diff --git a/package.json b/package.json index 3a64cd18..cbcbcc96 100644 --- a/package.json +++ b/package.json @@ -51,16 +51,19 @@ ], "dependencies": { "@cyclonedx/cyclonedx-library": "^6.8.0", - "@yarnpkg/cli": "^4.1.0", - "@yarnpkg/core": "^4.0.3", - "@yarnpkg/fslib": "^3.0.2", + "@yarnpkg/cli": "^4", + "@yarnpkg/core": "^4", + "@yarnpkg/fslib": "^3", + "@yarnpkg/plugin-git": "^3", "clipanion": "^4.0.0-rc.3", + "hosted-git-info": "^7", "normalize-package-data": "^3||^4||^5||^6", "packageurl-js": "^1.2.1", "typanion": "^3.14.0", "xmlbuilder2": "^3.1.1" }, "devDependencies": { + "@types/hosted-git-info": "^3.0.5", "@types/mocha": "^10.0.6", "@types/node": "ts5.4", "@types/normalize-package-data": "^2.4.4", diff --git a/src/_helpers.ts b/src/_helpers.ts index cef5e735..5d99ee9c 100644 --- a/src/_helpers.ts +++ b/src/_helpers.ts @@ -18,6 +18,7 @@ Copyright (c) OWASP Foundation. All Rights Reserved. */ import { writeSync } from 'fs' +import GitHost from 'hosted-git-info' export async function writeAllSync (fd: number, data: string): Promise { const b = Buffer.from(data) @@ -39,3 +40,22 @@ export async function writeAllSync (fd: number, data: string): Promise { export function isString (v: any): v is string { return typeof v === 'string' } + +export function tryRemoveSecretsFromUrl (url: string): string { + try { + const u = new URL(url) + u.password = '' + return u.toString() + } catch { + return url + } +} + +export function tryRemoveSecretsFromGitUrl (gitUrl: string): string { + const gitInfo = GitHost.fromUrl(gitUrl) + if (gitInfo === undefined) { + return gitUrl + } + gitInfo.auth = undefined + return gitInfo.toString() +} diff --git a/src/builders.ts b/src/builders.ts index b8467d90..2221ad66 100644 --- a/src/builders.ts +++ b/src/builders.ts @@ -19,17 +19,18 @@ Copyright (c) OWASP Foundation. All Rights Reserved. // import submodules so to prevent load of unused not-tree-shakable dependencies - like 'AJV' import type { FromNodePackageJson as PJB } from '@cyclonedx/cyclonedx-library/Builders' -import { ComponentType, LicenseAcknowledgement } from '@cyclonedx/cyclonedx-library/Enums' +import { ComponentType, ExternalReferenceType, LicenseAcknowledgement } from '@cyclonedx/cyclonedx-library/Enums' import type { FromNodePackageJson as PJF } from '@cyclonedx/cyclonedx-library/Factories' -import { Bom, Component, type License, Property, type Tool } from '@cyclonedx/cyclonedx-library/Models' +import { Bom, Component, ExternalReference, type License, Property, type Tool } from '@cyclonedx/cyclonedx-library/Models' import { BomUtility } from '@cyclonedx/cyclonedx-library/Utils' import { Cache, type FetchOptions, type Locator, type LocatorHash, type Package, type Project, structUtils, ThrowReport, type Workspace } from '@yarnpkg/core' import { ppath } from '@yarnpkg/fslib' +import { gitUtils as YarnPluginGitUtils } from '@yarnpkg/plugin-git' import normalizePackageData from 'normalize-package-data' import type { PackageURL } from 'packageurl-js' import { getBuildtimeInfo } from './_buildtimeInfo' -import { isString } from './_helpers' +import { isString, tryRemoveSecretsFromGitUrl, tryRemoveSecretsFromUrl } from './_helpers' import { PropertyNames, PropertyValueBool } from './properties' type ManifestFetcher = (pkg: Package) => Promise @@ -193,6 +194,59 @@ export class BomBuilder { return undefined } + switch (true) { + case locator.reference.startsWith('workspace:'): { + // @TODO: add CDX-Property for it - cdx:yarn:reference:workspace = $workspaceName + // -- reminder: skip `workspace:.` + break + } + case locator.reference.startsWith('npm:'): { + // see https://github.com/yarnpkg/berry/blob/bfa6489467e0e11ee87268e01e38e4f7e8d4d4b0/packages/plugin-npm/sources/NpmHttpFetcher.ts#L51 + const { params } = structUtils.parseRange(locator.reference) + if (params !== null && isString(params.__archiveUrl)) { + component.externalReferences.add(new ExternalReference( + tryRemoveSecretsFromUrl(params.__archiveUrl), + ExternalReferenceType.Distribution, + { comment: 'as detected from YarnLocator property "reference::__archiveUrl"' } + )) + } + // For range and remap there are no concrete evidence how the resolution was done on install-time. + // Therefore, do not do anything speculative. + break + } + case YarnPluginGitUtils.isGitUrl(locator.reference): { + component.externalReferences.add(new ExternalReference( + tryRemoveSecretsFromGitUrl(locator.reference), + ExternalReferenceType.VCS, + { comment: 'as detected from YarnLocator property "reference"' } + )) + break + } + case locator.reference.startsWith('http:') || locator.reference.startsWith('https:'): { + component.externalReferences.add(new ExternalReference( + tryRemoveSecretsFromUrl(locator.reference), + ExternalReferenceType.Distribution, + { comment: 'as detected from YarnLocator property "reference"' } + )) + break + } + case locator.reference.startsWith('link:'): { + // TODO: add CDX-Property for it - cdx:yarn:reference:link = relative path from workspace + // see https://github.com/yarnpkg/berry/tree/master/packages/plugin-link + break + } + case locator.reference.startsWith('portal:'): { + // TODO: add CDX-Property for it - cdx:yarn:reference:portal = relative path from workspace + // see https://github.com/yarnpkg/berry/tree/master/packages/plugin-link + break + } + case locator.reference.startsWith('file:'): { + // TODO: add CDX-Property for it - cdx:yarn:reference:portal = relative path from workspace + // see https://github.com/yarnpkg/berry/tree/master/packages/plugin-file + break + } + } + // even private packages may have a PURL for identification component.purl = this.makePurl(component) diff --git a/tests/_data/snapshots/plain_alternative-package-registry.json.bin b/tests/_data/snapshots/plain_alternative-package-registry.json.bin new file mode 100644 index 00000000..60478c41 --- /dev/null +++ b/tests/_data/snapshots/plain_alternative-package-registry.json.bin @@ -0,0 +1,99 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "yarn-plugin-cyclonedx", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-yarn/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-yarn.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-yarn#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-alternative-package-registry", + "version": "0.0.0", + "bom-ref": "demo-alternative-package-registry@workspace:.", + "description": "demo: alternative-package-registry -- showcase how alternative package registries affect the result", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-alternative-package-registry@0.0.0" + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] + }, + "components": [ + { + "type": "library", + "name": "act__act", + "group": "@jsr", + "version": "0.1.3", + "bom-ref": "@jsr/act__act@npm:0.1.3::__archiveUrl=https%3A%2F%2Fnpm.jsr.io%2F~%2F11%2F%40jsr%2Fact__act%2F0.1.3.tgz", + "purl": "pkg:npm/%40jsr/act__act@0.1.3?download_url=https%3A//npm.jsr.io/~/11/%40jsr/act__act/0.1.3.tgz", + "externalReferences": [ + { + "url": "https://npm.jsr.io/~/11/@jsr/act__act/0.1.3.tgz", + "type": "distribution", + "comment": "as detected from YarnLocator property \"reference::__archiveUrl\"" + }, + { + "url": "https://jsr.io/@act/act", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "dependencies": [ + { + "ref": "@jsr/act__act@npm:0.1.3::__archiveUrl=https%3A%2F%2Fnpm.jsr.io%2F~%2F11%2F%40jsr%2Fact__act%2F0.1.3.tgz" + }, + { + "ref": "demo-alternative-package-registry@workspace:.", + "dependsOn": [ + "@jsr/act__act@npm:0.1.3::__archiveUrl=https%3A%2F%2Fnpm.jsr.io%2F~%2F11%2F%40jsr%2Fact__act%2F0.1.3.tgz" + ] + } + ] +} \ No newline at end of file diff --git a/tests/_data/snapshots/plain_alternative-package-registry.xml.bin b/tests/_data/snapshots/plain_alternative-package-registry.xml.bin new file mode 100644 index 00000000..2c415b8d --- /dev/null +++ b/tests/_data/snapshots/plain_alternative-package-registry.xml.bin @@ -0,0 +1,75 @@ + + + + + + @cyclonedx + cyclonedx-library + libVersion-testing + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + @cyclonedx + yarn-plugin-cyclonedx + thisVersion-testing + + + https://github.com/CycloneDX/cyclonedx-node-yarn/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-node-yarn.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-node-yarn#readme + as detected from PackageJson property "homepage" + + + + + + demo-alternative-package-registry + 0.0.0 + demo: alternative-package-registry -- showcase how alternative package registries affect the result + + + Apache-2.0 + + + pkg:npm/demo-alternative-package-registry@0.0.0 + + + true + + + + + @jsr + act__act + 0.1.3 + pkg:npm/%40jsr/act__act@0.1.3?download_url=https%3A//npm.jsr.io/~/11/%40jsr/act__act/0.1.3.tgz + + + https://npm.jsr.io/~/11/@jsr/act__act/0.1.3.tgz + as detected from YarnLocator property "reference::__archiveUrl" + + + https://jsr.io/@act/act + as detected from PackageJson property "homepage" + + + + + + + + + + + \ No newline at end of file diff --git a/tests/_data/snapshots/plain_git-protocol-dependency.json.bin b/tests/_data/snapshots/plain_git-protocol-dependency.json.bin index 064bbc8b..aa01d2bd 100644 --- a/tests/_data/snapshots/plain_git-protocol-dependency.json.bin +++ b/tests/_data/snapshots/plain_git-protocol-dependency.json.bin @@ -80,7 +80,7 @@ } } ], - "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.4.2?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-javascript-library.git", + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.4.2?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-javascript-library.git#commit%3Da4a74012c163b44ffd25bc6146fc7f59aa7e33e7", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -92,6 +92,11 @@ "type": "vcs", "comment": "as detected from PackageJson property \"repository.url\"" }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git#commit=a4a74012c163b44ffd25bc6146fc7f59aa7e33e7", + "type": "vcs", + "comment": "as detected from YarnLocator property \"reference\"" + }, { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", "type": "website", diff --git a/tests/_data/snapshots/plain_git-protocol-dependency.xml.bin b/tests/_data/snapshots/plain_git-protocol-dependency.xml.bin index 89a6372b..b8053c13 100644 --- a/tests/_data/snapshots/plain_git-protocol-dependency.xml.bin +++ b/tests/_data/snapshots/plain_git-protocol-dependency.xml.bin @@ -60,7 +60,7 @@ Apache-2.0 - pkg:npm/%40cyclonedx/cyclonedx-library@6.4.2?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-javascript-library.git + pkg:npm/%40cyclonedx/cyclonedx-library@6.4.2?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-javascript-library.git#commit%3Da4a74012c163b44ffd25bc6146fc7f59aa7e33e7 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -70,6 +70,10 @@ git+https://github.com/CycloneDX/cyclonedx-javascript-library.git as detected from PackageJson property "repository.url" + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git#commit=a4a74012c163b44ffd25bc6146fc7f59aa7e33e7 + as detected from YarnLocator property "reference" + https://github.com/CycloneDX/cyclonedx-javascript-library#readme as detected from PackageJson property "homepage" diff --git a/tests/_data/snapshots/plain_github-protocol-dependency.json.bin b/tests/_data/snapshots/plain_github-protocol-dependency.json.bin index 633abc63..0bbf5fee 100644 --- a/tests/_data/snapshots/plain_github-protocol-dependency.json.bin +++ b/tests/_data/snapshots/plain_github-protocol-dependency.json.bin @@ -80,7 +80,7 @@ } } ], - "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.4.2?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-javascript-library.git", + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.4.2?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-javascript-library.git#commit%3Da4a74012c163b44ffd25bc6146fc7f59aa7e33e7", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -92,6 +92,11 @@ "type": "vcs", "comment": "as detected from PackageJson property \"repository.url\"" }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git#commit=a4a74012c163b44ffd25bc6146fc7f59aa7e33e7", + "type": "vcs", + "comment": "as detected from YarnLocator property \"reference\"" + }, { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", "type": "website", diff --git a/tests/_data/snapshots/plain_github-protocol-dependency.xml.bin b/tests/_data/snapshots/plain_github-protocol-dependency.xml.bin index 0c336f67..e7909b4c 100644 --- a/tests/_data/snapshots/plain_github-protocol-dependency.xml.bin +++ b/tests/_data/snapshots/plain_github-protocol-dependency.xml.bin @@ -60,7 +60,7 @@ Apache-2.0 - pkg:npm/%40cyclonedx/cyclonedx-library@6.4.2?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-javascript-library.git + pkg:npm/%40cyclonedx/cyclonedx-library@6.4.2?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-javascript-library.git#commit%3Da4a74012c163b44ffd25bc6146fc7f59aa7e33e7 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -70,6 +70,10 @@ git+https://github.com/CycloneDX/cyclonedx-javascript-library.git as detected from PackageJson property "repository.url" + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git#commit=a4a74012c163b44ffd25bc6146fc7f59aa7e33e7 + as detected from YarnLocator property "reference" + https://github.com/CycloneDX/cyclonedx-javascript-library#readme as detected from PackageJson property "homepage" diff --git a/tests/_data/snapshots/plain_http-protocol-dependency.json.bin b/tests/_data/snapshots/plain_http-protocol-dependency.json.bin new file mode 100644 index 00000000..00ce6f5f --- /dev/null +++ b/tests/_data/snapshots/plain_http-protocol-dependency.json.bin @@ -0,0 +1,6601 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "yarn-plugin-cyclonedx", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-yarn/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-yarn.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-yarn#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "github-protocol-dependency", + "version": "0.0.0", + "bom-ref": "github-protocol-dependency@workspace:.", + "description": "demo: github-protocol-dependency -- showcase how install via github protocol looks like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/github-protocol-dependency@0.0.0" + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] + }, + "components": [ + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.9.5", + "bom-ref": "@cyclonedx/cyclonedx-library@https://github.com/CycloneDX/cyclonedx-javascript-library/releases/download/v6.9.5/cyclonedx-cyclonedx-library-6.9.5.tgz", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.9.5?download_url=https%3A//github.com/CycloneDX/cyclonedx-javascript-library/releases/download/v6.9.5/cyclonedx-cyclonedx-library-6.9.5.tgz", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/releases/download/v6.9.5/cyclonedx-cyclonedx-library-6.9.5.tgz", + "type": "distribution", + "comment": "as detected from YarnLocator property \"reference\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "cliui", + "group": "@isaacs", + "version": "8.0.2", + "bom-ref": "@isaacs/cliui@npm:8.0.2", + "author": "Ben Coe", + "description": "easily create complex multi-column command-line-interfaces", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40isaacs/cliui@8.0.2?vcs_url=git%2Bhttps%3A//github.com/yargs/cliui.git", + "externalReferences": [ + { + "url": "https://github.com/yargs/cliui/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/yargs/cliui.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/yargs/cliui#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "node-pre-gyp", + "group": "@mapbox", + "version": "1.0.11", + "bom-ref": "@mapbox/node-pre-gyp@npm:1.0.11", + "author": "Dane Springmeyer", + "description": "Node.js native addon binary install tool", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40mapbox/node-pre-gyp@1.0.11?vcs_url=git%3A//github.com/mapbox/node-pre-gyp.git", + "externalReferences": [ + { + "url": "https://github.com/mapbox/node-pre-gyp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/mapbox/node-pre-gyp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/mapbox/node-pre-gyp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "agent", + "group": "@npmcli", + "version": "2.2.2", + "bom-ref": "@npmcli/agent@npm:2.2.2", + "author": "GitHub Inc.", + "description": "the http/https agent used by the npm cli", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40npmcli/agent@2.2.2?vcs_url=git%2Bhttps%3A//github.com/npm/agent.git", + "externalReferences": [ + { + "url": "https://github.com/npm/agent/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/agent.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/agent#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "fs", + "group": "@npmcli", + "version": "3.1.1", + "bom-ref": "@npmcli/fs@npm:3.1.1", + "author": "GitHub Inc.", + "description": "filesystem utilities for the npm cli", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40npmcli/fs@3.1.1?vcs_url=git%2Bhttps%3A//github.com/npm/fs.git", + "externalReferences": [ + { + "url": "https://github.com/npm/fs/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/fs.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/fs#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "dom", + "group": "@oozcitak", + "version": "1.15.10", + "bom-ref": "@oozcitak/dom@npm:1.15.10", + "author": "Ozgur Ozcitak", + "description": "A modern DOM implementation", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40oozcitak/dom@1.15.10?vcs_url=git%3A//github.com/oozcitak/dom.git", + "externalReferences": [ + { + "url": "http://github.com/oozcitak/dom/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/dom.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/dom", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "infra", + "group": "@oozcitak", + "version": "1.0.8", + "bom-ref": "@oozcitak/infra@npm:1.0.8", + "author": "Ozgur Ozcitak", + "description": "An implementation of the Infra Living Standard", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40oozcitak/infra@1.0.8?vcs_url=git%2Bhttps%3A//github.com/oozcitak/infra.git", + "externalReferences": [ + { + "url": "http://github.com/oozcitak/infra/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/infra.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/infra", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "url", + "group": "@oozcitak", + "version": "1.0.4", + "bom-ref": "@oozcitak/url@npm:1.0.4", + "author": "Ozgur Ozcitak", + "description": "An implementation of the URL Living Standard", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40oozcitak/url@1.0.4?vcs_url=git%2Bhttps%3A//github.com/oozcitak/url.git", + "externalReferences": [ + { + "url": "http://github.com/oozcitak/url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/url", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "util", + "group": "@oozcitak", + "version": "8.3.8", + "bom-ref": "@oozcitak/util@npm:8.3.8", + "author": "Ozgur Ozcitak", + "description": "Utility functions", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40oozcitak/util@8.3.8?vcs_url=git%3A//github.com/oozcitak/util.git", + "externalReferences": [ + { + "url": "http://github.com/oozcitak/util/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/util.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/util", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "parseargs", + "group": "@pkgjs", + "version": "0.11.0", + "bom-ref": "@pkgjs/parseargs@npm:0.11.0", + "description": "Polyfill of future proposal for `util.parseArgs()`", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40pkgjs/parseargs@0.11.0?vcs_url=git%2Bssh%3A//git%40github.com/pkgjs/parseargs.git", + "externalReferences": [ + { + "url": "https://github.com/pkgjs/parseargs/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/pkgjs/parseargs.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/pkgjs/parseargs#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "abbrev", + "version": "1.1.1", + "bom-ref": "abbrev@npm:1.1.1", + "author": "Isaac Z. Schlueter", + "description": "Like ruby's abbrev module, but in js", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/abbrev@1.1.1?vcs_url=git%2Bssh%3A//git%40github.com/isaacs/abbrev-js.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/abbrev-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/isaacs/abbrev-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/abbrev-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "abbrev", + "version": "2.0.0", + "bom-ref": "abbrev@npm:2.0.0", + "author": "GitHub Inc.", + "description": "Like ruby's abbrev module, but in js", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/abbrev@2.0.0?vcs_url=git%2Bhttps%3A//github.com/npm/abbrev-js.git", + "externalReferences": [ + { + "url": "https://github.com/npm/abbrev-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/abbrev-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/abbrev-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "agent-base", + "version": "6.0.2", + "bom-ref": "agent-base@npm:6.0.2", + "author": "Nathan Rajlich", + "description": "Turn a function into an `http.Agent` instance", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/agent-base@6.0.2?vcs_url=git%3A//github.com/TooTallNate/node-agent-base.git", + "externalReferences": [ + { + "url": "https://github.com/TooTallNate/node-agent-base/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "agent-base", + "version": "7.1.1", + "bom-ref": "agent-base@npm:7.1.1", + "author": "Nathan Rajlich", + "description": "Turn a function into an `http.Agent` instance", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/agent-base@7.1.1?vcs_url=git%2Bhttps%3A//github.com/TooTallNate/proxy-agents.git#packages/agent-base", + "externalReferences": [ + { + "url": "https://github.com/TooTallNate/proxy-agents/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/TooTallNate/proxy-agents.git#packages/agent-base", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/TooTallNate/proxy-agents#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "aggregate-error", + "version": "3.1.0", + "bom-ref": "aggregate-error@npm:3.1.0", + "author": "Sindre Sorhus", + "description": "Create an error from multiple errors", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/aggregate-error@3.1.0?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/aggregate-error.git", + "externalReferences": [ + { + "url": "https://github.com/sindresorhus/aggregate-error/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/aggregate-error.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/aggregate-error#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ajv-formats-draft2019", + "version": "1.6.1", + "bom-ref": "ajv-formats-draft2019@npm:1.6.1 [265c4]", + "author": "Carlo Quinonez", + "description": "Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema.", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ajv-formats-draft2019@1.6.1?vcs_url=git%2Bhttps%3A//github.com/luzlab/ajv-formats-draft2019.git", + "externalReferences": [ + { + "url": "https://github.com/luzlab/ajv-formats-draft2019/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/luzlab/ajv-formats-draft2019.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/luzlab/ajv-formats-draft2019#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ajv-formats", + "version": "3.0.1", + "bom-ref": "ajv-formats@npm:3.0.1 [265c4]", + "author": "Evgeny Poberezkin", + "description": "Format validation for Ajv v7+", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ajv-formats@3.0.1?vcs_url=git%2Bhttps%3A//github.com/ajv-validator/ajv-formats.git", + "externalReferences": [ + { + "url": "https://github.com/ajv-validator/ajv-formats/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv-formats.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ajv", + "version": "8.14.0", + "bom-ref": "ajv@npm:8.14.0", + "author": "Evgeny Poberezkin", + "description": "Another JSON Schema Validator", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ajv@8.14.0?vcs_url=git%2Bhttps%3A//github.com/ajv-validator/ajv.git", + "externalReferences": [ + { + "url": "https://github.com/ajv-validator/ajv/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://ajv.js.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ansi-regex", + "version": "5.0.1", + "bom-ref": "ansi-regex@npm:5.0.1", + "author": "Sindre Sorhus", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ansi-regex@5.0.1?vcs_url=git%2Bhttps%3A//github.com/chalk/ansi-regex.git", + "externalReferences": [ + { + "url": "https://github.com/chalk/ansi-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ansi-regex", + "version": "6.0.1", + "bom-ref": "ansi-regex@npm:6.0.1", + "author": "Sindre Sorhus", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ansi-regex@6.0.1?vcs_url=git%2Bhttps%3A//github.com/chalk/ansi-regex.git", + "externalReferences": [ + { + "url": "https://github.com/chalk/ansi-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ansi-styles", + "version": "4.3.0", + "bom-ref": "ansi-styles@npm:4.3.0", + "author": "Sindre Sorhus", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ansi-styles@4.3.0?vcs_url=git%2Bhttps%3A//github.com/chalk/ansi-styles.git", + "externalReferences": [ + { + "url": "https://github.com/chalk/ansi-styles/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/ansi-styles.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/ansi-styles#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ansi-styles", + "version": "6.2.1", + "bom-ref": "ansi-styles@npm:6.2.1", + "author": "Sindre Sorhus", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ansi-styles@6.2.1?vcs_url=git%2Bhttps%3A//github.com/chalk/ansi-styles.git", + "externalReferences": [ + { + "url": "https://github.com/chalk/ansi-styles/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/ansi-styles.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/ansi-styles#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "aproba", + "version": "2.0.0", + "bom-ref": "aproba@npm:2.0.0", + "author": "Rebecca Turner", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/aproba@2.0.0?vcs_url=git%2Bhttps%3A//github.com/iarna/aproba.git", + "externalReferences": [ + { + "url": "https://github.com/iarna/aproba/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "are-we-there-yet", + "version": "2.0.0", + "bom-ref": "are-we-there-yet@npm:2.0.0", + "author": "GitHub Inc.", + "description": "Keep track of the overall completion of many disparate processes", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/are-we-there-yet@2.0.0?vcs_url=git%2Bhttps%3A//github.com/npm/are-we-there-yet.git", + "externalReferences": [ + { + "url": "https://github.com/npm/are-we-there-yet/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/are-we-there-yet.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/are-we-there-yet", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "argparse", + "version": "1.0.10", + "bom-ref": "argparse@npm:1.0.10", + "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/argparse@1.0.10?vcs_url=git%2Bhttps%3A//github.com/nodeca/argparse.git", + "externalReferences": [ + { + "url": "https://github.com/nodeca/argparse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/argparse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/argparse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "balanced-match", + "version": "1.0.2", + "bom-ref": "balanced-match@npm:1.0.2", + "author": "Julian Gruber", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/balanced-match@1.0.2?vcs_url=git%3A//github.com/juliangruber/balanced-match.git", + "externalReferences": [ + { + "url": "https://github.com/juliangruber/balanced-match/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "bindings", + "version": "1.5.0", + "bom-ref": "bindings@npm:1.5.0", + "author": "Nathan Rajlich", + "description": "Helper module for loading your native module's .node file", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/bindings@1.5.0?vcs_url=git%3A//github.com/TooTallNate/node-bindings.git", + "externalReferences": [ + { + "url": "https://github.com/TooTallNate/node-bindings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-bindings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-bindings", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "brace-expansion", + "version": "1.1.11", + "bom-ref": "brace-expansion@npm:1.1.11", + "author": "Julian Gruber", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/brace-expansion@1.1.11?vcs_url=git%3A//github.com/juliangruber/brace-expansion.git", + "externalReferences": [ + { + "url": "https://github.com/juliangruber/brace-expansion/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "brace-expansion", + "version": "2.0.1", + "bom-ref": "brace-expansion@npm:2.0.1", + "author": "Julian Gruber", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/brace-expansion@2.0.1?vcs_url=git%3A//github.com/juliangruber/brace-expansion.git", + "externalReferences": [ + { + "url": "https://github.com/juliangruber/brace-expansion/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "cacache", + "version": "18.0.3", + "bom-ref": "cacache@npm:18.0.3", + "author": "GitHub Inc.", + "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/cacache@18.0.3?vcs_url=git%2Bhttps%3A//github.com/npm/cacache.git", + "externalReferences": [ + { + "url": "https://github.com/npm/cacache/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/cacache.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/cacache#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "chownr", + "version": "2.0.0", + "bom-ref": "chownr@npm:2.0.0", + "author": "Isaac Z. Schlueter", + "description": "like `chown -R`", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/chownr@2.0.0?vcs_url=git%3A//github.com/isaacs/chownr.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/chownr/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/chownr.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/chownr#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "clean-stack", + "version": "2.2.0", + "bom-ref": "clean-stack@npm:2.2.0", + "author": "Sindre Sorhus", + "description": "Clean up error stack traces", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/clean-stack@2.2.0?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/clean-stack.git", + "externalReferences": [ + { + "url": "https://github.com/sindresorhus/clean-stack/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/clean-stack.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/clean-stack#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "color-convert", + "version": "2.0.1", + "bom-ref": "color-convert@npm:2.0.1", + "author": "Heather Arthur", + "description": "Plain color conversion functions", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/color-convert@2.0.1?vcs_url=git%2Bhttps%3A//github.com/Qix-/color-convert.git", + "externalReferences": [ + { + "url": "https://github.com/Qix-/color-convert/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/Qix-/color-convert.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Qix-/color-convert#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "color-name", + "version": "1.1.4", + "bom-ref": "color-name@npm:1.1.4", + "author": "DY", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/color-name@1.1.4?vcs_url=git%2Bssh%3A//git%40github.com/colorjs/color-name.git", + "externalReferences": [ + { + "url": "https://github.com/colorjs/color-name/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/colorjs/color-name.