Skip to content

Instantly share code, notes, and snippets.

@up1
Created June 10, 2026 08:13
Show Gist options
  • Select an option

  • Save up1/a9a678e3d631695293834428a216b10d to your computer and use it in GitHub Desktop.

Select an option

Save up1/a9a678e3d631695293834428a216b10d to your computer and use it in GitHub Desktop.
Demo SBOM for nodejs
{
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
"bomFormat": "CycloneDX",
"specVersion": "1.6",
"version": 1,
"serialNumber": "urn:uuid:eb4d5f8f-8960-48e3-b2b1-78851025f1b0",
"metadata": {
"timestamp": "2026-06-10T08:12:33.759Z",
"tools": {
"components": [
{
"type": "application",
"name": "npm",
"version": "11.6.2"
},
{
"type": "application",
"name": "cyclonedx-npm",
"group": "@cyclonedx",
"version": "4.1.2",
"author": "Jan Kowalleck",
"description": "Create CycloneDX Software Bill of Materials (SBOM) from NPM projects.",
"licenses": [
{
"license": {
"id": "Apache-2.0"
}
}
],
"externalReferences": [
{
"url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
}
]
},
{
"type": "library",
"name": "cyclonedx-library",
"group": "@cyclonedx",
"version": "9.4.1",
"author": "Jan Kowalleck",
"description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).",
"licenses": [
{
"license": {
"id": "Apache-2.0"
}
}
],
"externalReferences": [
{
"url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
}
]
}
]
},
"component": {
"type": "application",
"name": "secure-nodesec-workshop",
"version": "1.0.0",
"bom-ref": "secure-nodesec-workshop@1.0.0",
"licenses": [
{
"license": {
"id": "ISC",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/secure-nodesec-workshop@1.0.0",
"properties": [
{
"name": "cdx:npm:package:path",
"value": ""
}
]
}
},
"components": [
{
"type": "library",
"name": "express",
"version": "5.2.1",
"bom-ref": "secure-nodesec-workshop@1.0.0|express@5.2.1",
"author": "TJ Holowaychuk",
"description": "Fast, unopinionated, minimalist web framework",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/express@5.2.1",
"externalReferences": [
{
"url": "git+https://github.com/expressjs/express.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://expressjs.com/",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/expressjs/express/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/express/-/express-5.2.1.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "8484b889d5966a2ebd35ecc8751b76c455687da1788fee8834ea4995538b0cef335c6a54544573218935d94522d89ce313358bdc8380c5c4ee6e0cfd3e8d325f"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/express"
}
]
},
{
"type": "library",
"name": "accepts",
"version": "2.0.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|accepts@2.0.0",
"description": "Higher-level content negotiation",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/accepts@2.0.0",
"externalReferences": [
{
"url": "git+https://github.com/jshttp/accepts.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/jshttp/accepts#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/jshttp/accepts/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/accepts/-/accepts-2.0.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "e5cbe0e82b4ac1f81d995a98d562225ca7374356e446a18b8bed96ffa6a8fba63b82efd10b046e021184ce1e41e0a96ccd2b932e0658baa16aa396c89a334a9e"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/accepts"
}
]
},
{
"type": "library",
"name": "body-parser",
"version": "2.2.2",
"bom-ref": "secure-nodesec-workshop@1.0.0|body-parser@2.2.2",
"description": "Node.js body parsing middleware",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/body-parser@2.2.2",
"externalReferences": [
{
"url": "git+https://github.com/expressjs/body-parser.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/expressjs/body-parser#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/expressjs/body-parser/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/body-parser/-/body-parser-2.2.2.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "a0fe559004ca94dc1c82fc62d2f334a7f0f79f60b7111798557f83358b394e36459ffa10b768fee2c549b5232bd7ca5d46bf308d370197a2e857e154c333e634"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/body-parser"
}
]
},
{
"type": "library",
"name": "content-disposition",
"version": "1.1.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|content-disposition@1.1.0",
"author": "Douglas Christopher Wilson",
"description": "Create and parse Content-Disposition header",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/content-disposition@1.1.0",
"externalReferences": [
{
"url": "git+https://github.com/jshttp/content-disposition.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/jshttp/content-disposition#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/jshttp/content-disposition/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/content-disposition/-/content-disposition-1.1.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "e634421fd67ff8344feeb92f63cdc1fb2188197f7a3987499b39e0aa7c364814b1a8214f774c36926dece626b0a465fc92b9f0486985d055b9361af41df6a2de"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/content-disposition"
}
]
},
{
"type": "library",
"name": "content-type",
"version": "1.0.5",
"bom-ref": "secure-nodesec-workshop@1.0.0|content-type@1.0.5",
"author": "Douglas Christopher Wilson",
"description": "Create and parse HTTP Content-Type header",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/content-type@1.0.5",
"externalReferences": [
{
"url": "git+https://github.com/jshttp/content-type.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/jshttp/content-type#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/jshttp/content-type/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "9d38ea7dc045122a4a7570afe180d05827e670b64a9bcd65745d29028a53bf2ac51956dc47a3ff54001de46ecdfb4b53afc42a894d2d15a743e852b836d27038"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/content-type"
}
]
},
{
"type": "library",
"name": "cookie-signature",
"version": "1.2.2",
"bom-ref": "secure-nodesec-workshop@1.0.0|cookie-signature@1.2.2",
"author": "TJ Holowaychuk",
"description": "Sign and unsign cookies",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/cookie-signature@1.2.2",
"externalReferences": [
{
"url": "git+https://github.com/visionmedia/node-cookie-signature.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/visionmedia/node-cookie-signature#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/visionmedia/node-cookie-signature/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.2.2.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "0fbeae53bdee9525eb0f5517178284d93331555c21b270a07c0c9383d93c3fa2866639572ab38b7b874940a2370718b9c237ac6681572561253560633d931b86"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/cookie-signature"
}
]
},
{
"type": "library",
"name": "cookie",
"version": "0.7.2",
"bom-ref": "secure-nodesec-workshop@1.0.0|cookie@0.7.2",
"author": "Roman Shtylman",
"description": "HTTP server cookie parsing and serialization",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/cookie@0.7.2",
"externalReferences": [
{
"url": "git+https://github.com/jshttp/cookie.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/jshttp/cookie#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/jshttp/cookie/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "ca48b95e72ae7fbe74979d2e193965b7a90a20b6389d0d5e34841ab685c40726797568272aa6e7aa64eb044e41e0dee5acc24a436cad58c8933b6a34bfa130ff"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/cookie"
}
]
},
{
"type": "library",
"name": "debug",
"version": "4.4.3",
"bom-ref": "secure-nodesec-workshop@1.0.0|debug@4.4.3",
"author": "Josh Junon",
"description": "Lightweight debugging utility for Node.js and the browser",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/debug@4.4.3",
"externalReferences": [
{
"url": "git://github.com/debug-js/debug.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/debug-js/debug#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/debug-js/debug/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "446c305a7c10be455f6af295b76d8518bc3ec5849dcc04709b4aeee83853540dee994e6165cdbc57790ee2cb6062bcab4e52e9baf808f468a28e5b408cd6dca8"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/debug"
