b58c5", + "author": "Kyle E. Mitchell (http://kemitchell.com)", + "name": "spdx-expression-parse", + "version": "3.0.0", + "description": "parse SPDX license expressions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:spdx-expression-parse:spdx-expression-parse:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-expression-parse@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/jslicense/spdx-expression-parse.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-license-ids@3.0.5?package-id=1138941acd86a408", + "author": "Shinnosuke Watanabe (https://github.com/shinnn)", + "name": "spdx-license-ids", + "version": "3.0.5", + "description": "A list of SPDX license identifiers", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-license-ids:spdx-license-ids:3.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-license-ids@3.0.5", + "externalReferences": [ + { + "url": "git+https://github.com/shinnn/spdx-license-ids.git", + "type": "distribution" + }, + { + "url": "https://github.com/shinnn/spdx-license-ids#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/split-on-first@1.1.0?package-id=a53cafaea7f6944b", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "split-on-first", + "version": "1.1.0", + "description": "Split a string on the first occurance of a given separator", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:split-on-first:split-on-first:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/split-on-first@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/split-on-first.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/split-on-first#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sshpk@1.16.1?package-id=8591094f2543bcad", + "author": "Joyent, Inc", + "name": "sshpk", + "version": "1.16.1", + "description": "A library for finding and using SSH public keys", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:arekinath:sshpk:1.16.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/sshpk@1.16.1", + "externalReferences": [ + { + "url": "git+https://github.com/joyent/node-sshpk.git", + "type": "distribution" + }, + { + "url": "https://github.com/arekinath/node-sshpk#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sshpk@1.17.0?package-id=6729e05d3acb693f", + "author": "Joyent, Inc", + "name": "sshpk", + "version": "1.17.0", + "description": "A library for finding and using SSH public keys", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:arekinath:sshpk:1.17.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/sshpk@1.17.0", + "externalReferences": [ + { + "url": "git+https://github.com/joyent/node-sshpk.git", + "type": "distribution" + }, + { + "url": "https://github.com/arekinath/node-sshpk#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.3&package-id=b15247aafcd4a647", + "publisher": "Sören Tempel ", + "name": "ssl_client", + "version": "1.35.0-r29", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.35.0-r29:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ssri@6.0.2?package-id=739aca50718ed16c", + "author": "Kat Marchán ", + "name": "ssri", + "version": "6.0.2", + "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ssri:ssri:6.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ssri@6.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/zkat/ssri.git", + "type": "distribution" + }, + { + "url": "https://github.com/zkat/ssri#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/statuses@1.5.0?package-id=7880c86343c91f02", + "name": "statuses", + "version": "1.5.0", + "description": "HTTP status utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:statuses:statuses:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/statuses@1.5.0", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/statuses.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/statuses#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/stealthy-require@1.1.1?package-id=c9d362abc885b44", + "author": "Nicolai Kamenzky (https://github.com/analog-nico)", + "name": "stealthy-require", + "version": "1.1.1", + "description": "The closest you can get to require something with bypassing the require cache", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:stealthy-require:stealthy-require:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/stealthy-require@1.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/analog-nico/stealthy-require.git", + "type": "distribution" + }, + { + "url": "https://github.com/analog-nico/stealthy-require#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/stream-each@1.2.2?package-id=ff21dffb4b08347c", + "author": "Mathias Buus (@mafintosh)", + "name": "stream-each", + "version": "1.2.2", + "description": "Iterate all the data in a stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stream-each:stream-each:1.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/stream-each@1.2.2", + "externalReferences": [ + { + "url": "git+https://github.com/mafintosh/stream-each.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/stream-each", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/stream-iterate@1.2.0?package-id=45645dfa25e969e7", + "author": "Mathias Buus (@mafintosh)", + "name": "stream-iterate", + "version": "1.2.0", + "description": "Iterate through the values of a stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stream-iterate:stream-iterate:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/stream-iterate@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/mafintosh/stream-iterate.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/stream-iterate", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/stream-shift@1.0.0?package-id=e058037128eb4cc1", + "author": "Mathias Buus (@mafintosh)", + "name": "stream-shift", + "version": "1.0.0", + "description": "Returns the next buffer/object in a stream's readable queue", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stream-shift:stream-shift:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/stream-shift@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/mafintosh/stream-shift.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/stream-shift", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/streamsearch@0.1.2?package-id=900089132d0d8437", + "author": "Brian White ", + "name": "streamsearch", + "version": "0.1.2", + "description": "Streaming Boyer-Moore-Horspool searching for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:streamsearch:streamsearch:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/streamsearch@0.1.2", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/mscdex/streamsearch.git", + "type": "distribution" + }, + { + "url": "https://github.com/mscdex/streamsearch#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strict-uri-encode@2.0.0?package-id=8d1313eb6c7e50c6", + "author": "Kevin Mårtensson (github.com/kevva)", + "name": "strict-uri-encode", + "version": "2.0.0", + "description": "A stricter URI encode adhering to RFC 3986", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strict-uri-encode:strict-uri-encode:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strict-uri-encode@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/kevva/strict-uri-encode.git", + "type": "distribution" + }, + { + "url": "https://github.com/kevva/strict-uri-encode#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-similarity@4.0.4?package-id=f621801ca083fcb1", + "author": "Akash Kurdekar (http://untilfalse.com/)", + "name": "string-similarity", + "version": "4.0.4", + "description": "Finds degree of similarity between strings, based on Dice's Coefficient, which is mostly better than Levenshtein distance.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:string-similarity:string-similarity:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-similarity@4.0.4", + "externalReferences": [ + { + "url": "git://github.com/aceakash/string-similarity.git", + "type": "distribution" + }, + { + "url": "https://github.com/aceakash/string-similarity#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@1.0.2?package-id=f3fde1d1bb9d11bb", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "1.0.2", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:string-width:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@1.0.2?package-id=aad7726ab13feca", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "1.0.2", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:string-width:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@2.1.1?package-id=aa7b698cf21b3eed", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "2.1.1", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:string-width:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@2.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@3.1.0?package-id=87790d6cb608b04c", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "3.1.0", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:string-width:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@3.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@3.1.0?package-id=12bb72b3585d56cb", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "3.1.0", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:string-width:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@3.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@3.1.0?package-id=55af5077fbd273b", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "3.1.0", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:string-width:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@3.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@0.10.31?package-id=842458f1d210431a", + "name": "string_decoder", + "version": "0.10.31", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:0.10.31:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@0.10.31", + "externalReferences": [ + { + "url": "git://github.com/rvagg/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@0.10.31?package-id=b225c432d9e6b500", + "name": "string_decoder", + "version": "0.10.31", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:0.10.31:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@0.10.31", + "externalReferences": [ + { + "url": "git://github.com/rvagg/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=a6eeeaeb8b6353ea", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=361d8a5e7e28d65b", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=6de5785db73e974c", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=64921df3b8583429", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=f7db62bc91e69852", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=44a4766f5469b746", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=2892cc6855d3777f", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=b44575a021be68ba", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=b19b3b00778e1d8", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=5c7fd10ffa2e6849", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.3.0?package-id=ca8af4aa6b41ca75", + "name": "string_decoder", + "version": "1.3.0", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/stringify-package@1.0.1?package-id=c67453153e496783", + "author": "Kat Marchán ", + "name": "stringify-package", + "version": "1.0.1", + "description": "stringifies npm-written json files", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:stringify-package:stringify-package:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/stringify-package@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/stringify-package.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/stringify-package", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@3.0.1?package-id=51b22d897b0450b8", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "3.0.1", + "description": "Strip ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@3.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@4.0.0?package-id=13ba95b5b65e8a37", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "4.0.0", + "description": "Strip ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@4.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@5.2.0?package-id=465f19aa1b6b9497", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "5.2.0", + "description": "Strip ANSI escape codes from a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@5.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@5.2.0?package-id=f78d385de6e5730d", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "5.2.0", + "description": "Strip ANSI escape codes from a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@5.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@5.2.0?package-id=6eaeb57df2549822", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "5.2.0", + "description": "Strip ANSI escape codes from a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@5.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-eof@1.0.0?package-id=16191ba994ef2bb8", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-eof", + "version": "1.0.0", + "description": "Strip the End-Of-File (EOF) character from a string/buffer", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:strip-eof:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-eof@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/strip-eof.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/strip-eof#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-json-comments@2.0.1?package-id=ccf04b5e0cce811a", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-json-comments", + "version": "2.0.1", + "description": "Strip comments from JSON. Lets you use comments in your JSON files!", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-json-comments:strip-json-comments:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-json-comments@2.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/strip-json-comments.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/strip-json-comments#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-color@5.4.0?package-id=4145d752dc87470d", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "supports-color", + "version": "5.4.0", + "description": "Detect whether a terminal supports color", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-color:supports-color:5.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-color@5.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/supports-color.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/supports-color#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-color@7.2.0?package-id=33ae3b7b72211ee6", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "supports-color", + "version": "7.2.0", + "description": "Detect whether a terminal supports color", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-color:supports-color:7.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-color@7.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/supports-color.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/supports-color#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/swagger-ui-dist@3.51.1?package-id=23030af97edbc554", + "name": "swagger-ui-dist", + "version": "3.51.1", + "description": "[![NPM version](https://badge.fury.io/js/swagger-ui-dist.svg)](http://badge.fury.io/js/swagger-ui-dist)", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:swagger-ui-dist:swagger-ui-dist:3.51.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/swagger-ui-dist@3.51.1", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/swagger-api/swagger-ui.git", + "type": "distribution" + }, + { + "url": "https://github.com/swagger-api/swagger-ui#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/swagger-ui-express@4.1.6?package-id=7b829ce58415e1f2", + "author": "Stephen Scott ", + "name": "swagger-ui-express", + "version": "4.1.6", + "description": "Swagger UI Express", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:swagger-ui-express:swagger-ui-express:4.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/swagger-ui-express@4.1.6", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/scottie1984/swagger-ui-express.git", + "type": "distribution" + }, + { + "url": "https://github.com/scottie1984/swagger-ui-express", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tar@4.4.19?package-id=9c9c5053c0d2bf4e", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "tar", + "version": "4.4.19", + "description": "tar for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm:tar:4.4.19:*:*:*:*:*:*:*", + "purl": "pkg:npm/tar@4.4.19", + "externalReferences": [ + { + "url": "git+https://github.com/npm/node-tar.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/node-tar#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tdigest@0.1.1?package-id=57d3f731d207b2d5", + "author": "Will Welch (http://quietplease.com/)", + "name": "tdigest", + "version": "0.1.1", + "description": "javascript implementation of Dunning's T-Digest for streaming quantile approximation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tdigest:tdigest:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/tdigest@0.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/welch/tdigest.git", + "type": "distribution" + }, + { + "url": "https://github.com/welch/tdigest", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/term-size@1.2.0?package-id=b1193806642eaebf", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "term-size", + "version": "1.2.0", + "description": "Reliably get the terminal window size (columns & rows)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:term-size:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/term-size@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/term-size.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/term-size#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/text-table@0.2.0?package-id=a124be9ad599668f", + "author": "James Halliday (http://substack.net)", + "name": "text-table", + "version": "0.2.0", + "description": "borderless text tables with alignment", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:text-table:text-table:0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/text-table@0.2.0", + "externalReferences": [ + { + "url": "git://github.com/substack/text-table.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/text-table", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/through@2.3.8?package-id=4d5d009c68a6687c", + "author": "Dominic Tarr (dominictarr.com)", + "name": "through", + "version": "2.3.8", + "description": "simplified stream construction", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dominictarr:through:2.3.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/through@2.3.8", + "externalReferences": [ + { + "url": "git+https://github.com/dominictarr/through.git", + "type": "distribution" + }, + { + "url": "https://github.com/dominictarr/through", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/through2@2.0.3?package-id=8dbf9f3bfb369784", + "author": "Rod Vagg (https://github.com/rvagg)", + "name": "through2", + "version": "2.0.3", + "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:through2:through2:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/through2@2.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/rvagg/through2.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/through2#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/timed-out@4.0.1?package-id=8c5219320754c34a", + "author": "Vsevolod Strukchinsky ", + "name": "timed-out", + "version": "4.0.1", + "description": "Emit `ETIMEDOUT` or `ESOCKETTIMEDOUT` when ClientRequest is hanged", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:floatdrop:timed-out:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/timed-out@4.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/floatdrop/timed-out.git", + "type": "distribution" + }, + { + "url": "https://github.com/floatdrop/timed-out#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tiny-relative-date@1.3.0?package-id=192b923f399b9869", + "author": "Joseph Wynn (https://wildlyinaccurate.com/)", + "name": "tiny-relative-date", + "version": "1.3.0", + "description": "Tiny function that provides relative, human-readable dates.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tiny-relative-date:tiny-relative-date:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tiny-relative-date@1.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/wildlyinaccurate/relative-date.git", + "type": "distribution" + }, + { + "url": "https://github.com/wildlyinaccurate/relative-date#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/toidentifier@1.0.0?package-id=b139c4c4805829ae", + "author": "Douglas Christopher Wilson ", + "name": "toidentifier", + "version": "1.0.0", + "description": "Convert a string of words to a JavaScript identifier", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:toidentifier:toidentifier:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/toidentifier@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/component/toidentifier.git", + "type": "distribution" + }, + { + "url": "https://github.com/component/toidentifier#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tough-cookie@2.5.0?package-id=f258c5fd182253c1", + "author": "Jeremy Stashewsky ", + "name": "tough-cookie", + "version": "2.5.0", + "description": "RFC6265 Cookies and Cookie Jar for node.js", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:tough-cookie:tough-cookie:2.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tough-cookie@2.5.0", + "externalReferences": [ + { + "url": "git://github.com/salesforce/tough-cookie.git", + "type": "distribution" + }, + { + "url": "https://github.com/salesforce/tough-cookie", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tough-cookie@2.5.0?package-id=46e88d011801ebab", + "author": "Jeremy Stashewsky ", + "name": "tough-cookie", + "version": "2.5.0", + "description": "RFC6265 Cookies and Cookie Jar for node.js", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:tough-cookie:tough-cookie:2.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tough-cookie@2.5.0", + "externalReferences": [ + { + "url": "git://github.com/salesforce/tough-cookie.git", + "type": "distribution" + }, + { + "url": "https://github.com/salesforce/tough-cookie", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tough-cookie@2.5.0?package-id=bfc5458cbb7f12a6", + "author": "Jeremy Stashewsky ", + "name": "tough-cookie", + "version": "2.5.0", + "description": "RFC6265 Cookies and Cookie Jar for node.js", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:tough-cookie:tough-cookie:2.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tough-cookie@2.5.0", + "externalReferences": [ + { + "url": "git://github.com/salesforce/tough-cookie.git", + "type": "distribution" + }, + { + "url": "https://github.com/salesforce/tough-cookie", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslib@1.14.1?package-id=6536b2dd10d6cbb5", + "author": "Microsoft Corp.", + "name": "tslib", + "version": "1.14.1", + "description": "Runtime library for TypeScript helper functions", + "licenses": [ + { + "license": { + "id": "0BSD" + } + } + ], + "cpe": "cpe:2.3:a:tslib:tslib:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslib@1.14.1", + "externalReferences": [ + { + "url": "git+https://github.com/Microsoft/tslib.git", + "type": "distribution" + }, + { + "url": "https://www.typescriptlang.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslib@1.14.1?package-id=1d66cb61fb941655", + "author": "Microsoft Corp.", + "name": "tslib", + "version": "1.14.1", + "description": "Runtime library for TypeScript helper functions", + "licenses": [ + { + "license": { + "id": "0BSD" + } + } + ], + "cpe": "cpe:2.3:a:tslib:tslib:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslib@1.14.1", + "externalReferences": [ + { + "url": "git+https://github.com/Microsoft/tslib.git", + "type": "distribution" + }, + { + "url": "https://www.typescriptlang.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslib@1.14.1?package-id=85f17f7fdbf8a5d0", + "author": "Microsoft Corp.", + "name": "tslib", + "version": "1.14.1", + "description": "Runtime library for TypeScript helper functions", + "licenses": [ + { + "license": { + "id": "0BSD" + } + } + ], + "cpe": "cpe:2.3:a:tslib:tslib:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslib@1.14.1", + "externalReferences": [ + { + "url": "git+https://github.com/Microsoft/tslib.git", + "type": "distribution" + }, + { + "url": "https://www.typescriptlang.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslib@1.14.1?package-id=5529bb73f7015d14", + "author": "Microsoft Corp.", + "name": "tslib", + "version": "1.14.1", + "description": "Runtime library for TypeScript helper functions", + "licenses": [ + { + "license": { + "id": "0BSD" + } + } + ], + "cpe": "cpe:2.3:a:tslib:tslib:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslib@1.14.1", + "externalReferences": [ + { + "url": "git+https://github.com/Microsoft/tslib.git", + "type": "distribution" + }, + { + "url": "https://www.typescriptlang.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslib@1.14.1?package-id=35ceae8b5a8ff734", + "author": "Microsoft Corp.", + "name": "tslib", + "version": "1.14.1", + "description": "Runtime library for TypeScript helper functions", + "licenses": [ + { + "license": { + "id": "0BSD" + } + } + ], + "cpe": "cpe:2.3:a:tslib:tslib:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslib@1.14.1", + "externalReferences": [ + { + "url": "git+https://github.com/Microsoft/tslib.git", + "type": "distribution" + }, + { + "url": "https://www.typescriptlang.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslib@1.14.1?package-id=4a8087d9ced7b72a", + "author": "Microsoft Corp.", + "name": "tslib", + "version": "1.14.1", + "description": "Runtime library for TypeScript helper functions", + "licenses": [ + { + "license": { + "id": "0BSD" + } + } + ], + "cpe": "cpe:2.3:a:tslib:tslib:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslib@1.14.1", + "externalReferences": [ + { + "url": "git+https://github.com/Microsoft/tslib.git", + "type": "distribution" + }, + { + "url": "https://www.typescriptlang.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslib@1.14.1?package-id=81b6a4b44008213", + "author": "Microsoft Corp.", + "name": "tslib", + "version": "1.14.1", + "description": "Runtime library for TypeScript helper functions", + "licenses": [ + { + "license": { + "id": "0BSD" + } + } + ], + "cpe": "cpe:2.3:a:tslib:tslib:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslib@1.14.1", + "externalReferences": [ + { + "url": "git+https://github.com/Microsoft/tslib.git", + "type": "distribution" + }, + { + "url": "https://www.typescriptlang.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tslib@2.2.0?package-id=90598db04856e225", + "author": "Microsoft Corp.", + "name": "tslib", + "version": "2.2.0", + "description": "Runtime library for TypeScript helper functions", + "licenses": [ + { + "license": { + "id": "0BSD" + } + } + ], + "cpe": "cpe:2.3:a:tslib:tslib:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslib@2.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/Microsoft/tslib.git", + "type": "distribution" + }, + { + "url": "https://www.typescriptlang.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tunnel-agent@0.6.0?package-id=f0388bb360765d65", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "tunnel-agent", + "version": "0.6.0", + "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:tunnel-agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tunnel-agent@0.6.0", + "externalReferences": [ + { + "url": "git+https://github.com/mikeal/tunnel-agent.git", + "type": "distribution" + }, + { + "url": "https://github.com/mikeal/tunnel-agent#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tunnel-agent@0.6.0?package-id=5f666f5e908dfc65", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "tunnel-agent", + "version": "0.6.0", + "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:tunnel-agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tunnel-agent@0.6.0", + "externalReferences": [ + { + "url": "git+https://github.com/mikeal/tunnel-agent.git", + "type": "distribution" + }, + { + "url": "https://github.com/mikeal/tunnel-agent#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tweetnacl@0.14.5?package-id=9f8588e164854386", + "author": "TweetNaCl-js contributors", + "name": "tweetnacl", + "version": "0.14.5", + "description": "Port of TweetNaCl cryptographic library to JavaScript", + "licenses": [ + { + "license": { + "id": "Unlicense" + } + } + ], + "cpe": "cpe:2.3:a:tweetnacl:tweetnacl:0.14.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/tweetnacl@0.14.5", + "externalReferences": [ + { + "url": "git+https://github.com/dchest/tweetnacl-js.git", + "type": "distribution" + }, + { + "url": "https://tweetnacl.js.org", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tweetnacl@0.14.5?package-id=978333255b1b0435", + "author": "TweetNaCl-js contributors", + "name": "tweetnacl", + "version": "0.14.5", + "description": "Port of TweetNaCl cryptographic library to JavaScript", + "licenses": [ + { + "license": { + "id": "Unlicense" + } + } + ], + "cpe": "cpe:2.3:a:tweetnacl:tweetnacl:0.14.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/tweetnacl@0.14.5", + "externalReferences": [ + { + "url": "git+https://github.com/dchest/tweetnacl-js.git", + "type": "distribution" + }, + { + "url": "https://tweetnacl.js.org", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/type-fest@0.20.2?package-id=89d29052f9ea1f10", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "type-fest", + "version": "0.20.2", + "description": "A collection of essential TypeScript types", + "licenses": [ + { + "license": { + "name": "(MIT OR CC0-1.0)" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:type-fest:0.20.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/type-fest@0.20.2", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/type-fest.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/type-fest#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/type-is@1.6.18?package-id=a4eef9183b32a31", + "name": "type-is", + "version": "1.6.18", + "description": "Infer the content-type of a request.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:type-is:type-is:1.6.18:*:*:*:*:*:*:*", + "purl": "pkg:npm/type-is@1.6.18", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/type-is.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/type-is#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/typedarray@0.0.6?package-id=f7beac06324a3356", + "author": "James Halliday (http://substack.net)", + "name": "typedarray", + "version": "0.0.6", + "description": "TypedArray polyfill for old browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:typedarray:typedarray:0.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/typedarray@0.0.6", + "externalReferences": [ + { + "url": "git://github.com/substack/typedarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/typedarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/typedarray@0.0.6?package-id=8f3ba3a6a4336960", + "author": "James Halliday (http://substack.net)", + "name": "typedarray", + "version": "0.0.6", + "description": "TypedArray polyfill for old browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:typedarray:typedarray:0.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/typedarray@0.0.6", + "externalReferences": [ + { + "url": "git://github.com/substack/typedarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/typedarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uid-number@0.0.6?package-id=c6b3a428d7d6414b", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "uid-number", + "version": "0.0.6", + "description": "Convert a username/group name to a uid/gid number", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:uid-number:uid-number:0.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/uid-number@0.0.6", + "externalReferences": [ + { + "url": "git://github.com/isaacs/uid-number.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/uid-number#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/umask@1.1.0?package-id=c2c1639822e8e1f2", + "author": "Sam Mikes ", + "name": "umask", + "version": "1.1.0", + "description": "convert umask from string <-> number", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:smikes:umask:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/umask@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/smikes/umask.git", + "type": "distribution" + }, + { + "url": "https://github.com/smikes/umask", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unique-filename@1.1.1?package-id=7ca7ff63263b2fc2", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "unique-filename", + "version": "1.1.1", + "description": "Generate a unique filename for use in temporary directories or caches.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:unique-filename:unique-filename:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-filename@1.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/unique-filename.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/unique-filename", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unique-slug@2.0.0?package-id=924ca3204f5aad87", + "author": "Rebecca Turner (http://re-becca.org)", + "name": "unique-slug", + "version": "2.0.0", + "description": "Generate a unique character string suitible for use in files and URLs.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:unique-slug:unique-slug:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-slug@2.0.0", + "externalReferences": [ + { + "url": "git://github.com/iarna/unique-slug.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/unique-slug#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unique-string@1.0.0?package-id=4e6b7ebbf2d6b0b2", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "unique-string", + "version": "1.0.0", + "description": "Generate a unique random string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unique-string:unique-string:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-string@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/unique-string.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/unique-string#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unpipe@1.0.0?package-id=5fde8937a7c37a7f", + "author": "Douglas Christopher Wilson ", + "name": "unpipe", + "version": "1.0.0", + "description": "Unpipe a stream from all destinations", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stream-utils:unpipe:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unpipe@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/stream-utils/unpipe.git", + "type": "distribution" + }, + { + "url": "https://github.com/stream-utils/unpipe#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unpipe@1.0.0?package-id=6e84e73fed0f90d9", + "author": "Douglas Christopher Wilson ", + "name": "unpipe", + "version": "1.0.0", + "description": "Unpipe a stream from all destinations", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stream-utils:unpipe:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unpipe@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/stream-utils/unpipe.git", + "type": "distribution" + }, + { + "url": "https://github.com/stream-utils/unpipe#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unzip-response@2.0.1?package-id=2f2960808396cad4", + "name": "unzip-response", + "version": "2.0.1", + "description": "Unzip a HTTP response if needed", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unzip-response:unzip-response:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/unzip-response@2.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/unzip-response.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/unzip-response#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/update-notifier@2.5.0?package-id=e826782630303ce6", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "update-notifier", + "version": "2.5.0", + "description": "Update notifications for your CLI app", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:update-notifier:update-notifier:2.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/update-notifier@2.5.0", + "externalReferences": [ + { + "url": "git+https://github.com/yeoman/update-notifier.git", + "type": "distribution" + }, + { + "url": "https://github.com/yeoman/update-notifier#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uri-js@4.4.1?package-id=dfad1f1bc56159f9", + "author": "Gary Court ", + "name": "uri-js", + "version": "4.4.1", + "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:garycourt:uri-js:4.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/uri-js@4.4.1", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/garycourt/uri-js.git", + "type": "distribution" + }, + { + "url": "https://github.com/garycourt/uri-js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uri-js@4.4.1?package-id=14b9611f4164946d", + "author": "Gary Court ", + "name": "uri-js", + "version": "4.4.1", + "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:garycourt:uri-js:4.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/uri-js@4.4.1", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/garycourt/uri-js.git", + "type": "distribution" + }, + { + "url": "https://github.com/garycourt/uri-js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/url-parse@1.5.1?package-id=b72a7ea449ac5253", + "author": "Arnout Kazemier", + "name": "url-parse", + "version": "1.5.1", + "description": "Small footprint URL parser that works seamlessly across Node.js and browser environments", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unshiftio:url-parse:1.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/url-parse@1.5.1", + "externalReferences": [ + { + "url": "git+https://github.com/unshiftio/url-parse.git", + "type": "distribution" + }, + { + "url": "https://github.com/unshiftio/url-parse#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/url-parse-lax@1.0.0?package-id=66c52cc773273a82", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "url-parse-lax", + "version": "1.0.0", + "description": "url.parse() with support for protocol-less URLs & IPs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:url-parse-lax:url-parse-lax:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/url-parse-lax@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/url-parse-lax.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/url-parse-lax#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/url-value-parser@2.0.3?package-id=4cc7ab4185879cb9", + "author": "Konstantin Pogorelov ", + "name": "url-value-parser", + "version": "2.0.3", + "description": "extracts and replaces values and IDs in URLs", + "licenses": [ + { + "license": { + "id": "WTFPL" + } + } + ], + "cpe": "cpe:2.3:a:url-value-parser:url-value-parser:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/url-value-parser@2.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/disjunction/url-value-parser.git", + "type": "distribution" + }, + { + "url": "https://github.com/disjunction/url-value-parser#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=adcfe60f42b3bf40", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "util-deprecate", + "version": "1.0.2", + "description": "The Node.js `util.deprecate()` function with browser support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=ecf076cf26fe73d0", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "util-deprecate", + "version": "1.0.2", + "description": "The Node.js `util.deprecate()` function with browser support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/util-extend@1.0.3?package-id=b90581678f776d40", + "name": "util-extend", + "version": "1.0.3", + "description": "Node's internal object extension function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-extend:util-extend:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-extend@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/util-extend.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/util-extend#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/util-promisify@2.1.0?package-id=a64f5f12cac515a2", + "name": "util-promisify", + "version": "2.1.0", + "description": "Node 8's util.promisify, as a node module", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-promisify:util-promisify:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-promisify@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/juliangruber/util-promisify.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/util-promisify#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/utils-merge@1.0.1?package-id=2c445cae22e4baa6", + "author": "Jared Hanson (http://www.jaredhanson.net/)", + "name": "utils-merge", + "version": "1.0.1", + "description": "merge() utility function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jaredhanson:utils-merge:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/utils-merge@1.0.1", + "externalReferences": [ + { + "url": "git://github.com/jaredhanson/utils-merge.git", + "type": "distribution" + }, + { + "url": "https://github.com/jaredhanson/utils-merge#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uuid@3.4.0?package-id=ed49cf5cc9fe5cd4", + "name": "uuid", + "version": "3.4.0", + "description": "RFC4122 (v1, v4, and v5) UUIDs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:uuidjs:uuid:3.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/uuid@3.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/uuidjs/uuid.git", + "type": "distribution" + }, + { + "url": "https://github.com/uuidjs/uuid#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uuid@3.4.0?package-id=c5b5b6ef09fd8294", + "name": "uuid", + "version": "3.4.0", + "description": "RFC4122 (v1, v4, and v5) UUIDs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:uuidjs:uuid:3.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/uuid@3.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/uuidjs/uuid.git", + "type": "distribution" + }, + { + "url": "https://github.com/uuidjs/uuid#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uuid@8.3.2?package-id=95a83579b4e2b728", + "name": "uuid", + "version": "8.3.2", + "description": "RFC4122 (v1, v4, and v5) UUIDs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:uuidjs:uuid:8.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/uuid@8.3.2", + "externalReferences": [ + { + "url": "git+https://github.com/uuidjs/uuid.git", + "type": "distribution" + }, + { + "url": "https://github.com/uuidjs/uuid#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4?package-id=33663eb8a236f357", + "author": "Kyle E. Mitchell (https://kemitchell.com)", + "name": "validate-npm-package-license", + "version": "3.0.4", + "description": "Give me a string and I'll tell you if it's a valid npm package license string", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:validate-npm-package-license:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/validate-npm-package-license@3.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/kemitchell/validate-npm-package-license.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/kemitchell/validate-npm-package-license.js#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/validate-npm-package-name@3.0.0?package-id=57f9fd66d4ad5701", + "author": "zeke", + "name": "validate-npm-package-name", + "version": "3.0.0", + "description": "Give me a string and I'll tell you if it's a valid npm package name", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:validate-npm-package-name:validate-npm-package-name:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/validate-npm-package-name@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/validate-npm-package-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/validate-npm-package-name", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/validator@13.0.0?package-id=c822b35e061ecd32", + "author": "Chris O'Hara ", + "name": "validator", + "version": "13.0.0", + "description": "String validation and sanitization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:validator:validator:13.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/validator@13.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/chriso/validator.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/chriso/validator.js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/vary@1.1.2?package-id=b22a107883a17598", + "author": "Douglas Christopher Wilson ", + "name": "vary", + "version": "1.1.2", + "description": "Manipulate the HTTP Vary header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jshttp:vary:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/vary@1.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/jshttp/vary.git", + "type": "distribution" + }, + { + "url": "https://github.com/jshttp/vary#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/verror@1.10.0?package-id=de946bd784d35908", + "name": "verror", + "version": "1.10.0", + "description": "richer JavaScript errors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:davepacheco:verror:1.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/verror@1.10.0", + "externalReferences": [ + { + "url": "git://github.com/davepacheco/node-verror.git", + "type": "distribution" + }, + { + "url": "https://github.com/davepacheco/node-verror#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/verror@1.10.0?package-id=be840953a9e5ca6a", + "name": "verror", + "version": "1.10.0", + "description": "richer JavaScript errors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:davepacheco:verror:1.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/verror@1.10.0", + "externalReferences": [ + { + "url": "git://github.com/davepacheco/node-verror.git", + "type": "distribution" + }, + { + "url": "https://github.com/davepacheco/node-verror#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wcwidth@1.0.1?package-id=ee54c63162090e16", + "author": "Tim Oxley", + "name": "wcwidth", + "version": "1.0.1", + "description": "Port of C's wcwidth() and wcswidth()", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:timoxley:wcwidth:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/wcwidth@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/timoxley/wcwidth.git", + "type": "distribution" + }, + { + "url": "https://github.com/timoxley/wcwidth#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/which@1.3.1?package-id=ace883b09cbe1ce", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "which", + "version": "1.3.1", + "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:which:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/which@1.3.1", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-which.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/node-which#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/which-module@2.0.0?package-id=5db3efe3b2bc298b", + "author": "nexdrew", + "name": "which-module", + "version": "2.0.0", + "description": "Find the module object for something that was require()d", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:which-module:which-module:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/which-module@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/nexdrew/which-module.git", + "type": "distribution" + }, + { + "url": "https://github.com/nexdrew/which-module#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wide-align@1.1.2?package-id=7a2f1fc2f2c8bfd3", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "wide-align", + "version": "1.1.2", + "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wide-align:wide-align:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/wide-align@1.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/wide-align.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/wide-align#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/widest-line@2.0.1?package-id=8d53bbe290b5bf2", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "widest-line", + "version": "2.0.1", + "description": "Get the visual width of the widest line in a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:widest-line:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/widest-line@2.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/widest-line.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/widest-line#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/worker-farm@1.7.0?package-id=485ea0f11314a814", + "name": "worker-farm", + "version": "1.7.0", + "description": "Distribute processing tasks to child processes with an über-simple API and baked-in durability & custom concurrency options.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:worker-farm:worker-farm:1.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/worker-farm@1.7.0", + "externalReferences": [ + { + "url": "git+https://github.com/rvagg/node-worker-farm.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/node-worker-farm", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrap-ansi@5.1.0?package-id=d8793c53891a3183", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "wrap-ansi", + "version": "5.1.0", + "description": "Wordwrap a string with ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:5.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrap-ansi@5.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/chalk/wrap-ansi.git", + "type": "distribution" + }, + { + "url": "https://github.com/chalk/wrap-ansi#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=3bac7a86a24db14e", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "wrappy", + "version": "1.0.2", + "description": "Callback wrapping utility", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/wrappy.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=da7850cd4ce320be", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "wrappy", + "version": "1.0.2", + "description": "Callback wrapping utility", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/wrappy.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/write-file-atomic@2.4.3?package-id=7d4897c5064f974b", + "author": "Rebecca Turner (http://re-becca.org)", + "name": "write-file-atomic", + "version": "2.4.3", + "description": "Write files in an atomic fashion w/configurable ownership", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:write-file-atomic:write-file-atomic:2.4.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/write-file-atomic@2.4.3", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/iarna/write-file-atomic.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/write-file-atomic", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/xdg-basedir@3.0.0?package-id=6cd97401957b6225", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "xdg-basedir", + "version": "3.0.0", + "description": "Get XDG Base Directory paths", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:xdg-basedir:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/xdg-basedir@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/xdg-basedir.git", + "type": "distribution" + }, + { + "url": "https://github.com/sindresorhus/xdg-basedir#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/xtend@4.0.1?package-id=7f934d0a04b60a40", + "author": "Raynos ", + "name": "xtend", + "version": "4.0.1", + "description": "extend like a boss", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:Raynos:xtend:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/xtend@4.0.1", + "externalReferences": [ + { + "url": "git://github.com/Raynos/xtend.git", + "type": "distribution" + }, + { + "url": "https://github.com/Raynos/xtend", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/xtend@4.0.2?package-id=806268954298f9d0", + "author": "Raynos ", + "name": "xtend", + "version": "4.0.2", + "description": "extend like a boss", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:Raynos:xtend:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/xtend@4.0.2", + "externalReferences": [ + { + "url": "git://github.com/Raynos/xtend.git", + "type": "distribution" + }, + { + "url": "https://github.com/Raynos/xtend", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/y18n@4.0.1?package-id=59c84f1155aa57be", + "author": "Ben Coe ", + "name": "y18n", + "version": "4.0.1", + "description": "the bare-bones internationalization library used by yargs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yargs:y18n:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/y18n@4.0.1", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/yargs/y18n.git", + "type": "distribution" + }, + { + "url": "https://github.com/yargs/y18n", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yallist@2.1.2?package-id=2dc35655140480b4", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "yallist", + "version": "2.1.2", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/yallist#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yallist@3.0.3?package-id=dba260e644a452f8", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "yallist", + "version": "3.0.3", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@3.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/yallist#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yallist@3.1.1?package-id=786b4b01dc63a464", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "yallist", + "version": "3.1.1", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@3.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/yallist#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yargs@14.2.3?package-id=2b0da698f823246", + "name": "yargs", + "version": "14.2.3", + "description": "yargs the modern, pirate-themed, successor to optimist.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:yargs:yargs:14.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/yargs@14.2.3", + "externalReferences": [ + { + "url": "git+https://github.com/yargs/yargs.git", + "type": "distribution" + }, + { + "url": "https://yargs.js.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yargs-parser@15.0.1?package-id=21203be018f57e45", + "author": "Ben Coe ", + "name": "yargs-parser", + "version": "15.0.1", + "description": "the mighty option parser used by yargs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yargs-parser:yargs-parser:15.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/yargs-parser@15.0.1", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/yargs/yargs-parser.git", + "type": "distribution" + }, + { + "url": "https://github.com/yargs/yargs-parser#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yarn@1.22.19?package-id=f2b974a78000b26b", + "name": "yarn", + "version": "1.22.19", + "description": "📦🐈 Fast, reliable, and secure dependency management.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:yarn:yarn:1.22.19:*:*:*:*:*:*:*", + "purl": "pkg:npm/yarn@1.22.19", + "externalReferences": [ + { + "url": "yarnpkg/yarn", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.13-r0?arch=x86_64&distro=alpine-3.17.3&package-id=94014313cfcd2b71", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.13-r0", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.13-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.13-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.17.3", + "description": "Alpine Linux v3.17", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.17.3" + }, + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40calebboyd/semaphore@1.3.1?package-id=69a5a0e81d0ff085", + "author": "Caleb Boyd", + "name": "@calebboyd/semaphore", + "version": "1.3.1", + "description": "Simple promise based counting semaphore", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@calebboyd\\/semaphore:\\@calebboyd\\/semaphore:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40calebboyd/semaphore@1.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40colors/colors@1.5.0?package-id=1e63eea14f4d61ef", + "author": "DABH", + "name": "@colors/colors", + "version": "1.5.0", + "description": "get colors in your node.js console", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@colors\\/colors:\\@colors\\/colors:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40colors/colors@1.5.0", + "externalReferences": [ + { + "url": "http://github.com/DABH/colors.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/DABH/colors.js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40gar/promisify@1.1.3?package-id=6fab079a7c06c1de", + "author": "Gar ", + "name": "@gar/promisify", + "version": "1.1.3", + "description": "Promisify an entire class or object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@gar\\/promisify:\\@gar\\/promisify:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40gar/promisify@1.1.3", + "externalReferences": [ + { + "url": "https://github.com/wraithgar/gar-promisify.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40isaacs/string-locale-compare@1.1.0?package-id=fbe0dcb344723a67", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "@isaacs/string-locale-compare", + "version": "1.1.0", + "description": "Compare strings with Intl.Collator if available, falling back to String.localeCompare otherwise", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@isaacs\\/string-locale-compare:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40isaacs/string-locale-compare@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/string-locale-compare", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nodelib/fs.scandir@2.1.5?package-id=48ae8d7811f44220", + "name": "@nodelib/fs.scandir", + "version": "2.1.5", + "description": "List files and directories inside the specified directory", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nodelib\\/fs.scandir:\\@nodelib\\/fs.scandir:2.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nodelib/fs.scandir@2.1.5", + "externalReferences": [ + { + "url": "https://github.com/nodelib/nodelib/tree/master/packages/fs/fs.scandir", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nodelib/fs.stat@2.0.5?package-id=4dbbdaccc8c39cfa", + "name": "@nodelib/fs.stat", + "version": "2.0.5", + "description": "Get the status of a file with some features", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nodelib\\/fs.stat:\\@nodelib\\/fs.stat:2.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nodelib/fs.stat@2.0.5", + "externalReferences": [ + { + "url": "https://github.com/nodelib/nodelib/tree/master/packages/fs/fs.stat", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40nodelib/fs.walk@1.2.8?package-id=dd0dc6755ff07f7", + "name": "@nodelib/fs.walk", + "version": "1.2.8", + "description": "A library for efficiently walking a directory recursively", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@nodelib\\/fs.walk:\\@nodelib\\/fs.walk:1.2.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40nodelib/fs.walk@1.2.8", + "externalReferences": [ + { + "url": "https://github.com/nodelib/nodelib/tree/master/packages/fs/fs.walk", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/arborist@5.6.3?package-id=60e008e2ceb94218", + "author": "GitHub Inc.", + "name": "@npmcli/arborist", + "version": "5.6.3", + "description": "Manage node_modules trees", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/arborist:\\@npmcli\\/arborist:5.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/arborist@5.6.3", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/ci-detect@2.0.0?package-id=8a40a38b900bcf1d", + "author": "GitHub Inc.", + "name": "@npmcli/ci-detect", + "version": "2.0.0", + "description": "Detect what kind of CI environment the program is in", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/ci-detect:\\@npmcli\\/ci-detect:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/ci-detect@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/ci-detect.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/config@4.2.2?package-id=a02559bafd837882", + "author": "GitHub Inc.", + "name": "@npmcli/config", + "version": "4.2.2", + "description": "Configuration management for the npm cli", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/config:\\@npmcli\\/config:4.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/config@4.2.2", + "externalReferences": [ + { + "url": "https://github.com/npm/config.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/disparity-colors@2.0.0?package-id=3e63715f5300a753", + "author": "GitHub Inc.", + "name": "@npmcli/disparity-colors", + "version": "2.0.0", + "description": "Colorizes unified diff output", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/disparity-colors:\\@npmcli\\/disparity-colors:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/disparity-colors@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/disparity-colors.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/fs@2.1.2?package-id=cd19a20b4774187f", + "author": "GitHub Inc.", + "name": "@npmcli/fs", + "version": "2.1.2", + "description": "filesystem utilities for the npm cli", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/fs:\\@npmcli\\/fs:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/fs@2.1.2", + "externalReferences": [ + { + "url": "https://github.com/npm/fs.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/git@3.0.2?package-id=34b16cf601f612a9", + "author": "GitHub Inc.", + "name": "@npmcli/git", + "version": "3.0.2", + "description": "a util for spawning git from npm CLI contexts", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/git:\\@npmcli\\/git:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/git@3.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/git.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/installed-package-contents@1.0.7?package-id=8562f58f85ba40df", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "@npmcli/installed-package-contents", + "version": "1.0.7", + "description": "Get the list of files installed in a package in node_modules, including bundled dependencies", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/installed-package-contents:\\@npmcli\\/installed-package-contents:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/installed-package-contents@1.0.7", + "externalReferences": [ + { + "url": "git+https://github.com/npm/installed-package-contents", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/map-workspaces@2.0.4?package-id=471052449bb417cb", + "author": "GitHub Inc.", + "name": "@npmcli/map-workspaces", + "version": "2.0.4", + "description": "Retrieves a name:pathname Map for a given workspaces config", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/map-workspaces:\\@npmcli\\/map-workspaces:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/map-workspaces@2.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/map-workspaces.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/metavuln-calculator@3.1.1?package-id=5a94ed44a78625cd", + "author": "GitHub Inc.", + "name": "@npmcli/metavuln-calculator", + "version": "3.1.1", + "description": "Calculate meta-vulnerabilities from package security advisories", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/metavuln-calculator:\\@npmcli\\/metavuln-calculator:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/metavuln-calculator@3.1.1", + "externalReferences": [ + { + "url": "https://github.com/npm/metavuln-calculator.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/move-file@2.0.1?package-id=76e6ffad7033dea3", + "author": "GitHub Inc.", + "name": "@npmcli/move-file", + "version": "2.0.1", + "description": "move a file (fork of move-file)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/move-file:\\@npmcli\\/move-file:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/move-file@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/move-file.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/name-from-folder@1.0.1?package-id=bda8c8030d6b515f", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "@npmcli/name-from-folder", + "version": "1.0.1", + "description": "Get the package name from a folder path", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/name-from-folder:\\@npmcli\\/name-from-folder:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/name-from-folder@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/name-from-folder", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/node-gyp@2.0.0?package-id=c9fb094d61d2ac04", + "author": "GitHub Inc.", + "name": "@npmcli/node-gyp", + "version": "2.0.0", + "description": "Tools for dealing with node-gyp packages", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/node-gyp:\\@npmcli\\/node-gyp:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/node-gyp@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/node-gyp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/package-json@2.0.0?package-id=63189c571859bb1a", + "author": "GitHub Inc.", + "name": "@npmcli/package-json", + "version": "2.0.0", + "description": "Programmatic API to update package.json", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/package-json:\\@npmcli\\/package-json:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/package-json@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/package-json.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/promise-spawn@3.0.0?package-id=426c6e033be010cb", + "author": "GitHub Inc.", + "name": "@npmcli/promise-spawn", + "version": "3.0.0", + "description": "spawn processes the way the npm cli likes to do", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/promise-spawn:\\@npmcli\\/promise-spawn:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/promise-spawn@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/promise-spawn.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/query@1.2.0?package-id=e71e78476048755c", + "author": "GitHub Inc.", + "name": "@npmcli/query", + "version": "1.2.0", + "description": "npm query parser and tools", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/query:\\@npmcli\\/query:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/query@1.2.0", + "externalReferences": [ + { + "url": "https://github.com/npm/query.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40npmcli/run-script@4.2.1?package-id=a13d191f5a0789d1", + "author": "GitHub Inc.", + "name": "@npmcli/run-script", + "version": "4.2.1", + "description": "Run a lifecycle script for a package (descendant of npm-lifecycle)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/run-script:\\@npmcli\\/run-script:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/run-script@4.2.1", + "externalReferences": [ + { + "url": "https://github.com/npm/run-script.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40sindresorhus/is@0.7.0?package-id=e3df623b6a06ebf4", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "@sindresorhus/is", + "version": "0.7.0", + "description": "Type check values: `is.string('🦄') //=> true`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@sindresorhus\\/is:\\@sindresorhus\\/is:0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40sindresorhus/is@0.7.0", + "externalReferences": [ + { + "url": "sindresorhus/is", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40sindresorhus/is@4.6.0?package-id=cd195c6bb003aa1d", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "@sindresorhus/is", + "version": "4.6.0", + "description": "Type check values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@sindresorhus\\/is:\\@sindresorhus\\/is:4.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40sindresorhus/is@4.6.0", + "externalReferences": [ + { + "url": "sindresorhus/is", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40szmarczak/http-timer@4.0.6?package-id=2b09e5ba02dc4567", + "author": "Szymon Marczak", + "name": "@szmarczak/http-timer", + "version": "4.0.6", + "description": "Timings for HTTP requests", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@szmarczak\\/http-timer:\\@szmarczak\\/http-timer:4.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40szmarczak/http-timer@4.0.6", + "externalReferences": [ + { + "url": "git+https://github.com/szmarczak/http-timer.git", + "type": "distribution" + }, + { + "url": "https://github.com/szmarczak/http-timer#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40tootallnate/once@2.0.0?package-id=5edbc75b01ae9167", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "@tootallnate/once", + "version": "2.0.0", + "description": "Creates a Promise that waits for a single event", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@tootallnate\\/once:\\@tootallnate\\/once:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40tootallnate/once@2.0.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/once.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/cacheable-request@6.0.3?package-id=36f0fb5c2346e53b", + "name": "@types/cacheable-request", + "version": "6.0.3", + "description": "TypeScript definitions for cacheable-request", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/cacheable-request:\\@types\\/cacheable-request:6.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/cacheable-request@6.0.3", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/cacheable-request", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/http-cache-semantics@4.0.1?package-id=17b6c635de91cb6c", + "name": "@types/http-cache-semantics", + "version": "4.0.1", + "description": "TypeScript definitions for http-cache-semantics", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/http-cache-semantics:\\@types\\/http-cache-semantics:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/http-cache-semantics@4.0.1", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/http-cache-semantics", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/keyv@3.1.4?package-id=ccb394e9565a171e", + "name": "@types/keyv", + "version": "3.1.4", + "description": "TypeScript definitions for keyv", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/keyv:3.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/keyv@3.1.4", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/keyv", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/node@18.15.13?package-id=67fbfc5c206dcd12", + "name": "@types/node", + "version": "18.15.13", + "description": "TypeScript definitions for Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/node:18.15.