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/colorjs/color-name", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "color-support", + "version": "1.1.3", + "bom-ref": "color-support@npm:1.1.3", + "author": "Isaac Z. Schlueter", + "description": "A module which will endeavor to guess your terminal's level of color support.", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/color-support@1.1.3?vcs_url=git%2Bhttps%3A//github.com/isaacs/color-support.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/color-support/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/color-support.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/color-support#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "commander", + "version": "2.20.3", + "bom-ref": "commander@npm:2.20.3", + "author": "TJ Holowaychuk", + "description": "the complete solution for node.js command-line programs", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/commander@2.20.3?vcs_url=git%2Bhttps%3A//github.com/tj/commander.js.git", + "externalReferences": [ + { + "url": "https://github.com/tj/commander.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tj/commander.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tj/commander.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "concat-map", + "version": "0.0.1", + "bom-ref": "concat-map@npm:0.0.1", + "author": "James Halliday", + "description": "concatenative mapdashery", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/concat-map@0.0.1?vcs_url=git%3A//github.com/substack/node-concat-map.git", + "externalReferences": [ + { + "url": "https://github.com/substack/node-concat-map/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/substack/node-concat-map#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "console-control-strings", + "version": "1.1.0", + "bom-ref": "console-control-strings@npm:1.1.0", + "author": "Rebecca Turner", + "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/console-control-strings@1.1.0?vcs_url=git%2Bhttps%3A//github.com/iarna/console-control-strings.git", + "externalReferences": [ + { + "url": "https://github.com/iarna/console-control-strings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/console-control-strings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/console-control-strings#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "cross-spawn", + "version": "7.0.3", + "bom-ref": "cross-spawn@npm:7.0.3", + "author": "André Cruz", + "description": "Cross platform child_process#spawn and child_process#spawnSync", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/cross-spawn@7.0.3?vcs_url=git%2Bssh%3A//git%40github.com/moxystudio/node-cross-spawn.git", + "externalReferences": [ + { + "url": "https://github.com/moxystudio/node-cross-spawn/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/moxystudio/node-cross-spawn.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/moxystudio/node-cross-spawn", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "debug", + "version": "4.3.4", + "bom-ref": "debug@npm:4.3.4 [428f3]", + "author": "Josh Junon", + "description": "Lightweight debugging utility for Node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/debug@4.3.4?vcs_url=git%3A//github.com/debug-js/debug.git", + "externalReferences": [ + { + "url": "https://github.com/debug-js/debug/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/debug-js/debug.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/debug-js/debug#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "delegates", + "version": "1.0.0", + "bom-ref": "delegates@npm:1.0.0", + "description": "delegate methods and accessors to another property", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/delegates@1.0.0?vcs_url=git%2Bhttps%3A//github.com/visionmedia/node-delegates.git", + "externalReferences": [ + { + "url": "https://github.com/visionmedia/node-delegates/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/visionmedia/node-delegates.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/visionmedia/node-delegates#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "detect-libc", + "version": "2.0.3", + "bom-ref": "detect-libc@npm:2.0.3", + "author": "Lovell Fuller", + "description": "Node.js module to detect the C standard library (libc) implementation family and version", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/detect-libc@2.0.3?vcs_url=git%3A//github.com/lovell/detect-libc.git", + "externalReferences": [ + { + "url": "https://github.com/lovell/detect-libc/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/lovell/detect-libc.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/lovell/detect-libc#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "discontinuous-range", + "version": "1.0.0", + "bom-ref": "discontinuous-range@npm:1.0.0", + "author": "David Tudury", + "description": "for adding, subtracting, and indexing discontinuous ranges of numbers", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/discontinuous-range@1.0.0?vcs_url=git%2Bhttps%3A//github.com/dtudury/discontinuous-range.git", + "externalReferences": [ + { + "url": "https://github.com/dtudury/discontinuous-range/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/dtudury/discontinuous-range.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/dtudury/discontinuous-range", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "eastasianwidth", + "version": "0.2.0", + "bom-ref": "eastasianwidth@npm:0.2.0", + "author": "Masaki Komagata", + "description": "Get East Asian Width from a character.", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/eastasianwidth@0.2.0?vcs_url=git%3A//github.com/komagata/eastasianwidth.git", + "externalReferences": [ + { + "url": "https://github.com/komagata/eastasianwidth/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/komagata/eastasianwidth.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/komagata/eastasianwidth#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "emoji-regex", + "version": "8.0.0", + "bom-ref": "emoji-regex@npm:8.0.0", + "author": "Mathias Bynens", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/emoji-regex@8.0.0?vcs_url=git%2Bhttps%3A//github.com/mathiasbynens/emoji-regex.git", + "externalReferences": [ + { + "url": "https://github.com/mathiasbynens/emoji-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/emoji-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "emoji-regex", + "version": "9.2.2", + "bom-ref": "emoji-regex@npm:9.2.2", + "author": "Mathias Bynens", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/emoji-regex@9.2.2?vcs_url=git%2Bhttps%3A//github.com/mathiasbynens/emoji-regex.git", + "externalReferences": [ + { + "url": "https://github.com/mathiasbynens/emoji-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/emoji-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "encoding", + "version": "0.1.13", + "bom-ref": "encoding@npm:0.1.13", + "author": "Andris Reinman", + "description": "Convert encodings, uses iconv-lite", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/encoding@0.1.13?vcs_url=git%2Bhttps%3A//github.com/andris9/encoding.git", + "externalReferences": [ + { + "url": "https://github.com/andris9/encoding/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/andris9/encoding.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/andris9/encoding#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "env-paths", + "version": "2.2.1", + "bom-ref": "env-paths@npm:2.2.1", + "author": "Sindre Sorhus", + "description": "Get paths for storing things like data, config, cache, etc", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/env-paths@2.2.1?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/env-paths.git", + "externalReferences": [ + { + "url": "https://github.com/sindresorhus/env-paths/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/env-paths.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/env-paths#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "err-code", + "version": "2.0.3", + "bom-ref": "err-code@npm:2.0.3", + "author": "IndigoUnited", + "description": "Create an error with a code", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/err-code@2.0.3?vcs_url=git%3A//github.com/IndigoUnited/js-err-code.git", + "externalReferences": [ + { + "url": "https://github.com/IndigoUnited/js-err-code/issues/", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/IndigoUnited/js-err-code.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/IndigoUnited/js-err-code#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "esprima", + "version": "4.0.1", + "bom-ref": "esprima@npm:4.0.1", + "author": "Ariya Hidayat", + "description": "ECMAScript parsing infrastructure for multipurpose analysis", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/esprima@4.0.1?vcs_url=git%2Bhttps%3A//github.com/jquery/esprima.git", + "externalReferences": [ + { + "url": "https://github.com/jquery/esprima/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jquery/esprima.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://esprima.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "exponential-backoff", + "version": "3.1.1", + "bom-ref": "exponential-backoff@npm:3.1.1", + "author": "Sami Sayegh", + "description": "A utility that allows retrying a function with an exponential delay between attempts.", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/exponential-backoff@3.1.1?vcs_url=git%2Bhttps%3A//github.com/coveo/exponential-backoff.git", + "externalReferences": [ + { + "url": "https://github.com/coveo/exponential-backoff/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/coveo/exponential-backoff.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/coveo/exponential-backoff#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "extend", + "version": "3.0.2", + "bom-ref": "extend@npm:3.0.2", + "author": "Stefan Thomas", + "description": "Port of jQuery.extend for node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/extend@3.0.2?vcs_url=git%2Bhttps%3A//github.com/justmoon/node-extend.git", + "externalReferences": [ + { + "url": "https://github.com/justmoon/node-extend/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/justmoon/node-extend.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/justmoon/node-extend#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "fast-deep-equal", + "version": "3.1.3", + "bom-ref": "fast-deep-equal@npm:3.1.3", + "author": "Evgeny Poberezkin", + "description": "Fast deep equal", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/fast-deep-equal@3.1.3?vcs_url=git%2Bhttps%3A//github.com/epoberezkin/fast-deep-equal.git", + "externalReferences": [ + { + "url": "https://github.com/epoberezkin/fast-deep-equal/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/fast-deep-equal.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "file-uri-to-path", + "version": "1.0.0", + "bom-ref": "file-uri-to-path@npm:1.0.0", + "author": "Nathan Rajlich", + "description": "Convert a file: URI to a file path", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/file-uri-to-path@1.0.0?vcs_url=git%3A//github.com/TooTallNate/file-uri-to-path.git", + "externalReferences": [ + { + "url": "https://github.com/TooTallNate/file-uri-to-path/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/file-uri-to-path.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "foreground-child", + "version": "3.1.1", + "bom-ref": "foreground-child@npm:3.1.1", + "author": "Isaac Z. Schlueter", + "description": "Run a child as if it's the foreground process. Give it stdio. Exit when it exits.", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/foreground-child@3.1.1?vcs_url=git%2Bhttps%3A//github.com/tapjs/foreground-child.git", + "externalReferences": [ + { + "url": "https://github.com/tapjs/foreground-child/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tapjs/foreground-child.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tapjs/foreground-child#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "fs-minipass", + "version": "2.1.0", + "bom-ref": "fs-minipass@npm:2.1.0", + "author": "Isaac Z. Schlueter", + "description": "fs read and write streams based on minipass", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/fs-minipass@2.1.0?vcs_url=git%2Bhttps%3A//github.com/npm/fs-minipass.git", + "externalReferences": [ + { + "url": "https://github.com/npm/fs-minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "fs-minipass", + "version": "3.0.3", + "bom-ref": "fs-minipass@npm:3.0.3", + "author": "GitHub Inc.", + "description": "fs read and write streams based on minipass", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/fs-minipass@3.0.3?vcs_url=git%2Bhttps%3A//github.com/npm/fs-minipass.git", + "externalReferences": [ + { + "url": "https://github.com/npm/fs-minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "fs.realpath", + "version": "1.0.0", + "bom-ref": "fs.realpath@npm:1.0.0", + "author": "Isaac Z. Schlueter", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/fs.realpath@1.0.0?vcs_url=git%2Bhttps%3A//github.com/isaacs/fs.realpath.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/fs.realpath/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/fs.realpath#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "gauge", + "version": "3.0.2", + "bom-ref": "gauge@npm:3.0.2", + "author": "Rebecca Turner", + "description": "A terminal based horizontal guage", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/gauge@3.0.2?vcs_url=git%2Bhttps%3A//github.com/iarna/gauge.git", + "externalReferences": [ + { + "url": "https://github.com/npm/gauge/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/gauge.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/gauge", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "glob", + "version": "10.4.1", + "bom-ref": "glob@npm:10.4.1", + "author": "Isaac Z. Schlueter", + "description": "the most correct and second fastest glob implementation in JavaScript", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/glob@10.4.1?vcs_url=git%3A//github.com/isaacs/node-glob.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-glob/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-glob#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "glob", + "version": "7.2.3", + "bom-ref": "glob@npm:7.2.3", + "author": "Isaac Z. Schlueter", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/glob@7.2.3?vcs_url=git%3A//github.com/isaacs/node-glob.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-glob/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-glob#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "graceful-fs", + "version": "4.2.11", + "bom-ref": "graceful-fs@npm:4.2.11", + "description": "A drop-in replacement for fs, making various improvements.", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/graceful-fs@4.2.11?vcs_url=git%2Bhttps%3A//github.com/isaacs/node-graceful-fs.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-graceful-fs/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-graceful-fs.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-graceful-fs#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "has-unicode", + "version": "2.0.1", + "bom-ref": "has-unicode@npm:2.0.1", + "author": "Rebecca Turner", + "description": "Try to guess if your terminal supports unicode", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/has-unicode@2.0.1?vcs_url=git%2Bhttps%3A//github.com/iarna/has-unicode.git", + "externalReferences": [ + { + "url": "https://github.com/iarna/has-unicode/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/has-unicode.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/has-unicode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "http-cache-semantics", + "version": "4.1.1", + "bom-ref": "http-cache-semantics@npm:4.1.1", + "author": "Kornel Lesiński", + "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/http-cache-semantics@4.1.1?vcs_url=git%2Bhttps%3A//github.com/kornelski/http-cache-semantics.git", + "externalReferences": [ + { + "url": "https://github.com/kornelski/http-cache-semantics/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/kornelski/http-cache-semantics.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/kornelski/http-cache-semantics#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "http-proxy-agent", + "version": "7.0.2", + "bom-ref": "http-proxy-agent@npm:7.0.2", + "author": "Nathan Rajlich", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/http-proxy-agent@7.0.2?vcs_url=git%2Bhttps%3A//github.com/TooTallNate/proxy-agents.git#packages/http-proxy-agent", + "externalReferences": [ + { + "url": "https://github.com/TooTallNate/proxy-agents/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/TooTallNate/proxy-agents.git#packages/http-proxy-agent", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/TooTallNate/proxy-agents#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "https-proxy-agent", + "version": "5.0.1", + "bom-ref": "https-proxy-agent@npm:5.0.1", + "author": "Nathan Rajlich", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/https-proxy-agent@5.0.1?vcs_url=git%3A//github.com/TooTallNate/node-https-proxy-agent.git", + "externalReferences": [ + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-https-proxy-agent.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "https-proxy-agent", + "version": "7.0.4", + "bom-ref": "https-proxy-agent@npm:7.0.4", + "author": "Nathan Rajlich", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/https-proxy-agent@7.0.4?vcs_url=git%2Bhttps%3A//github.com/TooTallNate/proxy-agents.git#packages/https-proxy-agent", + "externalReferences": [ + { + "url": "https://github.com/TooTallNate/proxy-agents/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/TooTallNate/proxy-agents.git#packages/https-proxy-agent", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/TooTallNate/proxy-agents#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "iconv-lite", + "version": "0.6.3", + "bom-ref": "iconv-lite@npm:0.6.3", + "author": "Alexander Shtuchkin", + "description": "Convert character encodings in pure javascript.", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/iconv-lite@0.6.3?vcs_url=git%3A//github.com/ashtuchkin/iconv-lite.git", + "externalReferences": [ + { + "url": "https://github.com/ashtuchkin/iconv-lite/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/ashtuchkin/iconv-lite.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/ashtuchkin/iconv-lite", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "imurmurhash", + "version": "0.1.4", + "bom-ref": "imurmurhash@npm:0.1.4", + "author": "Jens Taylor", + "description": "An incremental implementation of MurmurHash3", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/imurmurhash@0.1.4?vcs_url=git%2Bhttps%3A//github.com/jensyt/imurmurhash-js.git", + "externalReferences": [ + { + "url": "https://github.com/jensyt/imurmurhash-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jensyt/imurmurhash-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jensyt/imurmurhash-js", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "indent-string", + "version": "4.0.0", + "bom-ref": "indent-string@npm:4.0.0", + "author": "Sindre Sorhus", + "description": "Indent each line in a string", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/indent-string@4.0.0?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/indent-string.git", + "externalReferences": [ + { + "url": "https://github.com/sindresorhus/indent-string/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/indent-string.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/indent-string#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "inflight", + "version": "1.0.6", + "bom-ref": "inflight@npm:1.0.6", + "author": "Isaac Z. Schlueter", + "description": "Add callbacks to requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/inflight@1.0.6?vcs_url=git%2Bhttps%3A//github.com/npm/inflight.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/inflight/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/inflight.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "inherits", + "version": "2.0.4", + "bom-ref": "inherits@npm:2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/inherits@2.0.4?vcs_url=git%3A//github.com/isaacs/inherits.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/inherits/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/inherits.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inherits#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ip-address", + "version": "9.0.5", + "bom-ref": "ip-address@npm:9.0.5", + "author": "Beau Gunderson", + "description": "A library for parsing IPv4 and IPv6 IP addresses in node and the browser.", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ip-address@9.0.5?vcs_url=git%3A//github.com/beaugunderson/ip-address.git", + "externalReferences": [ + { + "url": "https://github.com/beaugunderson/ip-address/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/beaugunderson/ip-address.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/beaugunderson/ip-address#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "bom-ref": "is-fullwidth-code-point@npm:3.0.0", + "author": "Sindre Sorhus", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/is-fullwidth-code-point@3.0.0?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/is-fullwidth-code-point.git", + "externalReferences": [ + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "is-lambda", + "version": "1.0.1", + "bom-ref": "is-lambda@npm:1.0.1", + "author": "Thomas Watson Steen", + "description": "Detect if your code is running on an AWS Lambda server", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/is-lambda@1.0.1?vcs_url=git%2Bhttps%3A//github.com/watson/is-lambda.git", + "externalReferences": [ + { + "url": "https://github.com/watson/is-lambda/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/watson/is-lambda.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/watson/is-lambda", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "isexe", + "version": "2.0.0", + "bom-ref": "isexe@npm:2.0.0", + "author": "Isaac Z. Schlueter", + "description": "Minimal module to check if a file is executable.", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/isexe@2.0.0?vcs_url=git%2Bhttps%3A//github.com/isaacs/isexe.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/isexe/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/isexe.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/isexe#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "isexe", + "version": "3.1.1", + "bom-ref": "isexe@npm:3.1.1", + "author": "Isaac Z. Schlueter", + "description": "Minimal module to check if a file is executable.", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/isexe@3.1.1?vcs_url=git%2Bhttps%3A//github.com/isaacs/isexe.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/isexe/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/isexe.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/isexe#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "jackspeak", + "version": "3.1.2", + "bom-ref": "jackspeak@npm:3.1.2", + "author": "Isaac Z. Schlueter", + "description": "A very strict and proper argument parser.", + "licenses": [ + { + "license": { + "id": "BlueOak-1.0.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/jackspeak@3.1.2?vcs_url=git%2Bhttps%3A//github.com/isaacs/jackspeak.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/jackspeak/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/jackspeak.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/jackspeak#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "js-yaml", + "version": "3.14.1", + "bom-ref": "js-yaml@npm:3.14.1", + "author": "Vladimir Zapparov", + "description": "YAML 1.2 parser and serializer", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/js-yaml@3.14.1?vcs_url=git%2Bhttps%3A//github.com/nodeca/js-yaml.git", + "externalReferences": [ + { + "url": "https://github.com/nodeca/js-yaml/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/js-yaml.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/js-yaml", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "jsbn", + "version": "1.1.0", + "bom-ref": "jsbn@npm:1.1.0", + "author": "Tom Wu", + "description": "The jsbn library is a fast, portable implementation of large-number math in pure JavaScript, enabling public-key crypto and other applications on desktop and mobile browsers.", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/jsbn@1.1.0?vcs_url=git%2Bhttps%3A//github.com/andyperlitch/jsbn.git", + "externalReferences": [ + { + "url": "https://github.com/andyperlitch/jsbn/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/andyperlitch/jsbn.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/andyperlitch/jsbn#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "json-schema-traverse", + "version": "1.0.0", + "bom-ref": "json-schema-traverse@npm:1.0.0", + "author": "Evgeny Poberezkin", + "description": "Traverse JSON Schema passing each schema object to callback", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/json-schema-traverse@1.0.0?vcs_url=git%2Bhttps%3A//github.com/epoberezkin/json-schema-traverse.git", + "externalReferences": [ + { + "url": "https://github.com/epoberezkin/json-schema-traverse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/json-schema-traverse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "libxmljs2", + "version": "0.33.0", + "bom-ref": "libxmljs2@npm:0.33.0", + "author": "marudor", + "description": "libxml bindings for v8 javascript engine", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/libxmljs2@0.33.0?vcs_url=git%2Bssh%3A//git%40github.com/marudor/libxmljs2.git", + "externalReferences": [ + { + "url": "http://github.com/marudor/libxmljs2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/marudor/libxmljs2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/marudor/libxmljs2#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "lru-cache", + "version": "10.2.2", + "bom-ref": "lru-cache@npm:10.2.2", + "author": "Isaac Z. Schlueter", + "description": "A cache object that deletes the least-recently-used items.", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/lru-cache@10.2.2?vcs_url=git%3A//github.com/isaacs/node-lru-cache.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-lru-cache/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/node-lru-cache.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-lru-cache#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "make-dir", + "version": "3.1.0", + "bom-ref": "make-dir@npm:3.1.0", + "author": "Sindre Sorhus", + "description": "Make a directory and its parents if needed - Think `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/make-dir@3.1.0?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/make-dir.git", + "externalReferences": [ + { + "url": "https://github.com/sindresorhus/make-dir/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/make-dir.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/make-dir#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "make-fetch-happen", + "version": "13.0.1", + "bom-ref": "make-fetch-happen@npm:13.0.1", + "author": "GitHub Inc.", + "description": "Opinionated, caching, retrying fetch client", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/make-fetch-happen@13.0.1?vcs_url=git%2Bhttps%3A//github.com/npm/make-fetch-happen.git", + "externalReferences": [ + { + "url": "https://github.com/npm/make-fetch-happen/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/make-fetch-happen.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/make-fetch-happen#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "minimatch", + "version": "3.1.2", + "bom-ref": "minimatch@npm:3.1.2", + "author": "Isaac Z. Schlueter", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/minimatch@3.1.2?vcs_url=git%3A//github.com/isaacs/minimatch.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/minimatch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minimatch#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "minimatch", + "version": "9.0.4", + "bom-ref": "minimatch@npm:9.0.4", + "author": "Isaac Z. Schlueter", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/minimatch@9.0.4?vcs_url=git%3A//github.com/isaacs/minimatch.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/minimatch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minimatch#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "minipass-collect", + "version": "2.0.1", + "bom-ref": "minipass-collect@npm:2.0.1", + "author": "Isaac Z. Schlueter", + "description": "A Minipass stream that collects all the data into a single chunk", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/minipass-collect@2.0.1?vcs_url=git%2Bhttps%3A//github.com/isaacs/minipass-collect.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/minipass-collect/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass-collect.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass-collect#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "minipass-fetch", + "version": "3.0.5", + "bom-ref": "minipass-fetch@npm:3.0.5", + "author": "GitHub Inc.", + "description": "An implementation of window.fetch in Node.js using Minipass streams", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/minipass-fetch@3.0.5?vcs_url=git%2Bhttps%3A//github.com/npm/minipass-fetch.git", + "externalReferences": [ + { + "url": "https://github.com/npm/minipass-fetch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/minipass-fetch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/minipass-fetch#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "minipass-flush", + "version": "1.0.5", + "bom-ref": "minipass-flush@npm:1.0.5", + "author": "Isaac Z. Schlueter", + "description": "A Minipass stream that calls a flush function before emitting 'end'", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/minipass-flush@1.0.5?vcs_url=git%2Bhttps%3A//github.com/isaacs/minipass-flush.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/minipass-flush/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass-flush.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass-flush#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "minipass-pipeline", + "version": "1.2.4", + "bom-ref": "minipass-pipeline@npm:1.2.4", + "author": "Isaac Z. Schlueter", + "description": "create a pipeline of streams using Minipass", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/minipass-pipeline@1.2.4" + }, + { + "type": "library", + "name": "minipass-sized", + "version": "1.0.3", + "bom-ref": "minipass-sized@npm:1.0.3", + "author": "Isaac Z. Schlueter", + "description": "A Minipass stream that raises an error if you get a different number of bytes than expected", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/minipass-sized@1.0.3?vcs_url=git%2Bhttps%3A//github.com/isaacs/minipass-sized.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/minipass-sized/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass-sized.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass-sized#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "3.3.6", + "bom-ref": "minipass@npm:3.3.6", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/minipass@3.3.6?vcs_url=git%2Bhttps%3A//github.com/isaacs/minipass.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "5.0.0", + "bom-ref": "minipass@npm:5.0.0", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/minipass@5.0.0?vcs_url=git%2Bhttps%3A//github.com/isaacs/minipass.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "7.1.2", + "bom-ref": "minipass@npm:7.1.2", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/minipass@7.1.2?vcs_url=git%2Bhttps%3A//github.com/isaacs/minipass.