}
]
},
{
"type": "library",
"name": "depd",
"version": "2.0.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|depd@2.0.0",
"author": "Douglas Christopher Wilson",
"description": "Deprecate all the things",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/depd@2.0.0",
"externalReferences": [
{
"url": "git+https://github.com/dougwilson/nodejs-depd.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/dougwilson/nodejs-depd#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/dougwilson/nodejs-depd/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "83b9c7e8fe9dc838a8268800006a6b1a90ad5489898693e4feba02cdd6f77c887ad7fb3f9cfb1f47aa27c8cc2408047f3a50b7c810b49444af52840402cb08af"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/depd"
}
]
},
{
"type": "library",
"name": "encodeurl",
"version": "2.0.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|encodeurl@2.0.0",
"description": "Encode a URL to a percent-encoded form, excluding already-encoded sequences",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/encodeurl@2.0.0",
"externalReferences": [
{
"url": "git+https://github.com/pillarjs/encodeurl.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/pillarjs/encodeurl#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/pillarjs/encodeurl/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "4349fd1d18b89ba26e188575785966bc907b644571bbddc8accca232c182d25acc24c5b3460c7a586aaec9f4206556f7d6f8468179df98f34d5e6c673a4441ae"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/encodeurl"
}
]
},
{
"type": "library",
"name": "escape-html",
"version": "1.0.3",
"bom-ref": "secure-nodesec-workshop@1.0.0|escape-html@1.0.3",
"description": "Escape string for use in HTML",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/escape-html@1.0.3",
"externalReferences": [
{
"url": "git+https://github.com/component/escape-html.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/component/escape-html#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/component/escape-html/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "3624aea59e0e7ae1b0afaf251887b29bf92c219309a1d506392099fc54a74f172b7a46efaab81d53194938ca628da299563009ad6ac6b3fe89cbc38cbb28fda3"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/escape-html"
}
]
},
{
"type": "library",
"name": "etag",
"version": "1.8.1",
"bom-ref": "secure-nodesec-workshop@1.0.0|etag@1.8.1",
"description": "Create simple HTTP ETags",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/etag@1.8.1",
"externalReferences": [
{
"url": "git+https://github.com/jshttp/etag.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/jshttp/etag#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/jshttp/etag/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "6882f9171ee66b055adf4d1a976067104e2236fa35a844f12eb3c8fe8d392fbcfa828edf0b0d49e844266cae05989d804bb920545fca1195ae7c17dd0a531c3e"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/etag"
}
]
},
{
"type": "library",
"name": "finalhandler",
"version": "2.1.1",
"bom-ref": "secure-nodesec-workshop@1.0.0|finalhandler@2.1.1",
"author": "Douglas Christopher Wilson",
"description": "Node.js final http responder",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/finalhandler@2.1.1",
"externalReferences": [
{
"url": "git+https://github.com/pillarjs/finalhandler.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/pillarjs/finalhandler#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/pillarjs/finalhandler/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/finalhandler/-/finalhandler-2.1.1.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "4bc2a866045937e6b9acdc2a4f195965e3e34ffe1c9e6d11395ef42de7511d9d29f2ef5f4480f484951942990a2f3ae8f0b7e60bcb31db76d8ead54dc6ff2940"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/finalhandler"
}
]
},
{
"type": "library",
"name": "fresh",
"version": "2.0.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|fresh@2.0.0",
"author": "TJ Holowaychuk",
"description": "HTTP response freshness testing",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/fresh@2.0.0",
"externalReferences": [
{
"url": "git+https://github.com/jshttp/fresh.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/jshttp/fresh#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/jshttp/fresh/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/fresh/-/fresh-2.0.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "471fd6c9c67ad0739aa8b2808ba70744a288ef3c566c9df53219ed9adc0ca1a4de17b5c51fd861069f2f21368c89d7e58d143a7985822a46932beca45491cfd8"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/fresh"
}
]
},
{
"type": "library",
"name": "http-errors",
"version": "2.0.1",
"bom-ref": "secure-nodesec-workshop@1.0.0|http-errors@2.0.1",
"author": "Jonathan Ong",
"description": "Create HTTP error objects",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/http-errors@2.0.1",
"externalReferences": [
{
"url": "git+https://github.com/jshttp/http-errors.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/jshttp/http-errors#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/jshttp/http-errors/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "e056d17405fe6d2766a3801416e4b458d88fcfc36016dfabf138603569a5ae3423b7543b651f7ecd395c7b6f39f71e0a497af022c69e4ea0e82909ad3fca4b99"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/http-errors"
}
]
},
{
"type": "library",
"name": "merge-descriptors",
"version": "2.0.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|merge-descriptors@2.0.0",
"description": "Merge objects using their property descriptors",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/merge-descriptors@2.0.0",
"externalReferences": [
{
"url": "git+https://github.com/sindresorhus/merge-descriptors.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/sindresorhus/merge-descriptors#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/sindresorhus/merge-descriptors/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-2.0.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "4a7937d785796b214b869ddf914444b9be96b6305f3dd08f6352e7f3ff26ba7b8bba2621b000600555aca33006f8c58c6d512f71d7296e2f51ef0c36da5f50de"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/merge-descriptors"
}
]
},
{
"type": "library",
"name": "mime-types",
"version": "3.0.2",
"bom-ref": "secure-nodesec-workshop@1.0.0|mime-types@3.0.2",
"description": "The ultimate javascript content-type utility.",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/mime-types@3.0.2",
"externalReferences": [
{
"url": "git+https://github.com/jshttp/mime-types.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/jshttp/mime-types#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/jshttp/mime-types/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/mime-types/-/mime-types-3.0.2.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "2db833764d21e23ba843d7c22975b86f2d1426a8fe9ce3ab23d309d6c4a3e2723c688d9ea35aa6bd01227b8543d6096c4b6e749f5e4bb16b18b42ba0892b52e4"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/mime-types"
}
]
},
{
"type": "library",
"name": "on-finished",
"version": "2.4.1",
"bom-ref": "secure-nodesec-workshop@1.0.0|on-finished@2.4.1",
"description": "Execute a callback when a request closes, finishes, or errors",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/on-finished@2.4.1",
"externalReferences": [
{
"url": "git+https://github.com/jshttp/on-finished.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/jshttp/on-finished#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/jshttp/on-finished/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "a15973920dc4340842936cddbfb209c1dfd0503e33d91c51c2991c198f29b0255c09864dab8c189d55802c733e6ebb6e26378f5a2605fc2966b83afc0a1e7e92"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/on-finished"
}
]
},
{
"type": "library",
"name": "once",
"version": "1.4.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|once@1.4.0",
"author": "Isaac Z. Schlueter",
"description": "Run a function exactly one time",
"licenses": [
{
"license": {
"id": "ISC",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/once@1.4.0",