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/node@18.15.13", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40types/responselike@1.0.0?package-id=a839275642b0ad1f", + "name": "@types/responselike", + "version": "1.0.0", + "description": "TypeScript definitions for responselike", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/responselike:\\@types\\/responselike:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/responselike@1.0.0", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/%40yarnpkg/lockfile@1.1.0?package-id=9c8464766b4d299a", + "name": "@yarnpkg/lockfile", + "version": "1.1.0", + "description": "The parser/stringifier for Yarn lockfiles.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:\\@yarnpkg\\/lockfile:\\@yarnpkg\\/lockfile:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40yarnpkg/lockfile@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/yarnpkg/yarn/blob/master/packages/lockfile", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/abbrev@1.1.1?package-id=98be1cad3f4d1d11", + "author": "Isaac Z. Schlueter ", + "name": "abbrev", + "version": "1.1.1", + "description": "Like ruby's abbrev module, but in js", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:abbrev:abbrev:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/abbrev@1.1.1", + "externalReferences": [ + { + "url": "http://github.com/isaacs/abbrev-js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/accepts@1.3.8?package-id=b001a70346b0612b", + "name": "accepts", + "version": "1.3.8", + "description": "Higher-level content negotiation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:accepts:accepts:1.3.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/accepts@1.3.8", + "externalReferences": [ + { + "url": "jshttp/accepts", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/adm-zip@0.5.10?package-id=55041b339e152158", + "author": "Nasca Iacob (https://github.com/cthackers)", + "name": "adm-zip", + "version": "0.5.10", + "description": "Javascript implementation of zip for nodejs with support for electron original-fs. Allows user to create or extract zip files both in memory or to/from disk", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cthackers:adm-zip:0.5.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/adm-zip@0.5.10", + "externalReferences": [ + { + "url": "https://github.com/cthackers/adm-zip.git", + "type": "distribution" + }, + { + "url": "https://github.com/cthackers/adm-zip", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/agent-base@6.0.2?package-id=4b0b5c9ee7d8fc08", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "agent-base", + "version": "6.0.2", + "description": "Turn a function into an `http.Agent` instance", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:TooTallNate:agent-base:6.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/agent-base@6.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/agentkeepalive@4.2.1?package-id=37fa9bcd67324d6e", + "author": "fengmk2 (https://fengmk2.com)", + "name": "agentkeepalive", + "version": "4.2.1", + "description": "Missing keepalive http.Agent", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:agentkeepalive:agentkeepalive:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/agentkeepalive@4.2.1", + "externalReferences": [ + { + "url": "git://github.com/node-modules/agentkeepalive.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aggregate-error@3.1.0?package-id=b1b74a520919b83f", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "aggregate-error", + "version": "3.1.0", + "description": "Create an error from multiple errors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:aggregate-error:aggregate-error:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aggregate-error@3.1.0", + "externalReferences": [ + { + "url": "sindresorhus/aggregate-error", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ajv@6.12.6?package-id=499abcf86654fa15", + "author": "Evgeny Poberezkin", + "name": "ajv", + "version": "6.12.6", + "description": "Another JSON Schema Validator", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ajv-validator:ajv:6.12.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/ajv@6.12.6", + "externalReferences": [ + { + "url": "https://github.com/ajv-validator/ajv.git", + "type": "distribution" + }, + { + "url": "https://github.com/ajv-validator/ajv", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.2.0-r23?arch=x86_64&distro=alpine-3.16.5&package-id=61eac5ce8105d394", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.2.0-r23", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.2.0-r23:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.2.0-r23?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout-data@3.2.0-r23?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.16.5&package-id=e8c6fcc3a282ed4f", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout-data", + "version": "3.2.0-r23", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.2.0-r23:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout-data@3.2.0-r23?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.16.5&package-id=82d183eb300978cc", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.4-r1", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@4.1.1?package-id=3e7a851a9d992fda", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "4.1.1", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@4.1.1", + "externalReferences": [ + { + "url": "chalk/ansi-regex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-regex@5.0.1?package-id=fe78ee8372cda3ef", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "5.0.1", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@5.0.1", + "externalReferences": [ + { + "url": "chalk/ansi-regex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-styles@3.2.1?package-id=ae661c6c4239b569", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-styles", + "version": "3.2.1", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:3.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@3.2.1", + "externalReferences": [ + { + "url": "chalk/ansi-styles", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-styles@4.3.0?package-id=e3f310fd74532509", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-styles", + "version": "4.3.0", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@4.3.0", + "externalReferences": [ + { + "url": "chalk/ansi-styles", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ansi-styles@4.3.0?package-id=cc23254c622251e8", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-styles", + "version": "4.3.0", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@4.3.0", + "externalReferences": [ + { + "url": "chalk/ansi-styles", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.9-r3?arch=x86_64&distro=alpine-3.16.5&package-id=42d502b764a37310", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.12.9-r3", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.12.9-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.12.9-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/app-builder@7.0.4?package-id=f548684de5bc50e3", + "author": "Caleb Boyd (https://github.com/calebboyd)", + "name": "app-builder", + "version": "7.0.4", + "description": "Promise based composable functions for middleware", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:app-builder:app-builder:7.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/app-builder@7.0.4", + "externalReferences": [ + { + "url": "https://github.com/calebboyd/app-builder.git", + "type": "distribution" + }, + { + "url": "https://github.com/ingress/app-builder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aproba@2.0.0?package-id=d11111a04d810227", + "author": "Rebecca Turner ", + "name": "aproba", + "version": "2.0.0", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:aproba:aproba:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aproba@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/iarna/aproba", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/archive-type@4.0.0?package-id=7998a7beb8338766", + "author": "Kevin Mårtensson (https://github.com/kevva)", + "name": "archive-type", + "version": "4.0.0", + "description": "Detect the archive type of a Buffer/Uint8Array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:archive-type:archive-type:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/archive-type@4.0.0", + "externalReferences": [ + { + "url": "kevva/archive-type", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/archy@1.0.0?package-id=a1e7fd77fec54095", + "author": "James Halliday (http://substack.net)", + "name": "archy", + "version": "1.0.0", + "description": "render nested hierarchies `npm ls` style with unicode pipes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:substack:archy:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/archy@1.0.0", + "externalReferences": [ + { + "url": "http://github.com/substack/node-archy.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/are-we-there-yet@3.0.1?package-id=d7ea73c2e385c95d", + "author": "GitHub Inc.", + "name": "are-we-there-yet", + "version": "3.0.1", + "description": "Keep track of the overall completion of many disparate processes", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:are-we-there-yet:are-we-there-yet:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/are-we-there-yet@3.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/are-we-there-yet.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/are-we-there-yet", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/array-flatten@1.1.1?package-id=169fa984c33ff9f6", + "author": "Blake Embrey (http://blakeembrey.me)", + "name": "array-flatten", + "version": "1.1.1", + "description": "Flatten an array of nested arrays into a single flat array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:array-flatten:array-flatten:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/array-flatten@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/blakeembrey/array-flatten.git", + "type": "distribution" + }, + { + "url": "https://github.com/blakeembrey/array-flatten", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/array-union@2.1.0?package-id=deb22c36ab77edb6", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "array-union", + "version": "2.1.0", + "description": "Create an array of unique values, in order, from the input arrays", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:array-union:array-union:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/array-union@2.1.0", + "externalReferences": [ + { + "url": "sindresorhus/array-union", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asap@2.0.6?package-id=4069b89e24646503", + "name": "asap", + "version": "2.0.6", + "description": "High-priority task queue for Node.js and browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:kriskowal:asap:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/asap@2.0.6", + "externalReferences": [ + { + "url": "https://github.com/kriskowal/asap.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asn1@0.2.6?package-id=fa945e5e8e9c4123", + "author": "Joyent (joyent.com)", + "name": "asn1", + "version": "0.2.6", + "description": "Contains parsers and serializers for ASN.1 (currently BER only)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:joyent:asn1:0.2.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/asn1@0.2.6", + "externalReferences": [ + { + "url": "https://github.com/joyent/node-asn1.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/assert-plus@1.0.0?package-id=fefb0d3370d896dc", + "author": "Mark Cavage ", + "name": "assert-plus", + "version": "1.0.0", + "description": "Extra assertions on top of node's assert module", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:assert-plus:assert-plus:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/assert-plus@1.0.0", + "externalReferences": [ + { + "url": "https://github.com/mcavage/node-assert-plus.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/async@3.2.4?package-id=231b7b86b151b693", + "author": "Caolan McMahon", + "name": "async", + "version": "3.2.4", + "description": "Higher-order functions and common patterns for asynchronous code", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:caolan:async:3.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/async@3.2.4", + "externalReferences": [ + { + "url": "https://github.com/caolan/async.git", + "type": "distribution" + }, + { + "url": "https://caolan.github.io/async/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/asynckit@0.4.0?package-id=ae8f87968d557dba", + "author": "Alex Indigo ", + "name": "asynckit", + "version": "0.4.0", + "description": "Minimal async jobs utility library, with streams support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alexindigo:asynckit:0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/asynckit@0.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/alexindigo/asynckit.git", + "type": "distribution" + }, + { + "url": "https://github.com/alexindigo/asynckit#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/at-least-node@1.0.0?package-id=2f27879d4047fc99", + "author": "Ryan Zimmerman ", + "name": "at-least-node", + "version": "1.0.0", + "description": "Lightweight Node.js version sniffing/comparison", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:at-least-node:at-least-node:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/at-least-node@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/RyanZim/at-least-node.git", + "type": "distribution" + }, + { + "url": "https://github.com/RyanZim/at-least-node#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aws-sign2@0.7.0?package-id=2ea4d2f6e82a7f7d", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "aws-sign2", + "version": "0.7.0", + "description": "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor in request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:aws-sign2:aws-sign2:0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aws-sign2@0.7.0", + "externalReferences": [ + { + "url": "https://github.com/mikeal/aws-sign", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/aws4@1.12.0?package-id=1ad50775f3f1049", + "author": "Michael Hart (https://github.com/mhart)", + "name": "aws4", + "version": "1.12.0", + "description": "Signs and prepares requests using AWS Signature Version 4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:aws4:aws4:1.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aws4@1.12.0", + "externalReferences": [ + { + "url": "github:mhart/aws4", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/balanced-match@1.0.2?package-id=c15b2106d0ae19d4", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "balanced-match", + "version": "1.0.2", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/balanced-match@1.0.2?package-id=8db1f18b661f67ae", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "balanced-match", + "version": "1.0.2", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/base64-js@1.5.1?package-id=a6fd33cb63a8feb4", + "author": "T. Jameson Little ", + "name": "base64-js", + "version": "1.5.1", + "description": "Base64 encoding/decoding in pure JS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:beatgammit:base64-js:1.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/base64-js@1.5.1", + "externalReferences": [ + { + "url": "git://github.com/beatgammit/base64-js.git", + "type": "distribution" + }, + { + "url": "https://github.com/beatgammit/base64-js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2?package-id=e522f8051f2c594b", + "name": "bcrypt-pbkdf", + "version": "1.0.2", + "description": "Port of the OpenBSD bcrypt_pbkdf function to pure JS", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:bcrypt-pbkdf:bcrypt-pbkdf:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/bcrypt-pbkdf@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/joyent/node-bcrypt-pbkdf.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bin-links@3.0.3?package-id=605ade84572e7fb", + "author": "GitHub Inc.", + "name": "bin-links", + "version": "3.0.3", + "description": "JavaScript package binary linker", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:bin-links:bin-links:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/bin-links@3.0.3", + "externalReferences": [ + { + "url": "https://github.com/npm/bin-links.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/binary-extensions@2.2.0?package-id=2ddda84d3ad7f3e1", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "binary-extensions", + "version": "2.2.0", + "description": "List of binary file extensions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:binary-extensions:binary-extensions:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/binary-extensions@2.2.0", + "externalReferences": [ + { + "url": "sindresorhus/binary-extensions", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/bind-libs@9.16.39-r0?arch=x86_64&upstream=bind&distro=alpine-3.16.5&package-id=688c130d5197b7c", + "name": "bind-libs", + "version": "9.16.39-r0", + "description": "The ISC DNS server (libraries)", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:bind-libs:bind-libs:9.16.39-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/bind-libs@9.16.39-r0?arch=x86_64&upstream=bind&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.isc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/bind-tools@9.16.39-r0?arch=x86_64&upstream=bind&distro=alpine-3.16.5&package-id=a44de9859c260599", + "name": "bind-tools", + "version": "9.16.39-r0", + "description": "The ISC DNS tools", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:bind-tools:bind-tools:9.16.39-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/bind-tools@9.16.39-r0?arch=x86_64&upstream=bind&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.isc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bl@1.2.3?package-id=857d6ce6ddf3b8d9", + "name": "bl", + "version": "1.2.3", + "description": "Buffer List: collect buffers and access with a standard readable Buffer interface, streamable too!", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:rvagg:bl:1.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/bl@1.2.3", + "externalReferences": [ + { + "url": "https://github.com/rvagg/bl.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/bl", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/block-stream2@2.1.0?package-id=d2c19c703777584a", + "author": "James Halliday (http://substack.net)", + "name": "block-stream2", + "version": "2.1.0", + "description": "transform input into equally-sized blocks of output", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:block-stream2:block-stream2:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/block-stream2@2.1.0", + "externalReferences": [ + { + "url": "git://github.com/substack/block-stream2.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/block-stream2", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/body-parser@1.18.3?package-id=b284a1ea89619936", + "name": "body-parser", + "version": "1.18.3", + "description": "Node.js body parsing middleware", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:body-parser:body-parser:1.18.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/body-parser@1.18.3", + "externalReferences": [ + { + "url": "expressjs/body-parser", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=a36ca63616a6d457", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "1.1.11", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=8aefa0d5bf7ea5ce", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "1.1.11", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=1bc35b4fad6ec801", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "1.1.11", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@2.0.1?package-id=70d44e2ab0a06da3", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "2.0.1", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@2.0.1", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/braces@3.0.2?package-id=d349ee6699b9dd12", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "braces", + "version": "3.0.2", + "description": "Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:micromatch:braces:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/braces@3.0.2", + "externalReferences": [ + { + "url": "micromatch/braces", + "type": "distribution" + }, + { + "url": "https://github.com/micromatch/braces", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/brotli-libs@1.0.9-r6?arch=x86_64&upstream=brotli&distro=alpine-3.16.5&package-id=ce770907e6d64ccd", + "publisher": "prspkt ", + "name": "brotli-libs", + "version": "1.0.9-r6", + "description": "Generic lossless compressor (libraries)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brotli-libs:brotli-libs:1.0.9-r6:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/brotli-libs@1.0.9-r6?arch=x86_64&upstream=brotli&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://github.com/google/brotli", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer@5.7.1?package-id=4e619be32ebf5739", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "buffer", + "version": "5.7.1", + "description": "Node.js Buffer API, for the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer:buffer:5.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer@5.7.1", + "externalReferences": [ + { + "url": "git://github.com/feross/buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-alloc@1.2.0?package-id=f784a2837fbe8bed", + "name": "buffer-alloc", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-alloc:buffer-alloc:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-alloc@1.2.0", + "externalReferences": [ + { + "url": "LinusU/buffer-alloc", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-alloc-unsafe@1.1.0?package-id=f256488d7c6ca447", + "name": "buffer-alloc-unsafe", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-alloc-unsafe:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-alloc-unsafe@1.1.0", + "externalReferences": [ + { + "url": "LinusU/buffer-alloc-unsafe", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-crc32@0.2.13?package-id=4fd48942dbfa2289", + "author": "Brian J. Brennan ", + "name": "buffer-crc32", + "version": "0.2.13", + "description": "A pure javascript CRC32 algorithm that plays nice with binary data", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brianloveswords:buffer-crc32:0.2.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-crc32@0.2.13", + "externalReferences": [ + { + "url": "git://github.com/brianloveswords/buffer-crc32.git", + "type": "distribution" + }, + { + "url": "https://github.com/brianloveswords/buffer-crc32", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/buffer-fill@1.0.0?package-id=bbb2ac54f8bae4ff", + "name": "buffer-fill", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-fill:buffer-fill:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-fill@1.0.0", + "externalReferences": [ + { + "url": "LinusU/buffer-fill", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/builtins@5.0.1?package-id=af6ac207a0c6926d", + "name": "builtins", + "version": "5.0.1", + "description": "List of node.js builtin modules", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:builtins:builtins:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/builtins@5.0.1", + "externalReferences": [ + { + "url": "juliangruber/builtins", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "e14718c64f5147f4", + "name": "busybox", + "version": "1.35.0", + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=alpine-3.16.5&package-id=4b48ef6f6b983526", + "publisher": "Sören Tempel ", + "name": "busybox", + "version": "1.35.0-r17", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0-r17:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/bytes@3.0.0?package-id=576903a3803d92be", + "author": "TJ Holowaychuk (http://tjholowaychuk.com)", + "name": "bytes", + "version": "3.0.0", + "description": "Utility to parse a string bytes to bytes and vice-versa", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bytes:bytes:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/bytes@3.0.0", + "externalReferences": [ + { + "url": "visionmedia/bytes.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates@20220614-r0?arch=x86_64&distro=alpine-3.16.5&package-id=fbb1924ff870cc71", + "publisher": "Natanael Copa ", + "name": "ca-certificates", + "version": "20220614-r0", + "description": "Common CA certificates PEM files from Mozilla", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20220614-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates@20220614-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20220614-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.16.5&package-id=30622a1848b22bca", + "publisher": "Natanael Copa ", + "name": "ca-certificates-bundle", + "version": "20220614-r0", + "description": "Pre generated bundle of Mozilla certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20220614-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-bundle@20220614-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cacache@16.1.3?package-id=4e055fb1e595c11", + "author": "GitHub Inc.", + "name": "cacache", + "version": "16.1.3", + "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cacache:cacache:16.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/cacache@16.1.3", + "externalReferences": [ + { + "url": "https://github.com/npm/cacache.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cacheable-lookup@5.0.4?package-id=eba12e65c41afc1e", + "author": "Szymon Marczak", + "name": "cacheable-lookup", + "version": "5.0.4", + "description": "A cacheable dns.lookup(…) that respects the TTL", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cacheable-lookup:cacheable-lookup:5.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/cacheable-lookup@5.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/szmarczak/cacheable-lookup.git", + "type": "distribution" + }, + { + "url": "https://github.com/szmarczak/cacheable-lookup#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cacheable-request@2.1.4?package-id=4118e90491b13653", + "author": "Luke Childs (http://lukechilds.co.uk)", + "name": "cacheable-request", + "version": "2.1.4", + "description": "Wrap native HTTP requests with RFC compliant cache support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cacheable-request:cacheable-request:2.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/cacheable-request@2.1.4", + "externalReferences": [ + { + "url": "git+https://github.com/lukechilds/cacheable-request.git", + "type": "distribution" + }, + { + "url": "https://github.com/lukechilds/cacheable-request", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cacheable-request@7.0.2?package-id=1c2a8d288ff38c4a", + "author": "Luke Childs (http://lukechilds.co.uk)", + "name": "cacheable-request", + "version": "7.0.2", + "description": "Wrap native HTTP requests with RFC compliant cache support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cacheable-request:cacheable-request:7.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/cacheable-request@7.0.2", + "externalReferences": [ + { + "url": "lukechilds/cacheable-request", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/caseless@0.12.0?package-id=227a1a61cfc117ad", + "author": "Mikeal Rogers ", + "name": "caseless", + "version": "0.12.0", + "description": "Caseless object set/get/has, very useful when working with HTTP headers.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:caseless:caseless:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/caseless@0.12.0", + "externalReferences": [ + { + "url": "https://github.com/mikeal/caseless", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/caw@2.0.1?package-id=96983ea480bc177d", + "author": "Kevin Mårtensson (github.com/kevva)", + "name": "caw", + "version": "2.0.1", + "description": "Construct HTTP/HTTPS agents for tunneling proxies", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:caw:caw:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/caw@2.0.1", + "externalReferences": [ + { + "url": "kevva/caw", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chalk@2.4.2?package-id=48a4e5e37f4ef1f2", + "name": "chalk", + "version": "2.4.2", + "description": "Terminal string styling done right", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chalk:chalk:2.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/chalk@2.4.2", + "externalReferences": [ + { + "url": "chalk/chalk", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chalk@4.1.2?package-id=b12178723b56594f", + "name": "chalk", + "version": "4.1.2", + "description": "Terminal string styling done right", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chalk:chalk:4.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/chalk@4.1.2", + "externalReferences": [ + { + "url": "chalk/chalk", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chalk@4.1.2?package-id=e4005f9838c6d4b0", + "name": "chalk", + "version": "4.1.2", + "description": "Terminal string styling done right", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chalk:chalk:4.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/chalk@4.1.2", + "externalReferences": [ + { + "url": "chalk/chalk", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chownr@1.1.4?package-id=332c2f28052efe07", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "chownr", + "version": "1.1.4", + "description": "like `chown -R`", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:chownr:chownr:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/chownr@1.1.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/chownr.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/chownr@2.0.0?package-id=b5088c57ceda122f", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "chownr", + "version": "2.0.0", + "description": "like `chown -R`", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:chownr:chownr:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/chownr@2.0.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/chownr.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ci-info@2.0.0?package-id=f83ceea2c70df5ec", + "author": "Thomas Watson Steen (https://twitter.com/wa7son)", + "name": "ci-info", + "version": "2.0.0", + "description": "Get details about the current Continuous Integration environment", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ci-info:ci-info:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ci-info@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/watson/ci-info.git", + "type": "distribution" + }, + { + "url": "https://github.com/watson/ci-info", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cidr-regex@3.1.1?package-id=be2d165b38649e26", + "author": "silverwind ", + "name": "cidr-regex", + "version": "3.1.1", + "description": "Regular expression for matching IP addresses in CIDR notation", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:cidr-regex:cidr-regex:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/cidr-regex@3.1.1", + "externalReferences": [ + { + "url": "silverwind/cidr-regex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/clean-stack@2.2.0?package-id=9a5c51e7acb4b115", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "clean-stack", + "version": "2.2.0", + "description": "Clean up error stack traces", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clean-stack:clean-stack:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/clean-stack@2.2.0", + "externalReferences": [ + { + "url": "sindresorhus/clean-stack", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-columns@4.0.0?package-id=61a1dfb277c2e6f7", + "author": "Shannon Moeller (http://shannonmoeller.com)", + "name": "cli-columns", + "version": "4.0.0", + "description": "Columnated lists for the CLI.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shannonmoeller:cli-columns:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-columns@4.0.0", + "externalReferences": [ + { + "url": "shannonmoeller/cli-columns", + "type": "distribution" + }, + { + "url": "https://github.com/shannonmoeller/cli-columns#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-cursor@2.1.0?package-id=3379c5bd0e8b1d52", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "cli-cursor", + "version": "2.1.0", + "description": "Toggle the CLI cursor", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cli-cursor:cli-cursor:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-cursor@2.1.0", + "externalReferences": [ + { + "url": "sindresorhus/cli-cursor", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-spinners@2.8.0?package-id=56d76fe6a345c09b", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "cli-spinners", + "version": "2.8.0", + "description": "Spinners for use in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cli-spinners:cli-spinners:2.8.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-spinners@2.8.0", + "externalReferences": [ + { + "url": "sindresorhus/cli-spinners", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cli-table3@0.6.2?package-id=c77ee2194bd52f3d", + "author": "James Talmage", + "name": "cli-table3", + "version": "0.6.2", + "description": "Pretty unicode tables for the command line. Based on the original cli-table.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cli-table3:cli-table3:0.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-table3@0.6.2", + "externalReferences": [ + { + "url": "https://github.com/cli-table/cli-table3.git", + "type": "distribution" + }, + { + "url": "https://github.com/cli-table/cli-table3", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/clone@1.0.4?package-id=44b571b36478d30c", + "author": "Paul Vorbach (http://paul.vorba.ch/)", + "name": "clone", + "version": "1.0.4", + "description": "deep cloning of objects and arrays", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clone:clone:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/clone@1.0.4", + "externalReferences": [ + { + "url": "git://github.com/pvorb/node-clone.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/clone@1.0.4?package-id=5436be598b5ead36", + "author": "Paul Vorbach (http://paul.vorba.ch/)", + "name": "clone", + "version": "1.0.4", + "description": "deep cloning of objects and arrays", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clone:clone:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/clone@1.0.4", + "externalReferences": [ + { + "url": "git://github.com/pvorb/node-clone.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/clone-response@1.0.2?package-id=2173df3f36d11d5b", + "author": "Luke Childs (http://lukechilds.co.uk)", + "name": "clone-response", + "version": "1.0.2", + "description": "Clone a Node.js HTTP response stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clone-response:clone-response:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/clone-response@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/lukechilds/clone-response.git", + "type": "distribution" + }, + { + "url": "https://github.com/lukechilds/clone-response", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/clone-response@1.0.3?package-id=31183265266a46b8", + "author": "Luke Childs (http://lukechilds.co.uk)", + "name": "clone-response", + "version": "1.0.3", + "description": "Clone a Node.js HTTP response stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clone-response:clone-response:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/clone-response@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/sindresorhus/clone-response.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cmd-shim@5.0.0?package-id=6701e31fdf422502", + "author": "GitHub Inc.", + "name": "cmd-shim", + "version": "5.0.0", + "description": "Used in npm for command line application support", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cmd-shim:cmd-shim:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cmd-shim@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/cmd-shim.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-convert@1.9.3?package-id=b59d318e978e5d66", + "author": "Heather Arthur ", + "name": "color-convert", + "version": "1.9.3", + "description": "Plain color conversion functions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:1.9.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@1.9.3", + "externalReferences": [ + { + "url": "Qix-/color-convert", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-convert@2.0.1?package-id=2be936aafe32cf82", + "author": "Heather Arthur ", + "name": "color-convert", + "version": "2.0.1", + "description": "Plain color conversion functions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@2.0.1", + "externalReferences": [ + { + "url": "Qix-/color-convert", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-convert@2.0.1?package-id=15b92925457dcb7d", + "author": "Heather Arthur ", + "name": "color-convert", + "version": "2.0.1", + "description": "Plain color conversion functions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@2.0.1", + "externalReferences": [ + { + "url": "Qix-/color-convert", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-name@1.1.3?package-id=21b65fb759f90e9b", + "author": "DY ", + "name": "color-name", + "version": "1.1.3", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.3", + "externalReferences": [ + { + "url": "git@github.com:dfcreative/color-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/dfcreative/color-name", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-name@1.1.4?package-id=b14fd2e37cdab40f", + "author": "DY ", + "name": "color-name", + "version": "1.1.4", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.4", + "externalReferences": [ + { + "url": "git@github.com:colorjs/color-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/colorjs/color-name", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-name@1.1.4?package-id=8622f3023cfe465b", + "author": "DY ", + "name": "color-name", + "version": "1.1.4", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.4", + "externalReferences": [ + { + "url": "git@github.com:colorjs/color-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/colorjs/color-name", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/color-support@1.1.3?package-id=33c3f3c0dd43aff8", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "color-support", + "version": "1.1.3", + "description": "A module which will endeavor to guess your terminal's level of color support.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:color-support:color-support:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-support@1.1.3", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/color-support.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/columnify@1.6.0?package-id=fc90187aad4a6027", + "author": "Tim Oxley", + "name": "columnify", + "version": "1.6.0", + "description": "Render data in text columns. Supports in-column text-wrap.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:columnify:columnify:1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/columnify@1.6.0", + "externalReferences": [ + { + "url": "git://github.com/timoxley/columnify.git", + "type": "distribution" + }, + { + "url": "https://github.com/timoxley/columnify", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/combined-stream@1.0.8?package-id=868606bb12d293db", + "author": "Felix Geisendörfer (http://debuggable.com/)", + "name": "combined-stream", + "version": "1.0.8", + "description": "A stream that emits multiple other streams one after another.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:combined-stream:combined-stream:1.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/combined-stream@1.0.8", + "externalReferences": [ + { + "url": "git://github.com/felixge/node-combined-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/felixge/node-combined-stream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/commander@2.20.3?package-id=88aef880987e95cb", + "author": "TJ Holowaychuk ", + "name": "commander", + "version": "2.20.3", + "description": "the complete solution for node.js command-line programs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:commander:commander:2.20.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/commander@2.20.3", + "externalReferences": [ + { + "url": "https://github.com/tj/commander.js.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/common-ancestor-path@1.0.1?package-id=4296edf5ae5437c0", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "common-ancestor-path", + "version": "1.0.1", + "description": "Find the common ancestor of 2 or more paths on Windows or Unix", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:common-ancestor-path:common-ancestor-path:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/common-ancestor-path@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/common-ancestor-path", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=bdf14b65a5715b98", + "author": "James Halliday (http://substack.net)", + "name": "concat-map", + "version": "0.0.1", + "description": "concatenative mapdashery", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=c45208cf5ec4e0c1", + "author": "James Halliday (http://substack.net)", + "name": "concat-map", + "version": "0.0.1", + "description": "concatenative mapdashery", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/config-chain@1.1.13?package-id=29e25a25aac354e7", + "author": "Dominic Tarr (http://dominictarr.com)", + "name": "config-chain", + "version": "1.1.13", + "description": "HANDLE CONFIGURATION ONCE AND FOR ALL", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:config-chain:config-chain:1.1.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/config-chain@1.1.13", + "externalReferences": [ + { + "url": "https://github.com/dominictarr/config-chain.git", + "type": "distribution" + }, + { + "url": "http://github.com/dominictarr/config-chain", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/console-control-strings@1.1.0?package-id=f5b1c468fcf0a37a", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "console-control-strings", + "version": "1.1.0", + "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:console-control-strings:console-control-strings:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/console-control-strings@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/iarna/console-control-strings", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/content-disposition@0.5.2?package-id=78de68818c5e5be7", + "name": "content-disposition", + "version": "0.5.2", + "description": "Create and parse Content-Disposition header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:content-disposition:content-disposition:0.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/content-disposition@0.5.2", + "externalReferences": [ + { + "url": "jshttp/content-disposition", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/content-type@1.0.5?package-id=adbc2d3e176aeaa7", + "author": "Douglas Christopher Wilson ", + "name": "content-type", + "version": "1.0.5", + "description": "Create and parse HTTP Content-Type header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:content-type:content-type:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/content-type@1.0.5", + "externalReferences": [ + { + "url": "jshttp/content-type", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cookie@0.3.1?package-id=8d0bbae67fa22756", + "author": "Roman Shtylman ", + "name": "cookie", + "version": "0.3.1", + "description": "HTTP server cookie parsing and serialization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie:cookie:0.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie@0.3.1", + "externalReferences": [ + { + "url": "jshttp/cookie", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cookie@0.4.1?package-id=39f2215c0d7cde9f", + "author": "Roman Shtylman ", + "name": "cookie", + "version": "0.4.1", + "description": "HTTP server cookie parsing and serialization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie:cookie:0.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie@0.4.1", + "externalReferences": [ + { + "url": "jshttp/cookie", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cookie-parser@1.4.6?package-id=129192f72be6b9c1", + "author": "TJ Holowaychuk (http://tjholowaychuk.com)", + "name": "cookie-parser", + "version": "1.4.6", + "description": "Parse HTTP request cookies", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie-parser:cookie-parser:1.4.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie-parser@1.4.6", + "externalReferences": [ + { + "url": "expressjs/cookie-parser", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cookie-signature@1.0.6?package-id=679e26b17ad72290", + "author": "TJ Holowaychuk ", + "name": "cookie-signature", + "version": "1.0.6", + "description": "Sign and unsign cookies", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie-signature:cookie-signature:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie-signature@1.0.6", + "externalReferences": [ + { + "url": "https://github.com/visionmedia/node-cookie-signature.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/core-util-is@1.0.2?package-id=619d47a4e1417653", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "core-util-is", + "version": "1.0.2", + "description": "The `util.is*` functions introduced in Node v0.12.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:core-util-is:core-util-is:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/core-util-is@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/core-util-is", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/corepack@0.17.0?package-id=9d78c3bef9c05db3", + "name": "corepack", + "version": "0.17.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:corepack:corepack:0.17.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/corepack@0.17.0", + "externalReferences": [ + { + "url": "https://github.com/nodejs/corepack.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/corepack#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cross-spawn@6.0.5?package-id=218973aec9af7ce8", + "author": "André Cruz ", + "name": "cross-spawn", + "version": "6.0.5", + "description": "Cross platform child_process#spawn and child_process#spawnSync", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cross-spawn:cross-spawn:6.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/cross-spawn@6.0.5", + "externalReferences": [ + { + "url": "git@github.com:moxystudio/node-cross-spawn.git", + "type": "distribution" + }, + { + "url": "https://github.com/moxystudio/node-cross-spawn", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/cssesc@3.0.0?package-id=91a6a74efc4b88ba", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "cssesc", + "version": "3.0.0", + "description": "A JavaScript library for escaping CSS strings and identifiers while generating the shortest possible ASCII-only output.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mathiasbynens:cssesc:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cssesc@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/mathiasbynens/cssesc.git", + "type": "distribution" + }, + { + "url": "https://mths.be/cssesc", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/curl@8.0.1-r0?arch=x86_64&distro=alpine-3.16.5&package-id=5916eff0b54ab2c0", + "publisher": "Natanael Copa ", + "name": "curl", + "version": "8.0.1-r0", + "description": "URL retrival utility and library", + "licenses": [ + { + "license": { + "id": "curl" + } + } + ], + "cpe": "cpe:2.3:a:curl:curl:8.0.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/curl@8.0.1-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://curl.se/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dashdash@1.14.1?package-id=a7ca4af6d828a5a2", + "author": "Trent Mick (http://trentm.com)", + "name": "dashdash", + "version": "1.14.1", + "description": "A light, featureful and explicit option parsing library.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dashdash:dashdash:1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/dashdash@1.14.1", + "externalReferences": [ + { + "url": "git://github.com/trentm/node-dashdash.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@2.6.9?package-id=189dbf0c8c397194", + "author": "TJ Holowaychuk ", + "name": "debug", + "version": "2.6.9", + "description": "small debugging utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:visionmedia:debug:2.6.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@2.6.9", + "externalReferences": [ + { + "url": "git://github.com/visionmedia/debug.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debug@4.3.4?package-id=744fe4d31961f128", + "author": "Josh Junon ", + "name": "debug", + "version": "4.3.4", + "description": "Lightweight debugging utility for Node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debug-js:debug:4.3.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@4.3.4", + "externalReferences": [ + { + "url": "git://github.com/debug-js/debug.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/debuglog@1.0.1?package-id=de8cab91bb3727ee", + "author": "Sam Roberts ", + "name": "debuglog", + "version": "1.0.1", + "description": "backport of util.debuglog from node v0.11", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sam-github:debuglog:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/debuglog@1.0.1", + "externalReferences": [ + { + "url": "https://github.com/sam-github/node-debuglog.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/decode-uri-component@0.2.2?package-id=31befa3a8dff8fe1", + "author": "Sam Verschueren (github.com/SamVerschueren)", + "name": "decode-uri-component", + "version": "0.2.2", + "description": "A better decodeURIComponent", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decode-uri-component:decode-uri-component:0.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/decode-uri-component@0.2.2", + "externalReferences": [ + { + "url": "SamVerschueren/decode-uri-component", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/decompress@4.2.1?package-id=d0958110c3225b86", + "author": "Kevin Mårtensson (github.com/kevva)", + "name": "decompress", + "version": "4.2.1", + "description": "Extracting archives made easy", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress:decompress:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/decompress@4.2.1", + "externalReferences": [ + { + "url": "kevva/decompress", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/decompress-response@3.3.0?package-id=ff910650edaa3dd3", + "name": "decompress-response", + "version": "3.3.0", + "description": "Decompress a HTTP response if needed", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress-response:decompress-response:3.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/decompress-response@3.3.0", + "externalReferences": [ + { + "url": "sindresorhus/decompress-response", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/decompress-response@6.0.0?package-id=2de2ede0cf6bda05", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "decompress-response", + "version": "6.0.0", + "description": "Decompress a HTTP response if needed", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress-response:decompress-response:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/decompress-response@6.0.0", + "externalReferences": [ + { + "url": "sindresorhus/decompress-response", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/decompress-tar@4.1.1?package-id=2b8890e1066f856", + "author": "Kevin Mårtensson (https://github.com/kevva)", + "name": "decompress-tar", + "version": "4.1.1", + "description": "decompress tar plugin", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress-tar:decompress-tar:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/decompress-tar@4.1.1", + "externalReferences": [ + { + "url": "kevva/decompress-tar", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/decompress-tarbz2@4.1.1?package-id=b939f8d9c45915a4", + "author": "Kevin Mårtensson (github.com/kevva)", + "name": "decompress-tarbz2", + "version": "4.1.1", + "description": "decompress tar.bz2 plugin", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress-tarbz2:decompress-tarbz2:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/decompress-tarbz2@4.1.1", + "externalReferences": [ + { + "url": "kevva/decompress-tarbz2", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/decompress-targz@4.1.1?package-id=fd34f4cac43c4d7b", + "author": "Kevin Mårtensson (https://github.com/kevva)", + "name": "decompress-targz", + "version": "4.1.1", + "description": "decompress tar.gz plugin", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress-targz:decompress-targz:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/decompress-targz@4.1.1", + "externalReferences": [ + { + "url": "kevva/decompress-targz", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/decompress-unzip@4.0.1?package-id=7880ad00b59e9b5d", + "author": "Kevin Mårtensson (https://github.com/kevva)", + "name": "decompress-unzip", + "version": "4.0.1", + "description": "decompress zip plugin", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress-unzip:decompress-unzip:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/decompress-unzip@4.0.1", + "externalReferences": [ + { + "url": "kevva/decompress-unzip", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/defaults@1.0.3?package-id=539a687773af61fe", + "author": "Elijah Insua ", + "name": "defaults", + "version": "1.0.3", + "description": "merge single level defaults over a config object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:defaults:defaults:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/defaults@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/tmpvar/defaults.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/defaults@1.0.4?package-id=a752e235517d6a48", + "author": "Elijah Insua ", + "name": "defaults", + "version": "1.0.4", + "description": "merge single level defaults over a config object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:defaults:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/defaults@1.0.4", + "externalReferences": [ + { + "url": "git://github.com/sindresorhus/node-defaults.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/defer-to-connect@2.0.1?package-id=8891136e6f9a7c93", + "author": "Szymon Marczak", + "name": "defer-to-connect", + "version": "2.0.1", + "description": "The safe way to handle the `connect` socket event", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:defer-to-connect:defer-to-connect:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/defer-to-connect@2.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/szmarczak/defer-to-connect.git", + "type": "distribution" + }, + { + "url": "https://github.com/szmarczak/defer-to-connect#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/delayed-stream@1.0.0?package-id=2e87a018d352ff35", + "author": "Felix Geisendörfer (http://debuggable.com/)", + "name": "delayed-stream", + "version": "1.0.0", + "description": "Buffers events from a stream until you are ready to handle them.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:delayed-stream:delayed-stream:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/delayed-stream@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/felixge/node-delayed-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/felixge/node-delayed-stream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/delegates@1.0.0?package-id=ed0c22d60c260f5c", + "name": "delegates", + "version": "1.0.0", + "description": "delegate methods and accessors to another property", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:delegates:delegates:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/delegates@1.0.0", + "externalReferences": [ + { + "url": "visionmedia/node-delegates", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/depd@1.1.2?package-id=8f51ca0c72f74b81", + "author": "Douglas Christopher Wilson ", + "name": "depd", + "version": "1.1.2", + "description": "Deprecate all the things", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:depd:depd:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/depd@1.1.2", + "externalReferences": [ + { + "url": "dougwilson/nodejs-depd", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/depd@1.1.2?package-id=88f59320de2b0d4a", + "author": "Douglas Christopher Wilson ", + "name": "depd", + "version": "1.1.2", + "description": "Deprecate all the things", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:depd:depd:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/depd@1.1.2", + "externalReferences": [ + { + "url": "dougwilson/nodejs-depd", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/destroy@1.0.4?package-id=7a46d2c188b90042", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "destroy", + "version": "1.0.4", + "description": "destroy a stream if possible", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:destroy:destroy:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/destroy@1.0.4", + "externalReferences": [ + { + "url": "stream-utils/destroy", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dezalgo@1.0.4?package-id=d8ccca0e738815bf", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "dezalgo", + "version": "1.0.4", + "description": "Contain async insanity so that the dark pony lord doesn't eat souls", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:dezalgo:dezalgo:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/dezalgo@1.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/dezalgo", + "type": "distribution" + }, + { + "url": "https://github.com/npm/dezalgo", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/diff@5.1.0?package-id=d6e2c2128602c71d", + "name": "diff", + "version": "5.1.0", + "description": "A javascript text diff implementation.", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:kpdecker:diff:5.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/diff@5.1.0", + "externalReferences": [ + { + "url": "git://github.com/kpdecker/jsdiff.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/dir-glob@3.0.1?package-id=9ab743722f0ea12d", + "author": "Kevin Mårtensson (github.com/kevva)", + "name": "dir-glob", + "version": "3.0.1", + "description": "Convert directories to glob compatible strings", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dir-glob:dir-glob:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/dir-glob@3.0.1", + "externalReferences": [ + { + "url": "kevva/dir-glob", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/download@8.0.0?package-id=ac2f97493c09cf0c", + "author": "Kevin Mårtensson (github.com/kevva)", + "name": "download", + "version": "8.0.0", + "description": "Download and extract files", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:download:download:8.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/download@8.0.0", + "externalReferences": [ + { + "url": "kevva/download", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/duplexer3@0.1.5?package-id=6c836d527a4c863a", + "name": "duplexer3", + "version": "0.1.5", + "description": "Like duplexer but using streams3", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:duplexer3:duplexer3:0.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/duplexer3@0.1.5", + "externalReferences": [ + { + "url": "sindresorhus/duplexer3", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ecc-jsbn@0.1.2?package-id=281a10dc51f85ca9", + "author": "Jeremie Miller (http://jeremie.com/)", + "name": "ecc-jsbn", + "version": "0.1.2", + "description": "ECC JS code based on JSBN", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:quartzjer:ecc-jsbn:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ecc-jsbn@0.1.2", + "externalReferences": [ + { + "url": "https://github.com/quartzjer/ecc-jsbn.git", + "type": "distribution" + }, + { + "url": "https://github.com/quartzjer/ecc-jsbn", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ee-first@1.1.1?package-id=e237c873e14ffd47", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "ee-first", + "version": "1.1.1", + "description": "return the first event in a set of ee/event pairs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ee-first:ee-first:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ee-first@1.1.1", + "externalReferences": [ + { + "url": "jonathanong/ee-first", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/emoji-regex@8.0.0?package-id=6bb38678688ed46f", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "emoji-regex", + "version": "8.0.0", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mathiasbynens:emoji-regex:8.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/emoji-regex@8.0.0", + "externalReferences": [ + { + "url": "https://github.com/mathiasbynens/emoji-regex.git", + "type": "distribution" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/encodeurl@1.0.2?package-id=ca5122f9d292a60f", + "name": "encodeurl", + "version": "1.0.2", + "description": "Encode a URL to a percent-encoded form, excluding already-encoded sequences", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:encodeurl:encodeurl:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/encodeurl@1.0.2", + "externalReferences": [ + { + "url": "pillarjs/encodeurl", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/encoding@0.1.13?package-id=e65b6a429cd40212", + "author": "Andris Reinman", + "name": "encoding", + "version": "0.1.13", + "description": "Convert encodings, uses iconv-lite", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:encoding:encoding:0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/encoding@0.1.13", + "externalReferences": [ + { + "url": "https://github.com/andris9/encoding.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/end-of-stream@1.4.4?package-id=476be126dfa49e1", + "author": "Mathias Buus ", + "name": "end-of-stream", + "version": "1.4.4", + "description": "Call a callback when a readable/writable/duplex stream has completed or failed.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:end-of-stream:end-of-stream:1.4.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/end-of-stream@1.4.4", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/end-of-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/end-of-stream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/enhanced-resolve@5.13.0?package-id=e6ee62b9d186201c", + "author": "Tobias Koppers @sokra", + "name": "enhanced-resolve", + "version": "5.13.0", + "description": "Offers a async require.resolve function. It's highly configurable.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:enhanced-resolve:enhanced-resolve:5.13.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/enhanced-resolve@5.13.0", + "externalReferences": [ + { + "url": "git://github.com/webpack/enhanced-resolve.git", + "type": "distribution" + }, + { + "url": "http://github.com/webpack/enhanced-resolve", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/env-paths@2.2.1?package-id=d14634fe75802cac", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "env-paths", + "version": "2.2.1", + "description": "Get paths for storing things like data, config, cache, etc", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:env-paths:env-paths:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/env-paths@2.2.1", + "externalReferences": [ + { + "url": "sindresorhus/env-paths", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/err-code@2.0.3?package-id=60b62094686938a4", + "author": "IndigoUnited (http://indigounited.com)", + "name": "err-code", + "version": "2.0.3", + "description": "Create an error with a code", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:IndigoUnited:err-code:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/err-code@2.0.3", + "externalReferences": [ + { + "url": "git://github.com/IndigoUnited/js-err-code.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/es6-error@4.1.1?package-id=816b6827010746b5", + "author": "Ben Youngblood", + "name": "es6-error", + "version": "4.1.1", + "description": "Easily-extendable error for use with ES6 classes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bjyoungblood:es6-error:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/es6-error@4.1.1", + "externalReferences": [ + { + "url": "https://github.com/bjyoungblood/es6-error.git", + "type": "distribution" + }, + { + "url": "https://github.com/bjyoungblood/es6-error", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/escape-html@1.0.3?package-id=29b06dd1d0ba635a", + "name": "escape-html", + "version": "1.0.3", + "description": "Escape string for use in HTML", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:escape-html:escape-html:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/escape-html@1.0.3", + "externalReferences": [ + { + "url": "component/escape-html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/escape-string-regexp@1.0.5?package-id=25bd30cd97ed1bdf", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "escape-string-regexp", + "version": "1.0.5", + "description": "Escape RegExp special characters", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:escape-string-regexp:escape-string-regexp:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/escape-string-regexp@1.0.5", + "externalReferences": [ + { + "url": "sindresorhus/escape-string-regexp", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/etag@1.8.1?package-id=9151d174424b86ef", + "name": "etag", + "version": "1.8.1", + "description": "Create simple HTTP ETags", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:etag:etag:1.8.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/etag@1.8.1", + "externalReferences": [ + { + "url": "jshttp/etag", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/express@4.16.4?package-id=7d091d958d9b922e", + "author": "TJ Holowaychuk ", + "name": "express", + "version": "4.16.4", + "description": "Fast, unopinionated, minimalist web framework", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:express:express:4.16.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/express@4.16.4", + "externalReferences": [ + { + "url": "expressjs/express", + "type": "distribution" + }, + { + "url": "http://expressjs.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ext-list@2.2.2?package-id=b33c0440e50879f6", + "author": "Kevin Mårtensson (https://github.com/kevva)", + "name": "ext-list", + "version": "2.2.2", + "description": "List of known file extensions and their MIME types", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ext-list:ext-list:2.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ext-list@2.2.2", + "externalReferences": [ + { + "url": "kevva/ext-list", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ext-name@5.0.0?package-id=7c0587ddf45c3d4a", + "author": "Kevin Mårtensson (https://github.com/kevva)", + "name": "ext-name", + "version": "5.0.0", + "description": "Get the file extension and MIME type from a file", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ext-name:ext-name:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ext-name@5.0.0", + "externalReferences": [ + { + "url": "kevva/ext-name", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/extend@3.0.2?package-id=ac3f1ce155e9acb0", + "author": "Stefan Thomas (http://www.justmoon.net)", + "name": "extend", + "version": "3.0.2", + "description": "Port of jQuery.extend for node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:justmoon:extend:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/extend@3.0.2", + "externalReferences": [ + { + "url": "https://github.com/justmoon/node-extend.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/extsprintf@1.3.0?package-id=e1ddb770c979f4c3", + "name": "extsprintf", + "version": "1.3.0", + "description": "extended POSIX-style sprintf", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:davepacheco:extsprintf:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/extsprintf@1.3.0", + "externalReferences": [ + { + "url": "git://github.com/davepacheco/node-extsprintf.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-deep-equal@3.1.3?package-id=8b9d45ccd3ca33c0", + "author": "Evgeny Poberezkin", + "name": "fast-deep-equal", + "version": "3.1.3", + "description": "Fast deep equal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-deep-equal:fast-deep-equal:3.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-deep-equal@3.1.3", + "externalReferences": [ + { + "url": "git+https://github.com/epoberezkin/fast-deep-equal.git", + "type": "distribution" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-glob@3.2.12?package-id=fd9a6880d817706b", + "author": "Denis Malinochkin (https://mrmlnc.com)", + "name": "fast-glob", + "version": "3.2.12", + "description": "It's a very fast and efficient glob library for Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-glob:fast-glob:3.2.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-glob@3.2.12", + "externalReferences": [ + { + "url": "mrmlnc/fast-glob", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fast-json-stable-stringify@2.1.0?package-id=9e19806bed3935c1", + "author": "James Halliday (http://substack.net)", + "name": "fast-json-stable-stringify", + "version": "2.1.0", + "description": "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fast-json-stable-stringify:fast-json-stable-stringify:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast-json-stable-stringify@2.1.0", + "externalReferences": [ + { + "url": "git://github.com/epoberezkin/fast-json-stable-stringify.git", + "type": "distribution" + }, + { + "url": "https://github.com/epoberezkin/fast-json-stable-stringify", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fastest-levenshtein@1.0.12?package-id=f703cf6832613e31", + "author": "Kasper U. Weihe", + "name": "fastest-levenshtein", + "version": "1.0.12", + "description": "Fastest Levenshtein distance implementation in JS.