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "minizlib", + "version": "2.1.2", + "bom-ref": "minizlib@npm:2.1.2", + "author": "Isaac Z. Schlueter", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/minizlib@2.1.2?vcs_url=git%2Bhttps%3A//github.com/isaacs/minizlib.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/minizlib/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minizlib#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "mkdirp", + "version": "1.0.4", + "bom-ref": "mkdirp@npm:1.0.4", + "description": "Recursively mkdir, like `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/mkdirp@1.0.4?vcs_url=git%2Bhttps%3A//github.com/isaacs/node-mkdirp.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-mkdirp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-mkdirp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-mkdirp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "moo", + "version": "0.5.2", + "bom-ref": "moo@npm:0.5.2", + "author": "Tim Radvan", + "description": "Optimised tokenizer/lexer generator! 🐄 Much performance. Moo!", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/moo@0.5.2?vcs_url=git%2Bhttps%3A//github.com/tjvr/moo.git", + "externalReferences": [ + { + "url": "https://github.com/tjvr/moo/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tjvr/moo.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tjvr/moo#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ms", + "version": "2.1.2", + "bom-ref": "ms@npm:2.1.2", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ms@2.1.2?vcs_url=git%2Bhttps%3A//github.com/zeit/ms.git", + "externalReferences": [ + { + "url": "https://github.com/zeit/ms/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/zeit/ms.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "nan", + "version": "2.18.0", + "bom-ref": "nan@npm:2.18.0", + "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 20 compatibility", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/nan@2.18.0?vcs_url=git%3A//github.com/nodejs/nan.git", + "externalReferences": [ + { + "url": "https://github.com/nodejs/nan/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/nan.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/nan#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "nearley", + "version": "2.20.1", + "bom-ref": "nearley@npm:2.20.1", + "author": "Hardmath123", + "description": "Simple, fast, powerful parser toolkit for JavaScript.", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/nearley@2.20.1?vcs_url=git%2Bhttps%3A//github.com/hardmath123/nearley.git", + "externalReferences": [ + { + "url": "https://github.com/hardmath123/nearley/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/hardmath123/nearley.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/hardmath123/nearley#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "negotiator", + "version": "0.6.3", + "bom-ref": "negotiator@npm:0.6.3", + "description": "HTTP content negotiation", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/negotiator@0.6.3?vcs_url=git%2Bhttps%3A//github.com/jshttp/negotiator.git", + "externalReferences": [ + { + "url": "https://github.com/jshttp/negotiator/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jshttp/negotiator.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jshttp/negotiator#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "node-fetch", + "version": "2.7.0", + "bom-ref": "node-fetch@npm:2.7.0 [5547f]", + "author": "David Frank", + "description": "A light-weight module that brings window.fetch to node.js", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/node-fetch@2.7.0?vcs_url=git%2Bhttps%3A//github.com/bitinn/node-fetch.git", + "externalReferences": [ + { + "url": "https://github.com/bitinn/node-fetch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/bitinn/node-fetch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/bitinn/node-fetch", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "node-gyp", + "version": "10.1.0", + "bom-ref": "node-gyp@npm:10.1.0", + "author": "Nathan Rajlich", + "description": "Node.js native addon build tool", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/node-gyp@10.1.0?vcs_url=git%3A//github.com/nodejs/node-gyp.git", + "externalReferences": [ + { + "url": "https://github.com/nodejs/node-gyp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/node-gyp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/node-gyp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "nopt", + "version": "5.0.0", + "bom-ref": "nopt@npm:5.0.0", + "author": "Isaac Z. Schlueter", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/nopt@5.0.0?vcs_url=git%2Bhttps%3A//github.com/npm/nopt.git", + "externalReferences": [ + { + "url": "https://github.com/npm/nopt/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/nopt.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/nopt#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "nopt", + "version": "7.2.1", + "bom-ref": "nopt@npm:7.2.1", + "author": "GitHub Inc.", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/nopt@7.2.1?vcs_url=git%2Bhttps%3A//github.com/npm/nopt.git", + "externalReferences": [ + { + "url": "https://github.com/npm/nopt/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/nopt.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/nopt#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "npmlog", + "version": "5.0.1", + "bom-ref": "npmlog@npm:5.0.1", + "author": "Isaac Z. Schlueter", + "description": "logger for npm", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/npmlog@5.0.1?vcs_url=git%2Bhttps%3A//github.com/npm/npmlog.git", + "externalReferences": [ + { + "url": "https://github.com/npm/npmlog/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/npmlog.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/npmlog#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "object-assign", + "version": "4.1.1", + "bom-ref": "object-assign@npm:4.1.1", + "author": "Sindre Sorhus", + "description": "ES2015 `Object.assign()` ponyfill", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/object-assign@4.1.1?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/object-assign.git", + "externalReferences": [ + { + "url": "https://github.com/sindresorhus/object-assign/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/object-assign.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/object-assign#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "once", + "version": "1.4.0", + "bom-ref": "once@npm:1.4.0", + "author": "Isaac Z. Schlueter", + "description": "Run a function exactly one time", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/once@1.4.0?vcs_url=git%3A//github.com/isaacs/once.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/once/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/once.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/once#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "p-map", + "version": "4.0.0", + "bom-ref": "p-map@npm:4.0.0", + "author": "Sindre Sorhus", + "description": "Map over promises concurrently", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/p-map@4.0.0?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/p-map.git", + "externalReferences": [ + { + "url": "https://github.com/sindresorhus/p-map/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/p-map.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/p-map#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "packageurl-js", + "version": "1.2.1", + "bom-ref": "packageurl-js@npm:1.2.1", + "author": "the purl authors", + "description": "JavaScript library to parse and build \"purl\" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/packageurl-js@1.2.1?vcs_url=git%2Bhttps%3A//github.com/package-url/packageurl-js.git", + "externalReferences": [ + { + "url": "https://github.com/package-url/packageurl-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/package-url/packageurl-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/package-url/packageurl-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "path-is-absolute", + "version": "1.0.1", + "bom-ref": "path-is-absolute@npm:1.0.1", + "author": "Sindre Sorhus", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/path-is-absolute@1.0.1?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/path-is-absolute.git", + "externalReferences": [ + { + "url": "https://github.com/sindresorhus/path-is-absolute/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/path-is-absolute.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "path-key", + "version": "3.1.1", + "bom-ref": "path-key@npm:3.1.1", + "author": "Sindre Sorhus", + "description": "Get the PATH environment variable key cross-platform", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/path-key@3.1.1?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/path-key.git", + "externalReferences": [ + { + "url": "https://github.com/sindresorhus/path-key/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/path-key.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/path-key#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "path-scurry", + "version": "1.11.1", + "bom-ref": "path-scurry@npm:1.11.1", + "author": "Isaac Z. Schlueter", + "description": "walk paths fast and efficiently", + "licenses": [ + { + "license": { + "id": "BlueOak-1.0.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/path-scurry@1.11.1?vcs_url=git%2Bhttps%3A//github.com/isaacs/path-scurry.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/path-scurry/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/path-scurry.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/path-scurry#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "proc-log", + "version": "3.0.0", + "bom-ref": "proc-log@npm:3.0.0", + "author": "GitHub Inc.", + "description": "just emit 'log' events on the process object", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/proc-log@3.0.0?vcs_url=git%2Bhttps%3A//github.com/npm/proc-log.git", + "externalReferences": [ + { + "url": "https://github.com/npm/proc-log/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/proc-log.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/proc-log#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "proc-log", + "version": "4.2.0", + "bom-ref": "proc-log@npm:4.2.0", + "author": "GitHub Inc.", + "description": "just emit 'log' events on the process object", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/proc-log@4.2.0?vcs_url=git%2Bhttps%3A//github.com/npm/proc-log.git", + "externalReferences": [ + { + "url": "https://github.com/npm/proc-log/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/proc-log.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/proc-log#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "promise-retry", + "version": "2.0.1", + "bom-ref": "promise-retry@npm:2.0.1", + "author": "IndigoUnited", + "description": "Retries a function that returns a promise, leveraging the power of the retry module.", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/promise-retry@2.0.1?vcs_url=git%3A//github.com/IndigoUnited/node-promise-retry.git", + "externalReferences": [ + { + "url": "https://github.com/IndigoUnited/node-promise-retry/issues/", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/IndigoUnited/node-promise-retry.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/IndigoUnited/node-promise-retry#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "punycode", + "version": "2.3.1", + "bom-ref": "punycode@npm:2.3.1", + "author": "Mathias Bynens", + "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/punycode@2.3.1?vcs_url=git%2Bhttps%3A//github.com/mathiasbynens/punycode.js.git", + "externalReferences": [ + { + "url": "https://github.com/mathiasbynens/punycode.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/punycode.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/punycode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "railroad-diagrams", + "version": "1.0.0", + "bom-ref": "railroad-diagrams@npm:1.0.0", + "author": "Tab Atkins Jr.", + "description": "A small JS+SVG library for drawing railroad syntax diagrams.", + "licenses": [ + { + "license": { + "id": "CC0-1.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/railroad-diagrams@1.0.0?vcs_url=git%2Bhttps%3A//github.com/tabatkins/railroad-diagrams.git", + "externalReferences": [ + { + "url": "https://github.com/tabatkins/railroad-diagrams/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tabatkins/railroad-diagrams.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tabatkins/railroad-diagrams", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "randexp", + "version": "0.4.6", + "bom-ref": "randexp@npm:0.4.6", + "author": "Roly Fentanes", + "description": "Create random strings that match a given regular expression.", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/randexp@0.4.6?vcs_url=git%3A//github.com/fent/randexp.js.git", + "externalReferences": [ + { + "url": "https://github.com/fent/randexp.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/randexp.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://fent.github.io/randexp.js/", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "readable-stream", + "version": "3.6.2", + "bom-ref": "readable-stream@npm:3.6.2", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/readable-stream@3.6.2?vcs_url=git%3A//github.com/nodejs/readable-stream.git", + "externalReferences": [ + { + "url": "https://github.com/nodejs/readable-stream/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "require-from-string", + "version": "2.0.2", + "bom-ref": "require-from-string@npm:2.0.2", + "author": "Vsevolod Strukchinsky", + "description": "Require module from string", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/require-from-string@2.0.2?vcs_url=git%2Bhttps%3A//github.com/floatdrop/require-from-string.git", + "externalReferences": [ + { + "url": "https://github.com/floatdrop/require-from-string/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/floatdrop/require-from-string.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/floatdrop/require-from-string#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ret", + "version": "0.1.15", + "bom-ref": "ret@npm:0.1.15", + "author": "Roly Fentanes", + "description": "Tokenizes a string that represents a regular expression.", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ret@0.1.15?vcs_url=git%3A//github.com/fent/ret.js.git", + "externalReferences": [ + { + "url": "https://github.com/fent/ret.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/ret.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/fent/ret.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "retry", + "version": "0.12.0", + "bom-ref": "retry@npm:0.12.0", + "author": "Tim Koschützki", + "description": "Abstraction for exponential and custom retry strategies for failed operations.", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/retry@0.12.0?vcs_url=git%3A//github.com/tim-kos/node-retry.git", + "externalReferences": [ + { + "url": "https://github.com/tim-kos/node-retry/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/tim-kos/node-retry.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tim-kos/node-retry", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "rimraf", + "version": "3.0.2", + "bom-ref": "rimraf@npm:3.0.2", + "author": "Isaac Z. Schlueter", + "description": "A deep deletion module for node (like `rm -rf`)", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/rimraf@3.0.2?vcs_url=git%3A//github.com/isaacs/rimraf.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/rimraf/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/rimraf#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "safe-buffer", + "version": "5.2.1", + "bom-ref": "safe-buffer@npm:5.2.1", + "author": "Feross Aboukhadijeh", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/safe-buffer@5.2.1?vcs_url=git%3A//github.com/feross/safe-buffer.git", + "externalReferences": [ + { + "url": "https://github.com/feross/safe-buffer/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "safer-buffer", + "version": "2.1.2", + "bom-ref": "safer-buffer@npm:2.1.2", + "author": "Nikita Skovoroda", + "description": "Modern Buffer API polyfill without footguns", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/safer-buffer@2.1.2?vcs_url=git%2Bhttps%3A//github.com/ChALkeR/safer-buffer.git", + "externalReferences": [ + { + "url": "https://github.com/ChALkeR/safer-buffer/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ChALkeR/safer-buffer.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/ChALkeR/safer-buffer#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "schemes", + "version": "1.4.0", + "bom-ref": "schemes@npm:1.4.0", + "author": "Peter Müller", + "description": "IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/schemes@1.4.0?vcs_url=git%3A//github.com/Munter/schemes.git", + "externalReferences": [ + { + "url": "https://github.com/Munter/schemes/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/Munter/schemes.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Munter/schemes", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "semver", + "version": "6.3.1", + "bom-ref": "semver@npm:6.3.1", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/semver@6.3.1?vcs_url=git%2Bhttps%3A//github.com/npm/node-semver.git", + "externalReferences": [ + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "semver", + "version": "7.6.2", + "bom-ref": "semver@npm:7.6.2", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/semver@7.6.2?vcs_url=git%2Bhttps%3A//github.com/npm/node-semver.git", + "externalReferences": [ + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "set-blocking", + "version": "2.0.0", + "bom-ref": "set-blocking@npm:2.0.0", + "author": "Ben Coe", + "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/set-blocking@2.0.0?vcs_url=git%2Bhttps%3A//github.com/yargs/set-blocking.git", + "externalReferences": [ + { + "url": "https://github.com/yargs/set-blocking/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/yargs/set-blocking.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/yargs/set-blocking#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "shebang-command", + "version": "2.0.0", + "bom-ref": "shebang-command@npm:2.0.0", + "author": "Kevin Mårtensson", + "description": "Get the command from a shebang", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/shebang-command@2.0.0?vcs_url=git%2Bhttps%3A//github.com/kevva/shebang-command.git", + "externalReferences": [ + { + "url": "https://github.com/kevva/shebang-command/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/kevva/shebang-command.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/kevva/shebang-command#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "shebang-regex", + "version": "3.0.0", + "bom-ref": "shebang-regex@npm:3.0.0", + "author": "Sindre Sorhus", + "description": "Regular expression for matching a shebang line", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/shebang-regex@3.0.0?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/shebang-regex.git", + "externalReferences": [ + { + "url": "https://github.com/sindresorhus/shebang-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/shebang-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/shebang-regex#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "signal-exit", + "version": "3.0.7", + "bom-ref": "signal-exit@npm:3.0.7", + "author": "Ben Coe", + "description": "when you want to fire an event no matter how a process exits.", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/signal-exit@3.0.7?vcs_url=git%2Bhttps%3A//github.com/tapjs/signal-exit.git", + "externalReferences": [ + { + "url": "https://github.com/tapjs/signal-exit/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tapjs/signal-exit.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tapjs/signal-exit", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "signal-exit", + "version": "4.1.0", + "bom-ref": "signal-exit@npm:4.1.0", + "author": "Ben Coe", + "description": "when you want to fire an event no matter how a process exits.", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/signal-exit@4.1.0?vcs_url=git%2Bhttps%3A//github.com/tapjs/signal-exit.git", + "externalReferences": [ + { + "url": "https://github.com/tapjs/signal-exit/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tapjs/signal-exit.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tapjs/signal-exit#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "smart-buffer", + "version": "4.2.0", + "bom-ref": "smart-buffer@npm:4.2.0", + "author": "Josh Glazebrook", + "description": "smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/smart-buffer@4.2.0?vcs_url=git%2Bhttps%3A//github.com/JoshGlazebrook/smart-buffer.git", + "externalReferences": [ + { + "url": "https://github.com/JoshGlazebrook/smart-buffer/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/JoshGlazebrook/smart-buffer.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/JoshGlazebrook/smart-buffer/", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "smtp-address-parser", + "version": "1.0.10", + "bom-ref": "smtp-address-parser@npm:1.0.10", + "author": "Gene Hightower", + "description": "Parse an SMTP (RFC-5321) address", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/smtp-address-parser@1.0.10?vcs_url=git%2Bhttps%3A//github.com/gene-hightower/smtp-address-parser.git", + "externalReferences": [ + { + "url": "https://github.com/gene-hightower/smtp-address-parser/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/gene-hightower/smtp-address-parser.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/gene-hightower/smtp-address-parser#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "socks-proxy-agent", + "version": "8.0.3", + "bom-ref": "socks-proxy-agent@npm:8.0.3", + "author": "Nathan Rajlich", + "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/socks-proxy-agent@8.0.3?vcs_url=git%2Bhttps%3A//github.com/TooTallNate/proxy-agents.git#packages/socks-proxy-agent", + "externalReferences": [ + { + "url": "https://github.com/TooTallNate/proxy-agents/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/TooTallNate/proxy-agents.git#packages/socks-proxy-agent", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/TooTallNate/proxy-agents#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "socks", + "version": "2.8.3", + "bom-ref": "socks@npm:2.8.3", + "author": "Josh Glazebrook", + "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/socks@2.8.3?vcs_url=git%2Bhttps%3A//github.com/JoshGlazebrook/socks.git", + "externalReferences": [ + { + "url": "https://github.com/JoshGlazebrook/socks/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/JoshGlazebrook/socks.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/JoshGlazebrook/socks/", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "spdx-exceptions", + "version": "2.5.0", + "bom-ref": "spdx-exceptions@npm:2.5.0", + "author": "The Linux Foundation", + "description": "list of SPDX standard license exceptions", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/spdx-exceptions@2.5.0?vcs_url=git%2Bhttps%3A//github.com/kemitchell/spdx-exceptions.json.git", + "externalReferences": [ + { + "url": "https://github.com/kemitchell/spdx-exceptions.json/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/kemitchell/spdx-exceptions.json.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "spdx-expression-parse", + "version": "4.0.0", + "bom-ref": "spdx-expression-parse@npm:4.0.0", + "author": "Kyle E. Mitchell", + "description": "parse SPDX license expressions", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/spdx-expression-parse@4.0.0?vcs_url=git%2Bhttps%3A//github.com/jslicense/spdx-expression-parse.js.git", + "externalReferences": [ + { + "url": "https://github.com/jslicense/spdx-expression-parse.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-expression-parse.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "spdx-license-ids", + "version": "3.0.18", + "bom-ref": "spdx-license-ids@npm:3.0.18", + "author": "Shinnosuke Watanabe", + "description": "A list of SPDX license identifiers", + "licenses": [ + { + "license": { + "id": "CC0-1.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/spdx-license-ids@3.0.18?vcs_url=git%2Bhttps%3A//github.com/jslicense/spdx-license-ids.git", + "externalReferences": [ + { + "url": "https://github.com/jslicense/spdx-license-ids/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-license-ids.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-license-ids#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "sprintf-js", + "version": "1.0.3", + "bom-ref": "sprintf-js@npm:1.0.3", + "author": "Alexandru Marasteanu", + "description": "JavaScript sprintf implementation", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/sprintf-js@1.0.3?vcs_url=git%2Bhttps%3A//github.com/alexei/sprintf.js.git", + "externalReferences": [ + { + "url": "https://github.com/alexei/sprintf.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/alexei/sprintf.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/alexei/sprintf.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "sprintf-js", + "version": "1.1.3", + "bom-ref": "sprintf-js@npm:1.1.3", + "author": "Alexandru Mărășteanu", + "description": "JavaScript sprintf implementation", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/sprintf-js@1.1.3?vcs_url=git%2Bhttps%3A//github.com/alexei/sprintf.js.git", + "externalReferences": [ + { + "url": "https://github.com/alexei/sprintf.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/alexei/sprintf.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/alexei/sprintf.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ssri", + "version": "10.0.6", + "bom-ref": "ssri@npm:10.0.6", + "author": "GitHub Inc.", + "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ssri@10.0.6?vcs_url=git%2Bhttps%3A//github.com/npm/ssri.git", + "externalReferences": [ + { + "url": "https://github.com/npm/ssri/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/ssri.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/ssri#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "string_decoder", + "version": "1.3.0", + "bom-ref": "string_decoder@npm:1.3.0", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/string_decoder@1.3.0?vcs_url=git%3A//github.com/nodejs/string_decoder.git", + "externalReferences": [ + { + "url": "https://github.com/nodejs/string_decoder/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "string-width", + "version": "4.2.3", + "bom-ref": "string-width@npm:4.2.3", + "author": "Sindre Sorhus", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/string-width@4.2.3?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/string-width.git", + "externalReferences": [ + { + "url": "https://github.com/sindresorhus/string-width/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "string-width", + "version": "5.1.2", + "bom-ref": "string-width@npm:5.1.2", + "author": "Sindre Sorhus", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/string-width@5.1.2?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/string-width.git", + "externalReferences": [ + { + "url": "https://github.com/sindresorhus/string-width/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "strip-ansi", + "version": "6.0.1", + "bom-ref": "strip-ansi@npm:6.0.1", + "author": "Sindre Sorhus", + "description": "Strip ANSI escape codes from a string", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/strip-ansi@6.0.1?vcs_url=git%2Bhttps%3A//github.com/chalk/strip-ansi.git", + "externalReferences": [ + { + "url": "https://github.com/chalk/strip-ansi/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "strip-ansi", + "version": "7.1.0", + "bom-ref": "strip-ansi@npm:7.1.0", + "author": "Sindre Sorhus", + "description": "Strip ANSI escape codes from a string", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/strip-ansi@7.1.0?vcs_url=git%2Bhttps%3A//github.com/chalk/strip-ansi.git", + "externalReferences": [ + { + "url": "https://github.com/chalk/strip-ansi/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "tar", + "version": "6.2.1", + "bom-ref": "tar@npm:6.2.1", + "author": "GitHub Inc.", + "description": "tar for node", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/tar@6.2.1?vcs_url=git%2Bhttps%3A//github.com/isaacs/node-tar.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-tar/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-tar.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-tar#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "tr46", + "version": "0.0.3", + "bom-ref": "tr46@npm:0.0.3", + "author": "Sebastian Mayr", + "description": "An implementation of the Unicode TR46 spec", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/tr46@0.0.3?vcs_url=git%2Bhttps%3A//github.com/Sebmaster/tr46.js.git", + "externalReferences": [ + { + "url": "https://github.com/Sebmaster/tr46.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/Sebmaster/tr46.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Sebmaster/tr46.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "unique-filename", + "version": "3.0.0", + "bom-ref": "unique-filename@npm:3.0.0", + "author": "GitHub Inc.", + "description": "Generate a unique filename for use in temporary directories or caches.", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/unique-filename@3.0.0?vcs_url=git%2Bhttps%3A//github.com/npm/unique-filename.git", + "externalReferences": [ + { + "url": "https://github.com/iarna/unique-filename/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/unique-filename.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/unique-filename", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "unique-slug", + "version": "4.0.0", + "bom-ref": "unique-slug@npm:4.0.0", + "author": "GitHub Inc.", + "description": "Generate a unique character string suitible for use in files and URLs.", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/unique-slug@4.0.0?vcs_url=git%2Bhttps%3A//github.com/npm/unique-slug.git", + "externalReferences": [ + { + "url": "https://github.com/npm/unique-slug/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/unique-slug.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/unique-slug#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "uri-js", + "version": "4.4.1", + "bom-ref": "uri-js@npm:4.4.1", + "author": "Gary Court", + "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/uri-js@4.4.1?vcs_url=git%2Bssh%3A//git%40github.com/garycourt/uri-js.git", + "externalReferences": [ + { + "url": "https://github.com/garycourt/uri-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/garycourt/uri-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/garycourt/uri-js", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "util-deprecate", + "version": "1.0.2", + "bom-ref": "util-deprecate@npm:1.0.2", + "author": "Nathan Rajlich", + "description": "The Node.js `util.deprecate()` function with browser support", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/util-deprecate@1.0.2?vcs_url=git%3A//github.com/TooTallNate/util-deprecate.git", + "externalReferences": [ + { + "url": "https://github.com/TooTallNate/util-deprecate/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "webidl-conversions", + "version": "3.0.1", + "bom-ref": "webidl-conversions@npm:3.0.1", + "author": "Domenic Denicola", + "description": "Implements the WebIDL algorithms for converting to and from JavaScript values", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/webidl-conversions@3.0.1?vcs_url=git%2Bhttps%3A//github.com/jsdom/webidl-conversions.git", + "externalReferences": [ + { + "url": "https://github.com/jsdom/webidl-conversions/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/webidl-conversions.