"externalReferences": [
{
"url": "git://github.com/isaacs/once.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/isaacs/once#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/isaacs/once/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/once"
}
]
},
{
"type": "library",
"name": "parseurl",
"version": "1.3.3",
"bom-ref": "secure-nodesec-workshop@1.0.0|parseurl@1.3.3",
"description": "parse a url with memoization",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/parseurl@1.3.3",
"externalReferences": [
{
"url": "git+https://github.com/pillarjs/parseurl.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/pillarjs/parseurl#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/pillarjs/parseurl/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "0a2c9e3b1153fc96723799b4cfd3df5f0e1208127a4b2833d43a65d30aa39610c418604fd469ec51510bd29eb78681b57dc8f77c7ca75e2f4d60ee2758e2fea9"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/parseurl"
}
]
},
{
"type": "library",
"name": "proxy-addr",
"version": "2.0.7",
"bom-ref": "secure-nodesec-workshop@1.0.0|proxy-addr@2.0.7",
"author": "Douglas Christopher Wilson",
"description": "Determine address of proxied request",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/proxy-addr@2.0.7",
"externalReferences": [
{
"url": "git+https://github.com/jshttp/proxy-addr.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/jshttp/proxy-addr#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/jshttp/proxy-addr/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "96542c30b4940d43d3e388ddad4fcedfbaa59e27e2b433fe670ae699972848ac8b2afb59c69c95d27dbf6c3fcde2d040019fe024475953b28cadaa0ad7e5d802"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/proxy-addr"
}
]
},
{
"type": "library",
"name": "qs",
"version": "6.15.2",
"bom-ref": "secure-nodesec-workshop@1.0.0|qs@6.15.2",
"description": "A querystring parser that supports nesting and arrays, with a depth limit",
"licenses": [
{
"license": {
"id": "BSD-3-Clause",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/qs@6.15.2",
"externalReferences": [
{
"url": "git+https://github.com/ljharb/qs.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/ljharb/qs",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/ljharb/qs/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/qs/-/qs-6.15.2.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "473ab4284c97ff0fed1326e770381d919ac981552c50c937c63877b796efdd2d474c0b60fae398b7bdbe65fc2243029dcac4e191305d2ffad38ba1c3997f4377"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/qs"
}
]
},
{
"type": "library",
"name": "range-parser",
"version": "1.2.1",
"bom-ref": "secure-nodesec-workshop@1.0.0|range-parser@1.2.1",
"author": "TJ Holowaychuk",
"description": "Range header field string parser",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/range-parser@1.2.1",
"externalReferences": [
{
"url": "git+https://github.com/jshttp/range-parser.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/jshttp/range-parser#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/jshttp/range-parser/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "1eb82cc7ea2baa8ca09e68456ca68713a736f7a27e1d30105e8c4417a80dba944e9a6189468cb37c6ddc700bdea8206bc2bff6cb143905577f1939796a03b04a"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/range-parser"
}
]
},
{
"type": "library",
"name": "router",
"version": "2.2.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|router@2.2.0",
"author": "Douglas Christopher Wilson",
"description": "Simple middleware-style router",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/router@2.2.0",
"externalReferences": [
{
"url": "git+https://github.com/pillarjs/router.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/pillarjs/router#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/pillarjs/router/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/router/-/router-2.2.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "9cb4eb50a9b653288beeb9616a9bbf665e3917036091919a0a965b2076a30d883094908eccb4a4f9c20f027b04a95f79e468c82c99ca6dd402d6754fcfe80061"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/router"
}
]
},
{
"type": "library",
"name": "send",
"version": "1.2.1",
"bom-ref": "secure-nodesec-workshop@1.0.0|send@1.2.1",
"author": "TJ Holowaychuk",
"description": "Better streaming static file server with Range and conditional-GET support",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/send@1.2.1",
"externalReferences": [
{
"url": "git+https://github.com/pillarjs/send.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/pillarjs/send#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/pillarjs/send/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/send/-/send-1.2.1.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "d609d97fb0c572821c6a34e34f08f0b838f3bb3e0f3dc6364ad28f96c180435f981f6d08455ac169749699d8e8c1327abbc45cd353e860e1875df3f599871935"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/send"
}
]
},
{
"type": "library",
"name": "serve-static",
"version": "2.2.1",
"bom-ref": "secure-nodesec-workshop@1.0.0|serve-static@2.2.1",
"author": "Douglas Christopher Wilson",
"description": "Serve static files",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/serve-static@2.2.1",
"externalReferences": [
{
"url": "git+https://github.com/expressjs/serve-static.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/expressjs/serve-static#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/expressjs/serve-static/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/serve-static/-/serve-static-2.2.1.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "c515c19f4a4fa904d54220bcc3242b2acd8c3a55f6e334343ce19a8f492e96dbe8382b2d050339caf3a1015494c0e32342d4efb0f5a83421df3c6c1a6902614f"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/serve-static"
}
]
},
{
"type": "library",
"name": "statuses",
"version": "2.0.2",
"bom-ref": "secure-nodesec-workshop@1.0.0|statuses@2.0.2",
"description": "HTTP status utility",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/statuses@2.0.2",
"externalReferences": [
{
"url": "git+https://github.com/jshttp/statuses.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/jshttp/statuses#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/jshttp/statuses/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "0ef132e795770c1eee927468fb888e193e5f3f5b2547cc10a2155d9278a064f32932cb5a289416870898040089137525da94e70138a18416274616501c606247"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/statuses"
}
]
},
{
"type": "library",
"name": "type-is",
"version": "2.1.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|type-is@2.1.0",
"description": "Infer the content-type of a request.",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/type-is@2.1.0",
"externalReferences": [
{
"url": "git+https://github.com/jshttp/type-is.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/jshttp/type-is#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/jshttp/type-is/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/type-is/-/type-is-2.1.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "7da607c346a705b73f916177cc54c49f14853801945fd1856ce06d86f0dd2ec22512858e14eb52d3380289063022c90bf6219764bde40170fc3a86781a63004c"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/type-is"
}
],
"components": [
{
"type": "library",
"name": "content-type",
"version": "2.0.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|type-is@2.1.0|content-type@2.0.0",
"author": "Douglas Christopher Wilson",
"description": "Create and parse HTTP Content-Type header",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/content-type@2.0.0",
"externalReferences": [
{
"url": "git+https://github.com/jshttp/content-type.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/jshttp/content-type#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/jshttp/content-type/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/content-type/-/content-type-2.0.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "8ff3bf77b19c642c8d97bfe1c1901beb4eabcea932bda0dcb4b99c91bc4bcc7bc50734c91ee1847687404dc3f7c884680eb2c790801326ebf36c5969fe48b671"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/type-is/node_modules/content-type"