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fastest-levenshtein:fastest-levenshtein:1.0.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/fastest-levenshtein@1.0.12", + "externalReferences": [ + { + "url": "git+https://github.com/ka-weihe/fastest-levenshtein.git", + "type": "distribution" + }, + { + "url": "https://github.com/ka-weihe/fastest-levenshtein#README", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fastq@1.15.0?package-id=27532f2570ab0ac1", + "author": "Matteo Collina ", + "name": "fastq", + "version": "1.15.0", + "description": "Fast, in memory work queue", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:mcollina:fastq:1.15.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fastq@1.15.0", + "externalReferences": [ + { + "url": "git+https://github.com/mcollina/fastq.git", + "type": "distribution" + }, + { + "url": "https://github.com/mcollina/fastq#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fd-slicer@1.1.0?package-id=c0844670d052809c", + "author": "Andrew Kelley ", + "name": "fd-slicer", + "version": "1.1.0", + "description": "safely create multiple ReadStream or WriteStream objects from the same file descriptor", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fd-slicer:fd-slicer:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fd-slicer@1.1.0", + "externalReferences": [ + { + "url": "git://github.com/andrewrk/node-fd-slicer.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/file-type@11.1.0?package-id=89aaec2fd2f8281e", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "file-type", + "version": "11.1.0", + "description": "Detect the file type of a Buffer/Uint8Array/ArrayBuffer", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:file-type:file-type:11.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/file-type@11.1.0", + "externalReferences": [ + { + "url": "sindresorhus/file-type", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/file-type@3.9.0?package-id=527a100734a44d2a", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "file-type", + "version": "3.9.0", + "description": "Detect the file type of a Buffer/Uint8Array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:file-type:file-type:3.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/file-type@3.9.0", + "externalReferences": [ + { + "url": "sindresorhus/file-type", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/file-type@4.4.0?package-id=70df1ba3cc5da435", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "file-type", + "version": "4.4.0", + "description": "Detect the file type of a Buffer/Uint8Array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:file-type:file-type:4.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/file-type@4.4.0", + "externalReferences": [ + { + "url": "sindresorhus/file-type", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/file-type@5.2.0?package-id=f9a4f3b6ed672146", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "file-type", + "version": "5.2.0", + "description": "Detect the file type of a Buffer/Uint8Array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:file-type:file-type:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/file-type@5.2.0", + "externalReferences": [ + { + "url": "sindresorhus/file-type", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/file-type@5.2.0?package-id=e376a911ba2385b5", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "file-type", + "version": "5.2.0", + "description": "Detect the file type of a Buffer/Uint8Array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:file-type:file-type:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/file-type@5.2.0", + "externalReferences": [ + { + "url": "sindresorhus/file-type", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/file-type@6.2.0?package-id=eb5e21f8a1edff60", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "file-type", + "version": "6.2.0", + "description": "Detect the file type of a Buffer/Uint8Array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:file-type:file-type:6.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/file-type@6.2.0", + "externalReferences": [ + { + "url": "sindresorhus/file-type", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/filename-reserved-regex@2.0.0?package-id=85979b9d17db4ba2", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "filename-reserved-regex", + "version": "2.0.0", + "description": "Regular expression for matching reserved filename characters", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:filename-reserved-regex:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/filename-reserved-regex@2.0.0", + "externalReferences": [ + { + "url": "sindresorhus/filename-reserved-regex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/filenamify@3.0.0?package-id=b23706ffbf952066", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "filenamify", + "version": "3.0.0", + "description": "Convert a string to a valid safe filename", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:filenamify:filenamify:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/filenamify@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/filenamify", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fill-range@7.0.1?package-id=c0b0964fa14fb839", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "fill-range", + "version": "7.0.1", + "description": "Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:fill-range:7.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/fill-range@7.0.1", + "externalReferences": [ + { + "url": "jonschlinkert/fill-range", + "type": "distribution" + }, + { + "url": "https://github.com/jonschlinkert/fill-range", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/finalhandler@1.1.1?package-id=f0968412c48fe760", + "author": "Douglas Christopher Wilson ", + "name": "finalhandler", + "version": "1.1.1", + "description": "Node.js final http responder", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:finalhandler:finalhandler:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/finalhandler@1.1.1", + "externalReferences": [ + { + "url": "pillarjs/finalhandler", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/find-yarn-workspace-root@2.0.0?package-id=123525c0f7751cdc", + "author": "Square, Inc.", + "name": "find-yarn-workspace-root", + "version": "2.0.0", + "description": "Algorithm for finding the root of a yarn workspace, extracted from yarnpkg.com", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:find-yarn-workspace-root:find-yarn-workspace-root:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/find-yarn-workspace-root@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/square/find-yarn-workspace-root.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/forever-agent@0.6.1?package-id=987c799490a62745", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "forever-agent", + "version": "0.6.1", + "description": "HTTP Agent that keeps socket connections alive between keep-alive requests. Formerly part of mikeal/request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:forever-agent:forever-agent:0.6.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/forever-agent@0.6.1", + "externalReferences": [ + { + "url": "https://github.com/mikeal/forever-agent", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/form-data@2.3.3?package-id=901e4c8507a70298", + "author": "Felix Geisendörfer (http://debuggable.com/)", + "name": "form-data", + "version": "2.3.3", + "description": "A library to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:form-data:form-data:2.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/form-data@2.3.3", + "externalReferences": [ + { + "url": "git://github.com/form-data/form-data.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/forwarded@0.2.0?package-id=e2cd353a11409247", + "name": "forwarded", + "version": "0.2.0", + "description": "Parse HTTP X-Forwarded-For header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:forwarded:forwarded:0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/forwarded@0.2.0", + "externalReferences": [ + { + "url": "jshttp/forwarded", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fresh@0.5.2?package-id=7080d1485688188f", + "author": "TJ Holowaychuk (http://tjholowaychuk.com)", + "name": "fresh", + "version": "0.5.2", + "description": "HTTP response freshness testing", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fresh:fresh:0.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/fresh@0.5.2", + "externalReferences": [ + { + "url": "jshttp/fresh", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/from2@2.3.0?package-id=5ce884159e7c97c", + "author": "Hugh Kennedy (http://hughsk.io/)", + "name": "from2", + "version": "2.3.0", + "description": "Convenience wrapper for ReadableStream, with an API lifted from \"from\" and \"through2\"", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hughsk:from2:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/from2@2.3.0", + "externalReferences": [ + { + "url": "git://github.com/hughsk/from2", + "type": "distribution" + }, + { + "url": "https://github.com/hughsk/from2", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-constants@1.0.0?package-id=5374766914699b42", + "author": "Mathias Buus (@mafintosh)", + "name": "fs-constants", + "version": "1.0.0", + "description": "Require constants across node and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fs-constants:fs-constants:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-constants@1.0.0", + "externalReferences": [ + { + "url": "https://github.com/mafintosh/fs-constants.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/fs-constants", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-extra@8.1.0?package-id=fd32f6ef9252a576", + "author": "JP Richardson ", + "name": "fs-extra", + "version": "8.1.0", + "description": "fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as mkdir -p, cp -r, and rm -rf.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jprichardson:fs-extra:8.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-extra@8.1.0", + "externalReferences": [ + { + "url": "https://github.com/jprichardson/node-fs-extra", + "type": "distribution" + }, + { + "url": "https://github.com/jprichardson/node-fs-extra", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-extra@9.1.0?package-id=4c2e030ee99447c5", + "author": "JP Richardson ", + "name": "fs-extra", + "version": "9.1.0", + "description": "fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as recursive mkdir, copy, and remove.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jprichardson:fs-extra:9.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-extra@9.1.0", + "externalReferences": [ + { + "url": "https://github.com/jprichardson/node-fs-extra", + "type": "distribution" + }, + { + "url": "https://github.com/jprichardson/node-fs-extra", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-minipass@2.1.0?package-id=398fbbb28fb7e1f4", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs-minipass", + "version": "2.1.0", + "description": "fs read and write streams based on minipass", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-minipass@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs-minipass@2.1.0?package-id=f1b7ae0257cf54f0", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs-minipass", + "version": "2.1.0", + "description": "fs read and write streams based on minipass", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-minipass@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=21800424481533b1", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs.realpath", + "version": "1.0.0", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=65729748c227165e", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs.realpath", + "version": "1.0.0", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/fstrm@0.6.1-r0?arch=x86_64&distro=alpine-3.16.5&package-id=2d11651fe3e4b4b8", + "name": "fstrm", + "version": "0.6.1-r0", + "description": "Frame Streams implementation in C", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:farsightsec:fstrm:0.6.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/fstrm@0.6.1-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://github.com/farsightsec/fstrm", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/function-bind@1.1.1?package-id=44648bf09db15f6c", + "author": "Raynos ", + "name": "function-bind", + "version": "1.1.1", + "description": "Implementation of Function.prototype.bind", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:function-bind:function-bind:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/function-bind@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/Raynos/function-bind.git", + "type": "distribution" + }, + { + "url": "https://github.com/Raynos/function-bind", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/gauge@4.0.4?package-id=fc4632a6e143d550", + "author": "GitHub Inc.", + "name": "gauge", + "version": "4.0.4", + "description": "A terminal based horizontal gauge", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:gauge:gauge:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/gauge@4.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/gauge.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/gauge", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-proxy@2.1.0?package-id=efe4dbd0d645d995", + "author": "Kevin Mårtensson (https://github.com/kevva)", + "name": "get-proxy", + "version": "2.1.0", + "description": "Get configured proxy", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:get-proxy:get-proxy:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-proxy@2.1.0", + "externalReferences": [ + { + "url": "kevva/get-proxy", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-stream@2.3.1?package-id=6ee2174b7602b041", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "get-stream", + "version": "2.3.1", + "description": "Get a stream as a string, buffer, or array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:get-stream:get-stream:2.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-stream@2.3.1", + "externalReferences": [ + { + "url": "sindresorhus/get-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-stream@3.0.0?package-id=22255c98915a1f96", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "get-stream", + "version": "3.0.0", + "description": "Get a stream as a string, buffer, or array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:get-stream:get-stream:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-stream@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/get-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-stream@3.0.0?package-id=56ec6f95eadcb5d8", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "get-stream", + "version": "3.0.0", + "description": "Get a stream as a string, buffer, or array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:get-stream:get-stream:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-stream@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/get-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-stream@4.1.0?package-id=1760659d39365560", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "get-stream", + "version": "4.1.0", + "description": "Get a stream as a string, buffer, or array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:get-stream:get-stream:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-stream@4.1.0", + "externalReferences": [ + { + "url": "sindresorhus/get-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/get-stream@5.2.0?package-id=c66bd6ad48eed0a3", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "get-stream", + "version": "5.2.0", + "description": "Get a stream as a string, buffer, or array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:get-stream:get-stream:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-stream@5.2.0", + "externalReferences": [ + { + "url": "sindresorhus/get-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/getpass@0.1.7?package-id=75c291a71588a422", + "author": "Alex Wilson ", + "name": "getpass", + "version": "0.1.7", + "description": "getpass for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:arekinath:getpass:0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/getpass@0.1.7", + "externalReferences": [ + { + "url": "https://github.com/arekinath/node-getpass.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.2.3?package-id=b961e222f6e54786", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.2.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.2.3?package-id=37af2473a85a6fa0", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.2.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@7.2.3?package-id=27f74d4e19b8aa02", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.2.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob@8.0.3?package-id=f9282babaa70cabf", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "8.0.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:8.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@8.0.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/glob-parent@5.1.2?package-id=18aaf377c47e4ea4", + "author": "Gulp Team (https://gulpjs.com/)", + "name": "glob-parent", + "version": "5.1.2", + "description": "Extract the non-magic parent path from a glob string.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:glob-parent:glob-parent:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob-parent@5.1.2", + "externalReferences": [ + { + "url": "gulpjs/glob-parent", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/globby@11.1.0?package-id=a7e2b9824bbb754c", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "globby", + "version": "11.1.0", + "description": "User-friendly glob matching", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:globby:globby:11.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/globby@11.1.0", + "externalReferences": [ + { + "url": "sindresorhus/globby", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/got@11.8.6?package-id=d6fd191c0bfd7e6e", + "name": "got", + "version": "11.8.6", + "description": "Human-friendly and powerful HTTP request library for Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:got:got:11.8.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/got@11.8.6", + "externalReferences": [ + { + "url": "sindresorhus/got", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/got@8.3.2?package-id=e1f671cdecb81188", + "name": "got", + "version": "8.3.2", + "description": "Simplified HTTP requests", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:got:got:8.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/got@8.3.2", + "externalReferences": [ + { + "url": "sindresorhus/got", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/graceful-fs@4.2.10?package-id=9591c6b5bd9602cc", + "name": "graceful-fs", + "version": "4.2.10", + "description": "A drop-in replacement for fs, making various improvements.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/graceful-fs@4.2.10", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-graceful-fs", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/graceful-fs@4.2.11?package-id=bef9b71aa253a928", + "name": "graceful-fs", + "version": "4.2.11", + "description": "A drop-in replacement for fs, making various improvements.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/graceful-fs@4.2.11", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-graceful-fs", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/har-schema@2.0.0?package-id=4dcd539e47ce1819", + "author": "Ahmad Nassri (https://www.ahmadnassri.com/)", + "name": "har-schema", + "version": "2.0.0", + "description": "JSON Schema for HTTP Archive (HAR)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ahmadnassri:har-schema:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/har-schema@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/ahmadnassri/har-schema.git", + "type": "distribution" + }, + { + "url": "https://github.com/ahmadnassri/har-schema", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/har-validator@5.1.5?package-id=d992c94a0553947c", + "author": "Ahmad Nassri (https://www.ahmadnassri.com/)", + "name": "har-validator", + "version": "5.1.5", + "description": "Extremely fast HTTP Archive (HAR) validator using JSON Schema", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:har-validator:har-validator:5.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/har-validator@5.1.5", + "externalReferences": [ + { + "url": "https://github.com/ahmadnassri/node-har-validator.git", + "type": "distribution" + }, + { + "url": "https://github.com/ahmadnassri/node-har-validator", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has@1.0.3?package-id=57072cf8ae347274", + "author": "Thiago de Arruda ", + "name": "has", + "version": "1.0.3", + "description": "Object.prototype.hasOwnProperty.call shortcut", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tarruda:has:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/has@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/tarruda/has.git", + "type": "distribution" + }, + { + "url": "https://github.com/tarruda/has", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-flag@3.0.0?package-id=827f03d0a0fb3972", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "has-flag", + "version": "3.0.0", + "description": "Check if argv has a specific flag", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-flag:has-flag:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-flag@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/has-flag", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-flag@4.0.0?package-id=1ac717b55f99f4f2", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "has-flag", + "version": "4.0.0", + "description": "Check if argv has a specific flag", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-flag:has-flag:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-flag@4.0.0", + "externalReferences": [ + { + "url": "sindresorhus/has-flag", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-flag@4.0.0?package-id=fe0415670e8174f1", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "has-flag", + "version": "4.0.0", + "description": "Check if argv has a specific flag", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-flag:has-flag:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-flag@4.0.0", + "externalReferences": [ + { + "url": "sindresorhus/has-flag", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-symbol-support-x@1.4.2?package-id=289ae60a33cdd346", + "author": "Graham Fairweather ", + "name": "has-symbol-support-x", + "version": "1.4.2", + "description": "Tests if ES6 Symbol is supported.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-symbol-support-x:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-symbol-support-x@1.4.2", + "externalReferences": [ + { + "url": "https://github.com/Xotic750/has-symbol-support-x.git", + "type": "distribution" + }, + { + "url": "https://github.com/Xotic750/has-symbol-support-x", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-to-string-tag-x@1.4.1?package-id=6cf21f5b92940fbe", + "author": "Graham Fairweather ", + "name": "has-to-string-tag-x", + "version": "1.4.1", + "description": "Tests if ES6 @@toStringTag is supported.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-to-string-tag-x:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-to-string-tag-x@1.4.1", + "externalReferences": [ + { + "url": "https://github.com/Xotic750/has-to-string-tag-x.git", + "type": "distribution" + }, + { + "url": "https://github.com/Xotic750/has-to-string-tag-x", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/has-unicode@2.0.1?package-id=28dbbd6e7951181f", + "author": "Rebecca Turner ", + "name": "has-unicode", + "version": "2.0.1", + "description": "Try to guess if your terminal supports unicode", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:has-unicode:has-unicode:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-unicode@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/iarna/has-unicode", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/has-unicode", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/hosted-git-info@5.2.1?package-id=daac03af08cd11f6", + "author": "GitHub Inc.", + "name": "hosted-git-info", + "version": "5.2.1", + "description": "Provides metadata and conversions from repository urls for GitHub, Bitbucket and GitLab", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:hosted-git-info:hosted-git-info:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/hosted-git-info@5.2.1", + "externalReferences": [ + { + "url": "https://github.com/npm/hosted-git-info.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/hosted-git-info", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-cache-semantics@3.8.1?package-id=86b81a2bc9dc1f8f", + "author": "Kornel Lesiński (https://kornel.ski/)", + "name": "http-cache-semantics", + "version": "3.8.1", + "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:http-cache-semantics:http-cache-semantics:3.8.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-cache-semantics@3.8.1", + "externalReferences": [ + { + "url": "https://github.com/pornel/http-cache-semantics.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-cache-semantics@4.1.1?package-id=916aa3ebe914a835", + "author": "Kornel Lesiński (https://kornel.ski/)", + "name": "http-cache-semantics", + "version": "4.1.1", + "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:http-cache-semantics:http-cache-semantics:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-cache-semantics@4.1.1", + "externalReferences": [ + { + "url": "https://github.com/kornelski/http-cache-semantics.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-cache-semantics@4.1.1?package-id=c245f622b4a75bf6", + "author": "Kornel Lesiński (https://kornel.ski/)", + "name": "http-cache-semantics", + "version": "4.1.1", + "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:http-cache-semantics:http-cache-semantics:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-cache-semantics@4.1.1", + "externalReferences": [ + { + "url": "https://github.com/kornelski/http-cache-semantics.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-errors@1.6.3?package-id=d1068a65d773e5c4", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "http-errors", + "version": "1.6.3", + "description": "Create HTTP error objects", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-errors:http-errors:1.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-errors@1.6.3", + "externalReferences": [ + { + "url": "jshttp/http-errors", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-proxy-agent@5.0.0?package-id=af3d467415b1e643", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "http-proxy-agent", + "version": "5.0.0", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-proxy-agent:http-proxy-agent:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-proxy-agent@5.0.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-http-proxy-agent.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http-signature@1.2.0?package-id=b566cae888becf5d", + "author": "Joyent, Inc", + "name": "http-signature", + "version": "1.2.0", + "description": "Reference implementation of Joyent's HTTP Signature scheme.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-signature:http-signature:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-signature@1.2.0", + "externalReferences": [ + { + "url": "git://github.com/joyent/node-http-signature.git", + "type": "distribution" + }, + { + "url": "https://github.com/joyent/node-http-signature/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/http2-wrapper@1.0.3?package-id=dc8749ed03d21432", + "author": "Szymon Marczak", + "name": "http2-wrapper", + "version": "1.0.3", + "description": "HTTP2 client, just with the familiar `https` API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http2-wrapper:http2-wrapper:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/http2-wrapper@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/szmarczak/http2-wrapper.git", + "type": "distribution" + }, + { + "url": "https://github.com/szmarczak/http2-wrapper#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/https-proxy-agent@5.0.1?package-id=b2694aac4dc305de", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "https-proxy-agent", + "version": "5.0.1", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:https-proxy-agent:https-proxy-agent:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/https-proxy-agent@5.0.1", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-https-proxy-agent.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/humanize-ms@1.2.1?package-id=d773c44dd2f9a86d", + "author": "dead-horse (http://deadhorse.me)", + "name": "humanize-ms", + "version": "1.2.1", + "description": "transform humanize time to ms", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-modules:humanize-ms:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/humanize-ms@1.2.1", + "externalReferences": [ + { + "url": "https://github.com/node-modules/humanize-ms", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iconv-lite@0.4.23?package-id=5056a816beaa3c8b", + "author": "Alexander Shtuchkin ", + "name": "iconv-lite", + "version": "0.4.23", + "description": "Convert character encodings in pure javascript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.4.23:*:*:*:*:*:*:*", + "purl": "pkg:npm/iconv-lite@0.4.23", + "externalReferences": [ + { + "url": "git://github.com/ashtuchkin/iconv-lite.git", + "type": "distribution" + }, + { + "url": "https://github.com/ashtuchkin/iconv-lite", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/iconv-lite@0.6.3?package-id=fc4965fa5a86a9c9", + "author": "Alexander Shtuchkin ", + "name": "iconv-lite", + "version": "0.6.3", + "description": "Convert character encodings in pure javascript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/iconv-lite@0.6.3", + "externalReferences": [ + { + "url": "git://github.com/ashtuchkin/iconv-lite.git", + "type": "distribution" + }, + { + "url": "https://github.com/ashtuchkin/iconv-lite", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ieee754@1.2.1?package-id=18839efc79bfb481", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "ieee754", + "version": "1.2.1", + "description": "Read/write IEEE754 floating point numbers from/to a Buffer or array-like object", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:ieee754:ieee754:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ieee754@1.2.1", + "externalReferences": [ + { + "url": "git://github.com/feross/ieee754.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ignore@5.2.4?package-id=a927aced65cc635b", + "author": "kael", + "name": "ignore", + "version": "5.2.4", + "description": "Ignore is a manager and filter for .gitignore rules, the one used by eslint, gitbook and many others.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ignore:ignore:5.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/ignore@5.2.4", + "externalReferences": [ + { + "url": "git@github.com:kaelzhang/node-ignore.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ignore-walk@5.0.1?package-id=39d6166153eb8a8", + "author": "GitHub Inc.", + "name": "ignore-walk", + "version": "5.0.1", + "description": "Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ignore-walk:ignore-walk:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ignore-walk@5.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/ignore-walk.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/imurmurhash@0.1.4?package-id=6444b4b295dc6bb1", + "author": "Jens Taylor (https://github.com/homebrewing)", + "name": "imurmurhash", + "version": "0.1.4", + "description": "An incremental implementation of MurmurHash3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:imurmurhash:imurmurhash:0.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/imurmurhash@0.1.4", + "externalReferences": [ + { + "url": "https://github.com/jensyt/imurmurhash-js", + "type": "distribution" + }, + { + "url": "https://github.com/jensyt/imurmurhash-js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/indent-string@4.0.0?package-id=9c9aada4281114e7", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "indent-string", + "version": "4.0.0", + "description": "Indent each line in a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indent-string:indent-string:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/indent-string@4.0.0", + "externalReferences": [ + { + "url": "sindresorhus/indent-string", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/infer-owner@1.0.4?package-id=70041214f8f231ae", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "infer-owner", + "version": "1.0.4", + "description": "Infer the owner of a path based on the owner of its nearest existing parent", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:infer-owner:infer-owner:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/infer-owner@1.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/infer-owner", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inflight@1.0.6?package-id=59c3c8a2d2437082", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "inflight", + "version": "1.0.6", + "description": "Add callbacks to requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "https://github.com/npm/inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inflight@1.0.6?package-id=f9bd5cf95258dad4", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "inflight", + "version": "1.0.6", + "description": "Add callbacks to requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "https://github.com/npm/inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.3?package-id=1bb44148e405c144", + "name": "inherits", + "version": "2.0.3", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/inherits", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.4?package-id=2aa76eeeb4a32e94", + "name": "inherits", + "version": "2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/inherits", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/inherits@2.0.4?package-id=f84cce1a2468e7", + "name": "inherits", + "version": "2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/inherits", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ini@1.3.8?package-id=b53c34fcbfe5b226", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "ini", + "version": "1.3.8", + "description": "An ini encoder/decoder for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:ini:1.3.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/ini@1.3.8", + "externalReferences": [ + { + "url": "git://github.com/isaacs/ini.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ini@3.0.1?package-id=143d409d5161792", + "author": "GitHub Inc.", + "name": "ini", + "version": "3.0.1", + "description": "An ini encoder/decoder for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ini:ini:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ini@3.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/ini.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/init-package-json@3.0.2?package-id=6836db1e46d935b6", + "author": "GitHub Inc.", + "name": "init-package-json", + "version": "3.0.2", + "description": "A node module to get your node module started", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:init-package-json:init-package-json:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/init-package-json@3.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/init-package-json.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/into-stream@3.1.0?package-id=749ae911dc171415", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "into-stream", + "version": "3.1.0", + "description": "Convert a buffer/string/array/object/iterable/promise into a stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:into-stream:into-stream:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/into-stream@3.1.0", + "externalReferences": [ + { + "url": "sindresorhus/into-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ip@2.0.0?package-id=218d1c05ea387b3c", + "author": "Fedor Indutny ", + "name": "ip", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indutny:ip:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ip@2.0.0", + "externalReferences": [ + { + "url": "http://github.com/indutny/node-ip.git", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/node-ip", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ip-regex@4.3.0?package-id=ce63365b733beafc", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ip-regex", + "version": "4.3.0", + "description": "Regular expression for matching IP addresses (IPv4 & IPv6)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ip-regex:ip-regex:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ip-regex@4.3.0", + "externalReferences": [ + { + "url": "sindresorhus/ip-regex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ipaddr.js@1.9.1?package-id=4e7082f9d0731706", + "author": "whitequark ", + "name": "ipaddr.js", + "version": "1.9.1", + "description": "A library for manipulating IPv4 and IPv6 addresses in JavaScript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:whitequark:ipaddr.js:1.9.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ipaddr.js@1.9.1", + "externalReferences": [ + { + "url": "git://github.com/whitequark/ipaddr.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-ci@2.0.0?package-id=2d6f4f2f9863d72e", + "author": "Thomas Watson Steen (https://twitter.com/wa7son)", + "name": "is-ci", + "version": "2.0.0", + "description": "Detect if the current environment is a CI server", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:watson:is-ci:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-ci@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/watson/is-ci.git", + "type": "distribution" + }, + { + "url": "https://github.com/watson/is-ci", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-cidr@4.0.2?package-id=b7267695f8ce1238", + "author": "silverwind ", + "name": "is-cidr", + "version": "4.0.2", + "description": "Check if a string is an IP address in CIDR notation", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:is-cidr:is-cidr:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-cidr@4.0.2", + "externalReferences": [ + { + "url": "silverwind/is-cidr", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-core-module@2.10.0?package-id=22642820ec847015", + "author": "Jordan Harband ", + "name": "is-core-module", + "version": "2.10.0", + "description": "Is this specifier a node.js core module?", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-core-module:is-core-module:2.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-core-module@2.10.0", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/is-core-module.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/is-core-module", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-docker@2.2.1?package-id=b80a4b4b32b6089e", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "is-docker", + "version": "2.2.1", + "description": "Check if the process is running inside a Docker container", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-docker:is-docker:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-docker@2.2.1", + "externalReferences": [ + { + "url": "sindresorhus/is-docker", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-extglob@2.1.1?package-id=be3168a7cd0ca82b", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "is-extglob", + "version": "2.1.1", + "description": "Returns true if a string has an extglob.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:is-extglob:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-extglob@2.1.1", + "externalReferences": [ + { + "url": "jonschlinkert/is-extglob", + "type": "distribution" + }, + { + "url": "https://github.com/jonschlinkert/is-extglob", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0?package-id=f89f6ce8e80b50d", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/is-fullwidth-code-point", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-glob@4.0.3?package-id=731881f3fe93be88", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "is-glob", + "version": "4.0.3", + "description": "Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:micromatch:is-glob:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-glob@4.0.3", + "externalReferences": [ + { + "url": "micromatch/is-glob", + "type": "distribution" + }, + { + "url": "https://github.com/micromatch/is-glob", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-lambda@1.0.1?package-id=841af64487227951", + "author": "Thomas Watson Steen (https://twitter.com/wa7son)", + "name": "is-lambda", + "version": "1.0.1", + "description": "Detect if your code is running on an AWS Lambda server", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-lambda:is-lambda:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-lambda@1.0.1", + "externalReferences": [ + { + "url": "https://github.com/watson/is-lambda.git", + "type": "distribution" + }, + { + "url": "https://github.com/watson/is-lambda", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-natural-number@4.0.1?package-id=870646357a76bd97", + "author": "Shinnosuke Watanabe (https://github.com/shinnn)", + "name": "is-natural-number", + "version": "4.0.1", + "description": "Check if a value is a natural number", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-natural-number:is-natural-number:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-natural-number@4.0.1", + "externalReferences": [ + { + "url": "shinnn/is-natural-number.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-number@7.0.0?package-id=17615dc83613bdb3", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "is-number", + "version": "7.0.0", + "description": "Returns true if a number or string value is a finite number. Useful for regex matches, parsing, user input, etc.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:is-number:7.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-number@7.0.0", + "externalReferences": [ + { + "url": "jonschlinkert/is-number", + "type": "distribution" + }, + { + "url": "https://github.com/jonschlinkert/is-number", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-object@1.0.2?package-id=a8282bc299d5891b", + "author": "Raynos ", + "name": "is-object", + "version": "1.0.2", + "description": "Checks whether a value is an object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:inspect-js:is-object:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-object@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/inspect-js/is-object.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/is-object", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-plain-obj@1.1.0?package-id=2b5099a344c93333", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-plain-obj", + "version": "1.1.0", + "description": "Check if a value is a plain object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-plain-obj:is-plain-obj:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-plain-obj@1.1.0", + "externalReferences": [ + { + "url": "sindresorhus/is-plain-obj", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-retry-allowed@1.2.0?package-id=d43de39fded4048f", + "author": "Vsevolod Strukchinsky (github.com/floatdrop)", + "name": "is-retry-allowed", + "version": "1.2.0", + "description": "Is retry allowed for Error?", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-retry-allowed:is-retry-allowed:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-retry-allowed@1.2.0", + "externalReferences": [ + { + "url": "floatdrop/is-retry-allowed", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-stream@1.1.0?package-id=283db8b57c629711", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-stream", + "version": "1.1.0", + "description": "Check if something is a Node.js stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-stream:is-stream:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-stream@1.1.0", + "externalReferences": [ + { + "url": "sindresorhus/is-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-typedarray@1.0.0?package-id=7c7a7687a151a58f", + "author": "Hugh Kennedy (http://hughsk.io/)", + "name": "is-typedarray", + "version": "1.0.0", + "description": "Detect whether or not an object is a Typed Array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-typedarray:is-typedarray:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-typedarray@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/hughsk/is-typedarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/hughsk/is-typedarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/is-wsl@2.2.0?package-id=617b7a7c73aef067", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-wsl", + "version": "2.2.0", + "description": "Check if the process is running inside Windows Subsystem for Linux (Bash on Windows)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-wsl:is-wsl:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-wsl@2.2.0", + "externalReferences": [ + { + "url": "sindresorhus/is-wsl", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isarray@1.0.0?package-id=91eedced5ea0d9f4", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "isarray", + "version": "1.0.0", + "description": "Array#isArray for older browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juliangruber:isarray:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isarray@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/isarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/isarray", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isexe@2.0.0?package-id=cac2857ecac9cad9", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "isexe", + "version": "2.0.0", + "description": "Minimal module to check if a file is executable.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:isexe:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isexe@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/isexe.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/isexe#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isexe@2.0.0?package-id=2f3fac93ebc9c581", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "isexe", + "version": "2.0.0", + "description": "Minimal module to check if a file is executable.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:isexe:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isexe@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/isexe.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/isexe#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isstream@0.1.2?package-id=60627e35aae479e", + "author": "Rod Vagg ", + "name": "isstream", + "version": "0.1.2", + "description": "Determine if an object is a Stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isstream:isstream:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/isstream@0.1.2", + "externalReferences": [ + { + "url": "https://github.com/rvagg/isstream.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/isstream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/isurl@1.0.0?package-id=afce3740246f9d34", + "author": "Steven Vachon (https://www.svachon.com/)", + "name": "isurl", + "version": "1.0.0", + "description": "Checks whether a value is a WHATWG URL.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isurl:isurl:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isurl@1.0.0", + "externalReferences": [ + { + "url": "stevenvachon/isurl", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsbn@0.1.1?package-id=f3ac3ad288be4178", + "author": "Tom Wu", + "name": "jsbn", + "version": "0.1.1", + "description": "The jsbn library is a fast, portable implementation of large-number math in pure JavaScript, enabling public-key crypto and other applications on desktop and mobile browsers.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:andyperlitch:jsbn:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsbn@0.1.1", + "externalReferences": [ + { + "url": "https://github.com/andyperlitch/jsbn.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-buffer@3.0.0?package-id=3593402b7fb37053", + "author": "Dominic Tarr (http://dominictarr.com)", + "name": "json-buffer", + "version": "3.0.0", + "description": "JSON parse & stringify that supports binary via bops & base64", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dominictarr:json-buffer:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-buffer@3.0.0", + "externalReferences": [ + { + "url": "git://github.com/dominictarr/json-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/dominictarr/json-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-buffer@3.0.1?package-id=b22046d084b75b04", + "author": "Dominic Tarr (http://dominictarr.com)", + "name": "json-buffer", + "version": "3.0.1", + "description": "JSON parse & stringify that supports binary via bops & base64", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dominictarr:json-buffer:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-buffer@3.0.1", + "externalReferences": [ + { + "url": "git://github.com/dominictarr/json-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/dominictarr/json-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/json-c@0.16-r0?arch=x86_64&distro=alpine-3.16.5&package-id=597ca41764540973", + "publisher": "Natanael Copa ", + "name": "json-c", + "version": "0.16-r0", + "description": "A JSON implementation in C", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-c:json-c:0.16-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/json-c@0.16-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://github.com/json-c/json-c/wiki", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-parse-even-better-errors@2.3.1?package-id=abf07f33abe9247b", + "author": "Kat Marchán ", + "name": "json-parse-even-better-errors", + "version": "2.3.1", + "description": "JSON.parse with context information on error", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-parse-even-better-errors:json-parse-even-better-errors:2.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-parse-even-better-errors@2.3.1", + "externalReferences": [ + { + "url": "https://github.com/npm/json-parse-even-better-errors", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema@0.4.0?package-id=f6da4a26d6afa2e4", + "author": "Kris Zyp", + "name": "json-schema", + "version": "0.4.0", + "description": "JSON Schema validation and specifications", + "licenses": [ + { + "license": { + "name": "(AFL-2.1 OR BSD-3-Clause)" + } + } + ], + "cpe": "cpe:2.3:a:json-schema:json-schema:0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema@0.4.0", + "externalReferences": [ + { + "url": "http://github.com/kriszyp/json-schema", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-schema-traverse@0.4.1?package-id=3b5dfc07da3fba89", + "author": "Evgeny Poberezkin", + "name": "json-schema-traverse", + "version": "0.4.1", + "description": "Traverse JSON Schema passing each schema object to callback", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-schema-traverse:json-schema-traverse:0.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema-traverse@0.4.1", + "externalReferences": [ + { + "url": "git+https://github.com/epoberezkin/json-schema-traverse.git", + "type": "distribution" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-stream@1.0.0?package-id=1d1cbbfe09ed72b0", + "author": "Maciej Małecki ", + "name": "json-stream", + "version": "1.0.0", + "description": "New line-delimeted JSON parser with a stream interface", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-stream:json-stream:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-stream@1.0.0", + "externalReferences": [ + { + "url": "https://github.com/mmalecki/json-stream.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-stringify-nice@1.1.4?package-id=e53e3b4efad53e7c", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "json-stringify-nice", + "version": "1.1.4", + "description": "Stringify an object sorting scalars before objects, and defaulting to 2-space indent", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:json-stringify-nice:json-stringify-nice:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-stringify-nice@1.1.4", + "externalReferences": [ + { + "url": "https://github.com/isaacs/json-stringify-nice", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/json-stringify-safe@5.0.1?package-id=f6bc9b393e0af00f", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "json-stringify-safe", + "version": "5.0.1", + "description": "Like JSON.stringify, but doesn't blow up on circular refs.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:json-stringify-safe:json-stringify-safe:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-stringify-safe@5.0.1", + "externalReferences": [ + { + "url": "git://github.com/isaacs/json-stringify-safe", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/json-stringify-safe", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonfile@4.0.0?package-id=4cfeca6860892aa8", + "author": "JP Richardson ", + "name": "jsonfile", + "version": "4.0.0", + "description": "Easily read/write JSON files.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jsonfile:jsonfile:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonfile@4.0.0", + "externalReferences": [ + { + "url": "git@github.com:jprichardson/node-jsonfile.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonfile@6.1.0?package-id=a6643e442a28ab37", + "author": "JP Richardson ", + "name": "jsonfile", + "version": "6.1.0", + "description": "Easily read/write JSON files.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jsonfile:jsonfile:6.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonfile@6.1.0", + "externalReferences": [ + { + "url": "git@github.com:jprichardson/node-jsonfile.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsonparse@1.3.1?package-id=4ac9c9dc14c89718", + "author": "Tim Caswell ", + "name": "jsonparse", + "version": "1.3.1", + "description": "This is a pure-js JSON streaming parser for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:creationix:jsonparse:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonparse@1.3.1", + "externalReferences": [ + { + "url": "http://github.com/creationix/jsonparse.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/jsprim@1.4.2?package-id=5cc587fdf3d16342", + "name": "jsprim", + "version": "1.4.2", + "description": "utilities for primitive JavaScript types", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:joyent:jsprim:1.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsprim@1.4.2", + "externalReferences": [ + { + "url": "git://github.com/joyent/node-jsprim.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/just-diff@5.1.1?package-id=ce66f628f594c549", + "author": "Angus Croll", + "name": "just-diff", + "version": "5.1.1", + "description": "Return an object representing the diffs between two objects. Supports jsonPatch protocol", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:just-diff:just-diff:5.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/just-diff@5.1.1", + "externalReferences": [ + { + "url": "https://github.com/angus-c/just", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/just-diff-apply@5.4.1?package-id=11dfc45c877cf5ba", + "author": "Angus Croll", + "name": "just-diff-apply", + "version": "5.4.1", + "description": "Apply a diff to an object. Optionally supports jsonPatch protocol", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:just-diff-apply:just-diff-apply:5.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/just-diff-apply@5.4.1", + "externalReferences": [ + { + "url": "https://github.com/angus-c/just", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/keyutils-libs@1.6.3-r1?arch=x86_64&upstream=keyutils&distro=alpine-3.16.5&package-id=8ee597dfe194ab60", + "publisher": "Natanael Copa ", + "name": "keyutils-libs", + "version": "1.6.3-r1", + "description": "Key utilities library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:keyutils-libs:keyutils-libs:1.6.3-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/keyutils-libs@1.6.3-r1?arch=x86_64&upstream=keyutils&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://people.redhat.com/~dhowells/keyutils/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/keyv@3.0.0?package-id=c0a1007f3c4e9d", + "author": "Luke Childs (http://lukechilds.co.uk)", + "name": "keyv", + "version": "3.0.0", + "description": "Simple key-value storage with support for multiple backends", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lukechilds:keyv:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/keyv@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/lukechilds/keyv.git", + "type": "distribution" + }, + { + "url": "https://github.com/lukechilds/keyv", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/keyv@4.5.2?package-id=c302f0561af29045", + "author": "Jared Wray (http://jaredwray.com)", + "name": "keyv", + "version": "4.5.2", + "description": "Simple key-value storage with support for multiple backends", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jaredwray:keyv:4.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/keyv@4.5.2", + "externalReferences": [ + { + "url": "git+https://github.com/jaredwray/keyv.git", + "type": "distribution" + }, + { + "url": "https://github.com/jaredwray/keyv", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/klaw-sync@6.0.0?package-id=2526d6cabcdfb0cd", + "author": "Mani Maghsoudlou", + "name": "klaw-sync", + "version": "6.0.0", + "description": "Recursive, synchronous, and fast file system walker", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:klaw-sync:klaw-sync:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/klaw-sync@6.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/manidlou/node-klaw-sync.git", + "type": "distribution" + }, + { + "url": "https://github.com/manidlou/node-klaw-sync#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/krb5-conf@1.0-r2?arch=x86_64&distro=alpine-3.16.5&package-id=50afffc56cc7e53", + "publisher": "Natanael Copa ", + "name": "krb5-conf", + "version": "1.0-r2", + "description": "Shared krb5.conf for both MIT krb5 and heimdal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:krb5-conf:krb5-conf:1.0-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/krb5-conf@1.0-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://web.mit.edu/kerberos/www/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/krb5-libs@1.19.4-r0?arch=x86_64&upstream=krb5&distro=alpine-3.16.5&package-id=4cdf917c85417723", + "publisher": "Natanael Copa ", + "name": "krb5-libs", + "version": "1.19.4-r0", + "description": "The shared libraries used by Kerberos 5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:krb5-libs:krb5-libs:1.19.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/krb5-libs@1.19.4-r0?arch=x86_64&upstream=krb5&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://web.mit.edu/kerberos/www/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.16.5&package-id=2abd3b45f6fa4702", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r3", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcom_err@1.46.6-r0?arch=x86_64&upstream=e2fsprogs&distro=alpine-3.16.5&package-id=25b329ab3289e91c", + "publisher": "Natanael Copa ", + "name": "libcom_err", + "version": "1.46.6-r0", + "description": "Common error description library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libcom-err:libcom-err:1.46.6-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcom_err@1.46.6-r0?arch=x86_64&upstream=e2fsprogs&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "http://e2fsprogs.sourceforge.net", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5&package-id=13bc051822a24e8d", + "publisher": "Timo Teras ", + "name": "libcrypto1.1", + "version": "1.1.1t-r2", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1t-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcurl@8.0.1-r0?arch=x86_64&upstream=curl&distro=alpine-3.16.5&package-id=6607bdc4c7db4eab", + "publisher": "Natanael Copa ", + "name": "libcurl", + "version": "8.0.1-r0", + "description": "The multiprotocol file transfer library", + "licenses": [ + { + "license": { + "id": "curl" + } + } + ], + "cpe": "cpe:2.3:a:libcurl:libcurl:8.0.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcurl@8.0.1-r0?arch=x86_64&upstream=curl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://curl.se/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgcc@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5&package-id=d2886381f1e7cdb2", + "publisher": "Ariadne Conill ", + "name": "libgcc", + "version": "11.2.1_git20220219-r2", + "description": "GNU C compiler runtime libraries", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgcc:libgcc:11.2.1_git20220219-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgcc@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmaccess@6.0.4?package-id=f3410b3d946e1c4d", + "author": "GitHub Inc.", + "name": "libnpmaccess", + "version": "6.0.4", + "description": "programmatic library for `npm access` commands", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmaccess:libnpmaccess:6.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmaccess@6.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmaccess", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmdiff@4.0.5?package-id=ce3262e2c08529ea", + "author": "GitHub Inc.", + "name": "libnpmdiff", + "version": "4.0.5", + "description": "The registry diff", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmdiff:libnpmdiff:4.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmdiff@4.0.5", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmexec@4.0.14?package-id=902cc2f16bb11ffc", + "author": "GitHub Inc.", + "name": "libnpmexec", + "version": "4.0.14", + "description": "npm exec (npx) programmatic API", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmexec:libnpmexec:4.0.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmexec@4.0.14", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmfund@3.0.5?package-id=201ebcb5d992fa75", + "author": "GitHub Inc.", + "name": "libnpmfund", + "version": "3.0.5", + "description": "Programmatic API for npm fund", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmfund:libnpmfund:3.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmfund@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmhook@8.0.4?package-id=5679bee9e2f7003c", + "author": "GitHub Inc.", + "name": "libnpmhook", + "version": "8.0.4", + "description": "programmatic API for managing npm registry hooks", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmhook:libnpmhook:8.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmhook@8.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmorg@4.0.4?package-id=80c945656f22ba9d", + "author": "GitHub Inc.", + "name": "libnpmorg", + "version": "4.0.4", + "description": "Programmatic api for `npm org` commands", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmorg:libnpmorg:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmorg@4.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmorg", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmpack@4.1.3?package-id=62f6985b14d7de3e", + "author": "GitHub Inc.", + "name": "libnpmpack", + "version": "4.1.3", + "description": "Programmatic API for the bits behind npm pack", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmpack:libnpmpack:4.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmpack@4.1.3", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmpack", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmpublish@6.0.5?package-id=a970d9d2bf422a57", + "author": "GitHub Inc.", + "name": "libnpmpublish", + "version": "6.0.5", + "description": "Programmatic API for the bits behind npm publish and unpublish", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmpublish:libnpmpublish:6.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmpublish@6.0.5", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmpublish", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmsearch@5.0.4?package-id=e3666452dd7e585d", + "author": "GitHub Inc.", + "name": "libnpmsearch", + "version": "5.0.4", + "description": "Programmatic API for searching in npm and compatible registries.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmsearch:libnpmsearch:5.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmsearch@5.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmsearch", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmteam@4.0.4?package-id=95c3c29c4dcd60d1", + "author": "GitHub Inc.", + "name": "libnpmteam", + "version": "4.0.4", + "description": "npm Team management APIs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmteam:libnpmteam:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmteam@4.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmteam", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/libnpmversion@3.0.7?package-id=9ace162e3f4ca294", + "author": "GitHub Inc.", + "name": "libnpmversion", + "version": "3.0.7", + "description": "library to do the things that 'npm version' does", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmversion:libnpmversion:3.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmversion@3.0.7", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5&package-id=609cb94e63dc06dd", + "publisher": "Timo Teras ", + "name": "libssl1.1", + "version": "1.1.1t-r2", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1t-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libstdc++@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5&package-id=9913678ca8fd323d", + "publisher": "Ariadne Conill ", + "name": "libstdc++", + "version": "11.2.1_git20220219-r2", + "description": "GNU C++ standard runtime library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:11.2.1_git20220219-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libstdc++@11.2.1_git20220219-r2?arch=x86_64&upstream=gcc&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libuv@1.44.1-r0?arch=x86_64&distro=alpine-3.16.5&package-id=2fc480e53d82381d", + "publisher": "Natanael Copa ", + "name": "libuv", + "version": "1.44.1-r0", + "description": "Cross-platform asychronous I/O", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libuv:libuv:1.44.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libuv@1.44.1-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://libuv.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libverto@0.3.2-r0?arch=x86_64&distro=alpine-3.16.5&package-id=b3642afc50cf09b9", + "publisher": "Francesco Colista ", + "name": "libverto", + "version": "0.3.2-r0", + "description": "Main loop abstraction library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:npmccallum:libverto:0.3.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libverto@0.3.2-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://github.com/npmccallum/libverto", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxml2@2.9.14-r2?arch=x86_64&distro=alpine-3.16.5&package-id=66abf048c3e1ee7a", + "publisher": "Carlo Landmeter ", + "name": "libxml2", + "version": "2.9.14-r2", + "description": "XML parsing library, version 2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libxml2:libxml2:2.9.14-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxml2@2.9.14-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "http://www.xmlsoft.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lodash@4.17.21?package-id=75dfb844472e21c2", + "author": "John-David Dalton ", + "name": "lodash", + "version": "4.17.21", + "description": "Lodash modular utilities.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash:lodash:4.17.21:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash@4.17.21", + "externalReferences": [ + { + "url": "lodash/lodash", + "type": "distribution" + }, + { + "url": "https://lodash.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/log-symbols@2.2.0?package-id=8d2a47ede40cad4c", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "log-symbols", + "version": "2.2.0", + "description": "Colored symbols for various log levels. Example: ✔︎ Success", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:log-symbols:log-symbols:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/log-symbols@2.2.0", + "externalReferences": [ + { + "url": "sindresorhus/log-symbols", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lowercase-keys@1.0.0?package-id=a1c7235a8f4dc0c2", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "lowercase-keys", + "version": "1.0.0", + "description": "Lowercase the keys of an object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lowercase-keys:lowercase-keys:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lowercase-keys@1.0.0", + "externalReferences": [ + { + "url": "sindresorhus/lowercase-keys", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lowercase-keys@1.0.1?package-id=bfc50b7d3838d505", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "lowercase-keys", + "version": "1.0.1", + "description": "Lowercase the keys of an object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lowercase-keys:lowercase-keys:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lowercase-keys@1.0.1", + "externalReferences": [ + { + "url": "sindresorhus/lowercase-keys", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lowercase-keys@2.0.0?package-id=b45edfabd9c38885", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "lowercase-keys", + "version": "2.0.0", + "description": "Lowercase the keys of an object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lowercase-keys:lowercase-keys:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lowercase-keys@2.0.0", + "externalReferences": [ + { + "url": "sindresorhus/lowercase-keys", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lru-cache@6.0.0?package-id=a9db11b8d6d48a85", + "author": "Isaac Z. Schlueter ", + "name": "lru-cache", + "version": "6.0.0", + "description": "A cache object that deletes the least-recently-used items.