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/webidl-conversions#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "whatwg-url", + "version": "5.0.0", + "bom-ref": "whatwg-url@npm:5.0.0", + "author": "Sebastian Mayr", + "description": "An implementation of the WHATWG URL Standard's URL API and parsing machinery", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/whatwg-url@5.0.0?vcs_url=git%2Bhttps%3A//github.com/jsdom/whatwg-url.git", + "externalReferences": [ + { + "url": "https://github.com/jsdom/whatwg-url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/whatwg-url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/whatwg-url#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "which", + "version": "2.0.2", + "bom-ref": "which@npm:2.0.2", + "author": "Isaac Z. Schlueter", + "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/which@2.0.2?vcs_url=git%3A//github.com/isaacs/node-which.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-which/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/node-which.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-which#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "which", + "version": "4.0.0", + "bom-ref": "which@npm:4.0.0", + "author": "GitHub Inc.", + "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/which@4.0.0?vcs_url=git%2Bhttps%3A//github.com/npm/node-which.git", + "externalReferences": [ + { + "url": "https://github.com/npm/node-which/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-which.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-which#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "wide-align", + "version": "1.1.5", + "bom-ref": "wide-align@npm:1.1.5", + "author": "Rebecca Turner", + "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/wide-align@1.1.5?vcs_url=git%2Bhttps%3A//github.com/iarna/wide-align.git", + "externalReferences": [ + { + "url": "https://github.com/iarna/wide-align/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/wide-align.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/wide-align#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "wrap-ansi", + "version": "7.0.0", + "bom-ref": "wrap-ansi@npm:7.0.0", + "author": "Sindre Sorhus", + "description": "Wordwrap a string with ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/wrap-ansi@7.0.0?vcs_url=git%2Bhttps%3A//github.com/chalk/wrap-ansi.git", + "externalReferences": [ + { + "url": "https://github.com/chalk/wrap-ansi/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/wrap-ansi.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/wrap-ansi#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "wrap-ansi", + "version": "8.1.0", + "bom-ref": "wrap-ansi@npm:8.1.0", + "author": "Sindre Sorhus", + "description": "Wordwrap a string with ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/wrap-ansi@8.1.0?vcs_url=git%2Bhttps%3A//github.com/chalk/wrap-ansi.git", + "externalReferences": [ + { + "url": "https://github.com/chalk/wrap-ansi/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/wrap-ansi.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/wrap-ansi#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "wrappy", + "version": "1.0.2", + "bom-ref": "wrappy@npm:1.0.2", + "author": "Isaac Z. Schlueter", + "description": "Callback wrapping utility", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/wrappy@1.0.2?vcs_url=git%2Bhttps%3A//github.com/npm/wrappy.git", + "externalReferences": [ + { + "url": "https://github.com/npm/wrappy/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/wrappy.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "xmlbuilder2", + "version": "3.1.1", + "bom-ref": "xmlbuilder2@npm:3.1.1", + "author": "Ozgur Ozcitak", + "description": "An XML builder for node.js", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/xmlbuilder2@3.1.1?vcs_url=git%3A//github.com/oozcitak/xmlbuilder2.git", + "externalReferences": [ + { + "url": "http://github.com/oozcitak/xmlbuilder2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/xmlbuilder2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder2", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "yallist", + "version": "4.0.0", + "bom-ref": "yallist@npm:4.0.0", + "author": "Isaac Z. Schlueter", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/yallist@4.0.0?vcs_url=git%2Bhttps%3A//github.com/isaacs/yallist.git", + "externalReferences": [ + { + "url": "https://github.com/isaacs/yallist/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/yallist#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "dependencies": [ + { + "ref": "@cyclonedx/cyclonedx-library@https://github.com/CycloneDX/cyclonedx-javascript-library/releases/download/v6.9.5/cyclonedx-cyclonedx-library-6.9.5.tgz", + "dependsOn": [ + "ajv-formats-draft2019@npm:1.6.1 [265c4]", + "ajv-formats@npm:3.0.1 [265c4]", + "ajv@npm:8.14.0", + "libxmljs2@npm:0.33.0", + "packageurl-js@npm:1.2.1", + "spdx-expression-parse@npm:4.0.0", + "xmlbuilder2@npm:3.1.1" + ] + }, + { + "ref": "@isaacs/cliui@npm:8.0.2", + "dependsOn": [ + "string-width@npm:4.2.3", + "string-width@npm:5.1.2", + "strip-ansi@npm:6.0.1", + "strip-ansi@npm:7.1.0", + "wrap-ansi@npm:7.0.0", + "wrap-ansi@npm:8.1.0" + ] + }, + { + "ref": "@mapbox/node-pre-gyp@npm:1.0.11", + "dependsOn": [ + "detect-libc@npm:2.0.3", + "https-proxy-agent@npm:5.0.1", + "make-dir@npm:3.1.0", + "node-fetch@npm:2.7.0 [5547f]", + "nopt@npm:5.0.0", + "npmlog@npm:5.0.1", + "rimraf@npm:3.0.2", + "semver@npm:7.6.2", + "tar@npm:6.2.1" + ] + }, + { + "ref": "@npmcli/agent@npm:2.2.2", + "dependsOn": [ + "agent-base@npm:7.1.1", + "http-proxy-agent@npm:7.0.2", + "https-proxy-agent@npm:7.0.4", + "lru-cache@npm:10.2.2", + "socks-proxy-agent@npm:8.0.3" + ] + }, + { + "ref": "@npmcli/fs@npm:3.1.1", + "dependsOn": [ + "semver@npm:7.6.2" + ] + }, + { + "ref": "@oozcitak/dom@npm:1.15.10", + "dependsOn": [ + "@oozcitak/infra@npm:1.0.8", + "@oozcitak/url@npm:1.0.4", + "@oozcitak/util@npm:8.3.8" + ] + }, + { + "ref": "@oozcitak/infra@npm:1.0.8", + "dependsOn": [ + "@oozcitak/util@npm:8.3.8" + ] + }, + { + "ref": "@oozcitak/url@npm:1.0.4", + "dependsOn": [ + "@oozcitak/infra@npm:1.0.8", + "@oozcitak/util@npm:8.3.8" + ] + }, + { + "ref": "@oozcitak/util@npm:8.3.8" + }, + { + "ref": "@pkgjs/parseargs@npm:0.11.0" + }, + { + "ref": "abbrev@npm:1.1.1" + }, + { + "ref": "abbrev@npm:2.0.0" + }, + { + "ref": "agent-base@npm:6.0.2", + "dependsOn": [ + "debug@npm:4.3.4 [428f3]" + ] + }, + { + "ref": "agent-base@npm:7.1.1", + "dependsOn": [ + "debug@npm:4.3.4 [428f3]" + ] + }, + { + "ref": "aggregate-error@npm:3.1.0", + "dependsOn": [ + "clean-stack@npm:2.2.0", + "indent-string@npm:4.0.0" + ] + }, + { + "ref": "ajv-formats-draft2019@npm:1.6.1 [265c4]", + "dependsOn": [ + "ajv@npm:8.14.0", + "punycode@npm:2.3.1", + "schemes@npm:1.4.0", + "smtp-address-parser@npm:1.0.10", + "uri-js@npm:4.4.1" + ] + }, + { + "ref": "ajv-formats@npm:3.0.1 [265c4]", + "dependsOn": [ + "ajv@npm:8.14.0" + ] + }, + { + "ref": "ajv@npm:8.14.0", + "dependsOn": [ + "fast-deep-equal@npm:3.1.3", + "json-schema-traverse@npm:1.0.0", + "require-from-string@npm:2.0.2", + "uri-js@npm:4.4.1" + ] + }, + { + "ref": "ansi-regex@npm:5.0.1" + }, + { + "ref": "ansi-regex@npm:6.0.1" + }, + { + "ref": "ansi-styles@npm:4.3.0", + "dependsOn": [ + "color-convert@npm:2.0.1" + ] + }, + { + "ref": "ansi-styles@npm:6.2.1" + }, + { + "ref": "aproba@npm:2.0.0" + }, + { + "ref": "are-we-there-yet@npm:2.0.0", + "dependsOn": [ + "delegates@npm:1.0.0", + "readable-stream@npm:3.6.2" + ] + }, + { + "ref": "argparse@npm:1.0.10", + "dependsOn": [ + "sprintf-js@npm:1.0.3" + ] + }, + { + "ref": "balanced-match@npm:1.0.2" + }, + { + "ref": "bindings@npm:1.5.0", + "dependsOn": [ + "file-uri-to-path@npm:1.0.0" + ] + }, + { + "ref": "brace-expansion@npm:1.1.11", + "dependsOn": [ + "balanced-match@npm:1.0.2", + "concat-map@npm:0.0.1" + ] + }, + { + "ref": "brace-expansion@npm:2.0.1", + "dependsOn": [ + "balanced-match@npm:1.0.2" + ] + }, + { + "ref": "cacache@npm:18.0.3", + "dependsOn": [ + "@npmcli/fs@npm:3.1.1", + "fs-minipass@npm:3.0.3", + "glob@npm:10.4.1", + "lru-cache@npm:10.2.2", + "minipass-collect@npm:2.0.1", + "minipass-flush@npm:1.0.5", + "minipass-pipeline@npm:1.2.4", + "minipass@npm:7.1.2", + "p-map@npm:4.0.0", + "ssri@npm:10.0.6", + "tar@npm:6.2.1", + "unique-filename@npm:3.0.0" + ] + }, + { + "ref": "chownr@npm:2.0.0" + }, + { + "ref": "clean-stack@npm:2.2.0" + }, + { + "ref": "color-convert@npm:2.0.1", + "dependsOn": [ + "color-name@npm:1.1.4" + ] + }, + { + "ref": "color-name@npm:1.1.4" + }, + { + "ref": "color-support@npm:1.1.3" + }, + { + "ref": "commander@npm:2.20.3" + }, + { + "ref": "concat-map@npm:0.0.1" + }, + { + "ref": "console-control-strings@npm:1.1.0" + }, + { + "ref": "cross-spawn@npm:7.0.3", + "dependsOn": [ + "path-key@npm:3.1.1", + "shebang-command@npm:2.0.0", + "which@npm:2.0.2" + ] + }, + { + "ref": "debug@npm:4.3.4 [428f3]", + "dependsOn": [ + "ms@npm:2.1.2" + ] + }, + { + "ref": "delegates@npm:1.0.0" + }, + { + "ref": "detect-libc@npm:2.0.3" + }, + { + "ref": "discontinuous-range@npm:1.0.0" + }, + { + "ref": "eastasianwidth@npm:0.2.0" + }, + { + "ref": "emoji-regex@npm:8.0.0" + }, + { + "ref": "emoji-regex@npm:9.2.2" + }, + { + "ref": "encoding@npm:0.1.13", + "dependsOn": [ + "iconv-lite@npm:0.6.3" + ] + }, + { + "ref": "env-paths@npm:2.2.1" + }, + { + "ref": "err-code@npm:2.0.3" + }, + { + "ref": "esprima@npm:4.0.1" + }, + { + "ref": "exponential-backoff@npm:3.1.1" + }, + { + "ref": "extend@npm:3.0.2" + }, + { + "ref": "fast-deep-equal@npm:3.1.3" + }, + { + "ref": "file-uri-to-path@npm:1.0.0" + }, + { + "ref": "foreground-child@npm:3.1.1", + "dependsOn": [ + "cross-spawn@npm:7.0.3", + "signal-exit@npm:4.1.0" + ] + }, + { + "ref": "fs-minipass@npm:2.1.0", + "dependsOn": [ + "minipass@npm:3.3.6" + ] + }, + { + "ref": "fs-minipass@npm:3.0.3", + "dependsOn": [ + "minipass@npm:7.1.2" + ] + }, + { + "ref": "fs.realpath@npm:1.0.0" + }, + { + "ref": "gauge@npm:3.0.2", + "dependsOn": [ + "aproba@npm:2.0.0", + "color-support@npm:1.1.3", + "console-control-strings@npm:1.1.0", + "has-unicode@npm:2.0.1", + "object-assign@npm:4.1.1", + "signal-exit@npm:3.0.7", + "string-width@npm:4.2.3", + "strip-ansi@npm:6.0.1", + "wide-align@npm:1.1.5" + ] + }, + { + "ref": "github-protocol-dependency@workspace:.", + "dependsOn": [ + "@cyclonedx/cyclonedx-library@https://github.com/CycloneDX/cyclonedx-javascript-library/releases/download/v6.9.5/cyclonedx-cyclonedx-library-6.9.5.tgz" + ] + }, + { + "ref": "glob@npm:10.4.1", + "dependsOn": [ + "foreground-child@npm:3.1.1", + "jackspeak@npm:3.1.2", + "minimatch@npm:9.0.4", + "minipass@npm:7.1.2", + "path-scurry@npm:1.11.1" + ] + }, + { + "ref": "glob@npm:7.2.3", + "dependsOn": [ + "fs.realpath@npm:1.0.0", + "inflight@npm:1.0.6", + "inherits@npm:2.0.4", + "minimatch@npm:3.1.2", + "once@npm:1.4.0", + "path-is-absolute@npm:1.0.1" + ] + }, + { + "ref": "graceful-fs@npm:4.2.11" + }, + { + "ref": "has-unicode@npm:2.0.1" + }, + { + "ref": "http-cache-semantics@npm:4.1.1" + }, + { + "ref": "http-proxy-agent@npm:7.0.2", + "dependsOn": [ + "agent-base@npm:7.1.1", + "debug@npm:4.3.4 [428f3]" + ] + }, + { + "ref": "https-proxy-agent@npm:5.0.1", + "dependsOn": [ + "agent-base@npm:6.0.2", + "debug@npm:4.3.4 [428f3]" + ] + }, + { + "ref": "https-proxy-agent@npm:7.0.4", + "dependsOn": [ + "agent-base@npm:7.1.1", + "debug@npm:4.3.4 [428f3]" + ] + }, + { + "ref": "iconv-lite@npm:0.6.3", + "dependsOn": [ + "safer-buffer@npm:2.1.2" + ] + }, + { + "ref": "imurmurhash@npm:0.1.4" + }, + { + "ref": "indent-string@npm:4.0.0" + }, + { + "ref": "inflight@npm:1.0.6", + "dependsOn": [ + "once@npm:1.4.0", + "wrappy@npm:1.0.2" + ] + }, + { + "ref": "inherits@npm:2.0.4" + }, + { + "ref": "ip-address@npm:9.0.5", + "dependsOn": [ + "jsbn@npm:1.1.0", + "sprintf-js@npm:1.1.3" + ] + }, + { + "ref": "is-fullwidth-code-point@npm:3.0.0" + }, + { + "ref": "is-lambda@npm:1.0.1" + }, + { + "ref": "isexe@npm:2.0.0" + }, + { + "ref": "isexe@npm:3.1.1" + }, + { + "ref": "jackspeak@npm:3.1.2", + "dependsOn": [ + "@isaacs/cliui@npm:8.0.2", + "@pkgjs/parseargs@npm:0.11.0" + ] + }, + { + "ref": "js-yaml@npm:3.14.1", + "dependsOn": [ + "argparse@npm:1.0.10", + "esprima@npm:4.0.1" + ] + }, + { + "ref": "jsbn@npm:1.1.0" + }, + { + "ref": "json-schema-traverse@npm:1.0.0" + }, + { + "ref": "libxmljs2@npm:0.33.0", + "dependsOn": [ + "@mapbox/node-pre-gyp@npm:1.0.11", + "bindings@npm:1.5.0", + "nan@npm:2.18.0" + ] + }, + { + "ref": "lru-cache@npm:10.2.2" + }, + { + "ref": "make-dir@npm:3.1.0", + "dependsOn": [ + "semver@npm:6.3.1" + ] + }, + { + "ref": "make-fetch-happen@npm:13.0.1", + "dependsOn": [ + "@npmcli/agent@npm:2.2.2", + "cacache@npm:18.0.3", + "http-cache-semantics@npm:4.1.1", + "is-lambda@npm:1.0.1", + "minipass-fetch@npm:3.0.5", + "minipass-flush@npm:1.0.5", + "minipass-pipeline@npm:1.2.4", + "minipass@npm:7.1.2", + "negotiator@npm:0.6.3", + "proc-log@npm:4.2.0", + "promise-retry@npm:2.0.1", + "ssri@npm:10.0.6" + ] + }, + { + "ref": "minimatch@npm:3.1.2", + "dependsOn": [ + "brace-expansion@npm:1.1.11" + ] + }, + { + "ref": "minimatch@npm:9.0.4", + "dependsOn": [ + "brace-expansion@npm:2.0.1" + ] + }, + { + "ref": "minipass-collect@npm:2.0.1", + "dependsOn": [ + "minipass@npm:7.1.2" + ] + }, + { + "ref": "minipass-fetch@npm:3.0.5", + "dependsOn": [ + "encoding@npm:0.1.13", + "minipass-sized@npm:1.0.3", + "minipass@npm:7.1.2", + "minizlib@npm:2.1.2" + ] + }, + { + "ref": "minipass-flush@npm:1.0.5", + "dependsOn": [ + "minipass@npm:3.3.6" + ] + }, + { + "ref": "minipass-pipeline@npm:1.2.4", + "dependsOn": [ + "minipass@npm:3.3.6" + ] + }, + { + "ref": "minipass-sized@npm:1.0.3", + "dependsOn": [ + "minipass@npm:3.3.6" + ] + }, + { + "ref": "minipass@npm:3.3.6", + "dependsOn": [ + "yallist@npm:4.0.0" + ] + }, + { + "ref": "minipass@npm:5.0.0" + }, + { + "ref": "minipass@npm:7.1.2" + }, + { + "ref": "minizlib@npm:2.1.2", + "dependsOn": [ + "minipass@npm:3.3.6", + "yallist@npm:4.0.0" + ] + }, + { + "ref": "mkdirp@npm:1.0.4" + }, + { + "ref": "moo@npm:0.5.2" + }, + { + "ref": "ms@npm:2.1.2" + }, + { + "ref": "nan@npm:2.18.0", + "dependsOn": [ + "node-gyp@npm:10.1.0" + ] + }, + { + "ref": "nearley@npm:2.20.1", + "dependsOn": [ + "commander@npm:2.20.3", + "moo@npm:0.5.2", + "railroad-diagrams@npm:1.0.0", + "randexp@npm:0.4.6" + ] + }, + { + "ref": "negotiator@npm:0.6.3" + }, + { + "ref": "node-fetch@npm:2.7.0 [5547f]", + "dependsOn": [ + "whatwg-url@npm:5.0.0" + ] + }, + { + "ref": "node-gyp@npm:10.1.0", + "dependsOn": [ + "env-paths@npm:2.2.1", + "exponential-backoff@npm:3.1.1", + "glob@npm:10.4.1", + "graceful-fs@npm:4.2.11", + "make-fetch-happen@npm:13.0.1", + "nopt@npm:7.2.1", + "proc-log@npm:3.0.0", + "semver@npm:7.6.2", + "tar@npm:6.2.1", + "which@npm:4.0.0" + ] + }, + { + "ref": "nopt@npm:5.0.0", + "dependsOn": [ + "abbrev@npm:1.1.1" + ] + }, + { + "ref": "nopt@npm:7.2.1", + "dependsOn": [ + "abbrev@npm:2.0.0" + ] + }, + { + "ref": "npmlog@npm:5.0.1", + "dependsOn": [ + "are-we-there-yet@npm:2.0.0", + "console-control-strings@npm:1.1.0", + "gauge@npm:3.0.2", + "set-blocking@npm:2.0.0" + ] + }, + { + "ref": "object-assign@npm:4.1.1" + }, + { + "ref": "once@npm:1.4.0", + "dependsOn": [ + "wrappy@npm:1.0.2" + ] + }, + { + "ref": "p-map@npm:4.0.0", + "dependsOn": [ + "aggregate-error@npm:3.1.0" + ] + }, + { + "ref": "packageurl-js@npm:1.2.1" + }, + { + "ref": "path-is-absolute@npm:1.0.1" + }, + { + "ref": "path-key@npm:3.1.1" + }, + { + "ref": "path-scurry@npm:1.11.1", + "dependsOn": [ + "lru-cache@npm:10.2.2", + "minipass@npm:7.1.2" + ] + }, + { + "ref": "proc-log@npm:3.0.0" + }, + { + "ref": "proc-log@npm:4.2.0" + }, + { + "ref": "promise-retry@npm:2.0.1", + "dependsOn": [ + "err-code@npm:2.0.3", + "retry@npm:0.12.0" + ] + }, + { + "ref": "punycode@npm:2.3.1" + }, + { + "ref": "railroad-diagrams@npm:1.0.0" + }, + { + "ref": "randexp@npm:0.4.6", + "dependsOn": [ + "discontinuous-range@npm:1.0.0", + "ret@npm:0.1.15" + ] + }, + { + "ref": "readable-stream@npm:3.6.2", + "dependsOn": [ + "inherits@npm:2.0.4", + "string_decoder@npm:1.3.0", + "util-deprecate@npm:1.0.2" + ] + }, + { + "ref": "require-from-string@npm:2.0.2" + }, + { + "ref": "ret@npm:0.1.15" + }, + { + "ref": "retry@npm:0.12.0" + }, + { + "ref": "rimraf@npm:3.0.2", + "dependsOn": [ + "glob@npm:7.2.3" + ] + }, + { + "ref": "safe-buffer@npm:5.2.1" + }, + { + "ref": "safer-buffer@npm:2.1.2" + }, + { + "ref": "schemes@npm:1.4.0", + "dependsOn": [ + "extend@npm:3.0.2" + ] + }, + { + "ref": "semver@npm:6.3.1" + }, + { + "ref": "semver@npm:7.6.2" + }, + { + "ref": "set-blocking@npm:2.0.0" + }, + { + "ref": "shebang-command@npm:2.0.0", + "dependsOn": [ + "shebang-regex@npm:3.0.0" + ] + }, + { + "ref": "shebang-regex@npm:3.0.0" + }, + { + "ref": "signal-exit@npm:3.0.7" + }, + { + "ref": "signal-exit@npm:4.1.0" + }, + { + "ref": "smart-buffer@npm:4.2.0" + }, + { + "ref": "smtp-address-parser@npm:1.0.10", + "dependsOn": [ + "nearley@npm:2.20.1" + ] + }, + { + "ref": "socks-proxy-agent@npm:8.0.3", + "dependsOn": [ + "agent-base@npm:7.1.1", + "debug@npm:4.3.4 [428f3]", + "socks@npm:2.8.3" + ] + }, + { + "ref": "socks@npm:2.8.3", + "dependsOn": [ + "ip-address@npm:9.0.5", + "smart-buffer@npm:4.2.0" + ] + }, + { + "ref": "spdx-exceptions@npm:2.5.0" + }, + { + "ref": "spdx-expression-parse@npm:4.0.0", + "dependsOn": [ + "spdx-exceptions@npm:2.5.0", + "spdx-license-ids@npm:3.0.18" + ] + }, + { + "ref": "spdx-license-ids@npm:3.0.18" + }, + { + "ref": "sprintf-js@npm:1.0.3" + }, + { + "ref": "sprintf-js@npm:1.1.3" + }, + { + "ref": "ssri@npm:10.0.6", + "dependsOn": [ + "minipass@npm:7.1.2" + ] + }, + { + "ref": "string_decoder@npm:1.3.0", + "dependsOn": [ + "safe-buffer@npm:5.2.1" + ] + }, + { + "ref": "string-width@npm:4.2.3", + "dependsOn": [ + "emoji-regex@npm:8.0.0", + "is-fullwidth-code-point@npm:3.0.0", + "strip-ansi@npm:6.0.1" + ] + }, + { + "ref": "string-width@npm:5.1.2", + "dependsOn": [ + "eastasianwidth@npm:0.2.0", + "emoji-regex@npm:9.2.2", + "strip-ansi@npm:7.1.0" + ] + }, + { + "ref": "strip-ansi@npm:6.0.1", + "dependsOn": [ + "ansi-regex@npm:5.0.1" + ] + }, + { + "ref": "strip-ansi@npm:7.1.0", + "dependsOn": [ + "ansi-regex@npm:6.0.1" + ] + }, + { + "ref": "tar@npm:6.2.1", + "dependsOn": [ + "chownr@npm:2.0.0", + "fs-minipass@npm:2.1.0", + "minipass@npm:5.0.0", + "minizlib@npm:2.1.2", + "mkdirp@npm:1.0.4", + "yallist@npm:4.0.0" + ] + }, + { + "ref": "tr46@npm:0.0.3" + }, + { + "ref": "unique-filename@npm:3.0.0", + "dependsOn": [ + "unique-slug@npm:4.0.0" + ] + }, + { + "ref": "unique-slug@npm:4.0.0", + "dependsOn": [ + "imurmurhash@npm:0.1.4" + ] + }, + { + "ref": "uri-js@npm:4.4.1", + "dependsOn": [ + "punycode@npm:2.3.1" + ] + }, + { + "ref": "util-deprecate@npm:1.0.2" + }, + { + "ref": "webidl-conversions@npm:3.0.1" + }, + { + "ref": "whatwg-url@npm:5.0.0", + "dependsOn": [ + "tr46@npm:0.0.3", + "webidl-conversions@npm:3.0.1" + ] + }, + { + "ref": "which@npm:2.0.2", + "dependsOn": [ + "isexe@npm:2.0.0" + ] + }, + { + "ref": "which@npm:4.0.0", + "dependsOn": [ + "isexe@npm:3.1.1" + ] + }, + { + "ref": "wide-align@npm:1.1.5", + "dependsOn": [ + "string-width@npm:4.2.3" + ] + }, + { + "ref": "wrap-ansi@npm:7.0.0", + "dependsOn": [ + "ansi-styles@npm:4.3.0", + "string-width@npm:4.2.3", + "strip-ansi@npm:6.0.1" + ] + }, + { + "ref": "wrap-ansi@npm:8.1.0", + "dependsOn": [ + "ansi-styles@npm:6.2.1", + "string-width@npm:5.1.2", + "strip-ansi@npm:7.1.0" + ] + }, + { + "ref": "wrappy@npm:1.0.2" + }, + { + "ref": "xmlbuilder2@npm:3.1.1", + "dependsOn": [ + "@oozcitak/dom@npm:1.15.10", + "@oozcitak/infra@npm:1.0.8", + "@oozcitak/util@npm:8.3.8", + "js-yaml@npm:3.14.1" + ] + }, + { + "ref": "yallist@npm:4.0.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/snapshots/plain_http-protocol-dependency.xml.bin b/tests/_data/snapshots/plain_http-protocol-dependency.xml.bin new file mode 100644 index 00000000..63f4470c --- /dev/null +++ b/tests/_data/snapshots/plain_http-protocol-dependency.xml.bin @@ -0,0 +1,4837 @@ + + + + + + @cyclonedx + cyclonedx-library + libVersion-testing + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + @cyclonedx + yarn-plugin-cyclonedx + thisVersion-testing + + + https://github.com/CycloneDX/cyclonedx-node-yarn/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-node-yarn.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-node-yarn#readme + as detected from PackageJson property "homepage" + + + + + + github-protocol-dependency + 0.0.0 + demo: github-protocol-dependency -- showcase how install via github protocol looks like + + + Apache-2.0 + + + pkg:npm/github-protocol-dependency@0.0.0 + + + true + + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.9.5 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.9.5?download_url=https%3A//github.com/CycloneDX/cyclonedx-javascript-library/releases/download/v6.9.5/cyclonedx-cyclonedx-library-6.9.5.tgz + + + https://github.com/CycloneDX/cyclonedx-javascript-library/releases/download/v6.9.5/cyclonedx-cyclonedx-library-6.9.5.tgz + as detected from YarnLocator property "reference" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + Ben Coe + @isaacs + cliui + 8.0.2 + easily create complex multi-column command-line-interfaces + + + ISC + + + pkg:npm/%40isaacs/cliui@8.0.2?vcs_url=git%2Bhttps%3A//github.com/yargs/cliui.git + + + https://github.com/yargs/cliui/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/yargs/cliui.git + as detected from PackageJson property "repository.url" + + + https://github.com/yargs/cliui#readme + as detected from PackageJson property "homepage" + + + + + Dane Springmeyer + @mapbox + node-pre-gyp + 1.0.11 + Node.js native addon binary install tool + + + BSD-3-Clause + + + pkg:npm/%40mapbox/node-pre-gyp@1.0.11?vcs_url=git%3A//github.com/mapbox/node-pre-gyp.git + + + https://github.com/mapbox/node-pre-gyp/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/mapbox/node-pre-gyp.git + as detected from PackageJson property "repository.url" + + + https://github.com/mapbox/node-pre-gyp#readme + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + @npmcli + agent + 2.2.2 + the http/https agent used by the npm cli + + + ISC + + + pkg:npm/%40npmcli/agent@2.2.2?vcs_url=git%2Bhttps%3A//github.com/npm/agent.git + + + https://github.com/npm/agent/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/agent.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/agent#readme + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + @npmcli + fs + 3.1.1 + filesystem utilities for the npm cli + + + ISC + + + pkg:npm/%40npmcli/fs@3.1.1?vcs_url=git%2Bhttps%3A//github.com/npm/fs.git + + + https://github.com/npm/fs/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/fs.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/fs#readme + as detected from PackageJson property "homepage" + + + + + Ozgur Ozcitak + @oozcitak + dom + 1.15.10 + A modern DOM implementation + + + MIT + + + pkg:npm/%40oozcitak/dom@1.15.10?vcs_url=git%3A//github.com/oozcitak/dom.git + + + http://github.com/oozcitak/dom/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/dom.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/dom + as detected from PackageJson property "homepage" + + + + + Ozgur Ozcitak + @oozcitak + infra + 1.0.8 + An implementation of the Infra Living Standard + + + MIT + + + pkg:npm/%40oozcitak/infra@1.0.8?vcs_url=git%2Bhttps%3A//github.com/oozcitak/infra.git + + + http://github.com/oozcitak/infra/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/infra.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/infra + as detected from PackageJson property "homepage" + + + + + Ozgur Ozcitak + @oozcitak + url + 1.0.4 + An implementation of the URL Living Standard + + + MIT + + + pkg:npm/%40oozcitak/url@1.0.4?vcs_url=git%2Bhttps%3A//github.com/oozcitak/url.git + + + http://github.com/oozcitak/url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/url.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/url + as detected from PackageJson property "homepage" + + + + + Ozgur Ozcitak + @oozcitak + util + 8.3.8 + Utility functions + + + MIT + + + pkg:npm/%40oozcitak/util@8.3.8?vcs_url=git%3A//github.com/oozcitak/util.git + + + http://github.com/oozcitak/util/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/util.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/util + as detected from PackageJson property "homepage" + + + + + @pkgjs + parseargs + 0.11.0 + Polyfill of future proposal for `util.parseArgs()` + + + MIT + + + pkg:npm/%40pkgjs/parseargs@0.11.0?vcs_url=git%2Bssh%3A//git%40github.com/pkgjs/parseargs.git + + + https://github.com/pkgjs/parseargs/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/pkgjs/parseargs.git + as detected from PackageJson property "repository.url" + + + https://github.com/pkgjs/parseargs#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + abbrev + 1.1.1 + Like ruby's abbrev module, but in js + + + ISC + + + pkg:npm/abbrev@1.1.1?vcs_url=git%2Bssh%3A//git%40github.com/isaacs/abbrev-js.git + + + https://github.com/isaacs/abbrev-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/isaacs/abbrev-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/abbrev-js#readme + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + abbrev + 2.0.0 + Like ruby's abbrev module, but in js + + + ISC + + + pkg:npm/abbrev@2.0.0?vcs_url=git%2Bhttps%3A//github.com/npm/abbrev-js.git + + + https://github.com/npm/abbrev-js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/abbrev-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/abbrev-js#readme + as detected from PackageJson property "homepage" + + + + + Nathan Rajlich + agent-base + 6.0.2 + Turn a function into an `http.Agent` instance + + + MIT + + + pkg:npm/agent-base@6.0.2?vcs_url=git%3A//github.com/TooTallNate/node-agent-base.git + + + https://github.com/TooTallNate/node-agent-base/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-agent-base.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-agent-base#readme + as detected from PackageJson property "homepage" + + + + + Nathan Rajlich + agent-base + 7.1.1 + Turn a function into an `http.Agent` instance + + + MIT + + + pkg:npm/agent-base@7.1.1?vcs_url=git%2Bhttps%3A//github.com/TooTallNate/proxy-agents.git#packages/agent-base + + + https://github.com/TooTallNate/proxy-agents/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/TooTallNate/proxy-agents.git#packages/agent-base + as detected from PackageJson property "repository.url" and "repository.directory" + + + https://github.com/TooTallNate/proxy-agents#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + aggregate-error + 3.1.0 + Create an error from multiple errors + + + MIT + + + pkg:npm/aggregate-error@3.1.0?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/aggregate-error.git + + + https://github.com/sindresorhus/aggregate-error/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/aggregate-error.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/aggregate-error#readme + as detected from PackageJson property "homepage" + + + + + Carlo Quinonez + ajv-formats-draft2019 + 1.6.1 + Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema. + + + MIT + + + pkg:npm/ajv-formats-draft2019@1.6.1?vcs_url=git%2Bhttps%3A//github.com/luzlab/ajv-formats-draft2019.git + + + https://github.com/luzlab/ajv-formats-draft2019/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/luzlab/ajv-formats-draft2019.git + as detected from PackageJson property "repository.url" + + + https://github.com/luzlab/ajv-formats-draft2019#readme + as detected from PackageJson property "homepage" + + + + + Evgeny Poberezkin + ajv-formats + 3.0.1 + Format validation for Ajv v7+ + + + MIT + + + pkg:npm/ajv-formats@3.0.1?vcs_url=git%2Bhttps%3A//github.com/ajv-validator/ajv-formats.git + + + https://github.com/ajv-validator/ajv-formats/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv-formats.git + as detected from PackageJson property "repository.url" + + + https://github.com/ajv-validator/ajv-formats#readme + as detected from PackageJson property "homepage" + + + + + Evgeny Poberezkin + ajv + 8.14.0 + Another JSON Schema Validator + + + MIT + + + pkg:npm/ajv@8.14.0?vcs_url=git%2Bhttps%3A//github.com/ajv-validator/ajv.git + + + https://github.com/ajv-validator/ajv/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv.git + as detected from PackageJson property "repository.url" + + + https://ajv.js.org + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + ansi-regex + 5.0.1 + Regular expression for matching ANSI escape codes + + + MIT + + + pkg:npm/ansi-regex@5.0.1?vcs_url=git%2Bhttps%3A//github.com/chalk/ansi-regex.git + + + https://github.com/chalk/ansi-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/ansi-regex.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/ansi-regex#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + ansi-regex + 6.0.1 + Regular expression for matching ANSI escape codes + + + MIT + + + pkg:npm/ansi-regex@6.0.1?vcs_url=git%2Bhttps%3A//github.com/chalk/ansi-regex.git + + + https://github.com/chalk/ansi-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/ansi-regex.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/ansi-regex#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + ansi-styles + 4.3.0 + ANSI escape codes for styling strings in the terminal + + + MIT + + + pkg:npm/ansi-styles@4.3.0?vcs_url=git%2Bhttps%3A//github.com/chalk/ansi-styles.git + + + https://github.com/chalk/ansi-styles/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/ansi-styles.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/ansi-styles#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + ansi-styles + 6.2.1 + ANSI escape codes for styling strings in the terminal + + + MIT + + + pkg:npm/ansi-styles@6.2.1?vcs_url=git%2Bhttps%3A//github.com/chalk/ansi-styles.git + + + https://github.com/chalk/ansi-styles/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/ansi-styles.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/ansi-styles#readme + as detected from PackageJson property "homepage" + + + + + Rebecca Turner + aproba + 2.0.0 + A ridiculously light-weight argument validator (now browser friendly) + + + ISC + + + pkg:npm/aproba@2.0.0?vcs_url=git%2Bhttps%3A//github.com/iarna/aproba.git + + + https://github.com/iarna/aproba/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/aproba.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/aproba + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + are-we-there-yet + 2.0.0 + Keep track of the overall completion of many disparate processes + + + ISC + + + pkg:npm/are-we-there-yet@2.0.0?vcs_url=git%2Bhttps%3A//github.com/npm/are-we-there-yet.git + + + https://github.com/npm/are-we-there-yet/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/are-we-there-yet.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/are-we-there-yet + as detected from PackageJson property "homepage" + + + + + argparse + 1.0.10 + Very powerful CLI arguments parser. Native port of argparse - python's options parsing library + + + MIT + + + pkg:npm/argparse@1.0.10?vcs_url=git%2Bhttps%3A//github.com/nodeca/argparse.git + + + https://github.com/nodeca/argparse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/argparse.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/argparse#readme + as detected from PackageJson property "homepage" + + + + + Julian Gruber + balanced-match + 1.0.2 + Match balanced character pairs, like "{" and "}" + + + MIT + + + pkg:npm/balanced-match@1.0.2?vcs_url=git%3A//github.com/juliangruber/balanced-match.git + + + https://github.com/juliangruber/balanced-match/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/balanced-match.