}
]
}
]
},
{
"type": "library",
"name": "vary",
"version": "1.1.2",
"bom-ref": "secure-nodesec-workshop@1.0.0|vary@1.1.2",
"author": "Douglas Christopher Wilson",
"description": "Manipulate the HTTP Vary header",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/vary@1.1.2",
"externalReferences": [
{
"url": "git+https://github.com/jshttp/vary.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/jshttp/vary#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/jshttp/vary/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "04d19b58b7ddd1e50f69b8645d4566d23f2ebaf444c93879a2f45afddca8c3f06a01b649c82fb97d4f88cd03b39802b362a6110084a8461750af778867f3d7aa"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/vary"
}
]
},
{
"type": "library",
"name": "negotiator",
"version": "1.0.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|negotiator@1.0.0",
"description": "HTTP content negotiation",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/negotiator@1.0.0",
"externalReferences": [
{
"url": "git+https://github.com/jshttp/negotiator.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/jshttp/negotiator#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/jshttp/negotiator/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/negotiator/-/negotiator-1.0.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "f0e7ecfc051087c31a11cae5ab9c4e5f4090f72a53179765efc9a394c35f38ad3c7f3a604c741140f07170f944b48c34c91a70b3e668ff7afee5645bcbbbb71a"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/negotiator"
}
]
},
{
"type": "library",
"name": "bytes",
"version": "3.1.2",
"bom-ref": "secure-nodesec-workshop@1.0.0|bytes@3.1.2",
"author": "TJ Holowaychuk",
"description": "Utility to parse a string bytes to bytes and vice-versa",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/bytes@3.1.2",
"externalReferences": [
{
"url": "git+https://github.com/visionmedia/bytes.js.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/visionmedia/bytes.js#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/visionmedia/bytes.js/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "fcd7fb4f2cd3c7a4b7c9124e6ce015efde7aafc72bdbe3a3f000b976df3048fdc1400a1e5f9f0da07c8253c3fccc690d5d2b634d28ba7f33ba174a4175c61b12"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/bytes"
}
]
},
{
"type": "library",
"name": "iconv-lite",
"version": "0.7.2",
"bom-ref": "secure-nodesec-workshop@1.0.0|iconv-lite@0.7.2",
"author": "Alexander Shtuchkin",
"description": "Convert character encodings in pure javascript.",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/iconv-lite@0.7.2",
"externalReferences": [
{
"url": "git+https://github.com/pillarjs/iconv-lite.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/pillarjs/iconv-lite",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/pillarjs/iconv-lite/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.2.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "8a6f438c40d0e79b3d7cbe04633380bf4c8caa6301499a7a1b456f1724cc3ca5b1892047523f4d5bfaaa2e65d4c17aeb33b02fa9295309fbea45bd1c33cc98ab"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/iconv-lite"
}
]
},
{
"type": "library",
"name": "raw-body",
"version": "3.0.2",
"bom-ref": "secure-nodesec-workshop@1.0.0|raw-body@3.0.2",
"author": "Jonathan Ong",
"description": "Get and validate the raw body of a readable stream.",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/raw-body@3.0.2",
"externalReferences": [
{
"url": "git+https://github.com/stream-utils/raw-body.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/stream-utils/raw-body#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/stream-utils/raw-body/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/raw-body/-/raw-body-3.0.2.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "2b9cd08c3965c5691fed9e7125d574fc1d164cdab1eafc46ef4cc9138374901b382e8be6118589cd01b10bd6d2f5100abb76e0338d25adde73a0b275d8c43904"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/raw-body"
}
]
},
{
"type": "library",
"name": "ms",
"version": "2.1.3",
"bom-ref": "secure-nodesec-workshop@1.0.0|ms@2.1.3",
"description": "Tiny millisecond conversion utility",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/ms@2.1.3",
"externalReferences": [
{
"url": "git+https://github.com/vercel/ms.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/vercel/ms#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/vercel/ms/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "e85973b9b4cb646dc9d9afcd542025784863ceae68c601f268253dc985ef70bb2fa1568726afece715c8ebf5d73fab73ed1f7100eb479d23bfb57b45dd645394"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/ms"
}
]
},
{
"type": "library",
"name": "inherits",
"version": "2.0.4",
"bom-ref": "secure-nodesec-workshop@1.0.0|inherits@2.0.4",
"description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
"licenses": [
{
"license": {
"id": "ISC",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/inherits@2.0.4",
"externalReferences": [
{
"url": "git://github.com/isaacs/inherits.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/isaacs/inherits#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/isaacs/inherits/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/inherits"
}
]
},
{
"type": "library",
"name": "setprototypeof",
"version": "1.2.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|setprototypeof@1.2.0",
"author": "Wes Todd",
"description": "A small polyfill for Object.setprototypeof",
"licenses": [
{
"license": {
"id": "ISC",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/setprototypeof@1.2.0",
"externalReferences": [
{
"url": "git+https://github.com/wesleytodd/setprototypeof.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/wesleytodd/setprototypeof",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/wesleytodd/setprototypeof/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "1392c35fb5aba7ce4a8a5e5b859bf8ea3f2339e6e82aae4932660cde05467461fcc45a4f59750cb0dae53830ab928c4c11e362fd7648c2e46f6385cdc18309a7"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/setprototypeof"
}
]
},
{
"type": "library",
"name": "toidentifier",
"version": "1.0.1",
"bom-ref": "secure-nodesec-workshop@1.0.0|toidentifier@1.0.1",
"author": "Douglas Christopher Wilson",
"description": "Convert a string of words to a JavaScript identifier",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/toidentifier@1.0.1",
"externalReferences": [
{
"url": "git+https://github.com/component/toidentifier.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/component/toidentifier#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/component/toidentifier/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "a39b123ca12483f0c840d987e37574fee7ab2eba7355e764521f2d18dbda797a5fa6ec2329e9e54a8c7fd8efc14e5654b447be246eece58844cfad3c3e500744"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/toidentifier"
}
]
},
{
"type": "library",
"name": "mime-db",
"version": "1.54.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|mime-db@1.54.0",
"description": "Media Type Database",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/mime-db@1.54.0",
"externalReferences": [
{
"url": "git+https://github.com/jshttp/mime-db.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/jshttp/mime-db#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/jshttp/mime-db/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/mime-db/-/mime-db-1.54.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "694e4426e20dd960de982700a76bc505fa7f9b810085626750d492c348b1b3bfe45db77a3e0eb8126c0990d745841f1a5add6c1f60935eb2f1a3f880195de83d"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/mime-db"
}
]
},
{
"type": "library",
"name": "ee-first",
"version": "1.1.1",
"bom-ref": "secure-nodesec-workshop@1.0.0|ee-first@1.1.1",
"author": "Jonathan Ong",
"description": "return the first event in a set of ee/event pairs",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/ee-first@1.1.1",
"externalReferences": [
{