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lru-cache:lru-cache:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru-cache@6.0.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-lru-cache.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lru-cache@6.0.0?package-id=c938bdb42f7a80e2", + "author": "Isaac Z. Schlueter ", + "name": "lru-cache", + "version": "6.0.0", + "description": "A cache object that deletes the least-recently-used items.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lru-cache:lru-cache:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru-cache@6.0.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-lru-cache.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/lru-cache@7.13.2?package-id=be5c7dc6ddace7cd", + "author": "Isaac Z. Schlueter ", + "name": "lru-cache", + "version": "7.13.2", + "description": "A cache object that deletes the least-recently-used items.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lru-cache:lru-cache:7.13.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru-cache@7.13.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-lru-cache.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/make-dir@1.3.0?package-id=1a710c6da84dadd", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "make-dir", + "version": "1.3.0", + "description": "Make a directory and its parents if needed - Think `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:make-dir:make-dir:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-dir@1.3.0", + "externalReferences": [ + { + "url": "sindresorhus/make-dir", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/make-dir@2.1.0?package-id=baba47df71577250", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "make-dir", + "version": "2.1.0", + "description": "Make a directory and its parents if needed - Think `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:make-dir:make-dir:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-dir@2.1.0", + "externalReferences": [ + { + "url": "sindresorhus/make-dir", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/make-fetch-happen@10.2.1?package-id=d230079dee920278", + "author": "GitHub Inc.", + "name": "make-fetch-happen", + "version": "10.2.1", + "description": "Opinionated, caching, retrying fetch client", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:make-fetch-happen:make-fetch-happen:10.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-fetch-happen@10.2.1", + "externalReferences": [ + { + "url": "https://github.com/npm/make-fetch-happen.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/media-typer@0.3.0?package-id=edc1220ee5504fb4", + "author": "Douglas Christopher Wilson ", + "name": "media-typer", + "version": "0.3.0", + "description": "Simple RFC 6838 media type parser and formatter", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:media-typer:media-typer:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/media-typer@0.3.0", + "externalReferences": [ + { + "url": "jshttp/media-typer", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/merge-descriptors@1.0.1?package-id=24f38b1ffa4b7603", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "merge-descriptors", + "version": "1.0.1", + "description": "Merge objects using descriptors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:merge-descriptors:merge-descriptors:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/merge-descriptors@1.0.1", + "externalReferences": [ + { + "url": "component/merge-descriptors", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/merge2@1.4.1?package-id=d758b2eba0de62df", + "name": "merge2", + "version": "1.4.1", + "description": "Merge multiple streams into one stream in sequence or parallel.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:teambition:merge2:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/merge2@1.4.1", + "externalReferences": [ + { + "url": "git@github.com:teambition/merge2.git", + "type": "distribution" + }, + { + "url": "https://github.com/teambition/merge2", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/meriyah@4.3.5?package-id=4ea34f63fa9cbf22", + "author": "Kenny F. (https://github.com/KFlash)", + "name": "meriyah", + "version": "4.3.5", + "description": "A 100% compliant, self-hosted javascript parser with high focus on both performance and stability", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:meriyah:meriyah:4.3.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/meriyah@4.3.5", + "externalReferences": [ + { + "url": "https://github.com/meriyah/meriyah", + "type": "distribution" + }, + { + "url": "https://github.com/meriyah/meriyah", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/methods@1.1.2?package-id=9b85a46f19a1f1aa", + "name": "methods", + "version": "1.1.2", + "description": "HTTP methods that node supports", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:methods:methods:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/methods@1.1.2", + "externalReferences": [ + { + "url": "jshttp/methods", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/micromatch@4.0.5?package-id=2bca2e96a69a0be1", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "micromatch", + "version": "4.0.5", + "description": "Glob matching for javascript/node.js. A replacement and faster alternative to minimatch and multimatch.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:micromatch:micromatch:4.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/micromatch@4.0.5", + "externalReferences": [ + { + "url": "micromatch/micromatch", + "type": "distribution" + }, + { + "url": "https://github.com/micromatch/micromatch", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime@1.4.1?package-id=b9a146d2dbc31576", + "author": "Robert Kieffer (http://github.com/broofa)", + "name": "mime", + "version": "1.4.1", + "description": "A comprehensive library for mime-type mapping", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:broofa:mime:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime@1.4.1", + "externalReferences": [ + { + "url": "https://github.com/broofa/node-mime", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-db@1.52.0?package-id=9e5bf4e4d5cc60c1", + "name": "mime-db", + "version": "1.52.0", + "description": "Media Type Database", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-db:mime-db:1.52.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-db@1.52.0", + "externalReferences": [ + { + "url": "jshttp/mime-db", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mime-types@2.1.35?package-id=32ba3cb42be13b7a", + "name": "mime-types", + "version": "2.1.35", + "description": "The ultimate javascript content-type utility.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-types:mime-types:2.1.35:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-types@2.1.35", + "externalReferences": [ + { + "url": "jshttp/mime-types", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mimic-fn@1.2.0?package-id=d6d651a648d6c1cf", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "mimic-fn", + "version": "1.2.0", + "description": "Make a function mimic another one", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mimic-fn:mimic-fn:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mimic-fn@1.2.0", + "externalReferences": [ + { + "url": "sindresorhus/mimic-fn", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mimic-response@1.0.1?package-id=b2dc0c64c0cc32ba", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "mimic-response", + "version": "1.0.1", + "description": "Mimic a Node.js HTTP response stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mimic-response:mimic-response:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/mimic-response@1.0.1", + "externalReferences": [ + { + "url": "sindresorhus/mimic-response", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mimic-response@3.1.0?package-id=3dabc576ff3c3835", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "mimic-response", + "version": "3.1.0", + "description": "Mimic a Node.js HTTP response stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mimic-response:mimic-response:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mimic-response@3.1.0", + "externalReferences": [ + { + "url": "sindresorhus/mimic-response", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.1.2?package-id=32b47b032f3721ab", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.1.2", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.1.2?package-id=7392185ecbfd5435", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.1.2", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@3.1.2?package-id=4a815c2235402e8f", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.1.2", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimatch@5.1.0?package-id=7bf8dbc1a2543e83", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "5.1.0", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:5.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@5.1.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minimist@1.2.8?package-id=b5346d2efe922f83", + "author": "James Halliday (http://substack.net)", + "name": "minimist", + "version": "1.2.8", + "description": "parse argument options", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minimistjs:minimist:1.2.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimist@1.2.8", + "externalReferences": [ + { + "url": "git://github.com/minimistjs/minimist.git", + "type": "distribution" + }, + { + "url": "https://github.com/minimistjs/minimist", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minio@7.0.12?package-id=4db039cba8df2de", + "author": "MinIO, Inc. (https://min.io)", + "name": "minio", + "version": "7.0.12", + "description": "S3 Compatible Cloud Storage client", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:minio:minio:7.0.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/minio@7.0.12", + "externalReferences": [ + { + "url": "git+https://github.com/minio/minio-js.git", + "type": "distribution" + }, + { + "url": "https://github.com/minio/minio-js#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass@3.3.4?package-id=b613ca6e3e5e1fdb", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "3.3.4", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:3.3.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@3.3.4", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass@3.3.6?package-id=155d37b12b10bb25", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "3.3.6", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-collect@1.0.2?package-id=48596b1d4dbb4f19", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-collect", + "version": "1.0.2", + "description": "A Minipass stream that collects all the data into a single chunk", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-collect:minipass-collect:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-collect@1.0.2" + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-fetch@2.1.1?package-id=1efc5437ba452e1d", + "author": "GitHub Inc.", + "name": "minipass-fetch", + "version": "2.1.1", + "description": "An implementation of window.fetch in Node.js using Minipass streams", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minipass-fetch:minipass-fetch:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-fetch@2.1.1", + "externalReferences": [ + { + "url": "https://github.com/npm/minipass-fetch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-flush@1.0.5?package-id=f00a260926226ede", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-flush", + "version": "1.0.5", + "description": "A Minipass stream that calls a flush function before emitting 'end'", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-flush:minipass-flush:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-flush@1.0.5", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass-flush.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-json-stream@1.0.1?package-id=43ed818882788b6b", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-json-stream", + "version": "1.0.1", + "description": "Like JSONStream, but using Minipass streams", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minipass-json-stream:minipass-json-stream:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-json-stream@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/minipass-json-stream.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-pipeline@1.2.4?package-id=891713a52fe6cc27", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-pipeline", + "version": "1.2.4", + "description": "create a pipeline of streams using Minipass", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-pipeline@1.2.4" + }, + { + "type": "library", + "bom-ref": "pkg:npm/minipass-sized@1.0.3?package-id=cd4842c35733398b", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-sized", + "version": "1.0.3", + "description": "A Minipass stream that raises an error if you get a different number of bytes than expected", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-sized:minipass-sized:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-sized@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass-sized.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minizlib@2.1.2?package-id=a651644b4f6a3e3", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minizlib", + "version": "2.1.2", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minizlib:minizlib:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minizlib@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/minizlib@2.1.2?package-id=7bb75b451bb46790", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minizlib", + "version": "2.1.2", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minizlib:minizlib:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minizlib@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp@0.5.6?package-id=652fb6b912e95935", + "author": "James Halliday (http://substack.net)", + "name": "mkdirp", + "version": "0.5.6", + "description": "Recursively mkdir, like `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:substack:mkdirp:0.5.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp@0.5.6", + "externalReferences": [ + { + "url": "https://github.com/substack/node-mkdirp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp@1.0.4?package-id=9695628e211e131d", + "name": "mkdirp", + "version": "1.0.4", + "description": "Recursively mkdir, like `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:mkdirp:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp@1.0.4", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-mkdirp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp@1.0.4?package-id=f1b6bb9b4d6c0513", + "name": "mkdirp", + "version": "1.0.4", + "description": "Recursively mkdir, like `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:mkdirp:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp@1.0.4", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-mkdirp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mkdirp-infer-owner@2.0.0?package-id=cd2840516db98e09", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "mkdirp-infer-owner", + "version": "2.0.0", + "description": "mkdirp, but chown to the owner of the containing folder if possible and necessary", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:mkdirp-infer-owner:mkdirp-infer-owner:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp-infer-owner@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/mkdirp-infer-owner", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.0.0?package-id=5a1105814fc945d6", + "name": "ms", + "version": "2.0.0", + "description": "Tiny milisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ms:ms:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.0.0", + "externalReferences": [ + { + "url": "zeit/ms", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.2?package-id=baab6160abc8414d", + "name": "ms", + "version": "2.1.2", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ms:ms:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "url": "zeit/ms", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ms@2.1.3?package-id=56db25c219fa0f4e", + "name": "ms", + "version": "2.1.3", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ms:ms:2.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.3", + "externalReferences": [ + { + "url": "vercel/ms", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/multistream@4.1.0?package-id=efa7c8dfda52ec0d", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "multistream", + "version": "4.1.0", + "description": "A stream that emits multiple other streams one after another (streams3)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:multistream:multistream:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/multistream@4.1.0", + "externalReferences": [ + { + "url": "git://github.com/feross/multistream.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/multistream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.2.3-r2?arch=x86_64&distro=alpine-3.16.5&package-id=24c6089b81ca7d19", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.2.3-r2", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.2.3-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.2.3-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.3-r2?arch=x86_64&upstream=musl&distro=alpine-3.16.5&package-id=d33c14d727ae74d1", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.2.3-r2", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.2.3-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.2.3-r2?arch=x86_64&upstream=musl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/mute-stream@0.0.8?package-id=b093eec725f75ac9", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "mute-stream", + "version": "0.0.8", + "description": "Bytes go in, but they don't come out (when muted).", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:mute-stream:mute-stream:0.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/mute-stream@0.0.8", + "externalReferences": [ + { + "url": "git://github.com/isaacs/mute-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/negotiator@0.6.3?package-id=87cc6cb502ab228a", + "name": "negotiator", + "version": "0.6.3", + "description": "HTTP content negotiation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:negotiator:negotiator:0.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/negotiator@0.6.3", + "externalReferences": [ + { + "url": "jshttp/negotiator", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/negotiator@0.6.3?package-id=9f94722cfe2aef45", + "name": "negotiator", + "version": "0.6.3", + "description": "HTTP content negotiation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:negotiator:negotiator:0.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/negotiator@0.6.3", + "externalReferences": [ + { + "url": "jshttp/negotiator", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/nexe@4.0.0-rc.2?package-id=2230662d44dba8ff", + "name": "nexe", + "version": "4.0.0-rc.2", + "description": "Create a single executable out of your Node.js application", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nexe:nexe:4.0.0-rc.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/nexe@4.0.0-rc.2", + "externalReferences": [ + { + "url": "git://github.com/nexe/nexe.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/nexe-fs@1.0.1?package-id=d9668f4a991d0db7", + "author": "Caleb Boyd", + "name": "nexe-fs", + "version": "1.0.1", + "description": "Virtual File System used by nexe", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nexe-fs:nexe-fs:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/nexe-fs@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/nghttp2-libs@1.47.0-r0?arch=x86_64&upstream=nghttp2&distro=alpine-3.16.5&package-id=3f26eb4be5f62dce", + "publisher": "Francesco Colista ", + "name": "nghttp2-libs", + "version": "1.47.0-r0", + "description": "Experimental HTTP/2 client, server and proxy (libraries)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nghttp2-libs:nghttp2-libs:1.47.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/nghttp2-libs@1.47.0-r0?arch=x86_64&upstream=nghttp2&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://nghttp2.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/nice-try@1.0.5?package-id=7d1b9df503880447", + "name": "nice-try", + "version": "1.0.5", + "description": "Tries to execute a function and discards any error that occurs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:electerious:nice-try:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/nice-try@1.0.5", + "externalReferences": [ + { + "url": "https://github.com/electerious/nice-try.git", + "type": "distribution" + }, + { + "url": "https://github.com/electerious/nice-try", + "type": "website" + } + ] + }, + { + "type": "application", + "bom-ref": "pkg:generic/node@16.20.0?package-id=c3df0c8aa56599a1", + "name": "node", + "version": "16.20.0", + "cpe": "cpe:2.3:a:nodejs:node.js:16.20.0:*:*:*:*:*:*:*", + "purl": "pkg:generic/node@16.20.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/node-gyp@9.1.0?package-id=594531fb28fce181", + "author": "Nathan Rajlich (http://tootallnate.net)", + "name": "node-gyp", + "version": "9.1.0", + "description": "Node.js native addon build tool", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-gyp:node-gyp:9.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-gyp@9.1.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/node-gyp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/nopt@5.0.0?package-id=16f8d211f06e4fc1", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "nopt", + "version": "5.0.0", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:nopt:nopt:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/nopt@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/nopt.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/nopt@6.0.0?package-id=2da699f46c59247", + "author": "GitHub Inc.", + "name": "nopt", + "version": "6.0.0", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:nopt:nopt:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/nopt@6.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/nopt.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/normalize-package-data@4.0.1?package-id=f65ac6113e729b71", + "author": "GitHub Inc.", + "name": "normalize-package-data", + "version": "4.0.1", + "description": "Normalizes data that can be found in package.json files.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:normalize-package-data:normalize-package-data:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/normalize-package-data@4.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/normalize-package-data.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/normalize-url@2.0.1?package-id=3ddb8a43380fdcb7", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "normalize-url", + "version": "2.0.1", + "description": "Normalize a URL", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:normalize-url:normalize-url:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/normalize-url@2.0.1", + "externalReferences": [ + { + "url": "sindresorhus/normalize-url", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/normalize-url@6.1.0?package-id=77f3b52ff425c65e", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "normalize-url", + "version": "6.1.0", + "description": "Normalize a URL", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:normalize-url:normalize-url:6.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/normalize-url@6.1.0", + "externalReferences": [ + { + "url": "sindresorhus/normalize-url", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm@8.19.4?package-id=3a7215c0f0fd939a", + "author": "GitHub Inc.", + "name": "npm", + "version": "8.19.4", + "description": "a package manager for JavaScript", + "licenses": [ + { + "license": { + "id": "Artistic-2.0" + } + } + ], + "cpe": "cpe:2.3:a:npm:npm:8.19.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm@8.19.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://docs.npmjs.com/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-audit-report@3.0.0?package-id=838d59a41103d415", + "author": "GitHub Inc.", + "name": "npm-audit-report", + "version": "3.0.0", + "description": "Given a response from the npm security api, render it into a variety of security reports", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-audit-report:npm-audit-report:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-audit-report@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-audit-report.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-audit-report#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-bundled@1.1.2?package-id=d3fc92546524f1a0", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "npm-bundled", + "version": "1.1.2", + "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-bundled:npm-bundled:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-bundled@1.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-bundled.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-bundled@2.0.1?package-id=4342e4ccfcb927ca", + "author": "GitHub Inc.", + "name": "npm-bundled", + "version": "2.0.1", + "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-bundled:npm-bundled:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-bundled@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-bundled.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-conf@1.1.3?package-id=65c3638215d98b36", + "author": "Kevin Martensson (github.com/kevva)", + "name": "npm-conf", + "version": "1.1.3", + "description": "Get the npm config", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:npm-conf:npm-conf:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-conf@1.1.3", + "externalReferences": [ + { + "url": "kevva/npm-conf", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-init@0.0.0?package-id=e58118b5aaeeedd7", + "name": "npm-init", + "version": "0.0.0", + "description": "an initter you init wit, innit?", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:npm-init:npm-init:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-init@0.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-install-checks@5.0.0?package-id=ea3011565b04383b", + "author": "GitHub Inc.", + "name": "npm-install-checks", + "version": "5.0.0", + "description": "Check the engines and platform fields in package.json", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:npm-install-checks:npm-install-checks:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-install-checks@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-install-checks.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@1.0.1?package-id=7cccc2d8907ef9bb", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "npm-normalize-package-bin", + "version": "1.0.1", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-normalize-package-bin", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=3b502df6a54faf04", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=cb496c88bc54cdd7", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=3675dcedd841f8b6", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=a6c4eec149dbad2b", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=b373bbb7c439b789", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-package-arg@9.1.0?package-id=30ebe98710a08c64", + "author": "GitHub Inc.", + "name": "npm-package-arg", + "version": "9.1.0", + "description": "Parse the things that can be arguments to `npm install`", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-package-arg:npm-package-arg:9.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-package-arg@9.1.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-package-arg.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-package-arg", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-packlist@5.1.3?package-id=e87ec46a213d7a87", + "author": "GitHub Inc.", + "name": "npm-packlist", + "version": "5.1.3", + "description": "Get a list of the files to add from a folder into an npm package", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-packlist:npm-packlist:5.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-packlist@5.1.3", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-packlist.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-pick-manifest@7.0.2?package-id=a9dc194030f7ba31", + "author": "GitHub Inc.", + "name": "npm-pick-manifest", + "version": "7.0.2", + "description": "Resolves a matching manifest from a package metadata document according to standard npm semver resolution rules.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-pick-manifest:npm-pick-manifest:7.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-pick-manifest@7.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-pick-manifest.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-profile@6.2.1?package-id=4b7db9f7ec8bd8ec", + "author": "GitHub Inc.", + "name": "npm-profile", + "version": "6.2.1", + "description": "Library for updating an npmjs.com profile", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-profile:npm-profile:6.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-profile@6.2.1", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-profile.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-registry-fetch@13.3.1?package-id=4a24a52ce2bed90", + "author": "GitHub Inc.", + "name": "npm-registry-fetch", + "version": "13.3.1", + "description": "Fetch-based http client for use with npm registry APIs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-registry-fetch:npm-registry-fetch:13.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-registry-fetch@13.3.1", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-registry-fetch.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npm-user-validate@1.0.1?package-id=6154858fa52c8fec", + "author": "Robert Kowalski ", + "name": "npm-user-validate", + "version": "1.0.1", + "description": "User validations for npm", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:npm-user-validate:npm-user-validate:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-user-validate@1.0.1", + "externalReferences": [ + { + "url": "git://github.com/npm/npm-user-validate.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/npmlog@6.0.2?package-id=e1d7f39551f111f", + "author": "GitHub Inc.", + "name": "npmlog", + "version": "6.0.2", + "description": "logger for npm", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npmlog:npmlog:6.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npmlog@6.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/npmlog.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/oauth-sign@0.9.0?package-id=db172ac1d3949e1b", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "oauth-sign", + "version": "0.9.0", + "description": "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:oauth-sign:oauth-sign:0.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/oauth-sign@0.9.0", + "externalReferences": [ + { + "url": "https://github.com/mikeal/oauth-sign", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/object-assign@4.1.1?package-id=9f37d7ea88ae7c48", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "object-assign", + "version": "4.1.1", + "description": "ES2015 `Object.assign()` ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-assign:object-assign:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-assign@4.1.1", + "externalReferences": [ + { + "url": "sindresorhus/object-assign", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/on-finished@2.3.0?package-id=10e3e142a47fe504", + "name": "on-finished", + "version": "2.3.0", + "description": "Execute a callback when a request closes, finishes, or errors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:on-finished:on-finished:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/on-finished@2.3.0", + "externalReferences": [ + { + "url": "jshttp/on-finished", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/once@1.4.0?package-id=2bfb1efabaee8e52", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "once", + "version": "1.4.0", + "description": "Run a function exactly one time", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:once:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/once", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/once@1.4.0?package-id=931b0bd981a31418", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "once", + "version": "1.4.0", + "description": "Run a function exactly one time", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:once:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/once", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/onetime@2.0.1?package-id=fc7c5811e42bd04a", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "onetime", + "version": "2.0.1", + "description": "Ensure a function is only called once", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:onetime:onetime:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/onetime@2.0.1", + "externalReferences": [ + { + "url": "sindresorhus/onetime", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/open@7.4.2?package-id=8cdd314bd12da921", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "open", + "version": "7.4.2", + "description": "Open stuff like URLs, files, executables. Cross-platform.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:open:open:7.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/open@7.4.2", + "externalReferences": [ + { + "url": "sindresorhus/open", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/opener@1.5.2?package-id=44a3614f9f359ab5", + "author": "Domenic Denicola (https://domenic.me/)", + "name": "opener", + "version": "1.5.2", + "description": "Opens stuff, like webpages and files and executables, cross-platform", + "licenses": [ + { + "license": { + "name": "(WTFPL OR MIT)" + } + } + ], + "cpe": "cpe:2.3:a:opener:opener:1.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/opener@1.5.2", + "externalReferences": [ + { + "url": "domenic/opener", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ora@3.4.0?package-id=9f0a98fd8d0442fd", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ora", + "version": "3.4.0", + "description": "Elegant terminal spinner", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ora:ora:3.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ora@3.4.0", + "externalReferences": [ + { + "url": "sindresorhus/ora", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/os-tmpdir@1.0.2?package-id=aac8f32471437c49", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "os-tmpdir", + "version": "1.0.2", + "description": "Node.js os.tmpdir() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:os-tmpdir:os-tmpdir:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/os-tmpdir@1.0.2", + "externalReferences": [ + { + "url": "sindresorhus/os-tmpdir", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-cancelable@0.4.1?package-id=88fc877d9e7491d1", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-cancelable", + "version": "0.4.1", + "description": "Create a promise that can be canceled", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-cancelable:p-cancelable:0.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-cancelable@0.4.1", + "externalReferences": [ + { + "url": "sindresorhus/p-cancelable", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-cancelable@2.1.1?package-id=b3fbdefc1d12c5b2", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-cancelable", + "version": "2.1.1", + "description": "Create a promise that can be canceled", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-cancelable:p-cancelable:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-cancelable@2.1.1", + "externalReferences": [ + { + "url": "sindresorhus/p-cancelable", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-event@2.3.1?package-id=235c2d8f378c5859", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-event", + "version": "2.3.1", + "description": "Promisify an event by waiting for it to be emitted", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-event:p-event:2.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-event@2.3.1", + "externalReferences": [ + { + "url": "sindresorhus/p-event", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-finally@1.0.0?package-id=da6b579e26c23918", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-finally", + "version": "1.0.0", + "description": "`Promise#finally()` ponyfill - Invoked when the promise is settled regardless of outcome", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-finally:p-finally:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-finally@1.0.0", + "externalReferences": [ + { + "url": "sindresorhus/p-finally", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-is-promise@1.1.0?package-id=3f226917bfd057cf", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-is-promise", + "version": "1.1.0", + "description": "Check if something is a promise", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-is-promise:p-is-promise:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-is-promise@1.1.0", + "externalReferences": [ + { + "url": "sindresorhus/p-is-promise", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-map@4.0.0?package-id=1c07a8cbe4bd91d5", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "p-map", + "version": "4.0.0", + "description": "Map over promises concurrently", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-map:p-map:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-map@4.0.0", + "externalReferences": [ + { + "url": "sindresorhus/p-map", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/p-timeout@2.0.1?package-id=7cc800cb9fdc544", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-timeout", + "version": "2.0.1", + "description": "Timeout a promise after a specified amount of time", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-timeout:p-timeout:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-timeout@2.0.1", + "externalReferences": [ + { + "url": "sindresorhus/p-timeout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pacote@13.6.2?package-id=481670a57d8719a5", + "author": "GitHub Inc.", + "name": "pacote", + "version": "13.6.2", + "description": "JavaScript package downloader", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:pacote:pacote:13.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/pacote@13.6.2", + "externalReferences": [ + { + "url": "https://github.com/npm/pacote.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/parse-conflict-json@2.0.2?package-id=94638d4f43f17ad7", + "author": "GitHub Inc.", + "name": "parse-conflict-json", + "version": "2.0.2", + "description": "Parse a JSON string that has git merge conflicts, resolving if possible", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:parse-conflict-json:parse-conflict-json:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/parse-conflict-json@2.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/parse-conflict-json.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/parseurl@1.3.3?package-id=5a8f19386b323f4b", + "name": "parseurl", + "version": "1.3.3", + "description": "parse a url with memoization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:parseurl:parseurl:1.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/parseurl@1.3.3", + "externalReferences": [ + { + "url": "pillarjs/parseurl", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/patch-package@6.5.1?package-id=f886bed9541911fa", + "author": "David Sheldrick", + "name": "patch-package", + "version": "6.5.1", + "description": "Fix broken node modules with no fuss", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:patch-package:patch-package:6.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/patch-package@6.5.1", + "externalReferences": [ + { + "url": "github:ds300/patch-package", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=ed58648f2f773bd9", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-is-absolute", + "version": "1.0.1", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "sindresorhus/path-is-absolute", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=70cf293874d995a2", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-is-absolute", + "version": "1.0.1", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "sindresorhus/path-is-absolute", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-key@2.0.1?package-id=aa889ae5e9059d41", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-key", + "version": "2.0.1", + "description": "Get the PATH environment variable key cross-platform", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-key:path-key:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-key@2.0.1", + "externalReferences": [ + { + "url": "sindresorhus/path-key", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-to-regexp@0.1.7?package-id=ccbe7b36b309edc1", + "name": "path-to-regexp", + "version": "0.1.7", + "description": "Express style path to RegExp utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-to-regexp:path-to-regexp:0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-to-regexp@0.1.7", + "externalReferences": [ + { + "url": "https://github.com/component/path-to-regexp.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/path-type@4.0.0?package-id=111389da9861c230", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-type", + "version": "4.0.0", + "description": "Check if a path is a file, directory, or symlink", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-type:path-type:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-type@4.0.0", + "externalReferences": [ + { + "url": "sindresorhus/path-type", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pend@1.2.0?package-id=c626cebd6f15c529", + "author": "Andrew Kelley ", + "name": "pend", + "version": "1.2.0", + "description": "dead-simple optimistic async helper", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:andrewrk:pend:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pend@1.2.0", + "externalReferences": [ + { + "url": "git://github.com/andrewrk/node-pend.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/performance-now@2.1.0?package-id=571cf474f11938e4", + "author": "Braveg1rl ", + "name": "performance-now", + "version": "2.1.0", + "description": "Implements performance.now (based on process.hrtime).", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:performance-now:performance-now:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/performance-now@2.1.0", + "externalReferences": [ + { + "url": "git://github.com/braveg1rl/performance-now.git", + "type": "distribution" + }, + { + "url": "https://github.com/braveg1rl/performance-now", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/picomatch@2.3.1?package-id=ff31ef2760eb1e42", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "picomatch", + "version": "2.3.1", + "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:micromatch:picomatch:2.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/picomatch@2.3.1", + "externalReferences": [ + { + "url": "micromatch/picomatch", + "type": "distribution" + }, + { + "url": "https://github.com/micromatch/picomatch", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pify@2.3.0?package-id=4a597243f8bf0ba1", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "pify", + "version": "2.3.0", + "description": "Promisify a callback-style function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pify:pify:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pify@2.3.0", + "externalReferences": [ + { + "url": "sindresorhus/pify", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pify@2.3.0?package-id=3a9abe2be0a4671d", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "pify", + "version": "2.3.0", + "description": "Promisify a callback-style function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pify:pify:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pify@2.3.0", + "externalReferences": [ + { + "url": "sindresorhus/pify", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pify@3.0.0?package-id=48faab299d974c49", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "pify", + "version": "3.0.0", + "description": "Promisify a callback-style function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pify:pify:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pify@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/pify", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pify@3.0.0?package-id=bd1f6f3d1c1c216d", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "pify", + "version": "3.0.0", + "description": "Promisify a callback-style function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pify:pify:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pify@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/pify", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pify@3.0.0?package-id=63783c44baabb416", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "pify", + "version": "3.0.0", + "description": "Promisify a callback-style function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pify:pify:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pify@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/pify", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pify@4.0.1?package-id=3a8ac21fa7d5c8a0", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "pify", + "version": "4.0.1", + "description": "Promisify a callback-style function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pify:pify:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/pify@4.0.1", + "externalReferences": [ + { + "url": "sindresorhus/pify", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pinkie@2.0.4?package-id=e1d834463167bf3a", + "author": "Vsevolod Strukchinsky (github.com/floatdrop)", + "name": "pinkie", + "version": "2.0.4", + "description": "Itty bitty little widdle twinkie pinkie ES2015 Promise implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pinkie:pinkie:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/pinkie@2.0.4", + "externalReferences": [ + { + "url": "floatdrop/pinkie", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pinkie-promise@2.0.1?package-id=309815f14d8b0b5c", + "author": "Vsevolod Strukchinsky (github.com/floatdrop)", + "name": "pinkie-promise", + "version": "2.0.1", + "description": "ES2015 Promise ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pinkie-promise:pinkie-promise:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/pinkie-promise@2.0.1", + "externalReferences": [ + { + "url": "floatdrop/pinkie-promise", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pliant-worker@1.0.0?package-id=c7f9b63b5efec2ca", + "name": "pliant-worker", + "version": "1.0.0", + "description": "pliant-worker", + "cpe": "cpe:2.3:a:pliant-worker:pliant-worker:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pliant-worker@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/pliant-worker-nodejs-remote@0.0.0?package-id=f0c05e24368b0207", + "name": "pliant-worker-nodejs-remote", + "version": "0.0.0", + "cpe": "cpe:2.3:a:pliant-worker-nodejs-remote:pliant-worker-nodejs-remote:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pliant-worker-nodejs-remote@0.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:npm/postcss-selector-parser@6.0.10?package-id=29dd6871004e9325", + "name": "postcss-selector-parser", + "version": "6.0.10", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-selector-parser:postcss-selector-parser:6.0.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-selector-parser@6.0.10", + "externalReferences": [ + { + "url": "postcss/postcss-selector-parser", + "type": "distribution" + }, + { + "url": "https://github.com/postcss/postcss-selector-parser", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/prepend-http@2.0.0?package-id=b67c371036158d00", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "prepend-http", + "version": "2.0.0", + "description": "Prepend `http://` to humanized URLs like todomvc.com and localhost", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:prepend-http:prepend-http:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/prepend-http@2.0.0", + "externalReferences": [ + { + "url": "sindresorhus/prepend-http", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/proc-log@2.0.1?package-id=a4591425ab5edc60", + "author": "GitHub Inc.", + "name": "proc-log", + "version": "2.0.1", + "description": "just emit 'log' events on the process object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:proc-log:proc-log:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/proc-log@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/proc-log.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/process-nextick-args@2.0.1?package-id=d17a81662c772b1a", + "name": "process-nextick-args", + "version": "2.0.1", + "description": "process.nextTick but always with args", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:process-nextick-args:process-nextick-args:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/process-nextick-args@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/calvinmetcalf/process-nextick-args.git", + "type": "distribution" + }, + { + "url": "https://github.com/calvinmetcalf/process-nextick-args", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-all-reject-late@1.0.1?package-id=7b92ff8460614d4f", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "promise-all-reject-late", + "version": "1.0.1", + "description": "Like Promise.all, but save rejections until all promises are resolved", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promise-all-reject-late:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-all-reject-late@1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-call-limit@1.0.1?package-id=2b0b41bd7b0aa502", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "promise-call-limit", + "version": "1.0.1", + "description": "Call an array of promise-returning functions, restricting concurrency to a specified limit.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promise-call-limit:promise-call-limit:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-call-limit@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/promise-call-limit", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-inflight@1.0.1?package-id=8ae6caef1e6290fe", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "promise-inflight", + "version": "1.0.1", + "description": "One promise for multiple requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promise-inflight:promise-inflight:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-inflight@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/promise-inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/promise-inflight#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promise-retry@2.0.1?package-id=7d483cd4a8ed637e", + "author": "IndigoUnited (http://indigounited.com)", + "name": "promise-retry", + "version": "2.0.1", + "description": "Retries a function that returns a promise, leveraging the power of the retry module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:promise-retry:promise-retry:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-retry@2.0.1", + "externalReferences": [ + { + "url": "git://github.com/IndigoUnited/node-promise-retry.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/promzard@0.3.0?package-id=33cefe299422041", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "promzard", + "version": "0.3.0", + "description": "prompting wizardly", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promzard:promzard:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/promzard@0.3.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/promzard", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/proto-list@1.2.4?package-id=ef38b019413f5508", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "proto-list", + "version": "1.2.4", + "description": "A utility for managing a prototype chain", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:proto-list:proto-list:1.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/proto-list@1.2.4", + "externalReferences": [ + { + "url": "https://github.com/isaacs/proto-list", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/protobuf-c@1.4.1-r0?arch=x86_64&distro=alpine-3.16.5&package-id=305c4e951a4443ba", + "publisher": "Leonardo Arena ", + "name": "protobuf-c", + "version": "1.4.1-r0", + "description": "Protocol Buffers implementation in C", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:protobuf-c:protobuf-c:1.4.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/protobuf-c@1.4.1-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://github.com/protobuf-c/protobuf-c", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/proxy-addr@2.0.7?package-id=53c4580aea322e7e", + "author": "Douglas Christopher Wilson ", + "name": "proxy-addr", + "version": "2.0.7", + "description": "Determine address of proxied request", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:proxy-addr:proxy-addr:2.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/proxy-addr@2.0.7", + "externalReferences": [ + { + "url": "jshttp/proxy-addr", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/psl@1.9.0?package-id=53b253f7b10f23e5", + "author": "Lupo Montero (https://lupomontero.com/)", + "name": "psl", + "version": "1.9.0", + "description": "Domain name parser based on the Public Suffix List", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:psl:psl:1.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/psl@1.9.0", + "externalReferences": [ + { + "url": "git@github.com:lupomontero/psl.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pump@3.0.0?package-id=2fafbb58384dcf73", + "author": "Mathias Buus Madsen ", + "name": "pump", + "version": "3.0.0", + "description": "pipe streams together and close all of them if one of them closes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mafintosh:pump:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pump@3.0.0", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/pump.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/punycode@2.3.0?package-id=d7aa24828b6ffa72", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "punycode", + "version": "2.3.0", + "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mathiasbynens:punycode:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/punycode@2.3.0", + "externalReferences": [ + { + "url": "https://github.com/mathiasbynens/punycode.js.git", + "type": "distribution" + }, + { + "url": "https://mths.be/punycode", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/qrcode-terminal@0.12.0?package-id=83c91f496595f73", + "name": "qrcode-terminal", + "version": "0.12.0", + "description": "QRCodes, in the terminal", + "licenses": [ + { + "license": { + "name": "Apache 2.0" + } + } + ], + "cpe": "cpe:2.3:a:qrcode-terminal:qrcode-terminal:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/qrcode-terminal@0.12.0", + "externalReferences": [ + { + "url": "https://github.com/gtanner/qrcode-terminal", + "type": "distribution" + }, + { + "url": "https://github.com/gtanner/qrcode-terminal", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/qs@6.5.2?package-id=8a6e990df3bbe823", + "name": "qs", + "version": "6.5.2", + "description": "A querystring parser that supports nesting and arrays, with a depth limit", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:ljharb:qs:6.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/qs@6.5.2", + "externalReferences": [ + { + "url": "https://github.com/ljharb/qs.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/qs", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/query-string@5.1.1?package-id=e0fbe97b63bccbba", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "query-string", + "version": "5.1.1", + "description": "Parse and stringify URL query strings", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:query-string:query-string:5.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/query-string@5.1.1", + "externalReferences": [ + { + "url": "sindresorhus/query-string", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/querystring@0.2.0?package-id=7800be6cfd3a3ad2", + "author": "Irakli Gozalishvili ", + "name": "querystring", + "version": "0.2.0", + "description": "Node's querystring module for all engines.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:querystring:querystring:0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/querystring@0.2.0", + "externalReferences": [ + { + "url": "git://github.com/Gozala/querystring.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/queue-microtask@1.2.3?package-id=16385b23543db315", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "queue-microtask", + "version": "1.2.3", + "description": "fast, tiny `queueMicrotask` shim for modern engines", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:queue-microtask:queue-microtask:1.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/queue-microtask@1.2.3", + "externalReferences": [ + { + "url": "git://github.com/feross/queue-microtask.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/queue-microtask", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/quick-lru@5.1.1?package-id=b731ba5df3f073f1", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "quick-lru", + "version": "5.1.1", + "description": "Simple “Least Recently Used” (LRU) cache", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:quick-lru:quick-lru:5.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/quick-lru@5.1.1", + "externalReferences": [ + { + "url": "sindresorhus/quick-lru", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/range-parser@1.2.1?package-id=4426c7b6b8b9fe0c", + "author": "TJ Holowaychuk (http://tjholowaychuk.com)", + "name": "range-parser", + "version": "1.2.1", + "description": "Range header field string parser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:range-parser:range-parser:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/range-parser@1.2.1", + "externalReferences": [ + { + "url": "jshttp/range-parser", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/raw-body@2.3.3?package-id=c72a71e2075f827c", + "author": "Jonathan Ong (http://jongleberry.com)", + "name": "raw-body", + "version": "2.3.3", + "description": "Get and validate the raw body of a readable stream.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:raw-body:raw-body:2.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/raw-body@2.3.3", + "externalReferences": [ + { + "url": "stream-utils/raw-body", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read@1.0.7?package-id=cf65e05575a1a15", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "read", + "version": "1.0.7", + "description": "read(1) for node programs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:read:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/read@1.0.7", + "externalReferences": [ + { + "url": "git://github.com/isaacs/read.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-cmd-shim@3.0.0?package-id=4b927be3f703982b", + "author": "GitHub Inc.", + "name": "read-cmd-shim", + "version": "3.0.0", + "description": "Figure out what a cmd-shim is pointing at. This acts as the equivalent of fs.readlink.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-cmd-shim:read-cmd-shim:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-cmd-shim@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/read-cmd-shim.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/read-cmd-shim#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-package-json@5.0.2?package-id=d15e27cd5cddf2b4", + "author": "GitHub Inc.", + "name": "read-package-json", + "version": "5.0.2", + "description": "The thing npm uses to read package.json files with semantics and defaults and validation", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-package-json:read-package-json:5.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-package-json@5.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/read-package-json.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/read-package-json-fast@2.0.3?package-id=bb9e08c93f4b4c89", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "read-package-json-fast", + "version": "2.0.3", + "description": "Like read-package-json, but faster", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-package-json-fast:read-package-json-fast:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-package-json-fast@2.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/npm/read-package-json-fast.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.8?package-id=9a0f417e2cbd0bab", + "name": "readable-stream", + "version": "2.3.8", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.8", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.8?package-id=72b4527116742a58", + "name": "readable-stream", + "version": "2.3.8", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.8", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@2.3.8?package-id=89c35a8ee4fb9cb7", + "name": "readable-stream", + "version": "2.3.8", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.8", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@3.6.0?package-id=32d9c32dd3126020", + "name": "readable-stream", + "version": "3.6.0", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:3.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@3.6.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readable-stream@3.6.2?package-id=58c37a95ac33b693", + "name": "readable-stream", + "version": "3.6.2", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:3.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@3.6.2", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/readdir-scoped-modules@1.1.0?package-id=33ac24742869be8b", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "readdir-scoped-modules", + "version": "1.1.0", + "description": "Like `fs.readdir` but handling `@org/module` dirs as if they were a single entry.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:readdir-scoped-modules:readdir-scoped-modules:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/readdir-scoped-modules@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/npm/readdir-scoped-modules", + "type": "distribution" + }, + { + "url": "https://github.com/npm/readdir-scoped-modules", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/request@2.88.2?package-id=9d4ba60210bc5002", + "author": "Mikeal Rogers ", + "name": "request", + "version": "2.88.2", + "description": "Simplified HTTP request client.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:request:request:2.88.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/request@2.88.2", + "externalReferences": [ + { + "url": "https://github.com/request/request.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/request-promise-core@1.1.4?package-id=8d3a6ff56740e0e7", + "author": "Nicolai Kamenzky (https://github.com/analog-nico)", + "name": "request-promise-core", + "version": "1.1.4", + "description": "Core Promise support implementation for the simplified HTTP request client 'request'.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:request-promise-core:request-promise-core:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/request-promise-core@1.1.4", + "externalReferences": [ + { + "url": "git+https://github.com/request/promise-core.git", + "type": "distribution" + }, + { + "url": "https://github.com/request/promise-core#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/request-promise-native@1.0.9?package-id=8a851bd442a13a0b", + "author": "Nicolai Kamenzky (https://github.com/analog-nico)", + "name": "request-promise-native", + "version": "1.0.9", + "description": "The simplified HTTP request client 'request' with Promise support. Powered by native ES6 promises.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:request-promise-native:request-promise-native:1.0.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/request-promise-native@1.0.9", + "externalReferences": [ + { + "url": "git+https://github.com/request/request-promise-native.git", + "type": "distribution" + }, + { + "url": "https://github.com/request/request-promise-native#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/resolve-alpn@1.2.1?package-id=70686007b37e8f3e", + "author": "Szymon Marczak", + "name": "resolve-alpn", + "version": "1.2.1", + "description": "Detects the ALPN protocol", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:resolve-alpn:resolve-alpn:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/resolve-alpn@1.2.1", + "externalReferences": [ + { + "url": "git+https://github.com/szmarczak/resolve-alpn.git", + "type": "distribution" + }, + { + "url": "https://github.com/szmarczak/resolve-alpn#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/resolve-dependencies@6.0.9?package-id=3282dcc15ecc834f", + "name": "resolve-dependencies", + "version": "6.0.9", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:resolve-dependencies:resolve-dependencies:6.0.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/resolve-dependencies@6.0.9", + "externalReferences": [ + { + "url": "https://github.com/nexe/resolve-dependencies.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/responselike@1.0.2?package-id=d4f225eb3ddcee43", + "author": "lukechilds", + "name": "responselike", + "version": "1.0.2", + "description": "A response-like object for mocking a Node.js HTTP response stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:responselike:responselike:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/responselike@1.0.2", + "externalReferences": [ + { + "url": "https://github.com/lukechilds/responselike.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/responselike@2.0.1?package-id=c01e36f80957bdc8", + "author": "lukechilds", + "name": "responselike", + "version": "2.0.1", + "description": "A response-like object for mocking a Node.js HTTP response stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:responselike:responselike:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/responselike@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/sindresorhus/responselike.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/restore-cursor@2.0.0?package-id=c4bed021ae2313cb", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "restore-cursor", + "version": "2.0.0", + "description": "Gracefully restore the CLI cursor on exit", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:restore-cursor:restore-cursor:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/restore-cursor@2.0.0", + "externalReferences": [ + { + "url": "sindresorhus/restore-cursor", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/retry@0.12.0?package-id=c3f319915fd297ec", + "author": "Tim Koschützki (http://debuggable.com/)", + "name": "retry", + "version": "0.12.0", + "description": "Abstraction for exponential and custom retry strategies for failed operations.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tim-kos:retry:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/retry@0.12.0", + "externalReferences": [ + { + "url": "git://github.com/tim-kos/node-retry.git", + "type": "distribution" + }, + { + "url": "https://github.com/tim-kos/node-retry", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/reusify@1.0.4?package-id=48d0ddd1ed8b33de", + "author": "Matteo Collina ", + "name": "reusify", + "version": "1.0.4", + "description": "Reuse objects and functions with style", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mcollina:reusify:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/reusify@1.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/mcollina/reusify.git", + "type": "distribution" + }, + { + "url": "https://github.com/mcollina/reusify#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rimraf@2.7.1?package-id=157b3be2bd2b584", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "rimraf", + "version": "2.7.1", + "description": "A deep deletion module for node (like `rm -rf`)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:rimraf:2.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/rimraf@2.7.1", + "externalReferences": [ + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rimraf@3.0.2?package-id=92690f32c123c49b", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "rimraf", + "version": "3.0.2", + "description": "A deep deletion module for node (like `rm -rf`)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:rimraf:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/rimraf@3.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/rimraf@3.0.2?package-id=691571e29c90ccb4", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "rimraf", + "version": "3.0.2", + "description": "A deep deletion module for node (like `rm -rf`)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:rimraf:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/rimraf@3.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/run-parallel@1.2.0?package-id=31153313b40541e", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "run-parallel", + "version": "1.2.0", + "description": "Run an array of functions in parallel", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:run-parallel:run-parallel:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/run-parallel@1.2.0", + "externalReferences": [ + { + "url": "git://github.com/feross/run-parallel.