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/balanced-match + as detected from PackageJson property "homepage" + + + + + Nathan Rajlich + bindings + 1.5.0 + Helper module for loading your native module's .node file + + + MIT + + + pkg:npm/bindings@1.5.0?vcs_url=git%3A//github.com/TooTallNate/node-bindings.git + + + https://github.com/TooTallNate/node-bindings/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-bindings.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-bindings + as detected from PackageJson property "homepage" + + + + + Julian Gruber + brace-expansion + 1.1.11 + Brace expansion as known from sh/bash + + + MIT + + + pkg:npm/brace-expansion@1.1.11?vcs_url=git%3A//github.com/juliangruber/brace-expansion.git + + + https://github.com/juliangruber/brace-expansion/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/brace-expansion.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/brace-expansion + as detected from PackageJson property "homepage" + + + + + Julian Gruber + brace-expansion + 2.0.1 + Brace expansion as known from sh/bash + + + MIT + + + pkg:npm/brace-expansion@2.0.1?vcs_url=git%3A//github.com/juliangruber/brace-expansion.git + + + https://github.com/juliangruber/brace-expansion/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/brace-expansion.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/brace-expansion + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + cacache + 18.0.3 + Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache. + + + ISC + + + pkg:npm/cacache@18.0.3?vcs_url=git%2Bhttps%3A//github.com/npm/cacache.git + + + https://github.com/npm/cacache/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/cacache.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/cacache#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + chownr + 2.0.0 + like `chown -R` + + + ISC + + + pkg:npm/chownr@2.0.0?vcs_url=git%3A//github.com/isaacs/chownr.git + + + https://github.com/isaacs/chownr/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/chownr.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/chownr#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + clean-stack + 2.2.0 + Clean up error stack traces + + + MIT + + + pkg:npm/clean-stack@2.2.0?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/clean-stack.git + + + https://github.com/sindresorhus/clean-stack/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/clean-stack.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/clean-stack#readme + as detected from PackageJson property "homepage" + + + + + Heather Arthur + color-convert + 2.0.1 + Plain color conversion functions + + + MIT + + + pkg:npm/color-convert@2.0.1?vcs_url=git%2Bhttps%3A//github.com/Qix-/color-convert.git + + + https://github.com/Qix-/color-convert/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/Qix-/color-convert.git + as detected from PackageJson property "repository.url" + + + https://github.com/Qix-/color-convert#readme + as detected from PackageJson property "homepage" + + + + + DY + color-name + 1.1.4 + A list of color names and its values + + + MIT + + + pkg:npm/color-name@1.1.4?vcs_url=git%2Bssh%3A//git%40github.com/colorjs/color-name.git + + + https://github.com/colorjs/color-name/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/colorjs/color-name.git + as detected from PackageJson property "repository.url" + + + https://github.com/colorjs/color-name + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + color-support + 1.1.3 + A module which will endeavor to guess your terminal's level of color support. + + + ISC + + + pkg:npm/color-support@1.1.3?vcs_url=git%2Bhttps%3A//github.com/isaacs/color-support.git + + + https://github.com/isaacs/color-support/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/color-support.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/color-support#readme + as detected from PackageJson property "homepage" + + + + + TJ Holowaychuk + commander + 2.20.3 + the complete solution for node.js command-line programs + + + MIT + + + pkg:npm/commander@2.20.3?vcs_url=git%2Bhttps%3A//github.com/tj/commander.js.git + + + https://github.com/tj/commander.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tj/commander.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/tj/commander.js#readme + as detected from PackageJson property "homepage" + + + + + James Halliday + concat-map + 0.0.1 + concatenative mapdashery + + + MIT + + + pkg:npm/concat-map@0.0.1?vcs_url=git%3A//github.com/substack/node-concat-map.git + + + https://github.com/substack/node-concat-map/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/substack/node-concat-map.git + as detected from PackageJson property "repository.url" + + + https://github.com/substack/node-concat-map#readme + as detected from PackageJson property "homepage" + + + + + Rebecca Turner + console-control-strings + 1.1.0 + A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted. + + + ISC + + + pkg:npm/console-control-strings@1.1.0?vcs_url=git%2Bhttps%3A//github.com/iarna/console-control-strings.git + + + https://github.com/iarna/console-control-strings/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/console-control-strings.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/console-control-strings#readme + as detected from PackageJson property "homepage" + + + + + André Cruz + cross-spawn + 7.0.3 + Cross platform child_process#spawn and child_process#spawnSync + + + MIT + + + pkg:npm/cross-spawn@7.0.3?vcs_url=git%2Bssh%3A//git%40github.com/moxystudio/node-cross-spawn.git + + + https://github.com/moxystudio/node-cross-spawn/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/moxystudio/node-cross-spawn.git + as detected from PackageJson property "repository.url" + + + https://github.com/moxystudio/node-cross-spawn + as detected from PackageJson property "homepage" + + + + + Josh Junon + debug + 4.3.4 + Lightweight debugging utility for Node.js and the browser + + + MIT + + + pkg:npm/debug@4.3.4?vcs_url=git%3A//github.com/debug-js/debug.git + + + https://github.com/debug-js/debug/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/debug-js/debug.git + as detected from PackageJson property "repository.url" + + + https://github.com/debug-js/debug#readme + as detected from PackageJson property "homepage" + + + + + delegates + 1.0.0 + delegate methods and accessors to another property + + + MIT + + + pkg:npm/delegates@1.0.0?vcs_url=git%2Bhttps%3A//github.com/visionmedia/node-delegates.git + + + https://github.com/visionmedia/node-delegates/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/visionmedia/node-delegates.git + as detected from PackageJson property "repository.url" + + + https://github.com/visionmedia/node-delegates#readme + as detected from PackageJson property "homepage" + + + + + Lovell Fuller + detect-libc + 2.0.3 + Node.js module to detect the C standard library (libc) implementation family and version + + + Apache-2.0 + + + pkg:npm/detect-libc@2.0.3?vcs_url=git%3A//github.com/lovell/detect-libc.git + + + https://github.com/lovell/detect-libc/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/lovell/detect-libc.git + as detected from PackageJson property "repository.url" + + + https://github.com/lovell/detect-libc#readme + as detected from PackageJson property "homepage" + + + + + David Tudury + discontinuous-range + 1.0.0 + for adding, subtracting, and indexing discontinuous ranges of numbers + + + MIT + + + pkg:npm/discontinuous-range@1.0.0?vcs_url=git%2Bhttps%3A//github.com/dtudury/discontinuous-range.git + + + https://github.com/dtudury/discontinuous-range/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/dtudury/discontinuous-range.git + as detected from PackageJson property "repository.url" + + + https://github.com/dtudury/discontinuous-range + as detected from PackageJson property "homepage" + + + + + Masaki Komagata + eastasianwidth + 0.2.0 + Get East Asian Width from a character. + + + MIT + + + pkg:npm/eastasianwidth@0.2.0?vcs_url=git%3A//github.com/komagata/eastasianwidth.git + + + https://github.com/komagata/eastasianwidth/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/komagata/eastasianwidth.git + as detected from PackageJson property "repository.url" + + + https://github.com/komagata/eastasianwidth#readme + as detected from PackageJson property "homepage" + + + + + Mathias Bynens + emoji-regex + 8.0.0 + A regular expression to match all Emoji-only symbols as per the Unicode Standard. + + + MIT + + + pkg:npm/emoji-regex@8.0.0?vcs_url=git%2Bhttps%3A//github.com/mathiasbynens/emoji-regex.git + + + https://github.com/mathiasbynens/emoji-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/emoji-regex.git + as detected from PackageJson property "repository.url" + + + https://mths.be/emoji-regex + as detected from PackageJson property "homepage" + + + + + Mathias Bynens + emoji-regex + 9.2.2 + A regular expression to match all Emoji-only symbols as per the Unicode Standard. + + + MIT + + + pkg:npm/emoji-regex@9.2.2?vcs_url=git%2Bhttps%3A//github.com/mathiasbynens/emoji-regex.git + + + https://github.com/mathiasbynens/emoji-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/emoji-regex.git + as detected from PackageJson property "repository.url" + + + https://mths.be/emoji-regex + as detected from PackageJson property "homepage" + + + + + Andris Reinman + encoding + 0.1.13 + Convert encodings, uses iconv-lite + + + MIT + + + pkg:npm/encoding@0.1.13?vcs_url=git%2Bhttps%3A//github.com/andris9/encoding.git + + + https://github.com/andris9/encoding/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/andris9/encoding.git + as detected from PackageJson property "repository.url" + + + https://github.com/andris9/encoding#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + env-paths + 2.2.1 + Get paths for storing things like data, config, cache, etc + + + MIT + + + pkg:npm/env-paths@2.2.1?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/env-paths.git + + + https://github.com/sindresorhus/env-paths/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/env-paths.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/env-paths#readme + as detected from PackageJson property "homepage" + + + + + IndigoUnited + err-code + 2.0.3 + Create an error with a code + + + MIT + + + pkg:npm/err-code@2.0.3?vcs_url=git%3A//github.com/IndigoUnited/js-err-code.git + + + https://github.com/IndigoUnited/js-err-code/issues/ + as detected from PackageJson property "bugs.url" + + + git://github.com/IndigoUnited/js-err-code.git + as detected from PackageJson property "repository.url" + + + https://github.com/IndigoUnited/js-err-code#readme + as detected from PackageJson property "homepage" + + + + + Ariya Hidayat + esprima + 4.0.1 + ECMAScript parsing infrastructure for multipurpose analysis + + + BSD-2-Clause + + + pkg:npm/esprima@4.0.1?vcs_url=git%2Bhttps%3A//github.com/jquery/esprima.git + + + https://github.com/jquery/esprima/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jquery/esprima.git + as detected from PackageJson property "repository.url" + + + http://esprima.org + as detected from PackageJson property "homepage" + + + + + Sami Sayegh + exponential-backoff + 3.1.1 + A utility that allows retrying a function with an exponential delay between attempts. + + + Apache-2.0 + + + pkg:npm/exponential-backoff@3.1.1?vcs_url=git%2Bhttps%3A//github.com/coveo/exponential-backoff.git + + + https://github.com/coveo/exponential-backoff/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/coveo/exponential-backoff.git + as detected from PackageJson property "repository.url" + + + https://github.com/coveo/exponential-backoff#readme + as detected from PackageJson property "homepage" + + + + + Stefan Thomas + extend + 3.0.2 + Port of jQuery.extend for node.js and the browser + + + MIT + + + pkg:npm/extend@3.0.2?vcs_url=git%2Bhttps%3A//github.com/justmoon/node-extend.git + + + https://github.com/justmoon/node-extend/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/justmoon/node-extend.git + as detected from PackageJson property "repository.url" + + + https://github.com/justmoon/node-extend#readme + as detected from PackageJson property "homepage" + + + + + Evgeny Poberezkin + fast-deep-equal + 3.1.3 + Fast deep equal + + + MIT + + + pkg:npm/fast-deep-equal@3.1.3?vcs_url=git%2Bhttps%3A//github.com/epoberezkin/fast-deep-equal.git + + + https://github.com/epoberezkin/fast-deep-equal/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/fast-deep-equal.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/fast-deep-equal#readme + as detected from PackageJson property "homepage" + + + + + Nathan Rajlich + file-uri-to-path + 1.0.0 + Convert a file: URI to a file path + + + MIT + + + pkg:npm/file-uri-to-path@1.0.0?vcs_url=git%3A//github.com/TooTallNate/file-uri-to-path.git + + + https://github.com/TooTallNate/file-uri-to-path/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/file-uri-to-path.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/file-uri-to-path + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + foreground-child + 3.1.1 + Run a child as if it's the foreground process. Give it stdio. Exit when it exits. + + + ISC + + + pkg:npm/foreground-child@3.1.1?vcs_url=git%2Bhttps%3A//github.com/tapjs/foreground-child.git + + + https://github.com/tapjs/foreground-child/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tapjs/foreground-child.git + as detected from PackageJson property "repository.url" + + + https://github.com/tapjs/foreground-child#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + fs-minipass + 2.1.0 + fs read and write streams based on minipass + + + ISC + + + pkg:npm/fs-minipass@2.1.0?vcs_url=git%2Bhttps%3A//github.com/npm/fs-minipass.git + + + https://github.com/npm/fs-minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/fs-minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/fs-minipass#readme + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + fs-minipass + 3.0.3 + fs read and write streams based on minipass + + + ISC + + + pkg:npm/fs-minipass@3.0.3?vcs_url=git%2Bhttps%3A//github.com/npm/fs-minipass.git + + + https://github.com/npm/fs-minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/fs-minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/fs-minipass#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + fs.realpath + 1.0.0 + Use node's fs.realpath, but fall back to the JS implementation if the native one fails + + + ISC + + + pkg:npm/fs.realpath@1.0.0?vcs_url=git%2Bhttps%3A//github.com/isaacs/fs.realpath.git + + + https://github.com/isaacs/fs.realpath/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/fs.realpath.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/fs.realpath#readme + as detected from PackageJson property "homepage" + + + + + Rebecca Turner + gauge + 3.0.2 + A terminal based horizontal guage + + + ISC + + + pkg:npm/gauge@3.0.2?vcs_url=git%2Bhttps%3A//github.com/iarna/gauge.git + + + https://github.com/npm/gauge/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/gauge.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/gauge + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + glob + 10.4.1 + the most correct and second fastest glob implementation in JavaScript + + + ISC + + + pkg:npm/glob@10.4.1?vcs_url=git%3A//github.com/isaacs/node-glob.git + + + https://github.com/isaacs/node-glob/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/node-glob.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-glob#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + glob + 7.2.3 + a little globber + + + ISC + + + pkg:npm/glob@7.2.3?vcs_url=git%3A//github.com/isaacs/node-glob.git + + + https://github.com/isaacs/node-glob/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/node-glob.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-glob#readme + as detected from PackageJson property "homepage" + + + + + graceful-fs + 4.2.11 + A drop-in replacement for fs, making various improvements. + + + ISC + + + pkg:npm/graceful-fs@4.2.11?vcs_url=git%2Bhttps%3A//github.com/isaacs/node-graceful-fs.git + + + https://github.com/isaacs/node-graceful-fs/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-graceful-fs.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-graceful-fs#readme + as detected from PackageJson property "homepage" + + + + + Rebecca Turner + has-unicode + 2.0.1 + Try to guess if your terminal supports unicode + + + ISC + + + pkg:npm/has-unicode@2.0.1?vcs_url=git%2Bhttps%3A//github.com/iarna/has-unicode.git + + + https://github.com/iarna/has-unicode/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/has-unicode.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/has-unicode + as detected from PackageJson property "homepage" + + + + + Kornel Lesiński + http-cache-semantics + 4.1.1 + Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies + + + BSD-2-Clause + + + pkg:npm/http-cache-semantics@4.1.1?vcs_url=git%2Bhttps%3A//github.com/kornelski/http-cache-semantics.git + + + https://github.com/kornelski/http-cache-semantics/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/kornelski/http-cache-semantics.git + as detected from PackageJson property "repository.url" + + + https://github.com/kornelski/http-cache-semantics#readme + as detected from PackageJson property "homepage" + + + + + Nathan Rajlich + http-proxy-agent + 7.0.2 + An HTTP(s) proxy `http.Agent` implementation for HTTP + + + MIT + + + pkg:npm/http-proxy-agent@7.0.2?vcs_url=git%2Bhttps%3A//github.com/TooTallNate/proxy-agents.git#packages/http-proxy-agent + + + https://github.com/TooTallNate/proxy-agents/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/TooTallNate/proxy-agents.git#packages/http-proxy-agent + as detected from PackageJson property "repository.url" and "repository.directory" + + + https://github.com/TooTallNate/proxy-agents#readme + as detected from PackageJson property "homepage" + + + + + Nathan Rajlich + https-proxy-agent + 5.0.1 + An HTTP(s) proxy `http.Agent` implementation for HTTPS + + + MIT + + + pkg:npm/https-proxy-agent@5.0.1?vcs_url=git%3A//github.com/TooTallNate/node-https-proxy-agent.git + + + https://github.com/TooTallNate/node-https-proxy-agent/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-https-proxy-agent.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-https-proxy-agent#readme + as detected from PackageJson property "homepage" + + + + + Nathan Rajlich + https-proxy-agent + 7.0.4 + An HTTP(s) proxy `http.Agent` implementation for HTTPS + + + MIT + + + pkg:npm/https-proxy-agent@7.0.4?vcs_url=git%2Bhttps%3A//github.com/TooTallNate/proxy-agents.git#packages/https-proxy-agent + + + https://github.com/TooTallNate/proxy-agents/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/TooTallNate/proxy-agents.git#packages/https-proxy-agent + as detected from PackageJson property "repository.url" and "repository.directory" + + + https://github.com/TooTallNate/proxy-agents#readme + as detected from PackageJson property "homepage" + + + + + Alexander Shtuchkin + iconv-lite + 0.6.3 + Convert character encodings in pure javascript. + + + MIT + + + pkg:npm/iconv-lite@0.6.3?vcs_url=git%3A//github.com/ashtuchkin/iconv-lite.git + + + https://github.com/ashtuchkin/iconv-lite/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/ashtuchkin/iconv-lite.git + as detected from PackageJson property "repository.url" + + + https://github.com/ashtuchkin/iconv-lite + as detected from PackageJson property "homepage" + + + + + Jens Taylor + imurmurhash + 0.1.4 + An incremental implementation of MurmurHash3 + + + MIT + + + pkg:npm/imurmurhash@0.1.4?vcs_url=git%2Bhttps%3A//github.com/jensyt/imurmurhash-js.git + + + https://github.com/jensyt/imurmurhash-js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jensyt/imurmurhash-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/jensyt/imurmurhash-js + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + indent-string + 4.0.0 + Indent each line in a string + + + MIT + + + pkg:npm/indent-string@4.0.0?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/indent-string.git + + + https://github.com/sindresorhus/indent-string/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/indent-string.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/indent-string#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + inflight + 1.0.6 + Add callbacks to requests in flight to avoid async duplication + + + ISC + + + pkg:npm/inflight@1.0.6?vcs_url=git%2Bhttps%3A//github.com/npm/inflight.git + + + https://github.com/isaacs/inflight/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/inflight.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inflight + as detected from PackageJson property "homepage" + + + + + inherits + 2.0.4 + Browser-friendly inheritance fully compatible with standard node.js inherits() + + + ISC + + + pkg:npm/inherits@2.0.4?vcs_url=git%3A//github.com/isaacs/inherits.git + + + https://github.com/isaacs/inherits/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/inherits.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inherits#readme + as detected from PackageJson property "homepage" + + + + + Beau Gunderson + ip-address + 9.0.5 + A library for parsing IPv4 and IPv6 IP addresses in node and the browser. + + + MIT + + + pkg:npm/ip-address@9.0.5?vcs_url=git%3A//github.com/beaugunderson/ip-address.git + + + https://github.com/beaugunderson/ip-address/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/beaugunderson/ip-address.git + as detected from PackageJson property "repository.url" + + + https://github.com/beaugunderson/ip-address#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + is-fullwidth-code-point + 3.0.0 + Check if the character represented by a given Unicode code point is fullwidth + + + MIT + + + pkg:npm/is-fullwidth-code-point@3.0.0?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/is-fullwidth-code-point.git + + + https://github.com/sindresorhus/is-fullwidth-code-point/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/is-fullwidth-code-point.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/is-fullwidth-code-point#readme + as detected from PackageJson property "homepage" + + + + + Thomas Watson Steen + is-lambda + 1.0.1 + Detect if your code is running on an AWS Lambda server + + + MIT + + + pkg:npm/is-lambda@1.0.1?vcs_url=git%2Bhttps%3A//github.com/watson/is-lambda.git + + + https://github.com/watson/is-lambda/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/watson/is-lambda.git + as detected from PackageJson property "repository.url" + + + https://github.com/watson/is-lambda + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + isexe + 2.0.0 + Minimal module to check if a file is executable. + + + ISC + + + pkg:npm/isexe@2.0.0?vcs_url=git%2Bhttps%3A//github.com/isaacs/isexe.git + + + https://github.com/isaacs/isexe/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/isexe.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/isexe#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + isexe + 3.1.1 + Minimal module to check if a file is executable. + + + ISC + + + pkg:npm/isexe@3.1.1?vcs_url=git%2Bhttps%3A//github.com/isaacs/isexe.git + + + https://github.com/isaacs/isexe/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/isexe.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/isexe#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + jackspeak + 3.1.2 + A very strict and proper argument parser. + + + BlueOak-1.0.0 + + + pkg:npm/jackspeak@3.1.2?vcs_url=git%2Bhttps%3A//github.com/isaacs/jackspeak.git + + + https://github.com/isaacs/jackspeak/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/jackspeak.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/jackspeak#readme + as detected from PackageJson property "homepage" + + + + + Vladimir Zapparov + js-yaml + 3.14.1 + YAML 1.2 parser and serializer + + + MIT + + + pkg:npm/js-yaml@3.14.1?vcs_url=git%2Bhttps%3A//github.com/nodeca/js-yaml.git + + + https://github.com/nodeca/js-yaml/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/js-yaml.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/js-yaml + as detected from PackageJson property "homepage" + + + + + Tom Wu + jsbn + 1.1.0 + The jsbn library is a fast, portable implementation of large-number math in pure JavaScript, enabling public-key crypto and other applications on desktop and mobile browsers. + + + MIT + + + pkg:npm/jsbn@1.1.0?vcs_url=git%2Bhttps%3A//github.com/andyperlitch/jsbn.git + + + https://github.com/andyperlitch/jsbn/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/andyperlitch/jsbn.git + as detected from PackageJson property "repository.url" + + + https://github.com/andyperlitch/jsbn#readme + as detected from PackageJson property "homepage" + + + + + Evgeny Poberezkin + json-schema-traverse + 1.0.0 + Traverse JSON Schema passing each schema object to callback + + + MIT + + + pkg:npm/json-schema-traverse@1.0.0?vcs_url=git%2Bhttps%3A//github.com/epoberezkin/json-schema-traverse.git + + + https://github.com/epoberezkin/json-schema-traverse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/json-schema-traverse.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/json-schema-traverse#readme + as detected from PackageJson property "homepage" + + + + + marudor + libxmljs2 + 0.33.0 + libxml bindings for v8 javascript engine + + + MIT + + + pkg:npm/libxmljs2@0.33.0?vcs_url=git%2Bssh%3A//git%40github.com/marudor/libxmljs2.git + + + http://github.com/marudor/libxmljs2/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/marudor/libxmljs2.git + as detected from PackageJson property "repository.url" + + + https://github.com/marudor/libxmljs2#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + lru-cache + 10.2.2 + A cache object that deletes the least-recently-used items. + + + ISC + + + pkg:npm/lru-cache@10.2.2?vcs_url=git%3A//github.com/isaacs/node-lru-cache.git + + + https://github.com/isaacs/node-lru-cache/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/node-lru-cache.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-lru-cache#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + make-dir + 3.1.0 + Make a directory and its parents if needed - Think `mkdir -p` + + + MIT + + + pkg:npm/make-dir@3.1.0?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/make-dir.git + + + https://github.com/sindresorhus/make-dir/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/make-dir.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/make-dir#readme + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + make-fetch-happen + 13.0.1 + Opinionated, caching, retrying fetch client + + + ISC + + + pkg:npm/make-fetch-happen@13.0.1?vcs_url=git%2Bhttps%3A//github.com/npm/make-fetch-happen.git + + + https://github.com/npm/make-fetch-happen/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/make-fetch-happen.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/make-fetch-happen#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + minimatch + 3.1.2 + a glob matcher in javascript + + + ISC + + + pkg:npm/minimatch@3.1.2?vcs_url=git%3A//github.com/isaacs/minimatch.git + + + https://github.com/isaacs/minimatch/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/minimatch.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minimatch#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + minimatch + 9.0.4 + a glob matcher in javascript + + + ISC + + + pkg:npm/minimatch@9.0.4?vcs_url=git%3A//github.com/isaacs/minimatch.git + + + https://github.com/isaacs/minimatch/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/minimatch.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minimatch#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + minipass-collect + 2.0.1 + A Minipass stream that collects all the data into a single chunk + + + ISC + + + pkg:npm/minipass-collect@2.0.1?vcs_url=git%2Bhttps%3A//github.com/isaacs/minipass-collect.git + + + https://github.com/isaacs/minipass-collect/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass-collect.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass-collect#readme + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + minipass-fetch + 3.0.5 + An implementation of window.fetch in Node.js using Minipass streams + + + MIT + + + pkg:npm/minipass-fetch@3.0.5?vcs_url=git%2Bhttps%3A//github.com/npm/minipass-fetch.git + + + https://github.com/npm/minipass-fetch/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/minipass-fetch.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/minipass-fetch#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + minipass-flush + 1.0.5 + A Minipass stream that calls a flush function before emitting 'end' + + + ISC + + + pkg:npm/minipass-flush@1.0.5?vcs_url=git%2Bhttps%3A//github.com/isaacs/minipass-flush.git + + + https://github.com/isaacs/minipass-flush/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass-flush.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass-flush#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + minipass-pipeline + 1.2.4 + create a pipeline of streams using Minipass + + + ISC + + + pkg:npm/minipass-pipeline@1.2.4 + + + Isaac Z. Schlueter + minipass-sized + 1.0.3 + A Minipass stream that raises an error if you get a different number of bytes than expected + + + ISC + + + pkg:npm/minipass-sized@1.0.3?vcs_url=git%2Bhttps%3A//github.com/isaacs/minipass-sized.git + + + https://github.com/isaacs/minipass-sized/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass-sized.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass-sized#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + minipass + 3.3.6 + minimal implementation of a PassThrough stream + + + ISC + + + pkg:npm/minipass@3.3.6?vcs_url=git%2Bhttps%3A//github.com/isaacs/minipass.git + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + minipass + 5.0.0 + minimal implementation of a PassThrough stream + + + ISC + + + pkg:npm/minipass@5.0.0?vcs_url=git%2Bhttps%3A//github.com/isaacs/minipass.git + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + minipass + 7.1.2 + minimal implementation of a PassThrough stream + + + ISC + + + pkg:npm/minipass@7.1.2?vcs_url=git%2Bhttps%3A//github.com/isaacs/minipass.git + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + minizlib + 2.1.2 + A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding. + + + MIT + + + pkg:npm/minizlib@2.1.2?vcs_url=git%2Bhttps%3A//github.com/isaacs/minizlib.git + + + https://github.com/isaacs/minizlib/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minizlib.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minizlib#readme + as detected from PackageJson property "homepage" + + + + + mkdirp + 1.0.4 + Recursively mkdir, like `mkdir -p` + + + MIT + + + pkg:npm/mkdirp@1.0.4?vcs_url=git%2Bhttps%3A//github.com/isaacs/node-mkdirp.git + + + https://github.com/isaacs/node-mkdirp/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-mkdirp.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-mkdirp#readme + as detected from PackageJson property "homepage" + + + + + Tim Radvan + moo + 0.5.2 + Optimised tokenizer/lexer generator! 🐄 Much performance. Moo! + + + BSD-3-Clause + + + pkg:npm/moo@0.5.2?vcs_url=git%2Bhttps%3A//github.com/tjvr/moo.git + + + https://github.com/tjvr/moo/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tjvr/moo.git + as detected from PackageJson property "repository.url" + + + https://github.com/tjvr/moo#readme + as detected from PackageJson property "homepage" + + + + + ms + 2.1.2 + Tiny millisecond conversion utility + + + MIT + + + pkg:npm/ms@2.1.2?vcs_url=git%2Bhttps%3A//github.com/zeit/ms.git + + + https://github.com/zeit/ms/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/zeit/ms.git + as detected from PackageJson property "repository.url" + + + https://github.com/zeit/ms#readme + as detected from PackageJson property "homepage" + + + + + nan + 2.18.0 + Native Abstractions for Node.js: C++ header for Node 0.8 -> 20 compatibility + + + MIT + + + pkg:npm/nan@2.18.0?vcs_url=git%3A//github.com/nodejs/nan.git + + + https://github.com/nodejs/nan/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/nan.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/nan#readme + as detected from PackageJson property "homepage" + + + + + Hardmath123 + nearley + 2.20.1 + Simple, fast, powerful parser toolkit for JavaScript. + + + MIT + + + pkg:npm/nearley@2.20.1?vcs_url=git%2Bhttps%3A//github.com/hardmath123/nearley.git + + + https://github.com/hardmath123/nearley/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/hardmath123/nearley.git + as detected from PackageJson property "repository.url" + + + https://github.com/hardmath123/nearley#readme + as detected from PackageJson property "homepage" + + + + + negotiator + 0.6.3 + HTTP content negotiation + + + MIT + + + pkg:npm/negotiator@0.6.3?vcs_url=git%2Bhttps%3A//github.com/jshttp/negotiator.git + + + https://github.com/jshttp/negotiator/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jshttp/negotiator.git + as detected from PackageJson property "repository.url" + + + https://github.com/jshttp/negotiator#readme + as detected from PackageJson property "homepage" + + + + + David Frank + node-fetch + 2.7.0 + A light-weight module that brings window.fetch to node.js + + + MIT + + + pkg:npm/node-fetch@2.7.0?vcs_url=git%2Bhttps%3A//github.com/bitinn/node-fetch.git + + + https://github.com/bitinn/node-fetch/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/bitinn/node-fetch.git + as detected from PackageJson property "repository.url" + + + https://github.com/bitinn/node-fetch + as detected from PackageJson property "homepage" + + + + + Nathan Rajlich + node-gyp + 10.1.0 + Node.js native addon build tool + + + MIT + + + pkg:npm/node-gyp@10.1.0?vcs_url=git%3A//github.com/nodejs/node-gyp.git + + + https://github.com/nodejs/node-gyp/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/node-gyp.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/node-gyp#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + nopt + 5.0.0 + Option parsing for Node, supporting types, shorthands, etc. Used by npm. + + + ISC + + + pkg:npm/nopt@5.0.0?vcs_url=git%2Bhttps%3A//github.com/npm/nopt.git + + + https://github.com/npm/nopt/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/nopt.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/nopt#readme + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + nopt + 7.2.1 + Option parsing for Node, supporting types, shorthands, etc. Used by npm. + + + ISC + + + pkg:npm/nopt@7.2.1?vcs_url=git%2Bhttps%3A//github.com/npm/nopt.git + + + https://github.com/npm/nopt/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/nopt.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/nopt#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + npmlog + 5.0.1 + logger for npm + + + ISC + + + pkg:npm/npmlog@5.0.1?vcs_url=git%2Bhttps%3A//github.com/npm/npmlog.git + + + https://github.com/npm/npmlog/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/npmlog.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/npmlog#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + object-assign + 4.1.1 + ES2015 `Object.assign()` ponyfill + + + MIT + + + pkg:npm/object-assign@4.1.1?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/object-assign.git + + + https://github.com/sindresorhus/object-assign/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/object-assign.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/object-assign#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + once + 1.4.0 + Run a function exactly one time + + + ISC + + + pkg:npm/once@1.4.0?vcs_url=git%3A//github.com/isaacs/once.git + + + https://github.com/isaacs/once/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/once.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/once#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + p-map + 4.0.0 + Map over promises concurrently + + + MIT + + + pkg:npm/p-map@4.0.0?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/p-map.git + + + https://github.com/sindresorhus/p-map/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/p-map.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/p-map#readme + as detected from PackageJson property "homepage" + + + + + the purl authors + packageurl-js + 1.2.1 + JavaScript library to parse and build "purl" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url + + + MIT + + + pkg:npm/packageurl-js@1.2.1?vcs_url=git%2Bhttps%3A//github.com/package-url/packageurl-js.git + + + https://github.com/package-url/packageurl-js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/package-url/packageurl-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/package-url/packageurl-js#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + path-is-absolute + 1.0.1 + Node.js 0.12 path.isAbsolute() ponyfill + + + MIT + + + pkg:npm/path-is-absolute@1.0.1?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/path-is-absolute.git + + + https://github.com/sindresorhus/path-is-absolute/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/path-is-absolute.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/path-is-absolute#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + path-key + 3.1.1 + Get the PATH environment variable key cross-platform + + + MIT + + + pkg:npm/path-key@3.1.1?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/path-key.git + + + https://github.com/sindresorhus/path-key/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/path-key.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/path-key#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + path-scurry + 1.11.1 + walk paths fast and efficiently + + + BlueOak-1.0.0 + + + pkg:npm/path-scurry@1.11.1?vcs_url=git%2Bhttps%3A//github.com/isaacs/path-scurry.git + + + https://github.com/isaacs/path-scurry/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/path-scurry.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/path-scurry#readme + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + proc-log + 3.0.0 + just emit 'log' events on the process object + + + ISC + + + pkg:npm/proc-log@3.0.0?vcs_url=git%2Bhttps%3A//github.com/npm/proc-log.git + + + https://github.com/npm/proc-log/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/proc-log.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/proc-log#readme + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + proc-log + 4.2.0 + just emit 'log' events on the process object + + + ISC + + + pkg:npm/proc-log@4.2.0?vcs_url=git%2Bhttps%3A//github.com/npm/proc-log.git + + + https://github.com/npm/proc-log/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/proc-log.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/proc-log#readme + as detected from PackageJson property "homepage" + + + + + IndigoUnited + promise-retry + 2.0.1 + Retries a function that returns a promise, leveraging the power of the retry module. + + + MIT + + + pkg:npm/promise-retry@2.0.1?vcs_url=git%3A//github.com/IndigoUnited/node-promise-retry.git + + + https://github.com/IndigoUnited/node-promise-retry/issues/ + as detected from PackageJson property "bugs.url" + + + git://github.com/IndigoUnited/node-promise-retry.git + as detected from PackageJson property "repository.url" + + + https://github.com/IndigoUnited/node-promise-retry#readme + as detected from PackageJson property "homepage" + + + + + Mathias Bynens + punycode + 2.3.1 + A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms. + + + MIT + + + pkg:npm/punycode@2.3.1?vcs_url=git%2Bhttps%3A//github.com/mathiasbynens/punycode.js.git + + + https://github.com/mathiasbynens/punycode.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/punycode.js.git + as detected from PackageJson property "repository.url" + + + https://mths.be/punycode + as detected from PackageJson property "homepage" + + + + + Tab Atkins Jr. + railroad-diagrams + 1.0.0 + A small JS+SVG library for drawing railroad syntax diagrams. + + + CC0-1.0 + + + pkg:npm/railroad-diagrams@1.0.0?vcs_url=git%2Bhttps%3A//github.com/tabatkins/railroad-diagrams.git + + + https://github.com/tabatkins/railroad-diagrams/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tabatkins/railroad-diagrams.git + as detected from PackageJson property "repository.url" + + + https://github.com/tabatkins/railroad-diagrams + as detected from PackageJson property "homepage" + + + + + Roly Fentanes + randexp + 0.4.6 + Create random strings that match a given regular expression. + + + MIT + + + pkg:npm/randexp@0.4.6?vcs_url=git%3A//github.com/fent/randexp.js.git + + + https://github.com/fent/randexp.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/randexp.js.git + as detected from PackageJson property "repository.url" + + + http://fent.github.io/randexp.js/ + as detected from PackageJson property "homepage" + + + + + readable-stream + 3.6.2 + Streams3, a user-land copy of the stream library from Node.js + + + MIT + + + pkg:npm/readable-stream@3.6.2?vcs_url=git%3A//github.com/nodejs/readable-stream.git + + + https://github.com/nodejs/readable-stream/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/readable-stream.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/readable-stream#readme + as detected from PackageJson property "homepage" + + + + + Vsevolod Strukchinsky + require-from-string + 2.0.2 + Require module from string + + + MIT + + + pkg:npm/require-from-string@2.0.2?vcs_url=git%2Bhttps%3A//github.com/floatdrop/require-from-string.git + + + https://github.com/floatdrop/require-from-string/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/floatdrop/require-from-string.git + as detected from PackageJson property "repository.url" + + + https://github.com/floatdrop/require-from-string#readme + as detected from PackageJson property "homepage" + + + + + Roly Fentanes + ret + 0.1.15 + Tokenizes a string that represents a regular expression. + + + MIT + + + pkg:npm/ret@0.1.15?vcs_url=git%3A//github.com/fent/ret.js.git + + + https://github.com/fent/ret.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/ret.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/fent/ret.js#readme + as detected from PackageJson property "homepage" + + + + + Tim Koschützki + retry + 0.12.0 + Abstraction for exponential and custom retry strategies for failed operations. + + + MIT + + + pkg:npm/retry@0.12.0?vcs_url=git%3A//github.com/tim-kos/node-retry.git + + + https://github.com/tim-kos/node-retry/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/tim-kos/node-retry.git + as detected from PackageJson property "repository.url" + + + https://github.com/tim-kos/node-retry + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + rimraf + 3.0.2 + A deep deletion module for node (like `rm -rf`) + + + ISC + + + pkg:npm/rimraf@3.0.2?vcs_url=git%3A//github.com/isaacs/rimraf.git + + + https://github.com/isaacs/rimraf/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/rimraf.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/rimraf#readme + as detected from PackageJson property "homepage" + + + + + Feross Aboukhadijeh + safe-buffer + 5.2.1 + Safer Node.js Buffer API + + + MIT + + + pkg:npm/safe-buffer@5.2.1?vcs_url=git%3A//github.com/feross/safe-buffer.git + + + https://github.com/feross/safe-buffer/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/feross/safe-buffer.git + as detected from PackageJson property "repository.url" + + + https://github.com/feross/safe-buffer + as detected from PackageJson property "homepage" + + + + + Nikita Skovoroda + safer-buffer + 2.1.2 + Modern Buffer API polyfill without footguns + + + MIT + + + pkg:npm/safer-buffer@2.1.2?vcs_url=git%2Bhttps%3A//github.com/ChALkeR/safer-buffer.git + + + https://github.com/ChALkeR/safer-buffer/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ChALkeR/safer-buffer.git + as detected from PackageJson property "repository.url" + + + https://github.com/ChALkeR/safer-buffer#readme + as detected from PackageJson property "homepage" + + + + + Peter Müller + schemes + 1.4.0 + IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones + + + MIT + + + pkg:npm/schemes@1.4.0?vcs_url=git%3A//github.com/Munter/schemes.git + + + https://github.com/Munter/schemes/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/Munter/schemes.git + as detected from PackageJson property "repository.url" + + + https://github.com/Munter/schemes + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + semver + 6.3.1 + The semantic version parser used by npm. + + + ISC + + + pkg:npm/semver@6.3.1?vcs_url=git%2Bhttps%3A//github.com/npm/node-semver.git + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + semver + 7.6.2 + The semantic version parser used by npm. + + + ISC + + + pkg:npm/semver@7.6.2?vcs_url=git%2Bhttps%3A//github.com/npm/node-semver.git + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + + Ben Coe + set-blocking + 2.0.0 + set blocking stdio and stderr ensuring that terminal output does not truncate + + + ISC + + + pkg:npm/set-blocking@2.0.0?vcs_url=git%2Bhttps%3A//github.com/yargs/set-blocking.git + + + https://github.com/yargs/set-blocking/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/yargs/set-blocking.git + as detected from PackageJson property "repository.url" + + + https://github.com/yargs/set-blocking#readme + as detected from PackageJson property "homepage" + + + + + Kevin Mårtensson + shebang-command + 2.0.0 + Get the command from a shebang + + + MIT + + + pkg:npm/shebang-command@2.0.0?vcs_url=git%2Bhttps%3A//github.com/kevva/shebang-command.git + + + https://github.com/kevva/shebang-command/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/kevva/shebang-command.git + as detected from PackageJson property "repository.url" + + + https://github.com/kevva/shebang-command#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + shebang-regex + 3.0.0 + Regular expression for matching a shebang line + + + MIT + + + pkg:npm/shebang-regex@3.0.0?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/shebang-regex.git + + + https://github.com/sindresorhus/shebang-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/shebang-regex.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/shebang-regex#readme + as detected from PackageJson property "homepage" + + + + + Ben Coe + signal-exit + 3.0.7 + when you want to fire an event no matter how a process exits. + + + ISC + + + pkg:npm/signal-exit@3.0.7?vcs_url=git%2Bhttps%3A//github.com/tapjs/signal-exit.git + + + https://github.com/tapjs/signal-exit/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tapjs/signal-exit.git + as detected from PackageJson property "repository.url" + + + https://github.com/tapjs/signal-exit + as detected from PackageJson property "homepage" + + + + + Ben Coe + signal-exit + 4.1.0 + when you want to fire an event no matter how a process exits. + + + ISC + + + pkg:npm/signal-exit@4.1.0?vcs_url=git%2Bhttps%3A//github.com/tapjs/signal-exit.git + + + https://github.com/tapjs/signal-exit/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tapjs/signal-exit.git + as detected from PackageJson property "repository.url" + + + https://github.com/tapjs/signal-exit#readme + as detected from PackageJson property "homepage" + + + + + Josh Glazebrook + smart-buffer + 4.2.0 + smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more. + + + MIT + + + pkg:npm/smart-buffer@4.2.0?vcs_url=git%2Bhttps%3A//github.com/JoshGlazebrook/smart-buffer.git + + + https://github.com/JoshGlazebrook/smart-buffer/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/JoshGlazebrook/smart-buffer.git + as detected from PackageJson property "repository.url" + + + https://github.com/JoshGlazebrook/smart-buffer/ + as detected from PackageJson property "homepage" + + + + + Gene Hightower + smtp-address-parser + 1.0.10 + Parse an SMTP (RFC-5321) address + + + MIT + + + pkg:npm/smtp-address-parser@1.0.10?vcs_url=git%2Bhttps%3A//github.com/gene-hightower/smtp-address-parser.git + + + https://github.com/gene-hightower/smtp-address-parser/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/gene-hightower/smtp-address-parser.git + as detected from PackageJson property "repository.url" + + + https://github.com/gene-hightower/smtp-address-parser#readme + as detected from PackageJson property "homepage" + + + + + Nathan Rajlich + socks-proxy-agent + 8.0.3 + A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS + + + MIT + + + pkg:npm/socks-proxy-agent@8.0.3?vcs_url=git%2Bhttps%3A//github.com/TooTallNate/proxy-agents.git#packages/socks-proxy-agent + + + https://github.com/TooTallNate/proxy-agents/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/TooTallNate/proxy-agents.git#packages/socks-proxy-agent + as detected from PackageJson property "repository.url" and "repository.directory" + + + https://github.com/TooTallNate/proxy-agents#readme + as detected from PackageJson property "homepage" + + + + + Josh Glazebrook + socks + 2.8.3 + Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality. + + + MIT + + + pkg:npm/socks@2.8.3?vcs_url=git%2Bhttps%3A//github.com/JoshGlazebrook/socks.git + + + https://github.com/JoshGlazebrook/socks/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/JoshGlazebrook/socks.git + as detected from PackageJson property "repository.url" + + + https://github.com/JoshGlazebrook/socks/ + as detected from PackageJson property "homepage" + + + + + The Linux Foundation + spdx-exceptions + 2.5.0 + list of SPDX standard license exceptions + + + CC-BY-3.0 + + + pkg:npm/spdx-exceptions@2.5.0?vcs_url=git%2Bhttps%3A//github.com/kemitchell/spdx-exceptions.json.git + + + https://github.com/kemitchell/spdx-exceptions.json/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/kemitchell/spdx-exceptions.json.git + as detected from PackageJson property "repository.url" + + + https://github.com/kemitchell/spdx-exceptions.json#readme + as detected from PackageJson property "homepage" + + + + + Kyle E. Mitchell + spdx-expression-parse + 4.0.0 + parse SPDX license expressions + + + MIT + + + pkg:npm/spdx-expression-parse@4.0.0?vcs_url=git%2Bhttps%3A//github.com/jslicense/spdx-expression-parse.js.git + + + https://github.com/jslicense/spdx-expression-parse.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-expression-parse.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-expression-parse.js#readme + as detected from PackageJson property "homepage" + + + + + Shinnosuke Watanabe + spdx-license-ids + 3.0.18 + A list of SPDX license identifiers + + + CC0-1.0 + + + pkg:npm/spdx-license-ids@3.0.18?vcs_url=git%2Bhttps%3A//github.com/jslicense/spdx-license-ids.git + + + https://github.com/jslicense/spdx-license-ids/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-license-ids.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-license-ids#readme + as detected from PackageJson property "homepage" + + + + + Alexandru Marasteanu + sprintf-js + 1.0.3 + JavaScript sprintf implementation + + + BSD-3-Clause + + + pkg:npm/sprintf-js@1.0.3?vcs_url=git%2Bhttps%3A//github.com/alexei/sprintf.js.git + + + https://github.com/alexei/sprintf.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/alexei/sprintf.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/alexei/sprintf.js#readme + as detected from PackageJson property "homepage" + + + + + Alexandru Mărășteanu + sprintf-js + 1.1.3 + JavaScript sprintf implementation + + + BSD-3-Clause + + + pkg:npm/sprintf-js@1.1.3?vcs_url=git%2Bhttps%3A//github.com/alexei/sprintf.js.git + + + https://github.com/alexei/sprintf.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/alexei/sprintf.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/alexei/sprintf.js#readme + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + ssri + 10.0.6 + Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec. + + + ISC + + + pkg:npm/ssri@10.0.6?vcs_url=git%2Bhttps%3A//github.com/npm/ssri.git + + + https://github.com/npm/ssri/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/ssri.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/ssri#readme + as detected from PackageJson property "homepage" + + + + + string_decoder + 1.3.0 + The string_decoder module from Node core + + + MIT + + + pkg:npm/string_decoder@1.3.0?vcs_url=git%3A//github.com/nodejs/string_decoder.git + + + https://github.com/nodejs/string_decoder/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/string_decoder.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/string_decoder + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + string-width + 4.2.3 + Get the visual width of a string - the number of columns required to display it + + + MIT + + + pkg:npm/string-width@4.2.3?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/string-width.git + + + https://github.com/sindresorhus/string-width/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/string-width.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/string-width#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + string-width + 5.1.2 + Get the visual width of a string - the number of columns required to display it + + + MIT + + + pkg:npm/string-width@5.1.2?vcs_url=git%2Bhttps%3A//github.com/sindresorhus/string-width.git + + + https://github.com/sindresorhus/string-width/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/string-width.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/string-width#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + strip-ansi + 6.0.1 + Strip ANSI escape codes from a string + + + MIT + + + pkg:npm/strip-ansi@6.0.1?vcs_url=git%2Bhttps%3A//github.com/chalk/strip-ansi.git + + + https://github.com/chalk/strip-ansi/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/strip-ansi.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/strip-ansi#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + strip-ansi + 7.1.0 + Strip ANSI escape codes from a string + + + MIT + + + pkg:npm/strip-ansi@7.1.0?vcs_url=git%2Bhttps%3A//github.com/chalk/strip-ansi.git + + + https://github.com/chalk/strip-ansi/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/strip-ansi.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/strip-ansi#readme + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + tar + 6.2.1 + tar for node + + + ISC + + + pkg:npm/tar@6.2.1?vcs_url=git%2Bhttps%3A//github.com/isaacs/node-tar.git + + + https://github.com/isaacs/node-tar/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-tar.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-tar#readme + as detected from PackageJson property "homepage" + + + + + Sebastian Mayr + tr46 + 0.0.3 + An implementation of the Unicode TR46 spec + + + MIT + + + pkg:npm/tr46@0.0.3?vcs_url=git%2Bhttps%3A//github.com/Sebmaster/tr46.js.git + + + https://github.com/Sebmaster/tr46.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/Sebmaster/tr46.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/Sebmaster/tr46.js#readme + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + unique-filename + 3.0.0 + Generate a unique filename for use in temporary directories or caches. + + + ISC + + + pkg:npm/unique-filename@3.0.0?vcs_url=git%2Bhttps%3A//github.com/npm/unique-filename.git + + + https://github.com/iarna/unique-filename/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/unique-filename.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/unique-filename + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + unique-slug + 4.0.0 + Generate a unique character string suitible for use in files and URLs. + + + ISC + + + pkg:npm/unique-slug@4.0.0?vcs_url=git%2Bhttps%3A//github.com/npm/unique-slug.git + + + https://github.com/npm/unique-slug/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/unique-slug.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/unique-slug#readme + as detected from PackageJson property "homepage" + + + + + Gary Court + uri-js + 4.4.1 + An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript. + + + BSD-2-Clause + + + pkg:npm/uri-js@4.4.1?vcs_url=git%2Bssh%3A//git%40github.com/garycourt/uri-js.git + + + https://github.com/garycourt/uri-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/garycourt/uri-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/garycourt/uri-js + as detected from PackageJson property "homepage" + + + + + Nathan Rajlich + util-deprecate + 1.0.2 + The Node.js `util.deprecate()` function with browser support + + + MIT + + + pkg:npm/util-deprecate@1.0.2?vcs_url=git%3A//github.com/TooTallNate/util-deprecate.git + + + https://github.com/TooTallNate/util-deprecate/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/util-deprecate.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/util-deprecate + as detected from PackageJson property "homepage" + + + + + Domenic Denicola + webidl-conversions + 3.0.1 + Implements the WebIDL algorithms for converting to and from JavaScript values + + + BSD-2-Clause + + + pkg:npm/webidl-conversions@3.0.1?vcs_url=git%2Bhttps%3A//github.com/jsdom/webidl-conversions.git + + + https://github.com/jsdom/webidl-conversions/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/webidl-conversions.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/webidl-conversions#readme + as detected from PackageJson property "homepage" + + + + + Sebastian Mayr + whatwg-url + 5.0.0 + An implementation of the WHATWG URL Standard's URL API and parsing machinery + + + MIT + + + pkg:npm/whatwg-url@5.0.0?vcs_url=git%2Bhttps%3A//github.com/jsdom/whatwg-url.git + + + https://github.com/jsdom/whatwg-url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/whatwg-url.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/whatwg-url#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + which + 2.0.2 + Like which(1) unix command. Find the first instance of an executable in the PATH. + + + ISC + + + pkg:npm/which@2.0.2?vcs_url=git%3A//github.com/isaacs/node-which.git + + + https://github.com/isaacs/node-which/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/node-which.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-which#readme + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + which + 4.0.0 + Like which(1) unix command. Find the first instance of an executable in the PATH. + + + ISC + + + pkg:npm/which@4.0.0?vcs_url=git%2Bhttps%3A//github.com/npm/node-which.git + + + https://github.com/npm/node-which/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-which.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-which#readme + as detected from PackageJson property "homepage" + + + + + Rebecca Turner + wide-align + 1.1.5 + A wide-character aware text alignment function for use on the console or with fixed width fonts. + + + ISC + + + pkg:npm/wide-align@1.1.5?vcs_url=git%2Bhttps%3A//github.com/iarna/wide-align.git + + + https://github.com/iarna/wide-align/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/wide-align.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/wide-align#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + wrap-ansi + 7.0.0 + Wordwrap a string with ANSI escape codes + + + MIT + + + pkg:npm/wrap-ansi@7.0.0?vcs_url=git%2Bhttps%3A//github.com/chalk/wrap-ansi.git + + + https://github.com/chalk/wrap-ansi/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/wrap-ansi.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/wrap-ansi#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + wrap-ansi + 8.1.0 + Wordwrap a string with ANSI escape codes + + + MIT + + + pkg:npm/wrap-ansi@8.1.0?vcs_url=git%2Bhttps%3A//github.com/chalk/wrap-ansi.git + + + https://github.com/chalk/wrap-ansi/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/wrap-ansi.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/wrap-ansi#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + wrappy + 1.0.2 + Callback wrapping utility + + + ISC + + + pkg:npm/wrappy@1.0.2?vcs_url=git%2Bhttps%3A//github.com/npm/wrappy.git + + + https://github.com/npm/wrappy/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/wrappy.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/wrappy + as detected from PackageJson property "homepage" + + + + + Ozgur Ozcitak + xmlbuilder2 + 3.1.1 + An XML builder for node.js + + + MIT + + + pkg:npm/xmlbuilder2@3.1.1?vcs_url=git%3A//github.com/oozcitak/xmlbuilder2.git + + + http://github.com/oozcitak/xmlbuilder2/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/xmlbuilder2.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/xmlbuilder2 + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + yallist + 4.0.0 + Yet Another Linked List + + + ISC + + + pkg:npm/yallist@4.0.0?vcs_url=git%2Bhttps%3A//github.com/isaacs/yallist.git + + + https://github.com/isaacs/yallist/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/yallist.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/yallist#readme + as detected from PackageJson property "homepage" + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/tests/_data/snapshots/short-PURLs_alternative-package-registry.json.bin b/tests/_data/snapshots/short-PURLs_alternative-package-registry.json.bin new file mode 100644 index 00000000..d34b7b39 --- /dev/null +++ b/tests/_data/snapshots/short-PURLs_alternative-package-registry.json.bin @@ -0,0 +1,99 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "yarn-plugin-cyclonedx", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-yarn/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-yarn.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-yarn#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-alternative-package-registry", + "version": "0.0.0", + "bom-ref": "demo-alternative-package-registry@workspace:.", + "description": "demo: alternative-package-registry -- showcase how alternative package registries affect the result", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-alternative-package-registry@0.0.0" + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] + }, + "components": [ + { + "type": "library", + "name": "act__act", + "group": "@jsr", + "version": "0.1.3", + "bom-ref": "@jsr/act__act@npm:0.1.3::__archiveUrl=https%3A%2F%2Fnpm.jsr.io%2F~%2F11%2F%40jsr%2Fact__act%2F0.1.3.tgz", + "purl": "pkg:npm/%40jsr/act__act@0.1.3", + "externalReferences": [ + { + "url": "https://npm.jsr.io/~/11/@jsr/act__act/0.1.3.tgz", + "type": "distribution", + "comment": "as detected from YarnLocator property \"reference::__archiveUrl\"" + }, + { + "url": "https://jsr.io/@act/act", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "dependencies": [ + { + "ref": "@jsr/act__act@npm:0.1.3::__archiveUrl=https%3A%2F%2Fnpm.jsr.io%2F~%2F11%2F%40jsr%2Fact__act%2F0.1.3.tgz" + }, + { + "ref": "demo-alternative-package-registry@workspace:.", + "dependsOn": [ + "@jsr/act__act@npm:0.1.3::__archiveUrl=https%3A%2F%2Fnpm.jsr.io%2F~%2F11%2F%40jsr%2Fact__act%2F0.1.3.tgz" + ] + } + ] +} \ No newline at end of file diff --git a/tests/_data/snapshots/short-PURLs_alternative-package-registry.xml.bin b/tests/_data/snapshots/short-PURLs_alternative-package-registry.xml.bin new file mode 100644 index 00000000..1b460a73 --- /dev/null +++ b/tests/_data/snapshots/short-PURLs_alternative-package-registry.xml.bin @@ -0,0 +1,75 @@ + + + + + + @cyclonedx + cyclonedx-library + libVersion-testing + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + @cyclonedx + yarn-plugin-cyclonedx + thisVersion-testing + + + https://github.com/CycloneDX/cyclonedx-node-yarn/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-node-yarn.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-node-yarn#readme + as detected from PackageJson property "homepage" + + + + + + demo-alternative-package-registry + 0.0.0 + demo: alternative-package-registry -- showcase how alternative package registries affect the result + + + Apache-2.0 + + + pkg:npm/demo-alternative-package-registry@0.0.0 + + + true + + + + + @jsr + act__act + 0.1.3 + pkg:npm/%40jsr/act__act@0.1.3 + + + https://npm.jsr.io/~/11/@jsr/act__act/0.1.3.tgz + as detected from YarnLocator property "reference::__archiveUrl" + + + https://jsr.io/@act/act + as detected from PackageJson property "homepage" + + + + + + + + + + + \ No newline at end of file diff --git a/tests/_data/testbeds/alternative-package-registry/.gitignore b/tests/_data/testbeds/alternative-package-registry/.gitignore new file mode 100644 index 00000000..89072b58 --- /dev/null +++ b/tests/_data/testbeds/alternative-package-registry/.gitignore @@ -0,0 +1,7 @@ +* +!/.gitignore +!/README.md +!/package.json +!/yarn.lock +!/.yarnrc.yml + diff --git a/tests/_data/testbeds/alternative-package-registry/.yarnrc.yml b/tests/_data/testbeds/alternative-package-registry/.yarnrc.yml new file mode 100644 index 00000000..b43ff28e --- /dev/null +++ b/tests/_data/testbeds/alternative-package-registry/.yarnrc.yml @@ -0,0 +1,3 @@ +npmScopes: + jsr: + npmRegistryServer: "https://npm.jsr.io" diff --git a/tests/_data/testbeds/alternative-package-registry/README.md b/tests/_data/testbeds/alternative-package-registry/README.md new file mode 100644 index 00000000..3d370871 --- /dev/null +++ b/tests/_data/testbeds/alternative-package-registry/README.md @@ -0,0 +1,11 @@ +# Integration test: bundled dependencies + +*ATTENTION*: this demo might use known vulnerable dependencies for showcasing purposes. + +Install dependencies from alternative package repositories and see how they behave. + +See +- yarn rfc: +- yarn docs: + +This setup has `@act/act` installed from alternative package registry . diff --git a/tests/_data/testbeds/alternative-package-registry/package.json b/tests/_data/testbeds/alternative-package-registry/package.json new file mode 100644 index 00000000..38489c60 --- /dev/null +++ b/tests/_data/testbeds/alternative-package-registry/package.json @@ -0,0 +1,13 @@ +{ + "name": "demo-alternative-package-registry", + "private": true, + "version": "0.0.0", + "description": "demo: alternative-package-registry -- showcase how alternative package registries affect the result", + "license": "Apache-2.0", + "scripts": { + "SBOM": "YARN_PLUGINS=$PROJECT_CWD/../../../../bundles/@yarnpkg/plugin-cyclonedx.js yarn cyclonedx" + }, + "dependencies": { + "@act/act": "npm:@jsr/act__act@^0.1.3" + } +} diff --git a/tests/_data/testbeds/alternative-package-registry/yarn.lock b/tests/_data/testbeds/alternative-package-registry/yarn.lock new file mode 100644 index 00000000..8811ce91 --- /dev/null +++ b/tests/_data/testbeds/alternative-package-registry/yarn.lock @@ -0,0 +1,21 @@ +# This file is generated by running "yarn install" inside your project. +# Manual changes might be lost - proceed with caution! + +__metadata: + version: 8 + cacheKey: 10c0 + +"@act/act@npm:@jsr/act__act@^0.1.3": + version: 0.1.3 + resolution: "@jsr/act__act@npm:0.1.3::__archiveUrl=https%3A%2F%2Fnpm.jsr.io%2F~%2F11%2F%40jsr%2Fact__act%2F0.1.3.tgz" + checksum: 10c0/a5d31fcb463403c5fef9c70dd620ad50ade928c221d915aa81e3e7aac469070e5fe668795da67b22c8f2a27c74858e547ca18770c20e500d055c440e66b78452 + languageName: node + linkType: hard + +"demo-alternative-package-registry@workspace:.": + version: 0.0.0-use.local + resolution: "demo-alternative-package-registry@workspace:." + dependencies: + "@act/act": "npm:@jsr/act__act@^0.1.3" + languageName: unknown + linkType: soft diff --git a/tests/_data/testbeds/git-protocol-dependency/package.json b/tests/_data/testbeds/git-protocol-dependency/package.json index 82b17ece..2d708f51 100644 --- a/tests/_data/testbeds/git-protocol-dependency/package.json +++ b/tests/_data/testbeds/git-protocol-dependency/package.json @@ -6,7 +6,7 @@ "license": "Apache-2.0", "packageManager": "yarn@4.1.0", "dependencies": { - "@cyclonedx/cyclonedx-library": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git#v6.4.2" + "@cyclonedx/cyclonedx-library": "https://github.com/CycloneDX/cyclonedx-javascript-library.git#v6.4.2" }, "scripts": { "SBOM": "YARN_PLUGINS=$PROJECT_CWD/../../../../bundles/@yarnpkg/plugin-cyclonedx.js yarn cyclonedx" diff --git a/tests/_data/testbeds/git-protocol-dependency/yarn.lock b/tests/_data/testbeds/git-protocol-dependency/yarn.lock index 6080e84c..ed071c6a 100644 --- a/tests/_data/testbeds/git-protocol-dependency/yarn.lock +++ b/tests/_data/testbeds/git-protocol-dependency/yarn.lock @@ -5,7 +5,7 @@ __metadata: version: 8 cacheKey: 10c0 -"@cyclonedx/cyclonedx-library@git+https://github.com/CycloneDX/cyclonedx-javascript-library.git#v6.4.2": +"@cyclonedx/cyclonedx-library@https://github.com/CycloneDX/cyclonedx-javascript-library.git#v6.4.2": version: 6.4.2 resolution: "@cyclonedx/cyclonedx-library@https://github.com/CycloneDX/cyclonedx-javascript-library.git#commit=a4a74012c163b44ffd25bc6146fc7f59aa7e33e7" dependencies: @@ -565,7 +565,7 @@ __metadata: version: 0.0.0-use.local resolution: "git-protocol-dependency@workspace:." dependencies: - "@cyclonedx/cyclonedx-library": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git#v6.4.2" + "@cyclonedx/cyclonedx-library": "https://github.com/CycloneDX/cyclonedx-javascript-library.git#v6.4.2" languageName: unknown linkType: soft diff --git a/tests/_data/testbeds/http-protocol-dependency/.gitignore b/tests/_data/testbeds/http-protocol-dependency/.gitignore new file mode 100644 index 00000000..86319488 --- /dev/null +++ b/tests/_data/testbeds/http-protocol-dependency/.gitignore @@ -0,0 +1,6 @@ +* +!/.gitignore +!/README.md +!/package.json +!/yarn.lock + diff --git a/tests/_data/testbeds/http-protocol-dependency/README.md b/tests/_data/testbeds/http-protocol-dependency/README.md new file mode 100644 index 00000000..93614530 --- /dev/null +++ b/tests/_data/testbeds/http-protocol-dependency/README.md @@ -0,0 +1,5 @@ +# Integration test: github protocol + +*ATTENTION*: this demo might use known vulnerable dependencies for showcasing purposes. + +Install dependencies directly via `github` protocol. diff --git a/tests/_data/testbeds/http-protocol-dependency/package.json b/tests/_data/testbeds/http-protocol-dependency/package.json new file mode 100644 index 00000000..e3f08224 --- /dev/null +++ b/tests/_data/testbeds/http-protocol-dependency/package.json @@ -0,0 +1,14 @@ +{ + "name": "github-protocol-dependency", + "description": "demo: github-protocol-dependency -- showcase how install via github protocol looks like", + "private": true, + "version": "0.0.0", + "license": "Apache-2.0", + "packageManager": "yarn@4.1.0", + "dependencies": { + "@cyclonedx/cyclonedx-library": "https://github.com/CycloneDX/cyclonedx-javascript-library/releases/download/v6.9.5/cyclonedx-cyclonedx-library-6.9.5.tgz" + }, + "scripts": { + "SBOM": "YARN_PLUGINS=$PROJECT_CWD/../../../../bundles/@yarnpkg/plugin-cyclonedx.js yarn cyclonedx" + } +} diff --git a/tests/_data/testbeds/http-protocol-dependency/yarn.lock b/tests/_data/testbeds/http-protocol-dependency/yarn.lock new file mode 100644 index 00000000..00defc7d --- /dev/null +++ b/tests/_data/testbeds/http-protocol-dependency/yarn.lock @@ -0,0 +1,1549 @@ +# This file is generated by running "yarn install" inside your project. +# Manual changes might be lost - proceed with caution! + +__metadata: + version: 8 + cacheKey: 10c0 + +"@cyclonedx/cyclonedx-library@https://github.com/CycloneDX/cyclonedx-javascript-library/releases/download/v6.9.5/cyclonedx-cyclonedx-library-6.9.5.tgz": + version: 6.9.5 + resolution: "@cyclonedx/cyclonedx-library@https://github.com/CycloneDX/cyclonedx-javascript-library/releases/download/v6.9.5/cyclonedx-cyclonedx-library-6.9.5.tgz" + dependencies: + ajv: "npm:^8.12.0" + ajv-formats: "npm:^3.0.1" + ajv-formats-draft2019: "npm:^1.6.1" + libxmljs2: "npm:^0.31 || ^0.32 || ^0.33" + packageurl-js: "npm:>=0.0.6 <0.0.8 || ^1" + spdx-expression-parse: "npm:^3.0.1 || ^4" + xmlbuilder2: "npm:^3.0.2" + dependenciesMeta: + ajv: + optional: true + ajv-formats: + optional: true + ajv-formats-draft2019: + optional: true + libxmljs2: + optional: true + xmlbuilder2: + optional: true + checksum: 10c0/a244c9e04b700bad9d1af3ebfb8f9fec9dbe300d65231f0e8629dc55c6d355e77011f586809ff7876a98dac4e817bec5a9a1b0c523b2d8e4b7155117cf0cf5ca + languageName: node + linkType: hard + +"@isaacs/cliui@npm:^8.0.2": + version: 8.0.2 + resolution: "@isaacs/cliui@npm:8.0.2" + dependencies: + string-width: "npm:^5.1.2" + string-width-cjs: "npm:string-width@^4.2.0" + strip-ansi: "npm:^7.0.1" + strip-ansi-cjs: "npm:strip-ansi@^6.0.1" + wrap-ansi: "npm:^8.1.0" + wrap-ansi-cjs: "npm:wrap-ansi@^7.0.0" + checksum: 10c0/b1bf42535d49f11dc137f18d5e4e63a28c5569de438a221c369483731e9dac9fb797af554e8bf02b6192d1e5eba6e6402cf93900c3d0ac86391d00d04876789e + languageName: node + linkType: hard + +"@mapbox/node-pre-gyp@npm:^1.0.11": + version: 1.0.11 + resolution: "@mapbox/node-pre-gyp@npm:1.0.11" + dependencies: + detect-libc: "npm:^2.0.0" + https-proxy-agent: "npm:^5.0.0" + make-dir: "npm:^3.1.0" + node-fetch: "npm:^2.6.7" + nopt: "npm:^5.0.0" + npmlog: "npm:^5.0.1" + rimraf: "npm:^3.0.2" + semver: "npm:^7.3.5" + tar: "npm:^6.1.11" + bin: + node-pre-gyp: bin/node-pre-gyp + checksum: 10c0/2b24b93c31beca1c91336fa3b3769fda98e202fb7f9771f0f4062588d36dcc30fcf8118c36aa747fa7f7610d8cf601872bdaaf62ce7822bb08b545d1bbe086cc + languageName: node + linkType: hard + +"@npmcli/agent@npm:^2.0.0": + version: 2.2.2 + resolution: "@npmcli/agent@npm:2.2.2" + dependencies: + agent-base: "npm:^7.1.0" + http-proxy-agent: "npm:^7.0.0" + https-proxy-agent: "npm:^7.0.1" + lru-cache: "npm:^10.0.1" + socks-proxy-agent: "npm:^8.0.3" + checksum: 10c0/325e0db7b287d4154ecd164c0815c08007abfb07653cc57bceded17bb7fd240998a3cbdbe87d700e30bef494885eccc725ab73b668020811d56623d145b524ae + languageName: node + linkType: hard + +"@npmcli/fs@npm:^3.1.0": + version: 3.1.1 + resolution: "@npmcli/fs@npm:3.1.1" + dependencies: + semver: "npm:^7.3.5" + checksum: 10c0/c37a5b4842bfdece3d14dfdb054f73fe15ed2d3da61b34ff76629fb5b1731647c49166fd2a8bf8b56fcfa51200382385ea8909a3cbecdad612310c114d3f6c99 + languageName: node + linkType: hard + +"@oozcitak/dom@npm:1.15.10": + version: 1.15.10 + resolution: "@oozcitak/dom@npm:1.15.10" + dependencies: + "@oozcitak/infra": "npm:1.0.8" + "@oozcitak/url": "npm:1.0.4" + "@oozcitak/util": "npm:8.3.8" + checksum: 10c0/128162dd35fd21976e7589a4b50e980d8fb72e1f90e5675a3baca70b23cfdd87c0df57bff1ec708e7927671247a7233f240a27a4546bb904e069be1b4d4d7a05 + languageName: node + linkType: hard + +"@oozcitak/infra@npm:1.0.8": + version: 1.0.8 + resolution: "@oozcitak/infra@npm:1.0.8" + dependencies: + "@oozcitak/util": "npm:8.3.8" + checksum: 10c0/5fa44f02abbad453f5b26b38e2934978c177ef3a1baf8bf53919991135268f55bc89e23f8f3edebf0973c6a7d72d98fededb666c04a8b22ee4ca3048d0d42d25 + languageName: node + linkType: hard + +"@oozcitak/url@npm:1.0.4": + version: 1.0.4 + resolution: "@oozcitak/url@npm:1.0.4" + dependencies: + "@oozcitak/infra": "npm:1.0.8" + "@oozcitak/util": "npm:8.3.8" + checksum: 10c0/49824e30219b1e3bd0133c7302e79ead18dbfff91bc1ebb2f05b3c2cd670ed07b36af0f933faba2bc3221f65ef068fb7fca7d6c3cb8053fbca45f8cdf5670147 + languageName: node + linkType: hard + +"@oozcitak/util@npm:8.3.8": + version: 8.3.8 + resolution: "@oozcitak/util@npm:8.3.8" + checksum: 10c0/1c492abcba79f5dd9bd7709331a614114706e6936a899cac6ac90b63bbe8e98da288e664c13c6acb2a38e3c5ffd47b93f824075ba81384d6192cc364bf126775 + languageName: node + linkType: hard + +"@pkgjs/parseargs@npm:^0.11.0": + version: 0.11.0 + resolution: "@pkgjs/parseargs@npm:0.11.0" + checksum: 10c0/5bd7576bb1b38a47a7fc7b51ac9f38748e772beebc56200450c4a817d712232b8f1d3ef70532c80840243c657d491cf6a6be1e3a214cff907645819fdc34aadd + languageName: node + linkType: hard + +"abbrev@npm:1": + version: 1.1.1 + resolution: "abbrev@npm:1.1.1" + checksum: 10c0/3f762677702acb24f65e813070e306c61fafe25d4b2583f9dfc935131f774863f3addd5741572ed576bd69cabe473c5af18e1e108b829cb7b6b4747884f726e6 + languageName: node + linkType: hard + +"abbrev@npm:^2.0.0": + version: 2.0.0 + resolution: "abbrev@npm:2.0.0" + checksum: 10c0/f742a5a107473946f426c691c08daba61a1d15942616f300b5d32fd735be88fef5cba24201757b6c407fd564555fb48c751cfa33519b2605c8a7aadd22baf372 + languageName: node + linkType: hard + +"agent-base@npm:6": + version: 6.0.2 + resolution: "agent-base@npm:6.0.2" + dependencies: + debug: "npm:4" + checksum: 10c0/dc4f757e40b5f3e3d674bc9beb4f1048f4ee83af189bae39be99f57bf1f48dde166a8b0a5342a84b5944ee8e6ed1e5a9d801858f4ad44764e84957122fe46261 + languageName: node + linkType: hard + +"agent-base@npm:^7.0.2, agent-base@npm:^7.1.0, agent-base@npm:^7.1.1": + version: 7.1.1 + resolution: "agent-base@npm:7.1.1" + dependencies: + debug: "npm:^4.3.4" + checksum: 10c0/e59ce7bed9c63bf071a30cc471f2933862044c97fd9958967bfe22521d7a0f601ce4ed5a8c011799d0c726ca70312142ae193bbebb60f576b52be19d4a363b50 + languageName: node + linkType: hard + +"aggregate-error@npm:^3.0.0": + version: 3.1.0 + resolution: "aggregate-error@npm:3.1.0" + dependencies: + clean-stack: "npm:^2.0.0" + indent-string: "npm:^4.0.0" + checksum: 10c0/a42f67faa79e3e6687a4923050e7c9807db3848a037076f791d10e092677d65c1d2d863b7848560699f40fc0502c19f40963fb1cd1fb3d338a7423df8e45e039 + languageName: node + linkType: hard + +"ajv-formats-draft2019@npm:^1.6.1": + version: 1.6.1 + resolution: "ajv-formats-draft2019@npm:1.6.1" + dependencies: + punycode: "npm:^2.1.1" + schemes: "npm:^1.4.0" + smtp-address-parser: "npm:^1.0.3" + uri-js: "npm:^4.4.1" + peerDependencies: + ajv: "*" + checksum: 10c0/b7e72eaf6663ba7f71f6f46bb2da5888ca46b9bbd36d87e4ee3b8993885016f77e65d438b165f6a09f1b146e7ac11ab7fd3ebe7e265fa66f226b084842266081 + languageName: node + linkType: hard + +"ajv-formats@npm:^3.0.1": + version: 3.0.1 + resolution: "ajv-formats@npm:3.0.1" + dependencies: + ajv: "npm:^8.0.0" + peerDependencies: + ajv: ^8.0.0 + peerDependenciesMeta: + ajv: + optional: true + checksum: 10c0/168d6bca1ea9f163b41c8147bae537e67bd963357a5488a1eaf3abe8baa8eec806d4e45f15b10767e6020679315c7e1e5e6803088dfb84efa2b4e9353b83dd0a + languageName: node + linkType: hard + +"ajv@npm:^8.0.0, ajv@npm:^8.12.0": + version: 8.14.0 + resolution: "ajv@npm:8.14.0" + dependencies: + fast-deep-equal: "npm:^3.1.3" + json-schema-traverse: "npm:^1.0.0" + require-from-string: "npm:^2.0.2" + uri-js: "npm:^4.4.1" + checksum: 10c0/89aedf51bc3cd2a98214ef8d4081a9d5c02cedbfd28ada48deb9ae3d456fdfe3dc8899cce44736c80b3965840e32ba8827032df6a60af5671f27f47f8082a3bf + languageName: node + linkType: hard + +"ansi-regex@npm:^5.0.1": + version: 5.0.1 + resolution: "ansi-regex@npm:5.0.1" + checksum: 10c0/9a64bb8627b434ba9327b60c027742e5d17ac69277960d041898596271d992d4d52ba7267a63ca10232e29f6107fc8a835f6ce8d719b88c5f8493f8254813737 + languageName: node + linkType: hard + +"ansi-regex@npm:^6.0.1": + version: 6.0.1 + resolution: "ansi-regex@npm:6.0.1" + checksum: 10c0/cbe16dbd2c6b2735d1df7976a7070dd277326434f0212f43abf6d87674095d247968209babdaad31bb00882fa68807256ba9be340eec2f1004de14ca75f52a08 + languageName: node + linkType: hard + +"ansi-styles@npm:^4.0.0": + version: 4.3.0 + resolution: "ansi-styles@npm:4.3.0" + dependencies: + color-convert: "npm:^2.0.1" + checksum: 10c0/895a23929da416f2bd3de7e9cb4eabd340949328ab85ddd6e484a637d8f6820d485f53933446f5291c3b760cbc488beb8e88573dd0f9c7daf83dccc8fe81b041 + languageName: node + linkType: hard + +"ansi-styles@npm:^6.1.0": + version: 6.2.1 + resolution: "ansi-styles@npm:6.2.1" + checksum: 10c0/5d1ec38c123984bcedd996eac680d548f31828bd679a66db2bdf11844634dde55fec3efa9c6bb1d89056a5e79c1ac540c4c784d592ea1d25028a92227d2f2d5c + languageName: node + linkType: hard + +"aproba@npm:^1.0.3 || ^2.0.0": + version: 2.0.0 + resolution: "aproba@npm:2.0.0" + checksum: 10c0/d06e26384a8f6245d8c8896e138c0388824e259a329e0c9f196b4fa533c82502a6fd449586e3604950a0c42921832a458bb3aa0aa9f0ba449cfd4f50fd0d09b5 + languageName: node + linkType: hard + +"are-we-there-yet@npm:^2.0.0": + version: 2.0.0 + resolution: "are-we-there-yet@npm:2.0.0" + dependencies: + delegates: "npm:^1.0.0" + readable-stream: "npm:^3.6.0" + checksum: 10c0/375f753c10329153c8d66dc95e8f8b6c7cc2aa66e05cb0960bd69092b10dae22900cacc7d653ad11d26b3ecbdbfe1e8bfb6ccf0265ba8077a7d979970f16b99c + languageName: node + linkType: hard + +"argparse@npm:^1.0.7": + version: 1.0.10 + resolution: "argparse@npm:1.0.10" + dependencies: + sprintf-js: "npm:~1.0.2" + checksum: 10c0/b2972c5c23c63df66bca144dbc65d180efa74f25f8fd9b7d9a0a6c88ae839db32df3d54770dcb6460cf840d232b60695d1a6b1053f599d84e73f7437087712de + languageName: node + linkType: hard + +"balanced-match@npm:^1.0.0": + version: 1.0.2 + resolution: "balanced-match@npm:1.0.2" + checksum: 10c0/9308baf0a7e4838a82bbfd11e01b1cb0f0cf2893bc1676c27c2a8c0e70cbae1c59120c3268517a8ae7fb6376b4639ef81ca22582611dbee4ed28df945134aaee + languageName: node + linkType: hard + +"bindings@npm:~1.5.0": + version: 1.5.0 + resolution: "bindings@npm:1.5.0" + dependencies: + file-uri-to-path: "npm:1.0.0" + checksum: 10c0/3dab2491b4bb24124252a91e656803eac24292473e56554e35bbfe3cc1875332cfa77600c3bac7564049dc95075bf6fcc63a4609920ff2d64d0fe405fcf0d4ba + languageName: node + linkType: hard + +"brace-expansion@npm:^1.1.7": + version: 1.1.11 + resolution: "brace-expansion@npm:1.1.11" + dependencies: + balanced-match: "npm:^1.0.0" + concat-map: "npm:0.0.1" + checksum: 10c0/695a56cd058096a7cb71fb09d9d6a7070113c7be516699ed361317aca2ec169f618e28b8af352e02ab4233fb54eb0168460a40dc320bab0034b36ab59aaad668 + languageName: node + linkType: hard + +"brace-expansion@npm:^2.0.1": + version: 2.0.1 + resolution: "brace-expansion@npm:2.0.1" + dependencies: + balanced-match: "npm:^1.0.0" + checksum: 10c0/b358f2fe060e2d7a87aa015979ecea07f3c37d4018f8d6deb5bd4c229ad3a0384fe6029bb76cd8be63c81e516ee52d1a0673edbe2023d53a5191732ae3c3e49f + languageName: node + linkType: hard + +"cacache@npm:^18.0.0": + version: 18.0.3 + resolution: "cacache@npm:18.0.3" + dependencies: + "@npmcli/fs": "npm:^3.1.0" + fs-minipass: "npm:^3.0.0" + glob: "npm:^10.2.2" + lru-cache: "npm:^10.0.1" + minipass: "npm:^7.0.3" + minipass-collect: "npm:^2.0.1" + minipass-flush: "npm:^1.0.5" + minipass-pipeline: "npm:^1.2.4" + p-map: "npm:^4.0.0" + ssri: "npm:^10.0.0" + tar: "npm:^6.1.11" + unique-filename: "npm:^3.0.0" + checksum: 10c0/dfda92840bb371fb66b88c087c61a74544363b37a265023223a99965b16a16bbb87661fe4948718d79df6e0cc04e85e62784fbcf1832b2a5e54ff4c46fbb45b7 + languageName: node + linkType: hard + +"chownr@npm:^2.0.0": + version: 2.0.0 + resolution: "chownr@npm:2.0.0" + checksum: 10c0/594754e1303672171cc04e50f6c398ae16128eb134a88f801bf5354fd96f205320f23536a045d9abd8b51024a149696e51231565891d4efdab8846021ecf88e6 + languageName: node + linkType: hard + +"clean-stack@npm:^2.0.0": + version: 2.2.0 + resolution: "clean-stack@npm:2.2.0" + checksum: 10c0/1f90262d5f6230a17e27d0c190b09d47ebe7efdd76a03b5a1127863f7b3c9aec4c3e6c8bb3a7bbf81d553d56a1fd35728f5a8ef4c63f867ac8d690109742a8c1 + languageName: node + linkType: hard + +"color-convert@npm:^2.0.1": + version: 2.0.1 + resolution: "color-convert@npm:2.0.1" + dependencies: + color-name: "npm:~1.1.4" + checksum: 10c0/37e1150172f2e311fe1b2df62c6293a342ee7380da7b9cfdba67ea539909afbd74da27033208d01d6d5cfc65ee7868a22e18d7e7648e004425441c0f8a15a7d7 + languageName: node + linkType: hard + +"color-name@npm:~1.1.4": + version: 1.1.4 + resolution: "color-name@npm:1.1.4" + checksum: 10c0/a1a3f914156960902f46f7f56bc62effc6c94e84b2cae157a526b1c1f74b677a47ec602bf68a61abfa2b42d15b7c5651c6dbe72a43af720bc588dff885b10f95 + languageName: node + linkType: hard + +"color-support@npm:^1.1.2": + version: 1.1.3 + resolution: "color-support@npm:1.1.3" + bin: + color-support: bin.js + checksum: 10c0/8ffeaa270a784dc382f62d9be0a98581db43e11eee301af14734a6d089bd456478b1a8b3e7db7ca7dc5b18a75f828f775c44074020b51c05fc00e6d0992b1cc6 + languageName: node + linkType: hard + +"commander@npm:^2.19.0": + version: 2.20.3 + resolution: "commander@npm:2.20.3" + checksum: 10c0/74c781a5248c2402a0a3e966a0a2bba3c054aad144f5c023364be83265e796b20565aa9feff624132ff629aa64e16999fa40a743c10c12f7c61e96a794b99288 + languageName: node + linkType: hard + +"concat-map@npm:0.0.1": + version: 0.0.1 + resolution: "concat-map@npm:0.0.1" + checksum: 10c0/c996b1cfdf95b6c90fee4dae37e332c8b6eb7d106430c17d538034c0ad9a1630cb194d2ab37293b1bdd4d779494beee7786d586a50bd9376fd6f7bcc2bd4c98f + languageName: node + linkType: hard + +"console-control-strings@npm:^1.0.0, console-control-strings@npm:^1.1.0": + version: 1.1.0 + resolution: "console-control-strings@npm:1.1.0" + checksum: 10c0/7ab51d30b52d461412cd467721bb82afe695da78fff8f29fe6f6b9cbaac9a2328e27a22a966014df9532100f6dd85370460be8130b9c677891ba36d96a343f50 + languageName: node + linkType: hard + +"cross-spawn@npm:^7.0.0": + version: 7.0.3 + resolution: "cross-spawn@npm:7.0.3" + dependencies: + path-key: "npm:^3.1.0" + shebang-command: "npm:^2.0.0" + which: "npm:^2.0.1" + checksum: 10c0/5738c312387081c98d69c98e105b6327b069197f864a60593245d64c8089c8a0a744e16349281210d56835bb9274130d825a78b2ad6853ca13cfbeffc0c31750 + languageName: node + linkType: hard + +"debug@npm:4, debug@npm:^4.3.4": + version: 4.3.4 + resolution: "debug@npm:4.3.4" + dependencies: + ms: "npm:2.1.2" + peerDependenciesMeta: + supports-color: + optional: true + checksum: 10c0/cedbec45298dd5c501d01b92b119cd3faebe5438c3917ff11ae1bff86a6c722930ac9c8659792824013168ba6db7c4668225d845c633fbdafbbf902a6389f736 + languageName: node + linkType: hard + +"delegates@npm:^1.0.0": + version: 1.0.0 + resolution: "delegates@npm:1.0.0" + checksum: 10c0/ba05874b91148e1db4bf254750c042bf2215febd23a6d3cda2e64896aef79745fbd4b9996488bd3cafb39ce19dbce0fd6e3b6665275638befffe1c9b312b91b5 + languageName: node + linkType: hard + +"detect-libc@npm:^2.0.0": + version: 2.0.3 + resolution: "detect-libc@npm:2.0.3" + checksum: 10c0/88095bda8f90220c95f162bf92cad70bd0e424913e655c20578600e35b91edc261af27531cf160a331e185c0ced93944bc7e09939143225f56312d7fd800fdb7 + languageName: node + linkType: hard + +"discontinuous-range@npm:1.0.0": + version: 1.0.0 + resolution: "discontinuous-range@npm:1.0.0" + checksum: 10c0/487b105f83c1cc528e25e65d3c4b73958ec79769b7bd0e264414702a23a7e2b282c72982b4bef4af29fcab53f47816c3f0a5c40d85a99a490f4bc35b83dc00f8 + languageName: node + linkType: hard + +"eastasianwidth@npm:^0.2.0": + version: 0.2.0 + resolution: "eastasianwidth@npm:0.2.0" + checksum: 10c0/26f364ebcdb6395f95124fda411f63137a4bfb5d3a06453f7f23dfe52502905bd84e0488172e0f9ec295fdc45f05c23d5d91baf16bd26f0fe9acd777a188dc39 + languageName: node + linkType: hard + +"emoji-regex@npm:^8.0.0": + version: 8.0.0 + resolution: "emoji-regex@npm:8.0.0" + checksum: 10c0/b6053ad39951c4cf338f9092d7bfba448cdfd46fe6a2a034700b149ac9ffbc137e361cbd3c442297f86bed2e5f7576c1b54cc0a6bf8ef5106cc62f496af35010 + languageName: node + linkType: hard + +"emoji-regex@npm:^9.2.2": + version: 9.2.2 + resolution: "emoji-regex@npm:9.2.2" + checksum: 10c0/af014e759a72064cf66e6e694a7fc6b0ed3d8db680427b021a89727689671cefe9d04151b2cad51dbaf85d5ba790d061cd167f1cf32eb7b281f6368b3c181639 + languageName: node + linkType: hard + +"encoding@npm:^0.1.13": + version: 0.1.13 + resolution: "encoding@npm:0.1.13" + dependencies: + iconv-lite: "npm:^0.6.2" + checksum: 10c0/36d938712ff00fe1f4bac88b43bcffb5930c1efa57bbcdca9d67e1d9d6c57cfb1200fb01efe0f3109b2ce99b231f90779532814a81370a1bd3274a0f58585039 + languageName: node + linkType: hard + +"env-paths@npm:^2.2.0": + version: 2.2.1 + resolution: "env-paths@npm:2.2.1" + checksum: 10c0/285325677bf00e30845e330eec32894f5105529db97496ee3f598478e50f008c5352a41a30e5e72ec9de8a542b5a570b85699cd63bd2bc646dbcb9f311d83bc4 + languageName: node + linkType: hard + +"err-code@npm:^2.0.2": + version: 2.0.3 + resolution: "err-code@npm:2.0.3" + checksum: 10c0/b642f7b4dd4a376e954947550a3065a9ece6733ab8e51ad80db727aaae0817c2e99b02a97a3d6cecc648a97848305e728289cf312d09af395403a90c9d4d8a66 + languageName: node + linkType: hard + +"esprima@npm:^4.0.0": + version: 4.0.1 + resolution: "esprima@npm:4.0.1" + bin: + esparse: ./bin/esparse.js + esvalidate: ./bin/esvalidate.js + checksum: 10c0/ad4bab9ead0808cf56501750fd9d3fb276f6b105f987707d059005d57e182d18a7c9ec7f3a01794ebddcca676773e42ca48a32d67a250c9d35e009ca613caba3 + languageName: node + linkType: hard + +"exponential-backoff@npm:^3.1.1": + version: 3.1.1 + resolution: "exponential-backoff@npm:3.1.1" + checksum: 10c0/160456d2d647e6019640bd07111634d8c353038d9fa40176afb7cd49b0548bdae83b56d05e907c2cce2300b81cae35d800ef92fefb9d0208e190fa3b7d6bb579 + languageName: node + linkType: hard + +"extend@npm:^3.0.0": + version: 3.0.2 + resolution: "extend@npm:3.0.2" + checksum: 10c0/73bf6e27406e80aa3e85b0d1c4fd987261e628064e170ca781125c0b635a3dabad5e05adbf07595ea0cf1e6c5396cacb214af933da7cbaf24fe75ff14818e8f9 + languageName: node + linkType: hard + +"fast-deep-equal@npm:^3.1.3": + version: 3.1.3 + resolution: "fast-deep-equal@npm:3.1.3" + checksum: 10c0/40dedc862eb8992c54579c66d914635afbec43350afbbe991235fdcb4e3a8d5af1b23ae7e79bef7d4882d0ecee06c3197488026998fb19f72dc95acff1d1b1d0 + languageName: node + linkType: hard + +"file-uri-to-path@npm:1.0.0": + version: 1.0.0 + resolution: "file-uri-to-path@npm:1.0.0" + checksum: 10c0/3b545e3a341d322d368e880e1c204ef55f1d45cdea65f7efc6c6ce9e0c4d22d802d5629320eb779d006fe59624ac17b0e848d83cc5af7cd101f206cb704f5519 + languageName: node + linkType: hard + +"foreground-child@npm:^3.1.0": + version: 3.1.1 + resolution: "foreground-child@npm:3.1.1" + dependencies: + cross-spawn: "npm:^7.0.0" + signal-exit: "npm:^4.0.1" + checksum: 10c0/9700a0285628abaeb37007c9a4d92bd49f67210f09067638774338e146c8e9c825c5c877f072b2f75f41dc6a2d0be8664f79ffc03f6576649f54a84fb9b47de0 + languageName: node + linkType: hard + +"fs-minipass@npm:^2.0.0": + version: 2.1.0 + resolution: "fs-minipass@npm:2.1.0" + dependencies: + minipass: "npm:^3.0.0" + checksum: 10c0/703d16522b8282d7299337539c3ed6edddd1afe82435e4f5b76e34a79cd74e488a8a0e26a636afc2440e1a23b03878e2122e3a2cfe375a5cf63c37d92b86a004 + languageName: node + linkType: hard + +"fs-minipass@npm:^3.0.0": + version: 3.0.3 + resolution: "fs-minipass@npm:3.0.3" + dependencies: + minipass: "npm:^7.0.3" + checksum: 10c0/63e80da2ff9b621e2cb1596abcb9207f1cf82b968b116ccd7b959e3323144cce7fb141462200971c38bbf2ecca51695069db45265705bed09a7cd93ae5b89f94 + languageName: node + linkType: hard + +"fs.realpath@npm:^1.0.0": + version: 1.0.0 + resolution: "fs.realpath@npm:1.0.0" + checksum: 10c0/444cf1291d997165dfd4c0d58b69f0e4782bfd9149fd72faa4fe299e68e0e93d6db941660b37dd29153bf7186672ececa3b50b7e7249477b03fdf850f287c948 + languageName: node + linkType: hard + +"gauge@npm:^3.0.0": + version: 3.0.2 + resolution: "gauge@npm:3.0.2" + dependencies: + aproba: "npm:^1.0.3 || ^2.0.0" + color-support: "npm:^1.1.2" + console-control-strings: "npm:^1.0.0" + has-unicode: "npm:^2.0.1" + object-assign: "npm:^4.1.1" + signal-exit: "npm:^3.0.0" + string-width: "npm:^4.2.3" + strip-ansi: "npm:^6.0.1" + wide-align: "npm:^1.1.2" + checksum: 10c0/75230ccaf216471e31025c7d5fcea1629596ca20792de50c596eb18ffb14d8404f927cd55535aab2eeecd18d1e11bd6f23ec3c2e9878d2dda1dc74bccc34b913 + languageName: node + linkType: hard + +"github-protocol-dependency@workspace:.": + version: 0.0.0-use.local + resolution: "github-protocol-dependency@workspace:." + dependencies: + "@cyclonedx/cyclonedx-library": "https://github.com/CycloneDX/cyclonedx-javascript-library/releases/download/v6.9.5/cyclonedx-cyclonedx-library-6.9.5.tgz" + languageName: unknown + linkType: soft + +"glob@npm:^10.2.2, glob@npm:^10.3.10": + version: 10.4.1 + resolution: "glob@npm:10.4.1" + dependencies: + foreground-child: "npm:^3.1.0" + jackspeak: "npm:^3.1.2" + minimatch: "npm:^9.0.4" + minipass: "npm:^7.1.2" + path-scurry: "npm:^1.11.1" + bin: + glob: dist/esm/bin.mjs + checksum: 10c0/77f2900ed98b9cc2a0e1901ee5e476d664dae3cd0f1b662b8bfd4ccf00d0edc31a11595807706a274ca10e1e251411bbf2e8e976c82bed0d879a9b89343ed379 + languageName: node + linkType: hard + +"glob@npm:^7.1.3": + version: 7.2.3 + resolution: "glob@npm:7.2.3" + dependencies: + fs.realpath: "npm:^1.0.0" + inflight: "npm:^1.0.4" + inherits: "npm:2" + minimatch: "npm:^3.1.1" + once: "npm:^1.3.0" + path-is-absolute: "npm:^1.0.0" + checksum: 10c0/65676153e2b0c9095100fe7f25a778bf45608eeb32c6048cf307f579649bcc30353277b3b898a3792602c65764e5baa4f643714dfbdfd64ea271d210c7a425fe + languageName: node + linkType: hard + +"graceful-fs@npm:^4.2.6": + version: 4.2.11 + resolution: "graceful-fs@npm:4.2.11" + checksum: 10c0/386d011a553e02bc594ac2ca0bd6d9e4c22d7fa8cfbfc448a6d148c59ea881b092db9dbe3547ae4b88e55f1b01f7c4a2ecc53b310c042793e63aa44cf6c257f2 + languageName: node + linkType: hard + +"has-unicode@npm:^2.0.1": + version: 2.0.1 + resolution: "has-unicode@npm:2.0.1" + checksum: 10c0/ebdb2f4895c26bb08a8a100b62d362e49b2190bcfd84b76bc4be1a3bd4d254ec52d0dd9f2fbcc093fc5eb878b20c52146f9dfd33e2686ed28982187be593b47c + languageName: node + linkType: hard + +"http-cache-semantics@npm:^4.1.1": + version: 4.1.1 + resolution: "http-cache-semantics@npm:4.1.1" + checksum: 10c0/ce1319b8a382eb3cbb4a37c19f6bfe14e5bb5be3d09079e885e8c513ab2d3cd9214902f8a31c9dc4e37022633ceabfc2d697405deeaf1b8f3552bb4ed996fdfc + languageName: node + linkType: hard + +"http-proxy-agent@npm:^7.0.0": + version: 7.0.2 + resolution: "http-proxy-agent@npm:7.0.2" + dependencies: + agent-base: "npm:^7.1.0" + debug: "npm:^4.3.4" + checksum: 10c0/4207b06a4580fb85dd6dff521f0abf6db517489e70863dca1a0291daa7f2d3d2d6015a57bd702af068ea5cf9f1f6ff72314f5f5b4228d299c0904135d2aef921 + languageName: node + linkType: hard + +"https-proxy-agent@npm:^5.0.0": + version: 5.0.1 + resolution: "https-proxy-agent@npm:5.0.1" + dependencies: + agent-base: "npm:6" + debug: "npm:4" + checksum: 10c0/6dd639f03434003577c62b27cafdb864784ef19b2de430d8ae2a1d45e31c4fd60719e5637b44db1a88a046934307da7089e03d6089ec3ddacc1189d8de8897d1 + languageName: node + linkType: hard + +"https-proxy-agent@npm:^7.0.1": + version: 7.0.4 + resolution: "https-proxy-agent@npm:7.0.4" + dependencies: + agent-base: "npm:^7.0.2" + debug: "npm:4" + checksum: 10c0/bc4f7c38da32a5fc622450b6cb49a24ff596f9bd48dcedb52d2da3fa1c1a80e100fb506bd59b326c012f21c863c69b275c23de1a01d0b84db396822fdf25e52b + languageName: node + linkType: hard + +"iconv-lite@npm:^0.6.2": + version: 0.6.3 + resolution: "iconv-lite@npm:0.6.3" + dependencies: + safer-buffer: "npm:>= 2.1.2 < 3.0.0" + checksum: 10c0/98102bc66b33fcf5ac044099d1257ba0b7ad5e3ccd3221f34dd508ab4070edff183276221684e1e0555b145fce0850c9f7d2b60a9fcac50fbb4ea0d6e845a3b1 + languageName: node + linkType: hard + +"imurmurhash@npm:^0.1.4": + version: 0.1.4 + resolution: "imurmurhash@npm:0.1.4" + checksum: 10c0/8b51313850dd33605c6c9d3fd9638b714f4c4c40250cff658209f30d40da60f78992fb2df5dabee4acf589a6a82bbc79ad5486550754bd9ec4e3fc0d4a57d6a6 + languageName: node + linkType: hard + +"indent-string@npm:^4.0.0": + version: 4.0.0 + resolution: "indent-string@npm:4.0.0" + checksum: 10c0/1e1904ddb0cb3d6cce7cd09e27a90184908b7a5d5c21b92e232c93579d314f0b83c246ffb035493d0504b1e9147ba2c9b21df0030f48673fba0496ecd698161f + languageName: node + linkType: hard + +"inflight@npm:^1.0.4": + version: 1.0.6 + resolution: "inflight@npm:1.0.6" + dependencies: + once: "npm:^1.3.0" + wrappy: "npm:1" + checksum: 10c0/7faca22584600a9dc5b9fca2cd5feb7135ac8c935449837b315676b4c90aa4f391ec4f42240178244b5a34e8bede1948627fda392ca3191522fc46b34e985ab2 + languageName: node + linkType: hard + +"inherits@npm:2, inherits@npm:^2.0.3": + version: 2.0.4 + resolution: "inherits@npm:2.0.4" + checksum: 10c0/4e531f648b29039fb7426fb94075e6545faa1eb9fe83c29f0b6d9e7263aceb4289d2d4557db0d428188eeb449cc7c5e77b0a0b2c4e248ff2a65933a0dee49ef2 + languageName: node + linkType: hard + +"ip-address@npm:^9.0.5": + version: 9.0.5 + resolution: "ip-address@npm:9.0.5" + dependencies: + jsbn: "npm:1.1.0" + sprintf-js: "npm:^1.1.3" + checksum: 10c0/331cd07fafcb3b24100613e4b53e1a2b4feab11e671e655d46dc09ee233da5011284d09ca40c4ecbdfe1d0004f462958675c224a804259f2f78d2465a87824bc + languageName: node + linkType: hard + +"is-fullwidth-code-point@npm:^3.0.0": + version: 