"url": "git+https://github.com/jonathanong/ee-first.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/jonathanong/ee-first#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/jonathanong/ee-first/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "58cc26f4b851528f9651a44dfaf46e113a86f3d22066985548d91d16079beac4bf1383ab0c837bb78f0201ec121d773a0bc95e7c3f0a29faf9bd8eb56eb425a3"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/ee-first"
}
]
},
{
"type": "library",
"name": "wrappy",
"version": "1.0.2",
"bom-ref": "secure-nodesec-workshop@1.0.0|wrappy@1.0.2",
"author": "Isaac Z. Schlueter",
"description": "Callback wrapping utility",
"licenses": [
{
"license": {
"id": "ISC",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/wrappy@1.0.2",
"externalReferences": [
{
"url": "git+https://github.com/npm/wrappy.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/npm/wrappy",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/npm/wrappy/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/wrappy"
}
]
},
{
"type": "library",
"name": "forwarded",
"version": "0.2.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|forwarded@0.2.0",
"description": "Parse HTTP X-Forwarded-For header",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/forwarded@0.2.0",
"externalReferences": [
{
"url": "git+https://github.com/jshttp/forwarded.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/jshttp/forwarded#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/jshttp/forwarded/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "6ee446d1fa41b511d24c238049eea10f6e7cb44b9b16844b6f864d03a3713151cdc3680e7301e8f70c9a6e5ccccce039cfdc40f4bd4a36393f36de8c4fd698a3"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/forwarded"
}
]
},
{
"type": "library",
"name": "ipaddr.js",
"version": "1.9.1",
"bom-ref": "secure-nodesec-workshop@1.0.0|ipaddr.js@1.9.1",
"author": "whitequark",
"description": "A library for manipulating IPv4 and IPv6 addresses in JavaScript.",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/ipaddr.js@1.9.1",
"externalReferences": [
{
"url": "git://github.com/whitequark/ipaddr.js.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/whitequark/ipaddr.js#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/whitequark/ipaddr.js/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "d0a23feb4ef1a31493a07ec68cdd457d26cba14d3e6ed4e2723b1049642587f859ca437c2a998c7fbb98c0f5b747e6a467a47fc35f199574870585e26143cede"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/ipaddr.js"
}
]
},
{
"type": "library",
"name": "side-channel",
"version": "1.1.1",
"bom-ref": "secure-nodesec-workshop@1.0.0|side-channel@1.1.1",
"author": "Jordan Harband",
"description": "Store information about any JS value in a side channel. Uses WeakMap if available.",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/side-channel@1.1.1",
"externalReferences": [
{
"url": "git+https://github.com/ljharb/side-channel.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/ljharb/side-channel#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/ljharb/side-channel/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.1.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "eb1e9d2bacc97694f3178b1078d631c2dbc1cdfe848381ad95eb12f781cebd3b9d51ec8ad965c06887e60e0b32b2562b441785225b22e78018b05194ba19afad"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/side-channel"
}
]
},
{
"type": "library",
"name": "is-promise",
"version": "4.0.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|is-promise@4.0.0",
"author": "ForbesLindesay",
"description": "Test whether an object looks like a promises-a+ promise",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/is-promise@4.0.0",
"externalReferences": [
{
"url": "git+https://github.com/then/is-promise.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/then/is-promise#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/then/is-promise/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/is-promise/-/is-promise-4.0.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "86fa6823a928ae124c9de8f6f3975283a9eed7e7babb1b3bcc6dc16009b96f2a83b2024d5b0c7333acfa8998808104784c9df42660533b0a99530dd69721f701"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/is-promise"
}
]
},
{
"type": "library",
"name": "path-to-regexp",
"version": "8.4.2",
"bom-ref": "secure-nodesec-workshop@1.0.0|path-to-regexp@8.4.2",
"description": "Express style path to RegExp utility",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/path-to-regexp@8.4.2",
"externalReferences": [
{
"url": "git+https://github.com/pillarjs/path-to-regexp.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/pillarjs/path-to-regexp#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/pillarjs/path-to-regexp/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-8.4.2.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "a9172e21d3faf4d3e6e2a6c008af9a0e8808e42043322d6329ed2bcb9ad2409cfc2552ec0bb8d5f17a622631912cba25dcdf91e6284661cacf2d39e8ea901d04"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/path-to-regexp"
}
]
},
{
"type": "library",
"name": "media-typer",
"version": "1.1.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|media-typer@1.1.0",
"author": "Douglas Christopher Wilson",
"description": "Simple RFC 6838 media type parser and formatter",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/media-typer@1.1.0",
"externalReferences": [
{
"url": "git+https://github.com/jshttp/media-typer.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/jshttp/media-typer#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/jshttp/media-typer/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/media-typer/-/media-typer-1.1.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "6a2b27ac33f818d7b4e9470a1675796df30d3c1530e23b0b19a5b059f9c7defd361a706e5d7d8c0959f945bad6a348f7a5ccd48a561b96aedf43b370dade572b"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/media-typer"
}
]
},
{
"type": "library",
"name": "safer-buffer",
"version": "2.1.2",
"bom-ref": "secure-nodesec-workshop@1.0.0|safer-buffer@2.1.2",
"author": "Nikita Skovoroda",
"description": "Modern Buffer API polyfill without footguns",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/safer-buffer@2.1.2",
"externalReferences": [
{
"url": "git+https://github.com/ChALkeR/safer-buffer.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/ChALkeR/safer-buffer#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/ChALkeR/safer-buffer/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/safer-buffer"
}
]
},
{
"type": "library",
"name": "unpipe",
"version": "1.0.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|unpipe@1.0.0",
"author": "Douglas Christopher Wilson",
"description": "Unpipe a stream from all destinations",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/unpipe@1.0.0",
"externalReferences": [
{
"url": "git+https://github.com/stream-utils/unpipe.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/stream-utils/unpipe#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/stream-utils/unpipe/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "a63cb66d8852b2e7f05a52b03dcfa5ddc37bfb0b8994aeaecf461d2443a54036e5ea3a3f6253e2e266fc6a0524542f0117b57c36ecdec8f36a464b00de1ced29"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/unpipe"
}
]
},
{
"type": "library",
"name": "es-errors",
"version": "1.3.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|es-errors@1.3.0",
"author": "Jordan Harband",
"description": "A simple cache for a few of the JS Error constructors.",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/es-errors@1.3.0",
"externalReferences": [
{
"url": "git+https://github.com/ljharb/es-errors.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/ljharb/es-errors#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/ljharb/es-errors/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "65fe47d8ac6ddb18d3bdb26f3f66562c4202c40ea3fa1026333225ca9cb8c5c060d6f2959f1f3d5b2d066d2fa47f9730095145cdd0858765d20853542d2e9cb3"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/es-errors"
}
]
},
{
"type": "library",
"name": "object-inspect",
"version": "1.13.4",
"bom-ref": "secure-nodesec-workshop@1.0.0|object-inspect@1.13.4",
"author": "James Halliday",