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/run-parallel", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=2726b88c81e31063", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=edf513d3ab46bee", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "safe-buffer", + "version": "5.2.1", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=e39228a786cd5fee", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "safe-buffer", + "version": "5.2.1", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=4ab2220d3f3f4961", + "author": "Nikita Skovoroda (https://github.com/ChALkeR)", + "name": "safer-buffer", + "version": "2.1.2", + "description": "Modern Buffer API polyfill without footguns", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safer-buffer@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/ChALkeR/safer-buffer.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=cc287d73489b4567", + "author": "Nikita Skovoroda (https://github.com/ChALkeR)", + "name": "safer-buffer", + "version": "2.1.2", + "description": "Modern Buffer API polyfill without footguns", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safer-buffer@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/ChALkeR/safer-buffer.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sax@1.2.4?package-id=d02182db0df4dd12", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "sax", + "version": "1.2.4", + "description": "An evented streaming XML parser in JavaScript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:sax:1.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/sax@1.2.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/sax-js.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.3.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.16.5&package-id=206fdb47b3e980eb", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.3.4-r0", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.3.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.3.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/seek-bzip@1.0.6?package-id=ec4055eec47e8821", + "name": "seek-bzip", + "version": "1.0.6", + "description": "a pure-JavaScript Node.JS module for random-access decoding bzip2 data", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:seek-bzip:seek-bzip:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/seek-bzip@1.0.6", + "externalReferences": [ + { + "url": "https://github.com/cscott/seek-bzip.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver@5.7.1?package-id=4e2ff9f8472aa6a4", + "name": "semver", + "version": "5.7.1", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:semver:semver:5.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver@5.7.1", + "externalReferences": [ + { + "url": "https://github.com/npm/node-semver", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver@5.7.1?package-id=483f29b746def53", + "name": "semver", + "version": "5.7.1", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:semver:semver:5.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver@5.7.1", + "externalReferences": [ + { + "url": "https://github.com/npm/node-semver", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver@5.7.1?package-id=bf359e272c76e56b", + "name": "semver", + "version": "5.7.1", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:semver:semver:5.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver@5.7.1", + "externalReferences": [ + { + "url": "https://github.com/npm/node-semver", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver@7.3.7?package-id=73e16bb8e099774", + "author": "GitHub Inc.", + "name": "semver", + "version": "7.3.7", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:semver:semver:7.3.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver@7.3.7", + "externalReferences": [ + { + "url": "https://github.com/npm/node-semver.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/semver@7.5.0?package-id=cc89a24dbf0d41c8", + "author": "GitHub Inc.", + "name": "semver", + "version": "7.5.0", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:semver:semver:7.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver@7.5.0", + "externalReferences": [ + { + "url": "https://github.com/npm/node-semver.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/send@0.16.2?package-id=6aacb6d4db077764", + "author": "TJ Holowaychuk ", + "name": "send", + "version": "0.16.2", + "description": "Better streaming static file server with Range and conditional-GET support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:send:send:0.16.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/send@0.16.2", + "externalReferences": [ + { + "url": "pillarjs/send", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/serve-static@1.13.2?package-id=2085513853dda1c3", + "author": "Douglas Christopher Wilson ", + "name": "serve-static", + "version": "1.13.2", + "description": "Serve static files", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:serve-static:serve-static:1.13.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/serve-static@1.13.2", + "externalReferences": [ + { + "url": "expressjs/serve-static", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/set-blocking@2.0.0?package-id=bac85cbb844de9c9", + "author": "Ben Coe ", + "name": "set-blocking", + "version": "2.0.0", + "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:set-blocking:set-blocking:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/set-blocking@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/yargs/set-blocking.git", + "type": "distribution" + }, + { + "url": "https://github.com/yargs/set-blocking#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/setprototypeof@1.1.0?package-id=5f62b122fce97102", + "author": "Wes Todd", + "name": "setprototypeof", + "version": "1.1.0", + "description": "A small polyfill for Object.setprototypeof", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:setprototypeof:setprototypeof:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/setprototypeof@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/wesleytodd/setprototypeof.git", + "type": "distribution" + }, + { + "url": "https://github.com/wesleytodd/setprototypeof", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/shebang-command@1.2.0?package-id=d2c249cc68c66904", + "author": "Kevin Martensson (github.com/kevva)", + "name": "shebang-command", + "version": "1.2.0", + "description": "Get the command from a shebang", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shebang-command:shebang-command:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/shebang-command@1.2.0", + "externalReferences": [ + { + "url": "kevva/shebang-command", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/shebang-regex@1.0.0?package-id=92bf29094fdc6eb", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "shebang-regex", + "version": "1.0.0", + "description": "Regular expression for matching a shebang", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shebang-regex:shebang-regex:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/shebang-regex@1.0.0", + "externalReferences": [ + { + "url": "sindresorhus/shebang-regex", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/signal-exit@3.0.7?package-id=998659694cba1dfd", + "author": "Ben Coe ", + "name": "signal-exit", + "version": "3.0.7", + "description": "when you want to fire an event no matter how a process exits.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:signal-exit:signal-exit:3.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/signal-exit@3.0.7", + "externalReferences": [ + { + "url": "https://github.com/tapjs/signal-exit.git", + "type": "distribution" + }, + { + "url": "https://github.com/tapjs/signal-exit", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/signal-exit@3.0.7?package-id=133483a000431c75", + "author": "Ben Coe ", + "name": "signal-exit", + "version": "3.0.7", + "description": "when you want to fire an event no matter how a process exits.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:signal-exit:signal-exit:3.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/signal-exit@3.0.7", + "externalReferences": [ + { + "url": "https://github.com/tapjs/signal-exit.git", + "type": "distribution" + }, + { + "url": "https://github.com/tapjs/signal-exit", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/slash@2.0.0?package-id=10c3538e779a8cee", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "slash", + "version": "2.0.0", + "description": "Convert Windows backslash paths to slash paths", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:slash:slash:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/slash@2.0.0", + "externalReferences": [ + { + "url": "sindresorhus/slash", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/slash@3.0.0?package-id=17080049f6093788", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "slash", + "version": "3.0.0", + "description": "Convert Windows backslash paths to slash paths", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:slash:slash:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/slash@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/slash", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/smart-buffer@4.2.0?package-id=ad322c124ae3043c", + "author": "Josh Glazebrook", + "name": "smart-buffer", + "version": "4.2.0", + "description": "smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:JoshGlazebrook:smart-buffer:4.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/smart-buffer@4.2.0", + "externalReferences": [ + { + "url": "https://github.com/JoshGlazebrook/smart-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/JoshGlazebrook/smart-buffer/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/socks@2.7.0?package-id=267f6eb3d489a8eb", + "author": "Josh Glazebrook", + "name": "socks", + "version": "2.7.0", + "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:JoshGlazebrook:socks:2.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/socks@2.7.0", + "externalReferences": [ + { + "url": "https://github.com/JoshGlazebrook/socks.git", + "type": "distribution" + }, + { + "url": "https://github.com/JoshGlazebrook/socks/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/socks-proxy-agent@7.0.0?package-id=8dc0e605920052a1", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "socks-proxy-agent", + "version": "7.0.0", + "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:socks-proxy-agent:socks-proxy-agent:7.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/socks-proxy-agent@7.0.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-socks-proxy-agent.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/node-socks-proxy-agent#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sort-keys@1.1.2?package-id=ce6e76bdbe33999b", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "sort-keys", + "version": "1.1.2", + "description": "Sort the keys of an object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sort-keys:sort-keys:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/sort-keys@1.1.2", + "externalReferences": [ + { + "url": "sindresorhus/sort-keys", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sort-keys@2.0.0?package-id=804f9d1bafeb049e", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "sort-keys", + "version": "2.0.0", + "description": "Sort the keys of an object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sort-keys:sort-keys:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/sort-keys@2.0.0", + "externalReferences": [ + { + "url": "sindresorhus/sort-keys", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sort-keys-length@1.0.1?package-id=7c24e03775c837c0", + "author": "Kevin Mårtensson (https://github.com/kevva)", + "name": "sort-keys-length", + "version": "1.0.1", + "description": "Sort objecy keys by length", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sort-keys-length:sort-keys-length:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/sort-keys-length@1.0.1", + "externalReferences": [ + { + "url": "kevva/sort-keys-length", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-correct@3.1.1?package-id=d6b0214947e454eb", + "author": "Kyle E. Mitchell (https://kemitchell.com)", + "name": "spdx-correct", + "version": "3.1.1", + "description": "correct invalid SPDX expressions", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-correct:spdx-correct:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-correct@3.1.1", + "externalReferences": [ + { + "url": "jslicense/spdx-correct.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-exceptions@2.3.0?package-id=22aa1fb7c596c6c7", + "author": "The Linux Foundation", + "name": "spdx-exceptions", + "version": "2.3.0", + "description": "list of SPDX standard license exceptions", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-exceptions:spdx-exceptions:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-exceptions@2.3.0", + "externalReferences": [ + { + "url": "kemitchell/spdx-exceptions.json", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-expression-parse@3.0.1?package-id=78c73c9b189e2783", + "author": "Kyle E. Mitchell (https://kemitchell.com)", + "name": "spdx-expression-parse", + "version": "3.0.1", + "description": "parse SPDX license expressions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:spdx-expression-parse:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-expression-parse@3.0.1", + "externalReferences": [ + { + "url": "jslicense/spdx-expression-parse.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/spdx-license-ids@3.0.11?package-id=6530ac28616ec508", + "author": "Shinnosuke Watanabe (https://github.com/shinnn)", + "name": "spdx-license-ids", + "version": "3.0.11", + "description": "A list of SPDX license identifiers", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-license-ids:spdx-license-ids:3.0.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-license-ids@3.0.11", + "externalReferences": [ + { + "url": "jslicense/spdx-license-ids", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/sshpk@1.17.0?package-id=343f480d60c250d6", + "author": "Joyent, Inc", + "name": "sshpk", + "version": "1.17.0", + "description": "A library for finding and using SSH public keys", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:arekinath:sshpk:1.17.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/sshpk@1.17.0", + "externalReferences": [ + { + "url": "git+https://github.com/joyent/node-sshpk.git", + "type": "distribution" + }, + { + "url": "https://github.com/arekinath/node-sshpk#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&upstream=busybox&distro=alpine-3.16.5&package-id=674d1e2fba4d633a", + "publisher": "Sören Tempel ", + "name": "ssl_client", + "version": "1.35.0-r17", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.35.0-r17:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&upstream=busybox&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/ssri@9.0.1?package-id=49986701356bf646", + "author": "GitHub Inc.", + "name": "ssri", + "version": "9.0.1", + "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ssri:ssri:9.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ssri@9.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/ssri.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/statuses@1.4.0?package-id=1492f259b23a7535", + "name": "statuses", + "version": "1.4.0", + "description": "HTTP status utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:statuses:statuses:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/statuses@1.4.0", + "externalReferences": [ + { + "url": "jshttp/statuses", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/stealthy-require@1.1.1?package-id=3fb5cb194dd47043", + "author": "Nicolai Kamenzky (https://github.com/analog-nico)", + "name": "stealthy-require", + "version": "1.1.1", + "description": "The closest you can get to require something with bypassing the require cache", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:stealthy-require:stealthy-require:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/stealthy-require@1.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/analog-nico/stealthy-require.git", + "type": "distribution" + }, + { + "url": "https://github.com/analog-nico/stealthy-require#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strict-uri-encode@1.1.0?package-id=ff80b9bfc2ac6799", + "author": "Kevin Mårtensson (github.com/kevva)", + "name": "strict-uri-encode", + "version": "1.1.0", + "description": "A stricter URI encode adhering to RFC 3986", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strict-uri-encode:strict-uri-encode:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strict-uri-encode@1.1.0", + "externalReferences": [ + { + "url": "kevva/strict-uri-encode", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string-width@4.2.3?package-id=c50e61a77e3ea809", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "4.2.3", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-width:string-width:4.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@4.2.3", + "externalReferences": [ + { + "url": "sindresorhus/string-width", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=92cdcd9ac26aecf0", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=d1bcf3210ee4f3ad", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=357b7693ece40f7a", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.3.0?package-id=ca8af4aa6b41ca75", + "name": "string_decoder", + "version": "1.3.0", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/string_decoder@1.3.0?package-id=4416d34ed115d469", + "name": "string_decoder", + "version": "1.3.0", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@5.2.0?package-id=d0a3d8fcb037e46d", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "5.2.0", + "description": "Strip ANSI escape codes from a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:5.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@5.2.0", + "externalReferences": [ + { + "url": "chalk/strip-ansi", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-ansi@6.0.1?package-id=5ec73c7d72940ceb", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "6.0.1", + "description": "Strip ANSI escape codes from a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@6.0.1", + "externalReferences": [ + { + "url": "chalk/strip-ansi", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-dirs@2.1.0?package-id=cdfc291270507c5a", + "author": "Shinnosuke Watanabe (https://github.com/shinnn)", + "name": "strip-dirs", + "version": "2.1.0", + "description": "Remove leading directory components from a path, like tar's --strip-components option", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-dirs:strip-dirs:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-dirs@2.1.0", + "externalReferences": [ + { + "url": "shinnn/node-strip-dirs", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/strip-outer@1.0.1?package-id=93872f5661976cfe", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-outer", + "version": "1.0.1", + "description": "Strip a substring from the start/end of a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-outer:strip-outer:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-outer@1.0.1", + "externalReferences": [ + { + "url": "sindresorhus/strip-outer", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-color@5.5.0?package-id=e67c34f54fe7e8e9", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "supports-color", + "version": "5.5.0", + "description": "Detect whether a terminal supports color", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-color:supports-color:5.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-color@5.5.0", + "externalReferences": [ + { + "url": "chalk/supports-color", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-color@7.2.0?package-id=4c97deb16c788c95", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "supports-color", + "version": "7.2.0", + "description": "Detect whether a terminal supports color", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-color:supports-color:7.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-color@7.2.0", + "externalReferences": [ + { + "url": "chalk/supports-color", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/supports-color@7.2.0?package-id=57e1d80233ac0806", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "supports-color", + "version": "7.2.0", + "description": "Detect whether a terminal supports color", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-color:supports-color:7.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-color@7.2.0", + "externalReferences": [ + { + "url": "chalk/supports-color", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tapable@2.2.1?package-id=557f604395186028", + "author": "Tobias Koppers @sokra", + "name": "tapable", + "version": "2.2.1", + "description": "Just a little module for plugins.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tapable:tapable:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/tapable@2.2.1", + "externalReferences": [ + { + "url": "http://github.com/webpack/tapable.git", + "type": "distribution" + }, + { + "url": "https://github.com/webpack/tapable", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tar@5.0.11?package-id=d8c4bfab58684e14", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "tar", + "version": "5.0.11", + "description": "tar for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm:tar:5.0.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/tar@5.0.11", + "externalReferences": [ + { + "url": "https://github.com/npm/node-tar.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tar@6.1.11?package-id=97823590d9da9c9f", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "tar", + "version": "6.1.11", + "description": "tar for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm:tar:6.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/tar@6.1.11", + "externalReferences": [ + { + "url": "https://github.com/npm/node-tar.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tar-stream@1.6.2?package-id=b349b53b8a0b6db3", + "author": "Mathias Buus ", + "name": "tar-stream", + "version": "1.6.2", + "description": "tar-stream is a streaming tar parser and generator and nothing else. It is streams2 and operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tar-stream:tar-stream:1.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/tar-stream@1.6.2", + "externalReferences": [ + { + "url": "git+https://github.com/mafintosh/tar-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/tar-stream", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/text-table@0.2.0?package-id=a124be9ad599668f", + "author": "James Halliday (http://substack.net)", + "name": "text-table", + "version": "0.2.0", + "description": "borderless text tables with alignment", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:text-table:text-table:0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/text-table@0.2.0", + "externalReferences": [ + { + "url": "git://github.com/substack/text-table.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/text-table", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/through@2.3.8?package-id=a2952f0a3256848f", + "author": "Dominic Tarr (dominictarr.com)", + "name": "through", + "version": "2.3.8", + "description": "simplified stream construction", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dominictarr:through:2.3.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/through@2.3.8", + "externalReferences": [ + { + "url": "https://github.com/dominictarr/through.git", + "type": "distribution" + }, + { + "url": "https://github.com/dominictarr/through", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/through2@3.0.2?package-id=c9d63645e4d241f4", + "author": "Rod Vagg (https://github.com/rvagg)", + "name": "through2", + "version": "3.0.2", + "description": "A tiny wrapper around Node.js streams.Transform (Streams2/3) to avoid explicit subclassing noise", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:through2:through2:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/through2@3.0.2", + "externalReferences": [ + { + "url": "https://github.com/rvagg/through2.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/timed-out@4.0.1?package-id=78eb100a1f4df612", + "author": "Vsevolod Strukchinsky ", + "name": "timed-out", + "version": "4.0.1", + "description": "Emit `ETIMEDOUT` or `ESOCKETTIMEDOUT` when ClientRequest is hanged", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:timed-out:timed-out:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/timed-out@4.0.1", + "externalReferences": [ + { + "url": "floatdrop/timed-out", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tiny-relative-date@1.3.0?package-id=bc2a707c455ba496", + "author": "Joseph Wynn (https://wildlyinaccurate.com/)", + "name": "tiny-relative-date", + "version": "1.3.0", + "description": "Tiny function that provides relative, human-readable dates.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tiny-relative-date:tiny-relative-date:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tiny-relative-date@1.3.0", + "externalReferences": [ + { + "url": "https://github.com/wildlyinaccurate/relative-date.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tmp@0.0.33?package-id=d8de4e7f32864c74", + "author": "KARASZI István (http://raszi.hu/)", + "name": "tmp", + "version": "0.0.33", + "description": "Temporary file and directory creator", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:raszi:tmp:0.0.33:*:*:*:*:*:*:*", + "purl": "pkg:npm/tmp@0.0.33", + "externalReferences": [ + { + "url": "raszi/node-tmp", + "type": "distribution" + }, + { + "url": "http://github.com/raszi/node-tmp", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/to-buffer@1.1.1?package-id=c581811f7e908504", + "author": "Mathias Buus (@mafintosh)", + "name": "to-buffer", + "version": "1.1.1", + "description": "Pass in a string, get a buffer back. Pass in a buffer, get the same buffer back", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mafintosh:to-buffer:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/to-buffer@1.1.1", + "externalReferences": [ + { + "url": "https://github.com/mafintosh/to-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/to-buffer", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/to-regex-range@5.0.1?package-id=74b9975d0f188d7", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "to-regex-range", + "version": "5.0.1", + "description": "Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:to-regex-range:to-regex-range:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/to-regex-range@5.0.1", + "externalReferences": [ + { + "url": "micromatch/to-regex-range", + "type": "distribution" + }, + { + "url": "https://github.com/micromatch/to-regex-range", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tough-cookie@2.5.0?package-id=a301940673b885ce", + "author": "Jeremy Stashewsky ", + "name": "tough-cookie", + "version": "2.5.0", + "description": "RFC6265 Cookies and Cookie Jar for node.js", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:tough-cookie:tough-cookie:2.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tough-cookie@2.5.0", + "externalReferences": [ + { + "url": "git://github.com/salesforce/tough-cookie.git", + "type": "distribution" + }, + { + "url": "https://github.com/salesforce/tough-cookie", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/treeverse@2.0.0?package-id=283d5c0745aa3ce7", + "author": "GitHub Inc.", + "name": "treeverse", + "version": "2.0.0", + "description": "Walk any kind of tree structure depth- or breadth-first. Supports promises and advanced map-reduce operations with a very small API.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:treeverse:treeverse:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/treeverse@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/treeverse.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/trim-repeated@1.0.0?package-id=3c32de348d4f7827", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "trim-repeated", + "version": "1.0.0", + "description": "Trim a consecutively repeated substring: foo--bar---baz → foo-bar-baz", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:trim-repeated:trim-repeated:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/trim-repeated@1.0.0", + "externalReferences": [ + { + "url": "sindresorhus/trim-repeated", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tunnel-agent@0.6.0?package-id=2bdf83051339ef2c", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "tunnel-agent", + "version": "0.6.0", + "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:tunnel-agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tunnel-agent@0.6.0", + "externalReferences": [ + { + "url": "https://github.com/mikeal/tunnel-agent", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/tweetnacl@0.14.5?package-id=70ac65ccc05f56fb", + "author": "TweetNaCl-js contributors", + "name": "tweetnacl", + "version": "0.14.5", + "description": "Port of TweetNaCl cryptographic library to JavaScript", + "licenses": [ + { + "license": { + "id": "Unlicense" + } + } + ], + "cpe": "cpe:2.3:a:tweetnacl:tweetnacl:0.14.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/tweetnacl@0.14.5", + "externalReferences": [ + { + "url": "https://github.com/dchest/tweetnacl-js.git", + "type": "distribution" + }, + { + "url": "https://tweetnacl.js.org", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/type-is@1.6.18?package-id=5bdf50fc9a89514f", + "name": "type-is", + "version": "1.6.18", + "description": "Infer the content-type of a request.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:type-is:type-is:1.6.18:*:*:*:*:*:*:*", + "purl": "pkg:npm/type-is@1.6.18", + "externalReferences": [ + { + "url": "jshttp/type-is", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unbzip2-stream@1.4.3?package-id=55bae1cfa4fa49", + "author": "Jan Bölsche ", + "name": "unbzip2-stream", + "version": "1.4.3", + "description": "streaming unbzip2 implementation in pure javascript for node and browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unbzip2-stream:unbzip2-stream:1.4.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/unbzip2-stream@1.4.3", + "externalReferences": [ + { + "url": "https://github.com/regular/unbzip2-stream.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unique-filename@2.0.1?package-id=ddbea63cf5bc0343", + "author": "GitHub Inc.", + "name": "unique-filename", + "version": "2.0.1", + "description": "Generate a unique filename for use in temporary directories or caches.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:unique-filename:unique-filename:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-filename@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/unique-filename.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/unique-filename", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unique-slug@3.0.0?package-id=a61e6b90d7850f42", + "author": "GitHub Inc.", + "name": "unique-slug", + "version": "3.0.0", + "description": "Generate a unique character string suitible for use in files and URLs.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:unique-slug:unique-slug:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-slug@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/unique-slug.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/universalify@0.1.2?package-id=69eed8a5747afb4f", + "author": "Ryan Zimmerman ", + "name": "universalify", + "version": "0.1.2", + "description": "Make a callback- or promise-based function support both promises and callbacks.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:universalify:universalify:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/universalify@0.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/RyanZim/universalify.git", + "type": "distribution" + }, + { + "url": "https://github.com/RyanZim/universalify#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/universalify@2.0.0?package-id=9f53ef5bee7fc181", + "author": "Ryan Zimmerman ", + "name": "universalify", + "version": "2.0.0", + "description": "Make a callback- or promise-based function support both promises and callbacks.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:universalify:universalify:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/universalify@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/RyanZim/universalify.git", + "type": "distribution" + }, + { + "url": "https://github.com/RyanZim/universalify#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/unpipe@1.0.0?package-id=c584cebc0a9824f4", + "author": "Douglas Christopher Wilson ", + "name": "unpipe", + "version": "1.0.0", + "description": "Unpipe a stream from all destinations", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unpipe:unpipe:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unpipe@1.0.0", + "externalReferences": [ + { + "url": "stream-utils/unpipe", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uri-js@4.4.1?package-id=fe61e3e32f3aaf87", + "author": "Gary Court ", + "name": "uri-js", + "version": "4.4.1", + "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:garycourt:uri-js:4.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/uri-js@4.4.1", + "externalReferences": [ + { + "url": "http://github.com/garycourt/uri-js", + "type": "distribution" + }, + { + "url": "https://github.com/garycourt/uri-js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/url-parse-lax@3.0.0?package-id=129b46305833ff3c", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "url-parse-lax", + "version": "3.0.0", + "description": "Lax url.parse() with support for protocol-less URLs & IPs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:url-parse-lax:url-parse-lax:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/url-parse-lax@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/url-parse-lax", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/url-to-options@1.0.1?package-id=fd0a02a59bebee03", + "author": "Steven Vachon (https://www.svachon.com/)", + "name": "url-to-options", + "version": "1.0.1", + "description": "Convert a WHATWG URL to an http(s).request options object.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:url-to-options:url-to-options:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/url-to-options@1.0.1", + "externalReferences": [ + { + "url": "stevenvachon/url-to-options", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=ecf076cf26fe73d0", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "util-deprecate", + "version": "1.0.2", + "description": "The Node.js `util.deprecate()` function with browser support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=78a196ea3de81330", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "util-deprecate", + "version": "1.0.2", + "description": "The Node.js `util.deprecate()` function with browser support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/utils-merge@1.0.1?package-id=62471f9f4fe7cedd", + "author": "Jared Hanson (http://www.jaredhanson.net/)", + "name": "utils-merge", + "version": "1.0.1", + "description": "merge() utility function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jaredhanson:utils-merge:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/utils-merge@1.0.1", + "externalReferences": [ + { + "url": "git://github.com/jaredhanson/utils-merge.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/uuid@3.4.0?package-id=3a7981c4b1d9183e", + "name": "uuid", + "version": "3.4.0", + "description": "RFC4122 (v1, v4, and v5) UUIDs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:uuidjs:uuid:3.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/uuid@3.4.0", + "externalReferences": [ + { + "url": "https://github.com/uuidjs/uuid.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4?package-id=fa90b625ec15ead", + "author": "Kyle E. Mitchell (https://kemitchell.com)", + "name": "validate-npm-package-license", + "version": "3.0.4", + "description": "Give me a string and I'll tell you if it's a valid npm package license string", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:validate-npm-package-license:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/validate-npm-package-license@3.0.4", + "externalReferences": [ + { + "url": "kemitchell/validate-npm-package-license.js", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/validate-npm-package-name@4.0.0?package-id=dc3a9f2b7a700330", + "author": "GitHub Inc.", + "name": "validate-npm-package-name", + "version": "4.0.0", + "description": "Give me a string and I'll tell you if it's a valid npm package name", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:validate-npm-package-name:validate-npm-package-name:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/validate-npm-package-name@4.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/validate-npm-package-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/validate-npm-package-name", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/vary@1.1.2?package-id=7021c84ca0665099", + "author": "Douglas Christopher Wilson ", + "name": "vary", + "version": "1.1.2", + "description": "Manipulate the HTTP Vary header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vary:vary:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/vary@1.1.2", + "externalReferences": [ + { + "url": "jshttp/vary", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/verror@1.10.0?package-id=f23f33c383aecb1a", + "name": "verror", + "version": "1.10.0", + "description": "richer JavaScript errors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:davepacheco:verror:1.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/verror@1.10.0", + "externalReferences": [ + { + "url": "git://github.com/davepacheco/node-verror.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/walk-up-path@1.0.0?package-id=9a8dd6f20b12184f", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "walk-up-path", + "version": "1.0.0", + "description": "Given a path string, return a generator that walks up the path, emitting each dirname.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:walk-up-path:walk-up-path:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/walk-up-path@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/walk-up-path", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wcwidth@1.0.1?package-id=ee54c63162090e16", + "author": "Tim Oxley", + "name": "wcwidth", + "version": "1.0.1", + "description": "Port of C's wcwidth() and wcswidth()", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:timoxley:wcwidth:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/wcwidth@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/timoxley/wcwidth.git", + "type": "distribution" + }, + { + "url": "https://github.com/timoxley/wcwidth#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wcwidth@1.0.1?package-id=f26de7df42871fe5", + "author": "Tim Oxley", + "name": "wcwidth", + "version": "1.0.1", + "description": "Port of C's wcwidth() and wcswidth()", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:timoxley:wcwidth:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/wcwidth@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/timoxley/wcwidth.git", + "type": "distribution" + }, + { + "url": "https://github.com/timoxley/wcwidth#readme", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/which@1.3.1?package-id=3ae6f30f4f32f3f1", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "which", + "version": "1.3.1", + "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:which:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/which@1.3.1", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-which.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/which@2.0.2?package-id=1d2beaa974655b97", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "which", + "version": "2.0.2", + "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:which:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/which@2.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-which.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wide-align@1.1.5?package-id=f0bd5200e29a21be", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "wide-align", + "version": "1.1.5", + "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wide-align:wide-align:1.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/wide-align@1.1.5", + "externalReferences": [ + { + "url": "https://github.com/iarna/wide-align", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=88b7c304022dd8b8", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "wrappy", + "version": "1.0.2", + "description": "Callback wrapping utility", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/wrappy", + "type": "distribution" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=ed5926f6f76e646b", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "wrappy", + "version": "1.0.2", + "description": "Callback wrapping utility", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/wrappy", + "type": "distribution" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/write-file-atomic@4.0.2?package-id=401a0baef0d4f8db", + "author": "GitHub Inc.", + "name": "write-file-atomic", + "version": "4.0.2", + "description": "Write files in an atomic fashion w/configurable ownership", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:write-file-atomic:write-file-atomic:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/write-file-atomic@4.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/write-file-atomic.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/write-file-atomic", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/xml@1.0.1?package-id=e28f883b3dca5ec8", + "author": "Dylan Greene (https://github.com/dylang)", + "name": "xml", + "version": "1.0.1", + "description": "Fast and simple xml generator. Supports attributes, CDATA, etc. Includes tests and examples.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dylang:xml:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/xml@1.0.1", + "externalReferences": [ + { + "url": "http://github.com/dylang/node-xml", + "type": "distribution" + }, + { + "url": "http://github.com/dylang/node-xml", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/xml2js@0.4.23?package-id=cea6836bf65243ea", + "author": "Marek Kubica (https://xivilization.net)", + "name": "xml2js", + "version": "0.4.23", + "description": "Simple XML to JavaScript object converter.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:Leonidas-from-XIV:xml2js:0.4.23:*:*:*:*:*:*:*", + "purl": "pkg:npm/xml2js@0.4.23", + "externalReferences": [ + { + "url": "https://github.com/Leonidas-from-XIV/node-xml2js.git", + "type": "distribution" + }, + { + "url": "https://github.com/Leonidas-from-XIV/node-xml2js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/xmlbuilder@11.0.1?package-id=b2ed598d8a366a07", + "author": "Ozgur Ozcitak ", + "name": "xmlbuilder", + "version": "11.0.1", + "description": "An XML builder for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:xmlbuilder:xmlbuilder:11.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/xmlbuilder@11.0.1", + "externalReferences": [ + { + "url": "git://github.com/oozcitak/xmlbuilder-js.git", + "type": "distribution" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder-js", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/xtend@4.0.2?package-id=76ce0b8cd490aa12", + "author": "Raynos ", + "name": "xtend", + "version": "4.0.2", + "description": "extend like a boss", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:Raynos:xtend:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/xtend@4.0.2", + "externalReferences": [ + { + "url": "git://github.com/Raynos/xtend.git", + "type": "distribution" + }, + { + "url": "https://github.com/Raynos/xtend", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/xz-libs@5.2.5-r1?arch=x86_64&upstream=xz&distro=alpine-3.16.5&package-id=168e14fa822d49a0", + "publisher": "Natanael Copa ", + "name": "xz-libs", + "version": "5.2.5-r1", + "description": "Library and CLI tools for XZ and LZMA compressed files (libraries)", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "name": "Public-Domain" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:xz-libs:xz-libs:5.2.5-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/xz-libs@5.2.5-r1?arch=x86_64&upstream=xz&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://tukaani.org/xz", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yallist@4.0.0?package-id=c5b3d2829d8d6201", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "yallist", + "version": "4.0.0", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yallist@4.0.0?package-id=962f7b1d680d2d52", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "yallist", + "version": "4.0.0", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yaml@1.10.2?package-id=96fb931c6a8daa33", + "author": "Eemeli Aro ", + "name": "yaml", + "version": "1.10.2", + "description": "JavaScript parser and stringifier for YAML", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yaml:yaml:1.10.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/yaml@1.10.2", + "externalReferences": [ + { + "url": "github:eemeli/yaml", + "type": "distribution" + }, + { + "url": "https://eemeli.org/yaml/v1/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yarn@1.22.19?package-id=f2b974a78000b26b", + "name": "yarn", + "version": "1.22.19", + "description": "📦🐈 Fast, reliable, and secure dependency management.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:yarn:yarn:1.22.19:*:*:*:*:*:*:*", + "purl": "pkg:npm/yarn@1.22.19", + "externalReferences": [ + { + "url": "yarnpkg/yarn", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/yauzl@2.10.0?package-id=70e81172e3165464", + "author": "Josh Wolfe ", + "name": "yauzl", + "version": "2.10.0", + "description": "yet another unzip library for node", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:thejoshwolfe:yauzl:2.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/yauzl@2.10.0", + "externalReferences": [ + { + "url": "https://github.com/thejoshwolfe/yauzl.git", + "type": "distribution" + }, + { + "url": "https://github.com/thejoshwolfe/yauzl", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.12-r3?arch=x86_64&distro=alpine-3.16.5&package-id=75f0d92f695b4303", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.12-r3", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.12-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.12-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.16.5", + "description": "Alpine Linux v3.16", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.16.5" + }, + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/.python-rundeps@20230330.012037?arch=noarch&distro=alpine-3.16.5&package-id=f4d111cafc76519b", + "name": ".python-rundeps", + "version": "20230330.012037", + "description": "virtual meta package", + "licenses": [ + { + "license": {} + } + ], + "cpe": "cpe:2.3:a:.python-rundeps:.python-rundeps:20230330.012037:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/.python-rundeps@20230330.012037?arch=noarch&distro=alpine-3.16.5" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/click@7.0?package-id=840f50855d8f675e", + "author": "Armin Ronacher ", + "name": "Click", + "version": "7.0", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:armin_ronacher_project:python-Click:7.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/Click@7.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/flask@1.1.1?package-id=ca332524b751bba1", + "author": "Armin Ronacher ", + "name": "Flask", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:armin_ronacher_project:python-Flask:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/Flask@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/flask-restful@0.3.7?package-id=aa19b2a1767c6e78", + "author": "Twilio API Team ", + "name": "Flask-RESTful", + "version": "0.3.7", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:twilio_api_team_project:python-Flask-RESTful:0.3.7:*:*:*:*:*:*:*", + "purl": "pkg:pypi/Flask-RESTful@0.3.7" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/jinja2@2.10.1?package-id=b6fda55ab30528e8", + "author": "Armin Ronacher ", + "name": "Jinja2", + "version": "2.10.1", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:armin_ronacher_project:python-Jinja2:2.10.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/Jinja2@2.10.1" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/markupsafe@1.1.1?package-id=a5d8b40c74cb3b3", + "author": "Armin Ronacher ", + "name": "MarkupSafe", + "version": "1.1.1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:armin_ronacher_project:python-MarkupSafe:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/MarkupSafe@1.1.1" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/werkzeug@2.0.3?package-id=373d98ea821b7791", + "author": "Armin Ronacher ", + "name": "Werkzeug", + "version": "2.0.3", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:armin_ronacher_project:python-Werkzeug:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:pypi/Werkzeug@2.0.3" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.2.0-r23?arch=x86_64&distro=alpine-3.16.5&package-id=61eac5ce8105d394", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.2.0-r23", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.2.0-r23:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.2.0-r23?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout-data@3.2.0-r23?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.16.5&package-id=e8c6fcc3a282ed4f", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout-data", + "version": "3.2.0-r23", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.2.0-r23:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout-data@3.2.0-r23?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.16.5&package-id=82d183eb300978cc", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.4-r1", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/aniso8601@8.0.0?package-id=8fdafa9f0e51bc3b", + "author": "Brandon Nielsen ", + "name": "aniso8601", + "version": "8.0.0", + "licenses": [ + { + "license": { + "name": "UNKNOWN" + } + } + ], + "cpe": "cpe:2.3:a:brandon_nielsen_project:python-aniso8601:8.0.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/aniso8601@8.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.9-r3?arch=x86_64&distro=alpine-3.16.5&package-id=42d502b764a37310", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.12.9-r3", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.12.9-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.12.9-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "e14718c64f5147f4", + "name": "busybox", + "version": "1.35.0", + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=alpine-3.16.5&package-id=4b48ef6f6b983526", + "publisher": "Sören Tempel ", + "name": "busybox", + "version": "1.35.0-r17", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0-r17:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.35.0-r17?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates@20220614-r0?arch=x86_64&distro=alpine-3.16.5&package-id=fbb1924ff870cc71", + "publisher": "Natanael Copa ", + "name": "ca-certificates", + "version": "20220614-r0", + "description": "Common CA certificates PEM files from Mozilla", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20220614-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates@20220614-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20220614-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.16.5&package-id=30622a1848b22bca", + "publisher": "Natanael Copa ", + "name": "ca-certificates-bundle", + "version": "20220614-r0", + "description": "Pre generated bundle of Mozilla certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20220614-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-bundle@20220614-r0?arch=x86_64&upstream=ca-certificates&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/expat@2.5.0-r0?arch=x86_64&distro=alpine-3.16.5&package-id=473c10d9103a81b0", + "publisher": "Carlo Landmeter ", + "name": "expat", + "version": "2.5.0-r0", + "description": "XML Parser library written in C", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:expat:expat:2.5.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/expat@2.5.0-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://libexpat.github.io/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/future@0.17.1?package-id=6a2ffb301b402f52", + "author": "Ed Schofield ", + "name": "future", + "version": "0.17.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ed_schofield_project:python-future:0.17.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/future@0.17.1" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/gdbm@1.23-r0?arch=x86_64&distro=alpine-3.16.5&package-id=5a60c1f034fa6943", + "publisher": "Natanael Copa ", + "name": "gdbm", + "version": "1.23-r0", + "description": "GNU dbm is a set of database routines that use extensible hashing", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:gdbm:gdbm:1.23-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/gdbm@1.23-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/gdbm/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/gevent@1.4.0?package-id=fc0a17fcd31e8ae8", + "author": "Denis Bilenko ", + "name": "gevent", + "version": "1.4.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:denis_bilenko_project:python-gevent:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/gevent@1.4.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/greenlet@0.4.15?package-id=a3782f68cd759ea1", + "name": "greenlet", + "version": "0.4.15", + "licenses": [ + { + "license": { + "name": "MIT License" + } + } + ], + "cpe": "cpe:2.3:a:python-greenlet:python-greenlet:0.4.15:*:*:*:*:*:*:*", + "purl": "pkg:pypi/greenlet@0.4.15" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/gunicorn@19.9.0?package-id=54b09808bf1c183f", + "author": "Benoit Chesneau ", + "name": "gunicorn", + "version": "19.9.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:benoit_chesneau_project:python-gunicorn:19.9.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/gunicorn@19.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/itsdangerous@1.1.0?package-id=d20834c719d5bf8d", + "author": "Armin Ronacher ", + "name": "itsdangerous", + "version": "1.1.0", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:armin_ronacher_project:python-itsdangerous:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/itsdangerous@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/keyutils-libs@1.6.3-r1?arch=x86_64&upstream=keyutils&distro=alpine-3.16.5&package-id=8ee597dfe194ab60", + "publisher": "Natanael Copa ", + "name": "keyutils-libs", + "version": "1.6.3-r1", + "description": "Key utilities library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:keyutils-libs:keyutils-libs:1.6.3-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/keyutils-libs@1.6.3-r1?arch=x86_64&upstream=keyutils&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://people.redhat.com/~dhowells/keyutils/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/krb5-conf@1.0-r2?arch=x86_64&distro=alpine-3.16.5&package-id=50afffc56cc7e53", + "publisher": "Natanael Copa ", + "name": "krb5-conf", + "version": "1.0-r2", + "description": "Shared krb5.conf for both MIT krb5 and heimdal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:krb5-conf:krb5-conf:1.0-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/krb5-conf@1.0-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://web.mit.edu/kerberos/www/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/krb5-libs@1.19.4-r0?arch=x86_64&upstream=krb5&distro=alpine-3.16.5&package-id=4cdf917c85417723", + "publisher": "Natanael Copa ", + "name": "krb5-libs", + "version": "1.19.4-r0", + "description": "The shared libraries used by Kerberos 5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:krb5-libs:krb5-libs:1.19.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/krb5-libs@1.19.4-r0?arch=x86_64&upstream=krb5&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://web.mit.edu/kerberos/www/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libbz2@1.0.8-r1?arch=x86_64&upstream=bzip2&distro=alpine-3.16.5&package-id=b681aee18ae0aa50", + "publisher": "Natanael Copa ", + "name": "libbz2", + "version": "1.0.8-r1", + "description": "Shared library for bz2", + "licenses": [ + { + "license": { + "id": "bzip2-1.0.6" + } + } + ], + "cpe": "cpe:2.3:a:libbz2:libbz2:1.0.8-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libbz2@1.0.8-r1?arch=x86_64&upstream=bzip2&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "http://sources.redhat.com/bzip2", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.16.5&package-id=2abd3b45f6fa4702", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r3", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcom_err@1.46.6-r0?arch=x86_64&upstream=e2fsprogs&distro=alpine-3.16.5&package-id=25b329ab3289e91c", + "publisher": "Natanael Copa ", + "name": "libcom_err", + "version": "1.46.6-r0", + "description": "Common error description library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libcom-err:libcom-err:1.46.6-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcom_err@1.46.6-r0?arch=x86_64&upstream=e2fsprogs&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "http://e2fsprogs.sourceforge.net", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5&package-id=13bc051822a24e8d", + "publisher": "Timo Teras ", + "name": "libcrypto1.1", + "version": "1.1.1t-r2", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1t-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libffi@3.4.2-r1?arch=x86_64&distro=alpine-3.16.5&package-id=d9c90e0c86210cde", + "publisher": "Natanael Copa ", + "name": "libffi", + "version": "3.4.2-r1", + "description": "portable, high level programming interface to various calling conventions.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libffi:libffi:3.4.2-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libffi@3.4.2-r1?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://sourceware.org/libffi/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libintl@0.21-r2?arch=x86_64&upstream=gettext&distro=alpine-3.16.5&package-id=8a4b8fffbba0af61", + "publisher": "Carlo Landmeter ", + "name": "libintl", + "version": "0.21-r2", + "description": "GNU gettext runtime library", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libintl:libintl:0.21-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libintl@0.21-r2?arch=x86_64&upstream=gettext&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/gettext/gettext.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libnsl@2.0.0-r0?arch=x86_64&distro=alpine-3.16.5&package-id=684ad1c4c0c42987", + "publisher": "Valery Kartel ", + "name": "libnsl", + "version": "2.0.0-r0", + "description": "Public client interface for NIS(YP) and NIS+ in a IPv6 ready version", + "licenses": [ + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:thkukuk:libnsl:2.0.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libnsl@2.0.0-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://github.com/thkukuk/libnsl", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5&package-id=609cb94e63dc06dd", + "publisher": "Timo Teras ", + "name": "libssl1.1", + "version": "1.1.1t-r2", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1t-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl1.1@1.1.1t-r2?arch=x86_64&upstream=openssl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libtirpc@1.3.2-r1?arch=x86_64&distro=alpine-3.16.5&package-id=7879d46219520605", + "publisher": "Natanael Copa ", + "name": "libtirpc", + "version": "1.3.2-r1", + "description": "Transport Independent RPC library (SunRPC replacement)", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc:libtirpc:1.3.2-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libtirpc@1.3.2-r1?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://sourceforge.net/projects/libtirpc", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libtirpc-conf@1.3.2-r1?arch=x86_64&upstream=libtirpc&distro=alpine-3.16.5&package-id=2473c071ab562d92", + "publisher": "Natanael Copa ", + "name": "libtirpc-conf", + "version": "1.3.2-r1", + "description": "Configuration files for TI-RPC", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc-conf:libtirpc-conf:1.3.2-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libtirpc-conf@1.3.2-r1?arch=x86_64&upstream=libtirpc&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://sourceforge.net/projects/libtirpc", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libuuid@2.38-r1?arch=x86_64&upstream=util-linux&distro=alpine-3.16.5&package-id=8732526a564c0dca", + "publisher": "Natanael Copa ", + "name": "libuuid", + "version": "2.38-r1", + "description": "DCE compatible Universally Unique Identifier library", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "name": "AND" + } + } + ], + "cpe": "cpe:2.3:a:libuuid:libuuid:2.38-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libuuid@2.38-r1?arch=x86_64&upstream=util-linux&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://git.kernel.org/cgit/utils/util-linux/util-linux.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libverto@0.3.2-r0?arch=x86_64&distro=alpine-3.16.5&package-id=b3642afc50cf09b9", + "publisher": "Francesco Colista ", + "name": "libverto", + "version": "0.3.2-r0", + "description": "Main loop abstraction library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:npmccallum:libverto:0.3.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libverto@0.3.2-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://github.com/npmccallum/libverto", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.2.3-r2?arch=x86_64&distro=alpine-3.16.5&package-id=24c6089b81ca7d19", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.2.3-r2", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.2.3-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.2.3-r2?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.3-r2?arch=x86_64&upstream=musl&distro=alpine-3.16.5&package-id=d33c14d727ae74d1", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.2.3-r2", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.2.3-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.2.3-r2?arch=x86_64&upstream=musl&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ncurses-libs@6.3_p20220521-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.16.5&package-id=c2bd1192d3d60d2c", + "publisher": "Natanael Copa ", + "name": "ncurses-libs", + "version": "6.3_p20220521-r0", + "description": "Ncurses libraries", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-libs:ncurses-libs:6.3_p20220521-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ncurses-libs@6.3_p20220521-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://invisible-island.net/ncurses/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ncurses-terminfo-base@6.3_p20220521-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.16.5&package-id=28679685d0eccfdc", + "publisher": "Natanael Copa ", + "name": "ncurses-terminfo-base", + "version": "6.3_p20220521-r0", + "description": "Descriptions of common terminals", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-terminfo-base:ncurses-terminfo-base:6.3_p20220521-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ncurses-terminfo-base@6.3_p20220521-r0?arch=x86_64&upstream=ncurses&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://invisible-island.net/ncurses/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pip@22.0.4?package-id=2662dd9050ca781b", + "author": "The pip developers ", + "name": "pip", + "version": "22.0.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pip_developers_project:python-pip:22.0.4:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pip@22.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pip@23.0.1?package-id=68e46f2f44623ecc", + "author": "The pip developers ", + "name": "pip", + "version": "23.0.1", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pip_developers_project:python-pip:23.0.1:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pip@23.0.1" + }, + { + "type": "application", + "bom-ref": "pkg:generic/python@3.8.16?package-id=92f8822938c7aca6", + "name": "python", + "version": "3.8.16", + "cpe": "cpe:2.3:a:python_software_foundation:python:3.8.16:*:*:*:*:*:*:*", + "purl": "pkg:generic/python@3.8.16" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/pytz@2019.2?package-id=fc76e5768c01e894", + "author": "Stuart Bishop ", + "name": "pytz", + "version": "2019.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stuart_bishop_project:python-pytz:2019.2:*:*:*:*:*:*:*", + "purl": "pkg:pypi/pytz@2019.2" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/readline@8.1.2-r0?arch=x86_64&distro=alpine-3.16.5&package-id=bb734bcc27e60920", + "publisher": "Natanael Copa ", + "name": "readline", + "version": "8.1.2-r0", + "description": "GNU readline library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:readline:readline:8.1.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/readline@8.1.2-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://tiswww.cwru.edu/php/chet/readline/rltop.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.3.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.16.5&package-id=206fdb47b3e980eb", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.3.4-r0", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.3.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.3.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/setuptools@57.5.0?package-id=85835c335c6d8275", + "author": "Python Packaging Authority ", + "name": "setuptools", + "version": "57.5.0", + "licenses": [ + { + "license": { + "name": "UNKNOWN" + } + } + ], + "cpe": "cpe:2.3:a:python_packaging_authority_project:python-setuptools:57.5.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/setuptools@57.5.0" + }, + { + "type": "library", + "bom-ref": "pkg:pypi/six@1.12.0?package-id=140655f434a07d89", + "author": "Benjamin Peterson ", + "name": "six", + "version": "1.12.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:benjamin_peterson_project:python-six:1.12.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/six@1.12.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/sqlite-libs@3.38.5-r0?arch=x86_64&upstream=sqlite&distro=alpine-3.16.5&package-id=6127833655f3995a", + "publisher": "Carlo Landmeter ", + "name": "sqlite-libs", + "version": "3.38.5-r0", + "description": "Sqlite3 library", + "licenses": [ + { + "license": { + "id": "blessing" + } + } + ], + "cpe": "cpe:2.3:a:sqlite-libs:sqlite-libs:3.38.5-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/sqlite-libs@3.38.5-r0?arch=x86_64&upstream=sqlite&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.sqlite.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&upstream=busybox&distro=alpine-3.16.5&package-id=674d1e2fba4d633a", + "publisher": "Sören Tempel ", + "name": "ssl_client", + "version": "1.35.0-r17", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.35.0-r17:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.35.0-r17?arch=x86_64&upstream=busybox&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/textfsm@1.1.0?package-id=d1ab92537b59f95e", + "name": "textfsm", + "version": "1.1.0", + "licenses": [ + { + "license": { + "name": "Apache License, Version 2.0" + } + } + ], + "cpe": "cpe:2.3:a:python-textfsm:python-textfsm:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:pypi/textfsm@1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/tzdata@2023c-r0?arch=x86_64&distro=alpine-3.16.5&package-id=c6c9b0e0277783a2", + "publisher": "Natanael Copa ", + "name": "tzdata", + "version": "2023c-r0", + "description": "Timezone data", + "licenses": [ + { + "license": { + "name": "Public-Domain" + } + } + ], + "cpe": "cpe:2.3:a:tzdata:tzdata:2023c-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/tzdata@2023c-r0?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://www.iana.org/time-zones", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:pypi/wheel@0.40.0?package-id=a5bbcb2514f67f7a", + "author": "Daniel Holth ", + "name": "wheel", + "version": "0.40.0", + "cpe": "cpe:2.3:a:daniel_holth_\\", + "name": "xz-libs", + "version": "5.2.5-r1", + "description": "Library and CLI tools for XZ and LZMA compressed files (libraries)", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "name": "Public-Domain" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:xz-libs:xz-libs:5.2.5-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/xz-libs@5.2.5-r1?arch=x86_64&upstream=xz&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://tukaani.org/xz", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.12-r3?arch=x86_64&distro=alpine-3.16.5&package-id=75f0d92f695b4303", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.12-r3", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.12-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.12-r3?arch=x86_64&distro=alpine-3.16.5", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.16.5", + "description": "Alpine Linux v3.16", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.16.5" + }, + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.2.0-r3?arch=x86_64&distro=alpine-3.11.13&package-id=61f27796f703939", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.2.0-r3", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.2.0-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.2.0-r3?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.1-r2?arch=x86_64&distro=alpine-3.11.13&package-id=79f884384758c443", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.1-r2", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.1-r2?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.10.8-r0?arch=x86_64&distro=alpine-3.11.13&package-id=28993d8277c2c4f", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.10.8-r0", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.10.8-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.10.8-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/avahi-libs@0.7-r5?arch=x86_64&upstream=avahi&distro=alpine-3.11.13&package-id=8b264d724369ba2d", + "publisher": "Natanael Copa ", + "name": "avahi-libs", + "version": "0.7-r5", + "description": "Libraries for avahi run-time use", + "licenses": [ + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:avahi-libs:avahi-libs:0.7-r5:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/avahi-libs@0.7-r5?arch=x86_64&upstream=avahi&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.avahi.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/bind-libs@9.16.20-r1?arch=x86_64&upstream=bind&distro=alpine-3.11.13&package-id=88c39fdfa1f591d", + "name": "bind-libs", + "version": "9.16.20-r1", + "description": "The ISC DNS server (libraries)", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:bind-libs:bind-libs:9.16.20-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/bind-libs@9.16.20-r1?arch=x86_64&upstream=bind&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.isc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/bind-tools@9.16.20-r1?arch=x86_64&upstream=bind&distro=alpine-3.11.13&package-id=28f669bd3e8e0a01", + "name": "bind-tools", + "version": "9.16.20-r1", + "description": "The ISC DNS tools", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + } + ], + "cpe": "cpe:2.3:a:bind-tools:bind-tools:9.16.20-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/bind-tools@9.16.20-r1?arch=x86_64&upstream=bind&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.isc.org/", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "eb62c645e9680ee0", + "name": "busybox", + "version": "1.31.1", + "cpe": "cpe:2.3:a:busybox:busybox:1.31.1:*:*:*:*:*:*:*" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.31.1-r11?arch=x86_64&distro=alpine-3.11.13&package-id=3f3095cbef6e353", + "publisher": "Natanael Copa ", + "name": "busybox", + "version": "1.31.1-r11", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.31.1-r11:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.31.1-r11?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates@20191127-r2?arch=x86_64&distro=alpine-3.11.13&package-id=91490583c2f9b81b", + "publisher": "Natanael Copa ", + "name": "ca-certificates", + "version": "20191127-r2", + "description": "Common CA certificates PEM files from Mozilla", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:20191127-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates@20191127-r2?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-cacert@20191127-r2?arch=x86_64&upstream=ca-certificates&distro=alpine-3.11.13&package-id=e135ce85ed757130", + "publisher": "Natanael Copa ", + "name": "ca-certificates-cacert", + "version": "20191127-r2", + "description": "Mozilla bundled certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-cacert:ca-certificates-cacert:20191127-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-cacert@20191127-r2?arch=x86_64&upstream=ca-certificates&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/cups-libs@2.2.12-r2?arch=x86_64&upstream=cups&distro=alpine-3.11.13&package-id=c6227a4b1413821d", + "publisher": "Natanael Copa ", + "name": "cups-libs", + "version": "2.2.12-r2", + "description": "CUPS libraries", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:cups-libs:cups-libs:2.2.12-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/cups-libs@2.2.12-r2?arch=x86_64&upstream=cups&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.cups.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/curl@7.79.1-r0?arch=x86_64&distro=alpine-3.11.13&package-id=d9c1833e179a6443", + "publisher": "Natanael Copa ", + "name": "curl", + "version": "7.79.1-r0", + "description": "URL retrival utility and library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:curl:curl:7.79.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/curl@7.79.1-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://curl.haxx.se/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/db@5.3.28-r1?arch=x86_64&distro=alpine-3.11.13&package-id=66e170c74bc97a1b", + "publisher": "Natanael Copa ", + "name": "db", + "version": "5.3.28-r1", + "description": "The Berkeley DB embedded database system", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:db:db:5.3.28-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/db@5.3.28-r1?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.oracle.com/technology/software/products/berkeley-db/index.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/dbus-libs@1.12.16-r3?arch=x86_64&upstream=dbus&distro=alpine-3.11.13&package-id=69c109976263e0a", + "publisher": "Natanael Copa ", + "name": "dbus-libs", + "version": "1.12.16-r3", + "description": "D-BUS access libraries", + "licenses": [ + { + "license": { + "id": "AFL-2.1" + } + }, + { + "license": { + "name": "OR" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:dbus-libs:dbus-libs:1.12.16-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/dbus-libs@1.12.16-r3?arch=x86_64&upstream=dbus&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.freedesktop.org/Software/dbus", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/expat@2.2.9-r1?arch=x86_64&distro=alpine-3.11.13&package-id=a22412a0d67882a", + "publisher": "Carlo Landmeter ", + "name": "expat", + "version": "2.2.9-r1", + "description": "An XML Parser library written in C", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:expat:expat:2.2.9-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/expat@2.2.9-r1?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "http://www.libexpat.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/fstrm@0.6.0-r1?arch=x86_64&distro=alpine-3.11.13&package-id=17609d4a84d9ddcf", + "name": "fstrm", + "version": "0.6.0-r1", + "description": "Frame Streams implementation in C", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:farsightsec:fstrm:0.6.0-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/fstrm@0.6.0-r1?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://github.com/farsightsec/fstrm", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/gmp@6.1.2-r1?arch=x86_64&distro=alpine-3.11.13&package-id=63a62a4cce7589e", + "publisher": "Natanael Copa ", + "name": "gmp", + "version": "6.1.2-r1", + "description": "A free library for arbitrary precision arithmetic", + "licenses": [ + { + "license": { + "id": "LGPL-3.0-only" + } + } + ], + "cpe": "cpe:2.3:a:gmp:gmp:6.1.2-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/gmp@6.1.2-r1?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://gmplib.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/gnutls@3.6.15-r1?arch=x86_64&distro=alpine-3.11.13&package-id=142615926eb369bd", + "publisher": "Natanael Copa ", + "name": "gnutls", + "version": "3.6.15-r1", + "description": "A TLS protocol implementation", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:gnutls:gnutls:3.6.15-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/gnutls@3.6.15-r1?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.gnutls.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ipmitool@1.8.18-r9?arch=x86_64&distro=alpine-3.11.13&package-id=838a810dc405bccb", + "publisher": "Natanael Copa ", + "name": "ipmitool", + "version": "1.8.18-r9", + "description": "Command-line interface to IPMI-enabled devices", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ipmitool:ipmitool:1.8.18-r9:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ipmitool@1.8.18-r9?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://github.com/ipmitool/ipmitool", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/jansson@2.12-r0?arch=x86_64&distro=alpine-3.11.13&package-id=8ae8607352e1db81", + "publisher": "Natanael Copa ", + "name": "jansson", + "version": "2.12-r0", + "description": "lightweight JSON library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jansson:jansson:2.12-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/jansson@2.12-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "http://www.digip.org/jansson/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/json-c@0.13.1-r1?arch=x86_64&distro=alpine-3.11.13&package-id=61b3e0650cbd3f19", + "publisher": "Natanael Copa ", + "name": "json-c", + "version": "0.13.1-r1", + "description": "A JSON implementation in C", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-c:json-c:0.13.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/json-c@0.13.1-r1?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://github.com/json-c/json-c/wiki", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/keyutils-libs@1.6.1-r0?arch=x86_64&upstream=keyutils&distro=alpine-3.11.13&package-id=1efd4d1e9196ab00", + "publisher": "Natanael Copa ", + "name": "keyutils-libs", + "version": "1.6.1-r0", + "description": "Key utilities library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:keyutils-libs:keyutils-libs:1.6.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/keyutils-libs@1.6.1-r0?arch=x86_64&upstream=keyutils&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "http://people.redhat.com/~dhowells/keyutils/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/krb5-conf@1.0-r1?arch=x86_64&distro=alpine-3.11.13&package-id=8126b757ea2731fe", + "publisher": "Natanael Copa ", + "name": "krb5-conf", + "version": "1.0-r1", + "description": "Shared krb5.conf for both MIT krb5 and heimdal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:krb5-conf:krb5-conf:1.0-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/krb5-conf@1.0-r1?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "http://web.mit.edu/kerberos/www/ http://h5l.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/krb5-libs@1.17.2-r0?arch=x86_64&upstream=krb5&distro=alpine-3.11.13&package-id=403e9028bb6dcd42", + "publisher": "Natanael Copa ", + "name": "krb5-libs", + "version": "1.17.2-r0", + "description": "The shared libraries used by Kerberos 5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:krb5-libs:krb5-libs:1.17.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/krb5-libs@1.17.2-r0?arch=x86_64&upstream=krb5&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://web.mit.edu/kerberos/www/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ldb@2.0.12-r0?arch=x86_64&distro=alpine-3.11.13&package-id=4e8ed2b5121bfd53", + "publisher": "Natanael Copa ", + "name": "ldb", + "version": "2.0.12-r0", + "description": "A schema-less, ldap like, API and database", + "licenses": [ + { + "license": { + "id": "LGPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:ldb:ldb:2.0.12-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ldb@2.0.12-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://ldb.samba.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libacl@2.2.53-r0?arch=x86_64&upstream=acl&distro=alpine-3.11.13&package-id=b1b4ec7e01d89822", + "publisher": "Natanael Copa ", + "name": "libacl", + "version": "2.2.53-r0", + "description": "Dynamic library for access control list support", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libacl:libacl:2.2.53-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libacl@2.2.53-r0?arch=x86_64&upstream=acl&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://savannah.nongnu.org/projects/acl", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libaio@0.3.112-r1?arch=x86_64&distro=alpine-3.11.13&package-id=4e946045fe2c39a5", + "publisher": "Leonardo Arena ", + "name": "libaio", + "version": "0.3.112-r1", + "description": "Asynchronous input/output library", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libaio:libaio:0.3.112-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libaio@0.3.112-r1?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://pagure.io/libaio", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libarchive@3.4.2-r0?arch=x86_64&distro=alpine-3.11.13&package-id=7916a505303813f5", + "publisher": "Natanael Copa ", + "name": "libarchive", + "version": "3.4.2-r0", + "description": "library that can create and read several streaming archive formats", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "name": "Public-Domain" + } + } + ], + "cpe": "cpe:2.3:a:libarchive:libarchive:3.4.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libarchive@3.4.2-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://libarchive.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libbz2@1.0.8-r1?arch=x86_64&upstream=bzip2&distro=alpine-3.11.13&package-id=b76636964a96efce", + "publisher": "Natanael Copa ", + "name": "libbz2", + "version": "1.0.8-r1", + "description": "Shared library for bz2", + "licenses": [ + { + "license": { + "id": "bzip2-1.0.6" + } + } + ], + "cpe": "cpe:2.3:a:libbz2:libbz2:1.0.8-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libbz2@1.0.8-r1?arch=x86_64&upstream=bzip2&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "http://sources.redhat.com/bzip2", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r0?arch=x86_64&upstream=libc-dev&distro=alpine-3.11.13&package-id=22b2a81fa39d5dd2", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r0", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r0?arch=x86_64&upstream=libc-dev&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "http://alpinelinux.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc6-compat@1.1.24-r3?arch=x86_64&upstream=musl&distro=alpine-3.11.13&package-id=a62efedb0602c750", + "publisher": "Timo Teräs ", + "name": "libc6-compat", + "version": "1.1.24-r3", + "description": "compatibility libraries for glibc", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libc6-compat:libc6-compat:1.1.24-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc6-compat@1.1.24-r3?arch=x86_64&upstream=musl&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcap@2.27-r0?arch=x86_64&distro=alpine-3.11.13&package-id=db9033a450637b66", + "publisher": "Natanael Copa ", + "name": "libcap", + "version": "2.27-r0", + "description": "POSIX 1003.1e capabilities", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "OR" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libcap:libcap:2.27-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcap@2.27-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "http://www.friedhoff.org/posixfilecaps.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcom_err@1.45.5-r0?arch=x86_64&upstream=e2fsprogs&distro=alpine-3.11.13&package-id=4e07bb5178d950cb", + "publisher": "Natanael Copa ", + "name": "libcom_err", + "version": "1.45.5-r0", + "description": "Common error description library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libcom-err:libcom-err:1.45.5-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcom_err@1.45.5-r0?arch=x86_64&upstream=e2fsprogs&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "http://e2fsprogs.sourceforge.net", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&upstream=openssl&distro=alpine-3.11.13&package-id=9dc8a627b3dc6e7c", + "publisher": "Timo Teras ", + "name": "libcrypto1.1", + "version": "1.1.1l-r0", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1l-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1l-r0?arch=x86_64&upstream=openssl&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.openssl.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcurl@7.79.1-r0?arch=x86_64&upstream=curl&distro=alpine-3.11.13&package-id=b055e046cf7212a1", + "publisher": "Natanael Copa ", + "name": "libcurl", + "version": "7.79.1-r0", + "description": "The multiprotocol file transfer library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libcurl:libcurl:7.79.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcurl@7.79.1-r0?arch=x86_64&upstream=curl&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://curl.haxx.se/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libffi@3.2.1-r6?arch=x86_64&distro=alpine-3.11.13&package-id=188dd6786479947c", + "publisher": "Natanael Copa ", + "name": "libffi", + "version": "3.2.1-r6", + "description": "A portable, high level programming interface to various calling conventions.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libffi:libffi:3.2.1-r6:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libffi@3.2.1-r6?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "http://sourceware.org/libffi", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libgcc@9.3.0-r0?arch=x86_64&upstream=gcc&distro=alpine-3.11.13&package-id=89cc23c6449d2429", + "publisher": "Natanael Copa ", + "name": "libgcc", + "version": "9.3.0-r0", + "description": "GNU C compiler runtime libraries", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libgcc:libgcc:9.3.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgcc@9.3.0-r0?arch=x86_64&upstream=gcc&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "http://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libintl@0.20.1-r2?arch=x86_64&upstream=gettext&distro=alpine-3.11.13&package-id=d59ebbea5e72dc6f", + "publisher": "Carlo Landmeter ", + "name": "libintl", + "version": "0.20.1-r2", + "description": "GNU gettext runtime library", + "licenses": [ + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libintl:libintl:0.20.1-r2:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libintl@0.20.1-r2?arch=x86_64&upstream=gettext&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/gettext/gettext.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libldap@2.4.48-r3?arch=x86_64&upstream=openldap&distro=alpine-3.11.13&package-id=43f853264ee84098", + "publisher": "Natanael Copa ", + "name": "libldap", + "version": "2.4.48-r3", + "description": "OpenLDAP libraries", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libldap:libldap:2.4.48-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libldap@2.4.48-r3?arch=x86_64&upstream=openldap&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "http://www.openldap.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libnsl@1.2.0-r1?arch=x86_64&distro=alpine-3.11.13&package-id=e1f2fcfa0b38530", + "publisher": "Valery Kartel ", + "name": "libnsl", + "version": "1.2.0-r1", + "description": "Public client interface for NIS(YP) and NIS+ in a IPv6 ready version", + "licenses": [ + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:thkukuk:libnsl:1.2.0-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libnsl@1.2.0-r1?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://github.com/thkukuk/libnsl", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libprotobuf@3.11.2-r1?arch=x86_64&upstream=protobuf&distro=alpine-3.11.13&package-id=afd815776e07bdd7", + "publisher": "Natanael Copa ", + "name": "libprotobuf", + "version": "3.11.2-r1", + "description": "Runtime library for C++ users of protocol buffers", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libprotobuf:libprotobuf:3.11.2-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libprotobuf@3.11.2-r1?arch=x86_64&upstream=protobuf&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://github.com/google/protobuf", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libprotoc@3.11.2-r1?arch=x86_64&upstream=protobuf&distro=alpine-3.11.13&package-id=d565e366f20c5c1d", + "publisher": "Natanael Copa ", + "name": "libprotoc", + "version": "3.11.2-r1", + "description": "Runtime library for Protocol Buffer compiler", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libprotoc:libprotoc:3.11.2-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libprotoc@3.11.2-r1?arch=x86_64&upstream=protobuf&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://github.com/google/protobuf", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libsasl@2.1.27-r5?arch=x86_64&upstream=cyrus-sasl&distro=alpine-3.11.13&package-id=d1c1ffb8a63b6c12", + "publisher": "Natanael Copa ", + "name": "libsasl", + "version": "2.1.27-r5", + "description": "Cyrus Simple Authentication and Security Layer (SASL) library", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:libsasl:libsasl:2.1.27-r5:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libsasl@2.1.27-r5?arch=x86_64&upstream=cyrus-sasl&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://cyrusimap.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libsmbclient@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13&package-id=8af66c5a794fa5db", + "publisher": "Natanael Copa ", + "name": "libsmbclient", + "version": "4.11.16-r0", + "description": "The SMB client library", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libsmbclient:libsmbclient:4.11.16-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libsmbclient@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.samba.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&upstream=openssl&distro=alpine-3.11.13&package-id=286e1bd630e38068", + "publisher": "Timo Teras ", + "name": "libssl1.1", + "version": "1.1.1l-r0", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "OpenSSL" + } + } + ], + "cpe": "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1l-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl1.1@1.1.1l-r0?arch=x86_64&upstream=openssl&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.openssl.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libstdc++@9.3.0-r0?arch=x86_64&upstream=gcc&distro=alpine-3.11.13&package-id=6fd631fecbbb6585", + "publisher": "Natanael Copa ", + "name": "libstdc++", + "version": "9.3.0-r0", + "description": "GNU C++ standard runtime library", + "licenses": [ + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:9.3.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libstdc++@9.3.0-r0?arch=x86_64&upstream=gcc&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "http://gcc.gnu.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libtasn1@4.15.0-r0?arch=x86_64&distro=alpine-3.11.13&package-id=dc012f0593261b2a", + "publisher": "Natanael Copa ", + "name": "libtasn1", + "version": "4.15.0-r0", + "description": "The ASN.1 library used in GNUTLS", + "licenses": [ + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "name": "LGPL" + } + } + ], + "cpe": "cpe:2.3:a:libtasn1:libtasn1:4.15.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libtasn1@4.15.0-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/gnutls/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libtirpc@1.1.4-r0?arch=x86_64&distro=alpine-3.11.13&package-id=a645a129c4e31ce8", + "publisher": "Natanael Copa ", + "name": "libtirpc", + "version": "1.1.4-r0", + "description": "Transport Independent RPC library (SunRPC replacement)", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libtirpc:libtirpc:1.1.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libtirpc@1.1.4-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://sourceforge.net/projects/libtirpc", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libtls-standalone@2.9.1-r0?arch=x86_64&distro=alpine-3.11.13&package-id=44d013a47dc758aa", + "name": "libtls-standalone", + "version": "2.9.1-r0", + "description": "libtls extricated from libressl sources", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libtls-standalone:libtls-standalone:2.9.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libtls-standalone@2.9.1-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.libressl.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libunistring@0.9.10-r0?arch=x86_64&distro=alpine-3.11.13&package-id=7500a925936e1eec", + "publisher": "Natanael Copa ", + "name": "libunistring", + "version": "0.9.10-r0", + "description": "Library for manipulating Unicode strings and C strings", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "OR" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libunistring:libunistring:0.9.10-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libunistring@0.9.10-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.gnu.org/software/libunistring/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libuv@1.34.0-r0?arch=x86_64&distro=alpine-3.11.13&package-id=d70bd9dca54a4f32", + "publisher": "Natanael Copa ", + "name": "libuv", + "version": "1.34.0-r0", + "description": "Cross-platform asychronous I/O", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libuv:libuv:1.34.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libuv@1.34.0-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://libuv.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libverto@0.3.1-r1?arch=x86_64&distro=alpine-3.11.13&package-id=b083bc0d20fed354", + "publisher": "Francesco Colista ", + "name": "libverto", + "version": "0.3.1-r1", + "description": "Main loop abstraction library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:npmccallum:libverto:0.3.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libverto@0.3.1-r1?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://github.com/npmccallum/libverto", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libwbclient@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13&package-id=11ff3a404952dfc9", + "publisher": "Natanael Copa ", + "name": "libwbclient", + "version": "4.11.16-r0", + "description": "Samba winbind client libraries", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libwbclient:libwbclient:4.11.16-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libwbclient@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.samba.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libxml2@2.9.12-r0?arch=x86_64&distro=alpine-3.11.13&package-id=58aab1a9515640d2", + "publisher": "Carlo Landmeter ", + "name": "libxml2", + "version": "2.9.12-r0", + "description": "XML parsing library, version 2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libxml2:libxml2:2.9.12-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libxml2@2.9.12-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "http://www.xmlsoft.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/linux-pam@1.3.1-r1?arch=x86_64&distro=alpine-3.11.13&package-id=8a864f15b49ecba8", + "publisher": "Rasmus Thomsen ", + "name": "linux-pam", + "version": "1.3.1-r1", + "description": "pluggable authentication modules for linux", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:linux-pam:linux-pam:1.3.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/linux-pam@1.3.1-r1?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "http://www.kernel.org/pub/linux/libs/pam", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/lmdb@0.9.24-r1?arch=x86_64&distro=alpine-3.11.13&package-id=8df5d38a2248bbbe", + "publisher": "Natanael Copa ", + "name": "lmdb", + "version": "0.9.24-r1", + "description": "Lightning Memory-Mapped Database", + "licenses": [ + { + "license": { + "id": "OLDAP-2.8" + } + } + ], + "cpe": "cpe:2.3:a:lmdb:lmdb:0.9.24-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/lmdb@0.9.24-r1?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://symas.com/mdb", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/lz4-libs@1.9.2-r0?arch=x86_64&upstream=lz4&distro=alpine-3.11.13&package-id=3e81dc54702c0485", + "publisher": "Stuart Cardall ", + "name": "lz4-libs", + "version": "1.9.2-r0", + "description": "LZ4 is lossless compression algorithm with fast decoder @ multiple GB/s per core. (libraries)", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:lz4-libs:lz4-libs:1.9.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/lz4-libs@1.9.2-r0?arch=x86_64&upstream=lz4&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://github.com/lz4/lz4", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.1.24-r3?arch=x86_64&distro=alpine-3.11.13&package-id=485b70fc6d5760", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.1.24-r3", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.1.24-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.1.24-r3?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.1.24-r3?arch=x86_64&upstream=musl&distro=alpine-3.11.13&package-id=fc850f3aca8a5da", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.1.24-r3", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "BSD" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.1.24-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.1.24-r3?arch=x86_64&upstream=musl&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ncurses-libs@6.1_p20200118-r4?arch=x86_64&upstream=ncurses&distro=alpine-3.11.13&package-id=fd5b1d7554bf8d7", + "publisher": "Natanael Copa ", + "name": "ncurses-libs", + "version": "6.1_p20200118-r4", + "description": "Ncurses libraries", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-libs:ncurses-libs:6.1_p20200118-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ncurses-libs@6.1_p20200118-r4?arch=x86_64&upstream=ncurses&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://invisible-island.net/ncurses/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ncurses-terminfo-base@6.1_p20200118-r4?arch=x86_64&upstream=ncurses&distro=alpine-3.11.13&package-id=6efb3458396ed104", + "publisher": "Natanael Copa ", + "name": "ncurses-terminfo-base", + "version": "6.1_p20200118-r4", + "description": "Descriptions of common terminals", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ncurses-terminfo-base:ncurses-terminfo-base:6.1_p20200118-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ncurses-terminfo-base@6.1_p20200118-r4?arch=x86_64&upstream=ncurses&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://invisible-island.net/ncurses/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/nettle@3.5.1-r0?arch=x86_64&distro=alpine-3.11.13&package-id=671ec146c6606369", + "publisher": "Fabian Affolter ", + "name": "nettle", + "version": "3.5.1-r0", + "description": "A low-level cryptographic library", + "licenses": [ + { + "license": { + "id": "LGPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:nettle:nettle:3.5.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/nettle@3.5.1-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.lysator.liu.se/~nisse/nettle/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/nghttp2-libs@1.40.0-r1?arch=x86_64&upstream=nghttp2&distro=alpine-3.11.13&package-id=569777ff2f19d9f3", + "publisher": "Francesco Colista ", + "name": "nghttp2-libs", + "version": "1.40.0-r1", + "description": "Experimental HTTP/2 client, server and proxy (libraries)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nghttp2-libs:nghttp2-libs:1.40.0-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/nghttp2-libs@1.40.0-r1?arch=x86_64&upstream=nghttp2&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://nghttp2.org", + "type": "distribution" + } + ] + }, + { + "type": "application", + "bom-ref": "pkg:generic/node@15.12.0?package-id=35373778dc80f093", + "name": "node", + "version": "15.12.0", + "cpe": "cpe:2.3:a:nodejs:node.js:15.12.0:*:*:*:*:*:*:*", + "purl": "pkg:generic/node@15.12.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/p11-kit@0.23.18.1-r1?arch=x86_64&distro=alpine-3.11.13&package-id=3fae6ae251d13381", + "publisher": "Fabian Affolter ", + "name": "p11-kit", + "version": "0.23.18.1-r1", + "description": "Library for loading and sharing PKCS#11 modules", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:p11-kit:p11-kit:0.23.18.1-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/p11-kit@0.23.18.1-r1?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://p11-glue.freedesktop.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/pliant-worker@1.0.0?package-id=7f61899643866296", + "name": "pliant-worker", + "version": "1.0.0", + "description": "pliant-worker", + "cpe": "cpe:2.3:a:pliant-worker:pliant-worker:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pliant-worker@1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/popt@1.16-r7?arch=x86_64&distro=alpine-3.11.13&package-id=38326df6b019a9fe", + "publisher": "Natanael Copa ", + "name": "popt", + "version": "1.16-r7", + "description": "A commandline option parser", + "licenses": [ + { + "license": { + "name": "custom" + } + } + ], + "cpe": "cpe:2.3:a:popt:popt:1.16-r7:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/popt@1.16-r7?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "http://rpm5.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/protobuf-c@1.3.2-r3?arch=x86_64&distro=alpine-3.11.13&package-id=1a2cb23d9085b099", + "publisher": "Leonardo Arena ", + "name": "protobuf-c", + "version": "1.3.2-r3", + "description": "C bindings for Google's Protocol Buffers", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:protobuf-c:protobuf-c:1.3.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/protobuf-c@1.3.2-r3?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://github.com/protobuf-c/protobuf-c/wiki", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/readline@8.0.1-r0?arch=x86_64&distro=alpine-3.11.13&package-id=3e8cafa9179e5ff4", + "publisher": "Natanael Copa ", + "name": "readline", + "version": "8.0.1-r0", + "description": "GNU readline library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:readline:readline:8.0.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/readline@8.0.1-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://tiswww.cwru.edu/php/chet/readline/rltop.html", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/samba-client@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13&package-id=5ccc358506c8dcf0", + "publisher": "Natanael Copa ", + "name": "samba-client", + "version": "4.11.16-r0", + "description": "Samba client programs", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:samba-client:samba-client:4.11.16-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/samba-client@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.samba.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/samba-client-libs@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13&package-id=6675daffcef79110", + "publisher": "Natanael Copa ", + "name": "samba-client-libs", + "version": "4.11.16-r0", + "description": "Samba libraries used by clients", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:samba-client-libs:samba-client-libs:4.11.16-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/samba-client-libs@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.samba.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/samba-common@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13&package-id=ec7bb041d26583b", + "publisher": "Natanael Copa ", + "name": "samba-common", + "version": "4.11.16-r0", + "description": "Samba common files for both client an servers", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:samba-common:samba-common:4.11.16-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/samba-common@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.samba.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/samba-common-libs@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13&package-id=4b2d320389406c70", + "publisher": "Natanael Copa ", + "name": "samba-common-libs", + "version": "4.11.16-r0", + "description": "Samba libraries shared by common-tools, server and clients", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:samba-common-libs:samba-common-libs:4.11.16-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/samba-common-libs@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.samba.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/samba-common-server-libs@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13&package-id=e8ba62e347946aa0", + "publisher": "Natanael Copa ", + "name": "samba-common-server-libs", + "version": "4.11.16-r0", + "description": "Samba libraries shared by common-tools and servers", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:samba-common-server-libs:samba-common-server-libs:4.11.16-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/samba-common-server-libs@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.samba.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/samba-common-tools@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13&package-id=c5b3168de4318fc7", + "publisher": "Natanael Copa ", + "name": "samba-common-tools", + "version": "4.11.16-r0", + "description": "Tools for Samba servers and clients", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:samba-common-tools:samba-common-tools:4.11.16-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/samba-common-tools@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.samba.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/samba-heimdal-libs@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13&package-id=99cb669afdc1c0f3", + "publisher": "Natanael Copa ", + "name": "samba-heimdal-libs", + "version": "4.11.16-r0", + "description": "Samba heimdal libraries", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:samba-heimdal-libs:samba-heimdal-libs:4.11.16-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/samba-heimdal-libs@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.samba.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/samba-libs@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13&package-id=20dd1cce88d01722", + "publisher": "Natanael Copa ", + "name": "samba-libs", + "version": "4.11.16-r0", + "description": "Samba core libraries", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:samba-libs:samba-libs:4.11.16-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/samba-libs@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.samba.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/samba-server-libs@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13&package-id=1534176fb5bed6a8", + "publisher": "Natanael Copa ", + "name": "samba-server-libs", + "version": "4.11.16-r0", + "description": "Samba libraries shared by server and windbind", + "licenses": [ + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:samba-server-libs:samba-server-libs:4.11.16-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/samba-server-libs@4.11.16-r0?arch=x86_64&upstream=samba&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.samba.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.2.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.11.13&package-id=d7d0b4983b78c706", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.2.4-r0", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.2.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.2.4-r0?arch=x86_64&upstream=pax-utils&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.31.1-r11?arch=x86_64&upstream=busybox&distro=alpine-3.11.13&package-id=685c6f235663ea24", + "publisher": "Natanael Copa ", + "name": "ssl_client", + "version": "1.31.1-r11", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.31.1-r11:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.31.1-r11?arch=x86_64&upstream=busybox&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/talloc@2.3.1-r0?arch=x86_64&distro=alpine-3.11.13&package-id=5da9d2f15cfe4b18", + "name": "talloc", + "version": "2.3.1-r0", + "description": "Memory pool management library", + "licenses": [ + { + "license": { + "id": "LGPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:talloc:talloc:2.3.1-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/talloc@2.3.1-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://talloc.samba.org", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/tdb-libs@1.4.3-r0?arch=x86_64&upstream=tdb&distro=alpine-3.11.13&package-id=6ed79e8615800e78", + "publisher": "Natanael Copa ", + "name": "tdb-libs", + "version": "1.4.3-r0", + "description": "The tdb library (libraries)", + "licenses": [ + { + "license": { + "id": "LGPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:tdb-libs:tdb-libs:1.4.3-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/tdb-libs@1.4.3-r0?arch=x86_64&upstream=tdb&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://tdb.samba.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/tevent@0.10.2-r0?arch=x86_64&distro=alpine-3.11.13&package-id=cf2aba5e3bc183db", + "publisher": "Natanael Copa ", + "name": "tevent", + "version": "0.10.2-r0", + "description": "The tevent library", + "licenses": [ + { + "license": { + "id": "LGPL-3.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:tevent:tevent:0.10.2-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/tevent@0.10.2-r0?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://tevent.samba.org/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/xz-libs@5.2.4-r0?arch=x86_64&upstream=xz&distro=alpine-3.11.13&package-id=fa54ca5d4cf9bd53", + "publisher": "Natanael Copa ", + "name": "xz-libs", + "version": "5.2.4-r0", + "description": "Library and CLI tools for XZ and LZMA compressed files (libraries)", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "Public-Domain" + } + } + ], + "cpe": "cpe:2.3:a:xz-libs:xz-libs:5.2.4-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/xz-libs@5.2.4-r0?arch=x86_64&upstream=xz&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://tukaani.org/xz", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=alpine-3.11.13&package-id=9886c2465766333f", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.11-r3", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.11-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zstd-libs@1.4.9-r0?arch=x86_64&upstream=zstd&distro=alpine-3.11.13&package-id=88c2db4c47f52e51", + "publisher": "André Klitzing ", + "name": "zstd-libs", + "version": "1.4.9-r0", + "description": "Zstandard - Fast real-time compression algorithm (libraries)", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:zstd-libs:zstd-libs:1.4.9-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zstd-libs@1.4.9-r0?arch=x86_64&upstream=zstd&distro=alpine-3.11.13", + "externalReferences": [ + { + "url": "https://www.zstd.net", + "type": "distribution" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.11.13", + "description": "Alpine Linux v3.11", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.11.13" + }, + "externalReferences": [ + { + "url": "https://bugs.alpinelinux.org/", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "application", + "bom-ref": "bf62711a099cabc1", + "name": "busybox", + "version": "1.36.0", + "cpe": "cpe:2.3:a:busybox:busybox:1.36.0:*:*:*:*:*:*:*" + }, + { + "type": "operating-system", + "name": "busybox", + "version": "1.36.0", + "description": "BusyBox v1.36.0", + "swid": { + "tagId": "busybox", + "name": "busybox", + "version": "1.36.0" + } + } + ] +} diff --git a/test/normalize/cdx-1-5-components.bom.json b/test/normalize/cdx-1-5-components.bom.json new file mode 100644 index 00000000..1d9aea03 --- /dev/null +++ b/test/normalize/cdx-1-5-components.bom.json @@ -0,0 +1,174 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.5", + "serialNumber": "urn:uuid:xxxx", + "version": 1, + "metadata": { + "component": { + "type": "application", + "name": "Acme" + } + }, + "components": [ + { + "type": "operating-system", + "name": "busybox", + "version": "1.36.0", + "description": "BusyBox v1.36.0", + "swid": { + "tagId": "busybox", + "name": "busybox", + "version": "1.36.0" + } + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/libjq1@1.5+dfsg-2+b1?arch=amd64&upstream=jq%401.5+dfsg-2&distro=debian-10&package-id=c98431b078a20aed", + "publisher": "ChangZhuo Chen (陳昌倬) ", + "name": "libjq1", + "version": "1.5+dfsg-2+b1", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "Expat" + } + }, + { + "license": { + "id": "CC-BY-3.0" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:libjq1:libjq1:1.5\\+dfsg-2\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libjq1@1.5+dfsg-2+b1?arch=amd64&upstream=jq%401.5+dfsg-2&distro=debian-10" + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.11.13", + "description": "Alpine Linux v3.11", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.11.13" + }, + "externalReferences": [ + { + "url": "https://bugs.alpinelinux.org/", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/type-is@1.6.18?package-id=5bdf50fc9a89514f", + "name": "type-is", + "version": "1.6.18", + "description": "Infer the content-type of a request.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:type-is:type-is:1.6.18:*:*:*:*:*:*:*", + "purl": "pkg:npm/type-is@1.6.18", + "externalReferences": [ + { + "url": "jshttp/type-is", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=a36ca63616a6d457", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "1.1.11", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + }, + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:deb/debian/acl@2.2.53-4?arch=amd64&distro=debian-10&package-id=3fcaa2363534185d", + "publisher": "Guillem Jover ", + "name": "acl", + "version": "2.2.53-4", + "licenses": [ + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:acl:acl:2.2.53-4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/acl@2.2.53-4?arch=amd64&distro=debian-10" + }, + { + "type": "application", + "bom-ref": "bf62711a099cabc1", + "name": "busybox", + "version": "1.36.0", + "cpe": "cpe:2.3:a:busybox:busybox:1.36.0:*:*:*:*:*:*:*" + } + ] +} diff --git a/test/normalize/cdx-1-5-dependencies.bom.json b/test/normalize/cdx-1-5-dependencies.bom.json new file mode 100644 index 00000000..b3a27442 --- /dev/null +++ b/test/normalize/cdx-1-5-dependencies.bom.json @@ -0,0 +1,65 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.5", + "serialNumber": "urn:uuid:xxxx", + "version": 1, + "metadata": { + "component": { + "bom-ref": "acme-app", + "name": "Acme Application", + "type": "application", + "version": "x.y.z" + } + }, + "components": [ + { + "bom-ref": "pkg:maven/org.acme/web-framework@1.0.0", + "group": "org.acme", + "name": "web-framework", + "purl": "pkg:maven/org.acme/web-framework@1.0.0", + "type": "library", + "version": "1.0.0" + }, + { + "bom-ref": "pkg:maven/org.acme/persistence@3.1.0", + "group": "org.acme", + "name": "persistence", + "purl": "pkg:maven/org.acme/persistence@3.1.0", + "type": "library", + "version": "3.1.0" + }, + { + "bom-ref": "pkg:maven/org.acme/common-util@3.0.0", + "group": "org.acme", + "name": "common-util", + "purl": "pkg:maven/org.acme/common-util@3.0.0", + "type": "library", + "version": "3.0.0" + } + ], + "dependencies": [ + { + "dependsOn": [ + "pkg:maven/org.acme/common-util@3.0.0" + ], + "ref": "pkg:maven/org.acme/web-framework@1.0.0" + }, + { + "dependsOn": [ + "pkg:maven/org.acme/common-util@3.0.0" + ], + "ref": "pkg:maven/org.acme/persistence@3.1.0" + }, + { + "dependsOn": [ + "pkg:maven/org.acme/web-framework@1.0.0", + "pkg:maven/org.acme/persistence@3.1.0" + ], + "ref": "acme-app" + }, + { + "dependsOn": [], + "ref": "pkg:maven/org.acme/common-util@3.0.0" + } + ] +} \ No newline at end of file diff --git a/test/normalize/cdx-1-5-external-references.bom.json b/test/normalize/cdx-1-5-external-references.bom.json new file mode 100644 index 00000000..fa22a076 --- /dev/null +++ b/test/normalize/cdx-1-5-external-references.bom.json @@ -0,0 +1,64 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.5", + "serialNumber":"urn:uuid:xxxx", + "version": 1, + "metadata": { + "component": { + "bom-ref": "acme-app", + "name": "Acme Application", + "type": "application", + "version": "x.y.z" + } +}, + "externalReferences": [ + { + "comment": "Vendor provided documentation for the product", + "type": "documentation", + "url": "https://example.org/support/documentation/portal-server/1.0.0" + }, + { + "comment": "An external SBOM that describes what this component includes. Integrity verification should be performed to ensure the BOM has not been tampered with.", + "hashes": [ + { + "alg": "SHA-256", + "content": "708f1f53b41f11f02d12a11b1a38d2905d47b099afc71a0f1124ef8582ec7313" + }, + { + "alg": "SHA-384", + "content": "d4835048a0f57c74b8fb617d5366ab81376fc92bebe9a93bf24ba7f9da6c9aeeb6179f5d1361f6533211b15f3224cbad" + }, + { + "alg": "SHA-512", + "content": "74a51ff45e4c11df9ba1f0094282c80489649cb157a75fa337992d2d4592a5a1b8cb4525de8db0ae25233553924d76c36e093ea7fa9df4e5b8b07fd2e074efd6" + } + ], + "type": "bom", + "url": "https://example.org/support/sbom/portal-server/1.0.0" + }, + { + "comment": "Security advisories from the vendor", + "type": "advisories", + "url": "https://example.org/security/feed/csaf" + }, + { + "comment": "Refers to a specific BOM with the specified serial number. Integrity verification should be performed to ensure the BOM has not been tampered with.", + "hashes": [ + { + "alg": "SHA-256", + "content": "9048a24d72d3d4a1a0384f8f925566b44f133dd2a0194111a2daeb1cf9f7015b" + }, + { + "alg": "SHA-384", + "content": "8640424aa9bf337678580c55d23e54b973703c6e586987d85700f24d5de383cd1add590ee5b98d1710a01aff212687f3" + }, + { + "alg": "SHA-512", + "content": "45c6e3d03ec4207234e926063c484446d8b55f4bfce3f929f44cbc2320565290cc4b71de70c1d983792c6d63504f47f6b94513d09847dbae69c8f7cdd51ce980" + } + ], + "type": "bom", + "url": "urn:uuid:bdd819e6-ee8f-42d7-a4d0-166ff44d51e8" + } + ] +} \ No newline at end of file diff --git a/test/normalize/cdx-1-5-licenses.bom.json b/test/normalize/cdx-1-5-licenses.bom.json new file mode 100644 index 00000000..9775926c --- /dev/null +++ b/test/normalize/cdx-1-5-licenses.bom.json @@ -0,0 +1,133 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.5", + "version": 1, + "serialNumber": "urn:uuid:xxxx", + "metadata": { + "component": { + "type": "application", + "bom-ref": "pkg:app/sample@1.0.0", + "name": "ACME Application", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "UFL" + } + }, + { + "license": { + "name": "BSD-3-Clause" + } + }, + { + "license": { + "name": "Apache-2.0" + } + } + ] + }, + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "CC-BY-NC-4.0" + } + } + ] + }, + "services":[ + { + "bom-ref": "service:example.com/myservices/foo", + "name": "Foo", + "licenses": [ + { + "license": { + "id": "BSL-1.0" + } + }, + { + "license": { + "id": "ADSL" + } + } + ] + } + ], + "components": [ + { + "type": "library", + "bom-ref": "pkg:lib/libraryA@1.0.0", + "purl": "pkg:lib/libraryA@1.0.0", + "name": "Library A", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "id": "Apache-2.0", + "text": { + "contentType": "text/plain", + "encoding": "base64", + "content": "CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEFwYWNoZSBMaWNlbnNlCiAgICAgICAgICAgICAgICAgICAgICAgICAgIFZlcnNpb24gMi4wLCBKYW51YXJ5IDIwMDQKICAgICAgICAgICAgICAgICAgICAgICAgaHR0cDovL3d3dy5hcGFjaGUub3JnL2xpY2Vuc2VzLwoKICAgVEVSTVMgQU5EIENPTkRJVElPTlMgRk9SIFVTRSwgUkVQUk9EVUNUSU9OLCBBTkQgRElTVFJJQlVUSU9OCgogICAxLiBEZWZpbml0aW9ucy4KCiAgICAgICJMaWNlbnNlIiBzaGFsbCBtZWFuIHRoZSB0ZXJtcyAiW10iCiAgICAgIHJlcGxhY2VkIHdpdGggeW91ciBvd24gaWRlbnRpZnlpbmcgaW5mb3JtYXRpb24uIChEb24ndCBpbmNsdWRlCiAgICAgIHRoZSBicmFja2V0cyEpICBUaGUgdGV4dCBzaG91bGQgYmUgZW5jbG9zZWQgaWBlcm1pc3Npb25zIGFuZAogICBsaW1pdGF0aW9ucyB1bmRlciB0aGUgTGljZW5zZS4=" + }, + "url": "https://www.apache.org/licenses/LICENSE-2.0.txt" + } + }, + { + "license": { + "id": "Zeta" + } + }, + { + "license": { + "id": "Apache-2.0" + } + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:lib/libraryB@1.0.0", + "purl": "pkg:lib/libraryB@1.0.0", + "name": "Library B", + "version": "1.0.0", + "description": "Library B description.", + "licenses": [ + { + "license": { + "name": "Apache-2.0", + "text": { + "contentType": "text/plain", + "encoding": "base64", + "content": "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" + }, + "url": "https://www.apache.org/licenses/LICENSE-2.0-variant.txt" + } + }, + { + "expression": "GPL3-only OR GPL4" + }, + { + "expression": "Apache-2.0 AND (MIT OR BSD-2-Clause)" + }, + { + "license": { + "name": "Apache-1.0" + } + } + ] + } + ] +} diff --git a/test/normalize/cdx-1-5-services.bom.json b/test/normalize/cdx-1-5-services.bom.json new file mode 100644 index 00000000..d69e5ab9 --- /dev/null +++ b/test/normalize/cdx-1-5-services.bom.json @@ -0,0 +1,201 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.4", + "serialNumber": "urn:uuid:3e671687-395b-41f5-a30f-a58921a69b79", + "version": 1, + "metadata": { + "timestamp": "2021-01-10T12:00:00Z", + "component": { + "bom-ref": "acme-application", + "type": "application", + "name": "Acme Cloud Example", + "version": "2022-1" + } + }, + "services": [ + { + "bom-ref": "api-gateway", + "provider": { + "name": "Acme Inc", + "url": [ "https://example.com" ] + }, + "group": "com.example", + "name": "API Gateway", + "version": "2022-1", + "description": "Example API Gateway", + "endpoints": [ + "https://example.com/", + "https://example.com/app" + ], + "authenticated": false, + "x-trust-boundary": true, + "data": [ + { + "classification": "PII", + "flow": "bi-directional" + }, + { + "classification": "PIFI", + "flow": "bi-directional" + }, + { + "classification": "Public", + "flow": "bi-directional" + } + ], + "externalReferences": [ + { + "type": "documentation", + "url": "http://example.com/app/swagger" + } + ], + "services": [ + { + "bom-ref": "ms-1.example.com", + "provider": { + "name": "Acme Inc", + "url": [ "https://example.com" ] + }, + "group": "com.example", + "name": "Microservice 1", + "version": "2022-1", + "description": "Example Microservice", + "endpoints": [ + "https://ms-1.example.com" + ], + "authenticated": true, + "x-trust-boundary": false, + "data": [ + { + "classification": "PII", + "flow": "bi-directional" + } + ], + "externalReferences": [ + { + "type": "documentation", + "url": "https://ms-1.example.com/swagger" + } + ] + }, + { + "bom-ref": "ms-2.example.com", + "provider": { + "name": "Acme Inc", + "url": [ "https://example.com" ] + }, + "group": "com.example", + "name": "Microservice 2", + "version": "2022-1", + "description": "Example Microservice", + "endpoints": [ + "https://ms-2.example.com" + ], + "authenticated": true, + "x-trust-boundary": false, + "data": [ + { + "classification": "PIFI", + "flow": "bi-directional" + } + ], + "externalReferences": [ + { + "type": "documentation", + "url": "https://ms-2.example.com/swagger" + } + ] + }, + { + "bom-ref": "ms-3.example.com", + "provider": { + "name": "Acme Inc", + "url": [ "https://example.com" ] + }, + "group": "com.example", + "name": "Microservice 3", + "version": "2022-1", + "description": "Example Microservice", + "endpoints": [ + "https://ms-3.example.com" + ], + "authenticated": true, + "x-trust-boundary": false, + "data": [ + { + "classification": "Public", + "flow": "bi-directional" + } + ], + "externalReferences": [ + { + "type": "documentation", + "url": "https://ms-3.example.com/swagger" + } + ] + }, + { + "bom-ref": "ms-1-pgsql.example.com", + "group": "org.postgresql", + "name": "Postgres", + "version": "14.1", + "description": "Postgres database for Microservice #1", + "endpoints": [ + "https://ms-1-pgsql.example.com:5432" + ], + "authenticated": true, + "x-trust-boundary": false, + "data": [ + { + "classification": "PII", + "flow": "bi-directional" + } + ] + }, + { + "bom-ref": "s3-example.amazon.com", + "group": "com.amazon", + "name": "S3", + "description": "S3 bucket", + "endpoints": [ + "https://s3-example.amazon.com" + ], + "authenticated": true, + "x-trust-boundary": true, + "data": [ + { + "classification": "Public", + "flow": "bi-directional" + } + ] + } + ] + } + ], + "dependencies": [ + { + "ref": "acme-application", + "dependsOn": [ "api-gateway" ] + }, + { + "ref": "api-gateway", + "dependsOn": [ + "ms-1.example.com", + "ms-2.example.com", + "ms-3.example.com" + ] + }, + { + "ref": "ms-1.example.com", + "dependsOn": [ "ms-1-pgsql.example.com" ] + }, + { + "ref": "ms-2.example.com", + "dependsOn": [ ] + }, + { + "ref": "ms-3.example.com", + "dependsOn": [ "s3-example.amazon.com" ] + } + ] +} diff --git a/test/normalize/cdx-1-5-vulnerabilities-container-nats-box.bom.json b/test/normalize/cdx-1-5-vulnerabilities-container-nats-box.bom.json new file mode 100644 index 00000000..a980b319 --- /dev/null +++ b/test/normalize/cdx-1-5-vulnerabilities-container-nats-box.bom.json @@ -0,0 +1,10157 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.5", + "serialNumber": "urn:uuid:xxxx", + "version": 1, + "metadata": { + "component": { + "type": "container", + "bom-ref": "pkg:oci/nats-box@sha256%3Acaf0c9fe15a9a88d001c74fd9d80f7f6fd57474aa243cd63a9a086eda9e202be?arch=amd64&repository_url=index.docker.io%2Fnats-io%2Fnats-box", + "name": "nats-io/nats-box", + "purl": "pkg:oci/nats-box@sha256%3Acaf0c9fe15a9a88d001c74fd9d80f7f6fd57474aa243cd63a9a086eda9e202be?arch=amd64&repository_url=index.docker.io%2Fnats-io%2Fnats-box" + } + }, + "components": [ + { + "type": "library", + "bom-ref": "00d71201-cd27-4648-ad71-190cd4b4abf8", + "name": "github.com/nats-io/nkeys", + "version": "v0.1.4", + "purl": "pkg:golang/github.com/nats-io/nkeys@v0.1.4" + }, + { + "type": "library", + "bom-ref": "02c6e323-75c9-41ad-a48b-ea236df51a1a", + "name": "github.com/AlecAivazis/survey/v2", + "version": "v2.2.12", + "purl": "pkg:golang/github.com/alecaivazis/survey/v2@v2.2.12" + }, + { + "type": "library", + "bom-ref": "036e29ed-0565-4dff-be02-dc8e2b0376d7", + "name": "github.com/fatih/color", + "version": "v1.10.0", + "purl": "pkg:golang/github.com/fatih/color@v1.10.0" + }, + { + "type": "library", + "bom-ref": "1044da61-152a-465b-8952-c9e949247616", + "name": "github.com/kballard/go-shellquote", + "version": "v0.0.0-20180428030007-95032a82bc51", + "purl": "pkg:golang/github.com/kballard/go-shellquote@v0.0.0-20180428030007-95032a82bc51" + }, + { + "type": "application", + "bom-ref": "17d6a00d-ad1c-422f-ab52-07d021d4d62a", + "name": "usr/local/bin/stan-sub" + }, + { + "type": "library", + "bom-ref": "1f71cc2c-4dae-4721-a209-956d08b69871", + "name": "github.com/xlab/tablewriter", + "version": "v0.0.0-20160610135559-80b567a11ad5", + "purl": "pkg:golang/github.com/xlab/tablewriter@v0.0.0-20160610135559-80b567a11ad5" + }, + { + "type": "library", + "bom-ref": "232a0439-a241-452a-be09-f5d63c6335ef", + "name": "github.com/nats-io/nats.go", + "version": "v1.10.0", + "purl": "pkg:golang/github.com/nats-io/nats.go@v1.10.0" + }, + { + "type": "library", + "bom-ref": "26b20f66-3994-4e05-adb5-c3a663fdc0d3", + "name": "github.com/nats-io/nuid", + "version": "v1.0.1", + "purl": "pkg:golang/github.com/nats-io/nuid@v1.0.1" + }, + { + "type": "library", + "bom-ref": "2ce6cbe0-970f-4185-9e29-4e61713b2391", + "name": "github.com/nats-io/nuid", + "version": "v1.0.1", + "purl": "pkg:golang/github.com/nats-io/nuid@v1.0.1" + }, + { + "type": "library", + "bom-ref": "2dabc52f-279a-4393-91e6-5b3034b68d60", + "name": "github.com/nats-io/nuid", + "version": "v1.0.1", + "purl": "pkg:golang/github.com/nats-io/nuid@v1.0.1" + }, + { + "type": "library", + "bom-ref": "3550f049-6eb2-41a9-8e67-eec39e46a33d", + "name": "github.com/mattn/go-colorable", + "version": "v0.1.8", + "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.8" + }, + { + "type": "application", + "bom-ref": "37100b09-d58e-456b-bf66-96cb133c434d", + "name": "usr/local/bin/stan-bench" + }, + { + "type": "library", + "bom-ref": "3a508e2a-ffa6-44b1-a334-46b9aaaf403b", + "name": "github.com/nats-io/nkeys", + "version": "v0.1.4", + "purl": "pkg:golang/github.com/nats-io/nkeys@v0.1.4" + }, + { + "type": "library", + "bom-ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "name": "github.com/nats-io/jwt", + "version": "v0.3.2", + "purl": "pkg:golang/github.com/nats-io/jwt@v0.3.2" + }, + { + "type": "library", + "bom-ref": "417740b7-723b-4313-8059-5f1b4945dc11", + "name": "github.com/nats-io/nkeys", + "version": "v0.1.4", + "purl": "pkg:golang/github.com/nats-io/nkeys@v0.1.4" + }, + { + "type": "library", + "bom-ref": "4497229a-93b4-4299-a9e6-a1070b6ffda5", + "name": "github.com/gogo/protobuf", + "version": "v1.3.2", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2" + }, + { + "type": "library", + "bom-ref": "4fbc1e52-81cf-4163-a4c0-dfc0ae24f480", + "name": "github.com/nats-io/nuid", + "version": "v1.0.1", + "purl": "pkg:golang/github.com/nats-io/nuid@v1.0.1" + }, + { + "type": "library", + "bom-ref": "5b9357f0-f8fd-4f05-a2c8-d43d47bad559", + "name": "github.com/kballard/go-shellquote", + "version": "v0.0.0-20180428030007-95032a82bc51", + "purl": "pkg:golang/github.com/kballard/go-shellquote@v0.0.0-20180428030007-95032a82bc51" + }, + { + "type": "application", + "bom-ref": "5bedfcbd-bcb9-4b36-ac1c-69b77c8b0b45", + "name": "usr/local/bin/stan-pub" + }, + { + "type": "application", + "bom-ref": "5e630d92-734e-441e-97bc-292689866d19", + "name": "usr/local/bin/nats-top" + }, + { + "type": "library", + "bom-ref": "63635711-87a0-4f17-a181-a1a240810ec4", + "name": "github.com/xlab/tablewriter", + "version": "v0.0.0-20160610135559-80b567a11ad5", + "purl": "pkg:golang/github.com/xlab/tablewriter@v0.0.0-20160610135559-80b567a11ad5" + }, + { + "type": "library", + "bom-ref": "64ecbd63-f74a-4fcc-a240-3f8a16435789", + "name": "golang.org/x/crypto", + "version": "v0.0.0-20200622213623-75b288015ac9", + "purl": "pkg:golang/golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9" + }, + { + "type": "library", + "bom-ref": "6bd9a336-e7bc-41d1-8c95-294cb3eb6726", + "name": "github.com/mattn/go-isatty", + "version": "v0.0.12", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.12" + }, + { + "type": "library", + "bom-ref": "718081db-83c2-4309-87c8-e43228139b88", + "name": "golang.org/x/crypto", + "version": "v0.0.0-20200622213623-75b288015ac9", + "purl": "pkg:golang/golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9" + }, + { + "type": "library", + "bom-ref": "7b125efc-c47a-449d-b273-75828649b1a4", + "name": "github.com/nats-io/nats.go", + "version": "v1.10.0", + "purl": "pkg:golang/github.com/nats-io/nats.go@v1.10.0" + }, + { + "type": "library", + "bom-ref": "7dba7372-931a-407d-a918-76bcac292907", + "name": "github.com/dustin/go-humanize", + "version": "v1.0.0", + "purl": "pkg:golang/github.com/dustin/go-humanize@v1.0.0" + }, + { + "type": "library", + "bom-ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "name": "github.com/nats-io/jwt", + "version": "v0.3.2", + "purl": "pkg:golang/github.com/nats-io/jwt@v0.3.2" + }, + { + "type": "library", + "bom-ref": "8075733b-5b92-4bdc-9b3a-1ea48bff49ad", + "name": "github.com/nats-io/nkeys", + "version": "v0.3.0", + "purl": "pkg:golang/github.com/nats-io/nkeys@v0.3.0" + }, + { + "type": "library", + "bom-ref": "84eac386-ca89-4217-8a72-84d77e3bd144", + "name": "golang.org/x/crypto", + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "purl": "pkg:golang/golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b" + }, + { + "type": "library", + "bom-ref": "8623282c-313d-4047-9f16-bcfd7e550997", + "name": "github.com/mattn/go-colorable", + "version": "v0.1.8", + "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.8" + }, + { + "type": "library", + "bom-ref": "869288c8-06d2-4a38-8b68-ced0ff17bc77", + "name": "golang.org/x/text", + "version": "v0.3.6", + "purl": "pkg:golang/golang.org/x/text@v0.3.6" + }, + { + "type": "library", + "bom-ref": "8d4a3605-99a8-40ad-960e-858be6815082", + "name": "github.com/nats-io/nkeys", + "version": "v0.1.4", + "purl": "pkg:golang/github.com/nats-io/nkeys@v0.1.4" + }, + { + "type": "library", + "bom-ref": "90b91b63-c94e-469d-87ef-b98807e67bfb", + "name": "github.com/gogo/protobuf", + "version": "v1.3.2", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2" + }, + { + "type": "library", + "bom-ref": "99b7b900-55f8-4676-8c8f-32262681845b", + "name": "golang.org/x/text", + "version": "v0.3.6", + "purl": "pkg:golang/golang.org/x/text@v0.3.6" + }, + { + "type": "library", + "bom-ref": "a6b681f9-0866-480c-9a19-7df19b930d0d", + "name": "golang.org/x/term", + "version": "v0.0.0-20210422114643-f5beecf764ed", + "purl": "pkg:golang/golang.org/x/term@v0.0.0-20210422114643-f5beecf764ed" + }, + { + "type": "library", + "bom-ref": "ab2a2a27-ce28-429e-a2d9-985a5b58ff2f", + "name": "golang.org/x/term", + "version": "v0.0.0-20210422114643-f5beecf764ed", + "purl": "pkg:golang/golang.org/x/term@v0.0.0-20210422114643-f5beecf764ed" + }, + { + "type": "library", + "bom-ref": "ad12cc30-75c9-4dbe-9cd7-19b5b086be4e", + "name": "github.com/nats-io/nats.go", + "version": "v1.10.0", + "purl": "pkg:golang/github.com/nats-io/nats.go@v1.10.0" + }, + { + "type": "library", + "bom-ref": "ae9d8fc6-a066-4e24-bc8c-cdfe17a737c0", + "name": "github.com/dustin/go-humanize", + "version": "v1.0.0", + "purl": "pkg:golang/github.com/dustin/go-humanize@v1.0.0" + }, + { + "type": "library", + "bom-ref": "af137522-c78a-4301-becc-f921d74266c9", + "name": "github.com/nats-io/nuid", + "version": "v1.0.1", + "purl": "pkg:golang/github.com/nats-io/nuid@v1.0.1" + }, + { + "type": "library", + "bom-ref": "bedd6971-db83-4b95-a3ec-2d000422efed", + "name": "gopkg.in/yaml.v2", + "version": "v2.4.0", + "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0" + }, + { + "type": "library", + "bom-ref": "c6ba0fd6-a390-4fcf-aaec-4a072dcd17c4", + "name": "golang.org/x/crypto", + "version": "v0.0.0-20200622213623-75b288015ac9", + "purl": "pkg:golang/golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9" + }, + { + "type": "library", + "bom-ref": "c85c3481-4815-486c-82e9-dba0f7a3eac6", + "name": "github.com/fatih/color", + "version": "v1.10.0", + "purl": "pkg:golang/github.com/fatih/color@v1.10.0" + }, + { + "type": "library", + "bom-ref": "ce164c60-ee4f-4360-a85f-73106cf59f6c", + "name": "golang.org/x/crypto", + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "purl": "pkg:golang/golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b" + }, + { + "type": "library", + "bom-ref": "ce8adfce-acb4-4fe1-b310-bd23e88e4e57", + "name": "gopkg.in/yaml.v2", + "version": "v2.4.0", + "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0" + }, + { + "type": "operating-system", + "bom-ref": "cfba38a6-98c7-43e7-82ac-7841dd9513ca", + "name": "alpine", + "version": "3.13.2" + }, + { + "type": "library", + "bom-ref": "d3c7fe00-7922-44b3-ab7a-6815c8754dfa", + "name": "github.com/nats-io/nkeys", + "version": "v0.3.0", + "purl": "pkg:golang/github.com/nats-io/nkeys@v0.3.0" + }, + { + "type": "application", + "bom-ref": "d7122973-9d0f-4e27-bc7b-f3930bde6889", + "name": "usr/local/bin/nats" + }, + { + "type": "library", + "bom-ref": "d8213071-7f1e-4f2e-bdac-e66ee0c2dde6", + "name": "github.com/nats-io/jwt/v2", + "version": "v2.0.1", + "purl": "pkg:golang/github.com/nats-io/jwt/v2@v2.0.1" + }, + { + "type": "library", + "bom-ref": "d99b8db3-8f9e-41a4-bb16-0c1936f401d3", + "name": "github.com/gogo/protobuf", + "version": "v1.3.2", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2" + }, + { + "type": "library", + "bom-ref": "dcadec35-53bc-493d-910d-9e96306127d1", + "name": "github.com/nats-io/nuid", + "version": "v1.0.1", + "purl": "pkg:golang/github.com/nats-io/nuid@v1.0.1" + }, + { + "type": "library", + "bom-ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "name": "github.com/nats-io/jwt", + "version": "v0.3.2", + "purl": "pkg:golang/github.com/nats-io/jwt@v0.3.2" + }, + { + "type": "library", + "bom-ref": "e2cef7b8-d52f-49c6-9c4c-fce547506589", + "name": "github.com/mattn/go-isatty", + "version": "v0.0.12", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.12" + }, + { + "type": "library", + "bom-ref": "f0745570-156e-489b-9743-7a6c34f2b983", + "name": "github.com/AlecAivazis/survey/v2", + "version": "v2.2.12", + "purl": "pkg:golang/github.com/alecaivazis/survey/v2@v2.2.12" + }, + { + "type": "library", + "bom-ref": "f97ba060-ad20-45f4-ac69-fc24d30411ad", + "name": "github.com/nats-io/jwt/v2", + "version": "v2.0.1", + "purl": "pkg:golang/github.com/nats-io/jwt/v2@v2.0.1" + }, + { + "type": "application", + "bom-ref": "fff3d909-640a-4173-b0c3-b23507dd77d3", + "name": "usr/local/bin/nsc" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.2.0-r8?arch=x86_64&distro=3.13.2", + "name": "alpine-baselayout", + "version": "3.2.0-r8", + "hashes": [ + { + "alg": "SHA-1", + "content": "15d2b578fd7e8841b6f4cc80134ca504c2023317" + } + ], + "licenses": [ + { + "license": { + "name": "GPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/alpine-baselayout@3.2.0-r8?arch=x86_64&distro=3.13.2" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/alpine-keys@2.2-r0?arch=x86_64&distro=3.13.2", + "name": "alpine-keys", + "version": "2.2-r0", + "hashes": [ + { + "alg": "SHA-1", + "content": "2e1db77e486469f7e25f3eac47ee2742f51f9153" + } + ], + "licenses": [ + { + "license": { + "name": "MIT" + } + } + ], + "purl": "pkg:apk/alpine/alpine-keys@2.2-r0?arch=x86_64&distro=3.13.2" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.1-r0?arch=x86_64&distro=3.13.2", + "name": "apk-tools", + "version": "2.12.1-r0", + "hashes": [ + { + "alg": "SHA-1", + "content": "b719126b7bd2a798662ada563c69d051d665549a" + } + ], + "licenses": [ + { + "license": { + "name": "GPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/apk-tools@2.12.1-r0?arch=x86_64&distro=3.13.2" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64&distro=3.13.2", + "name": "busybox", + "version": "1.32.1-r3", + "hashes": [ + { + "alg": "SHA-1", + "content": "ea87905ba6c33fbb95c0252a3610001076fbe59e" + } + ], + "licenses": [ + { + "license": { + "name": "GPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64&distro=3.13.2" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20191127-r5?arch=x86_64&distro=3.13.2", + "name": "ca-certificates-bundle", + "version": "20191127-r5", + "hashes": [ + { + "alg": "SHA-1", + "content": "9d95958d8cdac1af141d414024905c7ce861458d" + } + ], + "licenses": [ + { + "license": { + "name": "MPL-2.0" + } + }, + { + "license": { + "name": "MIT" + } + } + ], + "purl": "pkg:apk/alpine/ca-certificates-bundle@20191127-r5?arch=x86_64&distro=3.13.2" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ca-certificates@20191127-r5?arch=x86_64&distro=3.13.2", + "name": "ca-certificates", + "version": "20191127-r5", + "hashes": [ + { + "alg": "SHA-1", + "content": "9a32ec5e560733e17a671fba0128e6a3ebef5ce3" + } + ], + "licenses": [ + { + "license": { + "name": "MPL-2.0" + } + }, + { + "license": { + "name": "MIT" + } + } + ], + "purl": "pkg:apk/alpine/ca-certificates@20191127-r5?arch=x86_64&distro=3.13.2" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/figlet@2.2.5-r1?arch=x86_64&distro=3.13.2", + "name": "figlet", + "version": "2.2.5-r1", + "hashes": [ + { + "alg": "SHA-1", + "content": "2a09a857775ed6d8dbba1fb9dfcf6879f1cf1b04" + } + ], + "licenses": [ + { + "license": { + "name": "BSD-3-Clause" + } + } + ], + "purl": "pkg:apk/alpine/figlet@2.2.5-r1?arch=x86_64&distro=3.13.2" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&distro=3.13.2", + "name": "libc-utils", + "version": "0.7.2-r3", + "hashes": [ + { + "alg": "SHA-1", + "content": "261cab49287a370b3889e6ec33afd51c2c703df4" + } + ], + "licenses": [ + { + "license": { + "name": "BSD-2-Clause" + } + }, + { + "license": { + "name": "BSD-3-Clause" + } + } + ], + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&distro=3.13.2" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "name": "libcrypto1.1", + "version": "1.1.1j-r0", + "hashes": [ + { + "alg": "SHA-1", + "content": "5adb82dd79a48d631f9aef830e4183187811bce7" + } + ], + "licenses": [ + { + "license": { + "name": "OpenSSL" + } + } + ], + "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "name": "libssl1.1", + "version": "1.1.1j-r0", + "hashes": [ + { + "alg": "SHA-1", + "content": "0640f8669ebb73d9f34f64bf044b6caa91191077" + } + ], + "licenses": [ + { + "license": { + "name": "OpenSSL" + } + } + ], + "purl": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/libtls-standalone@2.9.1-r1?arch=x86_64&distro=3.13.2", + "name": "libtls-standalone", + "version": "2.9.1-r1", + "hashes": [ + { + "alg": "SHA-1", + "content": "82d33d0f18a70fdb1b8c9327ae23a196d5bbb0d4" + } + ], + "licenses": [ + { + "license": { + "name": "ISC" + } + } + ], + "purl": "pkg:apk/alpine/libtls-standalone@2.9.1-r1?arch=x86_64&distro=3.13.2" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.2-r0?arch=x86_64&distro=3.13.2", + "name": "musl-utils", + "version": "1.2.2-r0", + "hashes": [ + { + "alg": "SHA-1", + "content": "0f7258226eb526d3701b14343d4b0f0aecae13bc" + } + ], + "licenses": [ + { + "license": { + "name": "MIT" + } + }, + { + "license": { + "name": "BSD-3-Clause" + } + }, + { + "license": { + "name": "GPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/musl-utils@1.2.2-r0?arch=x86_64&distro=3.13.2" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2", + "name": "musl", + "version": "1.2.2-r0", + "hashes": [ + { + "alg": "SHA-1", + "content": "d0dbb978de30ae1f165ee240d89692c2a3a52721" + } + ], + "licenses": [ + { + "license": { + "name": "MIT" + } + } + ], + "purl": "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/scanelf@1.2.8-r0?arch=x86_64&distro=3.13.2", + "name": "scanelf", + "version": "1.2.8-r0", + "hashes": [ + { + "alg": "SHA-1", + "content": "39824e854e7520bc03411c0d89882ab6af7cebfa" + } + ], + "licenses": [ + { + "license": { + "name": "GPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/scanelf@1.2.8-r0?arch=x86_64&distro=3.13.2" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64&distro=3.13.2", + "name": "ssl_client", + "version": "1.32.1-r3", + "hashes": [ + { + "alg": "SHA-1", + "content": "18b22c9a0ce4aacdd4ab48e1696ccf70f98068dc" + } + ], + "licenses": [ + { + "license": { + "name": "GPL-2.0" + } + } + ], + "purl": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64&distro=3.13.2" + }, + { + "type": "library", + "bom-ref": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.13.2", + "name": "zlib", + "version": "1.2.11-r3", + "hashes": [ + { + "alg": "SHA-1", + "content": "36bf58da74d48e0011cb00b7e27f4d114b772cee" + } + ], + "licenses": [ + { + "license": { + "name": "Zlib" + } + } + ], + "purl": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.13.