3.0.0 + resolution: "is-fullwidth-code-point@npm:3.0.0" + checksum: 10c0/bb11d825e049f38e04c06373a8d72782eee0205bda9d908cc550ccb3c59b99d750ff9537982e01733c1c94a58e35400661f57042158ff5e8f3e90cf936daf0fc + languageName: node + linkType: hard + +"is-lambda@npm:^1.0.1": + version: 1.0.1 + resolution: "is-lambda@npm:1.0.1" + checksum: 10c0/85fee098ae62ba6f1e24cf22678805473c7afd0fb3978a3aa260e354cb7bcb3a5806cf0a98403188465efedec41ab4348e8e4e79305d409601323855b3839d4d + languageName: node + linkType: hard + +"isexe@npm:^2.0.0": + version: 2.0.0 + resolution: "isexe@npm:2.0.0" + checksum: 10c0/228cfa503fadc2c31596ab06ed6aa82c9976eec2bfd83397e7eaf06d0ccf42cd1dfd6743bf9aeb01aebd4156d009994c5f76ea898d2832c1fe342da923ca457d + languageName: node + linkType: hard + +"isexe@npm:^3.1.1": + version: 3.1.1 + resolution: "isexe@npm:3.1.1" + checksum: 10c0/9ec257654093443eb0a528a9c8cbba9c0ca7616ccb40abd6dde7202734d96bb86e4ac0d764f0f8cd965856aacbff2f4ce23e730dc19dfb41e3b0d865ca6fdcc7 + languageName: node + linkType: hard + +"jackspeak@npm:^3.1.2": + version: 3.1.2 + resolution: "jackspeak@npm:3.1.2" + dependencies: + "@isaacs/cliui": "npm:^8.0.2" + "@pkgjs/parseargs": "npm:^0.11.0" + dependenciesMeta: + "@pkgjs/parseargs": + optional: true + checksum: 10c0/5f1922a1ca0f19869e23f0dc4374c60d36e922f7926c76fecf8080cc6f7f798d6a9caac1b9428327d14c67731fd551bb3454cb270a5e13a0718f3b3660ec3d5d + languageName: node + linkType: hard + +"js-yaml@npm:3.14.1": + version: 3.14.1 + resolution: "js-yaml@npm:3.14.1" + dependencies: + argparse: "npm:^1.0.7" + esprima: "npm:^4.0.0" + bin: + js-yaml: bin/js-yaml.js + checksum: 10c0/6746baaaeac312c4db8e75fa22331d9a04cccb7792d126ed8ce6a0bbcfef0cedaddd0c5098fade53db067c09fe00aa1c957674b4765610a8b06a5a189e46433b + languageName: node + linkType: hard + +"jsbn@npm:1.1.0": + version: 1.1.0 + resolution: "jsbn@npm:1.1.0" + checksum: 10c0/4f907fb78d7b712e11dea8c165fe0921f81a657d3443dde75359ed52eb2b5d33ce6773d97985a089f09a65edd80b11cb75c767b57ba47391fee4c969f7215c96 + languageName: node + linkType: hard + +"json-schema-traverse@npm:^1.0.0": + version: 1.0.0 + resolution: "json-schema-traverse@npm:1.0.0" + checksum: 10c0/71e30015d7f3d6dc1c316d6298047c8ef98a06d31ad064919976583eb61e1018a60a0067338f0f79cabc00d84af3fcc489bd48ce8a46ea165d9541ba17fb30c6 + languageName: node + linkType: hard + +"libxmljs2@npm:^0.31 || ^0.32 || ^0.33": + version: 0.33.0 + resolution: "libxmljs2@npm:0.33.0" + dependencies: + "@mapbox/node-pre-gyp": "npm:^1.0.11" + bindings: "npm:~1.5.0" + nan: "npm:~2.18.0" + checksum: 10c0/a9b6908798562da87f9a7a7e613d5d40440f6b68ff86718bba75768d00425d032a7a0dcc7f2f311349fc5674bf758f55d1f8e91cb19860315c611405d0ca3814 + languageName: node + linkType: hard + +"lru-cache@npm:^10.0.1, lru-cache@npm:^10.2.0": + version: 10.2.2 + resolution: "lru-cache@npm:10.2.2" + checksum: 10c0/402d31094335851220d0b00985084288136136992979d0e015f0f1697e15d1c86052d7d53ae86b614e5b058425606efffc6969a31a091085d7a2b80a8a1e26d6 + languageName: node + linkType: hard + +"make-dir@npm:^3.1.0": + version: 3.1.0 + resolution: "make-dir@npm:3.1.0" + dependencies: + semver: "npm:^6.0.0" + checksum: 10c0/56aaafefc49c2dfef02c5c95f9b196c4eb6988040cf2c712185c7fe5c99b4091591a7fc4d4eafaaefa70ff763a26f6ab8c3ff60b9e75ea19876f49b18667ecaa + languageName: node + linkType: hard + +"make-fetch-happen@npm:^13.0.0": + version: 13.0.1 + resolution: "make-fetch-happen@npm:13.0.1" + dependencies: + "@npmcli/agent": "npm:^2.0.0" + cacache: "npm:^18.0.0" + http-cache-semantics: "npm:^4.1.1" + is-lambda: "npm:^1.0.1" + minipass: "npm:^7.0.2" + minipass-fetch: "npm:^3.0.0" + minipass-flush: "npm:^1.0.5" + minipass-pipeline: "npm:^1.2.4" + negotiator: "npm:^0.6.3" + proc-log: "npm:^4.2.0" + promise-retry: "npm:^2.0.1" + ssri: "npm:^10.0.0" + checksum: 10c0/df5f4dbb6d98153b751bccf4dc4cc500de85a96a9331db9805596c46aa9f99d9555983954e6c1266d9f981ae37a9e4647f42b9a4bb5466f867f4012e582c9e7e + languageName: node + linkType: hard + +"minimatch@npm:^3.1.1": + version: 3.1.2 + resolution: "minimatch@npm:3.1.2" + dependencies: + brace-expansion: "npm:^1.1.7" + checksum: 10c0/0262810a8fc2e72cca45d6fd86bd349eee435eb95ac6aa45c9ea2180e7ee875ef44c32b55b5973ceabe95ea12682f6e3725cbb63d7a2d1da3ae1163c8b210311 + languageName: node + linkType: hard + +"minimatch@npm:^9.0.4": + version: 9.0.4 + resolution: "minimatch@npm:9.0.4" + dependencies: + brace-expansion: "npm:^2.0.1" + checksum: 10c0/2c16f21f50e64922864e560ff97c587d15fd491f65d92a677a344e970fe62aafdbeafe648965fa96d33c061b4d0eabfe0213466203dd793367e7f28658cf6414 + languageName: node + linkType: hard + +"minipass-collect@npm:^2.0.1": + version: 2.0.1 + resolution: "minipass-collect@npm:2.0.1" + dependencies: + minipass: "npm:^7.0.3" + checksum: 10c0/5167e73f62bb74cc5019594709c77e6a742051a647fe9499abf03c71dca75515b7959d67a764bdc4f8b361cf897fbf25e2d9869ee039203ed45240f48b9aa06e + languageName: node + linkType: hard + +"minipass-fetch@npm:^3.0.0": + version: 3.0.5 + resolution: "minipass-fetch@npm:3.0.5" + dependencies: + encoding: "npm:^0.1.13" + minipass: "npm:^7.0.3" + minipass-sized: "npm:^1.0.3" + minizlib: "npm:^2.1.2" + dependenciesMeta: + encoding: + optional: true + checksum: 10c0/9d702d57f556274286fdd97e406fc38a2f5c8d15e158b498d7393b1105974b21249289ec571fa2b51e038a4872bfc82710111cf75fae98c662f3d6f95e72152b + languageName: node + linkType: hard + +"minipass-flush@npm:^1.0.5": + version: 1.0.5 + resolution: "minipass-flush@npm:1.0.5" + dependencies: + minipass: "npm:^3.0.0" + checksum: 10c0/2a51b63feb799d2bb34669205eee7c0eaf9dce01883261a5b77410c9408aa447e478efd191b4de6fc1101e796ff5892f8443ef20d9544385819093dbb32d36bd + languageName: node + linkType: hard + +"minipass-pipeline@npm:^1.2.4": + version: 1.2.4 + resolution: "minipass-pipeline@npm:1.2.4" + dependencies: + minipass: "npm:^3.0.0" + checksum: 10c0/cbda57cea20b140b797505dc2cac71581a70b3247b84480c1fed5ca5ba46c25ecc25f68bfc9e6dcb1a6e9017dab5c7ada5eab73ad4f0a49d84e35093e0c643f2 + languageName: node + linkType: hard + +"minipass-sized@npm:^1.0.3": + version: 1.0.3 + resolution: "minipass-sized@npm:1.0.3" + dependencies: + minipass: "npm:^3.0.0" + checksum: 10c0/298f124753efdc745cfe0f2bdfdd81ba25b9f4e753ca4a2066eb17c821f25d48acea607dfc997633ee5bf7b6dfffb4eee4f2051eb168663f0b99fad2fa4829cb + languageName: node + linkType: hard + +"minipass@npm:^3.0.0": + version: 3.3.6 + resolution: "minipass@npm:3.3.6" + dependencies: + yallist: "npm:^4.0.0" + checksum: 10c0/a114746943afa1dbbca8249e706d1d38b85ed1298b530f5808ce51f8e9e941962e2a5ad2e00eae7dd21d8a4aae6586a66d4216d1a259385e9d0358f0c1eba16c + languageName: node + linkType: hard + +"minipass@npm:^5.0.0": + version: 5.0.0 + resolution: "minipass@npm:5.0.0" + checksum: 10c0/a91d8043f691796a8ac88df039da19933ef0f633e3d7f0d35dcd5373af49131cf2399bfc355f41515dc495e3990369c3858cd319e5c2722b4753c90bf3152462 + languageName: node + linkType: hard + +"minipass@npm:^5.0.0 || ^6.0.2 || ^7.0.0, minipass@npm:^7.0.2, minipass@npm:^7.0.3, minipass@npm:^7.1.2": + version: 7.1.2 + resolution: "minipass@npm:7.1.2" + checksum: 10c0/b0fd20bb9fb56e5fa9a8bfac539e8915ae07430a619e4b86ff71f5fc757ef3924b23b2c4230393af1eda647ed3d75739e4e0acb250a6b1eb277cf7f8fe449557 + languageName: node + linkType: hard + +"minizlib@npm:^2.1.1, minizlib@npm:^2.1.2": + version: 2.1.2 + resolution: "minizlib@npm:2.1.2" + dependencies: + minipass: "npm:^3.0.0" + yallist: "npm:^4.0.0" + checksum: 10c0/64fae024e1a7d0346a1102bb670085b17b7f95bf6cfdf5b128772ec8faf9ea211464ea4add406a3a6384a7d87a0cd1a96263692134323477b4fb43659a6cab78 + languageName: node + linkType: hard + +"mkdirp@npm:^1.0.3": + version: 1.0.4 + resolution: "mkdirp@npm:1.0.4" + bin: + mkdirp: bin/cmd.js + checksum: 10c0/46ea0f3ffa8bc6a5bc0c7081ffc3907777f0ed6516888d40a518c5111f8366d97d2678911ad1a6882bf592fa9de6c784fea32e1687bb94e1f4944170af48a5cf + languageName: node + linkType: hard + +"moo@npm:^0.5.0": + version: 0.5.2 + resolution: "moo@npm:0.5.2" + checksum: 10c0/a9d9ad8198a51fe35d297f6e9fdd718298ca0b39a412e868a0ebd92286379ab4533cfc1f1f34516177f5129988ab25fe598f78e77c84e3bfe0d4a877b56525a8 + languageName: node + linkType: hard + +"ms@npm:2.1.2": + version: 2.1.2 + resolution: "ms@npm:2.1.2" + checksum: 10c0/a437714e2f90dbf881b5191d35a6db792efbca5badf112f87b9e1c712aace4b4b9b742dd6537f3edf90fd6f684de897cec230abde57e87883766712ddda297cc + languageName: node + linkType: hard + +"nan@npm:~2.18.0": + version: 2.18.0 + resolution: "nan@npm:2.18.0" + dependencies: + node-gyp: "npm:latest" + checksum: 10c0/9209d80134fdb98c0afe35c1372d2b930a0a8d3c52706cb5e4257a27e9845c375f7a8daedadadec8d6403ca2eebb3b37d362ff5d1ec03249462abf65fef2a148 + languageName: node + linkType: hard + +"nearley@npm:^2.20.1": + version: 2.20.1 + resolution: "nearley@npm:2.20.1" + dependencies: + commander: "npm:^2.19.0" + moo: "npm:^0.5.0" + railroad-diagrams: "npm:^1.0.0" + randexp: "npm:0.4.6" + bin: + nearley-railroad: bin/nearley-railroad.js + nearley-test: bin/nearley-test.js + nearley-unparse: bin/nearley-unparse.js + nearleyc: bin/nearleyc.js + checksum: 10c0/d25e1fd40b19c53a0ada6a688670f4a39063fd9553ab62885e81a82927d51572ce47193b946afa3d85efa608ba2c68f433c421f69b854bfb7f599eacb5fae37e + languageName: node + linkType: hard + +"negotiator@npm:^0.6.3": + version: 0.6.3 + resolution: "negotiator@npm:0.6.3" + checksum: 10c0/3ec9fd413e7bf071c937ae60d572bc67155262068ed522cf4b3be5edbe6ddf67d095ec03a3a14ebf8fc8e95f8e1d61be4869db0dbb0de696f6b837358bd43fc2 + languageName: node + linkType: hard + +"node-fetch@npm:^2.6.7": + version: 2.7.0 + resolution: "node-fetch@npm:2.7.0" + dependencies: + whatwg-url: "npm:^5.0.0" + peerDependencies: + encoding: ^0.1.0 + peerDependenciesMeta: + encoding: + optional: true + checksum: 10c0/b55786b6028208e6fbe594ccccc213cab67a72899c9234eb59dba51062a299ea853210fcf526998eaa2867b0963ad72338824450905679ff0fa304b8c5093ae8 + languageName: node + linkType: hard + +"node-gyp@npm:latest": + version: 10.1.0 + resolution: "node-gyp@npm:10.1.0" + dependencies: + env-paths: "npm:^2.2.0" + exponential-backoff: "npm:^3.1.1" + glob: "npm:^10.3.10" + graceful-fs: "npm:^4.2.6" + make-fetch-happen: "npm:^13.0.0" + nopt: "npm:^7.0.0" + proc-log: "npm:^3.0.0" + semver: "npm:^7.3.5" + tar: "npm:^6.1.2" + which: "npm:^4.0.0" + bin: + node-gyp: bin/node-gyp.js + checksum: 10c0/9cc821111ca244a01fb7f054db7523ab0a0cd837f665267eb962eb87695d71fb1e681f9e21464cc2fd7c05530dc4c81b810bca1a88f7d7186909b74477491a3c + languageName: node + linkType: hard + +"nopt@npm:^5.0.0": + version: 5.0.0 + resolution: "nopt@npm:5.0.0" + dependencies: + abbrev: "npm:1" + bin: + nopt: bin/nopt.js + checksum: 10c0/fc5c4f07155cb455bf5fc3dd149fac421c1a40fd83c6bfe83aa82b52f02c17c5e88301321318adaa27611c8a6811423d51d29deaceab5fa158b585a61a551061 + languageName: node + linkType: hard + +"nopt@npm:^7.0.0": + version: 7.2.1 + resolution: "nopt@npm:7.2.1" + dependencies: + abbrev: "npm:^2.0.0" + bin: + nopt: bin/nopt.js + checksum: 10c0/a069c7c736767121242037a22a788863accfa932ab285a1eb569eb8cd534b09d17206f68c37f096ae785647435e0c5a5a0a67b42ec743e481a455e5ae6a6df81 + languageName: node + linkType: hard + +"npmlog@npm:^5.0.1": + version: 5.0.1 + resolution: "npmlog@npm:5.0.1" + dependencies: + are-we-there-yet: "npm:^2.0.0" + console-control-strings: "npm:^1.1.0" + gauge: "npm:^3.0.0" + set-blocking: "npm:^2.0.0" + checksum: 10c0/489ba519031013001135c463406f55491a17fc7da295c18a04937fe3a4d523fd65e88dd418a28b967ab743d913fdeba1e29838ce0ad8c75557057c481f7d49fa + languageName: node + linkType: hard + +"object-assign@npm:^4.1.1": + version: 4.1.1 + resolution: "object-assign@npm:4.1.1" + checksum: 10c0/1f4df9945120325d041ccf7b86f31e8bcc14e73d29171e37a7903050e96b81323784ec59f93f102ec635bcf6fa8034ba3ea0a8c7e69fa202b87ae3b6cec5a414 + languageName: node + linkType: hard + +"once@npm:^1.3.0": + version: 1.4.0 + resolution: "once@npm:1.4.0" + dependencies: + wrappy: "npm:1" + checksum: 10c0/5d48aca287dfefabd756621c5dfce5c91a549a93e9fdb7b8246bc4c4790aa2ec17b34a260530474635147aeb631a2dcc8b32c613df0675f96041cbb8244517d0 + languageName: node + linkType: hard + +"p-map@npm:^4.0.0": + version: 4.0.0 + resolution: "p-map@npm:4.0.0" + dependencies: + aggregate-error: "npm:^3.0.0" + checksum: 10c0/592c05bd6262c466ce269ff172bb8de7c6975afca9b50c975135b974e9bdaafbfe80e61aaaf5be6d1200ba08b30ead04b88cfa7e25ff1e3b93ab28c9f62a2c75 + languageName: node + linkType: hard + +"packageurl-js@npm:>=0.0.6 <0.0.8 || ^1": + version: 1.2.1 + resolution: "packageurl-js@npm:1.2.1" + checksum: 10c0/52e45da7704a2bc70baa3f2643dc48bbf60787379318781d84336954dc6b14c34ad9697f11a47798410d7cafaec3f4b8b878707cccf5edb62a6a5fa4fdb50491 + languageName: node + linkType: hard + +"path-is-absolute@npm:^1.0.0": + version: 1.0.1 + resolution: "path-is-absolute@npm:1.0.1" + checksum: 10c0/127da03c82172a2a50099cddbf02510c1791fc2cc5f7713ddb613a56838db1e8168b121a920079d052e0936c23005562059756d653b7c544c53185efe53be078 + languageName: node + linkType: hard + +"path-key@npm:^3.1.0": + version: 3.1.1 + resolution: "path-key@npm:3.1.1" + checksum: 10c0/748c43efd5a569c039d7a00a03b58eecd1d75f3999f5a28303d75f521288df4823bc057d8784eb72358b2895a05f29a070bc9f1f17d28226cc4e62494cc58c4c + languageName: node + linkType: hard + +"path-scurry@npm:^1.11.1": + version: 1.11.1 + resolution: "path-scurry@npm:1.11.1" + dependencies: + lru-cache: "npm:^10.2.0" + minipass: "npm:^5.0.0 || ^6.0.2 || ^7.0.0" + checksum: 10c0/32a13711a2a505616ae1cc1b5076801e453e7aae6ac40ab55b388bb91b9d0547a52f5aaceff710ea400205f18691120d4431e520afbe4266b836fadede15872d + languageName: node + linkType: hard + +"proc-log@npm:^3.0.0": + version: 3.0.0 + resolution: "proc-log@npm:3.0.0" + checksum: 10c0/f66430e4ff947dbb996058f6fd22de2c66612ae1a89b097744e17fb18a4e8e7a86db99eda52ccf15e53f00b63f4ec0b0911581ff2aac0355b625c8eac509b0dc + languageName: node + linkType: hard + +"proc-log@npm:^4.2.0": + version: 4.2.0 + resolution: "proc-log@npm:4.2.0" + checksum: 10c0/17db4757c2a5c44c1e545170e6c70a26f7de58feb985091fb1763f5081cab3d01b181fb2dd240c9f4a4255a1d9227d163d5771b7e69c9e49a561692db865efb9 + languageName: node + linkType: hard + +"promise-retry@npm:^2.0.1": + version: 2.0.1 + resolution: "promise-retry@npm:2.0.1" + dependencies: + err-code: "npm:^2.0.2" + retry: "npm:^0.12.0" + checksum: 10c0/9c7045a1a2928094b5b9b15336dcd2a7b1c052f674550df63cc3f36cd44028e5080448175b6f6ca32b642de81150f5e7b1a98b728f15cb069f2dd60ac2616b96 + languageName: node + linkType: hard + +"punycode@npm:^2.1.0, punycode@npm:^2.1.1": + version: 2.3.1 + resolution: "punycode@npm:2.3.1" + checksum: 10c0/14f76a8206bc3464f794fb2e3d3cc665ae416c01893ad7a02b23766eb07159144ee612ad67af5e84fa4479ccfe67678c4feb126b0485651b302babf66f04f9e9 + languageName: node + linkType: hard + +"railroad-diagrams@npm:^1.0.0": + version: 1.0.0 + resolution: "railroad-diagrams@npm:1.0.0" + checksum: 10c0/81bf8f86870a69fb9ed243102db9ad6416d09c4cb83964490d44717690e07dd982f671503236a1f8af28f4cb79d5d7a87613930f10ac08defa845ceb6764e364 + languageName: node + linkType: hard + +"randexp@npm:0.4.6": + version: 0.4.6 + resolution: "randexp@npm:0.4.6" + dependencies: + discontinuous-range: "npm:1.0.0" + ret: "npm:~0.1.10" + checksum: 10c0/14ee14b6d7f5ce69609b51cc914fb7a7c82ad337820a141c5f762c5ad1fe868f5191ea6e82359aee019b625ee1359486628fa833909d12c3b5dd9571908c3345 + languageName: node + linkType: hard + +"readable-stream@npm:^3.6.0": + version: 3.6.2 + resolution: "readable-stream@npm:3.6.2" + dependencies: + inherits: "npm:^2.0.3" + string_decoder: "npm:^1.1.1" + util-deprecate: "npm:^1.0.1" + checksum: 10c0/e37be5c79c376fdd088a45fa31ea2e423e5d48854be7a22a58869b4e84d25047b193f6acb54f1012331e1bcd667ffb569c01b99d36b0bd59658fb33f513511b7 + languageName: node + linkType: hard + +"require-from-string@npm:^2.0.2": + version: 2.0.2 + resolution: "require-from-string@npm:2.0.2" + checksum: 10c0/aaa267e0c5b022fc5fd4eef49d8285086b15f2a1c54b28240fdf03599cbd9c26049fee3eab894f2e1f6ca65e513b030a7c264201e3f005601e80c49fb2937ce2 + languageName: node + linkType: hard + +"ret@npm:~0.1.10": + version: 0.1.15 + resolution: "ret@npm:0.1.15" + checksum: 10c0/01f77cad0f7ea4f955852c03d66982609893edc1240c0c964b4c9251d0f9fb6705150634060d169939b096d3b77f4c84d6b6098a5b5d340160898c8581f1f63f + languageName: node + linkType: hard + +"retry@npm:^0.12.0": + version: 0.12.0 + resolution: "retry@npm:0.12.0" + checksum: 10c0/59933e8501727ba13ad73ef4a04d5280b3717fd650408460c987392efe9d7be2040778ed8ebe933c5cbd63da3dcc37919c141ef8af0a54a6e4fca5a2af177bfe + languageName: node + linkType: hard + +"rimraf@npm:^3.0.2": + version: 3.0.2 + resolution: "rimraf@npm:3.0.2" + dependencies: + glob: "npm:^7.1.3" + bin: + rimraf: bin.js + checksum: 10c0/9cb7757acb489bd83757ba1a274ab545eafd75598a9d817e0c3f8b164238dd90eba50d6b848bd4dcc5f3040912e882dc7ba71653e35af660d77b25c381d402e8 + languageName: node + linkType: hard + +"safe-buffer@npm:~5.2.0": + version: 5.2.1 + resolution: "safe-buffer@npm:5.2.1" + checksum: 10c0/6501914237c0a86e9675d4e51d89ca3c21ffd6a31642efeba25ad65720bce6921c9e7e974e5be91a786b25aa058b5303285d3c15dbabf983a919f5f630d349f3 + languageName: node + linkType: hard + +"safer-buffer@npm:>= 2.1.2 < 3.0.0": + version: 2.1.2 + resolution: "safer-buffer@npm:2.1.2" + checksum: 10c0/7e3c8b2e88a1841c9671094bbaeebd94448111dd90a81a1f606f3f67708a6ec57763b3b47f06da09fc6054193e0e6709e77325415dc8422b04497a8070fa02d4 + languageName: node + linkType: hard + +"schemes@npm:^1.4.0": + version: 1.4.0 + resolution: "schemes@npm:1.4.0" + dependencies: + extend: "npm:^3.0.0" + checksum: 10c0/4ef20fe8dd2818d9a9d4dbc0b8491770435565978e44d511175e3b900194cbc9280db3648f6e90baed791c3ee65cff5c03b61a7b6f0ce61c65424f850cba5ac9 + languageName: node + linkType: hard + +"semver@npm:^6.0.0": + version: 6.3.1 + resolution: "semver@npm:6.3.1" + bin: + semver: bin/semver.js + checksum: 10c0/e3d79b609071caa78bcb6ce2ad81c7966a46a7431d9d58b8800cfa9cb6a63699b3899a0e4bcce36167a284578212d9ae6942b6929ba4aa5015c079a67751d42d + languageName: node + linkType: hard + +"semver@npm:^7.3.5": + version: 7.6.2 + resolution: "semver@npm:7.6.2" + bin: + semver: bin/semver.js + checksum: 10c0/97d3441e97ace8be4b1976433d1c32658f6afaff09f143e52c593bae7eef33de19e3e369c88bd985ce1042c6f441c80c6803078d1de2a9988080b66684cbb30c + languageName: node + linkType: hard + +"set-blocking@npm:^2.0.0": + version: 2.0.0 + resolution: "set-blocking@npm:2.0.0" + checksum: 10c0/9f8c1b2d800800d0b589de1477c753492de5c1548d4ade52f57f1d1f5e04af5481554d75ce5e5c43d4004b80a3eb714398d6907027dc0534177b7539119f4454 + languageName: node + linkType: hard + +"shebang-command@npm:^2.0.0": + version: 2.0.0 + resolution: "shebang-command@npm:2.0.0" + dependencies: + shebang-regex: "npm:^3.0.0" + checksum: 10c0/a41692e7d89a553ef21d324a5cceb5f686d1f3c040759c50aab69688634688c5c327f26f3ecf7001ebfd78c01f3c7c0a11a7c8bfd0a8bc9f6240d4f40b224e4e + languageName: node + linkType: hard + +"shebang-regex@npm:^3.0.0": + version: 3.0.0 + resolution: "shebang-regex@npm:3.0.0" + checksum: 10c0/1dbed0726dd0e1152a92696c76c7f06084eb32a90f0528d11acd764043aacf76994b2fb30aa1291a21bd019d6699164d048286309a278855ee7bec06cf6fb690 + languageName: node + linkType: hard + +"signal-exit@npm:^3.0.0": + version: 3.0.7 + resolution: "signal-exit@npm:3.0.7" + checksum: 10c0/25d272fa73e146048565e08f3309d5b942c1979a6f4a58a8c59d5fa299728e9c2fcd1a759ec870863b1fd38653670240cd420dad2ad9330c71f36608a6a1c912 + languageName: node + linkType: hard + +"signal-exit@npm:^4.0.1": + version: 4.1.0 + resolution: "signal-exit@npm:4.1.0" + checksum: 10c0/41602dce540e46d599edba9d9860193398d135f7ff72cab629db5171516cfae628d21e7bfccde1bbfdf11c48726bc2a6d1a8fb8701125852fbfda7cf19c6aa83 + languageName: node + linkType: hard + +"smart-buffer@npm:^4.2.0": + version: 4.2.0 + resolution: "smart-buffer@npm:4.2.0" + checksum: 10c0/a16775323e1404dd43fabafe7460be13a471e021637bc7889468eb45ce6a6b207261f454e4e530a19500cc962c4cc5348583520843b363f4193cee5c00e1e539 + languageName: node + linkType: hard + +"smtp-address-parser@npm:^1.0.3": + version: 1.0.10 + resolution: "smtp-address-parser@npm:1.0.10" + dependencies: + nearley: "npm:^2.20.1" + checksum: 10c0/946a06d81721e8fb0ea7cb26c3726523b2a82389aee523a28ace4e913a406da63e66b2fd27d946f0cff676cc2f2f58e822783d5ec4721786a7224be3f0211b62 + languageName: node + linkType: hard + +"socks-proxy-agent@npm:^8.0.3": + version: 8.0.3 + resolution: "socks-proxy-agent@npm:8.0.3" + dependencies: + agent-base: "npm:^7.1.1" + debug: "npm:^4.3.4" + socks: "npm:^2.7.1" + checksum: 10c0/4950529affd8ccd6951575e21c1b7be8531b24d924aa4df3ee32df506af34b618c4e50d261f4cc603f1bfd8d426915b7d629966c8ce45b05fb5ad8c8b9a6459d + languageName: node + linkType: hard + +"socks@npm:^2.7.1": + version: 2.8.3 + resolution: "socks@npm:2.8.3" + dependencies: + ip-address: "npm:^9.0.5" + smart-buffer: "npm:^4.2.0" + checksum: 10c0/d54a52bf9325165770b674a67241143a3d8b4e4c8884560c4e0e078aace2a728dffc7f70150660f51b85797c4e1a3b82f9b7aa25e0a0ceae1a243365da5c51a7 + languageName: node + linkType: hard + +"spdx-exceptions@npm:^2.1.0": + version: 2.5.0 + resolution: "spdx-exceptions@npm:2.5.0" + checksum: 10c0/37217b7762ee0ea0d8b7d0c29fd48b7e4dfb94096b109d6255b589c561f57da93bf4e328c0290046115961b9209a8051ad9f525e48d433082fc79f496a4ea940 + languageName: node + linkType: hard + +"spdx-expression-parse@npm:^3.0.1 || ^4": + version: 4.0.0 + resolution: "spdx-expression-parse@npm:4.0.0" + dependencies: + spdx-exceptions: "npm:^2.1.0" + spdx-license-ids: "npm:^3.0.0" + checksum: 10c0/965c487e77f4fb173f1c471f3eef4eb44b9f0321adc7f93d95e7620da31faa67d29356eb02523cd7df8a7fc1ec8238773cdbf9e45bd050329d2b26492771b736 + languageName: node + linkType: hard + +"spdx-license-ids@npm:^3.0.0": + version: 3.0.18 + resolution: "spdx-license-ids@npm:3.0.18" + checksum: 10c0/c64ba03d4727191c8fdbd001f137d6ab51386c350d5516be8a4576c2e74044cb27bc8a758f6a04809da986cc0b14213f069b04de72caccecbc9f733753ccde32 + languageName: node + linkType: hard + +"sprintf-js@npm:^1.1.3": + version: 1.1.3 + resolution: "sprintf-js@npm:1.1.3" + checksum: 10c0/09270dc4f30d479e666aee820eacd9e464215cdff53848b443964202bf4051490538e5dd1b42e1a65cf7296916ca17640aebf63dae9812749c7542ee5f288dec + languageName: node + linkType: hard + +"sprintf-js@npm:~1.0.2": + version: 1.0.3 + resolution: "sprintf-js@npm:1.0.3" + checksum: 10c0/ecadcfe4c771890140da5023d43e190b7566d9cf8b2d238600f31bec0fc653f328da4450eb04bd59a431771a8e9cc0e118f0aa3974b683a4981b4e07abc2a5bb + languageName: node + linkType: hard + +"ssri@npm:^10.0.0": + version: 10.0.6 + resolution: "ssri@npm:10.0.6" + dependencies: + minipass: "npm:^7.0.3" + checksum: 10c0/e5a1e23a4057a86a97971465418f22ea89bd439ac36ade88812dd920e4e61873e8abd6a9b72a03a67ef50faa00a2daf1ab745c5a15b46d03e0544a0296354227 + languageName: node + linkType: hard + +"string-width-cjs@npm:string-width@^4.2.0, string-width@npm:^1.0.2 || 2 || 3 || 4, string-width@npm:^4.1.0, string-width@npm:^4.2.3": + version: 4.2.3 + resolution: "string-width@npm:4.2.3" + dependencies: + emoji-regex: "npm:^8.0.0" + is-fullwidth-code-point: "npm:^3.0.0" + strip-ansi: "npm:^6.0.1" + checksum: 10c0/1e525e92e5eae0afd7454086eed9c818ee84374bb80328fc41217ae72ff5f065ef1c9d7f72da41de40c75fa8bb3dee63d92373fd492c84260a552c636392a47b + languageName: node + linkType: hard + +"string-width@npm:^5.0.1, string-width@npm:^5.1.2": + version: 5.1.2 + resolution: "string-width@npm:5.1.2" + dependencies: + eastasianwidth: "npm:^0.2.0" + emoji-regex: "npm:^9.2.2" + strip-ansi: "npm:^7.0.1" + checksum: 10c0/ab9c4264443d35b8b923cbdd513a089a60de339216d3b0ed3be3ba57d6880e1a192b70ae17225f764d7adbf5994e9bb8df253a944736c15a0240eff553c678ca + languageName: node + linkType: hard + +"string_decoder@npm:^1.1.1": + version: 1.3.0 + resolution: "string_decoder@npm:1.3.0" + dependencies: + safe-buffer: "npm:~5.2.0" + checksum: 10c0/810614ddb030e271cd591935dcd5956b2410dd079d64ff92a1844d6b7588bf992b3e1b69b0f4d34a3e06e0bd73046ac646b5264c1987b20d0601f81ef35d731d + languageName: node + linkType: hard + +"strip-ansi-cjs@npm:strip-ansi@^6.0.1, strip-ansi@npm:^6.0.0, strip-ansi@npm:^6.0.1": + version: 6.0.1 + resolution: "strip-ansi@npm:6.0.1" + dependencies: + ansi-regex: "npm:^5.0.1" + checksum: 10c0/1ae5f212a126fe5b167707f716942490e3933085a5ff6c008ab97ab2f272c8025d3aa218b7bd6ab25729ca20cc81cddb252102f8751e13482a5199e873680952 + languageName: node + linkType: hard + +"strip-ansi@npm:^7.0.1": + version: 7.1.0 + resolution: "strip-ansi@npm:7.1.0" + dependencies: + ansi-regex: "npm:^6.0.1" + checksum: 10c0/a198c3762e8832505328cbf9e8c8381de14a4fa50a4f9b2160138158ea88c0f5549fb50cb13c651c3088f47e63a108b34622ec18c0499b6c8c3a5ddf6b305ac4 + languageName: node + linkType: hard + +"tar@npm:^6.1.11, tar@npm:^6.1.2": + version: 6.2.1 + resolution: "tar@npm:6.2.1" + dependencies: + chownr: "npm:^2.0.0" + fs-minipass: "npm:^2.0.0" + minipass: "npm:^5.0.0" + minizlib: "npm:^2.1.1" + mkdirp: "npm:^1.0.3" + yallist: "npm:^4.0.0" + checksum: 10c0/a5eca3eb50bc11552d453488344e6507156b9193efd7635e98e867fab275d527af53d8866e2370cd09dfe74378a18111622ace35af6a608e5223a7d27fe99537 + languageName: node + linkType: hard + +"tr46@npm:~0.0.3": + version: 0.0.3 + resolution: "tr46@npm:0.0.3" + checksum: 10c0/047cb209a6b60c742f05c9d3ace8fa510bff609995c129a37ace03476a9b12db4dbf975e74600830ef0796e18882b2381fb5fb1f6b4f96b832c374de3ab91a11 + languageName: node + linkType: hard + +"unique-filename@npm:^3.0.0": + version: 3.0.0 + resolution: "unique-filename@npm:3.0.0" + dependencies: + unique-slug: "npm:^4.0.0" + checksum: 10c0/6363e40b2fa758eb5ec5e21b3c7fb83e5da8dcfbd866cc0c199d5534c42f03b9ea9ab069769cc388e1d7ab93b4eeef28ef506ab5f18d910ef29617715101884f + languageName: node + linkType: hard + +"unique-slug@npm:^4.0.0": + version: 4.0.0 + resolution: "unique-slug@npm:4.0.0" + dependencies: + imurmurhash: "npm:^0.1.4" + checksum: 10c0/cb811d9d54eb5821b81b18205750be84cb015c20a4a44280794e915f5a0a70223ce39066781a354e872df3572e8155c228f43ff0cce94c7cbf4da2cc7cbdd635 + languageName: node + linkType: hard + +"uri-js@npm:^4.4.1": + version: 4.4.1 + resolution: "uri-js@npm:4.4.1" + dependencies: + punycode: "npm:^2.1.0" + checksum: 10c0/4ef57b45aa820d7ac6496e9208559986c665e49447cb072744c13b66925a362d96dd5a46c4530a6b8e203e5db5fe849369444440cb22ecfc26c679359e5dfa3c + languageName: node + linkType: hard + +"util-deprecate@npm:^1.0.1": + version: 1.0.2 + resolution: "util-deprecate@npm:1.0.2" + checksum: 10c0/41a5bdd214df2f6c3ecf8622745e4a366c4adced864bc3c833739791aeeeb1838119af7daed4ba36428114b5c67dcda034a79c882e97e43c03e66a4dd7389942 + languageName: node + linkType: hard + +"webidl-conversions@npm:^3.0.0": + version: 3.0.1 + resolution: "webidl-conversions@npm:3.0.1" + checksum: 10c0/5612d5f3e54760a797052eb4927f0ddc01383550f542ccd33d5238cfd65aeed392a45ad38364970d0a0f4fea32e1f4d231b3d8dac4a3bdd385e5cf802ae097db + languageName: node + linkType: hard + +"whatwg-url@npm:^5.0.0": + version: 5.0.0 + resolution: "whatwg-url@npm:5.0.0" + dependencies: + tr46: "npm:~0.0.3" + webidl-conversions: "npm:^3.0.0" + checksum: 10c0/1588bed84d10b72d5eec1d0faa0722ba1962f1821e7539c535558fb5398d223b0c50d8acab950b8c488b4ba69043fd833cc2697056b167d8ad46fac3995a55d5 + languageName: node + linkType: hard + +"which@npm:^2.0.1": + version: 2.0.2 + resolution: "which@npm:2.0.2" + dependencies: + isexe: "npm:^2.0.0" + bin: + node-which: ./bin/node-which + checksum: 10c0/66522872a768b60c2a65a57e8ad184e5372f5b6a9ca6d5f033d4b0dc98aff63995655a7503b9c0a2598936f532120e81dd8cc155e2e92ed662a2b9377cc4374f + languageName: node + linkType: hard + +"which@npm:^4.0.0": + version: 4.0.0 + resolution: "which@npm:4.0.0" + dependencies: + isexe: "npm:^3.1.1" + bin: + node-which: bin/which.js + checksum: 10c0/449fa5c44ed120ccecfe18c433296a4978a7583bf2391c50abce13f76878d2476defde04d0f79db8165bdf432853c1f8389d0485ca6e8ebce3bbcded513d5e6a + languageName: node + linkType: hard + +"wide-align@npm:^1.1.2": + version: 1.1.5 + resolution: "wide-align@npm:1.1.5" + dependencies: + string-width: "npm:^1.0.2 || 2 || 3 || 4" + checksum: 10c0/1d9c2a3e36dfb09832f38e2e699c367ef190f96b82c71f809bc0822c306f5379df87bab47bed27ea99106d86447e50eb972d3c516c2f95782807a9d082fbea95 + languageName: node + linkType: hard + +"wrap-ansi-cjs@npm:wrap-ansi@^7.0.0": + version: 7.0.0 + resolution: "wrap-ansi@npm:7.0.0" + dependencies: + ansi-styles: "npm:^4.0.0" + string-width: "npm:^4.1.0" + strip-ansi: "npm:^6.0.0" + checksum: 10c0/d15fc12c11e4cbc4044a552129ebc75ee3f57aa9c1958373a4db0292d72282f54373b536103987a4a7594db1ef6a4f10acf92978f79b98c49306a4b58c77d4da + languageName: node + linkType: hard + +"wrap-ansi@npm:^8.1.0": + version: 8.1.0 + resolution: "wrap-ansi@npm:8.1.0" + dependencies: + ansi-styles: "npm:^6.1.0" + string-width: "npm:^5.0.1" + strip-ansi: "npm:^7.0.1" + checksum: 10c0/138ff58a41d2f877eae87e3282c0630fc2789012fc1af4d6bd626eeb9a2f9a65ca92005e6e69a75c7b85a68479fe7443c7dbe1eb8fbaa681a4491364b7c55c60 + languageName: node + linkType: hard + +"wrappy@npm:1": + version: 1.0.2 + resolution: "wrappy@npm:1.0.2" + checksum: 10c0/56fece1a4018c6a6c8e28fbc88c87e0fbf4ea8fd64fc6c63b18f4acc4bd13e0ad2515189786dd2c30d3eec9663d70f4ecf699330002f8ccb547e4a18231fc9f0 + languageName: node + linkType: hard + +"xmlbuilder2@npm:^3.0.2": + version: 3.1.1 + resolution: "xmlbuilder2@npm:3.1.1" + dependencies: + "@oozcitak/dom": "npm:1.15.10" + "@oozcitak/infra": "npm:1.0.8" + "@oozcitak/util": "npm:8.3.8" + js-yaml: "npm:3.14.1" + checksum: 10c0/a3e7dd5cbc052f6b53773a4a9d5efb26b0647aa8868bc1a597478d534e78184263b5b3e495e82613f21d0bf016a24145bb793f6e197e8911139dddba9cd831cc + languageName: node + linkType: hard + +"yallist@npm:^4.0.0": + version: 4.0.0 + resolution: "yallist@npm:4.0.0" + checksum: 10c0/2286b5e8dbfe22204ab66e2ef5cc9bbb1e55dfc873bbe0d568aa943eb255d131890dfd5bf243637273d31119b870f49c18fcde2c6ffbb7a7a092b870dc90625a + languageName: node + linkType: hard diff --git a/tests/integration/index.test.js b/tests/integration/index.test.js index 391abc92..ed7a812c 100644 --- a/tests/integration/index.test.js +++ b/tests/integration/index.test.js @@ -43,11 +43,13 @@ const { const testSetups = [ /* region functional tests */ + 'alternative-package-registry', 'bundled-dependencies', 'concurrent-versions', 'dev-dependencies', 'git-protocol-dependency', 'github-protocol-dependency', + 'http-protocol-dependency', 'juice-shop', 'local-dependencies', 'local-workspaces', @@ -167,10 +169,11 @@ suite('integration', () => { }) suite('short PURLs', () => { - const testSetup = 'juice-shop' - test(`${testSetup}`, - () => runTest('short-PURLs', testSetup, format, ['--short-PURLs']) - ).timeout(longTestTimeout) + ['alternative-package-registry', 'juice-shop'].forEach(testSetup => { + test(`${testSetup}`, + () => runTest('short-PURLs', testSetup, format, ['--short-PURLs']) + ).timeout(longTestTimeout) + }) }) test('dogfooding', async () => { diff --git a/tests/integration/setup.js b/tests/integration/setup.js index 371e74e4..47457a69 100644 --- a/tests/integration/setup.js +++ b/tests/integration/setup.js @@ -27,12 +27,14 @@ const testbedsPath = path.join(testRootPath, '_data', 'testbeds'); const REQUIRES_INSTALL = [ /* region functional tests */ // !! none of the following ACTUALLY REQUIRES an installation - lock files are enough + 'alternative-package-registry', 'bundled-dependencies', 'concurrent-versions', 'dev-dependencies', 'git-protocol-dependency', 'github-protocol-dependency', - // 'juice-shop', + 'http-protocol-dependency', + // 'juice-shop', << may have problems to install on certain systems ... 'local-dependencies', 'local-workspaces', 'package-aliasing', diff --git a/tsconfig.json b/tsconfig.json index ca822a44..eebd4b9b 100644 --- a/tsconfig.json +++ b/tsconfig.json @@ -41,12 +41,14 @@ /* Completeness */ "skipDefaultLibCheck": false, - "skipLibCheck": false, + "skipLibCheck": true, /* yarn foo */ "experimentalDecorators": true }, + "include": ["src"], + "exclude": [ ".yarn", ".pnp.*", "**/*.spec.ts", "**/*.test.ts"