"description": "string representations of objects in node and the browser",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/object-inspect@1.13.4",
"externalReferences": [
{
"url": "git://github.com/inspect-js/object-inspect.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/inspect-js/object-inspect",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/inspect-js/object-inspect/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "5baee22e5e09d845c41936df78709f7eb8c37e2b6f2c0360d14957df01545124f1f762974457a0307515812a84fb0be101b8b85aa8c683d733cac4d5d84a5b7b"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/object-inspect"
}
]
},
{
"type": "library",
"name": "side-channel-list",
"version": "1.0.1",
"bom-ref": "secure-nodesec-workshop@1.0.0|side-channel-list@1.0.1",
"author": "Jordan Harband",
"description": "Store information about any JS value in a side channel, using a linked list",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/side-channel-list@1.0.1",
"externalReferences": [
{
"url": "git+https://github.com/ljharb/side-channel-list.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/ljharb/side-channel-list#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/ljharb/side-channel-list/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "9a39ffd1b8bfa145118dce5797b21a5a2fce24926e9aea0915025f0c3c8ee3afa1056b1f69533ae53047ab67a864187397d11c8713a28e991b442f12541414d3"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/side-channel-list"
}
]
},
{
"type": "library",
"name": "side-channel-map",
"version": "1.0.1",
"bom-ref": "secure-nodesec-workshop@1.0.0|side-channel-map@1.0.1",
"author": "Jordan Harband",
"description": "Store information about any JS value in a side channel, using a Map",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/side-channel-map@1.0.1",
"externalReferences": [
{
"url": "git+https://github.com/ljharb/side-channel-map.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/ljharb/side-channel-map#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/ljharb/side-channel-map/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "5428c235f80cb1bcb7b53768d369db8ed33f7b0adaea33c79a94e17a7913621f291bdb9c67fd4ff12a38bb814605e93f063a4e56c0c23282c0fe2b8128815744"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/side-channel-map"
}
]
},
{
"type": "library",
"name": "side-channel-weakmap",
"version": "1.0.2",
"bom-ref": "secure-nodesec-workshop@1.0.0|side-channel-weakmap@1.0.2",
"author": "Jordan Harband",
"description": "Store information about any JS value in a side channel. Uses WeakMap if available.",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/side-channel-weakmap@1.0.2",
"externalReferences": [
{
"url": "git+https://github.com/ljharb/side-channel-weakmap.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/ljharb/side-channel-weakmap#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/ljharb/side-channel-weakmap/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "58f4bf1ef1d04d89c78ac2e8f4c72a0473899361641cefed969be5772ae77a6e1a790a7885a8b7832b61b3083aa74d684a84e5e7cadca621408c5d9baf6024d8"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/side-channel-weakmap"
}
]
},
{
"type": "library",
"name": "call-bound",
"version": "1.0.4",
"bom-ref": "secure-nodesec-workshop@1.0.0|call-bound@1.0.4",
"author": "Jordan Harband",
"description": "Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`.",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/call-bound@1.0.4",
"externalReferences": [
{
"url": "git+https://github.com/ljharb/call-bound.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/ljharb/call-bound#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/ljharb/call-bound/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "fb2b3df7b53dea9a382b1fc0069042aa103d12ec49690583420ef6f791f8841a61bf72198346e804abb0629b78617a7a319e4099942753fb72313951a5a49e8e"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/call-bound"
}
]
},
{
"type": "library",
"name": "get-intrinsic",
"version": "1.3.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|get-intrinsic@1.3.0",
"author": "Jordan Harband",
"description": "Get and robustly cache all JS language-level intrinsics at first require time",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/get-intrinsic@1.3.0",
"externalReferences": [
{
"url": "git+https://github.com/ljharb/get-intrinsic.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/ljharb/get-intrinsic#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/ljharb/get-intrinsic/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "f5f4a349aa2cfdf448548a7ec5226513a95fc21112ecb36d29a08121a987b23af69dad418800493e8d263a38f3f062435116ab9823c6a9a89583999f8dbf7c09"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/get-intrinsic"
}
]
},
{
"type": "library",
"name": "call-bind-apply-helpers",
"version": "1.0.2",
"bom-ref": "secure-nodesec-workshop@1.0.0|call-bind-apply-helpers@1.0.2",
"author": "Jordan Harband",
"description": "Helper functions around Function call/apply/bind, for use in `call-bind`",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/call-bind-apply-helpers@1.0.2",
"externalReferences": [
{
"url": "git+https://github.com/ljharb/call-bind-apply-helpers.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/ljharb/call-bind-apply-helpers#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/ljharb/call-bind-apply-helpers/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "4a9d5a6e52748af0e44b38dc68977112e9cde7f5ef92c149dac30115fabac74af285057fd9bfcac057b6d5c329987b4f3928a3f0af7dff049fa04b9339b9ae31"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/call-bind-apply-helpers"
}
]
},
{
"type": "library",
"name": "es-define-property",
"version": "1.0.1",
"bom-ref": "secure-nodesec-workshop@1.0.0|es-define-property@1.0.1",
"author": "Jordan Harband",
"description": "`Object.defineProperty`, but not IE 8's broken one.",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/es-define-property@1.0.1",
"externalReferences": [
{
"url": "git+https://github.com/ljharb/es-define-property.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/ljharb/es-define-property#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/ljharb/es-define-property/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "7b79d17e07d4678acd18bdb7da05205f4e90372c9ecf4e0a76316b17e2d34683979ab3a014a0e0e0109db235bc1274faf5ea9d606991a49c223d560dac2696de"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/es-define-property"
}
]
},
{
"type": "library",
"name": "es-object-atoms",
"version": "1.1.2",
"bom-ref": "secure-nodesec-workshop@1.0.0|es-object-atoms@1.1.2",
"author": "Jordan Harband",
"description": "ES Object-related atoms: Object, ToObject, RequireObjectCoercible",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/es-object-atoms@1.1.2",
"externalReferences": [
{
"url": "git+https://github.com/ljharb/es-object-atoms.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/ljharb/es-object-atoms#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/ljharb/es-object-atoms/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.2.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "1d6701a0de8d8a57aab52c9d2b616a1db4bf2e80ddda9aab9d01cbc89cc18f890ea7f932d8c58c37af78c4e7e42bcfd29d4b16d831fb11fc9597274a0ac9b567"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/es-object-atoms"
}
]
},
{
"type": "library",
"name": "function-bind",
"version": "1.1.2",
"bom-ref": "secure-nodesec-workshop@1.0.0|function-bind@1.1.2",
"author": "Raynos",
"description": "Implementation of Function.prototype.bind",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/function-bind@1.1.2",
"externalReferences": [
{
"url": "git+https://github.com/Raynos/function-bind.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/Raynos/function-bind",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/Raynos/function-bind/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "ed71cdc47eea5fdc46e66230c6486e993a31fcc21135c3a00ebc56b0cb76a40af6dd61e9e8cad194dec50521690a9afea153b417be38894811f369c931f1b648"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/function-bind"
}
]
},
{
"type": "library",
"name": "get-proto",
"version": "1.0.1",