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/alecthomas/template@v0.0.0-20190718012654-fb15b899a751", + "name": "github.com/alecthomas/template", + "version": "v0.0.0-20190718012654-fb15b899a751", + "purl": "pkg:golang/github.com/alecthomas/template@v0.0.0-20190718012654-fb15b899a751" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/alecthomas/units@v0.0.0-20210208195552-ff826a37aa15", + "name": "github.com/alecthomas/units", + "version": "v0.0.0-20210208195552-ff826a37aa15", + "purl": "pkg:golang/github.com/alecthomas/units@v0.0.0-20210208195552-ff826a37aa15" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible", + "name": "github.com/blang/semver", + "version": "v3.5.1+incompatible", + "purl": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/briandowns/spinner@v1.12.0", + "name": "github.com/briandowns/spinner", + "version": "v1.12.0", + "purl": "pkg:golang/github.com/briandowns/spinner@v1.12.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0", + "name": "github.com/cpuguy83/go-md2man/v2", + "version": "v2.0.0", + "purl": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/emicklei/dot@v0.15.0", + "name": "github.com/emicklei/dot", + "version": "v0.15.0", + "purl": "pkg:golang/github.com/emicklei/dot@v0.15.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/fsnotify/fsnotify@v1.4.9", + "name": "github.com/fsnotify/fsnotify", + "version": "v1.4.9", + "purl": "pkg:golang/github.com/fsnotify/fsnotify@v1.4.9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/ghodss/yaml@v1.0.0", + "name": "github.com/ghodss/yaml", + "version": "v1.0.0", + "purl": "pkg:golang/github.com/ghodss/yaml@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.5.5", + "name": "github.com/google/go-cmp", + "version": "v0.5.5", + "purl": "pkg:golang/github.com/google/go-cmp@v0.5.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/go-github/v30@v30.1.0", + "name": "github.com/google/go-github/v30", + "version": "v30.1.0", + "purl": "pkg:golang/github.com/google/go-github/v30@v30.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/go-querystring@v1.1.0", + "name": "github.com/google/go-querystring", + "version": "v1.1.0", + "purl": "pkg:golang/github.com/google/go-querystring@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gosuri/uilive@v0.0.4", + "name": "github.com/gosuri/uilive", + "version": "v0.0.4", + "purl": "pkg:golang/github.com/gosuri/uilive@v0.0.4" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gosuri/uiprogress@v0.0.1", + "name": "github.com/gosuri/uiprogress", + "version": "v0.0.1", + "purl": "pkg:golang/github.com/gosuri/uiprogress@v0.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/guptarohit/asciigraph@v0.5.2", + "name": "github.com/guptarohit/asciigraph", + "version": "v0.5.2", + "purl": "pkg:golang/github.com/guptarohit/asciigraph@v0.5.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/hashicorp/hcl@v1.0.0", + "name": "github.com/hashicorp/hcl", + "version": "v1.0.0", + "purl": "pkg:golang/github.com/hashicorp/hcl@v1.0.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/hdrhistogram/hdrhistogram-go@v0.9.0", + "name": "github.com/HdrHistogram/hdrhistogram-go", + "version": "v0.9.0", + "purl": "pkg:golang/github.com/hdrhistogram/hdrhistogram-go@v0.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/inconshreveable/go-update@v0.0.0-20160112193335-8152e7eb6ccf", + "name": "github.com/inconshreveable/go-update", + "version": "v0.0.0-20160112193335-8152e7eb6ccf", + "purl": "pkg:golang/github.com/inconshreveable/go-update@v0.0.0-20160112193335-8152e7eb6ccf" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/klauspost/compress@v1.12.1", + "name": "github.com/klauspost/compress", + "version": "v1.12.1", + "purl": "pkg:golang/github.com/klauspost/compress@v1.12.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/magiconair/properties@v1.8.5", + "name": "github.com/magiconair/properties", + "version": "v1.8.5", + "purl": "pkg:golang/github.com/magiconair/properties@v1.8.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.1", + "name": "github.com/mattn/go-runewidth", + "version": "v0.0.1", + "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20170206155736-9520e82c474b", + "name": "github.com/mgutz/ansi", + "version": "v0.0.0-20170206155736-9520e82c474b", + "purl": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20170206155736-9520e82c474b" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d", + "name": "github.com/mgutz/ansi", + "version": "v0.0.0-20200706080929-d51e80ef957d", + "purl": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/minio/highwayhash@v1.0.1", + "name": "github.com/minio/highwayhash", + "version": "v1.0.1", + "purl": "pkg:golang/github.com/minio/highwayhash@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0", + "name": "github.com/mitchellh/go-homedir", + "version": "v1.1.0", + "purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1", + "name": "github.com/mitchellh/go-wordwrap", + "version": "v1.0.1", + "purl": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/mitchellh/mapstructure@v1.4.1", + "name": "github.com/mitchellh/mapstructure", + "version": "v1.4.1", + "purl": "pkg:golang/github.com/mitchellh/mapstructure@v1.4.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/nats-io/cliprompts/v2@v2.0.0-20200221130455-2737f3b8cbb9", + "name": "github.com/nats-io/cliprompts/v2", + "version": "v2.0.0-20200221130455-2737f3b8cbb9", + "purl": "pkg:golang/github.com/nats-io/cliprompts/v2@v2.0.0-20200221130455-2737f3b8cbb9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/nats-io/jsm.go@v0.0.23", + "name": "github.com/nats-io/jsm.go", + "version": "v0.0.23", + "purl": "pkg:golang/github.com/nats-io/jsm.go@v0.0.23" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/nats-io/jwt@v1.1.0", + "name": "github.com/nats-io/jwt", + "version": "v1.1.0", + "purl": "pkg:golang/github.com/nats-io/jwt@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/nats-io/jwt@v1.2.2", + "name": "github.com/nats-io/jwt", + "version": "v1.2.2", + "purl": "pkg:golang/github.com/nats-io/jwt@v1.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "name": "github.com/nats-io/nats-server/v2", + "version": "v2.1.9", + "purl": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.2.2", + "name": "github.com/nats-io/nats-server/v2", + "version": "v2.2.2", + "purl": "pkg:golang/github.com/nats-io/nats-server/v2@v2.2.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/nats-io/nats.go@v1.10.1-0.20201021145452-94be476ad6e0", + "name": "github.com/nats-io/nats.go", + "version": "v1.10.1-0.20201021145452-94be476ad6e0", + "purl": "pkg:golang/github.com/nats-io/nats.go@v1.10.1-0.20201021145452-94be476ad6e0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/nats-io/nats.go@v1.10.1-0.20210427145106-109f3dd25f10", + "name": "github.com/nats-io/nats.go", + "version": "v1.10.1-0.20210427145106-109f3dd25f10", + "purl": "pkg:golang/github.com/nats-io/nats.go@v1.10.1-0.20210427145106-109f3dd25f10" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/nsf/termbox-go@v0.0.0-20160808045038-e8f6d27f72a2", + "name": "github.com/nsf/termbox-go", + "version": "v0.0.0-20160808045038-e8f6d27f72a2", + "purl": "pkg:golang/github.com/nsf/termbox-go@v0.0.0-20160808045038-e8f6d27f72a2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/pelletier/go-toml@v1.9.0", + "name": "github.com/pelletier/go-toml", + "version": "v1.9.0", + "purl": "pkg:golang/github.com/pelletier/go-toml@v1.9.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/rhysd/go-github-selfupdate@v1.2.3", + "name": "github.com/rhysd/go-github-selfupdate", + "version": "v1.2.3", + "purl": "pkg:golang/github.com/rhysd/go-github-selfupdate@v1.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0", + "name": "github.com/russross/blackfriday/v2", + "version": "v2.1.0", + "purl": "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/afero@v1.6.0", + "name": "github.com/spf13/afero", + "version": "v1.6.0", + "purl": "pkg:golang/github.com/spf13/afero@v1.6.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/cast@v1.3.1", + "name": "github.com/spf13/cast", + "version": "v1.3.1", + "purl": "pkg:golang/github.com/spf13/cast@v1.3.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/cobra@v1.1.3", + "name": "github.com/spf13/cobra", + "version": "v1.1.3", + "purl": "pkg:golang/github.com/spf13/cobra@v1.1.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/jwalterweatherman@v1.1.0", + "name": "github.com/spf13/jwalterweatherman", + "version": "v1.1.0", + "purl": "pkg:golang/github.com/spf13/jwalterweatherman@v1.1.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "name": "github.com/spf13/pflag", + "version": "v1.0.5", + "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/viper@v1.7.1", + "name": "github.com/spf13/viper", + "version": "v1.7.1", + "purl": "pkg:golang/github.com/spf13/viper@v1.7.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/subosito/gotenv@v1.2.0", + "name": "github.com/subosito/gotenv", + "version": "v1.2.0", + "purl": "pkg:golang/github.com/subosito/gotenv@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/tcnksm/go-gitconfig@v0.1.2", + "name": "github.com/tcnksm/go-gitconfig", + "version": "v0.1.2", + "purl": "pkg:golang/github.com/tcnksm/go-gitconfig@v0.1.2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/tylertreat/hdrhistogram-writer@v0.0.0-20180430173243-73b8d31ba571", + "name": "github.com/tylertreat/hdrhistogram-writer", + "version": "v0.0.0-20180430173243-73b8d31ba571", + "purl": "pkg:golang/github.com/tylertreat/hdrhistogram-writer@v0.0.0-20180430173243-73b8d31ba571" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/ulikunitz/xz@v0.5.10", + "name": "github.com/ulikunitz/xz", + "version": "v0.5.10", + "purl": "pkg:golang/github.com/ulikunitz/xz@v0.5.10" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb", + "name": "github.com/xeipuuv/gojsonpointer", + "version": "v0.0.0-20190905194746-02993c407bfb", + "purl": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415", + "name": "github.com/xeipuuv/gojsonreference", + "version": "v0.0.0-20180127040603-bd5ef7bd5415", + "purl": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0", + "name": "github.com/xeipuuv/gojsonschema", + "version": "v1.2.0", + "purl": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59", + "name": "golang.org/x/crypto", + "version": "v0.0.0-20200323165209-0ec3e9974c59", + "purl": "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "name": "golang.org/x/net", + "version": "v0.0.0-20210428140749-89ef3d95e781", + "purl": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20210427180440-81ed05c6b58c", + "name": "golang.org/x/oauth2", + "version": "v0.0.0-20210427180440-81ed05c6b58c", + "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20210427180440-81ed05c6b58c" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20210421221651-33663a62ff08", + "name": "golang.org/x/sys", + "version": "v0.0.0-20210421221651-33663a62ff08", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20210421221651-33663a62ff08" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20210426230700-d19ff857e887", + "name": "golang.org/x/sys", + "version": "v0.0.0-20210426230700-d19ff857e887", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20210426230700-d19ff857e887" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20200416051211-89c76fbcd5d1", + "name": "golang.org/x/time", + "version": "v0.0.0-20200416051211-89c76fbcd5d1", + "purl": "pkg:golang/golang.org/x/time@v0.0.0-20200416051211-89c76fbcd5d1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/alecthomas/kingpin.v2@v2.2.6", + "name": "gopkg.in/alecthomas/kingpin.v2", + "version": "v2.2.6", + "purl": "pkg:golang/gopkg.in/alecthomas/kingpin.v2@v2.2.6" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/gizak/termui.v1@v1.0.0-20151021151108-e62b5929642a", + "name": "gopkg.in/gizak/termui.v1", + "version": "v1.0.0-20151021151108-e62b5929642a", + "purl": "pkg:golang/gopkg.in/gizak/termui.v1@v1.0.0-20151021151108-e62b5929642a" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/ini.v1@v1.62.0", + "name": "gopkg.in/ini.v1", + "version": "v1.62.0", + "purl": "pkg:golang/gopkg.in/ini.v1@v1.62.0" + } + ], + "dependencies": [ + { + "ref": "00d71201-cd27-4648-ad71-190cd4b4abf8", + "dependsOn": [] + }, + { + "ref": "02c6e323-75c9-41ad-a48b-ea236df51a1a", + "dependsOn": [] + }, + { + "ref": "036e29ed-0565-4dff-be02-dc8e2b0376d7", + "dependsOn": [] + }, + { + "ref": "1044da61-152a-465b-8952-c9e949247616", + "dependsOn": [] + }, + { + "ref": "17d6a00d-ad1c-422f-ab52-07d021d4d62a", + "dependsOn": [ + "417740b7-723b-4313-8059-5f1b4945dc11", + "4497229a-93b4-4299-a9e6-a1070b6ffda5", + "64ecbd63-f74a-4fcc-a240-3f8a16435789", + "7b125efc-c47a-449d-b273-75828649b1a4", + "dcadec35-53bc-493d-910d-9e96306127d1", + "e192291f-a90f-4cc4-ad6d-0379a45256cd" + ] + }, + { + "ref": "1f71cc2c-4dae-4721-a209-956d08b69871", + "dependsOn": [] + }, + { + "ref": "232a0439-a241-452a-be09-f5d63c6335ef", + "dependsOn": [] + }, + { + "ref": "26b20f66-3994-4e05-adb5-c3a663fdc0d3", + "dependsOn": [] + }, + { + "ref": "2ce6cbe0-970f-4185-9e29-4e61713b2391", + "dependsOn": [] + }, + { + "ref": "2dabc52f-279a-4393-91e6-5b3034b68d60", + "dependsOn": [] + }, + { + "ref": "3550f049-6eb2-41a9-8e67-eec39e46a33d", + "dependsOn": [] + }, + { + "ref": "37100b09-d58e-456b-bf66-96cb133c434d", + "dependsOn": [ + "00d71201-cd27-4648-ad71-190cd4b4abf8", + "232a0439-a241-452a-be09-f5d63c6335ef", + "4fbc1e52-81cf-4163-a4c0-dfc0ae24f480", + "718081db-83c2-4309-87c8-e43228139b88", + "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "90b91b63-c94e-469d-87ef-b98807e67bfb" + ] + }, + { + "ref": "3a508e2a-ffa6-44b1-a334-46b9aaaf403b", + "dependsOn": [] + }, + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "dependsOn": [] + }, + { + "ref": "417740b7-723b-4313-8059-5f1b4945dc11", + "dependsOn": [] + }, + { + "ref": "4497229a-93b4-4299-a9e6-a1070b6ffda5", + "dependsOn": [] + }, + { + "ref": "4fbc1e52-81cf-4163-a4c0-dfc0ae24f480", + "dependsOn": [] + }, + { + "ref": "5b9357f0-f8fd-4f05-a2c8-d43d47bad559", + "dependsOn": [] + }, + { + "ref": "5bedfcbd-bcb9-4b36-ac1c-69b77c8b0b45", + "dependsOn": [ + "2ce6cbe0-970f-4185-9e29-4e61713b2391", + "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "8d4a3605-99a8-40ad-960e-858be6815082", + "ad12cc30-75c9-4dbe-9cd7-19b5b086be4e", + "c6ba0fd6-a390-4fcf-aaec-4a072dcd17c4", + "d99b8db3-8f9e-41a4-bb16-0c1936f401d3" + ] + }, + { + "ref": "5e630d92-734e-441e-97bc-292689866d19", + "dependsOn": [ + "2dabc52f-279a-4393-91e6-5b3034b68d60", + "3a508e2a-ffa6-44b1-a334-46b9aaaf403b", + "pkg:golang/github.com/mattn/go-runewidth@v0.0.1", + "pkg:golang/github.com/nats-io/jwt@v1.1.0", + "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "pkg:golang/github.com/nsf/termbox-go@v0.0.0-20160808045038-e8f6d27f72a2", + "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59", + "pkg:golang/gopkg.in/gizak/termui.v1@v1.0.0-20151021151108-e62b5929642a" + ] + }, + { + "ref": "63635711-87a0-4f17-a181-a1a240810ec4", + "dependsOn": [] + }, + { + "ref": "64ecbd63-f74a-4fcc-a240-3f8a16435789", + "dependsOn": [] + }, + { + "ref": "6bd9a336-e7bc-41d1-8c95-294cb3eb6726", + "dependsOn": [] + }, + { + "ref": "718081db-83c2-4309-87c8-e43228139b88", + "dependsOn": [] + }, + { + "ref": "7b125efc-c47a-449d-b273-75828649b1a4", + "dependsOn": [] + }, + { + "ref": "7dba7372-931a-407d-a918-76bcac292907", + "dependsOn": [] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "dependsOn": [] + }, + { + "ref": "8075733b-5b92-4bdc-9b3a-1ea48bff49ad", + "dependsOn": [] + }, + { + "ref": "84eac386-ca89-4217-8a72-84d77e3bd144", + "dependsOn": [] + }, + { + "ref": "8623282c-313d-4047-9f16-bcfd7e550997", + "dependsOn": [] + }, + { + "ref": "869288c8-06d2-4a38-8b68-ced0ff17bc77", + "dependsOn": [] + }, + { + "ref": "8d4a3605-99a8-40ad-960e-858be6815082", + "dependsOn": [] + }, + { + "ref": "90b91b63-c94e-469d-87ef-b98807e67bfb", + "dependsOn": [] + }, + { + "ref": "99b7b900-55f8-4676-8c8f-32262681845b", + "dependsOn": [] + }, + { + "ref": "a6b681f9-0866-480c-9a19-7df19b930d0d", + "dependsOn": [] + }, + { + "ref": "ab2a2a27-ce28-429e-a2d9-985a5b58ff2f", + "dependsOn": [] + }, + { + "ref": "ad12cc30-75c9-4dbe-9cd7-19b5b086be4e", + "dependsOn": [] + }, + { + "ref": "ae9d8fc6-a066-4e24-bc8c-cdfe17a737c0", + "dependsOn": [] + }, + { + "ref": "af137522-c78a-4301-becc-f921d74266c9", + "dependsOn": [] + }, + { + "ref": "bedd6971-db83-4b95-a3ec-2d000422efed", + "dependsOn": [] + }, + { + "ref": "c6ba0fd6-a390-4fcf-aaec-4a072dcd17c4", + "dependsOn": [] + }, + { + "ref": "c85c3481-4815-486c-82e9-dba0f7a3eac6", + "dependsOn": [] + }, + { + "ref": "ce164c60-ee4f-4360-a85f-73106cf59f6c", + "dependsOn": [] + }, + { + "ref": "ce8adfce-acb4-4fe1-b310-bd23e88e4e57", + "dependsOn": [] + }, + { + "ref": "cfba38a6-98c7-43e7-82ac-7841dd9513ca", + "dependsOn": [ + "pkg:apk/alpine/alpine-baselayout@3.2.0-r8?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/alpine-keys@2.2-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/apk-tools@2.12.1-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/ca-certificates-bundle@20191127-r5?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/ca-certificates@20191127-r5?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/figlet@2.2.5-r1?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/libtls-standalone@2.9.1-r1?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/musl-utils@1.2.2-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/scanelf@1.2.8-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "d3c7fe00-7922-44b3-ab7a-6815c8754dfa", + "dependsOn": [] + }, + { + "ref": "d7122973-9d0f-4e27-bc7b-f3930bde6889", + "dependsOn": [ + "02c6e323-75c9-41ad-a48b-ea236df51a1a", + "036e29ed-0565-4dff-be02-dc8e2b0376d7", + "1044da61-152a-465b-8952-c9e949247616", + "1f71cc2c-4dae-4721-a209-956d08b69871", + "6bd9a336-e7bc-41d1-8c95-294cb3eb6726", + "8623282c-313d-4047-9f16-bcfd7e550997", + "869288c8-06d2-4a38-8b68-ced0ff17bc77", + "ab2a2a27-ce28-429e-a2d9-985a5b58ff2f", + "ae9d8fc6-a066-4e24-bc8c-cdfe17a737c0", + "af137522-c78a-4301-becc-f921d74266c9", + "bedd6971-db83-4b95-a3ec-2d000422efed", + "ce164c60-ee4f-4360-a85f-73106cf59f6c", + "d3c7fe00-7922-44b3-ab7a-6815c8754dfa", + "f97ba060-ad20-45f4-ac69-fc24d30411ad", + "pkg:golang/github.com/alecthomas/template@v0.0.0-20190718012654-fb15b899a751", + "pkg:golang/github.com/alecthomas/units@v0.0.0-20210208195552-ff826a37aa15", + "pkg:golang/github.com/emicklei/dot@v0.15.0", + "pkg:golang/github.com/ghodss/yaml@v1.0.0", + "pkg:golang/github.com/google/go-cmp@v0.5.5", + "pkg:golang/github.com/gosuri/uilive@v0.0.4", + "pkg:golang/github.com/gosuri/uiprogress@v0.0.1", + "pkg:golang/github.com/guptarohit/asciigraph@v0.5.2", + "pkg:golang/github.com/hdrhistogram/hdrhistogram-go@v0.9.0", + "pkg:golang/github.com/klauspost/compress@v1.12.1", + "pkg:golang/github.com/mgutz/ansi@v0.0.0-20170206155736-9520e82c474b", + "pkg:golang/github.com/minio/highwayhash@v1.0.1", + "pkg:golang/github.com/nats-io/jsm.go@v0.0.23", + "pkg:golang/github.com/nats-io/nats-server/v2@v2.2.2", + "pkg:golang/github.com/nats-io/nats.go@v1.10.1-0.20210427145106-109f3dd25f10", + "pkg:golang/github.com/tylertreat/hdrhistogram-writer@v0.0.0-20180430173243-73b8d31ba571", + "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb", + "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415", + "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0", + "pkg:golang/golang.org/x/sys@v0.0.0-20210421221651-33663a62ff08", + "pkg:golang/golang.org/x/time@v0.0.0-20200416051211-89c76fbcd5d1", + "pkg:golang/gopkg.in/alecthomas/kingpin.v2@v2.2.6" + ] + }, + { + "ref": "d8213071-7f1e-4f2e-bdac-e66ee0c2dde6", + "dependsOn": [] + }, + { + "ref": "d99b8db3-8f9e-41a4-bb16-0c1936f401d3", + "dependsOn": [] + }, + { + "ref": "dcadec35-53bc-493d-910d-9e96306127d1", + "dependsOn": [] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "dependsOn": [] + }, + { + "ref": "e2cef7b8-d52f-49c6-9c4c-fce547506589", + "dependsOn": [] + }, + { + "ref": "f0745570-156e-489b-9743-7a6c34f2b983", + "dependsOn": [] + }, + { + "ref": "f97ba060-ad20-45f4-ac69-fc24d30411ad", + "dependsOn": [] + }, + { + "ref": "fff3d909-640a-4173-b0c3-b23507dd77d3", + "dependsOn": [ + "26b20f66-3994-4e05-adb5-c3a663fdc0d3", + "3550f049-6eb2-41a9-8e67-eec39e46a33d", + "5b9357f0-f8fd-4f05-a2c8-d43d47bad559", + "63635711-87a0-4f17-a181-a1a240810ec4", + "7dba7372-931a-407d-a918-76bcac292907", + "8075733b-5b92-4bdc-9b3a-1ea48bff49ad", + "84eac386-ca89-4217-8a72-84d77e3bd144", + "99b7b900-55f8-4676-8c8f-32262681845b", + "a6b681f9-0866-480c-9a19-7df19b930d0d", + "c85c3481-4815-486c-82e9-dba0f7a3eac6", + "ce8adfce-acb4-4fe1-b310-bd23e88e4e57", + "d8213071-7f1e-4f2e-bdac-e66ee0c2dde6", + "e2cef7b8-d52f-49c6-9c4c-fce547506589", + "f0745570-156e-489b-9743-7a6c34f2b983", + "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible", + "pkg:golang/github.com/briandowns/spinner@v1.12.0", + "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0", + "pkg:golang/github.com/fsnotify/fsnotify@v1.4.9", + "pkg:golang/github.com/google/go-github/v30@v30.1.0", + "pkg:golang/github.com/google/go-querystring@v1.1.0", + "pkg:golang/github.com/hashicorp/hcl@v1.0.0", + "pkg:golang/github.com/inconshreveable/go-update@v0.0.0-20160112193335-8152e7eb6ccf", + "pkg:golang/github.com/magiconair/properties@v1.8.5", + "pkg:golang/github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d", + "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0", + "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1", + "pkg:golang/github.com/mitchellh/mapstructure@v1.4.1", + "pkg:golang/github.com/nats-io/cliprompts/v2@v2.0.0-20200221130455-2737f3b8cbb9", + "pkg:golang/github.com/nats-io/jwt@v1.2.2", + "pkg:golang/github.com/nats-io/nats.go@v1.10.1-0.20201021145452-94be476ad6e0", + "pkg:golang/github.com/pelletier/go-toml@v1.9.0", + "pkg:golang/github.com/rhysd/go-github-selfupdate@v1.2.3", + "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0", + "pkg:golang/github.com/spf13/afero@v1.6.0", + "pkg:golang/github.com/spf13/cast@v1.3.1", + "pkg:golang/github.com/spf13/cobra@v1.1.3", + "pkg:golang/github.com/spf13/jwalterweatherman@v1.1.0", + "pkg:golang/github.com/spf13/pflag@v1.0.5", + "pkg:golang/github.com/spf13/viper@v1.7.1", + "pkg:golang/github.com/subosito/gotenv@v1.2.0", + "pkg:golang/github.com/tcnksm/go-gitconfig@v0.1.2", + "pkg:golang/github.com/ulikunitz/xz@v0.5.10", + "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "pkg:golang/golang.org/x/oauth2@v0.0.0-20210427180440-81ed05c6b58c", + "pkg:golang/golang.org/x/sys@v0.0.0-20210426230700-d19ff857e887", + "pkg:golang/gopkg.in/ini.v1@v1.62.0" + ] + }, + { + "ref": "pkg:apk/alpine/alpine-baselayout@3.2.0-r8?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/alpine-keys@2.2-r0?arch=x86_64&distro=3.13.2", + "dependsOn": [] + }, + { + "ref": "pkg:apk/alpine/apk-tools@2.12.1-r0?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/ca-certificates-bundle@20191127-r5?arch=x86_64&distro=3.13.2", + "dependsOn": [] + }, + { + "ref": "pkg:apk/alpine/ca-certificates@20191127-r5?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/figlet@2.2.5-r1?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/musl-utils@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/libtls-standalone@2.9.1-r1?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/ca-certificates-bundle@20191127-r5?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/musl-utils@1.2.2-r0?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/scanelf@1.2.8-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2", + "dependsOn": [] + }, + { + "ref": "pkg:apk/alpine/scanelf@1.2.8-r0?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/libtls-standalone@2.9.1-r1?arch=x86_64&distro=3.13.2", + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64&distro=3.13.2", + "dependsOn": [ + "pkg:apk/alpine/musl@1.2.2-r0?arch=x86_64&distro=3.13.2" + ] + }, + { + "ref": "pkg:golang/github.com/alecthomas/template@v0.0.0-20190718012654-fb15b899a751", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/alecthomas/units@v0.0.0-20210208195552-ff826a37aa15", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/briandowns/spinner@v1.12.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/emicklei/dot@v0.15.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/fsnotify/fsnotify@v1.4.9", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/ghodss/yaml@v1.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/google/go-cmp@v0.5.5", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/google/go-github/v30@v30.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/google/go-querystring@v1.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/gosuri/uilive@v0.0.4", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/gosuri/uiprogress@v0.0.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/guptarohit/asciigraph@v0.5.2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/hashicorp/hcl@v1.0.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/hdrhistogram/hdrhistogram-go@v0.9.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/inconshreveable/go-update@v0.0.0-20160112193335-8152e7eb6ccf", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/klauspost/compress@v1.12.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/magiconair/properties@v1.8.5", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20170206155736-9520e82c474b", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/minio/highwayhash@v1.0.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mitchellh/mapstructure@v1.4.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/cliprompts/v2@v2.0.0-20200221130455-2737f3b8cbb9", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/jsm.go@v0.0.23", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.2.2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.2.2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats.go@v1.10.1-0.20201021145452-94be476ad6e0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats.go@v1.10.1-0.20210427145106-109f3dd25f10", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/nsf/termbox-go@v0.0.0-20160808045038-e8f6d27f72a2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/pelletier/go-toml@v1.9.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/rhysd/go-github-selfupdate@v1.2.3", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/spf13/afero@v1.6.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/spf13/cast@v1.3.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/spf13/cobra@v1.1.3", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/spf13/jwalterweatherman@v1.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/spf13/viper@v1.7.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/subosito/gotenv@v1.2.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/tcnksm/go-gitconfig@v0.1.2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/tylertreat/hdrhistogram-writer@v0.0.0-20180430173243-73b8d31ba571", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/ulikunitz/xz@v0.5.10", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20210427180440-81ed05c6b58c", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/sys@v0.0.0-20210421221651-33663a62ff08", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/sys@v0.0.0-20210426230700-d19ff857e887", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/time@v0.0.0-20200416051211-89c76fbcd5d1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/gopkg.in/alecthomas/kingpin.v2@v2.2.6", + "dependsOn": [] + }, + { + "ref": "pkg:golang/gopkg.in/gizak/termui.v1@v1.0.0-20151021151108-e62b5929642a", + "dependsOn": [] + }, + { + "ref": "pkg:golang/gopkg.in/ini.v1@v1.62.0", + "dependsOn": [] + }, + { + "ref": "pkg:oci/nats-box@sha256%3Acaf0c9fe15a9a88d001c74fd9d80f7f6fd57474aa243cd63a9a086eda9e202be?arch=amd64&repository_url=index.docker.io%2Fnats-io%2Fnats-box", + "dependsOn": [ + "17d6a00d-ad1c-422f-ab52-07d021d4d62a", + "37100b09-d58e-456b-bf66-96cb133c434d", + "5bedfcbd-bcb9-4b36-ac1c-69b77c8b0b45", + "5e630d92-734e-441e-97bc-292689866d19", + "cfba38a6-98c7-43e7-82ac-7841dd9513ca", + "d7122973-9d0f-4e27-bc7b-f3930bde6889", + "fff3d909-640a-4173-b0c3-b23507dd77d3" + ] + } + ], + "vulnerabilities": [ + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2018-25032" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/33" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/35" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/38" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2022/03/25/2" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2022/03/26/1" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2022:8420" + }, + { + "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2018-25032" + }, + { + "url": "https://bugzilla.redhat.com/2067945" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2022-8420.html" + }, + { + "url": "https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531" + }, + { + "url": "https://github.com/madler/zlib/compare/v1.2.11...v1.2.12" + }, + { + "url": "https://github.com/madler/zlib/issues/605" + }, + { + "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml" + }, + { + "url": "https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4" + }, + { + "url": "https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5" + }, + { + "url": "https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2018-25032.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2022-9565.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-25032" + }, + { + "url": "https://security.gentoo.org/glsa/202210-42" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220526-0009" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220526-0009/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220729-0004" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220729-0004/" + }, + { + "url": "https://support.apple.com/kb/HT213255" + }, + { + "url": "https://support.apple.com/kb/HT213256" + }, + { + "url": "https://support.apple.com/kb/HT213257" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5355-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5355-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5359-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5359-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5739-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2018-25032" + }, + { + "url": "https://www.debian.org/security/2022/dsa-5111" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2022/03/24/1" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2022/03/28/1" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2022/03/28/3" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujul2022.html" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.2.11-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 787 + ], + "description": "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.", + "id": "CVE-2018-25032", + "published": "2022-03-25T09:15:08+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "high" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 8.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" + }, + { + "source": { + "name": "ruby-advisory-db" + }, + "severity": "high" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade zlib to version 1.2.12-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T02:56:26+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2019-13126" + }, + { + "url": "https://github.com/nats-io/nats-server/commit/07ef71ff98f45f8c2711be4aeaf484610d891dda" + }, + { + "url": "https://github.com/nats-io/nats-server/commits/master" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/1053" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/1441" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13126" + }, + { + "url": "https://www.twistlock.com/labs-blog/finding-dos-vulnerability-nats-go-fuzz-cve-2019-13126" + }, + { + "url": "https://www.twistlock.com/labs-blog/finding-dos-vulnerability-nats-go-fuzz-cve-2019-13126/" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + } + ], + "cwes": [ + 190 + ], + "description": "An integer overflow in NATS Server before 2.0.2 allows a remote attacker to crash the server by sending a crafted request. If authentication is enabled, then the remote attacker must have first authenticated.", + "id": "CVE-2019-13126", + "published": "2019-07-29T17:15:11+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.2.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-03-03T19:13:24+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2020-26521" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2020/11/02/2" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2020-26521.txt" + }, + { + "url": "https://github.com/nats-io/jwt/pull/107" + }, + { + "url": "https://github.com/nats-io/jwt/security/advisories/GHSA-h2fg-54x9-5qhq" + }, + { + "url": "https://github.com/nats-io/nats-server/commit/9ff8bcde2e46009e98bd9e88f598af355f62c168" + }, + { + "url": "https://github.com/nats-io/nats-server/commits/master" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-26521" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2022-0402" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + } + ], + "cwes": [ + 476 + ], + "description": "The JWT library in NATS nats-server before 2.1.9 allows a denial of service (a nil dereference in Go code).", + "id": "CVE-2020-26521", + "published": "2020-11-06T08:15:13+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 1.1.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:20:36+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2020-26892" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2020-26892.txt" + }, + { + "url": "https://github.com/nats-io/jwt/commit/e11ce317263cef69619fc1ca743b195d02aa1d8a" + }, + { + "url": "https://github.com/nats-io/jwt/security/advisories/GHSA-4w5x-x539-ppf5" + }, + { + "url": "https://github.com/nats-io/nats-server/commit/1e08b67f08e18cd844dce833a265aaa72500a12f" + }, + { + "url": "https://github.com/nats-io/nats-server/commits/master" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-26892" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2022-0380" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2020/11/02/2" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + } + ], + "cwes": [ + 798 + ], + "description": "The JWT library in NATS nats-server before 2.1.9 has Incorrect Access Control because of how expired credentials are handled.", + "id": "CVE-2020-26892", + "published": "2020-11-06T08:15:13+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 1.1.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:20:46+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2020-28466" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/16/1" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/16/2" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/1731" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/1731/commits/2e3c22672936f4980d343fb1d328b38919e74796" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28466" + }, + { + "url": "https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMNATSIONATSSERVERSERVER-1042967" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + } + ], + "description": "This affects all versions of package github.com/nats-io/nats-server/server. Untrusted accounts are able to crash the server using configs that represent a service export/import cycles. Disclaimer from the maintainers: Running a NATS service which is exposed to untrusted users presents a heightened risk. Any remote execution flaw or equivalent seriousness, or denial-of-service by unauthenticated users, will lead to prompt releases by the NATS maintainers. Fixes for denial of service issues with no threat of remote execution, when limited to account holders, are likely to just be committed to the main development branch with no special attention. Those who are running such services are encouraged to build regularly from git.", + "id": "CVE-2020-28466", + "published": "2021-03-07T10:15:12+00:00", + "ratings": [ + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.2.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2021-03-25T00:21:15+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2020-29652" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2020-29652" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29652" + }, + { + "url": "https://errata.almalinux.org/8/ALSA-2021-1796.html" + }, + { + "url": "https://go-review.googlesource.com/c/crypto/+/278852" + }, + { + "url": "https://go.dev/cl/278852" + }, + { + "url": "https://go.googlesource.com/crypto/+/8b5274cf687fd9316b4108863654cc57385531e8" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/ouZIlBimOsE?pli=1" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2020-29652.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2021-1796.html" + }, + { + "url": "https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff%40%3Cnotifications.skywalking.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff@%3Cnotifications.skywalking.apache.org%3E" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-29652" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2021-0227" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2020-29652" + } + ], + "affects": [ + { + "ref": "64ecbd63-f74a-4fcc-a240-3f8a16435789", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "718081db-83c2-4309-87c8-e43228139b88", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "c6ba0fd6-a390-4fcf-aaec-4a072dcd17c4", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59", + "versions": [ + { + "version": "v0.0.0-20200323165209-0ec3e9974c59", + "status": "affected" + } + ] + } + ], + "cwes": [ + 476 + ], + "description": "A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.", + "id": "CVE-2020-29652", + "published": "2020-12-17T05:15:10+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade golang.org/x/crypto to version 0.0.0-20201216223049-8b5274cf687f", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:21:32+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-28831" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-28831" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28831" + }, + { + "url": "https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28831" + }, + { + "url": "https://security.gentoo.org/glsa/202105-09" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6335-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-28831" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 755 + ], + "description": "decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.", + "id": "CVE-2021-28831", + "published": "2021-03-19T05:15:13+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r4; Upgrade ssl_client to version 1.32.1-r4", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:32:23+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-30139" + }, + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741" + }, + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/apk-tools@2.12.1-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "2.12.1-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.", + "id": "CVE-2021-30139", + "published": "2021-04-21T16:15:08+00:00", + "ratings": [ + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade apk-tools to version 2.12.5-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2021-04-22T18:21:47+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3127" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3127" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2021-3127.txt" + }, + { + "url": "https://github.com/nats-io/jwt" + }, + { + "url": "https://github.com/nats-io/jwt/pull/149/commits/a826c77dc9d2671c961b75ceefdb439c41029866" + }, + { + "url": "https://github.com/nats-io/nats-server/commit/423b79440c80c863de9f4e20548504e6c5d5e403" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3127" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.1.0", + "versions": [ + { + "version": "v1.1.0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.2.2", + "versions": [ + { + "version": "v1.2.2", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + } + ], + "cwes": [ + 755 + ], + "description": "NATS Server 2.x before 2.2.0 and JWT library before 2.0.1 have Incorrect Access Control because Import Token bindings are mishandled.", + "id": "CVE-2021-3127", + "published": "2021-03-16T20:15:13+00:00", + "ratings": [ + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 1.2.3-0.20210314221642-a826c77dc9d2; Upgrade github.com/nats-io/nats-server/v2 to version 2.2.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2022-07-12T17:42:04+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-33194" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-33194" + }, + { + "url": "https://github.com/golang/net/commit/37e1c6afe02340126705deced573a85ab75209d7" + }, + { + "url": "https://go.dev/cl/311090" + }, + { + "url": "https://go.dev/issue/46288" + }, + { + "url": "https://go.googlesource.com/net/+/37e1c6afe02340126705deced573a85ab75209d7" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/wPunbCPkWUg" + }, + { + "url": "https://groups.google.com/g/golang-dev/c/28x0nthP-c8/m/KqWVTjsnBAAJ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4CHKSFMHZVOBCZSSVRE3UEYNKARTBMTM/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4CHKSFMHZVOBCZSSVRE3UEYNKARTBMTM" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33194" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2021-0238" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-33194" + } + ], + "affects": [ + { + "ref": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "versions": [ + { + "version": "v0.0.0-20210428140749-89ef3d95e781", + "status": "affected" + } + ] + } + ], + "cwes": [ + 835 + ], + "description": "golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop) via crafted ParseFragment input.", + "id": "CVE-2021-33194", + "published": "2021-05-26T15:15:08+00:00", + "ratings": [ + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade golang.org/x/net to version 0.0.0-20210520170846-37e1c6afe023", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:35:49+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3449" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/27/1" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/27/2" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/28/3" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/28/4" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3449" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148" + }, + { + "url": "https://github.com/alexcrichton/openssl-src-rs" + }, + { + "url": "https://github.com/nodejs/node/pull/38083" + }, + { + "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845" + }, + { + "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10356" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2021-3449.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2021-9151.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3449" + }, + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0055" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0055.html" + }, + { + "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc" + }, + { + "url": "https://security.gentoo.org/glsa/202103-03" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210326-0006" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210326-0006/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210513-0002" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210513-0002/" + }, + { + "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd" + }, + { + "url": "https://ubuntu.com/security/notices/USN-4891-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5038-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-3449" + }, + { + "url": "https://www.debian.org/security/2021/dsa-4875" + }, + { + "url": "https://www.openssl.org/news/secadv/20210325.txt" + }, + { + "url": "https://www.oracle.com//security-alerts/cpujul2021.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuApr2021.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujul2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" + }, + { + "url": "https://www.tenable.com/security/tns-2021-05" + }, + { + "url": "https://www.tenable.com/security/tns-2021-06" + }, + { + "url": "https://www.tenable.com/security/tns-2021-09" + }, + { + "url": "https://www.tenable.com/security/tns-2021-10" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 476 + ], + "description": "An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).", + "id": "CVE-2021-3449", + "published": "2021-03-25T15:15:13+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ghsa" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 4.3, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.9, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "high" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1k-r0; Upgrade libssl1.1 to version 1.1.1k-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:38:00+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3450" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/27/1" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/27/2" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/28/3" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/03/28/4" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3450" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b" + }, + { + "url": "https://github.com/alexcrichton/openssl-src-rs" + }, + { + "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845" + }, + { + "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10356" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2021-3450.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2021-9151.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP" + }, + { + "url": "https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3450" + }, + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0056.html" + }, + { + "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc" + }, + { + "url": "https://security.gentoo.org/glsa/202103-03" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210326-0006" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210326-0006/" + }, + { + "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-3450" + }, + { + "url": "https://www.openssl.org/news/secadv/20210325.txt" + }, + { + "url": "https://www.oracle.com//security-alerts/cpujul2021.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuApr2021.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujul2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" + }, + { + "url": "https://www.tenable.com/security/tns-2021-05" + }, + { + "url": "https://www.tenable.com/security/tns-2021-08" + }, + { + "url": "https://www.tenable.com/security/tns-2021-09" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 295 + ], + "description": "The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a \"purpose\" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named \"purpose\" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).", + "id": "CVE-2021-3450", + "published": "2021-03-25T15:15:13+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.8, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1k-r0; Upgrade libssl1.1 to version 1.1.1k-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:38:00+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-36159" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-36159" + }, + { + "url": "https://github.com/freebsd/freebsd-src/commits/main/lib/libfetch" + }, + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10749" + }, + { + "url": "https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-36159" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-36159" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/apk-tools@2.12.1-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "2.12.1-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because strtol is used to parse the relevant numbers into address bytes. It does not check if the line ends prematurely. If it does, the for-loop condition checks for the '\\0' terminator one byte too late.", + "id": "CVE-2021-36159", + "published": "2021-08-03T14:15:08+00:00", + "ratings": [ + { + "source": { + "name": "nvd" + }, + "score": 6.4, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 9.1, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 9.1, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" + } + ], + "recommendation": "Upgrade apk-tools to version 2.12.6-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:36:43+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3711" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/08/26/2" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3711" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3711" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46" + }, + { + "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3711" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0097.html" + }, + { + "url": "https://security.gentoo.org/glsa/202209-02" + }, + { + "url": "https://security.gentoo.org/glsa/202210-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210827-0010" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210827-0010/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211022-0003" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211022-0003/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-3711" + }, + { + "url": "https://www.debian.org/security/2021/dsa-4963" + }, + { + "url": "https://www.openssl.org/news/secadv/20210824.txt" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujan2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" + }, + { + "url": "https://www.tenable.com/security/tns-2021-16" + }, + { + "url": "https://www.tenable.com/security/tns-2022-02" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 120 + ], + "description": "In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the \"out\" parameter can be NULL and, on exit, the \"outlen\" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the \"out\" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).", + "id": "CVE-2021-3711", + "published": "2021-08-24T15:15:09+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "critical" + }, + { + "source": { + "name": "ghsa" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "photon" + }, + "severity": "critical" + }, + { + "source": { + "name": "redhat" + }, + "score": 9.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "high" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1l-r0; Upgrade libssl1.1 to version 1.1.1l-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:38:13+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-3712" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2021/08/26/2" + }, + { + "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-3712" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3712" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12" + }, + { + "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10366" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2021-3712.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2022-9023.html" + }, + { + "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3712" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2021-0098.html" + }, + { + "url": "https://security.gentoo.org/glsa/202209-02" + }, + { + "url": "https://security.gentoo.org/glsa/202210-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210827-0010" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20210827-0010/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-3" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5088-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-3712" + }, + { + "url": "https://www.debian.org/security/2021/dsa-4963" + }, + { + "url": "https://www.openssl.org/news/secadv/20210824.txt" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujan2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" + }, + { + "url": "https://www.tenable.com/security/tns-2021-16" + }, + { + "url": "https://www.tenable.com/security/tns-2022-02" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).", + "id": "CVE-2021-3712", + "published": "2021-08-24T15:15:09+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.8, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:M/Au:N/C:P/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.4, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.4, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" + }, + { + "source": { + "name": "rocky" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1l-r0; Upgrade libssl1.1 to version 1.1.1l-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:38:13+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-38561" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-38561" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38561" + }, + { + "url": "https://deps.dev/advisory/OSV/GO-2021-0113" + }, + { + "url": "https://go.dev/cl/340830" + }, + { + "url": "https://go.googlesource.com/text/+/383b2e75a7a4198c42f8f87833eefb772868a56f" + }, + { + "url": "https://groups.google.com/g/golang-announce" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-38561" + }, + { + "url": "https://pkg.go.dev/golang.org/x/text/language" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2021-0113" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5873-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-38561" + } + ], + "affects": [ + { + "ref": "869288c8-06d2-4a38-8b68-ced0ff17bc77", + "versions": [ + { + "version": "v0.3.6", + "status": "affected" + } + ] + }, + { + "ref": "99b7b900-55f8-4676-8c8f-32262681845b", + "versions": [ + { + "version": "v0.3.6", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack.", + "id": "CVE-2021-38561", + "published": "2022-12-26T06:15:10+00:00", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade golang.org/x/text to version 0.3.7", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-01-05T04:52:36+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42374" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42374" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42374" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42374" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42374" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 125 + ], + "description": "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that", + "id": "CVE-2021-42374", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "nvd" + }, + "score": 3.3, + "severity": "info", + "method": "CVSSv2", + "vector": "AV:L/AC:M/Au:N/C:P/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.7, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:09+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42375" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42375" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42375" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42375" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 159 + ], + "description": "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.", + "id": "CVE-2021-42375", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "nvd" + }, + "score": 1.9, + "severity": "info", + "method": "CVSSv2", + "vector": "AV:L/AC:M/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 4.1, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:09+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42378" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42378" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42378" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42378" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42378" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function", + "id": "CVE-2021-42378", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42379" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42379" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42379" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42379" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42379" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function", + "id": "CVE-2021-42379", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42380" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42380" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42380" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42380" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42380" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function", + "id": "CVE-2021-42380", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42381" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42381" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42381" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42381" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42381" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function", + "id": "CVE-2021-42381", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42382" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42382" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42382" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42382" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42382" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function", + "id": "CVE-2021-42382", + "published": "2021-11-15T21:15:07+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42383" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42383" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42383" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42383" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function", + "id": "CVE-2021-42383", + "published": "2021-11-15T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42384" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42384" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42384" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42384" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42384" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function", + "id": "CVE-2021-42384", + "published": "2021-11-15T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42385" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42385" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42385" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42385" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42385" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function", + "id": "CVE-2021-42385", + "published": "2021-11-15T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-42386" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-42386" + }, + { + "url": "https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42386" + }, + { + "url": "https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42386" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20211223-0002/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5179-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-42386" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function", + "id": "CVE-2021-42386", + "published": "2021-11-15T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.2, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.6, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r7; Upgrade ssl_client to version 1.32.1-r7", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:39:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2021-43565" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2021-43565" + }, + { + "url": "https://go.dev/cl/368814" + }, + { + "url": "https://go.dev/issues/49932" + }, + { + "url": "https://groups.google.com/forum/#!forum/golang-announce" + }, + { + "url": "https://groups.google.com/forum/#%21forum/golang-announce" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/2AR1sKiM-Qs" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-43565" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2022-0968" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2021-43565" + } + ], + "affects": [ + { + "ref": "64ecbd63-f74a-4fcc-a240-3f8a16435789", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "718081db-83c2-4309-87c8-e43228139b88", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "84eac386-ca89-4217-8a72-84d77e3bd144", + "versions": [ + { + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "status": "affected" + } + ] + }, + { + "ref": "c6ba0fd6-a390-4fcf-aaec-4a072dcd17c4", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "ce164c60-ee4f-4360-a85f-73106cf59f6c", + "versions": [ + { + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59", + "versions": [ + { + "version": "v0.0.0-20200323165209-0ec3e9974c59", + "status": "affected" + } + ] + } + ], + "description": "The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.", + "id": "CVE-2021-43565", + "published": "2022-09-06T18:15:10+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade golang.org/x/crypto to version 0.0.0-20211202192323-5770296d904e", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:39:23+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2022-0778" + }, + { + "url": "http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/33" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/35" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/May/38" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2022:5326" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-0778" + }, + { + "url": "https://bugzilla.redhat.com/2062202" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2062202" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778" + }, + { + "url": "https://errata.almalinux.org/8/ALSA-2022-5326.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2022:4899" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2022-0778.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2022-9272.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0778" + }, + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2022-0014.html" + }, + { + "url": "https://security.gentoo.org/glsa/202210-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220321-0002" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220321-0002/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220429-0005" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220429-0005/" + }, + { + "url": "https://support.apple.com/kb/HT213255" + }, + { + "url": "https://support.apple.com/kb/HT213256" + }, + { + "url": "https://support.apple.com/kb/HT213257" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5328-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5328-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6457-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-0778" + }, + { + "url": "https://www.debian.org/security/2022/dsa-5103" + }, + { + "url": "https://www.openssl.org/news/secadv/20220315.txt" + }, + { + "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" + }, + { + "url": "https://www.oracle.com/security-alerts/cpujul2022.html" + }, + { + "url": "https://www.tenable.com/security/tns-2022-06" + }, + { + "url": "https://www.tenable.com/security/tns-2022-07" + }, + { + "url": "https://www.tenable.com/security/tns-2022-08" + }, + { + "url": "https://www.tenable.com/security/tns-2022-09" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 835 + ], + "description": "The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).", + "id": "CVE-2022-0778", + "published": "2022-03-15T17:15:08+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "low" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "rocky" + }, + "severity": "high" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "high" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1n-r0; Upgrade libssl1.1 to version 1.1.1n-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:41:33+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2022-2097" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2022:6224" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-2097" + }, + { + "url": "https://bugzilla.redhat.com/2081494" + }, + { + "url": "https://bugzilla.redhat.com/2087911" + }, + { + "url": "https://bugzilla.redhat.com/2087913" + }, + { + "url": "https://bugzilla.redhat.com/2097310" + }, + { + "url": "https://bugzilla.redhat.com/2104905" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2081494" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2097310" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2100554" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2104905" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2022-6224.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2022:5818" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431" + }, + { + "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93" + }, + { + "url": "https://github.com/alexcrichton/openssl-src-rs" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2022-2097.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2022-9751.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2097" + }, + { + "url": "https://rustsec.org/advisories/RUSTSEC-2022-0032.html" + }, + { + "url": "https://security.gentoo.org/glsa/202210-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220715-0011" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220715-0011/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20230420-0008" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20230420-0008/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5502-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6457-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-2097" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5343" + }, + { + "url": "https://www.openssl.org/news/secadv/20220705.txt" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/libcrypto1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/libssl1.1@1.1.1j-r0?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.1.1j-r0", + "status": "affected" + } + ] + } + ], + "cwes": [ + 327 + ], + "description": "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).", + "id": "CVE-2022-2097", + "published": "2022-07-05T11:15:08+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "photon" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "source": { + "name": "rocky" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade libcrypto1.1 to version 1.1.1q-r0; Upgrade libssl1.1 to version 1.1.1q-r0", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-11-07T03:46:13+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2022-24450" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-24450" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2022-24450.txt" + }, + { + "url": "https://github.com/nats-io/nats-server" + }, + { + "url": "https://github.com/nats-io/nats-server/releases/tag/v2.7.2" + }, + { + "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-g6w6-r76c-28j7" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24450" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-24450" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.2.2", + "versions": [ + { + "version": "v2.2.2", + "status": "affected" + } + ] + } + ], + "cwes": [ + 862 + ], + "description": "NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the \"dynamically provisioned sandbox accounts\" feature.", + "id": "CVE-2022-24450", + "published": "2022-02-08T02:15:06+00:00", + "ratings": [ + { + "source": { + "name": "bitnami" + }, + "score": 8.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "ghsa" + }, + "score": 8.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 9, + "severity": "high", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:C/I:C/A:C" + }, + { + "source": { + "name": "nvd" + }, + "score": 8.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 8.8, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.7.2", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-08-08T14:22:24+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2022-26652" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2022/03/10/1" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2022-26652.txt" + }, + { + "url": "https://github.com/nats-io/nats-server" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/2917" + }, + { + "url": "https://github.com/nats-io/nats-server/releases" + }, + { + "url": "https://github.com/nats-io/nats-server/releases/tag/v2.7.4" + }, + { + "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-6h3m-36w8-hv68" + }, + { + "url": "https://github.com/nats-io/nats-streaming-server/releases/tag/v0.24.3" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-26652" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.2.2", + "versions": [ + { + "version": "v2.2.2", + "status": "affected" + } + ] + } + ], + "cwes": [ + 22 + ], + "description": "NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected.", + "id": "CVE-2022-26652", + "published": "2022-03-10T17:47:51+00:00", + "ratings": [ + { + "source": { + "name": "bitnami" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" + }, + { + "source": { + "name": "ghsa" + }, + "score": 6.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 4, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:S/C:N/I:P/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.7.4", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2022-03-18T01:44:13+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2022-27191" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2022:8008" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-27191" + }, + { + "url": "https://bugzilla.redhat.com/1939485" + }, + { + "url": "https://bugzilla.redhat.com/1989564" + }, + { + "url": "https://bugzilla.redhat.com/1989570" + }, + { + "url": "https://bugzilla.redhat.com/1989575" + }, + { + "url": "https://bugzilla.redhat.com/2064702" + }, + { + "url": "https://bugzilla.redhat.com/2121445" + }, + { + "url": "https://bugzilla.redhat.com/2121453" + }, + { + "url": "https://cs.opensource.google/go/x/crypto" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2022-8008.html" + }, + { + "url": "https://go.dev/cl/392355" + }, + { + "url": "https://go.googlesource.com/crypto/+/1baeb1ce4c0b006eff0f294c47cb7617598dfb3d" + }, + { + "url": "https://groups.google.com/g/golang-announce" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/-cp44ypCT5s" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/-cp44ypCT5s/m/wmegxkLiAQAJ" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2022-27191.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2022-8008.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLUJZV3HBP56ADXU6QH2V7RNYUPMVBXQ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ3S7LB65N54HXXBCB67P4TTOHTNPP5O/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HHGBEGJ54DZZGTXFUQNS7ZIG3E624YAF/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J5WPM42UR6XIBQNQPNQHM32X7S4LJTRX/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QTFOIDHQRGNI4P6LYN6ILH5G443RYYKB/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YHYRQB7TRMHDB3NEHW5XBRG7PPMUTPGV/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZFUNHFHQVJSADNH7EZ3B53CYDZVEEPBP/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQNPPQWSTP2IX7SHE6TS4SP4EVMI5EZK/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DLUJZV3HBP56ADXU6QH2V7RNYUPMVBXQ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZ3S7LB65N54HXXBCB67P4TTOHTNPP5O" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HHGBEGJ54DZZGTXFUQNS7ZIG3E624YAF" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J5WPM42UR6XIBQNQPNQHM32X7S4LJTRX" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QTFOIDHQRGNI4P6LYN6ILH5G443RYYKB" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YHYRQB7TRMHDB3NEHW5XBRG7PPMUTPGV" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZFUNHFHQVJSADNH7EZ3B53CYDZVEEPBP" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZQNPPQWSTP2IX7SHE6TS4SP4EVMI5EZK" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27191" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2021-0356" + }, + { + "url": "https://raw.githubusercontent.com/golang/vulndb/df2d3d326300e2ae768f00351ffa96cc2c56cf54/reports/GO-2021-0356.yaml" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220429-0002" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220429-0002/" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-27191" + } + ], + "affects": [ + { + "ref": "64ecbd63-f74a-4fcc-a240-3f8a16435789", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "718081db-83c2-4309-87c8-e43228139b88", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "84eac386-ca89-4217-8a72-84d77e3bd144", + "versions": [ + { + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "status": "affected" + } + ] + }, + { + "ref": "c6ba0fd6-a390-4fcf-aaec-4a072dcd17c4", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "ce164c60-ee4f-4360-a85f-73106cf59f6c", + "versions": [ + { + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59", + "versions": [ + { + "version": "v0.0.0-20200323165209-0ec3e9974c59", + "status": "affected" + } + ] + } + ], + "description": "The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.", + "id": "CVE-2022-27191", + "published": "2022-03-18T07:15:06+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 4.3, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade golang.org/x/crypto to version 0.0.0-20220314234659-1baeb1ce4c0b", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:45:17+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2022-27664" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2023:2357" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-27664" + }, + { + "url": "https://bugzilla.redhat.com/2107371" + }, + { + "url": "https://bugzilla.redhat.com/2107374" + }, + { + "url": "https://bugzilla.redhat.com/2107383" + }, + { + "url": "https://bugzilla.redhat.com/2107386" + }, + { + "url": "https://bugzilla.redhat.com/2107388" + }, + { + "url": "https://bugzilla.redhat.com/2113814" + }, + { + "url": "https://bugzilla.redhat.com/2124669" + }, + { + "url": "https://bugzilla.redhat.com/2132868" + }, + { + "url": "https://bugzilla.redhat.com/2132872" + }, + { + "url": "https://bugzilla.redhat.com/2161274" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1913333" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1913338" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2107371" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2107374" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2107383" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2107386" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2107388" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2113814" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2124669" + }, + { + "url": "https://cs.opensource.google/go/x/net" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28851" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28852" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1705" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27664" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30630" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30632" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30635" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32148" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32189" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2023-2357.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2022:7129" + }, + { + "url": "https://github.com/golang/go/commit/5bc9106458fc07851ac324a4157132a91b1f3479 (go1.18.6)" + }, + { + "url": "https://github.com/golang/go/commit/9cfe4e258b1c9d4a04a42539c21c7bdb2e227824 (go1.19.1)" + }, + { + "url": "https://github.com/golang/go/issues/54658" + }, + { + "url": "https://go.dev/cl/428735" + }, + { + "url": "https://go.dev/issue/54658" + }, + { + "url": "https://groups.google.com/g/golang-announce" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/x49AQzIVX-s" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/x49AQzIVX-s/m/0tgO0pjiBQAJ" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2022-27664.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2024-0121.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXKTHIGE5F576MAPFYCIJXNRGBSPISUF/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TXS2OQ57KZC5XZKK5UW4SYKPVQAHIOJX/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JXKTHIGE5F576MAPFYCIJXNRGBSPISUF" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TXS2OQ57KZC5XZKK5UW4SYKPVQAHIOJX" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27664" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2022-0969" + }, + { + "url": "https://security.gentoo.org/glsa/202209-26" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220923-0004" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220923-0004/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6038-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6038-2" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-27664" + } + ], + "affects": [ + { + "ref": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "versions": [ + { + "version": "v0.0.0-20210428140749-89ef3d95e781", + "status": "affected" + } + ] + } + ], + "description": "In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.", + "id": "CVE-2022-27664", + "published": "2022-09-06T18:15:12+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "rocky" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade golang.org/x/net to version 0.0.0-20220906165146-f3363e06e74c", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:45:22+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2022-28391" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-28391" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28391" + }, + { + "url": "https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch" + }, + { + "url": "https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch" + }, + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-28391" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-28391" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "description": "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.", + "id": "CVE-2022-28391", + "published": "2022-04-03T21:15:08+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.8, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 8.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "low" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r8; Upgrade ssl_client to version 1.32.1-r8", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2022-08-11T18:44:50+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2022-29526" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-29526" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29526" + }, + { + "url": "https://github.com/golang/go" + }, + { + "url": "https://github.com/golang/go/commit/f66925e854e71e0c54b581885380a490d7afa30c" + }, + { + "url": "https://github.com/golang/go/issues/52313" + }, + { + "url": "https://go.dev/cl/399539" + }, + { + "url": "https://go.dev/cl/400074" + }, + { + "url": "https://go.dev/issue/52313" + }, + { + "url": "https://groups.google.com/g/golang-announce" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/Y5qrqw_lWdU" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2022-29526.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2022-5337.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q6GE5EQGE4L2KRVGW4T75QVIYAXCLO5X/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q6GE5EQGE4L2KRVGW4T75QVIYAXCLO5X" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-29526" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2022-0493" + }, + { + "url": "https://security.gentoo.org/glsa/202208-02" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220729-0001" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220729-0001/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6038-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6038-2" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-29526" + } + ], + "affects": [ + { + "ref": "pkg:golang/golang.org/x/sys@v0.0.0-20210421221651-33663a62ff08", + "versions": [ + { + "version": "v0.0.0-20210421221651-33663a62ff08", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/golang.org/x/sys@v0.0.0-20210426230700-d19ff857e887", + "versions": [ + { + "version": "v0.0.0-20210426230700-d19ff857e887", + "status": "affected" + } + ] + } + ], + "cwes": [ + 269 + ], + "description": "Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.", + "id": "CVE-2022-29526", + "published": "2022-06-23T17:15:12+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "ghsa" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "photon" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.2, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade golang.org/x/sys to version 0.0.0-20220412211240-33da011f77ad", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T03:46:03+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2022-30065" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-30065" + }, + { + "url": "https://bugs.busybox.net/show_bug.cgi?id=14781" + }, + { + "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-30065" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-30065" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/busybox@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + }, + { + "ref": "pkg:apk/alpine/ssl_client@1.32.1-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.32.1-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 416 + ], + "description": "A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.", + "id": "CVE-2022-30065", + "published": "2022-05-18T15:15:10+00:00", + "ratings": [ + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.8, + "severity": "medium", + "method": "CVSSv2", + "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.8, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.2, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade busybox to version 1.32.1-r9; Upgrade ssl_client to version 1.32.1-r9", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-02-11T17:44:54+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2022-32149" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-32149" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32149" + }, + { + "url": "https://github.com/golang/go/issues/56152" + }, + { + "url": "https://github.com/golang/text" + }, + { + "url": "https://github.com/golang/text/commit/434eadcdbc3b0256971992e8c70027278364c72c" + }, + { + "url": "https://github.com/golang/text/commit/434eadcdbc3b0256971992e8c70027278364c72c (v0.3.8)" + }, + { + "url": "https://go.dev/cl/442235" + }, + { + "url": "https://go.dev/issue/56152" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/-hjNw559_tE/m/KlGTfid5CAAJ" + }, + { + "url": "https://groups.google.com/g/golang-dev/c/qfPIly0X7aU" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-32149" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2022-1059" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5873-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-32149" + } + ], + "affects": [ + { + "ref": "869288c8-06d2-4a38-8b68-ced0ff17bc77", + "versions": [ + { + "version": "v0.3.6", + "status": "affected" + } + ] + }, + { + "ref": "99b7b900-55f8-4676-8c8f-32262681845b", + "versions": [ + { + "version": "v0.3.6", + "status": "affected" + } + ] + } + ], + "cwes": [ + 772 + ], + "description": "An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.", + "id": "CVE-2022-32149", + "published": "2022-10-14T15:15:34+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade golang.org/x/text to version 0.3.8", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2022-10-18T17:41:31+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2022-37434" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/Oct/37" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/Oct/38" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/Oct/41" + }, + { + "url": "http://seclists.org/fulldisclosure/2022/Oct/42" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2022/08/05/2" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2022/08/09/1" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2022:8291" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-37434" + }, + { + "url": "https://bugzilla.redhat.com/2116639" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2053198" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2077431" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2081296" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2116639" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2022-8291.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2022:8291" + }, + { + "url": "https://github.com/curl/curl/issues/9271" + }, + { + "url": "https://github.com/ivd38/zlib_overflow" + }, + { + "url": "https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063" + }, + { + "url": "https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1" + }, + { + "url": "https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2022-37434.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2023-1095.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-37434" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20220901-0005/" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20230427-0007/" + }, + { + "url": "https://support.apple.com/kb/HT213488" + }, + { + "url": "https://support.apple.com/kb/HT213489" + }, + { + "url": "https://support.apple.com/kb/HT213490" + }, + { + "url": "https://support.apple.com/kb/HT213491" + }, + { + "url": "https://support.apple.com/kb/HT213493" + }, + { + "url": "https://support.apple.com/kb/HT213494" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5570-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5570-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-5573-1" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-37434" + }, + { + "url": "https://www.debian.org/security/2022/dsa-5218" + } + ], + "affects": [ + { + "ref": "pkg:apk/alpine/zlib@1.2.11-r3?arch=x86_64\u0026distro=3.13.2", + "versions": [ + { + "version": "1.2.11-r3", + "status": "affected" + } + ] + } + ], + "cwes": [ + 787 + ], + "description": "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).", + "id": "CVE-2022-37434", + "published": "2022-08-05T07:15:07+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "critical" + }, + { + "source": { + "name": "nvd" + }, + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "photon" + }, + "severity": "critical" + }, + { + "source": { + "name": "redhat" + }, + "score": 7, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" + }, + { + "source": { + "name": "rocky" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade zlib to version 1.2.12-r2", + "source": { + "name": "alpine", + "url": "https://secdb.alpinelinux.org/" + }, + "updated": "2023-07-19T00:56:46+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2022-41723" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2023:6474" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2022-41723" + }, + { + "url": "https://bugzilla.redhat.com/2174485" + }, + { + "url": "https://bugzilla.redhat.com/2178358" + }, + { + "url": "https://bugzilla.redhat.com/2178488" + }, + { + "url": "https://bugzilla.redhat.com/2178492" + }, + { + "url": "https://bugzilla.redhat.com/2184481" + }, + { + "url": "https://bugzilla.redhat.com/2184482" + }, + { + "url": "https://bugzilla.redhat.com/2184483" + }, + { + "url": "https://bugzilla.redhat.com/2184484" + }, + { + "url": "https://bugzilla.redhat.com/2196026" + }, + { + "url": "https://bugzilla.redhat.com/2196027" + }, + { + "url": "https://bugzilla.redhat.com/2196029" + }, + { + "url": "https://bugzilla.redhat.com/2222167" + }, + { + "url": "https://bugzilla.redhat.com/2228689" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41723" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2023-6474.html" + }, + { + "url": "https://github.com/advisories/GHSA-vvpx-j8f3-3w6h" + }, + { + "url": "https://go.dev/cl/468135" + }, + { + "url": "https://go.dev/cl/468295" + }, + { + "url": "https://go.dev/issue/57855" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2022-41723.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2023-6939.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MA5XS5DAOJ5PKKNG5TUXKPQOFHT5VBC" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MA5XS5DAOJ5PKKNG5TUXKPQOFHT5VBC/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGW7GE2Z32ZT47UFAQFDRQE33B7Q7LMT" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGW7GE2Z32ZT47UFAQFDRQE33B7Q7LMT/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLBQ3A7ROLEQXQLXFDLNJ7MYPKG5GULE" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLBQ3A7ROLEQXQLXFDLNJ7MYPKG5GULE/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XX3IMUTZKRQ73PBZM4E2JP4BKYH4C6XE" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XX3IMUTZKRQ73PBZM4E2JP4BKYH4C6XE/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41723" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2023-1571" + }, + { + "url": "https://security.gentoo.org/glsa/202311-09" + }, + { + "url": "https://vuln.go.dev/ID/GO-2023-1571.json" + }, + { + "url": "https://www.couchbase.com/alerts" + }, + { + "url": "https://www.couchbase.com/alerts/" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2022-41723" + } + ], + "affects": [ + { + "ref": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "versions": [ + { + "version": "v0.0.0-20210428140749-89ef3d95e781", + "status": "affected" + } + ] + } + ], + "description": "A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.", + "id": "CVE-2022-41723", + "published": "2023-02-28T18:15:09+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade golang.org/x/net to version 0.7.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-25T11:15:10+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2023-39325" + }, + { + "url": "golang.org/x/net" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2023:6077" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2023-39325" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2023-44487" + }, + { + "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2023-003" + }, + { + "url": "https://bugzilla.redhat.com/2242803" + }, + { + "url": "https://bugzilla.redhat.com/2243296" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2242803" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2243296" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39325" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2023-6077.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2023:6077" + }, + { + "url": "https://github.com/golang/go/commit/24ae2d927285c697440fdde3ad7f26028354bcf3 [golang- 1.21]" + }, + { + "url": "https://github.com/golang/go/commit/e175f27f58aa7b9cd4d79607ae65d2cd5baaee68 [golang-1.20]" + }, + { + "url": "https://github.com/golang/go/issues/63417" + }, + { + "url": "https://go.dev/cl/534215" + }, + { + "url": "https://go.dev/cl/534235" + }, + { + "url": "https://go.dev/issue/63417" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2023-39325.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2023-5867.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39325" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2023-2102" + }, + { + "url": "https://security.gentoo.org/glsa/202311-09" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20231110-0008" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20231110-0008/" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6574-1" + }, + { + "url": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2023-39325" + } + ], + "affects": [ + { + "ref": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "versions": [ + { + "version": "v0.0.0-20210428140749-89ef3d95e781", + "status": "affected" + } + ] + } + ], + "cwes": [ + 770 + ], + "description": "A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function.", + "id": "CVE-2023-39325", + "published": "2023-10-11T22:15:09+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "rocky" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade golang.org/x/net to version 0.17.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2024-03-10T04:15:05+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2023-3978" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2023:6474" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2023-3978" + }, + { + "url": "https://bugzilla.redhat.com/2174485" + }, + { + "url": "https://bugzilla.redhat.com/2178358" + }, + { + "url": "https://bugzilla.redhat.com/2178488" + }, + { + "url": "https://bugzilla.redhat.com/2178492" + }, + { + "url": "https://bugzilla.redhat.com/2184481" + }, + { + "url": "https://bugzilla.redhat.com/2184482" + }, + { + "url": "https://bugzilla.redhat.com/2184483" + }, + { + "url": "https://bugzilla.redhat.com/2184484" + }, + { + "url": "https://bugzilla.redhat.com/2196026" + }, + { + "url": "https://bugzilla.redhat.com/2196027" + }, + { + "url": "https://bugzilla.redhat.com/2196029" + }, + { + "url": "https://bugzilla.redhat.com/2222167" + }, + { + "url": "https://bugzilla.redhat.com/2228689" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2023-6474.html" + }, + { + "url": "https://go.dev/cl/514896" + }, + { + "url": "https://go.dev/issue/61615" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2023-3978.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2023-6939.html" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3978" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2023-1988" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2023-3978" + } + ], + "affects": [ + { + "ref": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "versions": [ + { + "version": "v0.0.0-20210428140749-89ef3d95e781", + "status": "affected" + } + ] + } + ], + "cwes": [ + 79 + ], + "description": "Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack.", + "id": "CVE-2023-3978", + "published": "2023-08-02T20:15:12+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "ghsa" + }, + "score": 6.1, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.1, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 6.1, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "recommendation": "Upgrade golang.org/x/net to version 0.13.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-07T04:20:03+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2023-44487" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/13/4" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/13/9" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/18/4" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/18/8" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/19/6" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/20/8" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2023:6746" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2023-44487" + }, + { + "url": "https://access.redhat.com/security/cve/cve-2023-44487" + }, + { + "url": "https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size" + }, + { + "url": "https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/" + }, + { + "url": "https://aws.amazon.com/security/security-bulletins/AWS-2023-011" + }, + { + "url": "https://aws.amazon.com/security/security-bulletins/AWS-2023-011/" + }, + { + "url": "https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack" + }, + { + "url": "https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/" + }, + { + "url": "https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack" + }, + { + "url": "https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/" + }, + { + "url": "https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty" + }, + { + "url": "https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/" + }, + { + "url": "https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack" + }, + { + "url": "https://blog.vespa.ai/cve-2023-44487" + }, + { + "url": "https://blog.vespa.ai/cve-2023-44487/" + }, + { + "url": "https://bugzilla.proxmox.com/show_bug.cgi?id=4988" + }, + { + "url": "https://bugzilla.redhat.com/2242803" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2242803" + }, + { + "url": "https://bugzilla.suse.com/show_bug.cgi?id=1216123" + }, + { + "url": "https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9" + }, + { + "url": "https://chaos.social/@icing/111210915918780532" + }, + { + "url": "https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps" + }, + { + "url": "https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/" + }, + { + "url": "https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack" + }, + { + "url": "https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487" + }, + { + "url": "https://devblogs.microsoft.com/dotnet/october-2023-updates/" + }, + { + "url": "https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715" + }, + { + "url": "https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2023-6746.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2023:5838" + }, + { + "url": "https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764" + }, + { + "url": "https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088" + }, + { + "url": "https://github.com/Azure/AKS/issues/3947" + }, + { + "url": "https://github.com/Kong/kong/discussions/11741" + }, + { + "url": "https://github.com/advisories/GHSA-qppj-fm5r-hxr3" + }, + { + "url": "https://github.com/advisories/GHSA-vx74-f528-fxqg" + }, + { + "url": "https://github.com/advisories/GHSA-xpw8-rcwv-8f8p" + }, + { + "url": "https://github.com/akka/akka-http/issues/4323" + }, + { + "url": "https://github.com/alibaba/tengine/issues/1872" + }, + { + "url": "https://github.com/apache/apisix/issues/10320" + }, + { + "url": "https://github.com/apache/httpd-site/pull/10" + }, + { + "url": "https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113" + }, + { + "url": "https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2" + }, + { + "url": "https://github.com/apache/trafficserver/pull/10564" + }, + { + "url": "https://github.com/apple/swift-nio-http2" + }, + { + "url": "https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3" + }, + { + "url": "https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487" + }, + { + "url": "https://github.com/bcdannyboy/CVE-2023-44487" + }, + { + "url": "https://github.com/caddyserver/caddy/issues/5877" + }, + { + "url": "https://github.com/caddyserver/caddy/releases/tag/v2.7.5" + }, + { + "url": "https://github.com/dotnet/announcements/issues/277" + }, + { + "url": "https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73" + }, + { + "url": "https://github.com/eclipse/jetty.project/issues/10679" + }, + { + "url": "https://github.com/envoyproxy/envoy/pull/30055" + }, + { + "url": "https://github.com/etcd-io/etcd/issues/16740" + }, + { + "url": "https://github.com/facebook/proxygen/pull/466" + }, + { + "url": "https://github.com/golang/go/issues/63417" + }, + { + "url": "https://github.com/grpc/grpc-go/pull/6703" + }, + { + "url": "https://github.com/grpc/grpc-go/releases" + }, + { + "url": "https://github.com/h2o/h2o/pull/3291" + }, + { + "url": "https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf" + }, + { + "url": "https://github.com/haproxy/haproxy/issues/2312" + }, + { + "url": "https://github.com/hyperium/hyper/issues/3337" + }, + { + "url": "https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244" + }, + { + "url": "https://github.com/junkurihara/rust-rpxy/issues/97" + }, + { + "url": "https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1" + }, + { + "url": "https://github.com/kazu-yamamoto/http2/issues/93" + }, + { + "url": "https://github.com/kubernetes/kubernetes/pull/121120" + }, + { + "url": "https://github.com/line/armeria/pull/5232" + }, + { + "url": "https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632" + }, + { + "url": "https://github.com/micrictor/http2-rst-stream" + }, + { + "url": "https://github.com/microsoft/CBL-Mariner/pull/6381" + }, + { + "url": "https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61" + }, + { + "url": "https://github.com/nghttp2/nghttp2/pull/1961" + }, + { + "url": "https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0" + }, + { + "url": "https://github.com/ninenines/cowboy/issues/1615" + }, + { + "url": "https://github.com/nodejs/node/pull/50121" + }, + { + "url": "https://github.com/openresty/openresty/issues/930" + }, + { + "url": "https://github.com/opensearch-project/data-prepper/issues/3474" + }, + { + "url": "https://github.com/oqtane/oqtane.framework/discussions/3367" + }, + { + "url": "https://github.com/projectcontour/contour/pull/5826" + }, + { + "url": "https://github.com/tempesta-tech/tempesta/issues/1986" + }, + { + "url": "https://github.com/varnishcache/varnish-cache/issues/3996" + }, + { + "url": "https://go.dev/cl/534215" + }, + { + "url": "https://go.dev/cl/534235" + }, + { + "url": "https://go.dev/issue/63417" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ" + }, + { + "url": "https://istio.io/latest/news/security/istio-security-2023-004" + }, + { + "url": "https://istio.io/latest/news/security/istio-security-2023-004/" + }, + { + "url": "https://linkerd.io/2023/10/12/linkerd-cve-2023-44487" + }, + { + "url": "https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2023-44487.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2023-7205.html" + }, + { + "url": "https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4" + }, + { + "url": "https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html" + }, + { + "url": "https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html" + }, + { + "url": "https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html" + }, + { + "url": "https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2" + }, + { + "url": "https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/" + }, + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487" + }, + { + "url": "https://my.f5.com/manage/s/article/K000137106" + }, + { + "url": "https://netty.io/news/2023/10/10/4-1-100-Final.html" + }, + { + "url": "https://news.ycombinator.com/item?id=37830987" + }, + { + "url": "https://news.ycombinator.com/item?id=37830998" + }, + { + "url": "https://news.ycombinator.com/item?id=37831062" + }, + { + "url": "https://news.ycombinator.com/item?id=37837043" + }, + { + "url": "https://nodejs.org/en/blog/vulnerability/october-2023-security-releases" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44487" + }, + { + "url": "https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response" + }, + { + "url": "https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/" + }, + { + "url": "https://pkg.go.dev/vuln/GO-2023-2102" + }, + { + "url": "https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected" + }, + { + "url": "https://security.gentoo.org/glsa/202311-09" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20231016-0001" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20231016-0001/" + }, + { + "url": "https://security.paloaltonetworks.com/CVE-2023-44487" + }, + { + "url": "https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14" + }, + { + "url": "https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.0-M12" + }, + { + "url": "https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.94" + }, + { + "url": "https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.81" + }, + { + "url": "https://ubuntu.com/security/CVE-2023-44487" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6427-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6427-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6438-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6505-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6574-1" + }, + { + "url": "https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records" + }, + { + "url": "https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/" + }, + { + "url": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2023-44487" + }, + { + "url": "https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5521" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5522" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5540" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5549" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5558" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5570" + }, + { + "url": "https://www.eclipse.org/lists/jetty-announce/msg00181.html" + }, + { + "url": "https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487" + }, + { + "url": "https://www.mail-archive.com/haproxy@formilux.org/msg44134.html" + }, + { + "url": "https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487" + }, + { + "url": "https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/" + }, + { + "url": "https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products" + }, + { + "url": "https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2023/10/10/6" + }, + { + "url": "https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack" + }, + { + "url": "https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday" + }, + { + "url": "https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/" + } + ], + "affects": [ + { + "ref": "pkg:golang/golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781", + "versions": [ + { + "version": "v0.0.0-20210428140749-89ef3d95e781", + "status": "affected" + } + ] + } + ], + "cwes": [ + 400 + ], + "description": "The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.", + "id": "CVE-2023-44487", + "published": "2023-10-10T14:15:10+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "high" + }, + { + "source": { + "name": "amazon" + }, + "severity": "high" + }, + { + "source": { + "name": "bitnami" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "high" + }, + { + "source": { + "name": "ghsa" + }, + "score": 5.3, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" + }, + { + "source": { + "name": "nvd" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "high" + }, + { + "source": { + "name": "photon" + }, + "severity": "high" + }, + { + "source": { + "name": "redhat" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "source": { + "name": "rocky" + }, + "severity": "high" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade golang.org/x/net to version 0.17.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2024-02-02T15:40:23+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2023-47090" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/10/30/1" + }, + { + "url": "https://advisories.nats.io/CVE/secnote-2023-01.txt" + }, + { + "url": "https://github.com/nats-io/nats-server" + }, + { + "url": "https://github.com/nats-io/nats-server/commit/fa5b7afcb64e7e887e49afdd032358802b5c4478" + }, + { + "url": "https://github.com/nats-io/nats-server/discussions/4535" + }, + { + "url": "https://github.com/nats-io/nats-server/pull/4605" + }, + { + "url": "https://github.com/nats-io/nats-server/releases/tag/v2.10.2" + }, + { + "url": "https://github.com/nats-io/nats-server/releases/tag/v2.9.23" + }, + { + "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-fr2g-9hjm-wr23" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47090" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2023/10/13/2" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.2.2", + "versions": [ + { + "version": "v2.2.2", + "status": "affected" + } + ] + } + ], + "cwes": [ + 863 + ], + "description": "NATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. An implicit $G user in an authorization block can sometimes be used for unauthenticated access, even when the intention of the configuration was for each user to have an account. The earliest affected version is 2.2.0.", + "id": "CVE-2023-47090", + "published": "2023-10-30T17:15:52+00:00", + "ratings": [ + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "ghsa" + }, + "severity": "high" + }, + { + "source": { + "name": "nvd" + }, + "score": 6.5, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.9.23, 2.10.2", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2023-11-08T00:15:54+00:00" + }, + { + "advisories": [ + { + "url": "https://avd.aquasec.com/nvd/cve-2023-48795" + }, + { + "url": "http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html" + }, + { + "url": "http://seclists.org/fulldisclosure/2024/Mar/21" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/12/18/3" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/12/19/5" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2023/12/20/3" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2024:1150" + }, + { + "url": "https://access.redhat.com/security/cve/CVE-2023-48795" + }, + { + "url": "https://access.redhat.com/security/cve/cve-2023-48795" + }, + { + "url": "https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack" + }, + { + "url": "https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/" + }, + { + "url": "https://bugs.gentoo.org/920280" + }, + { + "url": "https://bugzilla.redhat.com/2254210" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254210" + }, + { + "url": "https://bugzilla.suse.com/show_bug.cgi?id=1217950" + }, + { + "url": "https://crates.io/crates/thrussh/versions" + }, + { + "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795" + }, + { + "url": "https://errata.almalinux.org/9/ALSA-2024-1150.html" + }, + { + "url": "https://errata.rockylinux.org/RLSA-2024:0628" + }, + { + "url": "https://filezilla-project.org/versions.php" + }, + { + "url": "https://forum.netgate.com/topic/184941/terrapin-ssh-attack" + }, + { + "url": "https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10\u0026id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6" + }, + { + "url": "https://github.com/NixOS/nixpkgs/pull/275249" + }, + { + "url": "https://github.com/PowerShell/Win32-OpenSSH/issues/2189" + }, + { + "url": "https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta" + }, + { + "url": "https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0" + }, + { + "url": "https://github.com/TeraTermProject/teraterm/releases/tag/v5.1" + }, + { + "url": "https://github.com/advisories/GHSA-45x7-px36-x8w8" + }, + { + "url": "https://github.com/apache/mina-sshd/issues/445" + }, + { + "url": "https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab" + }, + { + "url": "https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22" + }, + { + "url": "https://github.com/cyd01/KiTTY/issues/520" + }, + { + "url": "https://github.com/drakkan/sftpgo/releases/tag/v2.5.6" + }, + { + "url": "https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42" + }, + { + "url": "https://github.com/erlang/otp/releases/tag/OTP-26.2.1" + }, + { + "url": "https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d" + }, + { + "url": "https://github.com/hierynomus/sshj/issues/916" + }, + { + "url": "https://github.com/janmojzis/tinyssh/issues/81" + }, + { + "url": "https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5" + }, + { + "url": "https://github.com/libssh2/libssh2/pull/1291" + }, + { + "url": "https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25" + }, + { + "url": "https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3" + }, + { + "url": "https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15" + }, + { + "url": "https://github.com/mwiede/jsch/issues/457" + }, + { + "url": "https://github.com/mwiede/jsch/pull/461" + }, + { + "url": "https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16" + }, + { + "url": "https://github.com/openssh/openssh-portable/commits/master" + }, + { + "url": "https://github.com/paramiko/paramiko/issues/2337" + }, + { + "url": "https://github.com/paramiko/paramiko/issues/2337#issuecomment-1887642773" + }, + { + "url": "https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES" + }, + { + "url": "https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES" + }, + { + "url": "https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES" + }, + { + "url": "https://github.com/proftpd/proftpd/issues/456" + }, + { + "url": "https://github.com/rapier1/hpn-ssh/releases" + }, + { + "url": "https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst" + }, + { + "url": "https://github.com/ronf/asyncssh/security/advisories/GHSA-hfmc-7525-mj55" + }, + { + "url": "https://github.com/ronf/asyncssh/tags" + }, + { + "url": "https://github.com/ssh-mitm/ssh-mitm/issues/165" + }, + { + "url": "https://github.com/warp-tech/russh" + }, + { + "url": "https://github.com/warp-tech/russh/commit/1aa340a7df1d5be1c0f4a9e247aade76dfdd2951" + }, + { + "url": "https://github.com/warp-tech/russh/releases/tag/v0.40.2" + }, + { + "url": "https://github.com/warp-tech/russh/security/advisories/GHSA-45x7-px36-x8w8" + }, + { + "url": "https://gitlab.com/libssh/libssh-mirror/-/tags" + }, + { + "url": "https://go.dev/cl/550715" + }, + { + "url": "https://go.dev/issue/64784" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ" + }, + { + "url": "https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg" + }, + { + "url": "https://help.panic.com/releasenotes/transmit5" + }, + { + "url": "https://help.panic.com/releasenotes/transmit5/" + }, + { + "url": "https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795" + }, + { + "url": "https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/" + }, + { + "url": "https://linux.oracle.com/cve/CVE-2023-48795.html" + }, + { + "url": "https://linux.oracle.com/errata/ELSA-2024-12233.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html" + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/" + }, + { + "url": "https://matt.ucc.asn.au/dropbear/CHANGES" + }, + { + "url": "https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC" + }, + { + "url": "https://news.ycombinator.com/item?id=38684904" + }, + { + "url": "https://news.ycombinator.com/item?id=38685286" + }, + { + "url": "https://news.ycombinator.com/item?id=38732005" + }, + { + "url": "https://nova.app/releases/#v11.8" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-48795" + }, + { + "url": "https://oryx-embedded.com/download/#changelog" + }, + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002" + }, + { + "url": "https://roumenpetrov.info/secsh/#news20231220" + }, + { + "url": "https://security-tracker.debian.org/tracker/CVE-2023-48795" + }, + { + "url": "https://security-tracker.debian.org/tracker/source-package/libssh2" + }, + { + "url": "https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg" + }, + { + "url": "https://security-tracker.debian.org/tracker/source-package/trilead-ssh2" + }, + { + "url": "https://security.gentoo.org/glsa/202312-16" + }, + { + "url": "https://security.gentoo.org/glsa/202312-17" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20240105-0004" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20240105-0004/" + }, + { + "url": "https://support.apple.com/kb/HT214084" + }, + { + "url": "https://terrapin-attack.com/" + }, + { + "url": "https://thorntech.com/cve-2023-48795-and-sftp-gateway" + }, + { + "url": "https://thorntech.com/cve-2023-48795-and-sftp-gateway/" + }, + { + "url": "https://twitter.com/TrueSkrillor/status/1736774389725565005" + }, + { + "url": "https://ubuntu.com/security/CVE-2023-48795" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6560-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6560-2" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6561-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6585-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6589-1" + }, + { + "url": "https://ubuntu.com/security/notices/USN-6598-1" + }, + { + "url": "https://winscp.net/eng/docs/history#6.2.2" + }, + { + "url": "https://www.bitvise.com/ssh-client-version-history#933" + }, + { + "url": "https://www.bitvise.com/ssh-server-version-history" + }, + { + "url": "https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html" + }, + { + "url": "https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2023-48795" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5586" + }, + { + "url": "https://www.debian.org/security/2023/dsa-5588" + }, + { + "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc" + }, + { + "url": "https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508" + }, + { + "url": "https://www.netsarang.com/en/xshell-update-history" + }, + { + "url": "https://www.netsarang.com/en/xshell-update-history/" + }, + { + "url": "https://www.openssh.com/openbsd.html" + }, + { + "url": "https://www.openssh.com/txt/release-9.6" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2023/12/18/2" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2023/12/18/3" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2023/12/20/3" + }, + { + "url": "https://www.paramiko.org/changelog.html" + }, + { + "url": "https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed" + }, + { + "url": "https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/" + }, + { + "url": "https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795" + }, + { + "url": "https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/" + }, + { + "url": "https://www.terrapin-attack.com" + }, + { + "url": "https://www.theregister.com/2023/12/20/terrapin_attack_ssh" + }, + { + "url": "https://www.vandyke.com/products/securecrt/history.txt" + } + ], + "affects": [ + { + "ref": "64ecbd63-f74a-4fcc-a240-3f8a16435789", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "718081db-83c2-4309-87c8-e43228139b88", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "84eac386-ca89-4217-8a72-84d77e3bd144", + "versions": [ + { + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "status": "affected" + } + ] + }, + { + "ref": "c6ba0fd6-a390-4fcf-aaec-4a072dcd17c4", + "versions": [ + { + "version": "v0.0.0-20200622213623-75b288015ac9", + "status": "affected" + } + ] + }, + { + "ref": "ce164c60-ee4f-4360-a85f-73106cf59f6c", + "versions": [ + { + "version": "v0.0.0-20210421170649-83a5a9bb288b", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59", + "versions": [ + { + "version": "v0.0.0-20200323165209-0ec3e9974c59", + "status": "affected" + } + ] + } + ], + "cwes": [ + 354 + ], + "description": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.", + "id": "CVE-2023-48795", + "published": "2023-12-18T16:15:10+00:00", + "ratings": [ + { + "source": { + "name": "alma" + }, + "severity": "medium" + }, + { + "source": { + "name": "amazon" + }, + "severity": "medium" + }, + { + "source": { + "name": "cbl-mariner" + }, + "severity": "medium" + }, + { + "source": { + "name": "ghsa" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" + }, + { + "source": { + "name": "nvd" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" + }, + { + "source": { + "name": "oracle-oval" + }, + "severity": "medium" + }, + { + "source": { + "name": "photon" + }, + "severity": "medium" + }, + { + "source": { + "name": "redhat" + }, + "score": 5.9, + "severity": "medium", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" + }, + { + "source": { + "name": "rocky" + }, + "severity": "medium" + }, + { + "source": { + "name": "ubuntu" + }, + "severity": "medium" + } + ], + "recommendation": "Upgrade golang.org/x/crypto to version 0.17.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + }, + "updated": "2024-03-13T21:15:54+00:00" + }, + { + "advisories": [ + { + "url": "https://github.com/advisories/GHSA-2c64-vj8g-vwrq" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2020-26892.txt" + }, + { + "url": "https://github.com/nats-io/jwt/commit/e11ce317263cef69619fc1ca743b195d02aa1d8a" + }, + { + "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-2c64-vj8g-vwrq" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + } + ], + "description": "(This advisory is canonically https://advisories.nats.io/CVE/CVE-2020-26892.txt )\n\n## Problem Description\n\nNATS nats-server through 2020-10-07 has Incorrect Access Control because of how expired credentials are handled.\n\nThe NATS accounts system has expiration timestamps on credentials; the \u003chttps://github.com/nats-io/jwt\u003e library had an API which encouraged misuse and an `IsRevoked()` method which misused its own API.\n\nA new `IsClaimRevoked()` method has correct handling and the nats-server has been updated to use this. The old `IsRevoked()` method now always returns true and other client code will have to be updated to avoid calling it.\n\nThe CVE identifier should cover any application using the old JWT API, where the nats-server is one of those applications.\n\n\n## Affected versions\n\n#### JWT library\n\n * all versions prior to 1.1.0\n * fixed after nats-io/jwt PR 103 landed (2020-10-06)\n\n#### NATS Server\n\n * Version 2 prior to 2.1.9\n + 2.0.0 through and including 2.1.8 are vulnerable.\n * fixed with nats-io/nats-server PRs 1632, 1635, 1645\n\n\n## Impact\n\nTime-based credential expiry did not work.\n\n\n## Workaround\n\nHave credentials which only expire after fixes can be deployed.\n\n\n## Solution\n\nUpgrade the JWT dependency in any application using it.\n\nUpgrade the NATS server if using NATS Accounts.", + "id": "GHSA-2c64-vj8g-vwrq", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "severity": "high" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 1.1.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + } + }, + { + "advisories": [ + { + "url": "https://github.com/advisories/GHSA-62mh-w5cv-p88c" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2021-3127.txt" + }, + { + "url": "https://github.com/nats-io/jwt" + }, + { + "url": "https://github.com/nats-io/jwt/pull/149" + }, + { + "url": "https://github.com/nats-io/jwt/security/advisories/GHSA-62mh-w5cv-p88c" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.1.0", + "versions": [ + { + "version": "v1.1.0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.2.2", + "versions": [ + { + "version": "v1.2.2", + "status": "affected" + } + ] + } + ], + "description": "(This advisory is canonically \u003chttps://advisories.nats.io/CVE/CVE-2021-3127.txt\u003e)\n\n## Problem Description\n\nThe NATS server provides for Subjects which are namespaced by Account; all Subjects are supposed to be private to an account, with an Export/Import system used to grant cross-account access to some Subjects. Some Exports are public, such that anyone can import the\nrelevant subjects, and some Exports are private, such that the Import requires a token JWT to prove permission.\n\nThe JWT library's validation of the bindings in the Import Token incorrectly warned on mismatches, instead of outright rejecting the token.\n\nAs a result, any account can take an Import token used by any other account and re-use it for themselves because the binding to the\nimporting account is not rejected, and use it to import *any* Subject from the Exporting account, not just the Subject referenced in the Import Token.\n\nThe NATS account-server system treats account JWTs as semi-public information, such that an attacker can easily enumerate all account JWTs and retrieve all Import Tokens from those account JWTs.\n\nThe CVE identifier should cover the JWT library repair and the nats-server containing the fixed JWT library, and any other application depending upon the fixed JWT library.\n\n\n## Affected versions\n\n#### JWT library\n\n * all versions prior to 2.0.1\n * fixed after nats-io/jwt#149 landed (2021-03-14)\n\n#### NATS Server\n\n * Version 2 prior to 2.2.0\n + 2.0.0 through and including 2.1.9 are vulnerable\n * fixed with nats-io/nats-server@423b79440c (2021-03-14)\n\n\n## Impact\n\nIn deployments with untrusted accounts able to update the Account Server with imports, a malicious account can access any Subject from an account which provides Exported Subjects.\n\nAbuse of this facility requires the malicious actor to upload their tampered Account JWT to the Account Server, providing the service operator with a data-store which can be scanned for signs of abuse.\n\n\n## Workaround\n\nDeny access to clients to update their account JWT in the account server.\n\n\n## Solution\n\nUpgrade the JWT dependency in any application using it.\n\nUpgrade the NATS server if using NATS Accounts (with private Exports; Account owners can create those at any time though).\n\nAudit all accounts JWTs to scan for exploit attempts; a Python script to audit the accounts can be found at \u003chttps://gist.github.com/philpennock/09d49524ad98043ff11d8a40c2bb0d5a\u003e.", + "id": "GHSA-62mh-w5cv-p88c", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "severity": "critical" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 2.0.1", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + } + }, + { + "advisories": [ + { + "url": "https://github.com/advisories/GHSA-gwj5-3vfq-q992" + }, + { + "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-gwj5-3vfq-q992" + } + ], + "affects": [ + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + } + ], + "description": "(This advisory is canonically \u003chttps://advisories.nats.io/CVE/CVE-2020-28466.txt\u003e)\n\n## Problem Description\n\nAn export/import cycle between accounts could crash the nats-server, after consuming CPU and memory.\n\nThis issue was fixed publicly in \u003chttps://github.com/nats-io/nats-server/pull/1731\u003e in November 2020.\n\nThe need to call this out as a security issue was highlighted by `snyk.io` and we are grateful for their assistance in doing so.\n\nOrganizations which run a NATS service providing access to accounts run by untrusted third parties are affected.\nSee below for an important caveat if running such a service.\n\n\n## Affected versions\n\n#### NATS Server\n\n * Version 2 prior to 2.2.0\n + 2.0.0 through and including 2.1.9 are vulnerable.\n * fixed with nats-io/nats-server PR 1731, commit 2e3c226729\n\n\n## Impact\n\nThe nats-server could be killed, after consuming resources.\n\n\n## Workaround\n\nThe import cycle requires at least two accounts to work; if you have open account sign-up, then restricting new account sign-up might hinder an attacker.\n\n\n## Solution\n\nUpgrade the nats-server.\n\n\n## Caveat on NATS with untrusted users\n\nRunning a NATS service which is exposed to untrusted users presents a heightened risk.\n\nAny remote execution flaw or equivalent seriousness, or denial-of-service by unauthenticated users, will lead to prompt releases by the NATS maintainers.\n\nFixes for denial of service issues with no threat of remote execution, when limited to account holders, are likely to just be committed to the main development branch with no special attention.\n\nThose who are running such services are encouraged to build regularly from git.", + "id": "GHSA-gwj5-3vfq-q992", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "low", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/nats-server/v2 to version 2.2.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + } + }, + { + "advisories": [ + { + "url": "https://github.com/advisories/GHSA-hmm9-r2m2-qg9w" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2020-26521.txt" + }, + { + "url": "https://github.com/nats-io/jwt/pull/107" + }, + { + "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-hmm9-r2m2-qg9w" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-26521" + }, + { + "url": "https://www.openwall.com/lists/oss-security/2020/11/02/2" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + } + ], + "description": "(This advisory is canonically \u003chttps://advisories.nats.io/CVE/CVE-2020-26521.txt\u003e)\n\n## Problem Description\n\nThe NATS account system has an Operator trusted by the servers, which signs Accounts, and each Account can then create and sign Users within their account. The Operator should be able to safely issue Accounts to other entities which it does not fully trust.\n\nA malicious Account could create and sign a User JWT with a state not created by the normal tooling, such that decoding by the NATS JWT library (written in Go) would attempt a nil dereference, aborting execution.\n\nThe NATS Server is known to be impacted by this.\n\n\n## Affected versions\n\n#### JWT library\n\n * all versions prior to 1.1.0\n\n#### NATS Server\n\n * Version 2 prior to 2.1.9\n\n\n## Impact\n\n#### JWT library\n\n * Programs would nil dereference and panic, aborting execution by default.\n\n#### NATS server\n\n * Denial of Service caused by process termination\n\n\n## Workaround\n\nIf your NATS servers do not trust any accounts which are managed by untrusted entities, then malformed User credentials are unlikely to be encountered.\n\n\n## Solution\n\nUpgrade the JWT dependency in any application using it.\n\nUpgrade the NATS server if using NATS Accounts.", + "id": "GHSA-hmm9-r2m2-qg9w", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 1.1.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + } + }, + { + "advisories": [ + { + "url": "https://github.com/advisories/GHSA-j756-f273-xhp4" + }, + { + "url": "https://advisories.nats.io/CVE/CVE-2021-3127.txt" + }, + { + "url": "https://github.com/nats-io/jwt/pull/149" + }, + { + "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-j756-f273-xhp4" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3127" + } + ], + "affects": [ + { + "ref": "3cafed8d-2194-4bd3-bdf6-9f8b02673b33", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "7dd812e2-3f88-4d35-ba39-4c74700b2cfb", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "e192291f-a90f-4cc4-ad6d-0379a45256cd", + "versions": [ + { + "version": "v0.3.2", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.1.0", + "versions": [ + { + "version": "v1.1.0", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/jwt@v1.2.2", + "versions": [ + { + "version": "v1.2.2", + "status": "affected" + } + ] + }, + { + "ref": "pkg:golang/github.com/nats-io/nats-server/v2@v2.1.9", + "versions": [ + { + "version": "v2.1.9", + "status": "affected" + } + ] + } + ], + "description": "(This advisory is canonically \u003chttps://advisories.nats.io/CVE/CVE-2021-3127.txt\u003e)\n\n## Problem Description\n\nThe NATS server provides for Subjects which are namespaced by Account; all Subjects are supposed to be private to an account, with an Export/Import system used to grant cross-account access to some Subjects. Some Exports are public, such that anyone can import the relevant subjects, and some Exports are private, such that the Import requires a token JWT to prove permission.\n\nThe JWT library's validation of the bindings in the Import Token incorrectly warned on mismatches, instead of outright rejecting the token.\n\nAs a result, any account can take an Import token used by any other account and re-use it for themselves because the binding to the importing account is not rejected, and use it to import *any* Subject from the Exporting account, not just the Subject referenced in the Import Token.\n\nThe NATS account-server system treats account JWTs as semi-public information, such that an attacker can easily enumerate all account JWTs and retrieve all Import Tokens from those account JWTs.\n\nThe CVE identifier should cover the JWT library repair and the nats-server containing the fixed JWT library, and any other application depending upon the fixed JWT library.\n\n\n## Affected versions\n\n#### JWT library\n\n * all versions prior to 2.0.1\n * fixed after nats-io/jwt#149 landed (2021-03-14)\n\n#### NATS Server\n\n * Version 2 prior to 2.2.0\n + 2.0.0 through and including 2.1.9 are vulnerable\n * fixed with nats-io/nats-server@423b79440c (2021-03-14)\n\n\n## Impact\n\nIn deployments with untrusted accounts able to update the Account Server with imports, a malicious account can access any Subject from an account which provides Exported Subjects.\n\nAbuse of this facility requires the malicious actor to upload their tampered Account JWT to the Account Server, providing the service operator with a data-store which can be scanned for signs of abuse.\n\n\n## Workaround\n\nDeny access to clients to update their account JWT in the account server.\n\n\n## Solution\n\nUpgrade the JWT dependency in any application using it.\n\nUpgrade the NATS server if using NATS Accounts (with private Exports; Account owners can create those at any time though).\n\nAudit all accounts JWTs to scan for exploit attempts; a Python script to audit the accounts can be found at \u003chttps://gist.github.com/philpennock/09d49524ad98043ff11d8a40c2bb0d5a\u003e.", + "id": "GHSA-j756-f273-xhp4", + "ratings": [ + { + "source": { + "name": "ghsa" + }, + "score": 7.5, + "severity": "high", + "method": "CVSSv31", + "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } + ], + "recommendation": "Upgrade github.com/nats-io/jwt to version 1.2.3-0.20210314221642-a826c77dc9d2; Upgrade github.com/nats-io/nats-server/v2 to version 2.2.0", + "source": { + "name": "ghsa", + "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" + } + } + ] +} diff --git a/test/normalize/cdx-1-5-vulnerabilities.bom.json b/test/normalize/cdx-1-5-vulnerabilities.bom.json new file mode 100644 index 00000000..0944e0f5 --- /dev/null +++ b/test/normalize/cdx-1-5-vulnerabilities.bom.json @@ -0,0 +1,59 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.4", + "version": 1, + "vulnerabilities": [ + { + "advisories": [ + { + "title": "GitHub Commit", + "url": "https://github.com/FasterXML/jackson-databind/commit/6799f8f10cc78e9af6d443ed6982d00a13f2e7d2" + }, + { + "title": "GitHub Issue", + "url": "https://github.com/FasterXML/jackson-databind/issues/1931" + } + ], + "affects": [ + { + "ref": "urn:cdx:3e671687-395b-41f5-a30f-a58921a69b79/1#jackson-databind-2.8.0" + } + ], + "analysis": { + "detail": "An optional explanation of why the application is not affected by the vulnerable component.", + "justification": "code_not_reachable", + "response": [ + "will_not_fix", + "update" + ], + "state": "not_affected" + }, + "created": "2021-01-01T00:00:00.000Z", + "cwes": [ + 184, + 502 + ], + "description": "FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath.", + "id": "CVE-2018-7489", + "published": "2021-01-01T00:00:00.000Z", + "ratings": [ + { + "method": "CVSSv3", + "score": 9.8, + "severity": "critical", + "source": { + "name": "NVD", + "url": "https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H&version=3.0" + }, + "vector": "AN/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "recommendation": "Upgrade com.fasterxml.jackson.core:jackson-databind to version 2.6.7.5, 2.8.11.1, 2.9.5 or higher.", + "source": { + "name": "NVD", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9997" + }, + "updated": "2021-01-01T00:00:00.000Z" + } + ] +} \ No newline at end of file diff --git a/test/trim/trim-cdx-1-5-sample-components-normalize.sbom.json b/test/trim/trim-cdx-1-5-sample-components-normalize.sbom.json new file mode 100644 index 00000000..7d3d97e1 --- /dev/null +++ b/test/trim/trim-cdx-1-5-sample-components-normalize.sbom.json @@ -0,0 +1,79 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.5", + "components": [ + { + "type": "library", + "bom-ref": "pkg:npm/sample@2.0.0", + "purl": "pkg:npm/sample@2.0.0", + "name": "sample", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "properties": [ + { + "name": "moo", + "value": "cow" + }, + { + "name": "foo", + "value": "bar" + } + ] + }, + { + "type": "library", + "bom-ref": "pkg:npm/body-parser@1.19.0", + "purl": "pkg:npm/body-parser@1.19.0", + "name": "body-parser", + "version": "1.19.0", + "hashes": [ + { + "alg": "SHA-256", + "content": "ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad" + }, + { + "alg": "SHA-1", + "content": "96b2709e57c9c4e09a6fd66a8fd979844f69f08a" + } + ], + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "id": "Apache-2.0" + } + } + ], + "externalReferences": [ + { + "type": "website", + "url": "https://example.com/website" + }, + { + "type": "support", + "url": "https://example.com/support" + } + ] + } + ] +} \ No newline at end of file diff --git a/utils/flags.go b/utils/flags.go index 25466a45..9a64d92d 100644 --- a/utils/flags.go +++ b/utils/flags.go @@ -55,13 +55,14 @@ type CommandFlags struct { // NOTE: These flags are shared by both the list and policy subcommands type PersistentCommandFlags struct { - Quiet bool // suppresses all non-essential (informational) output from a command. Overrides any other log-level commands. - Trace bool // trace logging - Debug bool // debug logging - InputFile string - OutputFile string // TODO: TODO: Note: not used by `validate` command, which emits a warning if supplied - OutputFormat string // e.g., "txt", "csv"", "md" (markdown) (normalized to lowercase) - OutputIndent uint8 + Quiet bool // suppresses all non-essential (informational) output from a command. Overrides any other log-level commands. + Trace bool // trace logging + Debug bool // debug logging + InputFile string + OutputFile string // TODO: TODO: Note: not used by `validate` command, which emits a warning if supplied + OutputFormat string // e.g., "txt", "csv"", "md" (markdown) (normalized to lowercase) + OutputIndent uint8 + OutputNormalize bool } func (persistentFlags PersistentCommandFlags) GetOutputIndentInt() int {