"bom-ref": "secure-nodesec-workshop@1.0.0|get-proto@1.0.1",
"author": "Jordan Harband",
"description": "Robustly get the [[Prototype]] of an object",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/get-proto@1.0.1",
"externalReferences": [
{
"url": "git+https://github.com/ljharb/get-proto.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/ljharb/get-proto#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/ljharb/get-proto/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "b1349f063a17069f3d26f20a21e7eac3b53608279bb1cef892263a6b0886a202ada1219b823604fc6ffe97db05dcc5853cd73d21ca0e0b83837ca1dfc459a9d2"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/get-proto"
}
]
},
{
"type": "library",
"name": "gopd",
"version": "1.2.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|gopd@1.2.0",
"author": "Jordan Harband",
"description": "`Object.getOwnPropertyDescriptor`, but accounts for IE's broken implementation.",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/gopd@1.2.0",
"externalReferences": [
{
"url": "git+https://github.com/ljharb/gopd.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/ljharb/gopd#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/ljharb/gopd/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "65429187afe4505a0089302d4d83d9277870f70371c7e04804e8a39e51bd3e7ac9b027128ecd70cb20fabc9a5a62d827cc3aca6114aa7f738ee917daf77c6c46"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/gopd"
}
]
},
{
"type": "library",
"name": "has-symbols",
"version": "1.1.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|has-symbols@1.1.0",
"author": "Jordan Harband",
"description": "Determine if the JS environment has Symbol support. Supports spec, or shams.",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/has-symbols@1.1.0",
"externalReferences": [
{
"url": "git://github.com/inspect-js/has-symbols.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/ljharb/has-symbols#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/ljharb/has-symbols/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "d5c0cd77027625aa2199bdec8383a629a301c2e0b8f2c6278b91d4c360efb02f0b8c64cb2bd87e79bd57e91cae3877b8853d142c25baf22a26863528294aa53d"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/has-symbols"
}
]
},
{
"type": "library",
"name": "hasown",
"version": "2.0.4",
"bom-ref": "secure-nodesec-workshop@1.0.0|hasown@2.0.4",
"author": "Jordan Harband",
"description": "A robust, ES3 compatible, \"has own property\" predicate.",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/hasown@2.0.4",
"externalReferences": [
{
"url": "git+https://github.com/inspect-js/hasOwn.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/inspect-js/hasOwn#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/inspect-js/hasOwn/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "4f651b7db044177db089ea5722c3254d6f7e743602eb0321fedfef600e2db8e30aa96cff9f7bebd4d152c508b23fece4da65eca0c03f8bfeea57a2cabadd6dd4"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/hasown"
}
]
},
{
"type": "library",
"name": "math-intrinsics",
"version": "1.1.0",
"bom-ref": "secure-nodesec-workshop@1.0.0|math-intrinsics@1.1.0",
"author": "Jordan Harband",
"description": "ES Math-related intrinsics and helpers, robustly cached.",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/math-intrinsics@1.1.0",
"externalReferences": [
{
"url": "git+https://github.com/es-shims/math-intrinsics.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/es-shims/math-intrinsics#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/es-shims/math-intrinsics/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "fc85ed6f0124e474cfc84c32297ea11a4617c4cf676e3eb807e8a55499c2fd1e81d291f91b85776f4a556cbec3063e2d921040a696d05257fa17a5e5f4b1eed6"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/math-intrinsics"
}
]
},
{
"type": "library",
"name": "dunder-proto",
"version": "1.0.1",
"bom-ref": "secure-nodesec-workshop@1.0.0|dunder-proto@1.0.1",
"author": "Jordan Harband",
"description": "If available, the `Object.prototype.__proto__` accessor and mutator, call-bound",
"licenses": [
{
"license": {
"id": "MIT",
"acknowledgement": "declared"
}
}
],
"purl": "pkg:npm/dunder-proto@1.0.1",
"externalReferences": [
{
"url": "git+https://github.com/es-shims/dunder-proto.git",
"type": "vcs",
"comment": "as detected from PackageJson property \"repository.url\""
},
{
"url": "https://github.com/es-shims/dunder-proto#readme",
"type": "website",
"comment": "as detected from PackageJson property \"homepage\""
},
{
"url": "https://github.com/es-shims/dunder-proto/issues",
"type": "issue-tracker",
"comment": "as detected from PackageJson property \"bugs.url\""
},
{
"url": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
"type": "distribution",
"hashes": [
{
"alg": "SHA-512",
"content": "28837f9c3241411717c3430b561644f62407986ebca80548060f42aa65188e64088608a3f54e4c16faea9142f915bb72cb366e39e3add3375e45ee1463b72df8"
}
],
"comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
}
],
"properties": [
{
"name": "cdx:npm:package:path",
"value": "node_modules/dunder-proto"
}
]
}
],
"dependencies": [
{
"ref": "secure-nodesec-workshop@1.0.0",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|express@5.2.1"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|express@5.2.1",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|accepts@2.0.0",
"secure-nodesec-workshop@1.0.0|body-parser@2.2.2",
"secure-nodesec-workshop@1.0.0|content-disposition@1.1.0",
"secure-nodesec-workshop@1.0.0|content-type@1.0.5",
"secure-nodesec-workshop@1.0.0|cookie-signature@1.2.2",
"secure-nodesec-workshop@1.0.0|cookie@0.7.2",
"secure-nodesec-workshop@1.0.0|debug@4.4.3",
"secure-nodesec-workshop@1.0.0|depd@2.0.0",
"secure-nodesec-workshop@1.0.0|encodeurl@2.0.0",
"secure-nodesec-workshop@1.0.0|escape-html@1.0.3",
"secure-nodesec-workshop@1.0.0|etag@1.8.1",
"secure-nodesec-workshop@1.0.0|finalhandler@2.1.1",
"secure-nodesec-workshop@1.0.0|fresh@2.0.0",
"secure-nodesec-workshop@1.0.0|http-errors@2.0.1",
"secure-nodesec-workshop@1.0.0|merge-descriptors@2.0.0",
"secure-nodesec-workshop@1.0.0|mime-types@3.0.2",
"secure-nodesec-workshop@1.0.0|on-finished@2.4.1",
"secure-nodesec-workshop@1.0.0|once@1.4.0",
"secure-nodesec-workshop@1.0.0|parseurl@1.3.3",
"secure-nodesec-workshop@1.0.0|proxy-addr@2.0.7",
"secure-nodesec-workshop@1.0.0|qs@6.15.2",
"secure-nodesec-workshop@1.0.0|range-parser@1.2.1",
"secure-nodesec-workshop@1.0.0|router@2.2.0",
"secure-nodesec-workshop@1.0.0|send@1.2.1",
"secure-nodesec-workshop@1.0.0|serve-static@2.2.1",
"secure-nodesec-workshop@1.0.0|statuses@2.0.2",
"secure-nodesec-workshop@1.0.0|type-is@2.1.0",
"secure-nodesec-workshop@1.0.0|vary@1.1.2"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|accepts@2.0.0",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|mime-types@3.0.2",
"secure-nodesec-workshop@1.0.0|negotiator@1.0.0"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|body-parser@2.2.2",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|bytes@3.1.2",
"secure-nodesec-workshop@1.0.0|content-type@1.0.5",
"secure-nodesec-workshop@1.0.0|debug@4.4.3",
"secure-nodesec-workshop@1.0.0|http-errors@2.0.1",
"secure-nodesec-workshop@1.0.0|iconv-lite@0.7.2",
"secure-nodesec-workshop@1.0.0|on-finished@2.4.1",
"secure-nodesec-workshop@1.0.0|qs@6.15.2",
"secure-nodesec-workshop@1.0.0|raw-body@3.0.2",
"secure-nodesec-workshop@1.0.0|type-is@2.1.0"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|content-disposition@1.1.0"
},
{
"ref": "secure-nodesec-workshop@1.0.0|content-type@1.0.5"
},
{
"ref": "secure-nodesec-workshop@1.0.0|cookie-signature@1.2.2"
},
{
"ref": "secure-nodesec-workshop@1.0.0|cookie@0.7.2"
},
{
"ref": "secure-nodesec-workshop@1.0.0|debug@4.4.3",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|ms@2.1.3"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|depd@2.0.0"
},
{
"ref": "secure-nodesec-workshop@1.0.0|encodeurl@2.0.0"
},
{
"ref": "secure-nodesec-workshop@1.0.0|escape-html@1.0.3"
},
{
"ref": "secure-nodesec-workshop@1.0.0|etag@1.8.1"
},
{
"ref": "secure-nodesec-workshop@1.0.0|finalhandler@2.1.1",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|debug@4.4.3",
"secure-nodesec-workshop@1.0.0|encodeurl@2.0.0",
"secure-nodesec-workshop@1.0.0|escape-html@1.0.3",
"secure-nodesec-workshop@1.0.0|on-finished@2.4.1",
"secure-nodesec-workshop@1.0.0|parseurl@1.3.3",
"secure-nodesec-workshop@1.0.0|statuses@2.0.2"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|fresh@2.0.0"
},
{
"ref": "secure-nodesec-workshop@1.0.0|http-errors@2.0.1",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|depd@2.0.0",
"secure-nodesec-workshop@1.0.0|inherits@2.0.4",
"secure-nodesec-workshop@1.0.0|setprototypeof@1.2.0",
"secure-nodesec-workshop@1.0.0|statuses@2.0.2",
"secure-nodesec-workshop@1.0.0|toidentifier@1.0.1"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|merge-descriptors@2.0.0"
},
{
"ref": "secure-nodesec-workshop@1.0.0|mime-types@3.0.2",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|mime-db@1.54.0"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|on-finished@2.4.1",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|ee-first@1.1.1"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|once@1.4.0",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|wrappy@1.0.2"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|parseurl@1.3.3"
},
{
"ref": "secure-nodesec-workshop@1.0.0|proxy-addr@2.0.7",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|forwarded@0.2.0",
"secure-nodesec-workshop@1.0.0|ipaddr.js@1.9.1"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|qs@6.15.2",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|side-channel@1.1.1"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|range-parser@1.2.1"
},
{
"ref": "secure-nodesec-workshop@1.0.0|router@2.2.0",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|debug@4.4.3",
"secure-nodesec-workshop@1.0.0|depd@2.0.0",
"secure-nodesec-workshop@1.0.0|is-promise@4.0.0",
"secure-nodesec-workshop@1.0.0|parseurl@1.3.3",
"secure-nodesec-workshop@1.0.0|path-to-regexp@8.4.2"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|send@1.2.1",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|debug@4.4.3",
"secure-nodesec-workshop@1.0.0|encodeurl@2.0.0",
"secure-nodesec-workshop@1.0.0|escape-html@1.0.3",
"secure-nodesec-workshop@1.0.0|etag@1.8.1",
"secure-nodesec-workshop@1.0.0|fresh@2.0.0",
"secure-nodesec-workshop@1.0.0|http-errors@2.0.1",
"secure-nodesec-workshop@1.0.0|mime-types@3.0.2",
"secure-nodesec-workshop@1.0.0|ms@2.1.3",
"secure-nodesec-workshop@1.0.0|on-finished@2.4.1",
"secure-nodesec-workshop@1.0.0|range-parser@1.2.1",
"secure-nodesec-workshop@1.0.0|statuses@2.0.2"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|serve-static@2.2.1",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|encodeurl@2.0.0",
"secure-nodesec-workshop@1.0.0|escape-html@1.0.3",
"secure-nodesec-workshop@1.0.0|parseurl@1.3.3",
"secure-nodesec-workshop@1.0.0|send@1.2.1"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|statuses@2.0.2"
},
{
"ref": "secure-nodesec-workshop@1.0.0|type-is@2.1.0",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|type-is@2.1.0|content-type@2.0.0",
"secure-nodesec-workshop@1.0.0|media-typer@1.1.0",
"secure-nodesec-workshop@1.0.0|mime-types@3.0.2"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|type-is@2.1.0|content-type@2.0.0"
},
{
"ref": "secure-nodesec-workshop@1.0.0|vary@1.1.2"
},
{
"ref": "secure-nodesec-workshop@1.0.0|negotiator@1.0.0"
},
{
"ref": "secure-nodesec-workshop@1.0.0|bytes@3.1.2"
},
{
"ref": "secure-nodesec-workshop@1.0.0|iconv-lite@0.7.2",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|safer-buffer@2.1.2"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|raw-body@3.0.2",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|bytes@3.1.2",
"secure-nodesec-workshop@1.0.0|http-errors@2.0.1",
"secure-nodesec-workshop@1.0.0|iconv-lite@0.7.2",
"secure-nodesec-workshop@1.0.0|unpipe@1.0.0"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|ms@2.1.3"
},
{
"ref": "secure-nodesec-workshop@1.0.0|inherits@2.0.4"
},
{
"ref": "secure-nodesec-workshop@1.0.0|setprototypeof@1.2.0"
},
{
"ref": "secure-nodesec-workshop@1.0.0|toidentifier@1.0.1"
},
{
"ref": "secure-nodesec-workshop@1.0.0|mime-db@1.54.0"
},
{
"ref": "secure-nodesec-workshop@1.0.0|ee-first@1.1.1"
},
{
"ref": "secure-nodesec-workshop@1.0.0|wrappy@1.0.2"
},
{
"ref": "secure-nodesec-workshop@1.0.0|forwarded@0.2.0"
},
{
"ref": "secure-nodesec-workshop@1.0.0|ipaddr.js@1.9.1"
},
{
"ref": "secure-nodesec-workshop@1.0.0|side-channel@1.1.1",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|es-errors@1.3.0",
"secure-nodesec-workshop@1.0.0|object-inspect@1.13.4",
"secure-nodesec-workshop@1.0.0|side-channel-list@1.0.1",
"secure-nodesec-workshop@1.0.0|side-channel-map@1.0.1",
"secure-nodesec-workshop@1.0.0|side-channel-weakmap@1.0.2"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|is-promise@4.0.0"
},
{
"ref": "secure-nodesec-workshop@1.0.0|path-to-regexp@8.4.2"
},
{
"ref": "secure-nodesec-workshop@1.0.0|media-typer@1.1.0"
},
{
"ref": "secure-nodesec-workshop@1.0.0|safer-buffer@2.1.2"
},
{
"ref": "secure-nodesec-workshop@1.0.0|unpipe@1.0.0"
},
{
"ref": "secure-nodesec-workshop@1.0.0|es-errors@1.3.0"
},
{
"ref": "secure-nodesec-workshop@1.0.0|object-inspect@1.13.4"
},
{
"ref": "secure-nodesec-workshop@1.0.0|side-channel-list@1.0.1",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|es-errors@1.3.0",
"secure-nodesec-workshop@1.0.0|object-inspect@1.13.4"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|side-channel-map@1.0.1",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|call-bound@1.0.4",
"secure-nodesec-workshop@1.0.0|es-errors@1.3.0",
"secure-nodesec-workshop@1.0.0|get-intrinsic@1.3.0",
"secure-nodesec-workshop@1.0.0|object-inspect@1.13.4"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|side-channel-weakmap@1.0.2",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|call-bound@1.0.4",
"secure-nodesec-workshop@1.0.0|es-errors@1.3.0",
"secure-nodesec-workshop@1.0.0|get-intrinsic@1.3.0",
"secure-nodesec-workshop@1.0.0|object-inspect@1.13.4",
"secure-nodesec-workshop@1.0.0|side-channel-map@1.0.1"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|call-bound@1.0.4",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|call-bind-apply-helpers@1.0.2",
"secure-nodesec-workshop@1.0.0|get-intrinsic@1.3.0"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|get-intrinsic@1.3.0",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|call-bind-apply-helpers@1.0.2",
"secure-nodesec-workshop@1.0.0|es-define-property@1.0.1",
"secure-nodesec-workshop@1.0.0|es-errors@1.3.0",
"secure-nodesec-workshop@1.0.0|es-object-atoms@1.1.2",
"secure-nodesec-workshop@1.0.0|function-bind@1.1.2",
"secure-nodesec-workshop@1.0.0|get-proto@1.0.1",
"secure-nodesec-workshop@1.0.0|gopd@1.2.0",
"secure-nodesec-workshop@1.0.0|has-symbols@1.1.0",
"secure-nodesec-workshop@1.0.0|hasown@2.0.4",
"secure-nodesec-workshop@1.0.0|math-intrinsics@1.1.0"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|call-bind-apply-helpers@1.0.2",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|es-errors@1.3.0",
"secure-nodesec-workshop@1.0.0|function-bind@1.1.2"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|es-define-property@1.0.1"
},
{
"ref": "secure-nodesec-workshop@1.0.0|es-object-atoms@1.1.2",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|es-errors@1.3.0"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|function-bind@1.1.2"
},
{
"ref": "secure-nodesec-workshop@1.0.0|get-proto@1.0.1",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|dunder-proto@1.0.1",
"secure-nodesec-workshop@1.0.0|es-object-atoms@1.1.2"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|gopd@1.2.0"
},
{
"ref": "secure-nodesec-workshop@1.0.0|has-symbols@1.1.0"
},
{
"ref": "secure-nodesec-workshop@1.0.0|hasown@2.0.4",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|function-bind@1.1.2"
]
},
{
"ref": "secure-nodesec-workshop@1.0.0|math-intrinsics@1.1.0"
},
{
"ref": "secure-nodesec-workshop@1.0.0|dunder-proto@1.0.1",
"dependsOn": [
"secure-nodesec-workshop@1.0.0|call-bind-apply-helpers@1.0.2",
"secure-nodesec-workshop@1.0.0|es-errors@1.3.0",
"secure-nodesec-workshop@1.0.0|gopd@1.2.0"
]
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment