From ce14ca2354afcc9682424dee7d39f308b38e033b Mon Sep 17 00:00:00 2001 From: Lucas Prins Date: Mon, 22 May 2023 15:03:46 +0200 Subject: [PATCH 01/91] Removed version validation on input --- ui/src/pages/search.tsx | 35 +++----------------------- ui/src/types/api/search.ts | 3 ++- ui/src/types/dataSource.ts | 13 ++++++++++ ui/src/utils/version.ts | 50 +++++++++++++++++++------------------- 4 files changed, 43 insertions(+), 58 deletions(-) diff --git a/ui/src/pages/search.tsx b/ui/src/pages/search.tsx index f1576e3..f1137c4 100644 --- a/ui/src/pages/search.tsx +++ b/ui/src/pages/search.tsx @@ -15,16 +15,15 @@ import { import Layout from "@/components/shared/Layout"; import PageTitle from "@/components/shared/PageTitle"; import { SearchService } from "@/services/SearchService"; -import type { APIResponseSearch } from "@/types/api/search"; +import { type APIResponseSearch } from "@/types/api/search"; import { - VersionType, - assertVersionInput, + type VersionType, getVersionPlaceholder, validateVersion, } from "@/utils/version"; import { Formik, Form } from "formik"; import { AnimatePresence, MotionConfig, motion } from "framer-motion"; -import { ChangeEvent, useEffect, useState, KeyboardEvent } from "react"; +import { useState } from "react"; type FormValues = { dependencyName: string; @@ -49,20 +48,6 @@ export default function Page() { setVersionType("exact"); } - function handleKeyDownVersion( - currentValue: string, - event: KeyboardEvent, - setter: (field: string, value: any, shouldValidate?: boolean) => void - ) { - const action = assertVersionInput(event, currentValue, versionType); - - if (action === "remove") { - setter("version", currentValue.slice(0, -1)); - } else if (action === "add") { - setter("version", currentValue + event.key); - } - } - async function handleSearch(formValues: FormValues) { setSearchResults(undefined); @@ -232,25 +217,11 @@ export default function Page() { - ) => { - handleKeyDownVersion( - values.version, - e, - setFieldValue - ); - }} validate={async (value: string) => { if (!validateVersion(value, versionType)) { return "Invalid version format"; } }} - onChange={( - e: ChangeEvent - ) => { - e.preventDefault(); - }} style="iconless" type="text" placeholder={getVersionPlaceholder( diff --git a/ui/src/types/api/search.ts b/ui/src/types/api/search.ts index b4bf750..2d25551 100644 --- a/ui/src/types/api/search.ts +++ b/ui/src/types/api/search.ts @@ -1,3 +1,4 @@ +import { DataSourceType } from "../dataSource"; import { Dependency } from "../dependency"; /** api/search */ @@ -5,7 +6,7 @@ export type APIResponseSearch = { data: Array<{ name: string; label: string; - type: string; + type: DataSourceType; results?: Array; }>; }; diff --git a/ui/src/types/dataSource.ts b/ui/src/types/dataSource.ts index 02c5d86..9cd95ed 100644 --- a/ui/src/types/dataSource.ts +++ b/ui/src/types/dataSource.ts @@ -1 +1,14 @@ export type DataSourceType = "local" | "github" | "gitlab" | "s3"; + +export type DataSource = { + id: string; + name: string; + label: string; + type: DataSourceType; + uri: string; + enabled: boolean; + labels?: Array; + lastSync?: string; + lastSyncStatus?: string; + lastSyncError?: string; +} \ No newline at end of file diff --git a/ui/src/utils/version.ts b/ui/src/utils/version.ts index 0c851f4..1976527 100644 --- a/ui/src/utils/version.ts +++ b/ui/src/utils/version.ts @@ -23,28 +23,28 @@ export function getVersionPlaceholder(type: VersionType): string { type AssertVersionAction = "add" | "remove" | "block"; -export function assertVersionInput( - e: KeyboardEvent, - currentValue: string, - versionType: VersionType -): AssertVersionAction { - // const input = e.key; - // const position = currentValue.length; - // const maxChars = versionType === "range" ? 11 : 5; - // const isDot = input === "."; - // const isValidCharacter = - // (versionType === "range" && input === "-" && position === 5) || - // (position % 2 === 0 && /[0-9]/.test(input)) || - // (position % 2 === 1 && isDot && position !== 5); - - // if (input === "Backspace") { - // return "remove"; - // } - - // if (position >= maxChars || !isValidCharacter) { - // e.preventDefault(); - // return "block"; - // } - - return "add"; -} +// export function assertVersionInput( +// e: KeyboardEvent, +// currentValue: string, +// versionType: VersionType +// ): AssertVersionAction { +// // const input = e.key; +// // const position = currentValue.length; +// // const maxChars = versionType === "range" ? 11 : 5; +// // const isDot = input === "."; +// // const isValidCharacter = +// // (versionType === "range" && input === "-" && position === 5) || +// // (position % 2 === 0 && /[0-9]/.test(input)) || +// // (position % 2 === 1 && isDot && position !== 5); + +// // if (input === "Backspace") { +// // return "remove"; +// // } + +// // if (position >= maxChars || !isValidCharacter) { +// // e.preventDefault(); +// // return "block"; +// // } + +// return "add"; +// } From 5accce80545d4a90d01749ac11ae0e4f61976421 Mon Sep 17 00:00:00 2001 From: fabiothomas <95278302+fabiothomas@users.noreply.github.com> Date: Thu, 25 May 2023 17:08:42 +0200 Subject: [PATCH 02/91] Create version.py --- backend/functions/version.py | 42 ++++++++++++++++++++++++++++++++++++ 1 file changed, 42 insertions(+) create mode 100644 backend/functions/version.py diff --git a/backend/functions/version.py b/backend/functions/version.py new file mode 100644 index 0000000..0613f31 --- /dev/null +++ b/backend/functions/version.py @@ -0,0 +1,42 @@ +import string + +class Version: + def __init__(self, mayor_, minor_ = "none", revision_ = "none"): + if (minor_ != "none" and revision_ != "none"): + self.mayor = mayor_ + self.minor = minor_ + self.revision = revision_ + elif (minor_ != "none" and revision_ == "none"): + self.mayor = mayor_ + self.minor = minor_ + self.revision = 0 + else: + txt = mayor_.split('.') + self.mayor = int(self.pruned(txt[0])) + self.minor = int(self.pruned(txt[1])) + self.revision = int(self.pruned(txt[2])) + + def pruned(self, txt): + for character in list(string.ascii_letters + string.punctuation): + txt = txt.replace(character, "") + return txt + + # == + def __eq__(self, other): + return self.mayor == other.mayor and self.minor == other.minor and self.revision == other.revision + + # < + def __lt__(self, other): + return self.mayor < other.mayor or (self.mayor == other.mayor and self.minor < other.minor) or (self.mayor == other.mayor and self.minor == other.minor and self.revision < other.revision) + + # <= + def __le__(self, other): + return self.mayor < other.mayor or (self.mayor == other.mayor and self.minor < other.minor) or (self.mayor == other.mayor and self.minor == other.minor and self.revision < other.revision) or (self.mayor == other.mayor and self.minor == other.minor and self.revision == other.revision) + + # > + def __gt__(self, other): + return self.mayor > other.mayor or (self.mayor == other.mayor and self.minor > other.minor) or (self.mayor == other.mayor and self.minor == other.minor and self.revision > other.revision) + + # >= + def __ge__(self, other): + return self.mayor > other.mayor or (self.mayor == other.mayor and self.minor > other.minor) or (self.mayor == other.mayor and self.minor == other.minor and self.revision > other.revision) or (self.mayor == other.mayor and self.minor == other.minor and self.revision == other.revision) \ No newline at end of file From 000ef3753218243fbef748c94d905c71aa870ae8 Mon Sep 17 00:00:00 2001 From: The0Danktor <94552546+The0Danktor@users.noreply.github.com> Date: Thu, 25 May 2023 17:25:04 +0200 Subject: [PATCH 03/91] Update .dockerignore --- .dockerignore | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/.dockerignore b/.dockerignore index 85d331b..83f9ce0 100644 --- a/.dockerignore +++ b/.dockerignore @@ -2,4 +2,8 @@ */*/.idea* */*/venv* */*/node_modules* -*/*/.next* \ No newline at end of file +*/*/.next* +.gitignore +README.md +.dockerignore +.git \ No newline at end of file From 86fab1618b32ee98eb73bf5f34c59e830a46ea04 Mon Sep 17 00:00:00 2001 From: Lucas Prins Date: Thu, 25 May 2023 17:56:09 +0200 Subject: [PATCH 04/91] Improved nextjs docker buildfile by using standalone output of nextjs --- ui/.dockerignore | 12 ++++++----- ui/Dockerfile | 54 +++++++++++++++++++++++++++++++++++++++-------- ui/next.config.js | 1 + ui/package.json | 2 +- 4 files changed, 54 insertions(+), 15 deletions(-) diff --git a/ui/.dockerignore b/ui/.dockerignore index 85d331b..72e9aa4 100644 --- a/ui/.dockerignore +++ b/ui/.dockerignore @@ -1,5 +1,7 @@ -*/*/_pycache_* -*/*/.idea* -*/*/venv* -*/*/node_modules* -*/*/.next* \ No newline at end of file +Dockerfile +.dockerignore +node_modules +npm-debug.log +README.md +.next +.git \ No newline at end of file diff --git a/ui/Dockerfile b/ui/Dockerfile index a14e585..41d301b 100644 --- a/ui/Dockerfile +++ b/ui/Dockerfile @@ -1,19 +1,55 @@ -FROM node +FROM node:18-alpine AS base -# Create app directory +# Install dependencies only when needed +FROM base AS deps +# Check https://github.com/nodejs/docker-node/tree/b4117f9333da4138b03a546ec926ef50a31506c3#nodealpine to understand why libc6-compat might be needed. +RUN apk add --no-cache libc6-compat WORKDIR /app -# Install app dependencies -COPY package*.json ./ -RUN npm ci +# Install dependencies based on the preferred package manager +COPY package.json yarn.lock* package-lock.json* pnpm-lock.yaml* ./ +RUN \ + if [ -f yarn.lock ]; then yarn --frozen-lockfile; \ + elif [ -f package-lock.json ]; then npm ci; \ + elif [ -f pnpm-lock.yaml ]; then yarn global add pnpm && pnpm i --frozen-lockfile; \ + else echo "Lockfile not found." && exit 1; \ + fi -# Bundle app source + +# Rebuild the source code only when needed +FROM base AS builder +WORKDIR /app +COPY --from=deps /app/node_modules ./node_modules COPY . . +# Next.js collects completely anonymous telemetry data about general usage. +# Learn more here: https://nextjs.org/telemetry +# Uncomment the following line in case you want to disable telemetry during the build. +ENV NEXT_TELEMETRY_DISABLED 1 RUN npm run build -# Expose port 3000 +# Production image, copy all the files and run next +FROM base AS runner +WORKDIR /app + +ENV NODE_ENV production +# Uncomment the following line in case you want to disable telemetry during runtime. +ENV NEXT_TELEMETRY_DISABLED 1 + +RUN addgroup --system --gid 1001 nodejs +RUN adduser --system --uid 1001 nextjs + +COPY --from=builder /app/public ./public + +# Automatically leverage output traces to reduce image size +# https://nextjs.org/docs/advanced-features/output-file-tracing +COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./ +COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static + +USER nextjs + EXPOSE 3000 -# Run app -CMD ["npm", "start"] +ENV PORT 3000 + +CMD ["node", "server.js"] \ No newline at end of file diff --git a/ui/next.config.js b/ui/next.config.js index a843cbe..2c83e91 100644 --- a/ui/next.config.js +++ b/ui/next.config.js @@ -1,6 +1,7 @@ /** @type {import('next').NextConfig} */ const nextConfig = { reactStrictMode: true, + output: 'standalone' } module.exports = nextConfig diff --git a/ui/package.json b/ui/package.json index fb48eac..b7afbb8 100644 --- a/ui/package.json +++ b/ui/package.json @@ -4,7 +4,7 @@ "private": true, "scripts": { "dev": "next dev", - "build": "next build", + "build": "next build && next export", "start": "next start", "lint": "next lint" }, From 0d96076088ccf95f7ecb05d9aef5ecee1aa3612f Mon Sep 17 00:00:00 2001 From: The0Danktor <94552546+The0Danktor@users.noreply.github.com> Date: Sat, 27 May 2023 15:16:47 +0200 Subject: [PATCH 05/91] epic version --- backend/functions/sboms/08d22c0ceb15spdx.json | 4911 ++++ backend/functions/sboms/33.cyclonedx2.json | 22701 ++++++++++++++++ backend/functions/scan.py | 113 +- backend/playground/views.py | 4 +- 4 files changed, 27683 insertions(+), 46 deletions(-) create mode 100644 backend/functions/sboms/08d22c0ceb15spdx.json create mode 100644 backend/functions/sboms/33.cyclonedx2.json diff --git a/backend/functions/sboms/08d22c0ceb15spdx.json b/backend/functions/sboms/08d22c0ceb15spdx.json new file mode 100644 index 0000000..839a410 --- /dev/null +++ b/backend/functions/sboms/08d22c0ceb15spdx.json @@ -0,0 +1,4911 @@ +{ + "spdxVersion": "SPDX-2.3", + "dataLicense": "CC0-1.0", + "SPDXID": "SPDXRef-DOCUMENT", + "name": "ubuntu:latest", + "documentNamespace": "https://anchore.com/syft/image/ubuntu-latest-0bc33c65-d286-4297-a689-e8173fc39416", + "creationInfo": { + "licenseListVersion": "3.20", + "creators": [ + "Organization: Anchore, Inc", + "Tool: syft-0.75.0" + ], + "created": "2023-04-18T12:06:03Z" + }, + "packages": [ + { + "name": "adduser", + "SPDXID": "SPDXRef-Package-deb-adduser-a1a22e7b0e4a292", + "versionInfo": "3.118ubuntu5", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/adduser/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only", + "licenseDeclared": "GPL-2.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:adduser:adduser:3.118ubuntu5:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/adduser@3.118ubuntu5?arch=all&distro=ubuntu-22.04" + } + ] + }, + { + "name": "apt", + "SPDXID": "SPDXRef-Package-deb-apt-c55f9b572f099afa", + "versionInfo": "2.4.8", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/apt/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only AND LicenseRef-GPLv2-", + "licenseDeclared": "GPL-2.0-only AND LicenseRef-GPLv2-", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:apt:apt:2.4.8:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/apt@2.4.8?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "base-files", + "SPDXID": "SPDXRef-Package-deb-base-files-dd7a0d513f1cc5d9", + "versionInfo": "12ubuntu4.3", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/base-files/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-GPL", + "licenseDeclared": "LicenseRef-GPL", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:base-files:base-files:12ubuntu4.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:base-files:base_files:12ubuntu4.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:base_files:base-files:12ubuntu4.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:base_files:base_files:12ubuntu4.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:base:base-files:12ubuntu4.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:base:base_files:12ubuntu4.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/base-files@12ubuntu4.3?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "base-passwd", + "SPDXID": "SPDXRef-Package-deb-base-passwd-ea63946aabb58cc0", + "versionInfo": "3.5.52build1", + "originator": "Person: Colin Watson \u003ccjwatson@debian.org\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/base-passwd/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only AND LicenseRef-public-domain", + "licenseDeclared": "GPL-2.0-only AND LicenseRef-public-domain", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:base-passwd:base-passwd:3.5.52build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:base-passwd:base_passwd:3.5.52build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:base_passwd:base-passwd:3.5.52build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:base_passwd:base_passwd:3.5.52build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:base:base-passwd:3.5.52build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:base:base_passwd:3.5.52build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/base-passwd@3.5.52build1?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "bash", + "SPDXID": "SPDXRef-Package-deb-bash-ec404d0fccb93c72", + "versionInfo": "5.1-6ubuntu1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/bash/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-3.0-only", + "licenseDeclared": "GPL-3.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:bash:bash:5.1-6ubuntu1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/bash@5.1-6ubuntu1?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "bsdutils", + "SPDXID": "SPDXRef-Package-deb-bsdutils-c3e6b0f4f61b3fe9", + "versionInfo": "1:2.37.2-4ubuntu3", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/bsdutils/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT AND LicenseRef-public-domain", + "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT AND LicenseRef-public-domain", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:bsdutils:bsdutils:1\\:2.37.2-4ubuntu3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/bsdutils@1:2.37.2-4ubuntu3?arch=amd64&upstream=util-linux%402.37.2-4ubuntu3&distro=ubuntu-22.04" + } + ] + }, + { + "name": "coreutils", + "SPDXID": "SPDXRef-Package-deb-coreutils-606da9f70ff2cb26", + "versionInfo": "8.32-4.1ubuntu1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/coreutils/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-3.0-only", + "licenseDeclared": "GPL-3.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:coreutils:coreutils:8.32-4.1ubuntu1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/coreutils@8.32-4.1ubuntu1?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "dash", + "SPDXID": "SPDXRef-Package-deb-dash-60e9b0ccf1a3fe65", + "versionInfo": "0.5.11+git20210903+057cd650a4ed-3build1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/dash/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-3-Clause AND BSD-3-Clause AND LicenseRef-Expat AND FSFUL AND FSFULLR AND GPL-2.0-only AND GPL-2.0-or-later AND LicenseRef-public-domain", + "licenseDeclared": "BSD-3-Clause AND BSD-3-Clause AND LicenseRef-Expat AND FSFUL AND FSFULLR AND GPL-2.0-only AND GPL-2.0-or-later AND LicenseRef-public-domain", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:dash:dash:0.5.11\\+git20210903\\+057cd650a4ed-3build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/dash@0.5.11+git20210903+057cd650a4ed-3build1?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "debconf", + "SPDXID": "SPDXRef-Package-deb-debconf-c417bfa7b33bfc8d", + "versionInfo": "1.5.79ubuntu1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/debconf/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-2-Clause", + "licenseDeclared": "BSD-2-Clause", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:debconf:debconf:1.5.79ubuntu1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/debconf@1.5.79ubuntu1?arch=all&distro=ubuntu-22.04" + } + ] + }, + { + "name": "debianutils", + "SPDXID": "SPDXRef-Package-deb-debianutils-908d3ae54fcbf259", + "versionInfo": "5.5-1ubuntu2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/debianutils/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only", + "licenseDeclared": "GPL-2.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:debianutils:debianutils:5.5-1ubuntu2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/debianutils@5.5-1ubuntu2?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "diffutils", + "SPDXID": "SPDXRef-Package-deb-diffutils-8680651227f4ccef", + "versionInfo": "1:3.8-0ubuntu2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/diffutils/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-GFDL AND LicenseRef-GPL", + "licenseDeclared": "LicenseRef-GFDL AND LicenseRef-GPL", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:diffutils:diffutils:1\\:3.8-0ubuntu2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/diffutils@1:3.8-0ubuntu2?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "dpkg", + "SPDXID": "SPDXRef-Package-deb-dpkg-9e066ac193d60109", + "versionInfo": "1.21.1ubuntu2.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/dpkg/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-2-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND LicenseRef-public-domain-md5 AND LicenseRef-public-domain-s-s-d", + "licenseDeclared": "BSD-2-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND LicenseRef-public-domain-md5 AND LicenseRef-public-domain-s-s-d", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:dpkg:dpkg:1.21.1ubuntu2.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/dpkg@1.21.1ubuntu2.1?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "e2fsprogs", + "SPDXID": "SPDXRef-Package-deb-e2fsprogs-b16d946dcb23bd4b", + "versionInfo": "1.46.5-2ubuntu1.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/e2fsprogs/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only AND LGPL-2.0-only", + "licenseDeclared": "GPL-2.0-only AND LGPL-2.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:e2fsprogs:e2fsprogs:1.46.5-2ubuntu1.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/e2fsprogs@1.46.5-2ubuntu1.1?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "findutils", + "SPDXID": "SPDXRef-Package-deb-findutils-d5e8dcca60abe173", + "versionInfo": "4.8.0-1ubuntu3", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/findutils/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GFDL-1.3-only AND GPL-3.0-only", + "licenseDeclared": "GFDL-1.3-only AND GPL-3.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:findutils:findutils:4.8.0-1ubuntu3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/findutils@4.8.0-1ubuntu3?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "gcc-12-base", + "SPDXID": "SPDXRef-Package-deb-gcc-12-base-609a8a24e80a30e", + "versionInfo": "12.1.0-2ubuntu1~22.04", + "originator": "Person: Ubuntu Core developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/gcc-12-base/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-Artistic AND GFDL-1.2-only AND LicenseRef-GPL AND GPL-2.0-only AND GPL-3.0-only AND LicenseRef-LGPL", + "licenseDeclared": "LicenseRef-Artistic AND GFDL-1.2-only AND LicenseRef-GPL AND GPL-2.0-only AND GPL-3.0-only AND LicenseRef-LGPL", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:gcc-12-base:gcc-12-base:12.1.0-2ubuntu1\\~22.04:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:gcc-12-base:gcc_12_base:12.1.0-2ubuntu1\\~22.04:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:gcc_12_base:gcc-12-base:12.1.0-2ubuntu1\\~22.04:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:gcc_12_base:gcc_12_base:12.1.0-2ubuntu1\\~22.04:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:gcc-12:gcc-12-base:12.1.0-2ubuntu1\\~22.04:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:gcc-12:gcc_12_base:12.1.0-2ubuntu1\\~22.04:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:gcc_12:gcc-12-base:12.1.0-2ubuntu1\\~22.04:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:gcc_12:gcc_12_base:12.1.0-2ubuntu1\\~22.04:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:gcc:gcc-12-base:12.1.0-2ubuntu1\\~22.04:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:gcc:gcc_12_base:12.1.0-2ubuntu1\\~22.04:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/gcc-12-base@12.1.0-2ubuntu1~22.04?arch=amd64&upstream=gcc-12&distro=ubuntu-22.04" + } + ] + }, + { + "name": "gpgv", + "SPDXID": "SPDXRef-Package-deb-gpgv-e1d204735d5121ca", + "versionInfo": "2.2.27-3ubuntu2.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/gpgv/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-3-Clause AND CC0-1.0 AND LicenseRef-Expat AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-RFC-Reference AND LicenseRef-TinySCHEME AND LicenseRef-permissive", + "licenseDeclared": "BSD-3-Clause AND CC0-1.0 AND LicenseRef-Expat AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-RFC-Reference AND LicenseRef-TinySCHEME AND LicenseRef-permissive", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:gpgv:gpgv:2.2.27-3ubuntu2.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/gpgv@2.2.27-3ubuntu2.1?arch=amd64&upstream=gnupg2&distro=ubuntu-22.04" + } + ] + }, + { + "name": "grep", + "SPDXID": "SPDXRef-Package-deb-grep-29a4d65a2ab51e4c", + "versionInfo": "3.7-1build1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/grep/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-3.0-only AND GPL-3.0-or-later", + "licenseDeclared": "GPL-3.0-only AND GPL-3.0-or-later", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:grep:grep:3.7-1build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/grep@3.7-1build1?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "gzip", + "SPDXID": "SPDXRef-Package-deb-gzip-5b9a5a38c9fe3df7", + "versionInfo": "1.10-4ubuntu4.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/gzip/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-FSF-manpages AND LicenseRef-GFDL-1.3--no-invariant AND LicenseRef-GFDL-3 AND GPL-3.0-only AND GPL-3.0-or-later", + "licenseDeclared": "LicenseRef-FSF-manpages AND LicenseRef-GFDL-1.3--no-invariant AND LicenseRef-GFDL-3 AND GPL-3.0-only AND GPL-3.0-or-later", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:gzip:gzip:1.10-4ubuntu4.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/gzip@1.10-4ubuntu4.1?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "hostname", + "SPDXID": "SPDXRef-Package-deb-hostname-f7b5cc65150347d0", + "versionInfo": "3.23ubuntu2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/hostname/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only", + "licenseDeclared": "GPL-2.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:hostname:hostname:3.23ubuntu2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/hostname@3.23ubuntu2?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "init-system-helpers", + "SPDXID": "SPDXRef-Package-deb-init-system-helpers-970ad709d70abdad", + "versionInfo": "1.62", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/init-system-helpers/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-3-Clause AND GPL-2.0-only AND GPL-2.0-or-later", + "licenseDeclared": "BSD-3-Clause AND GPL-2.0-only AND GPL-2.0-or-later", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:init-system-helpers:init-system-helpers:1.62:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:init-system-helpers:init_system_helpers:1.62:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:init_system_helpers:init-system-helpers:1.62:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:init_system_helpers:init_system_helpers:1.62:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:init-system:init-system-helpers:1.62:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:init-system:init_system_helpers:1.62:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:init_system:init-system-helpers:1.62:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:init_system:init_system_helpers:1.62:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:init:init-system-helpers:1.62:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:init:init_system_helpers:1.62:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/init-system-helpers@1.62?arch=all&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libacl1", + "SPDXID": "SPDXRef-Package-deb-libacl1-c0aa9eaabd139b00", + "versionInfo": "2.3.1-1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libacl1/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LGPL-2.1-only", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LGPL-2.1-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libacl1:libacl1:2.3.1-1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libacl1@2.3.1-1?arch=amd64&upstream=acl&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libapt-pkg6.0", + "SPDXID": "SPDXRef-Package-deb-libapt-pkg6.0-585b46f31872020d", + "versionInfo": "2.4.8", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libapt-pkg6.0/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only AND LicenseRef-GPLv2-", + "licenseDeclared": "GPL-2.0-only AND LicenseRef-GPLv2-", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libapt-pkg6.0:libapt-pkg6.0:2.4.8:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libapt-pkg6.0:libapt_pkg6.0:2.4.8:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libapt_pkg6.0:libapt-pkg6.0:2.4.8:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libapt_pkg6.0:libapt_pkg6.0:2.4.8:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libapt:libapt-pkg6.0:2.4.8:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libapt:libapt_pkg6.0:2.4.8:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libapt-pkg6.0@2.4.8?arch=amd64&upstream=apt&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libattr1", + "SPDXID": "SPDXRef-Package-deb-libattr1-ef388d6835fc0617", + "versionInfo": "1:2.5.1-1build1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libattr1/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LGPL-2.1-only", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LGPL-2.1-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libattr1:libattr1:1\\:2.5.1-1build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libattr1@1:2.5.1-1build1?arch=amd64&upstream=attr&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libaudit-common", + "SPDXID": "SPDXRef-Package-deb-libaudit-common-78d440318da51a25", + "versionInfo": "1:3.0.7-1build1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libaudit-common/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-1.0-only AND GPL-2.0-only AND LGPL-2.1-only", + "licenseDeclared": "GPL-1.0-only AND GPL-2.0-only AND LGPL-2.1-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libaudit-common:libaudit-common:1\\:3.0.7-1build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libaudit-common:libaudit_common:1\\:3.0.7-1build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libaudit_common:libaudit-common:1\\:3.0.7-1build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libaudit_common:libaudit_common:1\\:3.0.7-1build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libaudit:libaudit-common:1\\:3.0.7-1build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libaudit:libaudit_common:1\\:3.0.7-1build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libaudit-common@1:3.0.7-1build1?arch=all&upstream=audit&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libaudit1", + "SPDXID": "SPDXRef-Package-deb-libaudit1-7bf7c8d6ef846159", + "versionInfo": "1:3.0.7-1build1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libaudit1/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-1.0-only AND GPL-2.0-only AND LGPL-2.1-only", + "licenseDeclared": "GPL-1.0-only AND GPL-2.0-only AND LGPL-2.1-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libaudit1:libaudit1:1\\:3.0.7-1build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libaudit1@1:3.0.7-1build1?arch=amd64&upstream=audit&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libblkid1", + "SPDXID": "SPDXRef-Package-deb-libblkid1-6188c1cd8c0047ca", + "versionInfo": "2.37.2-4ubuntu3", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libblkid1/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT AND LicenseRef-public-domain", + "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT AND LicenseRef-public-domain", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libblkid1:libblkid1:2.37.2-4ubuntu3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libblkid1@2.37.2-4ubuntu3?arch=amd64&upstream=util-linux&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libbz2-1.0", + "SPDXID": "SPDXRef-Package-deb-libbz2-1.0-6b3ef3f72c68401b", + "versionInfo": "1.0.8-5build1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libbz2-1.0/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-BSD-variant AND GPL-2.0-only", + "licenseDeclared": "LicenseRef-BSD-variant AND GPL-2.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libbz2-1.0:libbz2-1.0:1.0.8-5build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libbz2-1.0:libbz2_1.0:1.0.8-5build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libbz2_1.0:libbz2-1.0:1.0.8-5build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libbz2_1.0:libbz2_1.0:1.0.8-5build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libbz2:libbz2-1.0:1.0.8-5build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libbz2:libbz2_1.0:1.0.8-5build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libbz2-1.0@1.0.8-5build1?arch=amd64&upstream=bzip2&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libc-bin", + "SPDXID": "SPDXRef-Package-deb-libc-bin-25c20dba11316355", + "versionInfo": "2.35-0ubuntu3.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libc-bin/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GFDL-1.3-only AND GPL-2.0-only AND LGPL-2.1-only", + "licenseDeclared": "GFDL-1.3-only AND GPL-2.0-only AND LGPL-2.1-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libc-bin:libc-bin:2.35-0ubuntu3.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libc-bin:libc_bin:2.35-0ubuntu3.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libc_bin:libc-bin:2.35-0ubuntu3.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libc_bin:libc_bin:2.35-0ubuntu3.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libc:libc-bin:2.35-0ubuntu3.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libc:libc_bin:2.35-0ubuntu3.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libc-bin@2.35-0ubuntu3.1?arch=amd64&upstream=glibc&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libc6", + "SPDXID": "SPDXRef-Package-deb-libc6-e0ec0b5c28ae7553", + "versionInfo": "2.35-0ubuntu3.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libc6/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GFDL-1.3-only AND GPL-2.0-only AND LGPL-2.1-only", + "licenseDeclared": "GFDL-1.3-only AND GPL-2.0-only AND LGPL-2.1-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libc6:libc6:2.35-0ubuntu3.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libc6@2.35-0ubuntu3.1?arch=amd64&upstream=glibc&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libcap-ng0", + "SPDXID": "SPDXRef-Package-deb-libcap-ng0-9b1779d8792a537e", + "versionInfo": "0.7.9-2.2build3", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libcap-ng0/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only AND GPL-3.0-only AND LGPL-2.1-only", + "licenseDeclared": "GPL-2.0-only AND GPL-3.0-only AND LGPL-2.1-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libcap-ng0:libcap-ng0:0.7.9-2.2build3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libcap-ng0:libcap_ng0:0.7.9-2.2build3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libcap_ng0:libcap-ng0:0.7.9-2.2build3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libcap_ng0:libcap_ng0:0.7.9-2.2build3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libcap:libcap-ng0:0.7.9-2.2build3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libcap:libcap_ng0:0.7.9-2.2build3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libcap-ng0@0.7.9-2.2build3?arch=amd64&upstream=libcap-ng&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libcap2", + "SPDXID": "SPDXRef-Package-deb-libcap2-f8c439b225438547", + "versionInfo": "1:2.44-1build3", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libcap2/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-3-Clause AND GPL-2.0-only AND GPL-2.0-or-later", + "licenseDeclared": "BSD-3-Clause AND GPL-2.0-only AND GPL-2.0-or-later", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libcap2:libcap2:1\\:2.44-1build3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libcap2@1:2.44-1build3?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libcom-err2", + "SPDXID": "SPDXRef-Package-deb-libcom-err2-1d2d6c1c92b9a3a3", + "versionInfo": "1.46.5-2ubuntu1.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libcom-err2/copyright, /var/lib/dpkg/status", + "licenseConcluded": "NONE", + "licenseDeclared": "NONE", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libcom-err2:libcom-err2:1.46.5-2ubuntu1.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libcom-err2:libcom_err2:1.46.5-2ubuntu1.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libcom_err2:libcom-err2:1.46.5-2ubuntu1.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libcom_err2:libcom_err2:1.46.5-2ubuntu1.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libcom:libcom-err2:1.46.5-2ubuntu1.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libcom:libcom_err2:1.46.5-2ubuntu1.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libcom-err2@1.46.5-2ubuntu1.1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libcrypt1", + "SPDXID": "SPDXRef-Package-deb-libcrypt1-cdcaf2f8cf4382e5", + "versionInfo": "1:4.4.27-1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libcrypt1/copyright, /var/lib/dpkg/status", + "licenseConcluded": "NONE", + "licenseDeclared": "NONE", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libcrypt1:libcrypt1:1\\:4.4.27-1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libcrypt1@1:4.4.27-1?arch=amd64&upstream=libxcrypt&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libdb5.3", + "SPDXID": "SPDXRef-Package-deb-libdb5.3-67e201884be6fd6d", + "versionInfo": "5.3.28+dfsg1-0.8ubuntu3", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libdb5.3/copyright, /var/lib/dpkg/status", + "licenseConcluded": "NONE", + "licenseDeclared": "NONE", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libdb5.3:libdb5.3:5.3.28\\+dfsg1-0.8ubuntu3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libdb5.3@5.3.28+dfsg1-0.8ubuntu3?arch=amd64&upstream=db5.3&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libdebconfclient0", + "SPDXID": "SPDXRef-Package-deb-libdebconfclient0-d7ff153a76e6307f", + "versionInfo": "0.261ubuntu1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libdebconfclient0/copyright, /var/lib/dpkg/status", + "licenseConcluded": "NONE", + "licenseDeclared": "NONE", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libdebconfclient0:libdebconfclient0:0.261ubuntu1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libdebconfclient0@0.261ubuntu1?arch=amd64&upstream=cdebconf&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libext2fs2", + "SPDXID": "SPDXRef-Package-deb-libext2fs2-431b11c405974e9", + "versionInfo": "1.46.5-2ubuntu1.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libext2fs2/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only AND LGPL-2.0-only", + "licenseDeclared": "GPL-2.0-only AND LGPL-2.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libext2fs2:libext2fs2:1.46.5-2ubuntu1.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libext2fs2@1.46.5-2ubuntu1.1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libffi8", + "SPDXID": "SPDXRef-Package-deb-libffi8-d2a911706fca5ee8", + "versionInfo": "3.4.2-4", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libffi8/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-GPL", + "licenseDeclared": "LicenseRef-GPL", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libffi8:libffi8:3.4.2-4:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libffi8@3.4.2-4?arch=amd64&upstream=libffi&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libgcc-s1", + "SPDXID": "SPDXRef-Package-deb-libgcc-s1-3d467849ac7b26d8", + "versionInfo": "12.1.0-2ubuntu1~22.04", + "originator": "Person: Ubuntu Core developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/gcc-12-base/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-Artistic AND GFDL-1.2-only AND LicenseRef-GPL AND GPL-2.0-only AND GPL-3.0-only AND LicenseRef-LGPL", + "licenseDeclared": "LicenseRef-Artistic AND GFDL-1.2-only AND LicenseRef-GPL AND GPL-2.0-only AND GPL-3.0-only AND LicenseRef-LGPL", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgcc-s1:libgcc-s1:12.1.0-2ubuntu1\\~22.04:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgcc-s1:libgcc_s1:12.1.0-2ubuntu1\\~22.04:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgcc_s1:libgcc-s1:12.1.0-2ubuntu1\\~22.04:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgcc_s1:libgcc_s1:12.1.0-2ubuntu1\\~22.04:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgcc:libgcc-s1:12.1.0-2ubuntu1\\~22.04:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgcc:libgcc_s1:12.1.0-2ubuntu1\\~22.04:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libgcc-s1@12.1.0-2ubuntu1~22.04?arch=amd64&upstream=gcc-12&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libgcrypt20", + "SPDXID": "SPDXRef-Package-deb-libgcrypt20-bf1bb9bf5eb9ecbf", + "versionInfo": "1.9.4-3ubuntu3", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libgcrypt20/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only AND LicenseRef-LGPL", + "licenseDeclared": "GPL-2.0-only AND LicenseRef-LGPL", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgcrypt20:libgcrypt20:1.9.4-3ubuntu3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libgcrypt20@1.9.4-3ubuntu3?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libgmp10", + "SPDXID": "SPDXRef-Package-deb-libgmp10-bb81ca7a2ef12732", + "versionInfo": "2:6.2.1+dfsg-3ubuntu1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libgmp10/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-GPL AND GPL-2.0-only AND GPL-3.0-only AND LGPL-3.0-only", + "licenseDeclared": "LicenseRef-GPL AND GPL-2.0-only AND GPL-3.0-only AND LGPL-3.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgmp10:libgmp10:2\\:6.2.1\\+dfsg-3ubuntu1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libgmp10@2:6.2.1+dfsg-3ubuntu1?arch=amd64&upstream=gmp&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libgnutls30", + "SPDXID": "SPDXRef-Package-deb-libgnutls30-1e483245bcb86de6", + "versionInfo": "3.7.3-4ubuntu1.2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libgnutls30/copyright, /var/lib/dpkg/status", + "licenseConcluded": "Apache-2.0 AND BSD-3-Clause AND LicenseRef-CC0 AND LicenseRef-Expat AND GFDL-1.3-only AND LicenseRef-GPL AND GPL-3.0-only AND LicenseRef-GPLv3- AND LicenseRef-LGPL AND LGPL-3.0-only AND LicenseRef-LGPLv2.1- AND LicenseRef-LGPLv3--or-GPLv2- AND LicenseRef-The", + "licenseDeclared": "Apache-2.0 AND BSD-3-Clause AND LicenseRef-CC0 AND LicenseRef-Expat AND GFDL-1.3-only AND LicenseRef-GPL AND GPL-3.0-only AND LicenseRef-GPLv3- AND LicenseRef-LGPL AND LGPL-3.0-only AND LicenseRef-LGPLv2.1- AND LicenseRef-LGPLv3--or-GPLv2- AND LicenseRef-The", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&upstream=gnutls28&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libgpg-error0", + "SPDXID": "SPDXRef-Package-deb-libgpg-error0-d3c21e4de95bed65", + "versionInfo": "1.43-3", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libgpg-error0/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-3-Clause AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LicenseRef-g10-permissive", + "licenseDeclared": "BSD-3-Clause AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LicenseRef-g10-permissive", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgpg-error0:libgpg-error0:1.43-3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgpg-error0:libgpg_error0:1.43-3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgpg_error0:libgpg-error0:1.43-3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgpg_error0:libgpg_error0:1.43-3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgpg:libgpg-error0:1.43-3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgpg:libgpg_error0:1.43-3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libgpg-error0@1.43-3?arch=amd64&upstream=libgpg-error&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libgssapi-krb5-2", + "SPDXID": "SPDXRef-Package-deb-libgssapi-krb5-2-e10976a74d9fe938", + "versionInfo": "1.19.2-2ubuntu0.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libgssapi-krb5-2/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only", + "licenseDeclared": "GPL-2.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.19.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.19.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.19.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.19.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.19.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.19.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libgssapi-krb5-2@1.19.2-2ubuntu0.1?arch=amd64&upstream=krb5&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libhogweed6", + "SPDXID": "SPDXRef-Package-deb-libhogweed6-6b92f4b9a5a962f6", + "versionInfo": "3.7.3-1build2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libhogweed6/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-Expat AND LicenseRef-GAP AND LicenseRef-GPL AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-3.0-or-later AND LicenseRef-public-domain", + "licenseDeclared": "LicenseRef-Expat AND LicenseRef-GAP AND LicenseRef-GPL AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-3.0-or-later AND LicenseRef-public-domain", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libhogweed6:libhogweed6:3.7.3-1build2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libhogweed6@3.7.3-1build2?arch=amd64&upstream=nettle&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libidn2-0", + "SPDXID": "SPDXRef-Package-deb-libidn2-0-661e89463a6b3de3", + "versionInfo": "2.3.2-2build1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libidn2-0/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-Unicode", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-Unicode", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libidn2-0:libidn2-0:2.3.2-2build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libidn2-0:libidn2_0:2.3.2-2build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libidn2_0:libidn2-0:2.3.2-2build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libidn2_0:libidn2_0:2.3.2-2build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libidn2:libidn2-0:2.3.2-2build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libidn2:libidn2_0:2.3.2-2build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libidn2-0@2.3.2-2build1?arch=amd64&upstream=libidn2&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libk5crypto3", + "SPDXID": "SPDXRef-Package-deb-libk5crypto3-12d3aa37251b4933", + "versionInfo": "1.19.2-2ubuntu0.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libk5crypto3/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only", + "licenseDeclared": "GPL-2.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libk5crypto3:libk5crypto3:1.19.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libk5crypto3@1.19.2-2ubuntu0.1?arch=amd64&upstream=krb5&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libkeyutils1", + "SPDXID": "SPDXRef-Package-deb-libkeyutils1-aefebd7fdb760283", + "versionInfo": "1.6.1-2ubuntu3", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libkeyutils1/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.0-only AND LGPL-2.0-or-later", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.0-only AND LGPL-2.0-or-later", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libkeyutils1:libkeyutils1:1.6.1-2ubuntu3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libkeyutils1@1.6.1-2ubuntu3?arch=amd64&upstream=keyutils&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libkrb5-3", + "SPDXID": "SPDXRef-Package-deb-libkrb5-3-1f6e914773c5f940", + "versionInfo": "1.19.2-2ubuntu0.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libkrb5-3/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only", + "licenseDeclared": "GPL-2.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libkrb5-3:libkrb5-3:1.19.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libkrb5-3:libkrb5_3:1.19.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libkrb5_3:libkrb5-3:1.19.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libkrb5_3:libkrb5_3:1.19.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libkrb5:libkrb5-3:1.19.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libkrb5:libkrb5_3:1.19.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libkrb5-3@1.19.2-2ubuntu0.1?arch=amd64&upstream=krb5&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libkrb5support0", + "SPDXID": "SPDXRef-Package-deb-libkrb5support0-8d473e8ce49b4bfa", + "versionInfo": "1.19.2-2ubuntu0.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libkrb5support0/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only", + "licenseDeclared": "GPL-2.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libkrb5support0:libkrb5support0:1.19.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libkrb5support0@1.19.2-2ubuntu0.1?arch=amd64&upstream=krb5&distro=ubuntu-22.04" + } + ] + }, + { + "name": "liblz4-1", + "SPDXID": "SPDXRef-Package-deb-liblz4-1-30f908d26a3c4431", + "versionInfo": "1.9.3-2build2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/liblz4-1/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-2-Clause AND GPL-2.0-only AND GPL-2.0-or-later", + "licenseDeclared": "BSD-2-Clause AND GPL-2.0-only AND GPL-2.0-or-later", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:liblz4-1:liblz4-1:1.9.3-2build2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:liblz4-1:liblz4_1:1.9.3-2build2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:liblz4_1:liblz4-1:1.9.3-2build2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:liblz4_1:liblz4_1:1.9.3-2build2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:liblz4:liblz4-1:1.9.3-2build2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:liblz4:liblz4_1:1.9.3-2build2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/liblz4-1@1.9.3-2build2?arch=amd64&upstream=lz4&distro=ubuntu-22.04" + } + ] + }, + { + "name": "liblzma5", + "SPDXID": "SPDXRef-Package-deb-liblzma5-9945bdf71da01bad", + "versionInfo": "5.2.5-2ubuntu1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/liblzma5/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-Autoconf AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-2.1-or-later AND LicenseRef-PD AND LicenseRef-PD-debian AND LicenseRef-config-h AND LicenseRef-noderivs AND LicenseRef-permissive-fsf AND LicenseRef-permissive-nowarranty AND LicenseRef-probably-PD", + "licenseDeclared": "LicenseRef-Autoconf AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-2.1-or-later AND LicenseRef-PD AND LicenseRef-PD-debian AND LicenseRef-config-h AND LicenseRef-noderivs AND LicenseRef-permissive-fsf AND LicenseRef-permissive-nowarranty AND LicenseRef-probably-PD", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:liblzma5:liblzma5:5.2.5-2ubuntu1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/liblzma5@5.2.5-2ubuntu1?arch=amd64&upstream=xz-utils&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libmount1", + "SPDXID": "SPDXRef-Package-deb-libmount1-256ada3b5093aa2c", + "versionInfo": "2.37.2-4ubuntu3", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libmount1/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT AND LicenseRef-public-domain", + "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT AND LicenseRef-public-domain", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libmount1:libmount1:2.37.2-4ubuntu3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libmount1@2.37.2-4ubuntu3?arch=amd64&upstream=util-linux&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libncurses6", + "SPDXID": "SPDXRef-Package-deb-libncurses6-c7759d703eb2f6f6", + "versionInfo": "6.3-2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libtinfo6/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-3-Clause AND LicenseRef-MIT-X11 AND X11", + "licenseDeclared": "BSD-3-Clause AND LicenseRef-MIT-X11 AND X11", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libncurses6:libncurses6:6.3-2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libncurses6@6.3-2?arch=amd64&upstream=ncurses&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libncursesw6", + "SPDXID": "SPDXRef-Package-deb-libncursesw6-24683315864e1a43", + "versionInfo": "6.3-2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libtinfo6/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-3-Clause AND LicenseRef-MIT-X11 AND X11", + "licenseDeclared": "BSD-3-Clause AND LicenseRef-MIT-X11 AND X11", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libncursesw6:libncursesw6:6.3-2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libncursesw6@6.3-2?arch=amd64&upstream=ncurses&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libnettle8", + "SPDXID": "SPDXRef-Package-deb-libnettle8-6564b336498ca0b3", + "versionInfo": "3.7.3-1build2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libnettle8/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-Expat AND LicenseRef-GAP AND LicenseRef-GPL AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-3.0-or-later AND LicenseRef-public-domain", + "licenseDeclared": "LicenseRef-Expat AND LicenseRef-GAP AND LicenseRef-GPL AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-3.0-or-later AND LicenseRef-public-domain", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libnettle8:libnettle8:3.7.3-1build2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libnettle8@3.7.3-1build2?arch=amd64&upstream=nettle&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libnsl2", + "SPDXID": "SPDXRef-Package-deb-libnsl2-767815f00edd5a4", + "versionInfo": "1.3.0-2build2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libnsl2/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-3-Clause AND GPL-2.0-only AND LicenseRef-GPL-2--autoconf-exception AND LicenseRef-GPL-2--libtool-exception AND GPL-3.0-only AND LicenseRef-GPL-3--autoconf-exception AND LGPL-2.1-only AND LGPL-2.1-or-later AND MIT AND LicenseRef-permissive-autoconf-m4 AND LicenseRef-permissive-autoconf-m4-no-warranty AND LicenseRef-permissive-configure AND LicenseRef-permissive-fsf AND LicenseRef-permissive-makefile-in", + "licenseDeclared": "BSD-3-Clause AND GPL-2.0-only AND LicenseRef-GPL-2--autoconf-exception AND LicenseRef-GPL-2--libtool-exception AND GPL-3.0-only AND LicenseRef-GPL-3--autoconf-exception AND LGPL-2.1-only AND LGPL-2.1-or-later AND MIT AND LicenseRef-permissive-autoconf-m4 AND LicenseRef-permissive-autoconf-m4-no-warranty AND LicenseRef-permissive-configure AND LicenseRef-permissive-fsf AND LicenseRef-permissive-makefile-in", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libnsl2:libnsl2:1.3.0-2build2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libnsl2@1.3.0-2build2?arch=amd64&upstream=libnsl&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libp11-kit0", + "SPDXID": "SPDXRef-Package-deb-libp11-kit0-65e07ef2b77d90df", + "versionInfo": "0.24.0-6build1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libp11-kit0/copyright, /var/lib/dpkg/status", + "licenseConcluded": "Apache-2.0 AND BSD-3-Clause AND ISC AND LicenseRef-ISC-IBM AND LGPL-2.1-only AND LGPL-2.1-or-later AND LicenseRef-permissive-like-automake-output AND LicenseRef-same-as-rest-of-p11kit", + "licenseDeclared": "Apache-2.0 AND BSD-3-Clause AND ISC AND LicenseRef-ISC-IBM AND LGPL-2.1-only AND LGPL-2.1-or-later AND LicenseRef-permissive-like-automake-output AND LicenseRef-same-as-rest-of-p11kit", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libp11-kit0:libp11-kit0:0.24.0-6build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libp11-kit0:libp11_kit0:0.24.0-6build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libp11_kit0:libp11-kit0:0.24.0-6build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libp11_kit0:libp11_kit0:0.24.0-6build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libp11:libp11-kit0:0.24.0-6build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libp11:libp11_kit0:0.24.0-6build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libp11-kit0@0.24.0-6build1?arch=amd64&upstream=p11-kit&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libpam-modules", + "SPDXID": "SPDXRef-Package-deb-libpam-modules-645841d4686bdc9d", + "versionInfo": "1.4.0-11ubuntu2.3", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libpam-modules/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-GPL", + "licenseDeclared": "LicenseRef-GPL", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam-modules:libpam-modules:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam-modules:libpam_modules:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam_modules:libpam-modules:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam_modules:libpam_modules:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam:libpam-modules:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam:libpam_modules:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libpam-modules@1.4.0-11ubuntu2.3?arch=amd64&upstream=pam&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libpam-modules-bin", + "SPDXID": "SPDXRef-Package-deb-libpam-modules-bin-550afa6176fa8b46", + "versionInfo": "1.4.0-11ubuntu2.3", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libpam-modules-bin/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-GPL", + "licenseDeclared": "LicenseRef-GPL", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam-modules-bin:libpam-modules-bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam-modules-bin:libpam_modules_bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam_modules_bin:libpam-modules-bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam_modules_bin:libpam_modules_bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam-modules:libpam-modules-bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam-modules:libpam_modules_bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam_modules:libpam-modules-bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam_modules:libpam_modules_bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam:libpam-modules-bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam:libpam_modules_bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libpam-modules-bin@1.4.0-11ubuntu2.3?arch=amd64&upstream=pam&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libpam-runtime", + "SPDXID": "SPDXRef-Package-deb-libpam-runtime-670a9bfb080af943", + "versionInfo": "1.4.0-11ubuntu2.3", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libpam-runtime/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-GPL", + "licenseDeclared": "LicenseRef-GPL", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam-runtime:libpam-runtime:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam-runtime:libpam_runtime:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam_runtime:libpam-runtime:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam_runtime:libpam_runtime:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam:libpam-runtime:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam:libpam_runtime:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libpam-runtime@1.4.0-11ubuntu2.3?arch=all&upstream=pam&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libpam0g", + "SPDXID": "SPDXRef-Package-deb-libpam0g-3961d20002e66d30", + "versionInfo": "1.4.0-11ubuntu2.3", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libpam0g/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-GPL", + "licenseDeclared": "LicenseRef-GPL", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpam0g:libpam0g:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libpam0g@1.4.0-11ubuntu2.3?arch=amd64&upstream=pam&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libpcre2-8-0", + "SPDXID": "SPDXRef-Package-deb-libpcre2-8-0-60f2053060ae2d97", + "versionInfo": "10.39-3ubuntu0.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libpcre2-8-0/copyright, /var/lib/dpkg/status", + "licenseConcluded": "NONE", + "licenseDeclared": "NONE", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpcre2-8-0:libpcre2-8-0:10.39-3ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpcre2-8-0:libpcre2_8_0:10.39-3ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpcre2_8_0:libpcre2-8-0:10.39-3ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpcre2_8_0:libpcre2_8_0:10.39-3ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpcre2-8:libpcre2-8-0:10.39-3ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpcre2-8:libpcre2_8_0:10.39-3ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpcre2_8:libpcre2-8-0:10.39-3ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpcre2_8:libpcre2_8_0:10.39-3ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpcre2:libpcre2-8-0:10.39-3ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpcre2:libpcre2_8_0:10.39-3ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libpcre2-8-0@10.39-3ubuntu0.1?arch=amd64&upstream=pcre2&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libpcre3", + "SPDXID": "SPDXRef-Package-deb-libpcre3-fcb80e678f3f139e", + "versionInfo": "2:8.39-13ubuntu0.22.04.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libpcre3/copyright, /var/lib/dpkg/status", + "licenseConcluded": "NONE", + "licenseDeclared": "NONE", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libpcre3:libpcre3:2\\:8.39-13ubuntu0.22.04.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libpcre3@2:8.39-13ubuntu0.22.04.1?arch=amd64&upstream=pcre3&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libprocps8", + "SPDXID": "SPDXRef-Package-deb-libprocps8-bbbbaee71ef35490", + "versionInfo": "2:3.3.17-6ubuntu2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libprocps8/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libprocps8:libprocps8:2\\:3.3.17-6ubuntu2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libprocps8@2:3.3.17-6ubuntu2?arch=amd64&upstream=procps&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libseccomp2", + "SPDXID": "SPDXRef-Package-deb-libseccomp2-9fc49f8ab449c12c", + "versionInfo": "2.5.3-2ubuntu2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libseccomp2/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LGPL-2.1-only", + "licenseDeclared": "LGPL-2.1-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libseccomp2:libseccomp2:2.5.3-2ubuntu2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libseccomp2@2.5.3-2ubuntu2?arch=amd64&upstream=libseccomp&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libselinux1", + "SPDXID": "SPDXRef-Package-deb-libselinux1-1b1e196630f49cf2", + "versionInfo": "3.3-1build2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libselinux1/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only AND LGPL-2.1-only", + "licenseDeclared": "GPL-2.0-only AND LGPL-2.1-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libselinux1:libselinux1:3.3-1build2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libselinux1@3.3-1build2?arch=amd64&upstream=libselinux&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libsemanage-common", + "SPDXID": "SPDXRef-Package-deb-libsemanage-common-5f8d29178edda774", + "versionInfo": "3.3-1build2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libsemanage-common/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-GPL AND LicenseRef-LGPL", + "licenseDeclared": "LicenseRef-GPL AND LicenseRef-LGPL", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libsemanage-common:libsemanage-common:3.3-1build2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libsemanage-common:libsemanage_common:3.3-1build2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libsemanage_common:libsemanage-common:3.3-1build2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libsemanage_common:libsemanage_common:3.3-1build2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libsemanage:libsemanage-common:3.3-1build2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libsemanage:libsemanage_common:3.3-1build2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libsemanage-common@3.3-1build2?arch=all&upstream=libsemanage&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libsemanage2", + "SPDXID": "SPDXRef-Package-deb-libsemanage2-76c815dc9f3c0139", + "versionInfo": "3.3-1build2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libsemanage2/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-GPL AND LicenseRef-LGPL", + "licenseDeclared": "LicenseRef-GPL AND LicenseRef-LGPL", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libsemanage2:libsemanage2:3.3-1build2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libsemanage2@3.3-1build2?arch=amd64&upstream=libsemanage&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libsepol2", + "SPDXID": "SPDXRef-Package-deb-libsepol2-d5329404b58a4523", + "versionInfo": "3.3-1build1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libsepol2/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-GPL AND LicenseRef-LGPL", + "licenseDeclared": "LicenseRef-GPL AND LicenseRef-LGPL", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libsepol2:libsepol2:3.3-1build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libsepol2@3.3-1build1?arch=amd64&upstream=libsepol&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libsmartcols1", + "SPDXID": "SPDXRef-Package-deb-libsmartcols1-667634138f61ea99", + "versionInfo": "2.37.2-4ubuntu3", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libsmartcols1/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT AND LicenseRef-public-domain", + "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT AND LicenseRef-public-domain", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libsmartcols1:libsmartcols1:2.37.2-4ubuntu3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libsmartcols1@2.37.2-4ubuntu3?arch=amd64&upstream=util-linux&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libss2", + "SPDXID": "SPDXRef-Package-deb-libss2-e2eb5502a732fe3d", + "versionInfo": "1.46.5-2ubuntu1.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libss2/copyright, /var/lib/dpkg/status", + "licenseConcluded": "NONE", + "licenseDeclared": "NONE", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libss2:libss2:1.46.5-2ubuntu1.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libss2@1.46.5-2ubuntu1.1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libssl3", + "SPDXID": "SPDXRef-Package-deb-libssl3-bd67ab28411d2ebf", + "versionInfo": "3.0.2-0ubuntu1.8", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libssl3/copyright, /var/lib/dpkg/status", + "licenseConcluded": "Apache-2.0 AND LicenseRef-Artistic AND GPL-1.0-only AND GPL-1.0-or-later", + "licenseDeclared": "Apache-2.0 AND LicenseRef-Artistic AND GPL-1.0-only AND GPL-1.0-or-later", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.8:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.8?arch=amd64&upstream=openssl&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libstdc++6", + "SPDXID": "SPDXRef-Package-deb-libstdc--6-262105cf346eba84", + "versionInfo": "12.1.0-2ubuntu1~22.04", + "originator": "Person: Ubuntu Core developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/gcc-12-base/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-Artistic AND GFDL-1.2-only AND LicenseRef-GPL AND GPL-2.0-only AND GPL-3.0-only AND LicenseRef-LGPL", + "licenseDeclared": "LicenseRef-Artistic AND GFDL-1.2-only AND LicenseRef-GPL AND GPL-2.0-only AND GPL-3.0-only AND LicenseRef-LGPL", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:12.1.0-2ubuntu1\\~22.04:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libstdc++6@12.1.0-2ubuntu1~22.04?arch=amd64&upstream=gcc-12&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libsystemd0", + "SPDXID": "SPDXRef-Package-deb-libsystemd0-b354b7709f3d5689", + "versionInfo": "249.11-0ubuntu3.7", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libsystemd0/copyright, /var/lib/dpkg/status", + "licenseConcluded": "CC0-1.0 AND LicenseRef-Expat AND GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LicenseRef-public-domain", + "licenseDeclared": "CC0-1.0 AND LicenseRef-Expat AND GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LicenseRef-public-domain", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libsystemd0:libsystemd0:249.11-0ubuntu3.7:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libsystemd0@249.11-0ubuntu3.7?arch=amd64&upstream=systemd&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libtasn1-6", + "SPDXID": "SPDXRef-Package-deb-libtasn1-6-eccf841ebe9d1a5c", + "versionInfo": "4.18.0-4build1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libtasn1-6/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GFDL-1.3-only AND GPL-3.0-only AND LicenseRef-LGPL AND LGPL-2.1-only", + "licenseDeclared": "GFDL-1.3-only AND GPL-3.0-only AND LicenseRef-LGPL AND LGPL-2.1-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libtasn1-6:libtasn1-6:4.18.0-4build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libtasn1-6:libtasn1_6:4.18.0-4build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libtasn1_6:libtasn1-6:4.18.0-4build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libtasn1_6:libtasn1_6:4.18.0-4build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libtasn1:libtasn1-6:4.18.0-4build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libtasn1:libtasn1_6:4.18.0-4build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libtasn1-6@4.18.0-4build1?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libtinfo6", + "SPDXID": "SPDXRef-Package-deb-libtinfo6-5e517d216ccae900", + "versionInfo": "6.3-2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libtinfo6/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-3-Clause AND LicenseRef-MIT-X11 AND X11", + "licenseDeclared": "BSD-3-Clause AND LicenseRef-MIT-X11 AND X11", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libtinfo6:libtinfo6:6.3-2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libtinfo6@6.3-2?arch=amd64&upstream=ncurses&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libtirpc-common", + "SPDXID": "SPDXRef-Package-deb-libtirpc-common-727ec6489929a420", + "versionInfo": "1.3.2-2ubuntu0.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libtirpc-common/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-3-Clause AND GPL-2.0-only AND LGPL-2.1-only", + "licenseDeclared": "BSD-3-Clause AND GPL-2.0-only AND LGPL-2.1-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libtirpc-common:libtirpc-common:1.3.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libtirpc-common:libtirpc_common:1.3.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libtirpc_common:libtirpc-common:1.3.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libtirpc_common:libtirpc_common:1.3.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libtirpc:libtirpc-common:1.3.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libtirpc:libtirpc_common:1.3.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libtirpc-common@1.3.2-2ubuntu0.1?arch=all&upstream=libtirpc&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libtirpc3", + "SPDXID": "SPDXRef-Package-deb-libtirpc3-9b1db2c89d008dab", + "versionInfo": "1.3.2-2ubuntu0.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libtirpc3/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-3-Clause AND GPL-2.0-only AND LGPL-2.1-only", + "licenseDeclared": "BSD-3-Clause AND GPL-2.0-only AND LGPL-2.1-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libtirpc3:libtirpc3:1.3.2-2ubuntu0.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libtirpc3@1.3.2-2ubuntu0.1?arch=amd64&upstream=libtirpc&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libudev1", + "SPDXID": "SPDXRef-Package-deb-libudev1-d3b3ff5b02a60230", + "versionInfo": "249.11-0ubuntu3.7", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libudev1/copyright, /var/lib/dpkg/status", + "licenseConcluded": "CC0-1.0 AND LicenseRef-Expat AND GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LicenseRef-public-domain", + "licenseDeclared": "CC0-1.0 AND LicenseRef-Expat AND GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LicenseRef-public-domain", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libudev1:libudev1:249.11-0ubuntu3.7:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libudev1@249.11-0ubuntu3.7?arch=amd64&upstream=systemd&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libunistring2", + "SPDXID": "SPDXRef-Package-deb-libunistring2-df0dd5625c756d03", + "versionInfo": "1.0-1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libunistring2/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-FreeSoftware AND GFDL-1.2-only AND LicenseRef-GFDL-1.2- AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT", + "licenseDeclared": "LicenseRef-FreeSoftware AND GFDL-1.2-only AND LicenseRef-GFDL-1.2- AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libunistring2:libunistring2:1.0-1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libunistring2@1.0-1?arch=amd64&upstream=libunistring&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libuuid1", + "SPDXID": "SPDXRef-Package-deb-libuuid1-98fc76014f6ddecb", + "versionInfo": "2.37.2-4ubuntu3", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libuuid1/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT AND LicenseRef-public-domain", + "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT AND LicenseRef-public-domain", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libuuid1:libuuid1:2.37.2-4ubuntu3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libuuid1@2.37.2-4ubuntu3?arch=amd64&upstream=util-linux&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libxxhash0", + "SPDXID": "SPDXRef-Package-deb-libxxhash0-498a7b7d7b9c9370", + "versionInfo": "0.8.1-1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libxxhash0/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-2-Clause AND GPL-2.0-only", + "licenseDeclared": "BSD-2-Clause AND GPL-2.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libxxhash0:libxxhash0:0.8.1-1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libxxhash0@0.8.1-1?arch=amd64&upstream=xxhash&distro=ubuntu-22.04" + } + ] + }, + { + "name": "libzstd1", + "SPDXID": "SPDXRef-Package-deb-libzstd1-26b5eeb93d823928", + "versionInfo": "1.4.8+dfsg-3build1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/libzstd1/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-3-Clause AND LicenseRef-Expat AND GPL-2.0-only AND Zlib", + "licenseDeclared": "BSD-3-Clause AND LicenseRef-Expat AND GPL-2.0-only AND Zlib", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libzstd1:libzstd1:1.4.8\\+dfsg-3build1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/libzstd1@1.4.8+dfsg-3build1?arch=amd64&upstream=libzstd&distro=ubuntu-22.04" + } + ] + }, + { + "name": "login", + "SPDXID": "SPDXRef-Package-deb-login-b3bda084cdaf9f86", + "versionInfo": "1:4.8.1-2ubuntu2.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/login/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only", + "licenseDeclared": "GPL-2.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:login:login:1\\:4.8.1-2ubuntu2.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/login@1:4.8.1-2ubuntu2.1?arch=amd64&upstream=shadow&distro=ubuntu-22.04" + } + ] + }, + { + "name": "logsave", + "SPDXID": "SPDXRef-Package-deb-logsave-e63f0033d41f8123", + "versionInfo": "1.46.5-2ubuntu1.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/logsave/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only AND LGPL-2.0-only", + "licenseDeclared": "GPL-2.0-only AND LGPL-2.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:logsave:logsave:1.46.5-2ubuntu1.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/logsave@1.46.5-2ubuntu1.1?arch=amd64&upstream=e2fsprogs&distro=ubuntu-22.04" + } + ] + }, + { + "name": "lsb-base", + "SPDXID": "SPDXRef-Package-deb-lsb-base-bfbd583cb4338b13", + "versionInfo": "11.1.0ubuntu4", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/lsb-base/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-3-Clause AND GPL-2.0-only", + "licenseDeclared": "BSD-3-Clause AND GPL-2.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:lsb-base:lsb-base:11.1.0ubuntu4:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:lsb-base:lsb_base:11.1.0ubuntu4:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:lsb_base:lsb-base:11.1.0ubuntu4:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:lsb_base:lsb_base:11.1.0ubuntu4:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:lsb:lsb-base:11.1.0ubuntu4:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:lsb:lsb_base:11.1.0ubuntu4:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/lsb-base@11.1.0ubuntu4?arch=all&upstream=lsb&distro=ubuntu-22.04" + } + ] + }, + { + "name": "mawk", + "SPDXID": "SPDXRef-Package-deb-mawk-69f7f6ed1aa6bcf9", + "versionInfo": "1.3.4.20200120-3", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/mawk/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only", + "licenseDeclared": "GPL-2.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:mawk:mawk:1.3.4.20200120-3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/mawk@1.3.4.20200120-3?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "mount", + "SPDXID": "SPDXRef-Package-deb-mount-c0ba66dc67228f17", + "versionInfo": "2.37.2-4ubuntu3", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/mount/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT AND LicenseRef-public-domain", + "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT AND LicenseRef-public-domain", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:mount:mount:2.37.2-4ubuntu3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/mount@2.37.2-4ubuntu3?arch=amd64&upstream=util-linux&distro=ubuntu-22.04" + } + ] + }, + { + "name": "ncurses-base", + "SPDXID": "SPDXRef-Package-deb-ncurses-base-ada11db6eee5526f", + "versionInfo": "6.3-2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/ncurses-base/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-3-Clause AND LicenseRef-MIT-X11 AND X11", + "licenseDeclared": "BSD-3-Clause AND LicenseRef-MIT-X11 AND X11", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:ncurses-base:ncurses-base:6.3-2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:ncurses-base:ncurses_base:6.3-2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:ncurses_base:ncurses-base:6.3-2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:ncurses_base:ncurses_base:6.3-2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:ncurses:ncurses-base:6.3-2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:ncurses:ncurses_base:6.3-2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/ncurses-base@6.3-2?arch=all&upstream=ncurses&distro=ubuntu-22.04" + } + ] + }, + { + "name": "ncurses-bin", + "SPDXID": "SPDXRef-Package-deb-ncurses-bin-707c5f0a353b50dd", + "versionInfo": "6.3-2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/ncurses-bin/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-3-Clause AND LicenseRef-MIT-X11 AND X11", + "licenseDeclared": "BSD-3-Clause AND LicenseRef-MIT-X11 AND X11", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:ncurses-bin:ncurses-bin:6.3-2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:ncurses-bin:ncurses_bin:6.3-2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:ncurses_bin:ncurses-bin:6.3-2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:ncurses_bin:ncurses_bin:6.3-2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:ncurses:ncurses-bin:6.3-2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:ncurses:ncurses_bin:6.3-2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/ncurses-bin@6.3-2?arch=amd64&upstream=ncurses&distro=ubuntu-22.04" + } + ] + }, + { + "name": "passwd", + "SPDXID": "SPDXRef-Package-deb-passwd-6f6eabdbcb0d8f8c", + "versionInfo": "1:4.8.1-2ubuntu2.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/passwd/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only", + "licenseDeclared": "GPL-2.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:passwd:passwd:1\\:4.8.1-2ubuntu2.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/passwd@1:4.8.1-2ubuntu2.1?arch=amd64&upstream=shadow&distro=ubuntu-22.04" + } + ] + }, + { + "name": "perl-base", + "SPDXID": "SPDXRef-Package-deb-perl-base-33a561468f59324a", + "versionInfo": "5.34.0-3ubuntu1.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/perl-base/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-Artistic AND Artistic-2.0 AND LicenseRef-Artistic-dist AND BSD-3-Clause AND LicenseRef-BSD-3-clause-GENERIC AND LicenseRef-BSD-3-clause-with-weird-numbering AND LicenseRef-BSD-4-clause-POWERDOG AND LicenseRef-BZIP AND LicenseRef-DONT-CHANGE-THE-GPL AND LicenseRef-Expat AND GPL-1.0-only AND GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND LicenseRef-GPL-3--WITH-BISON-EXCEPTION AND LicenseRef-HSIEH-BSD AND LicenseRef-HSIEH-DERIVATIVE AND LGPL-2.1-only AND LicenseRef-REGCOMP AND LicenseRef-REGCOMP- AND LicenseRef-RRA-KEEP-THIS-NOTICE AND LicenseRef-SDBM-PUBLIC-DOMAIN AND LicenseRef-TEXT-TABS AND LicenseRef-Unicode AND Zlib", + "licenseDeclared": "LicenseRef-Artistic AND Artistic-2.0 AND LicenseRef-Artistic-dist AND BSD-3-Clause AND LicenseRef-BSD-3-clause-GENERIC AND LicenseRef-BSD-3-clause-with-weird-numbering AND LicenseRef-BSD-4-clause-POWERDOG AND LicenseRef-BZIP AND LicenseRef-DONT-CHANGE-THE-GPL AND LicenseRef-Expat AND GPL-1.0-only AND GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND LicenseRef-GPL-3--WITH-BISON-EXCEPTION AND LicenseRef-HSIEH-BSD AND LicenseRef-HSIEH-DERIVATIVE AND LGPL-2.1-only AND LicenseRef-REGCOMP AND LicenseRef-REGCOMP- AND LicenseRef-RRA-KEEP-THIS-NOTICE AND LicenseRef-SDBM-PUBLIC-DOMAIN AND LicenseRef-TEXT-TABS AND LicenseRef-Unicode AND Zlib", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:perl-base:perl-base:5.34.0-3ubuntu1.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:perl-base:perl_base:5.34.0-3ubuntu1.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:perl_base:perl-base:5.34.0-3ubuntu1.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:perl_base:perl_base:5.34.0-3ubuntu1.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:perl:perl-base:5.34.0-3ubuntu1.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:perl:perl_base:5.34.0-3ubuntu1.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/perl-base@5.34.0-3ubuntu1.1?arch=amd64&upstream=perl&distro=ubuntu-22.04" + } + ] + }, + { + "name": "procps", + "SPDXID": "SPDXRef-Package-deb-procps-b4a4871dfefaa93", + "versionInfo": "2:3.3.17-6ubuntu2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/procps/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:procps:procps:2\\:3.3.17-6ubuntu2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/procps@2:3.3.17-6ubuntu2?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "sed", + "SPDXID": "SPDXRef-Package-deb-sed-f88fd5224c8bdfa0", + "versionInfo": "4.8-1ubuntu2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/sed/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-3.0-only", + "licenseDeclared": "GPL-3.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:sed:sed:4.8-1ubuntu2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/sed@4.8-1ubuntu2?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "sensible-utils", + "SPDXID": "SPDXRef-Package-deb-sensible-utils-20db672fe09d393f", + "versionInfo": "0.0.17", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/sensible-utils/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-All-permissive AND GPL-2.0-only AND GPL-2.0-or-later AND LicenseRef-configure AND LicenseRef-installsh", + "licenseDeclared": "LicenseRef-All-permissive AND GPL-2.0-only AND GPL-2.0-or-later AND LicenseRef-configure AND LicenseRef-installsh", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:sensible-utils:sensible-utils:0.0.17:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:sensible-utils:sensible_utils:0.0.17:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:sensible_utils:sensible-utils:0.0.17:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:sensible_utils:sensible_utils:0.0.17:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:sensible:sensible-utils:0.0.17:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:sensible:sensible_utils:0.0.17:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/sensible-utils@0.0.17?arch=all&distro=ubuntu-22.04" + } + ] + }, + { + "name": "sysvinit-utils", + "SPDXID": "SPDXRef-Package-deb-sysvinit-utils-ae98210e1cd32779", + "versionInfo": "3.01-1ubuntu1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/sysvinit-utils/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only AND GPL-2.0-or-later", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:sysvinit-utils:sysvinit-utils:3.01-1ubuntu1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:sysvinit-utils:sysvinit_utils:3.01-1ubuntu1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:sysvinit_utils:sysvinit-utils:3.01-1ubuntu1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:sysvinit_utils:sysvinit_utils:3.01-1ubuntu1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:sysvinit:sysvinit-utils:3.01-1ubuntu1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:sysvinit:sysvinit_utils:3.01-1ubuntu1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/sysvinit-utils@3.01-1ubuntu1?arch=amd64&upstream=sysvinit&distro=ubuntu-22.04" + } + ] + }, + { + "name": "tar", + "SPDXID": "SPDXRef-Package-deb-tar-f58d996552b03bea", + "versionInfo": "1.34+dfsg-1ubuntu0.1.22.04.1", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/tar/copyright, /var/lib/dpkg/status", + "licenseConcluded": "GPL-2.0-only AND GPL-3.0-only", + "licenseDeclared": "GPL-2.0-only AND GPL-3.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:tar:tar:1.34\\+dfsg-1ubuntu0.1.22.04.1:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/tar@1.34+dfsg-1ubuntu0.1.22.04.1?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "ubuntu-keyring", + "SPDXID": "SPDXRef-Package-deb-ubuntu-keyring-87474303cb3adc82", + "versionInfo": "2021.03.26", + "originator": "Person: Dimitri John Ledkov \u003cdimitri.ledkov@canonical.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/ubuntu-keyring/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-GPL", + "licenseDeclared": "LicenseRef-GPL", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:ubuntu-keyring:ubuntu-keyring:2021.03.26:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:ubuntu-keyring:ubuntu_keyring:2021.03.26:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:ubuntu_keyring:ubuntu-keyring:2021.03.26:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:ubuntu_keyring:ubuntu_keyring:2021.03.26:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:ubuntu:ubuntu-keyring:2021.03.26:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:ubuntu:ubuntu_keyring:2021.03.26:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/ubuntu-keyring@2021.03.26?arch=all&distro=ubuntu-22.04" + } + ] + }, + { + "name": "usrmerge", + "SPDXID": "SPDXRef-Package-deb-usrmerge-68ef8442475bd4cc", + "versionInfo": "25ubuntu2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/usrmerge/copyright, /var/lib/dpkg/status", + "licenseConcluded": "LicenseRef-GPL AND GPL-2.0-only", + "licenseDeclared": "LicenseRef-GPL AND GPL-2.0-only", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:usrmerge:usrmerge:25ubuntu2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/usrmerge@25ubuntu2?arch=all&distro=ubuntu-22.04" + } + ] + }, + { + "name": "util-linux", + "SPDXID": "SPDXRef-Package-deb-util-linux-e605c1ddf5a1eedc", + "versionInfo": "2.37.2-4ubuntu3", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/util-linux/copyright, /var/lib/dpkg/status", + "licenseConcluded": "BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT AND LicenseRef-public-domain", + "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT AND LicenseRef-public-domain", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:util-linux:util-linux:2.37.2-4ubuntu3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:util-linux:util_linux:2.37.2-4ubuntu3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:util_linux:util-linux:2.37.2-4ubuntu3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:util_linux:util_linux:2.37.2-4ubuntu3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:util:util-linux:2.37.2-4ubuntu3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:util:util_linux:2.37.2-4ubuntu3:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/util-linux@2.37.2-4ubuntu3?arch=amd64&distro=ubuntu-22.04" + } + ] + }, + { + "name": "zlib1g", + "SPDXID": "SPDXRef-Package-deb-zlib1g-a96b29c092d71303", + "versionInfo": "1:1.2.11.dfsg-2ubuntu9.2", + "originator": "Person: Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e", + "downloadLocation": "NOASSERTION", + "sourceInfo": "acquired package info from DPKG DB: /usr/share/doc/zlib1g/copyright, /var/lib/dpkg/status", + "licenseConcluded": "Zlib", + "licenseDeclared": "Zlib", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:zlib1g:zlib1g:1\\:1.2.11.dfsg-2ubuntu9.2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:deb/ubuntu/zlib1g@1:1.2.11.dfsg-2ubuntu9.2?arch=amd64&upstream=zlib&distro=ubuntu-22.04" + } + ] + } + ], + "files": [ + { + "fileName": "/etc/alternatives/README", + "SPDXID": "SPDXRef-b0f5399639d783ec", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/apt/apt.conf.d/01-vendor-ubuntu", + "SPDXID": "SPDXRef-2f740f6acd3a7b46", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/apt/apt.conf.d/01autoremove", + "SPDXID": "SPDXRef-5ae7b1a1fdd59f4d", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/apt/apt.conf.d/70debconf", + "SPDXID": "SPDXRef-3abb7e242538fc61", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/bash.bashrc", + "SPDXID": "SPDXRef-66cf8de88e2cd1a6", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/bindresvport.blacklist", + "SPDXID": "SPDXRef-a563bd420fd740da", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/cron.d/e2scrub_all", + "SPDXID": "SPDXRef-62c6acc95b011470", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/cron.daily/apt-compat", + "SPDXID": "SPDXRef-9cfe67ab77cb09a7", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/cron.daily/dpkg", + "SPDXID": "SPDXRef-9c97e0d7ac8e390d", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/debconf.conf", + "SPDXID": "SPDXRef-fbfc331e025b79c8", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/debian_version", + "SPDXID": "SPDXRef-7765a7b4e2a3634f", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/default/useradd", + "SPDXID": "SPDXRef-7658651d29bf7223", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/deluser.conf", + "SPDXID": "SPDXRef-68a15c5b7c5ff00", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/dpkg/dpkg.cfg", + "SPDXID": "SPDXRef-e929a71450c56589", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/dpkg/origins/debian", + "SPDXID": "SPDXRef-69105e84585ee1ed", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/dpkg/origins/ubuntu", + "SPDXID": "SPDXRef-bd161df1f7df04fc", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/e2scrub.conf", + "SPDXID": "SPDXRef-2e6fca9bd912074f", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/gai.conf", + "SPDXID": "SPDXRef-4067d98e1e478735", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/host.conf", + "SPDXID": "SPDXRef-1082baf9d037e94d", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/init.d/hwclock.sh", + "SPDXID": "SPDXRef-b6abb495817ff2fd", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/init.d/procps", + "SPDXID": "SPDXRef-f22d64e45165ca73", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/issue", + "SPDXID": "SPDXRef-b75bb92d975cffd", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/issue.net", + "SPDXID": "SPDXRef-f6b0424571e922ba", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/ld.so.conf", + "SPDXID": "SPDXRef-459e02f0af035962", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/ld.so.conf.d/libc.conf", + "SPDXID": "SPDXRef-2fe582b82b9568d9", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/ld.so.conf.d/x86_64-linux-gnu.conf", + "SPDXID": "SPDXRef-b1c7ea9ca0ccb2bd", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/legal", + "SPDXID": "SPDXRef-e8b79de797409d9f", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/libaudit.conf", + "SPDXID": "SPDXRef-f90eb64653be23a2", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/login.defs", + "SPDXID": "SPDXRef-65e89abe068e8e30", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/logrotate.d/alternatives", + "SPDXID": "SPDXRef-aeab1b6967675d19", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/logrotate.d/apt", + "SPDXID": "SPDXRef-5ed8873a6659ae24", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/logrotate.d/dpkg", + "SPDXID": "SPDXRef-cc1bbdbd2367bf7", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/lsb-release", + "SPDXID": "SPDXRef-fec77dae719145d1", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/mke2fs.conf", + "SPDXID": "SPDXRef-603217a570c3cdda", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/netconfig", + "SPDXID": "SPDXRef-da208214d0741610", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/pam.conf", + "SPDXID": "SPDXRef-91cf8f752e6f3bed", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/pam.d/chfn", + "SPDXID": "SPDXRef-9a4d0062d7e62c5c", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/pam.d/chpasswd", + "SPDXID": "SPDXRef-7dbd02a5760693ba", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/pam.d/chsh", + "SPDXID": "SPDXRef-4d92575bfc3c7fb4", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/pam.d/login", + "SPDXID": "SPDXRef-1fcbd4c54524e8c4", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/pam.d/newusers", + "SPDXID": "SPDXRef-9b2863d30815c2a1", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/pam.d/other", + "SPDXID": "SPDXRef-564013e8401e88e5", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/pam.d/passwd", + "SPDXID": "SPDXRef-ba733c470c4c709d", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/pam.d/runuser", + "SPDXID": "SPDXRef-8bc41bc5534674b7", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/pam.d/runuser-l", + "SPDXID": "SPDXRef-f7f1e5158fcac4d9", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/pam.d/su", + "SPDXID": "SPDXRef-e63550acc78f2792", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/pam.d/su-l", + "SPDXID": "SPDXRef-9ef1e913c927a160", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/profile.d/01-locale-fix.sh", + "SPDXID": "SPDXRef-482538138a8459fb", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/security/access.conf", + "SPDXID": "SPDXRef-6dd5770e4dfc45f1", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/security/faillock.conf", + "SPDXID": "SPDXRef-6c09c09efedf51fd", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/security/group.conf", + "SPDXID": "SPDXRef-8e146ab79bbe2578", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/security/limits.conf", + "SPDXID": "SPDXRef-8ade05103587355c", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/security/namespace.conf", + "SPDXID": "SPDXRef-19fdc829b2891377", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/security/namespace.init", + "SPDXID": "SPDXRef-2748809e8c14b10b", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/security/pam_env.conf", + "SPDXID": "SPDXRef-9d019aba085b2dcb", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/security/sepermit.conf", + "SPDXID": "SPDXRef-e0c8aecfdf8b4d59", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/security/time.conf", + "SPDXID": "SPDXRef-de60f623e4a6677f", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/selinux/semanage.conf", + "SPDXID": "SPDXRef-8da17c570e6b2e72", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/skel/.bash_logout", + "SPDXID": "SPDXRef-6572cfbf2e5a7f6a", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/skel/.bashrc", + "SPDXID": "SPDXRef-8ecd6293e526c1dc", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/skel/.profile", + "SPDXID": "SPDXRef-3628410efaeb7b3c", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/sysctl.conf", + "SPDXID": "SPDXRef-95c4161c922d26bb", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/sysctl.d/10-console-messages.conf", + "SPDXID": "SPDXRef-e8e20e5c8a31961b", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/sysctl.d/10-ipv6-privacy.conf", + "SPDXID": "SPDXRef-18c4370c3c728857", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/sysctl.d/10-kernel-hardening.conf", + "SPDXID": "SPDXRef-57006572024b9a0a", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/sysctl.d/10-magic-sysrq.conf", + "SPDXID": "SPDXRef-8492f6349448241d", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/sysctl.d/10-network-security.conf", + "SPDXID": "SPDXRef-35adce657e1e053f", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/sysctl.d/10-ptrace.conf", + "SPDXID": "SPDXRef-9fc6dba7a2434287", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/sysctl.d/10-zeropage.conf", + "SPDXID": "SPDXRef-dcca8bf0cf2ad066", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/sysctl.d/README.sysctl", + "SPDXID": "SPDXRef-bc9ff93dde7fe94c", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/terminfo/README", + "SPDXID": "SPDXRef-17e0d6ed9bf67f1f", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/update-motd.d/00-header", + "SPDXID": "SPDXRef-4e5b67557524306b", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/update-motd.d/10-help-text", + "SPDXID": "SPDXRef-ddd2de9e1a0a32ec", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/update-motd.d/50-motd-news", + "SPDXID": "SPDXRef-198bcea1e168b76a", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + }, + { + "fileName": "/etc/xattr.conf", + "SPDXID": "SPDXRef-767e1226739eaea3", + "checksums": [ + { + "algorithm": "SHA1", + "checksumValue": "0000000000000000000000000000000000000000" + } + ], + "licenseConcluded": "NOASSERTION", + "copyrightText": "", + "comment": "layerID: sha256:b93c1bd012ab8fda60f5b4f5906bf244586e0e3292d84571d3abb56472248466" + } + ], + "hasExtractedLicensingInfos": [ + { + "licenseId": "LicenseRef-Expat", + "extractedText": "NONE", + "name": "Expat" + }, + { + "licenseId": "LicenseRef-probably-PD", + "extractedText": "NONE", + "name": "probably-PD" + }, + { + "licenseId": "LicenseRef-GPL-2--libtool-exception", + "extractedText": "NONE", + "name": "GPL-2+-libtool-exception" + }, + { + "licenseId": "LicenseRef-permissive-autoconf-m4", + "extractedText": "NONE", + "name": "permissive-autoconf-m4" + }, + { + "licenseId": "LicenseRef-BZIP", + "extractedText": "NONE", + "name": "BZIP" + }, + { + "licenseId": "LicenseRef-DONT-CHANGE-THE-GPL", + "extractedText": "NONE", + "name": "DONT-CHANGE-THE-GPL" + }, + { + "licenseId": "LicenseRef-public-domain", + "extractedText": "NONE", + "name": "public-domain" + }, + { + "licenseId": "LicenseRef-permissive-fsf", + "extractedText": "NONE", + "name": "permissive-fsf" + }, + { + "licenseId": "LicenseRef-Artistic-dist", + "extractedText": "NONE", + "name": "Artistic-dist" + }, + { + "licenseId": "LicenseRef-BSD-4-clause-POWERDOG", + "extractedText": "NONE", + "name": "BSD-4-clause-POWERDOG" + }, + { + "licenseId": "LicenseRef-HSIEH-BSD", + "extractedText": "NONE", + "name": "HSIEH-BSD" + }, + { + "licenseId": "LicenseRef-HSIEH-DERIVATIVE", + "extractedText": "NONE", + "name": "HSIEH-DERIVATIVE" + }, + { + "licenseId": "LicenseRef-LGPLv3--or-GPLv2-", + "extractedText": "NONE", + "name": "LGPLv3+_or_GPLv2+" + }, + { + "licenseId": "LicenseRef-noderivs", + "extractedText": "NONE", + "name": "noderivs" + }, + { + "licenseId": "LicenseRef-REGCOMP", + "extractedText": "NONE", + "name": "REGCOMP" + }, + { + "licenseId": "LicenseRef-public-domain-s-s-d", + "extractedText": "NONE", + "name": "public-domain-s-s-d" + }, + { + "licenseId": "LicenseRef-PD-debian", + "extractedText": "NONE", + "name": "PD-debian" + }, + { + "licenseId": "LicenseRef-GPL-3--autoconf-exception", + "extractedText": "NONE", + "name": "GPL-3+-autoconf-exception" + }, + { + "licenseId": "LicenseRef-SDBM-PUBLIC-DOMAIN", + "extractedText": "NONE", + "name": "SDBM-PUBLIC-DOMAIN" + }, + { + "licenseId": "LicenseRef-PD", + "extractedText": "NONE", + "name": "PD" + }, + { + "licenseId": "LicenseRef-GPL-3--WITH-BISON-EXCEPTION", + "extractedText": "NONE", + "name": "GPL-3+-WITH-BISON-EXCEPTION" + }, + { + "licenseId": "LicenseRef-BSD-variant", + "extractedText": "NONE", + "name": "BSD-variant" + }, + { + "licenseId": "LicenseRef-BSD-3-clause-with-weird-numbering", + "extractedText": "NONE", + "name": "BSD-3-clause-with-weird-numbering" + }, + { + "licenseId": "LicenseRef-RRA-KEEP-THIS-NOTICE", + "extractedText": "NONE", + "name": "RRA-KEEP-THIS-NOTICE" + }, + { + "licenseId": "LicenseRef-TinySCHEME", + "extractedText": "NONE", + "name": "TinySCHEME" + }, + { + "licenseId": "LicenseRef-GPLv3-", + "extractedText": "NONE", + "name": "GPLv3+" + }, + { + "licenseId": "LicenseRef-permissive-autoconf-m4-no-warranty", + "extractedText": "NONE", + "name": "permissive-autoconf-m4-no-warranty" + }, + { + "licenseId": "LicenseRef-permissive-configure", + "extractedText": "NONE", + "name": "permissive-configure" + }, + { + "licenseId": "LicenseRef-GPLv2-", + "extractedText": "NONE", + "name": "GPLv2+" + }, + { + "licenseId": "LicenseRef-config-h", + "extractedText": "NONE", + "name": "config-h" + }, + { + "licenseId": "LicenseRef-BSD-3-clause-GENERIC", + "extractedText": "NONE", + "name": "BSD-3-clause-GENERIC" + }, + { + "licenseId": "LicenseRef-configure", + "extractedText": "NONE", + "name": "configure" + }, + { + "licenseId": "LicenseRef-Autoconf", + "extractedText": "NONE", + "name": "Autoconf" + }, + { + "licenseId": "LicenseRef-ISC-IBM", + "extractedText": "NONE", + "name": "ISC+IBM" + }, + { + "licenseId": "LicenseRef-permissive", + "extractedText": "NONE", + "name": "permissive" + }, + { + "licenseId": "LicenseRef-The", + "extractedText": "NONE", + "name": "The" + }, + { + "licenseId": "LicenseRef-Unicode", + "extractedText": "NONE", + "name": "Unicode" + }, + { + "licenseId": "LicenseRef-permissive-nowarranty", + "extractedText": "NONE", + "name": "permissive-nowarranty" + }, + { + "licenseId": "LicenseRef-GPL-2--autoconf-exception", + "extractedText": "NONE", + "name": "GPL-2+-autoconf-exception" + }, + { + "licenseId": "LicenseRef-REGCOMP-", + "extractedText": "NONE", + "name": "REGCOMP," + }, + { + "licenseId": "LicenseRef-TEXT-TABS", + "extractedText": "NONE", + "name": "TEXT-TABS" + }, + { + "licenseId": "LicenseRef-All-permissive", + "extractedText": "NONE", + "name": "All-permissive" + }, + { + "licenseId": "LicenseRef-Artistic", + "extractedText": "NONE", + "name": "Artistic" + }, + { + "licenseId": "LicenseRef-installsh", + "extractedText": "NONE", + "name": "installsh" + }, + { + "licenseId": "LicenseRef-g10-permissive", + "extractedText": "NONE", + "name": "g10-permissive" + }, + { + "licenseId": "LicenseRef-public-domain-md5", + "extractedText": "NONE", + "name": "public-domain-md5" + }, + { + "licenseId": "LicenseRef-GFDL", + "extractedText": "NONE", + "name": "GFDL" + }, + { + "licenseId": "LicenseRef-CC0", + "extractedText": "NONE", + "name": "CC0" + }, + { + "licenseId": "LicenseRef-MIT-X11", + "extractedText": "NONE", + "name": "MIT/X11" + }, + { + "licenseId": "LicenseRef-FreeSoftware", + "extractedText": "NONE", + "name": "FreeSoftware" + }, + { + "licenseId": "LicenseRef-LGPL", + "extractedText": "NONE", + "name": "LGPL" + }, + { + "licenseId": "LicenseRef-GFDL-3", + "extractedText": "NONE", + "name": "GFDL-3" + }, + { + "licenseId": "LicenseRef-GAP", + "extractedText": "NONE", + "name": "GAP" + }, + { + "licenseId": "LicenseRef-permissive-like-automake-output", + "extractedText": "NONE", + "name": "permissive-like-automake-output" + }, + { + "licenseId": "LicenseRef-GPL", + "extractedText": "NONE", + "name": "GPL" + }, + { + "licenseId": "LicenseRef-LGPLv2.1-", + "extractedText": "NONE", + "name": "LGPLv2.1+" + }, + { + "licenseId": "LicenseRef-permissive-makefile-in", + "extractedText": "NONE", + "name": "permissive-makefile-in" + }, + { + "licenseId": "LicenseRef-FSF-manpages", + "extractedText": "NONE", + "name": "FSF-manpages" + }, + { + "licenseId": "LicenseRef-GFDL-1.3--no-invariant", + "extractedText": "NONE", + "name": "GFDL-1.3+-no-invariant" + }, + { + "licenseId": "LicenseRef-same-as-rest-of-p11kit", + "extractedText": "NONE", + "name": "same-as-rest-of-p11kit" + }, + { + "licenseId": "LicenseRef-GFDL-1.2-", + "extractedText": "NONE", + "name": "GFDL-1.2+" + }, + { + "licenseId": "LicenseRef-RFC-Reference", + "extractedText": "NONE", + "name": "RFC-Reference" + } + ], + "relationships": [ + { + "spdxElementId": "SPDXRef-Package-deb-libc-bin-25c20dba11316355", + "relatedSpdxElement": "SPDXRef-2fe582b82b9568d9", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-libc-bin-25c20dba11316355", + "relatedSpdxElement": "SPDXRef-4067d98e1e478735", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-libc-bin-25c20dba11316355", + "relatedSpdxElement": "SPDXRef-459e02f0af035962", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-libc-bin-25c20dba11316355", + "relatedSpdxElement": "SPDXRef-a563bd420fd740da", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-libsemanage-common-5f8d29178edda774", + "relatedSpdxElement": "SPDXRef-8da17c570e6b2e72", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-libpam-modules-645841d4686bdc9d", + "relatedSpdxElement": "SPDXRef-19fdc829b2891377", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-libpam-modules-645841d4686bdc9d", + "relatedSpdxElement": "SPDXRef-2748809e8c14b10b", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-libpam-modules-645841d4686bdc9d", + "relatedSpdxElement": "SPDXRef-6c09c09efedf51fd", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-libpam-modules-645841d4686bdc9d", + "relatedSpdxElement": "SPDXRef-6dd5770e4dfc45f1", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-libpam-modules-645841d4686bdc9d", + "relatedSpdxElement": "SPDXRef-8ade05103587355c", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-libpam-modules-645841d4686bdc9d", + "relatedSpdxElement": "SPDXRef-8e146ab79bbe2578", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-libpam-modules-645841d4686bdc9d", + "relatedSpdxElement": "SPDXRef-9d019aba085b2dcb", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-libpam-modules-645841d4686bdc9d", + "relatedSpdxElement": "SPDXRef-de60f623e4a6677f", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-libpam-modules-645841d4686bdc9d", + "relatedSpdxElement": "SPDXRef-e0c8aecfdf8b4d59", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-libpam-runtime-670a9bfb080af943", + "relatedSpdxElement": "SPDXRef-564013e8401e88e5", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-libpam-runtime-670a9bfb080af943", + "relatedSpdxElement": "SPDXRef-91cf8f752e6f3bed", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-passwd-6f6eabdbcb0d8f8c", + "relatedSpdxElement": "SPDXRef-4d92575bfc3c7fb4", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-passwd-6f6eabdbcb0d8f8c", + "relatedSpdxElement": "SPDXRef-7658651d29bf7223", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-passwd-6f6eabdbcb0d8f8c", + "relatedSpdxElement": "SPDXRef-7dbd02a5760693ba", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-passwd-6f6eabdbcb0d8f8c", + "relatedSpdxElement": "SPDXRef-9a4d0062d7e62c5c", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-passwd-6f6eabdbcb0d8f8c", + "relatedSpdxElement": "SPDXRef-9b2863d30815c2a1", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-passwd-6f6eabdbcb0d8f8c", + "relatedSpdxElement": "SPDXRef-ba733c470c4c709d", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-libtirpc-common-727ec6489929a420", + "relatedSpdxElement": "SPDXRef-da208214d0741610", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-libaudit-common-78d440318da51a25", + "relatedSpdxElement": "SPDXRef-f90eb64653be23a2", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-dpkg-9e066ac193d60109", + "relatedSpdxElement": "SPDXRef-9c97e0d7ac8e390d", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-dpkg-9e066ac193d60109", + "relatedSpdxElement": "SPDXRef-aeab1b6967675d19", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-dpkg-9e066ac193d60109", + "relatedSpdxElement": "SPDXRef-b0f5399639d783ec", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-dpkg-9e066ac193d60109", + "relatedSpdxElement": "SPDXRef-cc1bbdbd2367bf7", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-dpkg-9e066ac193d60109", + "relatedSpdxElement": "SPDXRef-e929a71450c56589", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-adduser-a1a22e7b0e4a292", + "relatedSpdxElement": "SPDXRef-68a15c5b7c5ff00", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-ncurses-base-ada11db6eee5526f", + "relatedSpdxElement": "SPDXRef-17e0d6ed9bf67f1f", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-e2fsprogs-b16d946dcb23bd4b", + "relatedSpdxElement": "SPDXRef-2e6fca9bd912074f", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-e2fsprogs-b16d946dcb23bd4b", + "relatedSpdxElement": "SPDXRef-603217a570c3cdda", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-e2fsprogs-b16d946dcb23bd4b", + "relatedSpdxElement": "SPDXRef-62c6acc95b011470", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-login-b3bda084cdaf9f86", + "relatedSpdxElement": "SPDXRef-1fcbd4c54524e8c4", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-login-b3bda084cdaf9f86", + "relatedSpdxElement": "SPDXRef-65e89abe068e8e30", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-procps-b4a4871dfefaa93", + "relatedSpdxElement": "SPDXRef-18c4370c3c728857", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-procps-b4a4871dfefaa93", + "relatedSpdxElement": "SPDXRef-35adce657e1e053f", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-procps-b4a4871dfefaa93", + "relatedSpdxElement": "SPDXRef-57006572024b9a0a", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-procps-b4a4871dfefaa93", + "relatedSpdxElement": "SPDXRef-8492f6349448241d", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-procps-b4a4871dfefaa93", + "relatedSpdxElement": "SPDXRef-95c4161c922d26bb", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-procps-b4a4871dfefaa93", + "relatedSpdxElement": "SPDXRef-9fc6dba7a2434287", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-procps-b4a4871dfefaa93", + "relatedSpdxElement": "SPDXRef-bc9ff93dde7fe94c", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-procps-b4a4871dfefaa93", + "relatedSpdxElement": "SPDXRef-dcca8bf0cf2ad066", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-procps-b4a4871dfefaa93", + "relatedSpdxElement": "SPDXRef-e8e20e5c8a31961b", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-procps-b4a4871dfefaa93", + "relatedSpdxElement": "SPDXRef-f22d64e45165ca73", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-debconf-c417bfa7b33bfc8d", + "relatedSpdxElement": "SPDXRef-3abb7e242538fc61", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-debconf-c417bfa7b33bfc8d", + "relatedSpdxElement": "SPDXRef-fbfc331e025b79c8", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-apt-c55f9b572f099afa", + "relatedSpdxElement": "SPDXRef-2f740f6acd3a7b46", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-apt-c55f9b572f099afa", + "relatedSpdxElement": "SPDXRef-5ae7b1a1fdd59f4d", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-apt-c55f9b572f099afa", + "relatedSpdxElement": "SPDXRef-5ed8873a6659ae24", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-apt-c55f9b572f099afa", + "relatedSpdxElement": "SPDXRef-9cfe67ab77cb09a7", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-base-files-dd7a0d513f1cc5d9", + "relatedSpdxElement": "SPDXRef-1082baf9d037e94d", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-base-files-dd7a0d513f1cc5d9", + "relatedSpdxElement": "SPDXRef-198bcea1e168b76a", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-base-files-dd7a0d513f1cc5d9", + "relatedSpdxElement": "SPDXRef-482538138a8459fb", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-base-files-dd7a0d513f1cc5d9", + "relatedSpdxElement": "SPDXRef-4e5b67557524306b", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-base-files-dd7a0d513f1cc5d9", + "relatedSpdxElement": "SPDXRef-69105e84585ee1ed", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-base-files-dd7a0d513f1cc5d9", + "relatedSpdxElement": "SPDXRef-7765a7b4e2a3634f", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-base-files-dd7a0d513f1cc5d9", + "relatedSpdxElement": "SPDXRef-b75bb92d975cffd", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-base-files-dd7a0d513f1cc5d9", + "relatedSpdxElement": "SPDXRef-bd161df1f7df04fc", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-base-files-dd7a0d513f1cc5d9", + "relatedSpdxElement": "SPDXRef-ddd2de9e1a0a32ec", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-base-files-dd7a0d513f1cc5d9", + "relatedSpdxElement": "SPDXRef-e8b79de797409d9f", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-base-files-dd7a0d513f1cc5d9", + "relatedSpdxElement": "SPDXRef-f6b0424571e922ba", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-base-files-dd7a0d513f1cc5d9", + "relatedSpdxElement": "SPDXRef-fec77dae719145d1", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-libc6-e0ec0b5c28ae7553", + "relatedSpdxElement": "SPDXRef-b1c7ea9ca0ccb2bd", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-util-linux-e605c1ddf5a1eedc", + "relatedSpdxElement": "SPDXRef-8bc41bc5534674b7", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-util-linux-e605c1ddf5a1eedc", + "relatedSpdxElement": "SPDXRef-9ef1e913c927a160", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-util-linux-e605c1ddf5a1eedc", + "relatedSpdxElement": "SPDXRef-b6abb495817ff2fd", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-util-linux-e605c1ddf5a1eedc", + "relatedSpdxElement": "SPDXRef-e63550acc78f2792", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-util-linux-e605c1ddf5a1eedc", + "relatedSpdxElement": "SPDXRef-f7f1e5158fcac4d9", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-bash-ec404d0fccb93c72", + "relatedSpdxElement": "SPDXRef-3628410efaeb7b3c", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-bash-ec404d0fccb93c72", + "relatedSpdxElement": "SPDXRef-6572cfbf2e5a7f6a", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-bash-ec404d0fccb93c72", + "relatedSpdxElement": "SPDXRef-66cf8de88e2cd1a6", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-bash-ec404d0fccb93c72", + "relatedSpdxElement": "SPDXRef-8ecd6293e526c1dc", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-Package-deb-libattr1-ef388d6835fc0617", + "relatedSpdxElement": "SPDXRef-767e1226739eaea3", + "relationshipType": "CONTAINS" + }, + { + "spdxElementId": "SPDXRef-DOCUMENT", + "relatedSpdxElement": "SPDXRef-DOCUMENT", + "relationshipType": "DESCRIBES" + } + ] +} diff --git a/backend/functions/sboms/33.cyclonedx2.json b/backend/functions/sboms/33.cyclonedx2.json new file mode 100644 index 0000000..f4ed336 --- /dev/null +++ b/backend/functions/sboms/33.cyclonedx2.json @@ -0,0 +1,22701 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.4", + "serialNumber": "urn:uuid:f0962eb4-8915-4ecb-b6fd-c931fee4c2b0", + "version": 1, + "metadata": { + "timestamp": "2023-04-20T11:11:02Z", + "tools": [ + { + "vendor": "anchore", + "name": "syft", + "version": "0.78.0" + } + ], + "component": { + "bom-ref": "bda4f29ab64911b2", + "type": "container", + "name": "project-d-circleci:latest", + "version": "sha256:f3a9a1d21d1e0af79612fbf7f9c2cc966ad7d53655ba300943e67210394ab4ea" + } + }, + "components": [ + { + "bom-ref": "pkg:npm/%40ampproject/remapping@2.2.1?package-id=48da8a53939d1b7f", + "type": "library", + "author": "Justin Ridgewell ", + "name": "@ampproject/remapping", + "version": "2.2.1", + "description": "Remap sequential sourcemaps through transformations to point at the original source code", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:\\@ampproject\\/remapping:\\@ampproject\\/remapping:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40ampproject/remapping@2.2.1", + "externalReferences": [ + { + "url": "git+https://github.com/ampproject/remapping.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@ampproject/remapping/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/code-frame@7.21.4?package-id=db46eb4f59ddb4ce", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/code-frame", + "version": "7.21.4", + "description": "Generate errors that contain a code frame that point to source locations.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/code-frame:\\@babel\\/code-frame:7.21.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/code-frame@7.21.4", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-code-frame", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/code-frame:\\@babel\\/code_frame:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/code_frame:\\@babel\\/code-frame:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/code_frame:\\@babel\\/code_frame:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/code:\\@babel\\/code-frame:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/code:\\@babel\\/code_frame:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/code-frame:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/code_frame:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/code-frame/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/compat-data@7.21.4?package-id=792b2c33b5314fd3", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/compat-data", + "version": "7.21.4", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/compat-data:\\@babel\\/compat-data:7.21.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/compat-data@7.21.4", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/compat-data:\\@babel\\/compat_data:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/compat_data:\\@babel\\/compat-data:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/compat_data:\\@babel\\/compat_data:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/compat:\\@babel\\/compat-data:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/compat:\\@babel\\/compat_data:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/compat-data:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/compat_data:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/compat-data/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/core@7.21.4?package-id=9d510dc79cf451bf", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/core", + "version": "7.21.4", + "description": "Babel compiler core.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/core:\\@babel\\/core:7.21.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/core@7.21.4", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-core", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/core:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/core/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/generator@7.21.4?package-id=8d05d6c50a42266b", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/generator", + "version": "7.21.4", + "description": "Turns an AST into code.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/generator:\\@babel\\/generator:7.21.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/generator@7.21.4", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-generator", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/generator:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/generator/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/helper-compilation-targets@7.21.4?package-id=655abe1732c667bc", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/helper-compilation-targets", + "version": "7.21.4", + "description": "Helper functions on Babel compilation targets", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-compilation-targets:\\@babel\\/helper-compilation-targets:7.21.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-compilation-targets@7.21.4", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-compilation-targets:\\@babel\\/helper_compilation_targets:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_compilation_targets:\\@babel\\/helper-compilation-targets:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_compilation_targets:\\@babel\\/helper_compilation_targets:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-compilation:\\@babel\\/helper-compilation-targets:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-compilation:\\@babel\\/helper_compilation_targets:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_compilation:\\@babel\\/helper-compilation-targets:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_compilation:\\@babel\\/helper_compilation_targets:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-compilation-targets:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_compilation_targets:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper-compilation-targets:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper_compilation_targets:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/helper-compilation-targets/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/helper-environment-visitor@7.18.9?package-id=b93cfd544cf573df", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/helper-environment-visitor", + "version": "7.18.9", + "description": "Helper visitor to only visit nodes in the current 'this' context", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-environment-visitor:\\@babel\\/helper-environment-visitor:7.18.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-environment-visitor@7.18.9", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-helper-environment-visitor", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-environment-visitor:\\@babel\\/helper_environment_visitor:7.18.9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_environment_visitor:\\@babel\\/helper-environment-visitor:7.18.9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_environment_visitor:\\@babel\\/helper_environment_visitor:7.18.9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-environment:\\@babel\\/helper-environment-visitor:7.18.9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-environment:\\@babel\\/helper_environment_visitor:7.18.9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_environment:\\@babel\\/helper-environment-visitor:7.18.9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_environment:\\@babel\\/helper_environment_visitor:7.18.9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-environment-visitor:7.18.9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_environment_visitor:7.18.9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper-environment-visitor:7.18.9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper_environment_visitor:7.18.9:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/helper-environment-visitor/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/helper-function-name@7.21.0?package-id=83246ff1b37a262e", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/helper-function-name", + "version": "7.21.0", + "description": "Helper function to change the property 'name' of every function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-function-name:\\@babel\\/helper-function-name:7.21.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-function-name@7.21.0", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-helper-function-name", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-function-name:\\@babel\\/helper_function_name:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_function_name:\\@babel\\/helper-function-name:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_function_name:\\@babel\\/helper_function_name:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-function:\\@babel\\/helper-function-name:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-function:\\@babel\\/helper_function_name:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_function:\\@babel\\/helper-function-name:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_function:\\@babel\\/helper_function_name:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-function-name:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_function_name:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper-function-name:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper_function_name:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/helper-function-name/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/helper-hoist-variables@7.18.6?package-id=8f968ff0bcc8b3e5", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/helper-hoist-variables", + "version": "7.18.6", + "description": "Helper function to hoist variables", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-hoist-variables:\\@babel\\/helper-hoist-variables:7.18.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-hoist-variables@7.18.6", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-helper-hoist-variables", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-hoist-variables:\\@babel\\/helper_hoist_variables:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_hoist_variables:\\@babel\\/helper-hoist-variables:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_hoist_variables:\\@babel\\/helper_hoist_variables:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-hoist:\\@babel\\/helper-hoist-variables:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-hoist:\\@babel\\/helper_hoist_variables:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_hoist:\\@babel\\/helper-hoist-variables:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_hoist:\\@babel\\/helper_hoist_variables:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-hoist-variables:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_hoist_variables:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper-hoist-variables:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper_hoist_variables:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/helper-hoist-variables/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/helper-module-imports@7.21.4?package-id=52b69e678679f27c", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/helper-module-imports", + "version": "7.21.4", + "description": "Babel helper functions for inserting module loads", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-module-imports:\\@babel\\/helper-module-imports:7.21.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-module-imports@7.21.4", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-helper-module-imports", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-module-imports:\\@babel\\/helper_module_imports:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_module_imports:\\@babel\\/helper-module-imports:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_module_imports:\\@babel\\/helper_module_imports:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-module:\\@babel\\/helper-module-imports:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-module:\\@babel\\/helper_module_imports:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_module:\\@babel\\/helper-module-imports:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_module:\\@babel\\/helper_module_imports:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-module-imports:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_module_imports:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper-module-imports:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper_module_imports:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/helper-module-imports/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/helper-module-transforms@7.21.2?package-id=d5ec822fa481335a", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/helper-module-transforms", + "version": "7.21.2", + "description": "Babel helper functions for implementing ES6 module transformations", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-module-transforms:\\@babel\\/helper-module-transforms:7.21.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-module-transforms@7.21.2", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-helper-module-transforms", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-module-transforms:\\@babel\\/helper_module_transforms:7.21.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_module_transforms:\\@babel\\/helper-module-transforms:7.21.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_module_transforms:\\@babel\\/helper_module_transforms:7.21.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-module:\\@babel\\/helper-module-transforms:7.21.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-module:\\@babel\\/helper_module_transforms:7.21.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_module:\\@babel\\/helper-module-transforms:7.21.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_module:\\@babel\\/helper_module_transforms:7.21.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-module-transforms:7.21.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_module_transforms:7.21.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper-module-transforms:7.21.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper_module_transforms:7.21.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/helper-module-transforms/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/helper-plugin-utils@7.20.2?package-id=418f10a7114251a9", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/helper-plugin-utils", + "version": "7.20.2", + "description": "General utilities for plugins to use", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-plugin-utils:\\@babel\\/helper-plugin-utils:7.20.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-plugin-utils@7.20.2", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-helper-plugin-utils", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-plugin-utils:\\@babel\\/helper_plugin_utils:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_plugin_utils:\\@babel\\/helper-plugin-utils:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_plugin_utils:\\@babel\\/helper_plugin_utils:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-plugin:\\@babel\\/helper-plugin-utils:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-plugin:\\@babel\\/helper_plugin_utils:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_plugin:\\@babel\\/helper-plugin-utils:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_plugin:\\@babel\\/helper_plugin_utils:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-plugin-utils:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_plugin_utils:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper-plugin-utils:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper_plugin_utils:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/helper-plugin-utils/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/helper-simple-access@7.20.2?package-id=17ccf098767d0a1d", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/helper-simple-access", + "version": "7.20.2", + "description": "Babel helper for ensuring that access to a given value is performed through simple accesses", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-simple-access:\\@babel\\/helper-simple-access:7.20.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-simple-access@7.20.2", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-helper-simple-access", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-simple-access:\\@babel\\/helper_simple_access:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_simple_access:\\@babel\\/helper-simple-access:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_simple_access:\\@babel\\/helper_simple_access:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-simple:\\@babel\\/helper-simple-access:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-simple:\\@babel\\/helper_simple_access:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_simple:\\@babel\\/helper-simple-access:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_simple:\\@babel\\/helper_simple_access:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-simple-access:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_simple_access:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper-simple-access:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper_simple_access:7.20.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/helper-simple-access/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/helper-split-export-declaration@7.18.6?package-id=e62987f44155f3d8", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/helper-split-export-declaration", + "version": "7.18.6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-split-export-declaration:\\@babel\\/helper-split-export-declaration:7.18.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-split-export-declaration@7.18.6", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-helper-split-export-declaration", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-split-export-declaration:\\@babel\\/helper_split_export_declaration:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_split_export_declaration:\\@babel\\/helper-split-export-declaration:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_split_export_declaration:\\@babel\\/helper_split_export_declaration:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-split-export:\\@babel\\/helper-split-export-declaration:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-split-export:\\@babel\\/helper_split_export_declaration:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_split_export:\\@babel\\/helper-split-export-declaration:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_split_export:\\@babel\\/helper_split_export_declaration:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-split:\\@babel\\/helper-split-export-declaration:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-split:\\@babel\\/helper_split_export_declaration:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_split:\\@babel\\/helper-split-export-declaration:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_split:\\@babel\\/helper_split_export_declaration:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-split-export-declaration:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_split_export_declaration:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper-split-export-declaration:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper_split_export_declaration:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/helper-split-export-declaration/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/helper-string-parser@7.19.4?package-id=6c9f8a892e55ce79", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/helper-string-parser", + "version": "7.19.4", + "description": "A utility package to parse strings", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-string-parser:\\@babel\\/helper-string-parser:7.19.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-string-parser@7.19.4", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-helper-string-parser", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-string-parser:\\@babel\\/helper_string_parser:7.19.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_string_parser:\\@babel\\/helper-string-parser:7.19.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_string_parser:\\@babel\\/helper_string_parser:7.19.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-string:\\@babel\\/helper-string-parser:7.19.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-string:\\@babel\\/helper_string_parser:7.19.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_string:\\@babel\\/helper-string-parser:7.19.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_string:\\@babel\\/helper_string_parser:7.19.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-string-parser:7.19.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_string_parser:7.19.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper-string-parser:7.19.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper_string_parser:7.19.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/helper-string-parser/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/helper-validator-identifier@7.19.1?package-id=2d45ebcca2d2ed", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/helper-validator-identifier", + "version": "7.19.1", + "description": "Validate identifier/keywords name", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-validator-identifier:\\@babel\\/helper-validator-identifier:7.19.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-validator-identifier@7.19.1", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-validator-identifier:\\@babel\\/helper_validator_identifier:7.19.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_validator_identifier:\\@babel\\/helper-validator-identifier:7.19.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_validator_identifier:\\@babel\\/helper_validator_identifier:7.19.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper-validator-identifier:7.19.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper_validator_identifier:7.19.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper-validator-identifier:7.19.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper_validator_identifier:7.19.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-validator-identifier:7.19.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_validator_identifier:7.19.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper-validator-identifier:7.19.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper_validator_identifier:7.19.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/helper-validator-identifier/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/helper-validator-option@7.21.0?package-id=7825422721906c73", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/helper-validator-option", + "version": "7.21.0", + "description": "Validate plugin/preset options", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-validator-option:\\@babel\\/helper-validator-option:7.21.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-validator-option@7.21.0", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-validator-option:\\@babel\\/helper_validator_option:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_validator_option:\\@babel\\/helper-validator-option:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_validator_option:\\@babel\\/helper_validator_option:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper-validator-option:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper_validator_option:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper-validator-option:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper_validator_option:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-validator-option:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_validator_option:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper-validator-option:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper_validator_option:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/helper-validator-option/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/helpers@7.21.0?package-id=5b233a21a1aaaf3e", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/helpers", + "version": "7.21.0", + "description": "Collection of helper functions used by Babel transforms.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helpers:\\@babel\\/helpers:7.21.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helpers@7.21.0", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-helpers", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helpers:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/helpers/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/highlight@7.18.6?package-id=d7060c3fa8bedae6", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/highlight", + "version": "7.18.6", + "description": "Syntax highlight JavaScript strings for output in terminals.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/highlight:\\@babel\\/highlight:7.18.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/highlight@7.18.6", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-highlight", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/highlight:7.18.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/highlight/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/parser@7.21.4?package-id=2529867ca7543a1d", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/parser", + "version": "7.21.4", + "description": "A JavaScript parser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/parser:\\@babel\\/parser:7.21.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/parser@7.21.4", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-parser", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/parser:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/parser/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/plugin-transform-react-jsx-self@7.21.0?package-id=4374895c6df6b29a", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/plugin-transform-react-jsx-self", + "version": "7.21.0", + "description": "Add a __self prop to all JSX Elements", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-react-jsx-self:\\@babel\\/plugin-transform-react-jsx-self:7.21.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-react-jsx-self@7.21.0", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-plugin-transform-react-jsx-self", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin-transform-react-jsx-self:\\@babel\\/plugin_transform_react_jsx_self:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react_jsx_self:\\@babel\\/plugin-transform-react-jsx-self:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react_jsx_self:\\@babel\\/plugin_transform_react_jsx_self:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin-transform-react-jsx:\\@babel\\/plugin-transform-react-jsx-self:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin-transform-react-jsx:\\@babel\\/plugin_transform_react_jsx_self:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react_jsx:\\@babel\\/plugin-transform-react-jsx-self:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react_jsx:\\@babel\\/plugin_transform_react_jsx_self:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin-transform-react:\\@babel\\/plugin-transform-react-jsx-self:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin-transform-react:\\@babel\\/plugin_transform_react_jsx_self:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react:\\@babel\\/plugin-transform-react-jsx-self:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react:\\@babel\\/plugin_transform_react_jsx_self:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin-transform:\\@babel\\/plugin-transform-react-jsx-self:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin-transform:\\@babel\\/plugin_transform_react_jsx_self:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin_transform:\\@babel\\/plugin-transform-react-jsx-self:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin_transform:\\@babel\\/plugin_transform_react_jsx_self:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin:\\@babel\\/plugin-transform-react-jsx-self:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin:\\@babel\\/plugin_transform_react_jsx_self:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/plugin-transform-react-jsx-self:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/plugin_transform_react_jsx_self:7.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/plugin-transform-react-jsx-self/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/plugin-transform-react-jsx-source@7.19.6?package-id=d824290761c0e30b", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/plugin-transform-react-jsx-source", + "version": "7.19.6", + "description": "Add a __source prop to all JSX Elements", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/plugin-transform-react-jsx-source:\\@babel\\/plugin-transform-react-jsx-source:7.19.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/plugin-transform-react-jsx-source@7.19.6", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-plugin-transform-react-jsx-source", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin-transform-react-jsx-source:\\@babel\\/plugin_transform_react_jsx_source:7.19.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react_jsx_source:\\@babel\\/plugin-transform-react-jsx-source:7.19.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react_jsx_source:\\@babel\\/plugin_transform_react_jsx_source:7.19.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin-transform-react-jsx:\\@babel\\/plugin-transform-react-jsx-source:7.19.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin-transform-react-jsx:\\@babel\\/plugin_transform_react_jsx_source:7.19.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react_jsx:\\@babel\\/plugin-transform-react-jsx-source:7.19.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react_jsx:\\@babel\\/plugin_transform_react_jsx_source:7.19.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin-transform-react:\\@babel\\/plugin-transform-react-jsx-source:7.19.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin-transform-react:\\@babel\\/plugin_transform_react_jsx_source:7.19.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react:\\@babel\\/plugin-transform-react-jsx-source:7.19.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin_transform_react:\\@babel\\/plugin_transform_react_jsx_source:7.19.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin-transform:\\@babel\\/plugin-transform-react-jsx-source:7.19.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin-transform:\\@babel\\/plugin_transform_react_jsx_source:7.19.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin_transform:\\@babel\\/plugin-transform-react-jsx-source:7.19.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin_transform:\\@babel\\/plugin_transform_react_jsx_source:7.19.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin:\\@babel\\/plugin-transform-react-jsx-source:7.19.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/plugin:\\@babel\\/plugin_transform_react_jsx_source:7.19.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/plugin-transform-react-jsx-source:7.19.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/plugin_transform_react_jsx_source:7.19.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/plugin-transform-react-jsx-source/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/template@7.20.7?package-id=1e58bf04d0afae78", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/template", + "version": "7.20.7", + "description": "Generate an AST from a string template.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/template:\\@babel\\/template:7.20.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/template@7.20.7", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-template", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/template:7.20.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/template/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/traverse@7.21.4?package-id=a3a939452602ec44", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/traverse", + "version": "7.21.4", + "description": "The Babel Traverse module maintains the overall tree state, and is responsible for replacing, removing, and adding nodes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/traverse:\\@babel\\/traverse:7.21.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/traverse@7.21.4", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-traverse", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/traverse:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/traverse/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/types@7.21.4?package-id=d11e0d0630ec2040", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/types", + "version": "7.21.4", + "description": "Babel Types is a Lodash-esque utility library for AST nodes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/types:\\@babel\\/types:7.21.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/types@7.21.4", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-types", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/types:7.21.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@babel/types/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40colors/colors@1.5.0?package-id=1e63eea14f4d61ef", + "type": "library", + "author": "DABH", + "name": "@colors/colors", + "version": "1.5.0", + "description": "get colors in your node.js console", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@colors\\/colors:\\@colors\\/colors:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40colors/colors@1.5.0", + "externalReferences": [ + { + "url": "http://github.com/DABH/colors.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/DABH/colors.js", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:DABH:\\@colors\\/colors:1.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/@colors/colors/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40esbuild/linux-x64@0.17.17?package-id=3e33edf75f070088", + "type": "library", + "name": "@esbuild/linux-x64", + "version": "0.17.17", + "description": "The Linux 64-bit binary for esbuild, a JavaScript bundler.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@esbuild\\/linux-x64:\\@esbuild\\/linux-x64:0.17.17:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40esbuild/linux-x64@0.17.17", + "externalReferences": [ + { + "url": "https://github.com/evanw/esbuild", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@esbuild\\/linux-x64:\\@esbuild\\/linux_x64:0.17.17:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@esbuild\\/linux_x64:\\@esbuild\\/linux-x64:0.17.17:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@esbuild\\/linux_x64:\\@esbuild\\/linux_x64:0.17.17:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@esbuild\\/linux:\\@esbuild\\/linux-x64:0.17.17:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@esbuild\\/linux:\\@esbuild\\/linux_x64:0.17.17:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:evanw:\\@esbuild\\/linux-x64:0.17.17:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:evanw:\\@esbuild\\/linux_x64:0.17.17:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@esbuild/linux-x64/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40gar/promisify@1.1.3?package-id=6fab079a7c06c1de", + "type": "library", + "author": "Gar ", + "name": "@gar/promisify", + "version": "1.1.3", + "description": "Promisify an entire class or object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@gar\\/promisify:\\@gar\\/promisify:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40gar/promisify@1.1.3", + "externalReferences": [ + { + "url": "https://github.com/wraithgar/gar-promisify.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wraithgar:\\@gar\\/promisify:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/@gar/promisify/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40isaacs/string-locale-compare@1.1.0?package-id=fbe0dcb344723a67", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "@isaacs/string-locale-compare", + "version": "1.1.0", + "description": "Compare strings with Intl.Collator if available, falling back to String.localeCompare otherwise", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@isaacs\\/string-locale-compare:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40isaacs/string-locale-compare@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/string-locale-compare", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@isaacs\\/string-locale-compare:\\@isaacs\\/string_locale_compare:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@isaacs\\/string_locale_compare:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@isaacs\\/string_locale_compare:\\@isaacs\\/string_locale_compare:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@isaacs\\/string-locale:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@isaacs\\/string-locale:\\@isaacs\\/string_locale_compare:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@isaacs\\/string_locale:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@isaacs\\/string_locale:\\@isaacs\\/string_locale_compare:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@isaacs\\/string:\\@isaacs\\/string-locale-compare:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@isaacs\\/string:\\@isaacs\\/string_locale_compare:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/@isaacs/string-locale-compare/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40jridgewell/gen-mapping@0.3.3?package-id=ec0d4a3399333797", + "type": "library", + "author": "Justin Ridgewell ", + "name": "@jridgewell/gen-mapping", + "version": "0.3.3", + "description": "Generate source maps", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@jridgewell\\/gen-mapping:\\@jridgewell\\/gen-mapping:0.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.3", + "externalReferences": [ + { + "url": "https://github.com/jridgewell/gen-mapping", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/gen-mapping:\\@jridgewell\\/gen_mapping:0.3.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/gen_mapping:\\@jridgewell\\/gen-mapping:0.3.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/gen_mapping:\\@jridgewell\\/gen_mapping:0.3.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/gen:\\@jridgewell\\/gen-mapping:0.3.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/gen:\\@jridgewell\\/gen_mapping:0.3.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jridgewell:\\@jridgewell\\/gen-mapping:0.3.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jridgewell:\\@jridgewell\\/gen_mapping:0.3.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@jridgewell/gen-mapping/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40jridgewell/resolve-uri@3.1.0?package-id=5969c346be83df57", + "type": "library", + "author": "Justin Ridgewell ", + "name": "@jridgewell/resolve-uri", + "version": "3.1.0", + "description": "Resolve a URI relative to an optional base URI", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@jridgewell\\/resolve-uri:\\@jridgewell\\/resolve-uri:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.0", + "externalReferences": [ + { + "url": "https://github.com/jridgewell/resolve-uri", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/resolve-uri:\\@jridgewell\\/resolve_uri:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/resolve_uri:\\@jridgewell\\/resolve-uri:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/resolve_uri:\\@jridgewell\\/resolve_uri:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/resolve:\\@jridgewell\\/resolve-uri:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/resolve:\\@jridgewell\\/resolve_uri:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jridgewell:\\@jridgewell\\/resolve-uri:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jridgewell:\\@jridgewell\\/resolve_uri:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@jridgewell/resolve-uri/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40jridgewell/set-array@1.1.2?package-id=1890f58b53ff85c2", + "type": "library", + "author": "Justin Ridgewell ", + "name": "@jridgewell/set-array", + "version": "1.1.2", + "description": "Like a Set, but provides the index of the `key` in the backing array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@jridgewell\\/set-array:\\@jridgewell\\/set-array:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40jridgewell/set-array@1.1.2", + "externalReferences": [ + { + "url": "https://github.com/jridgewell/set-array", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/set-array:\\@jridgewell\\/set_array:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/set_array:\\@jridgewell\\/set-array:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/set_array:\\@jridgewell\\/set_array:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/set:\\@jridgewell\\/set-array:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/set:\\@jridgewell\\/set_array:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jridgewell:\\@jridgewell\\/set-array:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jridgewell:\\@jridgewell\\/set_array:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@jridgewell/set-array/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.14?package-id=e12aa3be8290ea1a", + "type": "library", + "author": "Rich Harris", + "name": "@jridgewell/sourcemap-codec", + "version": "1.4.14", + "description": "Encode/decode sourcemap mappings", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@jridgewell\\/sourcemap-codec:\\@jridgewell\\/sourcemap-codec:1.4.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.14", + "externalReferences": [ + { + "url": "git+https://github.com/jridgewell/sourcemap-codec.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/sourcemap-codec:\\@jridgewell\\/sourcemap_codec:1.4.14:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/sourcemap_codec:\\@jridgewell\\/sourcemap-codec:1.4.14:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/sourcemap_codec:\\@jridgewell\\/sourcemap_codec:1.4.14:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/sourcemap:\\@jridgewell\\/sourcemap-codec:1.4.14:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/sourcemap:\\@jridgewell\\/sourcemap_codec:1.4.14:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@jridgewell/trace-mapping/node_modules/@jridgewell/sourcemap-codec/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.15?package-id=573adf06e7dd0a65", + "type": "library", + "author": "Rich Harris", + "name": "@jridgewell/sourcemap-codec", + "version": "1.4.15", + "description": "Encode/decode sourcemap mappings", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@jridgewell\\/sourcemap-codec:\\@jridgewell\\/sourcemap-codec:1.4.15:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.15", + "externalReferences": [ + { + "url": "git+https://github.com/jridgewell/sourcemap-codec.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/sourcemap-codec:\\@jridgewell\\/sourcemap_codec:1.4.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/sourcemap_codec:\\@jridgewell\\/sourcemap-codec:1.4.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/sourcemap_codec:\\@jridgewell\\/sourcemap_codec:1.4.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/sourcemap:\\@jridgewell\\/sourcemap-codec:1.4.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/sourcemap:\\@jridgewell\\/sourcemap_codec:1.4.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@jridgewell/sourcemap-codec/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40jridgewell/trace-mapping@0.3.18?package-id=dc932612c840adf", + "type": "library", + "author": "Justin Ridgewell ", + "name": "@jridgewell/trace-mapping", + "version": "0.3.18", + "description": "Trace the original position through a source map", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@jridgewell\\/trace-mapping:\\@jridgewell\\/trace-mapping:0.3.18:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.18", + "externalReferences": [ + { + "url": "git+https://github.com/jridgewell/trace-mapping.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/trace-mapping:\\@jridgewell\\/trace_mapping:0.3.18:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/trace_mapping:\\@jridgewell\\/trace-mapping:0.3.18:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/trace_mapping:\\@jridgewell\\/trace_mapping:0.3.18:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/trace:\\@jridgewell\\/trace-mapping:0.3.18:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@jridgewell\\/trace:\\@jridgewell\\/trace_mapping:0.3.18:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@jridgewell/trace-mapping/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40npmcli/arborist@5.6.3?package-id=60e008e2ceb94218", + "type": "library", + "author": "GitHub Inc.", + "name": "@npmcli/arborist", + "version": "5.6.3", + "description": "Manage node_modules trees", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/arborist:\\@npmcli\\/arborist:5.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/arborist@5.6.3", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/arborist:5.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/arborist/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40npmcli/ci-detect@2.0.0?package-id=8a40a38b900bcf1d", + "type": "library", + "author": "GitHub Inc.", + "name": "@npmcli/ci-detect", + "version": "2.0.0", + "description": "Detect what kind of CI environment the program is in", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/ci-detect:\\@npmcli\\/ci-detect:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/ci-detect@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/ci-detect.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/ci-detect:\\@npmcli\\/ci_detect:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/ci_detect:\\@npmcli\\/ci-detect:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/ci_detect:\\@npmcli\\/ci_detect:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/ci:\\@npmcli\\/ci-detect:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/ci:\\@npmcli\\/ci_detect:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/ci-detect/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40npmcli/config@4.2.2?package-id=a02559bafd837882", + "type": "library", + "author": "GitHub Inc.", + "name": "@npmcli/config", + "version": "4.2.2", + "description": "Configuration management for the npm cli", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/config:\\@npmcli\\/config:4.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/config@4.2.2", + "externalReferences": [ + { + "url": "https://github.com/npm/config.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/config:4.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/config/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40npmcli/disparity-colors@2.0.0?package-id=3e63715f5300a753", + "type": "library", + "author": "GitHub Inc.", + "name": "@npmcli/disparity-colors", + "version": "2.0.0", + "description": "Colorizes unified diff output", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/disparity-colors:\\@npmcli\\/disparity-colors:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/disparity-colors@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/disparity-colors.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/disparity-colors:\\@npmcli\\/disparity_colors:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/disparity_colors:\\@npmcli\\/disparity-colors:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/disparity_colors:\\@npmcli\\/disparity_colors:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/disparity:\\@npmcli\\/disparity-colors:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/disparity:\\@npmcli\\/disparity_colors:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/disparity-colors:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/disparity_colors:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/disparity-colors/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40npmcli/fs@2.1.2?package-id=cd19a20b4774187f", + "type": "library", + "author": "GitHub Inc.", + "name": "@npmcli/fs", + "version": "2.1.2", + "description": "filesystem utilities for the npm cli", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/fs:\\@npmcli\\/fs:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/fs@2.1.2", + "externalReferences": [ + { + "url": "https://github.com/npm/fs.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/fs:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/fs/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40npmcli/git@3.0.2?package-id=34b16cf601f612a9", + "type": "library", + "author": "GitHub Inc.", + "name": "@npmcli/git", + "version": "3.0.2", + "description": "a util for spawning git from npm CLI contexts", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/git:\\@npmcli\\/git:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/git@3.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/git.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/git:3.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/git/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40npmcli/installed-package-contents@1.0.7?package-id=8562f58f85ba40df", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "@npmcli/installed-package-contents", + "version": "1.0.7", + "description": "Get the list of files installed in a package in node_modules, including bundled dependencies", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/installed-package-contents:\\@npmcli\\/installed-package-contents:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/installed-package-contents@1.0.7", + "externalReferences": [ + { + "url": "git+https://github.com/npm/installed-package-contents", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/installed-package-contents:\\@npmcli\\/installed_package_contents:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/installed_package_contents:\\@npmcli\\/installed-package-contents:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/installed_package_contents:\\@npmcli\\/installed_package_contents:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/installed-package:\\@npmcli\\/installed-package-contents:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/installed-package:\\@npmcli\\/installed_package_contents:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/installed_package:\\@npmcli\\/installed-package-contents:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/installed_package:\\@npmcli\\/installed_package_contents:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/installed:\\@npmcli\\/installed-package-contents:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/installed:\\@npmcli\\/installed_package_contents:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/installed-package-contents/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40npmcli/map-workspaces@2.0.4?package-id=471052449bb417cb", + "type": "library", + "author": "GitHub Inc.", + "name": "@npmcli/map-workspaces", + "version": "2.0.4", + "description": "Retrieves a name:pathname Map for a given workspaces config", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/map-workspaces:\\@npmcli\\/map-workspaces:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/map-workspaces@2.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/map-workspaces.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/map-workspaces:\\@npmcli\\/map_workspaces:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/map_workspaces:\\@npmcli\\/map-workspaces:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/map_workspaces:\\@npmcli\\/map_workspaces:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/map:\\@npmcli\\/map-workspaces:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/map:\\@npmcli\\/map_workspaces:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/map-workspaces:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/map_workspaces:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/map-workspaces/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40npmcli/metavuln-calculator@3.1.1?package-id=5a94ed44a78625cd", + "type": "library", + "author": "GitHub Inc.", + "name": "@npmcli/metavuln-calculator", + "version": "3.1.1", + "description": "Calculate meta-vulnerabilities from package security advisories", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/metavuln-calculator:\\@npmcli\\/metavuln-calculator:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/metavuln-calculator@3.1.1", + "externalReferences": [ + { + "url": "https://github.com/npm/metavuln-calculator.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/metavuln-calculator:\\@npmcli\\/metavuln_calculator:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/metavuln_calculator:\\@npmcli\\/metavuln-calculator:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/metavuln_calculator:\\@npmcli\\/metavuln_calculator:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/metavuln:\\@npmcli\\/metavuln-calculator:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/metavuln:\\@npmcli\\/metavuln_calculator:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/metavuln-calculator:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/metavuln_calculator:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/metavuln-calculator/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40npmcli/move-file@2.0.1?package-id=76e6ffad7033dea3", + "type": "library", + "author": "GitHub Inc.", + "name": "@npmcli/move-file", + "version": "2.0.1", + "description": "move a file (fork of move-file)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/move-file:\\@npmcli\\/move-file:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/move-file@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/move-file.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/move-file:\\@npmcli\\/move_file:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/move_file:\\@npmcli\\/move-file:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/move_file:\\@npmcli\\/move_file:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/move:\\@npmcli\\/move-file:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/move:\\@npmcli\\/move_file:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/move-file:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/move_file:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/move-file/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40npmcli/name-from-folder@1.0.1?package-id=bda8c8030d6b515f", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "@npmcli/name-from-folder", + "version": "1.0.1", + "description": "Get the package name from a folder path", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/name-from-folder:\\@npmcli\\/name-from-folder:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/name-from-folder@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/name-from-folder", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/name-from-folder:\\@npmcli\\/name_from_folder:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/name_from_folder:\\@npmcli\\/name-from-folder:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/name_from_folder:\\@npmcli\\/name_from_folder:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/name-from:\\@npmcli\\/name-from-folder:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/name-from:\\@npmcli\\/name_from_folder:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/name_from:\\@npmcli\\/name-from-folder:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/name_from:\\@npmcli\\/name_from_folder:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/name:\\@npmcli\\/name-from-folder:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/name:\\@npmcli\\/name_from_folder:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/name-from-folder/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40npmcli/node-gyp@2.0.0?package-id=c9fb094d61d2ac04", + "type": "library", + "author": "GitHub Inc.", + "name": "@npmcli/node-gyp", + "version": "2.0.0", + "description": "Tools for dealing with node-gyp packages", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/node-gyp:\\@npmcli\\/node-gyp:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/node-gyp@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/node-gyp.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/node-gyp:\\@npmcli\\/node_gyp:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/node_gyp:\\@npmcli\\/node-gyp:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/node_gyp:\\@npmcli\\/node_gyp:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/node:\\@npmcli\\/node-gyp:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/node:\\@npmcli\\/node_gyp:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/node-gyp:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/node_gyp:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/node-gyp/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40npmcli/package-json@2.0.0?package-id=63189c571859bb1a", + "type": "library", + "author": "GitHub Inc.", + "name": "@npmcli/package-json", + "version": "2.0.0", + "description": "Programmatic API to update package.json", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/package-json:\\@npmcli\\/package-json:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/package-json@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/package-json.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/package-json:\\@npmcli\\/package_json:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/package_json:\\@npmcli\\/package-json:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/package_json:\\@npmcli\\/package_json:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/package:\\@npmcli\\/package-json:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/package:\\@npmcli\\/package_json:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/package-json:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/package_json:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/package-json/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40npmcli/promise-spawn@3.0.0?package-id=426c6e033be010cb", + "type": "library", + "author": "GitHub Inc.", + "name": "@npmcli/promise-spawn", + "version": "3.0.0", + "description": "spawn processes the way the npm cli likes to do", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/promise-spawn:\\@npmcli\\/promise-spawn:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/promise-spawn@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/promise-spawn.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/promise-spawn:\\@npmcli\\/promise_spawn:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/promise_spawn:\\@npmcli\\/promise-spawn:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/promise_spawn:\\@npmcli\\/promise_spawn:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/promise:\\@npmcli\\/promise-spawn:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/promise:\\@npmcli\\/promise_spawn:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/promise-spawn:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/promise_spawn:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/promise-spawn/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40npmcli/query@1.2.0?package-id=e71e78476048755c", + "type": "library", + "author": "GitHub Inc.", + "name": "@npmcli/query", + "version": "1.2.0", + "description": "npm query parser and tools", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/query:\\@npmcli\\/query:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/query@1.2.0", + "externalReferences": [ + { + "url": "https://github.com/npm/query.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/query:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/query/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40npmcli/run-script@4.2.1?package-id=a13d191f5a0789d1", + "type": "library", + "author": "GitHub Inc.", + "name": "@npmcli/run-script", + "version": "4.2.1", + "description": "Run a lifecycle script for a package (descendant of npm-lifecycle)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/run-script:\\@npmcli\\/run-script:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/run-script@4.2.1", + "externalReferences": [ + { + "url": "https://github.com/npm/run-script.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/run-script:\\@npmcli\\/run_script:4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/run_script:\\@npmcli\\/run-script:4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/run_script:\\@npmcli\\/run_script:4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/run:\\@npmcli\\/run-script:4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/run:\\@npmcli\\/run_script:4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/run-script:4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/run_script:4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/run-script/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40tootallnate/once@2.0.0?package-id=5edbc75b01ae9167", + "type": "library", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "@tootallnate/once", + "version": "2.0.0", + "description": "Creates a Promise that waits for a single event", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@tootallnate\\/once:\\@tootallnate\\/once:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40tootallnate/once@2.0.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/once.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:\\@tootallnate\\/once:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/@tootallnate/once/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40types/prop-types@15.7.5?package-id=9557ab56f583533f", + "type": "library", + "name": "@types/prop-types", + "version": "15.7.5", + "description": "TypeScript definitions for prop-types", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/prop-types:\\@types\\/prop-types:15.7.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/prop-types@15.7.5", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/prop-types", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/prop-types:\\@types\\/prop_types:15.7.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/prop_types:\\@types\\/prop-types:15.7.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/prop_types:\\@types\\/prop_types:15.7.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/prop-types:15.7.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/prop_types:15.7.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/prop:\\@types\\/prop-types:15.7.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/prop:\\@types\\/prop_types:15.7.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@types/prop-types/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40types/react@18.0.37?package-id=ceb87e47e338375a", + "type": "library", + "name": "@types/react", + "version": "18.0.37", + "description": "TypeScript definitions for React", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/react:18.0.37:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/react@18.0.37", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/react", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/react:\\@types\\/react:18.0.37:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@types/react/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40types/react-dom@18.0.11?package-id=4e4b32f95180c1b1", + "type": "library", + "name": "@types/react-dom", + "version": "18.0.11", + "description": "TypeScript definitions for React (react-dom)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/react-dom:\\@types\\/react-dom:18.0.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/react-dom@18.0.11", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/react-dom", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/react-dom:\\@types\\/react_dom:18.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/react_dom:\\@types\\/react-dom:18.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/react_dom:\\@types\\/react_dom:18.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/react-dom:18.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/react_dom:18.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/react:\\@types\\/react-dom:18.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/react:\\@types\\/react_dom:18.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@types/react-dom/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40types/scheduler@0.16.3?package-id=7f47ec37d44d13aa", + "type": "library", + "name": "@types/scheduler", + "version": "0.16.3", + "description": "TypeScript definitions for scheduler", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/scheduler:\\@types\\/scheduler:0.16.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/scheduler@0.16.3", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/scheduler", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/scheduler:0.16.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@types/scheduler/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40vitejs/plugin-react@3.1.0?package-id=cb7c3ac1ff8ec65d", + "type": "library", + "author": "Evan You", + "name": "@vitejs/plugin-react", + "version": "3.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@vitejs\\/plugin-react:\\@vitejs\\/plugin-react:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40vitejs/plugin-react@3.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/vitejs/vite-plugin-react.git", + "type": "distribution" + }, + { + "url": "https://github.com/vitejs/vite-plugin-react/tree/main/packages/plugin-react#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@vitejs\\/plugin-react:\\@vitejs\\/plugin_react:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@vitejs\\/plugin_react:\\@vitejs\\/plugin-react:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@vitejs\\/plugin_react:\\@vitejs\\/plugin_react:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@vitejs\\/plugin:\\@vitejs\\/plugin-react:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@vitejs\\/plugin:\\@vitejs\\/plugin_react:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:vitejs:\\@vitejs\\/plugin-react:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:vitejs:\\@vitejs\\/plugin_react:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@vitejs/plugin-react/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/abbrev@1.1.1?package-id=98be1cad3f4d1d11", + "type": "library", + "author": "Isaac Z. Schlueter ", + "name": "abbrev", + "version": "1.1.1", + "description": "Like ruby's abbrev module, but in js", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:abbrev:abbrev:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/abbrev@1.1.1", + "externalReferences": [ + { + "url": "http://github.com/isaacs/abbrev-js", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:abbrev:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/abbrev/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/agent-base@6.0.2?package-id=4b0b5c9ee7d8fc08", + "type": "library", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "agent-base", + "version": "6.0.2", + "description": "Turn a function into an `http.Agent` instance", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:TooTallNate:agent-base:6.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/agent-base@6.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:agent_base:6.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:agent-base:agent-base:6.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:agent-base:agent_base:6.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:agent_base:agent-base:6.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:agent_base:agent_base:6.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:agent:agent-base:6.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:agent:agent_base:6.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/agent-base/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/agentkeepalive@4.2.1?package-id=37fa9bcd67324d6e", + "type": "library", + "author": "fengmk2 (https://fengmk2.com)", + "name": "agentkeepalive", + "version": "4.2.1", + "description": "Missing keepalive http.Agent", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:agentkeepalive:agentkeepalive:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/agentkeepalive@4.2.1", + "externalReferences": [ + { + "url": "git://github.com/node-modules/agentkeepalive.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node-modules:agentkeepalive:4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/agentkeepalive/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/aggregate-error@3.1.0?package-id=b1b74a520919b83f", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "aggregate-error", + "version": "3.1.0", + "description": "Create an error from multiple errors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:aggregate-error:aggregate-error:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aggregate-error@3.1.0", + "externalReferences": [ + { + "url": "sindresorhus/aggregate-error", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aggregate-error:aggregate_error:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aggregate_error:aggregate-error:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aggregate_error:aggregate_error:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aggregate:aggregate-error:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aggregate:aggregate_error:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/aggregate-error/package.json" + } + ] + }, + { + "bom-ref": "pkg:apk/alpine/alpine-baselayout@3.4.0-r0?arch=x86_64&distro=alpine-3.17.3&package-id=92b19c7750fb559d", + "type": "library", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout", + "version": "3.4.0-r0", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.4.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout@3.4.0-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "apkdb-cataloger" + }, + { + "name": "syft:package:metadataType", + "value": "ApkMetadata" + }, + { + "name": "syft:package:type", + "value": "apk" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alpine-baselayout:alpine_baselayout:3.4.0-r0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alpine_baselayout:alpine-baselayout:3.4.0-r0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alpine_baselayout:alpine_baselayout:3.4.0-r0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alpine:alpine-baselayout:3.4.0-r0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alpine:alpine_baselayout:3.4.0-r0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b951f8a113f5cb174e44d411da76c4f72fef8e95ef1d03bcf4a1592a21a8aeb6" + }, + { + "name": "syft:location:0:path", + "value": "/lib/apk/db/installed" + }, + { + "name": "syft:metadata:gitCommitOfApkPort", + "value": "bd965a7ebf7fd8f07d7a0cc0d7375bf3e4eb9b24" + }, + { + "name": "syft:metadata:installedSize", + "value": "331776" + }, + { + "name": "syft:metadata:originPackage", + "value": "alpine-baselayout" + }, + { + "name": "syft:metadata:pullChecksum", + "value": "Q1/eXfmbYT1WXenFSqKjroYyK84NE=" + }, + { + "name": "syft:metadata:pullDependencies:0", + "value": "alpine-baselayout-data=3.4.0-r0" + }, + { + "name": "syft:metadata:pullDependencies:1", + "value": "/bin/sh" + }, + { + "name": "syft:metadata:size", + "value": "8890" + } + ] + }, + { + "bom-ref": "pkg:apk/alpine/alpine-baselayout-data@3.4.0-r0?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.17.3&package-id=291d1267b40d636f", + "type": "library", + "publisher": "Natanael Copa ", + "name": "alpine-baselayout-data", + "version": "3.4.0-r0", + "description": "Alpine base dir structure and init scripts", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-baselayout-data@3.4.0-r0?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "apkdb-cataloger" + }, + { + "name": "syft:package:metadataType", + "value": "ApkMetadata" + }, + { + "name": "syft:package:type", + "value": "apk" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alpine-baselayout-data:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alpine_baselayout_data:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alpine_baselayout_data:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alpine-baselayout:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alpine-baselayout:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alpine_baselayout:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alpine_baselayout:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alpine:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alpine:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b951f8a113f5cb174e44d411da76c4f72fef8e95ef1d03bcf4a1592a21a8aeb6" + }, + { + "name": "syft:location:0:path", + "value": "/lib/apk/db/installed" + }, + { + "name": "syft:metadata:gitCommitOfApkPort", + "value": "bd965a7ebf7fd8f07d7a0cc0d7375bf3e4eb9b24" + }, + { + "name": "syft:metadata:installedSize", + "value": "77824" + }, + { + "name": "syft:metadata:originPackage", + "value": "alpine-baselayout" + }, + { + "name": "syft:metadata:pullChecksum", + "value": "Q1/JgpM8J6DWI/541tUX+uHEzSjqo=" + }, + { + "name": "syft:metadata:size", + "value": "11664" + } + ] + }, + { + "bom-ref": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.17.3&package-id=2b5e23d349b556cf", + "type": "library", + "publisher": "Natanael Copa ", + "name": "alpine-keys", + "version": "2.4-r1", + "description": "Public keys for Alpine Linux packages", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "apkdb-cataloger" + }, + { + "name": "syft:package:metadataType", + "value": "ApkMetadata" + }, + { + "name": "syft:package:type", + "value": "apk" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alpine-keys:alpine_keys:2.4-r1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alpine_keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alpine_keys:alpine_keys:2.4-r1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alpine:alpine-keys:2.4-r1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alpine:alpine_keys:2.4-r1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b951f8a113f5cb174e44d411da76c4f72fef8e95ef1d03bcf4a1592a21a8aeb6" + }, + { + "name": "syft:location:0:path", + "value": "/lib/apk/db/installed" + }, + { + "name": "syft:metadata:gitCommitOfApkPort", + "value": "aab68f8c9ab434a46710de8e12fb3206e2930a59" + }, + { + "name": "syft:metadata:installedSize", + "value": "159744" + }, + { + "name": "syft:metadata:originPackage", + "value": "alpine-keys" + }, + { + "name": "syft:metadata:pullChecksum", + "value": "Q1KM01lfKVp+gEZn23awujqjSkrN8=" + }, + { + "name": "syft:metadata:size", + "value": "13361" + } + ] + }, + { + "bom-ref": "pkg:npm/ansi-regex@5.0.1?package-id=fe78ee8372cda3ef", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "5.0.1", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex:ansi-regex:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-regex@5.0.1", + "externalReferences": [ + { + "url": "chalk/ansi-regex", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi-regex:ansi_regex:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi_regex:ansi-regex:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi_regex:ansi_regex:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi:ansi-regex:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi:ansi_regex:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/ansi-regex/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ansi-styles@3.2.1?package-id=fe264c6898a43995", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-styles", + "version": "3.2.1", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:3.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@3.2.1", + "externalReferences": [ + { + "url": "chalk/ansi-styles", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi-styles:ansi_styles:3.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi_styles:ansi-styles:3.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi_styles:ansi_styles:3.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi:ansi-styles:3.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi:ansi_styles:3.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/ansi-styles/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ansi-styles@4.3.0?package-id=e3f310fd74532509", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-styles", + "version": "4.3.0", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@4.3.0", + "externalReferences": [ + { + "url": "chalk/ansi-styles", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi-styles:ansi_styles:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi_styles:ansi-styles:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi_styles:ansi_styles:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi:ansi-styles:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi:ansi_styles:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/ansi-styles/package.json" + } + ] + }, + { + "bom-ref": "pkg:apk/alpine/apk-tools@2.12.10-r1?arch=x86_64&distro=alpine-3.17.3&package-id=e5f757b0df1f62bc", + "type": "library", + "publisher": "Natanael Copa ", + "name": "apk-tools", + "version": "2.12.10-r1", + "description": "Alpine Package Keeper - package manager for alpine", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:apk-tools:apk-tools:2.12.10-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/apk-tools@2.12.10-r1?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "apkdb-cataloger" + }, + { + "name": "syft:package:metadataType", + "value": "ApkMetadata" + }, + { + "name": "syft:package:type", + "value": "apk" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:apk-tools:apk_tools:2.12.10-r1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:apk_tools:apk-tools:2.12.10-r1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:apk_tools:apk_tools:2.12.10-r1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:apk:apk-tools:2.12.10-r1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:apk:apk_tools:2.12.10-r1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b951f8a113f5cb174e44d411da76c4f72fef8e95ef1d03bcf4a1592a21a8aeb6" + }, + { + "name": "syft:location:0:path", + "value": "/lib/apk/db/installed" + }, + { + "name": "syft:metadata:gitCommitOfApkPort", + "value": "0188f510baadbae393472103427b9c1875117136" + }, + { + "name": "syft:metadata:installedSize", + "value": "307200" + }, + { + "name": "syft:metadata:originPackage", + "value": "apk-tools" + }, + { + "name": "syft:metadata:provides:0", + "value": "so:libapk.so.3.12.0=3.12.0" + }, + { + "name": "syft:metadata:provides:1", + "value": "cmd:apk=2.12.10-r1" + }, + { + "name": "syft:metadata:pullChecksum", + "value": "Q1Ef3iwt+cMdGngEgaFr2URIJhKzQ=" + }, + { + "name": "syft:metadata:pullDependencies:0", + "value": "musl>=1.2" + }, + { + "name": "syft:metadata:pullDependencies:1", + "value": "ca-certificates-bundle" + }, + { + "name": "syft:metadata:pullDependencies:2", + "value": "so:libc.musl-x86_64.so.1" + }, + { + "name": "syft:metadata:pullDependencies:3", + "value": "so:libcrypto.so.3" + }, + { + "name": "syft:metadata:pullDependencies:4", + "value": "so:libssl.so.3" + }, + { + "name": "syft:metadata:pullDependencies:5", + "value": "so:libz.so.1" + }, + { + "name": "syft:metadata:size", + "value": "120973" + } + ] + }, + { + "bom-ref": "pkg:npm/aproba@2.0.0?package-id=d11111a04d810227", + "type": "library", + "author": "Rebecca Turner ", + "name": "aproba", + "version": "2.0.0", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:aproba:aproba:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aproba@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/iarna/aproba", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:aproba:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/aproba/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/archy@1.0.0?package-id=a1e7fd77fec54095", + "type": "library", + "author": "James Halliday (http://substack.net)", + "name": "archy", + "version": "1.0.0", + "description": "render nested hierarchies `npm ls` style with unicode pipes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:substack:archy:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/archy@1.0.0", + "externalReferences": [ + { + "url": "http://github.com/substack/node-archy.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:archy:archy:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/archy/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/are-we-there-yet@3.0.1?package-id=d7ea73c2e385c95d", + "type": "library", + "author": "GitHub Inc.", + "name": "are-we-there-yet", + "version": "3.0.1", + "description": "Keep track of the overall completion of many disparate processes", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:are-we-there-yet:are-we-there-yet:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/are-we-there-yet@3.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/are-we-there-yet.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/are-we-there-yet", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are-we-there-yet:are_we_there_yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are_we_there_yet:are-we-there-yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are_we_there_yet:are_we_there_yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are-we-there:are-we-there-yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are-we-there:are_we_there_yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are_we_there:are-we-there-yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are_we_there:are_we_there_yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are-we:are-we-there-yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are-we:are_we_there_yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are_we:are-we-there-yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are_we:are_we_there_yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are:are-we-there-yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are:are_we_there_yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:are-we-there-yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:are_we_there_yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/are-we-there-yet/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/asap@2.0.6?package-id=4069b89e24646503", + "type": "library", + "name": "asap", + "version": "2.0.6", + "description": "High-priority task queue for Node.js and browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:kriskowal:asap:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/asap@2.0.6", + "externalReferences": [ + { + "url": "https://github.com/kriskowal/asap.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:asap:asap:2.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/asap/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/balanced-match@1.0.2?package-id=c15b2106d0ae19d4", + "type": "library", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "balanced-match", + "version": "1.0.2", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:balanced-match:balanced_match:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:balanced_match:balanced-match:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:balanced_match:balanced_match:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:juliangruber:balanced-match:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:juliangruber:balanced_match:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:balanced:balanced-match:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:balanced:balanced_match:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/balanced-match/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/bin-links@3.0.3?package-id=605ade84572e7fb", + "type": "library", + "author": "GitHub Inc.", + "name": "bin-links", + "version": "3.0.3", + "description": "JavaScript package binary linker", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:bin-links:bin-links:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/bin-links@3.0.3", + "externalReferences": [ + { + "url": "https://github.com/npm/bin-links.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:bin-links:bin_links:3.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:bin_links:bin-links:3.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:bin_links:bin_links:3.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:bin:bin-links:3.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:bin:bin_links:3.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:bin-links:3.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:bin_links:3.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/bin-links/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/binary-extensions@2.2.0?package-id=2ddda84d3ad7f3e1", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "binary-extensions", + "version": "2.2.0", + "description": "List of binary file extensions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:binary-extensions:binary-extensions:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/binary-extensions@2.2.0", + "externalReferences": [ + { + "url": "sindresorhus/binary-extensions", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:binary-extensions:binary_extensions:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:binary_extensions:binary-extensions:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:binary_extensions:binary_extensions:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:binary:binary-extensions:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:binary:binary_extensions:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/binary-extensions/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=a36ca63616a6d457", + "type": "library", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "1.1.11", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:brace-expansion:brace_expansion:1.1.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:brace_expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:brace_expansion:brace_expansion:1.1.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:juliangruber:brace-expansion:1.1.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:juliangruber:brace_expansion:1.1.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:brace:brace-expansion:1.1.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:brace:brace_expansion:1.1.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/node-gyp/node_modules/brace-expansion/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=8aefa0d5bf7ea5ce", + "type": "library", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "1.1.11", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:brace-expansion:brace_expansion:1.1.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:brace_expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:brace_expansion:brace_expansion:1.1.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:juliangruber:brace-expansion:1.1.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:juliangruber:brace_expansion:1.1.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:brace:brace-expansion:1.1.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:brace:brace_expansion:1.1.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/rimraf/node_modules/brace-expansion/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/brace-expansion@2.0.1?package-id=70d44e2ab0a06da3", + "type": "library", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "2.0.1", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/brace-expansion@2.0.1", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:brace-expansion:brace_expansion:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:brace_expansion:brace-expansion:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:brace_expansion:brace_expansion:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:juliangruber:brace-expansion:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:juliangruber:brace_expansion:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:brace:brace-expansion:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:brace:brace_expansion:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/browserslist@4.21.5?package-id=56a0e5f718d6c393", + "type": "library", + "author": "Andrey Sitnik ", + "name": "browserslist", + "version": "4.21.5", + "description": "Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-env-preset", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:browserslist:browserslist:4.21.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/browserslist@4.21.5", + "externalReferences": [ + { + "url": "browserslist/browserslist", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/browserslist/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/builtins@5.0.1?package-id=af6ac207a0c6926d", + "type": "library", + "name": "builtins", + "version": "5.0.1", + "description": "List of node.js builtin modules", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:builtins:builtins:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/builtins@5.0.1", + "externalReferences": [ + { + "url": "juliangruber/builtins", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/builtins/package.json" + } + ] + }, + { + "bom-ref": "e6c9486419cbb84e", + "type": "application", + "name": "busybox", + "version": "1.35.0", + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:*", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "binary-cataloger" + }, + { + "name": "syft:package:metadataType", + "value": "BinaryMetadata" + }, + { + "name": "syft:package:type", + "value": "binary" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5" + }, + { + "name": "syft:location:0:path", + "value": "/bin/busybox" + } + ] + }, + { + "bom-ref": "pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=alpine-3.17.3&package-id=623d53216342d45e", + "type": "library", + "publisher": "Sören Tempel ", + "name": "busybox", + "version": "1.35.0-r29", + "description": "Size optimized toolbox of many common UNIX utilities", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox:busybox:1.35.0-r29:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "apkdb-cataloger" + }, + { + "name": "syft:package:metadataType", + "value": "ApkMetadata" + }, + { + "name": "syft:package:type", + "value": "apk" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b951f8a113f5cb174e44d411da76c4f72fef8e95ef1d03bcf4a1592a21a8aeb6" + }, + { + "name": "syft:location:0:path", + "value": "/lib/apk/db/installed" + }, + { + "name": "syft:metadata:gitCommitOfApkPort", + "value": "1dbf7a793afae640ea643a055b6dd4f430ac116b" + }, + { + "name": "syft:metadata:installedSize", + "value": "962560" + }, + { + "name": "syft:metadata:originPackage", + "value": "busybox" + }, + { + "name": "syft:metadata:provides:0", + "value": "cmd:busybox=1.35.0-r29" + }, + { + "name": "syft:metadata:pullChecksum", + "value": "Q1NN3sp0yr99btRysqty3nQUrWHaY=" + }, + { + "name": "syft:metadata:pullDependencies:0", + "value": "so:libc.musl-x86_64.so.1" + }, + { + "name": "syft:metadata:size", + "value": "509600" + } + ] + }, + { + "bom-ref": "pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.3&package-id=256fc96b4a8c4da8", + "type": "library", + "publisher": "Sören Tempel ", + "name": "busybox-binsh", + "version": "1.35.0-r29", + "description": "busybox ash /bin/sh", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:busybox-binsh:busybox-binsh:1.35.0-r29:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "apkdb-cataloger" + }, + { + "name": "syft:package:metadataType", + "value": "ApkMetadata" + }, + { + "name": "syft:package:type", + "value": "apk" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:busybox-binsh:busybox_binsh:1.35.0-r29:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:busybox_binsh:busybox-binsh:1.35.0-r29:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:busybox_binsh:busybox_binsh:1.35.0-r29:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:busybox:busybox-binsh:1.35.0-r29:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:busybox:busybox_binsh:1.35.0-r29:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b951f8a113f5cb174e44d411da76c4f72fef8e95ef1d03bcf4a1592a21a8aeb6" + }, + { + "name": "syft:location:0:path", + "value": "/lib/apk/db/installed" + }, + { + "name": "syft:metadata:gitCommitOfApkPort", + "value": "1dbf7a793afae640ea643a055b6dd4f430ac116b" + }, + { + "name": "syft:metadata:installedSize", + "value": "8192" + }, + { + "name": "syft:metadata:originPackage", + "value": "busybox" + }, + { + "name": "syft:metadata:provides:0", + "value": "/bin/sh" + }, + { + "name": "syft:metadata:provides:1", + "value": "cmd:sh=1.35.0-r29" + }, + { + "name": "syft:metadata:pullChecksum", + "value": "Q1miWwyhWKXVEiRYLhmArV1TKMs6A=" + }, + { + "name": "syft:metadata:pullDependencies:0", + "value": "busybox=1.35.0-r29" + }, + { + "name": "syft:metadata:size", + "value": "1547" + } + ] + }, + { + "bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20220614-r4?arch=x86_64&upstream=ca-certificates&distro=alpine-3.17.3&package-id=b805d823ae624f04", + "type": "library", + "publisher": "Natanael Copa ", + "name": "ca-certificates-bundle", + "version": "20220614-r4", + "description": "Pre generated bundle of Mozilla certificates", + "licenses": [ + { + "license": { + "id": "MPL-2.0" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ca-certificates-bundle@20220614-r4?arch=x86_64&upstream=ca-certificates&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "apkdb-cataloger" + }, + { + "name": "syft:package:metadataType", + "value": "ApkMetadata" + }, + { + "name": "syft:package:type", + "value": "apk" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ca-certificates-bundle:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ca_certificates_bundle:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ca_certificates_bundle:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ca-certificates:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ca-certificates:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ca_certificates:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ca_certificates:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mozilla:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mozilla:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ca:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ca:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b951f8a113f5cb174e44d411da76c4f72fef8e95ef1d03bcf4a1592a21a8aeb6" + }, + { + "name": "syft:location:0:path", + "value": "/lib/apk/db/installed" + }, + { + "name": "syft:metadata:gitCommitOfApkPort", + "value": "e1839fd45a096c9e21ac24f8a61991d357d11628" + }, + { + "name": "syft:metadata:installedSize", + "value": "237568" + }, + { + "name": "syft:metadata:originPackage", + "value": "ca-certificates" + }, + { + "name": "syft:metadata:provides:0", + "value": "ca-certificates-cacert=20220614-r4" + }, + { + "name": "syft:metadata:pullChecksum", + "value": "Q14PFUzkDXTGDcHkiuEdFuzb+EvxQ=" + }, + { + "name": "syft:metadata:size", + "value": "126296" + } + ] + }, + { + "bom-ref": "pkg:npm/cacache@16.1.3?package-id=4e055fb1e595c11", + "type": "library", + "author": "GitHub Inc.", + "name": "cacache", + "version": "16.1.3", + "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cacache:cacache:16.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/cacache@16.1.3", + "externalReferences": [ + { + "url": "https://github.com/npm/cacache.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:cacache:16.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/cacache/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/caniuse-lite@1.0.30001480?package-id=5d9329e60306bca8", + "type": "library", + "author": "Ben Briggs (http://beneb.info)", + "name": "caniuse-lite", + "version": "1.0.30001480", + "description": "A smaller version of caniuse-db, with only the essentials!", + "licenses": [ + { + "license": { + "id": "CC-BY-4.0" + } + } + ], + "cpe": "cpe:2.3:a:caniuse-lite:caniuse-lite:1.0.30001480:*:*:*:*:*:*:*", + "purl": "pkg:npm/caniuse-lite@1.0.30001480", + "externalReferences": [ + { + "url": "browserslist/caniuse-lite", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:caniuse-lite:caniuse_lite:1.0.30001480:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:caniuse_lite:caniuse-lite:1.0.30001480:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:caniuse_lite:caniuse_lite:1.0.30001480:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:caniuse:caniuse-lite:1.0.30001480:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:caniuse:caniuse_lite:1.0.30001480:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/caniuse-lite/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/chalk@2.4.2?package-id=abdddd42c56d8628", + "type": "library", + "name": "chalk", + "version": "2.4.2", + "description": "Terminal string styling done right", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chalk:chalk:2.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/chalk@2.4.2", + "externalReferences": [ + { + "url": "chalk/chalk", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/chalk/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/chalk@4.1.2?package-id=b12178723b56594f", + "type": "library", + "name": "chalk", + "version": "4.1.2", + "description": "Terminal string styling done right", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chalk:chalk:4.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/chalk@4.1.2", + "externalReferences": [ + { + "url": "chalk/chalk", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/chalk/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/chownr@2.0.0?package-id=b5088c57ceda122f", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "chownr", + "version": "2.0.0", + "description": "like `chown -R`", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:chownr:chownr:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/chownr@2.0.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/chownr.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:chownr:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/chownr/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ci-cd-research-circleci@0.0.0?package-id=3f0f10c3c07fe96d", + "type": "library", + "name": "ci-cd-research-circleci", + "version": "0.0.0", + "cpe": "cpe:2.3:a:ci-cd-research-circleci:ci-cd-research-circleci:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ci-cd-research-circleci@0.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ci-cd-research-circleci:ci_cd_research_circleci:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ci_cd_research_circleci:ci-cd-research-circleci:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ci_cd_research_circleci:ci_cd_research_circleci:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ci-cd-research:ci-cd-research-circleci:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ci-cd-research:ci_cd_research_circleci:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ci_cd_research:ci-cd-research-circleci:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ci_cd_research:ci_cd_research_circleci:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ci-cd:ci-cd-research-circleci:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ci-cd:ci_cd_research_circleci:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ci_cd:ci-cd-research-circleci:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ci_cd:ci_cd_research_circleci:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ci:ci-cd-research-circleci:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ci:ci_cd_research_circleci:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:d5a6f59da4678a5e16f8ddf244d647bd4569b8b9883050db74bea76eb8cd4231" + }, + { + "name": "syft:location:0:path", + "value": "/app/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/cidr-regex@3.1.1?package-id=be2d165b38649e26", + "type": "library", + "author": "silverwind ", + "name": "cidr-regex", + "version": "3.1.1", + "description": "Regular expression for matching IP addresses in CIDR notation", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:cidr-regex:cidr-regex:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/cidr-regex@3.1.1", + "externalReferences": [ + { + "url": "silverwind/cidr-regex", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cidr-regex:cidr_regex:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cidr_regex:cidr-regex:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cidr_regex:cidr_regex:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cidr:cidr-regex:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cidr:cidr_regex:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/cidr-regex/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/clean-stack@2.2.0?package-id=9a5c51e7acb4b115", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "clean-stack", + "version": "2.2.0", + "description": "Clean up error stack traces", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clean-stack:clean-stack:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/clean-stack@2.2.0", + "externalReferences": [ + { + "url": "sindresorhus/clean-stack", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:clean-stack:clean_stack:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:clean_stack:clean-stack:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:clean_stack:clean_stack:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:clean:clean-stack:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:clean:clean_stack:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/clean-stack/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/cli-columns@4.0.0?package-id=61a1dfb277c2e6f7", + "type": "library", + "author": "Shannon Moeller (http://shannonmoeller.com)", + "name": "cli-columns", + "version": "4.0.0", + "description": "Columnated lists for the CLI.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shannonmoeller:cli-columns:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-columns@4.0.0", + "externalReferences": [ + { + "url": "shannonmoeller/cli-columns", + "type": "distribution" + }, + { + "url": "https://github.com/shannonmoeller/cli-columns#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:shannonmoeller:cli_columns:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cli-columns:cli-columns:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cli-columns:cli_columns:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cli_columns:cli-columns:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cli_columns:cli_columns:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cli:cli-columns:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cli:cli_columns:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/cli-columns/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/cli-table3@0.6.2?package-id=c77ee2194bd52f3d", + "type": "library", + "author": "James Talmage", + "name": "cli-table3", + "version": "0.6.2", + "description": "Pretty unicode tables for the command line. Based on the original cli-table.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cli-table3:cli-table3:0.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/cli-table3@0.6.2", + "externalReferences": [ + { + "url": "https://github.com/cli-table/cli-table3.git", + "type": "distribution" + }, + { + "url": "https://github.com/cli-table/cli-table3", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cli-table3:cli_table3:0.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cli_table3:cli-table3:0.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cli_table3:cli_table3:0.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cli-table:cli-table3:0.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cli-table:cli_table3:0.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cli:cli-table3:0.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cli:cli_table3:0.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/cli-table3/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/clone@1.0.4?package-id=44b571b36478d30c", + "type": "library", + "author": "Paul Vorbach (http://paul.vorba.ch/)", + "name": "clone", + "version": "1.0.4", + "description": "deep cloning of objects and arrays", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clone:clone:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/clone@1.0.4", + "externalReferences": [ + { + "url": "git://github.com/pvorb/node-clone.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pvorb:clone:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/clone/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/cmd-shim@5.0.0?package-id=6701e31fdf422502", + "type": "library", + "author": "GitHub Inc.", + "name": "cmd-shim", + "version": "5.0.0", + "description": "Used in npm for command line application support", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cmd-shim:cmd-shim:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cmd-shim@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/cmd-shim.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cmd-shim:cmd_shim:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cmd_shim:cmd-shim:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cmd_shim:cmd_shim:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cmd:cmd-shim:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cmd:cmd_shim:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:cmd-shim:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:cmd_shim:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/cmd-shim/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/color-convert@1.9.3?package-id=8d03b172ea2c365f", + "type": "library", + "author": "Heather Arthur ", + "name": "color-convert", + "version": "1.9.3", + "description": "Plain color conversion functions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:1.9.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@1.9.3", + "externalReferences": [ + { + "url": "Qix-/color-convert", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color-convert:color_convert:1.9.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_convert:color-convert:1.9.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_convert:color_convert:1.9.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color-convert:1.9.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color_convert:1.9.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/color-convert/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/color-convert@2.0.1?package-id=2be936aafe32cf82", + "type": "library", + "author": "Heather Arthur ", + "name": "color-convert", + "version": "2.0.1", + "description": "Plain color conversion functions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@2.0.1", + "externalReferences": [ + { + "url": "Qix-/color-convert", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color-convert:color_convert:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_convert:color-convert:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_convert:color_convert:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color-convert:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color_convert:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/color-convert/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/color-name@1.1.3?package-id=3ef466ad1a0a871b", + "type": "library", + "author": "DY ", + "name": "color-name", + "version": "1.1.3", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.3", + "externalReferences": [ + { + "url": "git@github.com:dfcreative/color-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/dfcreative/color-name", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color-name:color_name:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_name:color-name:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_name:color_name:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:dfcreative:color-name:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:dfcreative:color_name:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color-name:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color_name:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/color-name/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/color-name@1.1.4?package-id=b14fd2e37cdab40f", + "type": "library", + "author": "DY ", + "name": "color-name", + "version": "1.1.4", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.4", + "externalReferences": [ + { + "url": "git@github.com:colorjs/color-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/colorjs/color-name", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color-name:color_name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_name:color-name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_name:color_name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:colorjs:color-name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:colorjs:color_name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color-name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color_name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/color-name/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/color-support@1.1.3?package-id=33c3f3c0dd43aff8", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "color-support", + "version": "1.1.3", + "description": "A module which will endeavor to guess your terminal's level of color support.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:color-support:color-support:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-support@1.1.3", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/color-support.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color-support:color_support:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_support:color-support:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_support:color_support:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color-support:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color_support:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/color-support/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/columnify@1.6.0?package-id=fc90187aad4a6027", + "type": "library", + "author": "Tim Oxley", + "name": "columnify", + "version": "1.6.0", + "description": "Render data in text columns. Supports in-column text-wrap.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:columnify:columnify:1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/columnify@1.6.0", + "externalReferences": [ + { + "url": "git://github.com/timoxley/columnify.git", + "type": "distribution" + }, + { + "url": "https://github.com/timoxley/columnify", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:timoxley:columnify:1.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/columnify/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/common-ancestor-path@1.0.1?package-id=4296edf5ae5437c0", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "common-ancestor-path", + "version": "1.0.1", + "description": "Find the common ancestor of 2 or more paths on Windows or Unix", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:common-ancestor-path:common-ancestor-path:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/common-ancestor-path@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/common-ancestor-path", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:common-ancestor-path:common_ancestor_path:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:common_ancestor_path:common-ancestor-path:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:common_ancestor_path:common_ancestor_path:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:common-ancestor:common-ancestor-path:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:common-ancestor:common_ancestor_path:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:common_ancestor:common-ancestor-path:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:common_ancestor:common_ancestor_path:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:common:common-ancestor-path:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:common:common_ancestor_path:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/common-ancestor-path/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=bdf14b65a5715b98", + "type": "library", + "author": "James Halliday (http://substack.net)", + "name": "concat-map", + "version": "0.0.1", + "description": "concatenative mapdashery", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:concat-map:concat_map:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:concat_map:concat-map:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:concat_map:concat_map:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:substack:concat-map:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:substack:concat_map:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:concat:concat-map:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:concat:concat_map:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/concat-map/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/console-control-strings@1.1.0?package-id=f5b1c468fcf0a37a", + "type": "library", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "console-control-strings", + "version": "1.1.0", + "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:console-control-strings:console-control-strings:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/console-control-strings@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/iarna/console-control-strings", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:console-control-strings:console_control_strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:console_control_strings:console-control-strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:console_control_strings:console_control_strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:console-control:console-control-strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:console-control:console_control_strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:console_control:console-control-strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:console_control:console_control_strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:console:console-control-strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:console:console_control_strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:console-control-strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:console_control_strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/console-control-strings/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/convert-source-map@1.9.0?package-id=ac92dc16c997d613", + "type": "library", + "author": "Thorsten Lorenz (http://thlorenz.com)", + "name": "convert-source-map", + "version": "1.9.0", + "description": "Converts a source-map from/to different formats and allows adding/changing properties.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:convert-source-map:convert-source-map:1.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/convert-source-map@1.9.0", + "externalReferences": [ + { + "url": "git://github.com/thlorenz/convert-source-map.git", + "type": "distribution" + }, + { + "url": "https://github.com/thlorenz/convert-source-map", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:convert-source-map:convert_source_map:1.9.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:convert_source_map:convert-source-map:1.9.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:convert_source_map:convert_source_map:1.9.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:convert-source:convert-source-map:1.9.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:convert-source:convert_source_map:1.9.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:convert_source:convert-source-map:1.9.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:convert_source:convert_source_map:1.9.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:thlorenz:convert-source-map:1.9.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:thlorenz:convert_source_map:1.9.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:convert:convert-source-map:1.9.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:convert:convert_source_map:1.9.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/convert-source-map/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/corepack@0.17.0?package-id=9d78c3bef9c05db3", + "type": "library", + "name": "corepack", + "version": "0.17.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:corepack:corepack:0.17.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/corepack@0.17.0", + "externalReferences": [ + { + "url": "https://github.com/nodejs/corepack.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/corepack#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:corepack:0.17.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/corepack/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/cssesc@3.0.0?package-id=91a6a74efc4b88ba", + "type": "library", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "cssesc", + "version": "3.0.0", + "description": "A JavaScript library for escaping CSS strings and identifiers while generating the shortest possible ASCII-only output.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mathiasbynens:cssesc:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cssesc@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/mathiasbynens/cssesc.git", + "type": "distribution" + }, + { + "url": "https://mths.be/cssesc", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cssesc:cssesc:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/cssesc/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/csstype@3.1.2?package-id=dd043d3981d2ba98", + "type": "library", + "author": "Fredrik Nicol ", + "name": "csstype", + "version": "3.1.2", + "description": "Strict TypeScript and Flow types for style based on MDN data", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:csstype:csstype:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/csstype@3.1.2", + "externalReferences": [ + { + "url": "https://github.com/frenic/csstype", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:frenic:csstype:3.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/csstype/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/debug@4.3.4?package-id=993ae003f6359971", + "type": "library", + "author": "Josh Junon ", + "name": "debug", + "version": "4.3.4", + "description": "Lightweight debugging utility for Node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debug-js:debug:4.3.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@4.3.4", + "externalReferences": [ + { + "url": "git://github.com/debug-js/debug.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:debug:debug:4.3.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/debug/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/debug@4.3.4?package-id=744fe4d31961f128", + "type": "library", + "author": "Josh Junon ", + "name": "debug", + "version": "4.3.4", + "description": "Lightweight debugging utility for Node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debug-js:debug:4.3.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/debug@4.3.4", + "externalReferences": [ + { + "url": "git://github.com/debug-js/debug.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:debug:debug:4.3.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/debug/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/debuglog@1.0.1?package-id=de8cab91bb3727ee", + "type": "library", + "author": "Sam Roberts ", + "name": "debuglog", + "version": "1.0.1", + "description": "backport of util.debuglog from node v0.11", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sam-github:debuglog:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/debuglog@1.0.1", + "externalReferences": [ + { + "url": "https://github.com/sam-github/node-debuglog.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:debuglog:debuglog:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/debuglog/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/defaults@1.0.3?package-id=539a687773af61fe", + "type": "library", + "author": "Elijah Insua ", + "name": "defaults", + "version": "1.0.3", + "description": "merge single level defaults over a config object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:defaults:defaults:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/defaults@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/tmpvar/defaults.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tmpvar:defaults:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/defaults/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/delegates@1.0.0?package-id=ed0c22d60c260f5c", + "type": "library", + "name": "delegates", + "version": "1.0.0", + "description": "delegate methods and accessors to another property", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:delegates:delegates:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/delegates@1.0.0", + "externalReferences": [ + { + "url": "visionmedia/node-delegates", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/delegates/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/depd@1.1.2?package-id=8f51ca0c72f74b81", + "type": "library", + "author": "Douglas Christopher Wilson ", + "name": "depd", + "version": "1.1.2", + "description": "Deprecate all the things", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:depd:depd:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/depd@1.1.2", + "externalReferences": [ + { + "url": "dougwilson/nodejs-depd", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/depd/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/dezalgo@1.0.4?package-id=d8ccca0e738815bf", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "dezalgo", + "version": "1.0.4", + "description": "Contain async insanity so that the dark pony lord doesn't eat souls", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:dezalgo:dezalgo:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/dezalgo@1.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/dezalgo", + "type": "distribution" + }, + { + "url": "https://github.com/npm/dezalgo", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:dezalgo:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/dezalgo/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/diff@5.1.0?package-id=d6e2c2128602c71d", + "type": "library", + "name": "diff", + "version": "5.1.0", + "description": "A javascript text diff implementation.", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:kpdecker:diff:5.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/diff@5.1.0", + "externalReferences": [ + { + "url": "git://github.com/kpdecker/jsdiff.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:diff:diff:5.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/diff/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/electron-to-chromium@1.4.368?package-id=8942e71ffca7d4aa", + "type": "library", + "author": "Kilian Valkhof", + "name": "electron-to-chromium", + "version": "1.4.368", + "description": "Provides a list of electron-to-chromium version mappings", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:electron-to-chromium:electron-to-chromium:1.4.368:*:*:*:*:*:*:*", + "purl": "pkg:npm/electron-to-chromium@1.4.368", + "externalReferences": [ + { + "url": "https://github.com/kilian/electron-to-chromium/", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:electron-to-chromium:electron_to_chromium:1.4.368:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:electron_to_chromium:electron-to-chromium:1.4.368:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:electron_to_chromium:electron_to_chromium:1.4.368:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:electron-to:electron-to-chromium:1.4.368:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:electron-to:electron_to_chromium:1.4.368:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:electron_to:electron-to-chromium:1.4.368:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:electron_to:electron_to_chromium:1.4.368:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:electron:electron-to-chromium:1.4.368:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:electron:electron_to_chromium:1.4.368:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:kilian:electron-to-chromium:1.4.368:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:kilian:electron_to_chromium:1.4.368:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/electron-to-chromium/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/emoji-regex@8.0.0?package-id=6bb38678688ed46f", + "type": "library", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "emoji-regex", + "version": "8.0.0", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mathiasbynens:emoji-regex:8.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/emoji-regex@8.0.0", + "externalReferences": [ + { + "url": "https://github.com/mathiasbynens/emoji-regex.git", + "type": "distribution" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mathiasbynens:emoji_regex:8.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji-regex:emoji-regex:8.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji-regex:emoji_regex:8.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji_regex:emoji-regex:8.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji_regex:emoji_regex:8.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji:emoji-regex:8.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji:emoji_regex:8.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/emoji-regex/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/encoding@0.1.13?package-id=e65b6a429cd40212", + "type": "library", + "author": "Andris Reinman", + "name": "encoding", + "version": "0.1.13", + "description": "Convert encodings, uses iconv-lite", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:encoding:encoding:0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/encoding@0.1.13", + "externalReferences": [ + { + "url": "https://github.com/andris9/encoding.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:andris9:encoding:0.1.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/encoding/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/env-paths@2.2.1?package-id=d14634fe75802cac", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "env-paths", + "version": "2.2.1", + "description": "Get paths for storing things like data, config, cache, etc", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:env-paths:env-paths:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/env-paths@2.2.1", + "externalReferences": [ + { + "url": "sindresorhus/env-paths", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:env-paths:env_paths:2.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:env_paths:env-paths:2.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:env_paths:env_paths:2.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:env:env-paths:2.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:env:env_paths:2.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/env-paths/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/err-code@2.0.3?package-id=60b62094686938a4", + "type": "library", + "author": "IndigoUnited (http://indigounited.com)", + "name": "err-code", + "version": "2.0.3", + "description": "Create an error with a code", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:IndigoUnited:err-code:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/err-code@2.0.3", + "externalReferences": [ + { + "url": "git://github.com/IndigoUnited/js-err-code.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:IndigoUnited:err_code:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:err-code:err-code:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:err-code:err_code:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:err_code:err-code:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:err_code:err_code:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:err:err-code:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:err:err_code:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/err-code/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/esbuild@0.17.17?package-id=d5f46a3de691116e", + "type": "library", + "name": "esbuild", + "version": "0.17.17", + "description": "An extremely fast JavaScript and CSS bundler and minifier.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:esbuild:esbuild:0.17.17:*:*:*:*:*:*:*", + "purl": "pkg:npm/esbuild@0.17.17", + "externalReferences": [ + { + "url": "https://github.com/evanw/esbuild", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:evanw:esbuild:0.17.17:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/esbuild/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/escalade@3.1.1?package-id=1f9e670b10159a9", + "type": "library", + "author": "Luke Edwards (https://lukeed.com)", + "name": "escalade", + "version": "3.1.1", + "description": "A tiny (183B to 210B) and fast utility to ascend parent directories", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:escalade:escalade:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/escalade@3.1.1", + "externalReferences": [ + { + "url": "lukeed/escalade", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/escalade/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/escape-string-regexp@1.0.5?package-id=aa9bccb87008aadf", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "escape-string-regexp", + "version": "1.0.5", + "description": "Escape RegExp special characters", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:escape-string-regexp:escape-string-regexp:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/escape-string-regexp@1.0.5", + "externalReferences": [ + { + "url": "sindresorhus/escape-string-regexp", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape-string-regexp:escape_string_regexp:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape_string_regexp:escape-string-regexp:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape_string_regexp:escape_string_regexp:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape-string:escape-string-regexp:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape-string:escape_string_regexp:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape_string:escape-string-regexp:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape_string:escape_string_regexp:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape:escape-string-regexp:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape:escape_string_regexp:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/escape-string-regexp/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/fastest-levenshtein@1.0.12?package-id=f703cf6832613e31", + "type": "library", + "author": "Kasper U. Weihe", + "name": "fastest-levenshtein", + "version": "1.0.12", + "description": "Fastest Levenshtein distance implementation in JS.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fastest-levenshtein:fastest-levenshtein:1.0.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/fastest-levenshtein@1.0.12", + "externalReferences": [ + { + "url": "git+https://github.com/ka-weihe/fastest-levenshtein.git", + "type": "distribution" + }, + { + "url": "https://github.com/ka-weihe/fastest-levenshtein#README", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fastest-levenshtein:fastest_levenshtein:1.0.12:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fastest_levenshtein:fastest-levenshtein:1.0.12:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fastest_levenshtein:fastest_levenshtein:1.0.12:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ka-weihe:fastest-levenshtein:1.0.12:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ka-weihe:fastest_levenshtein:1.0.12:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fastest:fastest-levenshtein:1.0.12:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fastest:fastest_levenshtein:1.0.12:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/fastest-levenshtein/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/fs-minipass@2.1.0?package-id=398fbbb28fb7e1f4", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs-minipass", + "version": "2.1.0", + "description": "fs read and write streams based on minipass", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-minipass@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs-minipass:fs_minipass:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs_minipass:fs-minipass:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs_minipass:fs_minipass:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:fs-minipass:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:fs_minipass:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs:fs-minipass:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs:fs_minipass:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/fs-minipass/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=21800424481533b1", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs.realpath", + "version": "1.0.0", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/fs.realpath/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/function-bind@1.1.1?package-id=44648bf09db15f6c", + "type": "library", + "author": "Raynos ", + "name": "function-bind", + "version": "1.1.1", + "description": "Implementation of Function.prototype.bind", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:function-bind:function-bind:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/function-bind@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/Raynos/function-bind.git", + "type": "distribution" + }, + { + "url": "https://github.com/Raynos/function-bind", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:function-bind:function_bind:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:function_bind:function-bind:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:function_bind:function_bind:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:function:function-bind:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:function:function_bind:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Raynos:function-bind:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Raynos:function_bind:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/function-bind/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/gauge@4.0.4?package-id=fc4632a6e143d550", + "type": "library", + "author": "GitHub Inc.", + "name": "gauge", + "version": "4.0.4", + "description": "A terminal based horizontal gauge", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:gauge:gauge:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/gauge@4.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/gauge.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/gauge", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:gauge:4.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/gauge/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/gensync@1.0.0-beta.2?package-id=a890b8e34087e307", + "type": "library", + "author": "Logan Smyth ", + "name": "gensync", + "version": "1.0.0-beta.2", + "description": "Allows users to use generators in order to write common functions that can be both sync or async.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:loganfsmyth:gensync:1.0.0-beta.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/gensync@1.0.0-beta.2", + "externalReferences": [ + { + "url": "https://github.com/loganfsmyth/gensync.git", + "type": "distribution" + }, + { + "url": "https://github.com/loganfsmyth/gensync", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gensync:gensync:1.0.0-beta.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/gensync/package.json" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/evanw/esbuild@v0.0.0-20230416212240-0776a4be2bb8?package-id=1a58132c409b03be", + "type": "library", + "name": "github.com/evanw/esbuild", + "version": "v0.0.0-20230416212240-0776a4be2bb8", + "cpe": "cpe:2.3:a:evanw:esbuild:v0.0.0-20230416212240-0776a4be2bb8:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/evanw/esbuild@v0.0.0-20230416212240-0776a4be2bb8", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { + "name": "syft:package:language", + "value": "go" + }, + { + "name": "syft:package:metadataType", + "value": "GolangBinMetadata" + }, + { + "name": "syft:package:type", + "value": "go-module" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@esbuild/linux-x64/bin/esbuild" + }, + { + "name": "syft:metadata:architecture", + "value": "amd64" + }, + { + "name": "syft:metadata:goBuildSettings:-buildmode", + "value": "exe" + }, + { + "name": "syft:metadata:goBuildSettings:-compiler", + "value": "gc" + }, + { + "name": "syft:metadata:goBuildSettings:-trimpath", + "value": "true" + }, + { + "name": "syft:metadata:goBuildSettings:CGO_ENABLED", + "value": "0" + }, + { + "name": "syft:metadata:goBuildSettings:GOAMD64", + "value": "v1" + }, + { + "name": "syft:metadata:goBuildSettings:GOARCH", + "value": "amd64" + }, + { + "name": "syft:metadata:goBuildSettings:GOOS", + "value": "linux" + }, + { + "name": "syft:metadata:goBuildSettings:vcs", + "value": "git" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.modified", + "value": "false" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.revision", + "value": "0776a4be2bb80980482b123a9a05dbf55cc35683" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.time", + "value": "2023-04-16T21:22:40Z" + }, + { + "name": "syft:metadata:goCompiledVersion", + "value": "go1.20.3" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/evanw/esbuild" + } + ] + }, + { + "bom-ref": "pkg:npm/glob@7.2.3?package-id=b961e222f6e54786", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.2.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:glob:glob:7.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/node-gyp/node_modules/glob/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/glob@7.2.3?package-id=37af2473a85a6fa0", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.2.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:glob:glob:7.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/rimraf/node_modules/glob/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/glob@8.0.3?package-id=f9282babaa70cabf", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "8.0.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:8.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/glob@8.0.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:glob:glob:8.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/glob/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/globals@11.12.0?package-id=db5bc99400beccdc", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "globals", + "version": "11.12.0", + "description": "Global identifiers from different JavaScript environments", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:globals:globals:11.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/globals@11.12.0", + "externalReferences": [ + { + "url": "sindresorhus/globals", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/globals/package.json" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8?package-id=e8299893ac7b524d", + "type": "library", + "name": "golang.org/x/sys", + "version": "v0.0.0-20220715151400-c0bba94af5f8", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20220715151400-c0bba94af5f8:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { + "name": "syft:package:language", + "value": "go" + }, + { + "name": "syft:package:metadataType", + "value": "GolangBinMetadata" + }, + { + "name": "syft:package:type", + "value": "go-module" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/@esbuild/linux-x64/bin/esbuild" + }, + { + "name": "syft:metadata:architecture", + "value": "amd64" + }, + { + "name": "syft:metadata:goCompiledVersion", + "value": "go1.20.3" + }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:0A+M6Uqn+Eje4kHMK80dtF3JCXC4ykBgQG4Fe06QRhQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/evanw/esbuild" + } + ] + }, + { + "bom-ref": "pkg:npm/graceful-fs@4.2.10?package-id=9591c6b5bd9602cc", + "type": "library", + "name": "graceful-fs", + "version": "4.2.10", + "description": "A drop-in replacement for fs, making various improvements.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/graceful-fs@4.2.10", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-graceful-fs", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:graceful-fs:graceful_fs:4.2.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:graceful_fs:graceful-fs:4.2.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:graceful_fs:graceful_fs:4.2.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:graceful:graceful-fs:4.2.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:graceful:graceful_fs:4.2.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:graceful-fs:4.2.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:graceful_fs:4.2.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/graceful-fs/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/has@1.0.3?package-id=57072cf8ae347274", + "type": "library", + "author": "Thiago de Arruda ", + "name": "has", + "version": "1.0.3", + "description": "Object.prototype.hasOwnProperty.call shortcut", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tarruda:has:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/has@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/tarruda/has.git", + "type": "distribution" + }, + { + "url": "https://github.com/tarruda/has", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/has/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/has-flag@3.0.0?package-id=66c59498ba967057", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "has-flag", + "version": "3.0.0", + "description": "Check if argv has a specific flag", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-flag:has-flag:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-flag@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/has-flag", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-flag:has_flag:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_flag:has-flag:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_flag:has_flag:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has-flag:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has_flag:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/has-flag/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/has-flag@4.0.0?package-id=1ac717b55f99f4f2", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "has-flag", + "version": "4.0.0", + "description": "Check if argv has a specific flag", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-flag:has-flag:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-flag@4.0.0", + "externalReferences": [ + { + "url": "sindresorhus/has-flag", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-flag:has_flag:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_flag:has-flag:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_flag:has_flag:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has-flag:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has_flag:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/has-flag/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/has-unicode@2.0.1?package-id=28dbbd6e7951181f", + "type": "library", + "author": "Rebecca Turner ", + "name": "has-unicode", + "version": "2.0.1", + "description": "Try to guess if your terminal supports unicode", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:has-unicode:has-unicode:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-unicode@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/iarna/has-unicode", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/has-unicode", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-unicode:has_unicode:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_unicode:has-unicode:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_unicode:has_unicode:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:has-unicode:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:has_unicode:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has-unicode:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has_unicode:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/has-unicode/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/hosted-git-info@5.2.1?package-id=daac03af08cd11f6", + "type": "library", + "author": "GitHub Inc.", + "name": "hosted-git-info", + "version": "5.2.1", + "description": "Provides metadata and conversions from repository urls for GitHub, Bitbucket and GitLab", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:hosted-git-info:hosted-git-info:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/hosted-git-info@5.2.1", + "externalReferences": [ + { + "url": "https://github.com/npm/hosted-git-info.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/hosted-git-info", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hosted-git-info:hosted_git_info:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hosted_git_info:hosted-git-info:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hosted_git_info:hosted_git_info:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hosted-git:hosted-git-info:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hosted-git:hosted_git_info:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hosted_git:hosted-git-info:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hosted_git:hosted_git_info:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hosted:hosted-git-info:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hosted:hosted_git_info:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:hosted-git-info:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:hosted_git_info:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/hosted-git-info/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/http-cache-semantics@4.1.1?package-id=916aa3ebe914a835", + "type": "library", + "author": "Kornel Lesiński (https://kornel.ski/)", + "name": "http-cache-semantics", + "version": "4.1.1", + "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:http-cache-semantics:http-cache-semantics:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-cache-semantics@4.1.1", + "externalReferences": [ + { + "url": "https://github.com/kornelski/http-cache-semantics.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http-cache-semantics:http_cache_semantics:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http_cache_semantics:http-cache-semantics:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http_cache_semantics:http_cache_semantics:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http-cache:http-cache-semantics:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http-cache:http_cache_semantics:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http_cache:http-cache-semantics:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http_cache:http_cache_semantics:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:kornelski:http-cache-semantics:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:kornelski:http_cache_semantics:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http:http-cache-semantics:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http:http_cache_semantics:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/http-cache-semantics/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/http-proxy-agent@5.0.0?package-id=af3d467415b1e643", + "type": "library", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "http-proxy-agent", + "version": "5.0.0", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-proxy-agent:http-proxy-agent:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-proxy-agent@5.0.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-http-proxy-agent.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http-proxy-agent:http_proxy_agent:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http_proxy_agent:http-proxy-agent:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http_proxy_agent:http_proxy_agent:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:http-proxy-agent:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:http_proxy_agent:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http-proxy:http-proxy-agent:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http-proxy:http_proxy_agent:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http_proxy:http-proxy-agent:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http_proxy:http_proxy_agent:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http:http-proxy-agent:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http:http_proxy_agent:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/http-proxy-agent/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/https-proxy-agent@5.0.1?package-id=b2694aac4dc305de", + "type": "library", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "https-proxy-agent", + "version": "5.0.1", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:https-proxy-agent:https-proxy-agent:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/https-proxy-agent@5.0.1", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-https-proxy-agent.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:https-proxy-agent:https_proxy_agent:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:https_proxy_agent:https-proxy-agent:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:https_proxy_agent:https_proxy_agent:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:https-proxy-agent:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:https_proxy_agent:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:https-proxy:https-proxy-agent:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:https-proxy:https_proxy_agent:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:https_proxy:https-proxy-agent:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:https_proxy:https_proxy_agent:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:https:https-proxy-agent:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:https:https_proxy_agent:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/https-proxy-agent/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/humanize-ms@1.2.1?package-id=d773c44dd2f9a86d", + "type": "library", + "author": "dead-horse (http://deadhorse.me)", + "name": "humanize-ms", + "version": "1.2.1", + "description": "transform humanize time to ms", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-modules:humanize-ms:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/humanize-ms@1.2.1", + "externalReferences": [ + { + "url": "https://github.com/node-modules/humanize-ms", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node-modules:humanize_ms:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:humanize-ms:humanize-ms:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:humanize-ms:humanize_ms:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:humanize_ms:humanize-ms:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:humanize_ms:humanize_ms:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:humanize:humanize-ms:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:humanize:humanize_ms:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/humanize-ms/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/iconv-lite@0.6.3?package-id=fc4965fa5a86a9c9", + "type": "library", + "author": "Alexander Shtuchkin ", + "name": "iconv-lite", + "version": "0.6.3", + "description": "Convert character encodings in pure javascript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/iconv-lite@0.6.3", + "externalReferences": [ + { + "url": "git://github.com/ashtuchkin/iconv-lite.git", + "type": "distribution" + }, + { + "url": "https://github.com/ashtuchkin/iconv-lite", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ashtuchkin:iconv_lite:0.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv-lite:iconv-lite:0.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv-lite:iconv_lite:0.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv_lite:iconv-lite:0.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv_lite:iconv_lite:0.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv:iconv-lite:0.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv:iconv_lite:0.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/iconv-lite/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ignore-walk@5.0.1?package-id=39d6166153eb8a8", + "type": "library", + "author": "GitHub Inc.", + "name": "ignore-walk", + "version": "5.0.1", + "description": "Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ignore-walk:ignore-walk:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ignore-walk@5.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/ignore-walk.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ignore-walk:ignore_walk:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ignore_walk:ignore-walk:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ignore_walk:ignore_walk:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ignore:ignore-walk:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ignore:ignore_walk:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:ignore-walk:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:ignore_walk:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/ignore-walk/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/imurmurhash@0.1.4?package-id=6444b4b295dc6bb1", + "type": "library", + "author": "Jens Taylor (https://github.com/homebrewing)", + "name": "imurmurhash", + "version": "0.1.4", + "description": "An incremental implementation of MurmurHash3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:imurmurhash:imurmurhash:0.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/imurmurhash@0.1.4", + "externalReferences": [ + { + "url": "https://github.com/jensyt/imurmurhash-js", + "type": "distribution" + }, + { + "url": "https://github.com/jensyt/imurmurhash-js", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jensyt:imurmurhash:0.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/imurmurhash/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/indent-string@4.0.0?package-id=9c9aada4281114e7", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "indent-string", + "version": "4.0.0", + "description": "Indent each line in a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indent-string:indent-string:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/indent-string@4.0.0", + "externalReferences": [ + { + "url": "sindresorhus/indent-string", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:indent-string:indent_string:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:indent_string:indent-string:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:indent_string:indent_string:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:indent:indent-string:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:indent:indent_string:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/indent-string/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/infer-owner@1.0.4?package-id=70041214f8f231ae", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "infer-owner", + "version": "1.0.4", + "description": "Infer the owner of a path based on the owner of its nearest existing parent", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:infer-owner:infer-owner:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/infer-owner@1.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/infer-owner", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:infer-owner:infer_owner:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:infer_owner:infer-owner:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:infer_owner:infer_owner:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:infer:infer-owner:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:infer:infer_owner:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:infer-owner:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:infer_owner:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/infer-owner/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/inflight@1.0.6?package-id=59c3c8a2d2437082", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "inflight", + "version": "1.0.6", + "description": "Add callbacks to requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "https://github.com/npm/inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:inflight:1.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:inflight:1.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/inflight/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/inherits@2.0.4?package-id=2aa76eeeb4a32e94", + "type": "library", + "name": "inherits", + "version": "2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/inherits", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:inherits:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/inherits/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ini@3.0.1?package-id=143d409d5161792", + "type": "library", + "author": "GitHub Inc.", + "name": "ini", + "version": "3.0.1", + "description": "An ini encoder/decoder for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ini:ini:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ini@3.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/ini.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:ini:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/ini/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/init-package-json@3.0.2?package-id=6836db1e46d935b6", + "type": "library", + "author": "GitHub Inc.", + "name": "init-package-json", + "version": "3.0.2", + "description": "A node module to get your node module started", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:init-package-json:init-package-json:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/init-package-json@3.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/init-package-json.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:init-package-json:init_package_json:3.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:init_package_json:init-package-json:3.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:init_package_json:init_package_json:3.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:init-package:init-package-json:3.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:init-package:init_package_json:3.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:init_package:init-package-json:3.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:init_package:init_package_json:3.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:init:init-package-json:3.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:init:init_package_json:3.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:init-package-json:3.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:init_package_json:3.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/init-package-json/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ip@2.0.0?package-id=218d1c05ea387b3c", + "type": "library", + "author": "Fedor Indutny ", + "name": "ip", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indutny:ip:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ip@2.0.0", + "externalReferences": [ + { + "url": "http://github.com/indutny/node-ip.git", + "type": "distribution" + }, + { + "url": "https://github.com/indutny/node-ip", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ip:ip:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/ip/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ip-regex@4.3.0?package-id=ce63365b733beafc", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ip-regex", + "version": "4.3.0", + "description": "Regular expression for matching IP addresses (IPv4 & IPv6)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ip-regex:ip-regex:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ip-regex@4.3.0", + "externalReferences": [ + { + "url": "sindresorhus/ip-regex", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ip-regex:ip_regex:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ip_regex:ip-regex:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ip_regex:ip_regex:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ip:ip-regex:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ip:ip_regex:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/ip-regex/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-cidr@4.0.2?package-id=b7267695f8ce1238", + "type": "library", + "author": "silverwind ", + "name": "is-cidr", + "version": "4.0.2", + "description": "Check if a string is an IP address in CIDR notation", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:is-cidr:is-cidr:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-cidr@4.0.2", + "externalReferences": [ + { + "url": "silverwind/is-cidr", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-cidr:is_cidr:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_cidr:is-cidr:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_cidr:is_cidr:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-cidr:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_cidr:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/is-cidr/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-core-module@2.10.0?package-id=22642820ec847015", + "type": "library", + "author": "Jordan Harband ", + "name": "is-core-module", + "version": "2.10.0", + "description": "Is this specifier a node.js core module?", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-core-module:is-core-module:2.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-core-module@2.10.0", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/is-core-module.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/is-core-module", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-core-module:is_core_module:2.10.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_core_module:is-core-module:2.10.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_core_module:is_core_module:2.10.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is-core-module:2.10.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is_core_module:2.10.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-core:is-core-module:2.10.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-core:is_core_module:2.10.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_core:is-core-module:2.10.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_core:is_core_module:2.10.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-core-module:2.10.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_core_module:2.10.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/is-core-module/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0?package-id=f89f6ce8e80b50d", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", + "externalReferences": [ + { + "url": "sindresorhus/is-fullwidth-code-point", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-fullwidth-code-point:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth_code_point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth_code_point:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-fullwidth-code:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-fullwidth-code:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth_code:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth_code:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-fullwidth:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-fullwidth:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/is-fullwidth-code-point/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-lambda@1.0.1?package-id=841af64487227951", + "type": "library", + "author": "Thomas Watson Steen (https://twitter.com/wa7son)", + "name": "is-lambda", + "version": "1.0.1", + "description": "Detect if your code is running on an AWS Lambda server", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-lambda:is-lambda:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-lambda@1.0.1", + "externalReferences": [ + { + "url": "https://github.com/watson/is-lambda.git", + "type": "distribution" + }, + { + "url": "https://github.com/watson/is-lambda", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-lambda:is_lambda:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_lambda:is-lambda:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_lambda:is_lambda:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:watson:is-lambda:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:watson:is_lambda:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-lambda:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_lambda:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/is-lambda/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/isexe@2.0.0?package-id=cac2857ecac9cad9", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "isexe", + "version": "2.0.0", + "description": "Minimal module to check if a file is executable.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:isexe:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isexe@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/isexe.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/isexe#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isexe:isexe:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/isexe/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/js-tokens@4.0.0?package-id=a6c352ced0bd5d6b", + "type": "library", + "author": "Simon Lydell", + "name": "js-tokens", + "version": "4.0.0", + "description": "A regex that tokenizes JavaScript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:js-tokens:js-tokens:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/js-tokens@4.0.0", + "externalReferences": [ + { + "url": "lydell/js-tokens", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:js-tokens:js_tokens:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:js_tokens:js-tokens:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:js_tokens:js_tokens:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:js:js-tokens:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:js:js_tokens:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/js-tokens/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/jsesc@2.5.2?package-id=36b922d10229a56", + "type": "library", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "jsesc", + "version": "2.5.2", + "description": "Given some data, jsesc returns the shortest possible stringified & ASCII-safe representation of that data.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mathiasbynens:jsesc:2.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsesc@2.5.2", + "externalReferences": [ + { + "url": "https://github.com/mathiasbynens/jsesc.git", + "type": "distribution" + }, + { + "url": "https://mths.be/jsesc", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jsesc:jsesc:2.5.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/jsesc/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/json-parse-even-better-errors@2.3.1?package-id=abf07f33abe9247b", + "type": "library", + "author": "Kat Marchán ", + "name": "json-parse-even-better-errors", + "version": "2.3.1", + "description": "JSON.parse with context information on error", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json-parse-even-better-errors:json-parse-even-better-errors:2.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-parse-even-better-errors@2.3.1", + "externalReferences": [ + { + "url": "https://github.com/npm/json-parse-even-better-errors", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json-parse-even-better-errors:json_parse_even_better_errors:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json_parse_even_better_errors:json-parse-even-better-errors:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json_parse_even_better_errors:json_parse_even_better_errors:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json-parse-even-better:json-parse-even-better-errors:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json-parse-even-better:json_parse_even_better_errors:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json_parse_even_better:json-parse-even-better-errors:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json_parse_even_better:json_parse_even_better_errors:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json-parse-even:json-parse-even-better-errors:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json-parse-even:json_parse_even_better_errors:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json_parse_even:json-parse-even-better-errors:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json_parse_even:json_parse_even_better_errors:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json-parse:json-parse-even-better-errors:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json-parse:json_parse_even_better_errors:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json_parse:json-parse-even-better-errors:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json_parse:json_parse_even_better_errors:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json:json-parse-even-better-errors:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json:json_parse_even_better_errors:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:json-parse-even-better-errors:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:json_parse_even_better_errors:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/json-parse-even-better-errors/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/json-stringify-nice@1.1.4?package-id=e53e3b4efad53e7c", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "json-stringify-nice", + "version": "1.1.4", + "description": "Stringify an object sorting scalars before objects, and defaulting to 2-space indent", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:json-stringify-nice:json-stringify-nice:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-stringify-nice@1.1.4", + "externalReferences": [ + { + "url": "https://github.com/isaacs/json-stringify-nice", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json-stringify-nice:json_stringify_nice:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json_stringify_nice:json-stringify-nice:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json_stringify_nice:json_stringify_nice:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json-stringify:json-stringify-nice:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json-stringify:json_stringify_nice:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json_stringify:json-stringify-nice:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json_stringify:json_stringify_nice:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:json-stringify-nice:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:json_stringify_nice:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json:json-stringify-nice:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json:json_stringify_nice:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/json-stringify-nice/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/json5@2.2.3?package-id=a3f1f8b41488bcb1", + "type": "library", + "author": "Aseem Kishore ", + "name": "json5", + "version": "2.2.3", + "description": "JSON for Humans", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json5:json5:2.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/json5@2.2.3", + "externalReferences": [ + { + "url": "git+https://github.com/json5/json5.git", + "type": "distribution" + }, + { + "url": "http://json5.org/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/json5/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/jsonparse@1.3.1?package-id=4ac9c9dc14c89718", + "type": "library", + "author": "Tim Caswell ", + "name": "jsonparse", + "version": "1.3.1", + "description": "This is a pure-js JSON streaming parser for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:creationix:jsonparse:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonparse@1.3.1", + "externalReferences": [ + { + "url": "http://github.com/creationix/jsonparse.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jsonparse:jsonparse:1.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/jsonparse/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/just-diff@5.1.1?package-id=ce66f628f594c549", + "type": "library", + "author": "Angus Croll", + "name": "just-diff", + "version": "5.1.1", + "description": "Return an object representing the diffs between two objects. Supports jsonPatch protocol", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:just-diff:just-diff:5.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/just-diff@5.1.1", + "externalReferences": [ + { + "url": "https://github.com/angus-c/just", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:just-diff:just_diff:5.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:just_diff:just-diff:5.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:just_diff:just_diff:5.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:angus-c:just-diff:5.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:angus-c:just_diff:5.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:just:just-diff:5.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:just:just_diff:5.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/just-diff/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/just-diff-apply@5.4.1?package-id=11dfc45c877cf5ba", + "type": "library", + "author": "Angus Croll", + "name": "just-diff-apply", + "version": "5.4.1", + "description": "Apply a diff to an object. Optionally supports jsonPatch protocol", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:just-diff-apply:just-diff-apply:5.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/just-diff-apply@5.4.1", + "externalReferences": [ + { + "url": "https://github.com/angus-c/just", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:just-diff-apply:just_diff_apply:5.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:just_diff_apply:just-diff-apply:5.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:just_diff_apply:just_diff_apply:5.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:just-diff:just-diff-apply:5.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:just-diff:just_diff_apply:5.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:just_diff:just-diff-apply:5.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:just_diff:just_diff_apply:5.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:angus-c:just-diff-apply:5.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:angus-c:just_diff_apply:5.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:just:just-diff-apply:5.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:just:just_diff_apply:5.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/just-diff-apply/package.json" + } + ] + }, + { + "bom-ref": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.17.3&package-id=8126b232e2d3c608", + "type": "library", + "publisher": "Natanael Copa ", + "name": "libc-utils", + "version": "0.7.2-r3", + "description": "Meta package to pull in correct libc", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://alpinelinux.org", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "apkdb-cataloger" + }, + { + "name": "syft:package:metadataType", + "value": "ApkMetadata" + }, + { + "name": "syft:package:type", + "value": "apk" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:libc-utils:libc_utils:0.7.2-r3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:libc_utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:libc_utils:libc_utils:0.7.2-r3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:libc:libc-utils:0.7.2-r3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:libc:libc_utils:0.7.2-r3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b951f8a113f5cb174e44d411da76c4f72fef8e95ef1d03bcf4a1592a21a8aeb6" + }, + { + "name": "syft:location:0:path", + "value": "/lib/apk/db/installed" + }, + { + "name": "syft:metadata:gitCommitOfApkPort", + "value": "60424133be2e79bbfeff3d58147a22886f817ce2" + }, + { + "name": "syft:metadata:installedSize", + "value": "4096" + }, + { + "name": "syft:metadata:originPackage", + "value": "libc-dev" + }, + { + "name": "syft:metadata:pullChecksum", + "value": "Q19Gg06pBPiiG9UN94ql7qImsHSUQ=" + }, + { + "name": "syft:metadata:pullDependencies:0", + "value": "musl-utils" + }, + { + "name": "syft:metadata:size", + "value": "1485" + } + ] + }, + { + "bom-ref": "pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.3&package-id=d3084c788891fb28", + "type": "library", + "publisher": "Ariadne Conill ", + "name": "libcrypto3", + "version": "3.0.8-r3", + "description": "Crypto library from openssl", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libcrypto3:libcrypto3:3.0.8-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libcrypto3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "apkdb-cataloger" + }, + { + "name": "syft:package:metadataType", + "value": "ApkMetadata" + }, + { + "name": "syft:package:type", + "value": "apk" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:libcrypto3:libcrypto:3.0.8-r3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:libcrypto:libcrypto3:3.0.8-r3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:libcrypto:libcrypto:3.0.8-r3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b951f8a113f5cb174e44d411da76c4f72fef8e95ef1d03bcf4a1592a21a8aeb6" + }, + { + "name": "syft:location:0:path", + "value": "/lib/apk/db/installed" + }, + { + "name": "syft:metadata:gitCommitOfApkPort", + "value": "b2ba8be016cab98f44a49ca48f7d514799eff277" + }, + { + "name": "syft:metadata:installedSize", + "value": "4206592" + }, + { + "name": "syft:metadata:originPackage", + "value": "openssl" + }, + { + "name": "syft:metadata:provides:0", + "value": "so:libcrypto.so.3=3" + }, + { + "name": "syft:metadata:pullChecksum", + "value": "Q1cMUwxuSH1GdRU/3jE0siXde5Vt0=" + }, + { + "name": "syft:metadata:pullDependencies:0", + "value": "so:libc.musl-x86_64.so.1" + }, + { + "name": "syft:metadata:size", + "value": "1710299" + } + ] + }, + { + "bom-ref": "pkg:apk/alpine/libgcc@12.2.1_git20220924-r4?arch=x86_64&upstream=gcc&distro=alpine-3.17.3&package-id=4dbb63d06d9618e9", + "type": "library", + "publisher": "Ariadne Conill ", + "name": "libgcc", + "version": "12.2.1_git20220924-r4", + "description": "GNU C compiler runtime libraries", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libgcc:libgcc:12.2.1_git20220924-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libgcc@12.2.1_git20220924-r4?arch=x86_64&upstream=gcc&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "apkdb-cataloger" + }, + { + "name": "syft:package:metadataType", + "value": "ApkMetadata" + }, + { + "name": "syft:package:type", + "value": "apk" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b951f8a113f5cb174e44d411da76c4f72fef8e95ef1d03bcf4a1592a21a8aeb6" + }, + { + "name": "syft:location:0:path", + "value": "/lib/apk/db/installed" + }, + { + "name": "syft:metadata:gitCommitOfApkPort", + "value": "9e00048de95c04894440a2173c31767a6d9bc07b" + }, + { + "name": "syft:metadata:installedSize", + "value": "135168" + }, + { + "name": "syft:metadata:originPackage", + "value": "gcc" + }, + { + "name": "syft:metadata:provides:0", + "value": "so:libgcc_s.so.1=1" + }, + { + "name": "syft:metadata:pullChecksum", + "value": "Q1d4fD9hTpTHqbkXo3tGrnOndYENI=" + }, + { + "name": "syft:metadata:pullDependencies:0", + "value": "so:libc.musl-x86_64.so.1" + }, + { + "name": "syft:metadata:size", + "value": "54809" + } + ] + }, + { + "bom-ref": "pkg:npm/libnpmaccess@6.0.4?package-id=f3410b3d946e1c4d", + "type": "library", + "author": "GitHub Inc.", + "name": "libnpmaccess", + "version": "6.0.4", + "description": "programmatic library for `npm access` commands", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmaccess:libnpmaccess:6.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmaccess@6.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmaccess", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:libnpmaccess:6.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmaccess/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/libnpmdiff@4.0.5?package-id=ce3262e2c08529ea", + "type": "library", + "author": "GitHub Inc.", + "name": "libnpmdiff", + "version": "4.0.5", + "description": "The registry diff", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmdiff:libnpmdiff:4.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmdiff@4.0.5", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:libnpmdiff:4.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmdiff/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/libnpmexec@4.0.14?package-id=902cc2f16bb11ffc", + "type": "library", + "author": "GitHub Inc.", + "name": "libnpmexec", + "version": "4.0.14", + "description": "npm exec (npx) programmatic API", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmexec:libnpmexec:4.0.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmexec@4.0.14", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:libnpmexec:4.0.14:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmexec/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/libnpmfund@3.0.5?package-id=201ebcb5d992fa75", + "type": "library", + "author": "GitHub Inc.", + "name": "libnpmfund", + "version": "3.0.5", + "description": "Programmatic API for npm fund", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmfund:libnpmfund:3.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmfund@3.0.5", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:libnpmfund:3.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmfund/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/libnpmhook@8.0.4?package-id=5679bee9e2f7003c", + "type": "library", + "author": "GitHub Inc.", + "name": "libnpmhook", + "version": "8.0.4", + "description": "programmatic API for managing npm registry hooks", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmhook:libnpmhook:8.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmhook@8.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:libnpmhook:8.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmhook/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/libnpmorg@4.0.4?package-id=80c945656f22ba9d", + "type": "library", + "author": "GitHub Inc.", + "name": "libnpmorg", + "version": "4.0.4", + "description": "Programmatic api for `npm org` commands", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmorg:libnpmorg:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmorg@4.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmorg", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:libnpmorg:4.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmorg/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/libnpmpack@4.1.3?package-id=62f6985b14d7de3e", + "type": "library", + "author": "GitHub Inc.", + "name": "libnpmpack", + "version": "4.1.3", + "description": "Programmatic API for the bits behind npm pack", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmpack:libnpmpack:4.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmpack@4.1.3", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmpack", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:libnpmpack:4.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmpack/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/libnpmpublish@6.0.5?package-id=a970d9d2bf422a57", + "type": "library", + "author": "GitHub Inc.", + "name": "libnpmpublish", + "version": "6.0.5", + "description": "Programmatic API for the bits behind npm publish and unpublish", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmpublish:libnpmpublish:6.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmpublish@6.0.5", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmpublish", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:libnpmpublish:6.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmpublish/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/libnpmsearch@5.0.4?package-id=e3666452dd7e585d", + "type": "library", + "author": "GitHub Inc.", + "name": "libnpmsearch", + "version": "5.0.4", + "description": "Programmatic API for searching in npm and compatible registries.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmsearch:libnpmsearch:5.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmsearch@5.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmsearch", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:libnpmsearch:5.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmsearch/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/libnpmteam@4.0.4?package-id=95c3c29c4dcd60d1", + "type": "library", + "author": "GitHub Inc.", + "name": "libnpmteam", + "version": "4.0.4", + "description": "npm Team management APIs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmteam:libnpmteam:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmteam@4.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://npmjs.com/package/libnpmteam", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:libnpmteam:4.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmteam/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/libnpmversion@3.0.7?package-id=9ace162e3f4ca294", + "type": "library", + "author": "GitHub Inc.", + "name": "libnpmversion", + "version": "3.0.7", + "description": "library to do the things that 'npm version' does", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:libnpmversion:libnpmversion:3.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/libnpmversion@3.0.7", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:libnpmversion:3.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/libnpmversion/package.json" + } + ] + }, + { + "bom-ref": "pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.3&package-id=2a95f0251fba7a33", + "type": "library", + "publisher": "Ariadne Conill ", + "name": "libssl3", + "version": "3.0.8-r3", + "description": "SSL shared libraries", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:libssl3:libssl3:3.0.8-r3:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libssl3@3.0.8-r3?arch=x86_64&upstream=openssl&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://www.openssl.org/", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "apkdb-cataloger" + }, + { + "name": "syft:package:metadataType", + "value": "ApkMetadata" + }, + { + "name": "syft:package:type", + "value": "apk" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:libssl3:libssl:3.0.8-r3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:libssl:libssl3:3.0.8-r3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:libssl:libssl:3.0.8-r3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b951f8a113f5cb174e44d411da76c4f72fef8e95ef1d03bcf4a1592a21a8aeb6" + }, + { + "name": "syft:location:0:path", + "value": "/lib/apk/db/installed" + }, + { + "name": "syft:metadata:gitCommitOfApkPort", + "value": "b2ba8be016cab98f44a49ca48f7d514799eff277" + }, + { + "name": "syft:metadata:installedSize", + "value": "622592" + }, + { + "name": "syft:metadata:originPackage", + "value": "openssl" + }, + { + "name": "syft:metadata:provides:0", + "value": "so:libssl.so.3=3" + }, + { + "name": "syft:metadata:pullChecksum", + "value": "Q1AABw28u/ULXy0LIj4VbIvBPZFTA=" + }, + { + "name": "syft:metadata:pullDependencies:0", + "value": "so:libc.musl-x86_64.so.1" + }, + { + "name": "syft:metadata:pullDependencies:1", + "value": "so:libcrypto.so.3" + }, + { + "name": "syft:metadata:size", + "value": "246840" + } + ] + }, + { + "bom-ref": "pkg:apk/alpine/libstdc++@12.2.1_git20220924-r4?arch=x86_64&upstream=gcc&distro=alpine-3.17.3&package-id=3c33807c48d3ddd2", + "type": "library", + "publisher": "Ariadne Conill ", + "name": "libstdc++", + "version": "12.2.1_git20220924-r4", + "description": "GNU C++ standard runtime library", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:12.2.1_git20220924-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/libstdc++@12.2.1_git20220924-r4?arch=x86_64&upstream=gcc&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://gcc.gnu.org", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "apkdb-cataloger" + }, + { + "name": "syft:package:metadataType", + "value": "ApkMetadata" + }, + { + "name": "syft:package:type", + "value": "apk" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b951f8a113f5cb174e44d411da76c4f72fef8e95ef1d03bcf4a1592a21a8aeb6" + }, + { + "name": "syft:location:0:path", + "value": "/lib/apk/db/installed" + }, + { + "name": "syft:metadata:gitCommitOfApkPort", + "value": "9e00048de95c04894440a2173c31767a6d9bc07b" + }, + { + "name": "syft:metadata:installedSize", + "value": "2412544" + }, + { + "name": "syft:metadata:originPackage", + "value": "gcc" + }, + { + "name": "syft:metadata:provides:0", + "value": "so:libstdc++.so.6=6.0.30" + }, + { + "name": "syft:metadata:pullChecksum", + "value": "Q14xcDVBn1li3rJCyf9lgkam5FzKE=" + }, + { + "name": "syft:metadata:pullDependencies:0", + "value": "so:libc.musl-x86_64.so.1" + }, + { + "name": "syft:metadata:pullDependencies:1", + "value": "so:libgcc_s.so.1" + }, + { + "name": "syft:metadata:size", + "value": "800687" + } + ] + }, + { + "bom-ref": "pkg:npm/loose-envify@1.4.0?package-id=69432c96db359a25", + "type": "library", + "author": "Andres Suarez ", + "name": "loose-envify", + "version": "1.4.0", + "description": "Fast (and loose) selective `process.env` replacer using js-tokens instead of an AST", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:loose-envify:loose-envify:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/loose-envify@1.4.0", + "externalReferences": [ + { + "url": "git://github.com/zertosh/loose-envify.git", + "type": "distribution" + }, + { + "url": "https://github.com/zertosh/loose-envify", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:loose-envify:loose_envify:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:loose_envify:loose-envify:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:loose_envify:loose_envify:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:zertosh:loose-envify:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:zertosh:loose_envify:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:loose:loose-envify:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:loose:loose_envify:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/loose-envify/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/lru-cache@5.1.1?package-id=62ef6282c7453729", + "type": "library", + "author": "Isaac Z. Schlueter ", + "name": "lru-cache", + "version": "5.1.1", + "description": "A cache object that deletes the least-recently-used items.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lru-cache:lru-cache:5.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru-cache@5.1.1", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-lru-cache.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lru-cache:lru_cache:5.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lru_cache:lru-cache:5.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lru_cache:lru_cache:5.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:lru-cache:5.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:lru_cache:5.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lru:lru-cache:5.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lru:lru_cache:5.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/lru-cache/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/lru-cache@6.0.0?package-id=a9db11b8d6d48a85", + "type": "library", + "author": "Isaac Z. Schlueter ", + "name": "lru-cache", + "version": "6.0.0", + "description": "A cache object that deletes the least-recently-used items.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lru-cache:lru-cache:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru-cache@6.0.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-lru-cache.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lru-cache:lru_cache:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lru_cache:lru-cache:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lru_cache:lru_cache:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:lru-cache:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:lru_cache:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lru:lru-cache:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lru:lru_cache:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/semver/node_modules/lru-cache/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/lru-cache@7.13.2?package-id=be5c7dc6ddace7cd", + "type": "library", + "author": "Isaac Z. Schlueter ", + "name": "lru-cache", + "version": "7.13.2", + "description": "A cache object that deletes the least-recently-used items.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:lru-cache:lru-cache:7.13.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/lru-cache@7.13.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-lru-cache.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lru-cache:lru_cache:7.13.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lru_cache:lru-cache:7.13.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lru_cache:lru_cache:7.13.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:lru-cache:7.13.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:lru_cache:7.13.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lru:lru-cache:7.13.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lru:lru_cache:7.13.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/lru-cache/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/magic-string@0.27.0?package-id=971b9f8518a8027c", + "type": "library", + "author": "Rich Harris", + "name": "magic-string", + "version": "0.27.0", + "description": "Modify strings, generate sourcemaps", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:magic-string:magic-string:0.27.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/magic-string@0.27.0", + "externalReferences": [ + { + "url": "https://github.com/rich-harris/magic-string", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:magic-string:magic_string:0.27.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:magic_string:magic-string:0.27.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:magic_string:magic_string:0.27.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:rich-harris:magic-string:0.27.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:rich-harris:magic_string:0.27.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:magic:magic-string:0.27.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:magic:magic_string:0.27.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/magic-string/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/make-fetch-happen@10.2.1?package-id=d230079dee920278", + "type": "library", + "author": "GitHub Inc.", + "name": "make-fetch-happen", + "version": "10.2.1", + "description": "Opinionated, caching, retrying fetch client", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:make-fetch-happen:make-fetch-happen:10.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-fetch-happen@10.2.1", + "externalReferences": [ + { + "url": "https://github.com/npm/make-fetch-happen.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make-fetch-happen:make_fetch_happen:10.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_fetch_happen:make-fetch-happen:10.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_fetch_happen:make_fetch_happen:10.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make-fetch:make-fetch-happen:10.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make-fetch:make_fetch_happen:10.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_fetch:make-fetch-happen:10.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_fetch:make_fetch_happen:10.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make:make-fetch-happen:10.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make:make_fetch_happen:10.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:make-fetch-happen:10.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:make_fetch_happen:10.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/make-fetch-happen/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minimatch@3.1.2?package-id=32b47b032f3721ab", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.1.2", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:minimatch:3.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/node-gyp/node_modules/minimatch/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minimatch@3.1.2?package-id=7392185ecbfd5435", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.1.2", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:minimatch:3.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/rimraf/node_modules/minimatch/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minimatch@5.1.0?package-id=7bf8dbc1a2543e83", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "5.1.0", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch:minimatch:5.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimatch@5.1.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:minimatch:5.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/minimatch/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minipass@3.3.4?package-id=b613ca6e3e5e1fdb", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "3.3.4", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:3.3.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@3.3.4", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/minipass/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minipass-collect@1.0.2?package-id=48596b1d4dbb4f19", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-collect", + "version": "1.0.2", + "description": "A Minipass stream that collects all the data into a single chunk", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-collect:minipass-collect:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-collect@1.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass-collect:minipass_collect:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_collect:minipass-collect:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_collect:minipass_collect:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass-collect:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass_collect:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/minipass-collect/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minipass-fetch@2.1.1?package-id=1efc5437ba452e1d", + "type": "library", + "author": "GitHub Inc.", + "name": "minipass-fetch", + "version": "2.1.1", + "description": "An implementation of window.fetch in Node.js using Minipass streams", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minipass-fetch:minipass-fetch:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-fetch@2.1.1", + "externalReferences": [ + { + "url": "https://github.com/npm/minipass-fetch.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass-fetch:minipass_fetch:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_fetch:minipass-fetch:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_fetch:minipass_fetch:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass-fetch:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass_fetch:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:minipass-fetch:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:minipass_fetch:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/minipass-fetch/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minipass-flush@1.0.5?package-id=f00a260926226ede", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-flush", + "version": "1.0.5", + "description": "A Minipass stream that calls a flush function before emitting 'end'", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-flush:minipass-flush:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-flush@1.0.5", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass-flush.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass-flush:minipass_flush:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_flush:minipass-flush:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_flush:minipass_flush:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass-flush:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass_flush:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/minipass-flush/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minipass-json-stream@1.0.1?package-id=43ed818882788b6b", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-json-stream", + "version": "1.0.1", + "description": "Like JSONStream, but using Minipass streams", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minipass-json-stream:minipass-json-stream:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-json-stream@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/minipass-json-stream.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass-json-stream:minipass_json_stream:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_json_stream:minipass-json-stream:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_json_stream:minipass_json_stream:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass-json:minipass-json-stream:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass-json:minipass_json_stream:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_json:minipass-json-stream:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_json:minipass_json_stream:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass-json-stream:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass_json_stream:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/minipass-json-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minipass-pipeline@1.2.4?package-id=891713a52fe6cc27", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-pipeline", + "version": "1.2.4", + "description": "create a pipeline of streams using Minipass", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-pipeline@1.2.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass-pipeline:minipass_pipeline:1.2.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_pipeline:minipass_pipeline:1.2.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass-pipeline:1.2.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass_pipeline:1.2.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/minipass-pipeline/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minipass-sized@1.0.3?package-id=cd4842c35733398b", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-sized", + "version": "1.0.3", + "description": "A Minipass stream that raises an error if you get a different number of bytes than expected", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-sized:minipass-sized:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-sized@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass-sized.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass-sized:minipass_sized:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_sized:minipass-sized:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_sized:minipass_sized:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass-sized:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass_sized:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/minipass-sized/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minizlib@2.1.2?package-id=a651644b4f6a3e3", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minizlib", + "version": "2.1.2", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minizlib:minizlib:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minizlib@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/minizlib/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/mkdirp@1.0.4?package-id=9695628e211e131d", + "type": "library", + "name": "mkdirp", + "version": "1.0.4", + "description": "Recursively mkdir, like `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:mkdirp:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp@1.0.4", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-mkdirp.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mkdirp:mkdirp:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/mkdirp/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/mkdirp-infer-owner@2.0.0?package-id=cd2840516db98e09", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "mkdirp-infer-owner", + "version": "2.0.0", + "description": "mkdirp, but chown to the owner of the containing folder if possible and necessary", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:mkdirp-infer-owner:mkdirp-infer-owner:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp-infer-owner@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/mkdirp-infer-owner", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mkdirp-infer-owner:mkdirp_infer_owner:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mkdirp_infer_owner:mkdirp-infer-owner:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mkdirp_infer_owner:mkdirp_infer_owner:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mkdirp-infer:mkdirp-infer-owner:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mkdirp-infer:mkdirp_infer_owner:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mkdirp_infer:mkdirp-infer-owner:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mkdirp_infer:mkdirp_infer_owner:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mkdirp:mkdirp-infer-owner:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mkdirp:mkdirp_infer_owner:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/mkdirp-infer-owner/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ms@2.1.2?package-id=768982f4f716699d", + "type": "library", + "name": "ms", + "version": "2.1.2", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ms:ms:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "url": "zeit/ms", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/ms/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ms@2.1.2?package-id=baab6160abc8414d", + "type": "library", + "name": "ms", + "version": "2.1.2", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ms:ms:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "url": "zeit/ms", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/debug/node_modules/ms/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ms@2.1.3?package-id=56db25c219fa0f4e", + "type": "library", + "name": "ms", + "version": "2.1.3", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ms:ms:2.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/ms@2.1.3", + "externalReferences": [ + { + "url": "vercel/ms", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/ms/package.json" + } + ] + }, + { + "bom-ref": "pkg:apk/alpine/musl@1.2.3-r4?arch=x86_64&distro=alpine-3.17.3&package-id=d9700f02cf26e8b8", + "type": "library", + "publisher": "Timo Teräs ", + "name": "musl", + "version": "1.2.3-r4", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:musl-libc:musl:1.2.3-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl@1.2.3-r4?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "apkdb-cataloger" + }, + { + "name": "syft:package:metadataType", + "value": "ApkMetadata" + }, + { + "name": "syft:package:type", + "value": "apk" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:musl_libc:musl:1.2.3-r4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:musl:musl:1.2.3-r4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b951f8a113f5cb174e44d411da76c4f72fef8e95ef1d03bcf4a1592a21a8aeb6" + }, + { + "name": "syft:location:0:path", + "value": "/lib/apk/db/installed" + }, + { + "name": "syft:metadata:gitCommitOfApkPort", + "value": "f93af038c3de7146121c2ea8124ba5ce29b4b058" + }, + { + "name": "syft:metadata:installedSize", + "value": "634880" + }, + { + "name": "syft:metadata:originPackage", + "value": "musl" + }, + { + "name": "syft:metadata:provides:0", + "value": "so:libc.musl-x86_64.so.1=1" + }, + { + "name": "syft:metadata:pullChecksum", + "value": "Q1Pk7x1woArbB1nzkMPJPq1TECwus=" + }, + { + "name": "syft:metadata:size", + "value": "388955" + } + ] + }, + { + "bom-ref": "pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86_64&upstream=musl&distro=alpine-3.17.3&package-id=f71ecf5267e6c37b", + "type": "library", + "publisher": "Timo Teräs ", + "name": "musl-utils", + "version": "1.2.3-r4", + "description": "the musl c library (libc) implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "name": "AND" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + } + ], + "cpe": "cpe:2.3:a:musl-utils:musl-utils:1.2.3-r4:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86_64&upstream=musl&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://musl.libc.org/", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "apkdb-cataloger" + }, + { + "name": "syft:package:metadataType", + "value": "ApkMetadata" + }, + { + "name": "syft:package:type", + "value": "apk" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:musl-utils:musl_utils:1.2.3-r4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:musl_utils:musl-utils:1.2.3-r4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:musl_utils:musl_utils:1.2.3-r4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:musl-libc:musl-utils:1.2.3-r4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:musl-libc:musl_utils:1.2.3-r4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:musl:musl-utils:1.2.3-r4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:musl:musl_utils:1.2.3-r4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b951f8a113f5cb174e44d411da76c4f72fef8e95ef1d03bcf4a1592a21a8aeb6" + }, + { + "name": "syft:location:0:path", + "value": "/lib/apk/db/installed" + }, + { + "name": "syft:metadata:gitCommitOfApkPort", + "value": "f93af038c3de7146121c2ea8124ba5ce29b4b058" + }, + { + "name": "syft:metadata:installedSize", + "value": "135168" + }, + { + "name": "syft:metadata:originPackage", + "value": "musl" + }, + { + "name": "syft:metadata:provides:0", + "value": "cmd:getconf=1.2.3-r4" + }, + { + "name": "syft:metadata:provides:1", + "value": "cmd:getent=1.2.3-r4" + }, + { + "name": "syft:metadata:provides:2", + "value": "cmd:iconv=1.2.3-r4" + }, + { + "name": "syft:metadata:provides:3", + "value": "cmd:ldconfig=1.2.3-r4" + }, + { + "name": "syft:metadata:provides:4", + "value": "cmd:ldd=1.2.3-r4" + }, + { + "name": "syft:metadata:pullChecksum", + "value": "Q1ZWJL4eySx8nPSjF1FAJgQyvuNs4=" + }, + { + "name": "syft:metadata:pullDependencies:0", + "value": "scanelf" + }, + { + "name": "syft:metadata:pullDependencies:1", + "value": "so:libc.musl-x86_64.so.1" + }, + { + "name": "syft:metadata:size", + "value": "36697" + } + ] + }, + { + "bom-ref": "pkg:npm/mute-stream@0.0.8?package-id=b093eec725f75ac9", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "mute-stream", + "version": "0.0.8", + "description": "Bytes go in, but they don't come out (when muted).", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:mute-stream:mute-stream:0.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/mute-stream@0.0.8", + "externalReferences": [ + { + "url": "git://github.com/isaacs/mute-stream", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mute-stream:mute_stream:0.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mute_stream:mute-stream:0.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mute_stream:mute_stream:0.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:mute-stream:0.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:mute_stream:0.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mute:mute-stream:0.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mute:mute_stream:0.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/mute-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/nanoid@3.3.6?package-id=6f075b4897a421a8", + "type": "library", + "author": "Andrey Sitnik ", + "name": "nanoid", + "version": "3.3.6", + "description": "A tiny (116 bytes), secure URL-friendly unique string ID generator", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nanoid:nanoid:3.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/nanoid@3.3.6", + "externalReferences": [ + { + "url": "ai/nanoid", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/nanoid/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/negotiator@0.6.3?package-id=87cc6cb502ab228a", + "type": "library", + "name": "negotiator", + "version": "0.6.3", + "description": "HTTP content negotiation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:negotiator:negotiator:0.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/negotiator@0.6.3", + "externalReferences": [ + { + "url": "jshttp/negotiator", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/negotiator/package.json" + } + ] + }, + { + "bom-ref": "pkg:generic/node@16.20.0?package-id=323fb70fd91debb1", + "type": "application", + "name": "node", + "version": "16.20.0", + "cpe": "cpe:2.3:a:nodejs:node.js:16.20.0:*:*:*:*:*:*:*", + "purl": "pkg:generic/node@16.20.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "binary-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "BinaryMetadata" + }, + { + "name": "syft:package:type", + "value": "binary" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node.js:node.js:16.20.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node.js:nodejs:16.20.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:node.js:16.20.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:nodejs:16.20.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node.js:node:16.20.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node:node.js:16.20.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node:nodejs:16.20.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:node:16.20.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node:node:16.20.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/bin/node" + } + ] + }, + { + "bom-ref": "pkg:npm/node-gyp@9.1.0?package-id=594531fb28fce181", + "type": "library", + "author": "Nathan Rajlich (http://tootallnate.net)", + "name": "node-gyp", + "version": "9.1.0", + "description": "Node.js native addon build tool", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-gyp:node-gyp:9.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-gyp@9.1.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/node-gyp.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node-gyp:node_gyp:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_gyp:node-gyp:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_gyp:node_gyp:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:node-gyp:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:node_gyp:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node:node-gyp:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node:node_gyp:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/node-gyp/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/node-releases@2.0.10?package-id=361a582c376fcfd9", + "type": "library", + "author": "Sergey Rubanov ", + "name": "node-releases", + "version": "2.0.10", + "description": "Node.js releases data", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-releases:node-releases:2.0.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-releases@2.0.10", + "externalReferences": [ + { + "url": "chicoxyzzy/node-releases", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node-releases:node_releases:2.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_releases:node-releases:2.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_releases:node_releases:2.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node:node-releases:2.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node:node_releases:2.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/node-releases/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/nopt@5.0.0?package-id=16f8d211f06e4fc1", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "nopt", + "version": "5.0.0", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:nopt:nopt:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/nopt@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/nopt.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:nopt:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/node-gyp/node_modules/nopt/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/nopt@6.0.0?package-id=2da699f46c59247", + "type": "library", + "author": "GitHub Inc.", + "name": "nopt", + "version": "6.0.0", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:nopt:nopt:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/nopt@6.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/nopt.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:nopt:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/nopt/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/normalize-package-data@4.0.1?package-id=f65ac6113e729b71", + "type": "library", + "author": "GitHub Inc.", + "name": "normalize-package-data", + "version": "4.0.1", + "description": "Normalizes data that can be found in package.json files.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:normalize-package-data:normalize-package-data:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/normalize-package-data@4.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/normalize-package-data.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:normalize-package-data:normalize_package_data:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:normalize_package_data:normalize-package-data:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:normalize_package_data:normalize_package_data:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:normalize-package:normalize-package-data:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:normalize-package:normalize_package_data:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:normalize_package:normalize-package-data:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:normalize_package:normalize_package_data:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:normalize:normalize-package-data:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:normalize:normalize_package_data:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:normalize-package-data:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:normalize_package_data:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/normalize-package-data/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npm@8.19.4?package-id=3a7215c0f0fd939a", + "type": "library", + "author": "GitHub Inc.", + "name": "npm", + "version": "8.19.4", + "description": "a package manager for JavaScript", + "licenses": [ + { + "license": { + "id": "Artistic-2.0" + } + } + ], + "cpe": "cpe:2.3:a:npm:npm:8.19.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm@8.19.4", + "externalReferences": [ + { + "url": "https://github.com/npm/cli.git", + "type": "distribution" + }, + { + "url": "https://docs.npmjs.com/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npm-audit-report@3.0.0?package-id=838d59a41103d415", + "type": "library", + "author": "GitHub Inc.", + "name": "npm-audit-report", + "version": "3.0.0", + "description": "Given a response from the npm security api, render it into a variety of security reports", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-audit-report:npm-audit-report:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-audit-report@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-audit-report.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-audit-report#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-audit-report:npm_audit_report:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_audit_report:npm-audit-report:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_audit_report:npm_audit_report:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-audit:npm-audit-report:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-audit:npm_audit_report:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_audit:npm-audit-report:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_audit:npm_audit_report:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm-audit-report:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm_audit_report:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/npm-audit-report/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npm-bundled@1.1.2?package-id=d3fc92546524f1a0", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "npm-bundled", + "version": "1.1.2", + "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-bundled:npm-bundled:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-bundled@1.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-bundled.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-bundled:npm_bundled:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_bundled:npm-bundled:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_bundled:npm_bundled:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm-bundled:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm_bundled:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/@npmcli/installed-package-contents/node_modules/npm-bundled/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npm-bundled@2.0.1?package-id=4342e4ccfcb927ca", + "type": "library", + "author": "GitHub Inc.", + "name": "npm-bundled", + "version": "2.0.1", + "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-bundled:npm-bundled:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-bundled@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-bundled.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-bundled:npm_bundled:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_bundled:npm-bundled:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_bundled:npm_bundled:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm-bundled:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm_bundled:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/npm-bundled/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npm-init@0.0.0?package-id=e58118b5aaeeedd7", + "type": "library", + "name": "npm-init", + "version": "0.0.0", + "description": "an initter you init wit, innit?", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:npm-init:npm-init:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-init@0.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-init:npm_init:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_init:npm-init:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_init:npm_init:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm-init:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm_init:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/promzard/example/npm-init/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npm-install-checks@5.0.0?package-id=ea3011565b04383b", + "type": "library", + "author": "GitHub Inc.", + "name": "npm-install-checks", + "version": "5.0.0", + "description": "Check the engines and platform fields in package.json", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:npm-install-checks:npm-install-checks:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-install-checks@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-install-checks.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-install-checks:npm_install_checks:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_install_checks:npm-install-checks:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_install_checks:npm_install_checks:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-install:npm-install-checks:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-install:npm_install_checks:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_install:npm-install-checks:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_install:npm_install_checks:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm-install-checks:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm_install_checks:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/npm-install-checks/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npm-normalize-package-bin@1.0.1?package-id=7cccc2d8907ef9bb", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "npm-normalize-package-bin", + "version": "1.0.1", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-normalize-package-bin", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize-package-bin:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package_bin:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package_bin:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize-package:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize-package:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/npm-normalize-package-bin/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=3b502df6a54faf04", + "type": "library", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize-package-bin:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package_bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package_bin:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize-package:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize-package:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/bin-links/node_modules/npm-normalize-package-bin/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=cb496c88bc54cdd7", + "type": "library", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize-package-bin:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package_bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package_bin:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize-package:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize-package:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/npm-bundled/node_modules/npm-normalize-package-bin/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=3675dcedd841f8b6", + "type": "library", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize-package-bin:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package_bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package_bin:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize-package:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize-package:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/npm-packlist/node_modules/npm-normalize-package-bin/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=a6c4eec149dbad2b", + "type": "library", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize-package-bin:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package_bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package_bin:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize-package:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize-package:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/npm-pick-manifest/node_modules/npm-normalize-package-bin/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0?package-id=b373bbb7c439b789", + "type": "library", + "author": "GitHub Inc.", + "name": "npm-normalize-package-bin", + "version": "2.0.0", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-normalize-package-bin.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize-package-bin:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package_bin:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package_bin:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize-package:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize-package:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm-normalize-package-bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm_normalize_package_bin:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/read-package-json/node_modules/npm-normalize-package-bin/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npm-package-arg@9.1.0?package-id=30ebe98710a08c64", + "type": "library", + "author": "GitHub Inc.", + "name": "npm-package-arg", + "version": "9.1.0", + "description": "Parse the things that can be arguments to `npm install`", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-package-arg:npm-package-arg:9.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-package-arg@9.1.0", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-package-arg.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/npm-package-arg", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-package-arg:npm_package_arg:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_package_arg:npm-package-arg:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_package_arg:npm_package_arg:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-package:npm-package-arg:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-package:npm_package_arg:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_package:npm-package-arg:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_package:npm_package_arg:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm-package-arg:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm_package_arg:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/npm-package-arg/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npm-packlist@5.1.3?package-id=e87ec46a213d7a87", + "type": "library", + "author": "GitHub Inc.", + "name": "npm-packlist", + "version": "5.1.3", + "description": "Get a list of the files to add from a folder into an npm package", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-packlist:npm-packlist:5.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-packlist@5.1.3", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-packlist.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-packlist:npm_packlist:5.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_packlist:npm-packlist:5.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_packlist:npm_packlist:5.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm-packlist:5.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm_packlist:5.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/npm-packlist/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npm-pick-manifest@7.0.2?package-id=a9dc194030f7ba31", + "type": "library", + "author": "GitHub Inc.", + "name": "npm-pick-manifest", + "version": "7.0.2", + "description": "Resolves a matching manifest from a package metadata document according to standard npm semver resolution rules.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-pick-manifest:npm-pick-manifest:7.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-pick-manifest@7.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-pick-manifest.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-pick-manifest:npm_pick_manifest:7.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_pick_manifest:npm-pick-manifest:7.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_pick_manifest:npm_pick_manifest:7.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-pick:npm-pick-manifest:7.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-pick:npm_pick_manifest:7.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_pick:npm-pick-manifest:7.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_pick:npm_pick_manifest:7.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm-pick-manifest:7.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm_pick_manifest:7.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/npm-pick-manifest/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npm-profile@6.2.1?package-id=4b7db9f7ec8bd8ec", + "type": "library", + "author": "GitHub Inc.", + "name": "npm-profile", + "version": "6.2.1", + "description": "Library for updating an npmjs.com profile", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-profile:npm-profile:6.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-profile@6.2.1", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-profile.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-profile:npm_profile:6.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_profile:npm-profile:6.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_profile:npm_profile:6.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm-profile:6.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm_profile:6.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/npm-profile/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npm-registry-fetch@13.3.1?package-id=4a24a52ce2bed90", + "type": "library", + "author": "GitHub Inc.", + "name": "npm-registry-fetch", + "version": "13.3.1", + "description": "Fetch-based http client for use with npm registry APIs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-registry-fetch:npm-registry-fetch:13.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-registry-fetch@13.3.1", + "externalReferences": [ + { + "url": "https://github.com/npm/npm-registry-fetch.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-registry-fetch:npm_registry_fetch:13.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_registry_fetch:npm-registry-fetch:13.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_registry_fetch:npm_registry_fetch:13.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-registry:npm-registry-fetch:13.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-registry:npm_registry_fetch:13.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_registry:npm-registry-fetch:13.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_registry:npm_registry_fetch:13.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm-registry-fetch:13.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm_registry_fetch:13.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/npm-registry-fetch/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npm-user-validate@1.0.1?package-id=6154858fa52c8fec", + "type": "library", + "author": "Robert Kowalski ", + "name": "npm-user-validate", + "version": "1.0.1", + "description": "User validations for npm", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:npm-user-validate:npm-user-validate:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-user-validate@1.0.1", + "externalReferences": [ + { + "url": "git://github.com/npm/npm-user-validate.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-user-validate:npm_user_validate:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_user_validate:npm-user-validate:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_user_validate:npm_user_validate:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-user:npm-user-validate:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-user:npm_user_validate:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_user:npm-user-validate:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_user:npm_user_validate:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm-user-validate:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm_user_validate:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/npm-user-validate/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npmlog@6.0.2?package-id=e1d7f39551f111f", + "type": "library", + "author": "GitHub Inc.", + "name": "npmlog", + "version": "6.0.2", + "description": "logger for npm", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npmlog:npmlog:6.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npmlog@6.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/npmlog.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npmlog:6.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/npmlog/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/once@1.4.0?package-id=2bfb1efabaee8e52", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "once", + "version": "1.4.0", + "description": "Run a function exactly one time", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:once:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/once", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:once:once:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/once/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/opener@1.5.2?package-id=44a3614f9f359ab5", + "type": "library", + "author": "Domenic Denicola (https://domenic.me/)", + "name": "opener", + "version": "1.5.2", + "description": "Opens stuff, like webpages and files and executables, cross-platform", + "licenses": [ + { + "license": { + "name": "(WTFPL OR MIT)" + } + } + ], + "cpe": "cpe:2.3:a:opener:opener:1.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/opener@1.5.2", + "externalReferences": [ + { + "url": "domenic/opener", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/opener/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/p-map@4.0.0?package-id=1c07a8cbe4bd91d5", + "type": "library", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "p-map", + "version": "4.0.0", + "description": "Map over promises concurrently", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-map:p-map:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-map@4.0.0", + "externalReferences": [ + { + "url": "sindresorhus/p-map", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p-map:p_map:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_map:p-map:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_map:p_map:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p-map:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p_map:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/p-map/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pacote@13.6.2?package-id=481670a57d8719a5", + "type": "library", + "author": "GitHub Inc.", + "name": "pacote", + "version": "13.6.2", + "description": "JavaScript package downloader", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:pacote:pacote:13.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/pacote@13.6.2", + "externalReferences": [ + { + "url": "https://github.com/npm/pacote.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:pacote:13.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/pacote/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/parse-conflict-json@2.0.2?package-id=94638d4f43f17ad7", + "type": "library", + "author": "GitHub Inc.", + "name": "parse-conflict-json", + "version": "2.0.2", + "description": "Parse a JSON string that has git merge conflicts, resolving if possible", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:parse-conflict-json:parse-conflict-json:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/parse-conflict-json@2.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/parse-conflict-json.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parse-conflict-json:parse_conflict_json:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parse_conflict_json:parse-conflict-json:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parse_conflict_json:parse_conflict_json:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parse-conflict:parse-conflict-json:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parse-conflict:parse_conflict_json:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parse_conflict:parse-conflict-json:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parse_conflict:parse_conflict_json:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parse:parse-conflict-json:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parse:parse_conflict_json:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:parse-conflict-json:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:parse_conflict_json:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/parse-conflict-json/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=ed58648f2f773bd9", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-is-absolute", + "version": "1.0.1", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "sindresorhus/path-is-absolute", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path-is-absolute:path_is_absolute:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path_is_absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path_is_absolute:path_is_absolute:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path-is:path-is-absolute:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path-is:path_is_absolute:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path_is:path-is-absolute:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path_is:path_is_absolute:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path:path-is-absolute:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path:path_is_absolute:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/path-is-absolute/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/picocolors@1.0.0?package-id=da43d6fcad0d1ef1", + "type": "library", + "author": "Alexey Raspopov", + "name": "picocolors", + "version": "1.0.0", + "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:picocolors:picocolors:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/picocolors@1.0.0", + "externalReferences": [ + { + "url": "alexeyraspopov/picocolors", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/picocolors/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/postcss@8.4.23?package-id=420df4920604a1f", + "type": "library", + "author": "Andrey Sitnik ", + "name": "postcss", + "version": "8.4.23", + "description": "Tool for transforming styles with JS plugins", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss:postcss:8.4.23:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss@8.4.23", + "externalReferences": [ + { + "url": "postcss/postcss", + "type": "distribution" + }, + { + "url": "https://postcss.org/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/postcss/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/postcss-selector-parser@6.0.10?package-id=29dd6871004e9325", + "type": "library", + "name": "postcss-selector-parser", + "version": "6.0.10", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:postcss-selector-parser:postcss-selector-parser:6.0.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/postcss-selector-parser@6.0.10", + "externalReferences": [ + { + "url": "postcss/postcss-selector-parser", + "type": "distribution" + }, + { + "url": "https://github.com/postcss/postcss-selector-parser", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:postcss-selector-parser:postcss_selector_parser:6.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:postcss_selector_parser:postcss-selector-parser:6.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:postcss_selector_parser:postcss_selector_parser:6.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:postcss-selector:postcss-selector-parser:6.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:postcss-selector:postcss_selector_parser:6.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:postcss_selector:postcss-selector-parser:6.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:postcss_selector:postcss_selector_parser:6.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:postcss:postcss-selector-parser:6.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:postcss:postcss_selector_parser:6.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/postcss-selector-parser/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/proc-log@2.0.1?package-id=a4591425ab5edc60", + "type": "library", + "author": "GitHub Inc.", + "name": "proc-log", + "version": "2.0.1", + "description": "just emit 'log' events on the process object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:proc-log:proc-log:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/proc-log@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/proc-log.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:proc-log:proc_log:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:proc_log:proc-log:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:proc_log:proc_log:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:proc:proc-log:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:proc:proc_log:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:proc-log:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:proc_log:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/proc-log/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/promise-all-reject-late@1.0.1?package-id=7b92ff8460614d4f", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "promise-all-reject-late", + "version": "1.0.1", + "description": "Like Promise.all, but save rejections until all promises are resolved", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promise-all-reject-late:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-all-reject-late@1.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise-all-reject-late:promise_all_reject_late:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise_all_reject_late:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise_all_reject_late:promise_all_reject_late:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise-all-reject:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise-all-reject:promise_all_reject_late:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise_all_reject:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise_all_reject:promise_all_reject_late:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise-all:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise-all:promise_all_reject_late:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise_all:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise_all:promise_all_reject_late:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise:promise-all-reject-late:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise:promise_all_reject_late:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/promise-all-reject-late/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/promise-call-limit@1.0.1?package-id=2b0b41bd7b0aa502", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "promise-call-limit", + "version": "1.0.1", + "description": "Call an array of promise-returning functions, restricting concurrency to a specified limit.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promise-call-limit:promise-call-limit:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-call-limit@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/promise-call-limit", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise-call-limit:promise_call_limit:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise_call_limit:promise-call-limit:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise_call_limit:promise_call_limit:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise-call:promise-call-limit:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise-call:promise_call_limit:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise_call:promise-call-limit:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise_call:promise_call_limit:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise:promise-call-limit:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise:promise_call_limit:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/promise-call-limit/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/promise-inflight@1.0.1?package-id=8ae6caef1e6290fe", + "type": "library", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "promise-inflight", + "version": "1.0.1", + "description": "One promise for multiple requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promise-inflight:promise-inflight:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-inflight@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/promise-inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/promise-inflight#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise-inflight:promise_inflight:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise_inflight:promise-inflight:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise_inflight:promise_inflight:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise:promise-inflight:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise:promise_inflight:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:promise-inflight:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:promise_inflight:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/promise-inflight/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/promise-retry@2.0.1?package-id=7d483cd4a8ed637e", + "type": "library", + "author": "IndigoUnited (http://indigounited.com)", + "name": "promise-retry", + "version": "2.0.1", + "description": "Retries a function that returns a promise, leveraging the power of the retry module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:promise-retry:promise-retry:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-retry@2.0.1", + "externalReferences": [ + { + "url": "git://github.com/IndigoUnited/node-promise-retry.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise-retry:promise_retry:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise_retry:promise-retry:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise_retry:promise_retry:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:IndigoUnited:promise-retry:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:IndigoUnited:promise_retry:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise:promise-retry:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise:promise_retry:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/promise-retry/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/promzard@0.3.0?package-id=33cefe299422041", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "promzard", + "version": "0.3.0", + "description": "prompting wizardly", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promzard:promzard:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/promzard@0.3.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/promzard", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:promzard:0.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/promzard/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/qrcode-terminal@0.12.0?package-id=83c91f496595f73", + "type": "library", + "name": "qrcode-terminal", + "version": "0.12.0", + "description": "QRCodes, in the terminal", + "licenses": [ + { + "license": { + "name": "Apache 2.0" + } + } + ], + "cpe": "cpe:2.3:a:qrcode-terminal:qrcode-terminal:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/qrcode-terminal@0.12.0", + "externalReferences": [ + { + "url": "https://github.com/gtanner/qrcode-terminal", + "type": "distribution" + }, + { + "url": "https://github.com/gtanner/qrcode-terminal", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:qrcode-terminal:qrcode_terminal:0.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:qrcode_terminal:qrcode-terminal:0.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:qrcode_terminal:qrcode_terminal:0.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gtanner:qrcode-terminal:0.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gtanner:qrcode_terminal:0.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:qrcode:qrcode-terminal:0.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:qrcode:qrcode_terminal:0.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/qrcode-terminal/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/react@18.2.0?package-id=119a186b3b6e740f", + "type": "library", + "name": "react", + "version": "18.2.0", + "description": "React is a JavaScript library for building user interfaces.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:facebook:react:18.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/react@18.2.0", + "externalReferences": [ + { + "url": "https://github.com/facebook/react.git", + "type": "distribution" + }, + { + "url": "https://reactjs.org/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:react:react:18.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/react/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/react-dom@18.2.0?package-id=dd4cc9057ea60528", + "type": "library", + "name": "react-dom", + "version": "18.2.0", + "description": "React package for working with the DOM.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:react-dom:react-dom:18.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/react-dom@18.2.0", + "externalReferences": [ + { + "url": "https://github.com/facebook/react.git", + "type": "distribution" + }, + { + "url": "https://reactjs.org/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:react-dom:react_dom:18.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:react_dom:react-dom:18.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:react_dom:react_dom:18.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:facebook:react-dom:18.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:facebook:react_dom:18.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:react:react-dom:18.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:react:react_dom:18.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/react-dom/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/react-refresh@0.14.0?package-id=9e59d51a8d362dcf", + "type": "library", + "name": "react-refresh", + "version": "0.14.0", + "description": "React is a JavaScript library for building user interfaces.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:react-refresh:react-refresh:0.14.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/react-refresh@0.14.0", + "externalReferences": [ + { + "url": "https://github.com/facebook/react.git", + "type": "distribution" + }, + { + "url": "https://reactjs.org/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:react-refresh:react_refresh:0.14.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:react_refresh:react-refresh:0.14.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:react_refresh:react_refresh:0.14.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:facebook:react-refresh:0.14.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:facebook:react_refresh:0.14.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:react:react-refresh:0.14.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:react:react_refresh:0.14.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/react-refresh/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/read@1.0.7?package-id=cf65e05575a1a15", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "read", + "version": "1.0.7", + "description": "read(1) for node programs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:read:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/read@1.0.7", + "externalReferences": [ + { + "url": "git://github.com/isaacs/read.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read:read:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/read/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/read-cmd-shim@3.0.0?package-id=4b927be3f703982b", + "type": "library", + "author": "GitHub Inc.", + "name": "read-cmd-shim", + "version": "3.0.0", + "description": "Figure out what a cmd-shim is pointing at. This acts as the equivalent of fs.readlink.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-cmd-shim:read-cmd-shim:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-cmd-shim@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/read-cmd-shim.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/read-cmd-shim#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read-cmd-shim:read_cmd_shim:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read_cmd_shim:read-cmd-shim:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read_cmd_shim:read_cmd_shim:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read-cmd:read-cmd-shim:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read-cmd:read_cmd_shim:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read_cmd:read-cmd-shim:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read_cmd:read_cmd_shim:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read:read-cmd-shim:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read:read_cmd_shim:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:read-cmd-shim:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:read_cmd_shim:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/read-cmd-shim/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/read-package-json@5.0.2?package-id=d15e27cd5cddf2b4", + "type": "library", + "author": "GitHub Inc.", + "name": "read-package-json", + "version": "5.0.2", + "description": "The thing npm uses to read package.json files with semantics and defaults and validation", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-package-json:read-package-json:5.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-package-json@5.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/read-package-json.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read-package-json:read_package_json:5.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read_package_json:read-package-json:5.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read_package_json:read_package_json:5.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read-package:read-package-json:5.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read-package:read_package_json:5.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read_package:read-package-json:5.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read_package:read_package_json:5.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read:read-package-json:5.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read:read_package_json:5.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:read-package-json:5.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:read_package_json:5.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/read-package-json/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/read-package-json-fast@2.0.3?package-id=bb9e08c93f4b4c89", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "read-package-json-fast", + "version": "2.0.3", + "description": "Like read-package-json, but faster", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:read-package-json-fast:read-package-json-fast:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/read-package-json-fast@2.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/npm/read-package-json-fast.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read-package-json-fast:read_package_json_fast:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read_package_json_fast:read-package-json-fast:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read_package_json_fast:read_package_json_fast:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read-package-json:read-package-json-fast:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read-package-json:read_package_json_fast:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read_package_json:read-package-json-fast:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read_package_json:read_package_json_fast:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read-package:read-package-json-fast:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read-package:read_package_json_fast:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read_package:read-package-json-fast:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read_package:read_package_json_fast:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read:read-package-json-fast:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:read:read_package_json_fast:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/read-package-json-fast/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/readable-stream@3.6.0?package-id=32d9c32dd3126020", + "type": "library", + "name": "readable-stream", + "version": "3.6.0", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:3.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@3.6.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable-stream:readable_stream:3.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_stream:readable-stream:3.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_stream:readable_stream:3.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable:readable-stream:3.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable:readable_stream:3.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:readable-stream:3.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:readable_stream:3.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/readable-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/readdir-scoped-modules@1.1.0?package-id=33ac24742869be8b", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "readdir-scoped-modules", + "version": "1.1.0", + "description": "Like `fs.readdir` but handling `@org/module` dirs as if they were a single entry.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:readdir-scoped-modules:readdir-scoped-modules:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/readdir-scoped-modules@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/npm/readdir-scoped-modules", + "type": "distribution" + }, + { + "url": "https://github.com/npm/readdir-scoped-modules", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readdir-scoped-modules:readdir_scoped_modules:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readdir_scoped_modules:readdir-scoped-modules:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readdir_scoped_modules:readdir_scoped_modules:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readdir-scoped:readdir-scoped-modules:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readdir-scoped:readdir_scoped_modules:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readdir_scoped:readdir-scoped-modules:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readdir_scoped:readdir_scoped_modules:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readdir:readdir-scoped-modules:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readdir:readdir_scoped_modules:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:readdir-scoped-modules:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:readdir_scoped_modules:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/readdir-scoped-modules/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/retry@0.12.0?package-id=c3f319915fd297ec", + "type": "library", + "author": "Tim Koschützki (http://debuggable.com/)", + "name": "retry", + "version": "0.12.0", + "description": "Abstraction for exponential and custom retry strategies for failed operations.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tim-kos:retry:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/retry@0.12.0", + "externalReferences": [ + { + "url": "git://github.com/tim-kos/node-retry.git", + "type": "distribution" + }, + { + "url": "https://github.com/tim-kos/node-retry", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:retry:retry:0.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/retry/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/rimraf@3.0.2?package-id=92690f32c123c49b", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "rimraf", + "version": "3.0.2", + "description": "A deep deletion module for node (like `rm -rf`)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:rimraf:3.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/rimraf@3.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:rimraf:rimraf:3.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/rimraf/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/rollup@3.20.6?package-id=b21f07673d5f62c4", + "type": "library", + "author": "Rich Harris", + "name": "rollup", + "version": "3.20.6", + "description": "Next-generation ES module bundler", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:rollup:rollup:3.20.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/rollup@3.20.6", + "externalReferences": [ + { + "url": "rollup/rollup", + "type": "distribution" + }, + { + "url": "https://rollupjs.org/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/rollup/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=edf513d3ab46bee", + "type": "library", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "safe-buffer", + "version": "5.2.1", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe-buffer:safe_buffer:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe_buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe_buffer:safe_buffer:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:feross:safe-buffer:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:feross:safe_buffer:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe:safe-buffer:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe:safe_buffer:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/safe-buffer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=4ab2220d3f3f4961", + "type": "library", + "author": "Nikita Skovoroda (https://github.com/ChALkeR)", + "name": "safer-buffer", + "version": "2.1.2", + "description": "Modern Buffer API polyfill without footguns", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safer-buffer@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/ChALkeR/safer-buffer.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safer-buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safer_buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safer_buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safer:safer-buffer:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safer:safer_buffer:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/safer-buffer/package.json" + } + ] + }, + { + "bom-ref": "pkg:apk/alpine/scanelf@1.3.5-r1?arch=x86_64&upstream=pax-utils&distro=alpine-3.17.3&package-id=e903138d19e85b80", + "type": "library", + "publisher": "Natanael Copa ", + "name": "scanelf", + "version": "1.3.5-r1", + "description": "Scan ELF binaries for stuff", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:scanelf:scanelf:1.3.5-r1:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/scanelf@1.3.5-r1?arch=x86_64&upstream=pax-utils&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "apkdb-cataloger" + }, + { + "name": "syft:package:metadataType", + "value": "ApkMetadata" + }, + { + "name": "syft:package:type", + "value": "apk" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b951f8a113f5cb174e44d411da76c4f72fef8e95ef1d03bcf4a1592a21a8aeb6" + }, + { + "name": "syft:location:0:path", + "value": "/lib/apk/db/installed" + }, + { + "name": "syft:metadata:gitCommitOfApkPort", + "value": "e52243dbb02069f10d48440ccc5fd41fa5fc2236" + }, + { + "name": "syft:metadata:installedSize", + "value": "98304" + }, + { + "name": "syft:metadata:originPackage", + "value": "pax-utils" + }, + { + "name": "syft:metadata:provides:0", + "value": "cmd:scanelf=1.3.5-r1" + }, + { + "name": "syft:metadata:pullChecksum", + "value": "Q11dxYFsHvBFAzzHGDo5gOTDNJDyQ=" + }, + { + "name": "syft:metadata:pullDependencies:0", + "value": "so:libc.musl-x86_64.so.1" + }, + { + "name": "syft:metadata:size", + "value": "37687" + } + ] + }, + { + "bom-ref": "pkg:npm/scheduler@0.23.0?package-id=dbee862e13a93abe", + "type": "library", + "name": "scheduler", + "version": "0.23.0", + "description": "Cooperative scheduler for the browser environment.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:scheduler:scheduler:0.23.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/scheduler@0.23.0", + "externalReferences": [ + { + "url": "https://github.com/facebook/react.git", + "type": "distribution" + }, + { + "url": "https://reactjs.org/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:facebook:scheduler:0.23.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/scheduler/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/semver@6.3.0?package-id=42b22d3eb2eec221", + "type": "library", + "name": "semver", + "version": "6.3.0", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:semver:semver:6.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver@6.3.0", + "externalReferences": [ + { + "url": "https://github.com/npm/node-semver", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:semver:6.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/semver/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/semver@7.3.7?package-id=73e16bb8e099774", + "type": "library", + "author": "GitHub Inc.", + "name": "semver", + "version": "7.3.7", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:semver:semver:7.3.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/semver@7.3.7", + "externalReferences": [ + { + "url": "https://github.com/npm/node-semver.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:semver:7.3.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/semver/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/set-blocking@2.0.0?package-id=bac85cbb844de9c9", + "type": "library", + "author": "Ben Coe ", + "name": "set-blocking", + "version": "2.0.0", + "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:set-blocking:set-blocking:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/set-blocking@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/yargs/set-blocking.git", + "type": "distribution" + }, + { + "url": "https://github.com/yargs/set-blocking#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set-blocking:set_blocking:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set_blocking:set-blocking:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set_blocking:set_blocking:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:yargs:set-blocking:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:yargs:set_blocking:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set:set-blocking:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set:set_blocking:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/set-blocking/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/signal-exit@3.0.7?package-id=998659694cba1dfd", + "type": "library", + "author": "Ben Coe ", + "name": "signal-exit", + "version": "3.0.7", + "description": "when you want to fire an event no matter how a process exits.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:signal-exit:signal-exit:3.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/signal-exit@3.0.7", + "externalReferences": [ + { + "url": "https://github.com/tapjs/signal-exit.git", + "type": "distribution" + }, + { + "url": "https://github.com/tapjs/signal-exit", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:signal-exit:signal_exit:3.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:signal_exit:signal-exit:3.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:signal_exit:signal_exit:3.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:signal:signal-exit:3.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:signal:signal_exit:3.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tapjs:signal-exit:3.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tapjs:signal_exit:3.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/signal-exit/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/smart-buffer@4.2.0?package-id=ad322c124ae3043c", + "type": "library", + "author": "Josh Glazebrook", + "name": "smart-buffer", + "version": "4.2.0", + "description": "smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:JoshGlazebrook:smart-buffer:4.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/smart-buffer@4.2.0", + "externalReferences": [ + { + "url": "https://github.com/JoshGlazebrook/smart-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/JoshGlazebrook/smart-buffer/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:JoshGlazebrook:smart_buffer:4.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:smart-buffer:smart-buffer:4.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:smart-buffer:smart_buffer:4.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:smart_buffer:smart-buffer:4.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:smart_buffer:smart_buffer:4.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:smart:smart-buffer:4.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:smart:smart_buffer:4.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/smart-buffer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/socks@2.7.0?package-id=267f6eb3d489a8eb", + "type": "library", + "author": "Josh Glazebrook", + "name": "socks", + "version": "2.7.0", + "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:JoshGlazebrook:socks:2.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/socks@2.7.0", + "externalReferences": [ + { + "url": "https://github.com/JoshGlazebrook/socks.git", + "type": "distribution" + }, + { + "url": "https://github.com/JoshGlazebrook/socks/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks:socks:2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/socks/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/socks-proxy-agent@7.0.0?package-id=8dc0e605920052a1", + "type": "library", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "socks-proxy-agent", + "version": "7.0.0", + "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:socks-proxy-agent:socks-proxy-agent:7.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/socks-proxy-agent@7.0.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-socks-proxy-agent.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/node-socks-proxy-agent#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks-proxy-agent:socks_proxy_agent:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks_proxy_agent:socks-proxy-agent:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks_proxy_agent:socks_proxy_agent:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:socks-proxy-agent:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:socks_proxy_agent:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks-proxy:socks-proxy-agent:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks-proxy:socks_proxy_agent:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks_proxy:socks-proxy-agent:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks_proxy:socks_proxy_agent:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks:socks-proxy-agent:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks:socks_proxy_agent:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/socks-proxy-agent/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/source-map-js@1.0.2?package-id=a3c668f15b285603", + "type": "library", + "author": "Valentin 7rulnik Semirulnik ", + "name": "source-map-js", + "version": "1.0.2", + "description": "Generates and consumes source maps", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:source-map-js:source-map-js:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/source-map-js@1.0.2", + "externalReferences": [ + { + "url": "7rulnik/source-map-js", + "type": "distribution" + }, + { + "url": "https://github.com/7rulnik/source-map-js", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:source-map-js:source_map_js:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:source_map_js:source-map-js:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:source_map_js:source_map_js:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:source-map:source-map-js:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:source-map:source_map_js:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:source_map:source-map-js:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:source_map:source_map_js:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:7rulnik:source-map-js:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:7rulnik:source_map_js:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:source:source-map-js:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:source:source_map_js:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/source-map-js/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/spdx-correct@3.1.1?package-id=d6b0214947e454eb", + "type": "library", + "author": "Kyle E. Mitchell (https://kemitchell.com)", + "name": "spdx-correct", + "version": "3.1.1", + "description": "correct invalid SPDX expressions", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-correct:spdx-correct:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-correct@3.1.1", + "externalReferences": [ + { + "url": "jslicense/spdx-correct.js", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx-correct:spdx_correct:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx_correct:spdx-correct:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx_correct:spdx_correct:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx:spdx-correct:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx:spdx_correct:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/spdx-correct/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/spdx-exceptions@2.3.0?package-id=22aa1fb7c596c6c7", + "type": "library", + "author": "The Linux Foundation", + "name": "spdx-exceptions", + "version": "2.3.0", + "description": "list of SPDX standard license exceptions", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-exceptions:spdx-exceptions:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-exceptions@2.3.0", + "externalReferences": [ + { + "url": "kemitchell/spdx-exceptions.json", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx-exceptions:spdx_exceptions:2.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx_exceptions:spdx-exceptions:2.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx_exceptions:spdx_exceptions:2.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx:spdx-exceptions:2.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx:spdx_exceptions:2.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/spdx-exceptions/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/spdx-expression-parse@3.0.1?package-id=78c73c9b189e2783", + "type": "library", + "author": "Kyle E. Mitchell (https://kemitchell.com)", + "name": "spdx-expression-parse", + "version": "3.0.1", + "description": "parse SPDX license expressions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:spdx-expression-parse:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-expression-parse@3.0.1", + "externalReferences": [ + { + "url": "jslicense/spdx-expression-parse.js", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx-expression-parse:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx_expression_parse:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx_expression_parse:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx-expression:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx-expression:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx_expression:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx_expression:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/spdx-expression-parse/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/spdx-license-ids@3.0.11?package-id=6530ac28616ec508", + "type": "library", + "author": "Shinnosuke Watanabe (https://github.com/shinnn)", + "name": "spdx-license-ids", + "version": "3.0.11", + "description": "A list of SPDX license identifiers", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "cpe": "cpe:2.3:a:spdx-license-ids:spdx-license-ids:3.0.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/spdx-license-ids@3.0.11", + "externalReferences": [ + { + "url": "jslicense/spdx-license-ids", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx-license-ids:spdx_license_ids:3.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx_license_ids:spdx-license-ids:3.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx_license_ids:spdx_license_ids:3.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx-license:spdx-license-ids:3.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx-license:spdx_license_ids:3.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx_license:spdx-license-ids:3.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx_license:spdx_license_ids:3.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx:spdx-license-ids:3.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:spdx:spdx_license_ids:3.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/spdx-license-ids/package.json" + } + ] + }, + { + "bom-ref": "pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.3&package-id=b15247aafcd4a647", + "type": "library", + "publisher": "Sören Tempel ", + "name": "ssl_client", + "version": "1.35.0-r29", + "description": "EXternal ssl_client for busybox wget", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:ssl-client:ssl-client:1.35.0-r29:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://busybox.net/", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "apkdb-cataloger" + }, + { + "name": "syft:package:metadataType", + "value": "ApkMetadata" + }, + { + "name": "syft:package:type", + "value": "apk" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ssl-client:ssl_client:1.35.0-r29:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ssl_client:ssl-client:1.35.0-r29:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ssl_client:ssl_client:1.35.0-r29:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ssl:ssl-client:1.35.0-r29:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ssl:ssl_client:1.35.0-r29:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b951f8a113f5cb174e44d411da76c4f72fef8e95ef1d03bcf4a1592a21a8aeb6" + }, + { + "name": "syft:location:0:path", + "value": "/lib/apk/db/installed" + }, + { + "name": "syft:metadata:gitCommitOfApkPort", + "value": "1dbf7a793afae640ea643a055b6dd4f430ac116b" + }, + { + "name": "syft:metadata:installedSize", + "value": "28672" + }, + { + "name": "syft:metadata:originPackage", + "value": "busybox" + }, + { + "name": "syft:metadata:provides:0", + "value": "cmd:ssl_client=1.35.0-r29" + }, + { + "name": "syft:metadata:pullChecksum", + "value": "Q1QuqZjeP6XG85I29tOiCWofL8Cj0=" + }, + { + "name": "syft:metadata:pullDependencies:0", + "value": "so:libc.musl-x86_64.so.1" + }, + { + "name": "syft:metadata:pullDependencies:1", + "value": "so:libcrypto.so.3" + }, + { + "name": "syft:metadata:pullDependencies:2", + "value": "so:libssl.so.3" + }, + { + "name": "syft:metadata:size", + "value": "4929" + } + ] + }, + { + "bom-ref": "pkg:npm/ssri@9.0.1?package-id=49986701356bf646", + "type": "library", + "author": "GitHub Inc.", + "name": "ssri", + "version": "9.0.1", + "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ssri:ssri:9.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ssri@9.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/ssri.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:ssri:9.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/ssri/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/string-width@4.2.3?package-id=c50e61a77e3ea809", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "4.2.3", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-width:string-width:4.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@4.2.3", + "externalReferences": [ + { + "url": "sindresorhus/string-width", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string-width:string_width:4.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_width:string-width:4.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_width:string_width:4.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string-width:4.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string_width:4.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/string-width/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/string_decoder@1.3.0?package-id=ca8af4aa6b41ca75", + "type": "library", + "name": "string_decoder", + "version": "1.3.0", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string-decoder:string_decoder:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_decoder:string-decoder:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_decoder:string_decoder:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:string-decoder:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:string_decoder:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string-decoder:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string_decoder:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/string_decoder/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/strip-ansi@6.0.1?package-id=5ec73c7d72940ceb", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "6.0.1", + "description": "Strip ANSI escape codes from a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@6.0.1", + "externalReferences": [ + { + "url": "chalk/strip-ansi", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip-ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip-ansi:6.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip_ansi:6.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/strip-ansi/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/supports-color@5.5.0?package-id=3ede0cf79e5908d1", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "supports-color", + "version": "5.5.0", + "description": "Detect whether a terminal supports color", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-color:supports-color:5.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-color@5.5.0", + "externalReferences": [ + { + "url": "chalk/supports-color", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports-color:supports_color:5.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports_color:supports-color:5.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports_color:supports_color:5.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports:supports-color:5.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports:supports_color:5.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/supports-color/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/supports-color@7.2.0?package-id=4c97deb16c788c95", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "supports-color", + "version": "7.2.0", + "description": "Detect whether a terminal supports color", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-color:supports-color:7.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-color@7.2.0", + "externalReferences": [ + { + "url": "chalk/supports-color", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports-color:supports_color:7.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports_color:supports-color:7.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports_color:supports_color:7.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports:supports-color:7.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports:supports_color:7.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/supports-color/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/tar@6.1.11?package-id=97823590d9da9c9f", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "tar", + "version": "6.1.11", + "description": "tar for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm:tar:6.1.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/tar@6.1.11", + "externalReferences": [ + { + "url": "https://github.com/npm/node-tar.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tar:tar:6.1.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/tar/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/text-table@0.2.0?package-id=a124be9ad599668f", + "type": "library", + "author": "James Halliday (http://substack.net)", + "name": "text-table", + "version": "0.2.0", + "description": "borderless text tables with alignment", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:text-table:text-table:0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/text-table@0.2.0", + "externalReferences": [ + { + "url": "git://github.com/substack/text-table.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/text-table", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:text-table:text_table:0.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:text_table:text-table:0.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:text_table:text_table:0.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:substack:text-table:0.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:substack:text_table:0.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:text:text-table:0.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:text:text_table:0.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/text-table/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/tiny-relative-date@1.3.0?package-id=bc2a707c455ba496", + "type": "library", + "author": "Joseph Wynn (https://wildlyinaccurate.com/)", + "name": "tiny-relative-date", + "version": "1.3.0", + "description": "Tiny function that provides relative, human-readable dates.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tiny-relative-date:tiny-relative-date:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tiny-relative-date@1.3.0", + "externalReferences": [ + { + "url": "https://github.com/wildlyinaccurate/relative-date.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tiny-relative-date:tiny_relative_date:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tiny_relative_date:tiny-relative-date:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tiny_relative_date:tiny_relative_date:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wildlyinaccurate:tiny-relative-date:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wildlyinaccurate:tiny_relative_date:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tiny-relative:tiny-relative-date:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tiny-relative:tiny_relative_date:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tiny_relative:tiny-relative-date:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tiny_relative:tiny_relative_date:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tiny:tiny-relative-date:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tiny:tiny_relative_date:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/tiny-relative-date/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/to-fast-properties@2.0.0?package-id=97f0cfcb39a3fee6", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "to-fast-properties", + "version": "2.0.0", + "description": "Force V8 to use fast properties for an object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:to-fast-properties:to-fast-properties:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/to-fast-properties@2.0.0", + "externalReferences": [ + { + "url": "sindresorhus/to-fast-properties", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to-fast-properties:to_fast_properties:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to_fast_properties:to-fast-properties:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to_fast_properties:to_fast_properties:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to-fast:to-fast-properties:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to-fast:to_fast_properties:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to_fast:to-fast-properties:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to_fast:to_fast_properties:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to:to-fast-properties:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to:to_fast_properties:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/to-fast-properties/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/treeverse@2.0.0?package-id=283d5c0745aa3ce7", + "type": "library", + "author": "GitHub Inc.", + "name": "treeverse", + "version": "2.0.0", + "description": "Walk any kind of tree structure depth- or breadth-first. Supports promises and advanced map-reduce operations with a very small API.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:treeverse:treeverse:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/treeverse@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/treeverse.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:treeverse:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/treeverse/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/typescript@4.9.5?package-id=a861cad55fb0e311", + "type": "library", + "author": "Microsoft Corp.", + "name": "typescript", + "version": "4.9.5", + "description": "TypeScript is a language for application scale JavaScript development", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:typescript:typescript:4.9.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/typescript@4.9.5", + "externalReferences": [ + { + "url": "https://github.com/Microsoft/TypeScript.git", + "type": "distribution" + }, + { + "url": "https://www.typescriptlang.org/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Microsoft:typescript:4.9.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/typescript/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/unique-filename@2.0.1?package-id=ddbea63cf5bc0343", + "type": "library", + "author": "GitHub Inc.", + "name": "unique-filename", + "version": "2.0.1", + "description": "Generate a unique filename for use in temporary directories or caches.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:unique-filename:unique-filename:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-filename@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/unique-filename.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/unique-filename", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique-filename:unique_filename:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique_filename:unique-filename:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique_filename:unique_filename:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique:unique-filename:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique:unique_filename:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:unique-filename:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:unique_filename:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:unique-filename:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:unique_filename:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/unique-filename/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/unique-slug@3.0.0?package-id=a61e6b90d7850f42", + "type": "library", + "author": "GitHub Inc.", + "name": "unique-slug", + "version": "3.0.0", + "description": "Generate a unique character string suitible for use in files and URLs.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:unique-slug:unique-slug:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-slug@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/unique-slug.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique-slug:unique_slug:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique_slug:unique-slug:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique_slug:unique_slug:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique:unique-slug:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique:unique_slug:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:unique-slug:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:unique_slug:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/unique-slug/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/update-browserslist-db@1.0.11?package-id=3d46231486611c7a", + "type": "library", + "author": "Andrey Sitnik ", + "name": "update-browserslist-db", + "version": "1.0.11", + "description": "CLI tool to update caniuse-lite to refresh target browsers from Browserslist config", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:update-browserslist-db:update-browserslist-db:1.0.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/update-browserslist-db@1.0.11", + "externalReferences": [ + { + "url": "browserslist/update-db", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:update-browserslist-db:update_browserslist_db:1.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:update_browserslist_db:update-browserslist-db:1.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:update_browserslist_db:update_browserslist_db:1.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:update-browserslist:update-browserslist-db:1.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:update-browserslist:update_browserslist_db:1.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:update_browserslist:update-browserslist-db:1.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:update_browserslist:update_browserslist_db:1.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:update:update-browserslist-db:1.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:update:update_browserslist_db:1.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/update-browserslist-db/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=ecf076cf26fe73d0", + "type": "library", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "util-deprecate", + "version": "1.0.2", + "description": "The Node.js `util.deprecate()` function with browser support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:util-deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:util_deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:util_deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:util-deprecate:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:util_deprecate:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:util:util-deprecate:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:util:util_deprecate:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/util-deprecate/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4?package-id=fa90b625ec15ead", + "type": "library", + "author": "Kyle E. Mitchell (https://kemitchell.com)", + "name": "validate-npm-package-license", + "version": "3.0.4", + "description": "Give me a string and I'll tell you if it's a valid npm package license string", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:validate-npm-package-license:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/validate-npm-package-license@3.0.4", + "externalReferences": [ + { + "url": "kemitchell/validate-npm-package-license.js", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate-npm-package-license:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate_npm_package_license:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate_npm_package_license:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate-npm-package:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate-npm-package:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate_npm_package:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate_npm_package:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate-npm:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate-npm:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate_npm:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate_npm:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/validate-npm-package-license/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/validate-npm-package-name@4.0.0?package-id=dc3a9f2b7a700330", + "type": "library", + "author": "GitHub Inc.", + "name": "validate-npm-package-name", + "version": "4.0.0", + "description": "Give me a string and I'll tell you if it's a valid npm package name", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:validate-npm-package-name:validate-npm-package-name:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/validate-npm-package-name@4.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/validate-npm-package-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/validate-npm-package-name", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate-npm-package-name:validate_npm_package_name:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate_npm_package_name:validate-npm-package-name:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate_npm_package_name:validate_npm_package_name:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate-npm-package:validate-npm-package-name:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate-npm-package:validate_npm_package_name:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate_npm_package:validate-npm-package-name:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate_npm_package:validate_npm_package_name:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate-npm:validate-npm-package-name:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate-npm:validate_npm_package_name:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate_npm:validate-npm-package-name:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate_npm:validate_npm_package_name:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate:validate-npm-package-name:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:validate:validate_npm_package_name:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:validate-npm-package-name:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:validate_npm_package_name:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/validate-npm-package-name/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/vite@4.3.0?package-id=6e9d1e2767d19067", + "type": "library", + "author": "Evan You", + "name": "vite", + "version": "4.3.0", + "description": "Native-ESM powered web dev build tool", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vitejs:vite:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/vite@4.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/vitejs/vite.git", + "type": "distribution" + }, + { + "url": "https://github.com/vitejs/vite/tree/main/#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:vite:vite:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/vite/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/walk-up-path@1.0.0?package-id=9a8dd6f20b12184f", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "walk-up-path", + "version": "1.0.0", + "description": "Given a path string, return a generator that walks up the path, emitting each dirname.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:walk-up-path:walk-up-path:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/walk-up-path@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/walk-up-path", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:walk-up-path:walk_up_path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:walk_up_path:walk-up-path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:walk_up_path:walk_up_path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:walk-up:walk-up-path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:walk-up:walk_up_path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:walk_up:walk-up-path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:walk_up:walk_up_path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:walk:walk-up-path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:walk:walk_up_path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/walk-up-path/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/wcwidth@1.0.1?package-id=ee54c63162090e16", + "type": "library", + "author": "Tim Oxley", + "name": "wcwidth", + "version": "1.0.1", + "description": "Port of C's wcwidth() and wcswidth()", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:timoxley:wcwidth:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/wcwidth@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/timoxley/wcwidth.git", + "type": "distribution" + }, + { + "url": "https://github.com/timoxley/wcwidth#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wcwidth:wcwidth:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/wcwidth/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/which@2.0.2?package-id=1d2beaa974655b97", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "which", + "version": "2.0.2", + "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:which:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/which@2.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-which.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which:which:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/which/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/wide-align@1.1.5?package-id=f0bd5200e29a21be", + "type": "library", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "wide-align", + "version": "1.1.5", + "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wide-align:wide-align:1.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/wide-align@1.1.5", + "externalReferences": [ + { + "url": "https://github.com/iarna/wide-align", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wide-align:wide_align:1.1.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wide_align:wide-align:1.1.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wide_align:wide_align:1.1.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:wide-align:1.1.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:wide_align:1.1.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wide:wide-align:1.1.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wide:wide_align:1.1.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/wide-align/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=88b7c304022dd8b8", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "wrappy", + "version": "1.0.2", + "description": "Callback wrapping utility", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/wrappy", + "type": "distribution" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:wrappy:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/wrappy/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/write-file-atomic@4.0.2?package-id=401a0baef0d4f8db", + "type": "library", + "author": "GitHub Inc.", + "name": "write-file-atomic", + "version": "4.0.2", + "description": "Write files in an atomic fashion w/configurable ownership", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:write-file-atomic:write-file-atomic:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/write-file-atomic@4.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/write-file-atomic.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/write-file-atomic", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:write-file-atomic:write_file_atomic:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:write_file_atomic:write-file-atomic:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:write_file_atomic:write_file_atomic:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:write-file:write-file-atomic:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:write-file:write_file_atomic:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:write_file:write-file-atomic:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:write_file:write_file_atomic:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:write:write-file-atomic:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:write:write_file_atomic:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:write-file-atomic:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:write_file_atomic:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/write-file-atomic/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/yallist@3.1.1?package-id=329b1104454e082", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "yallist", + "version": "3.1.1", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@3.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:2295fb8e80250579ed64483c2ac3f362518f9856a759676200e2834eaddee023" + }, + { + "name": "syft:location:0:path", + "value": "/app/node_modules/yallist/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/yallist@4.0.0?package-id=c5b3d2829d8d6201", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "yallist", + "version": "4.0.0", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1d8bcb7a961eba17f36a9bdfed6e988efc36f628f79df427609b92817a3888f6" + }, + { + "name": "syft:location:0:path", + "value": "/usr/local/lib/node_modules/npm/node_modules/yallist/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/yarn@1.22.19?package-id=f2b974a78000b26b", + "type": "library", + "name": "yarn", + "version": "1.22.19", + "description": "📦🐈 Fast, reliable, and secure dependency management.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:yarn:yarn:1.22.19:*:*:*:*:*:*:*", + "purl": "pkg:npm/yarn@1.22.19", + "externalReferences": [ + { + "url": "yarnpkg/yarn", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:metadataType", + "value": "NpmPackageJsonMetadata" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b951f8a113f5cb174e44d411da76c4f72fef8e95ef1d03bcf4a1592a21a8aeb6" + }, + { + "name": "syft:location:0:path", + "value": "/opt/yarn-v1.22.19/package.json" + } + ] + }, + { + "bom-ref": "pkg:apk/alpine/zlib@1.2.13-r0?arch=x86_64&distro=alpine-3.17.3&package-id=94014313cfcd2b71", + "type": "library", + "publisher": "Natanael Copa ", + "name": "zlib", + "version": "1.2.13-r0", + "description": "A compression/decompression Library", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib:zlib:1.2.13-r0:*:*:*:*:*:*:*", + "purl": "pkg:apk/alpine/zlib@1.2.13-r0?arch=x86_64&distro=alpine-3.17.3", + "externalReferences": [ + { + "url": "https://zlib.net/", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "apkdb-cataloger" + }, + { + "name": "syft:package:metadataType", + "value": "ApkMetadata" + }, + { + "name": "syft:package:type", + "value": "apk" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b951f8a113f5cb174e44d411da76c4f72fef8e95ef1d03bcf4a1592a21a8aeb6" + }, + { + "name": "syft:location:0:path", + "value": "/lib/apk/db/installed" + }, + { + "name": "syft:metadata:gitCommitOfApkPort", + "value": "bb37266b06a72d21d1fd850ef4b86665cf9ef70f" + }, + { + "name": "syft:metadata:installedSize", + "value": "110592" + }, + { + "name": "syft:metadata:originPackage", + "value": "zlib" + }, + { + "name": "syft:metadata:provides:0", + "value": "so:libz.so.1=1.2.13" + }, + { + "name": "syft:metadata:pullChecksum", + "value": "Q1rjnXT01l1PAxXheUxe4Oldl5rFk=" + }, + { + "name": "syft:metadata:pullDependencies:0", + "value": "so:libc.musl-x86_64.so.1" + }, + { + "name": "syft:metadata:size", + "value": "54258" + } + ] + }, + { + "type": "operating-system", + "name": "alpine", + "version": "3.17.3", + "description": "Alpine Linux v3.17", + "swid": { + "tagId": "alpine", + "name": "alpine", + "version": "3.17.3" + }, + "externalReferences": [ + { + "url": "https://gitlab.alpinelinux.org/alpine/aports/-/issues", + "type": "issue-tracker" + }, + { + "url": "https://alpinelinux.org/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:distro:id", + "value": "alpine" + }, + { + "name": "syft:distro:prettyName", + "value": "Alpine Linux v3.17" + }, + { + "name": "syft:distro:versionID", + "value": "3.17.3" + } + ] + } + ] +} diff --git a/backend/functions/scan.py b/backend/functions/scan.py index 47caadb..1686827 100644 --- a/backend/functions/scan.py +++ b/backend/functions/scan.py @@ -1,11 +1,14 @@ import os import json + +import numpy as np import pandas as pd +import functions.version as version_parser -def find_dependencies_in_sboms(name: str, version: str, source: str) -> object: - results = {} - output = {'label': source, 'name': source.lower(), 'type': source.lower()} +def find_dependencies_in_sboms(name: str, version: [str], source: str) -> object: + # output = {'label': source, 'name': source.lower(), 'type': source.lower(), 'results': []} + output = [] print("Searching for dependencies in SBOMs") path = './functions/sboms' for file in os.listdir(path): @@ -29,19 +32,6 @@ def find_dependencies_in_sboms(name: str, version: str, source: str) -> object: df = df[cols] df = df.rename( columns={'name': 'label', 'id': 'license_id', 'url': 'reference_url'}) - df = check_version(df, version) - df = df[df['label'].str.contains(name, case=False)] - if not df.empty: - results = df.to_dict(orient='index') - for v in results.values(): - v['sbomFile'] = file - v['sbomFormat'] = type - v['dockerImage'] = image - output['results'] = [{'label': v['label'], 'version': v['version'], 'sbomFile': v['sbomFile'], - 'sbomFormat': v['sbomFormat'], 'dockerImage': v['dockerImage']} for v in - results.values()] - - continue elif str(type).find('SPDX') != -1: packages = data['packages'] df = pd.json_normalize(packages) @@ -49,39 +39,72 @@ def find_dependencies_in_sboms(name: str, version: str, source: str) -> object: df = df[cols] df = df.rename( columns={'name': 'label', 'versionInfo': 'version'}) - df = check_version(df, version) - df = df[df['name'].str.contains(name, case=False)] - if not df.empty: - results[file] = df.to_dict(orient='index') - for v in results.values(): - v['file'] = file - v['sbomFormat'] = type - v['dockerImage'] = image - output['results'] = [{'label': v['label'], 'version': v['version'], 'sbomFile': v['sbomFile'], - 'sbomFormat': v['sbomFormat'], 'dockerImage': v['dockerImage']} for v in - results.values()] - continue else: continue + df = df[df['label'].str.contains(name, case=False)] + df = check_versions(df, version) + if not df.empty: + results = df.to_dict(orient='index') + for v in results.values(): + v['sbomFile'] = file + v['dockerImage'] = image + projectName = v['dockerImage'].split(':')[0] + dockerVersion = v['dockerImage'].split(':')[1] + temp = {'name': projectName, 'version': dockerVersion, 'dockerImage': v['dockerImage'], + 'sbomFile': v['sbomFile'], + 'results': [{'label': v['label'], 'version': v['version']} for v in + results.values()]} + output.append(temp) return output -def check_version(dataframe, version): - if version.__contains__('-'): - v = version.split('-') - return dataframe[[v[0] <= x <= v[1] for x in dataframe['version']]] - elif version.startswith('>='): - v = version[2:] - return dataframe[[x >= v for x in dataframe['version']]] - elif version.startswith('<='): - v = version[2:] - return dataframe[[x <= v for x in dataframe['version']]] - elif version.startswith('>'): - v = version[1:] - return dataframe[[x > v for x in dataframe['version']]] - elif version.startswith('<'): - v = version[1:] - return dataframe[[x < v for x in dataframe['version']]] +version_parser.Version('1.2.3') + + +def check_versions(dataframe, versions): + if isinstance(versions, list): + version_filters = [] + for version in versions: + if version.__contains__('-'): + v = version.split('-') + version_filters.append( + [version_parser.Version(v[0]) <= version_parser.Version(x) <= version_parser.Version(v[1]) for x in + dataframe['version']]) + elif version.startswith('>='): + v = version[2:] + version_filters.append( + [version_parser.Version(x) >= version_parser.Version(v) for x in dataframe['version']]) + elif version.startswith('<='): + v = version[2:] + version_filters.append( + [version_parser.Version(x) <= version_parser.Version(v) for x in dataframe['version']]) + elif version.startswith('>'): + v = version[1:] + version_filters.append( + [version_parser.Version(x) > version_parser.Version(v) for x in dataframe['version']]) + elif version.startswith('<'): + v = version[1:] + version_filters.append( + [version_parser.Version(x) < version_parser.Version(v) for x in dataframe['version']]) + else: + version_filters.append(dataframe['version'].str.contains(version, case=False)) + return dataframe[np.logical_or.reduce(version_filters)] else: - return dataframe[dataframe['version'].str.contains(version, case=False)] + if versions.__contains__('-'): + v = versions.split('-') + return dataframe[[version_parser.Version(v[0]) <= version_parser.Version(x) <= version_parser.Version(v[1]) for x in dataframe['version']]] + elif versions.startswith('>='): + v = versions[2:] + return dataframe[[version_parser.Version(x) >= version_parser.Version(v) for x in dataframe['version']]] + elif versions.startswith('<='): + v = versions[2:] + return dataframe[[version_parser.Version(x) <= version_parser.Version(v) for x in dataframe['version']]] + elif versions.startswith('>'): + v = versions[1:] + return dataframe[[version_parser.Version(x) > version_parser.Version(v) for x in dataframe['version']]] + elif versions.startswith('<'): + v = versions[1:] + return dataframe[[version_parser.Version(x) < version_parser.Version(v) for x in dataframe['version']]] + else: + return dataframe[dataframe['version'].str.contains(versions, case=False)] diff --git a/backend/playground/views.py b/backend/playground/views.py index 1e29066..2a45434 100644 --- a/backend/playground/views.py +++ b/backend/playground/views.py @@ -1,6 +1,7 @@ from rest_framework.views import APIView from rest_framework.response import Response import functions.scan as f +import ast # Create your views here. @@ -11,10 +12,11 @@ def get(self, request): name = request.GET.get('name', '') version = request.GET.get('version', '') source = request.GET.get('source', '') + version_list = ast.literal_eval(version) json = {'data': []} - json['data'].append(f.find_dependencies_in_sboms(name, version, source)) + json['data'].append(f.find_dependencies_in_sboms(name, version_list, source)) return Response(json) From e19498d21f6ea0a390904e5fa4ea36578c2af81d Mon Sep 17 00:00:00 2001 From: The0Danktor <94552546+The0Danktor@users.noreply.github.com> Date: Sat, 27 May 2023 15:17:03 +0200 Subject: [PATCH 06/91] Update scan.py --- backend/functions/scan.py | 4 ---- 1 file changed, 4 deletions(-) diff --git a/backend/functions/scan.py b/backend/functions/scan.py index 1686827..3da680f 100644 --- a/backend/functions/scan.py +++ b/backend/functions/scan.py @@ -58,10 +58,6 @@ def find_dependencies_in_sboms(name: str, version: [str], source: str) -> object return output - -version_parser.Version('1.2.3') - - def check_versions(dataframe, versions): if isinstance(versions, list): version_filters = [] From 0e009fc0aa31aaf43d8489c26084b4eb48881adb Mon Sep 17 00:00:00 2001 From: The0Danktor <94552546+The0Danktor@users.noreply.github.com> Date: Sat, 27 May 2023 15:17:17 +0200 Subject: [PATCH 07/91] Update scan.py --- backend/functions/scan.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/backend/functions/scan.py b/backend/functions/scan.py index 3da680f..dbe0164 100644 --- a/backend/functions/scan.py +++ b/backend/functions/scan.py @@ -58,6 +58,7 @@ def find_dependencies_in_sboms(name: str, version: [str], source: str) -> object return output + def check_versions(dataframe, versions): if isinstance(versions, list): version_filters = [] @@ -89,7 +90,9 @@ def check_versions(dataframe, versions): else: if versions.__contains__('-'): v = versions.split('-') - return dataframe[[version_parser.Version(v[0]) <= version_parser.Version(x) <= version_parser.Version(v[1]) for x in dataframe['version']]] + return dataframe[ + [version_parser.Version(v[0]) <= version_parser.Version(x) <= version_parser.Version(v[1]) for x in + dataframe['version']]] elif versions.startswith('>='): v = versions[2:] return dataframe[[version_parser.Version(x) >= version_parser.Version(v) for x in dataframe['version']]] From 3ffaa0f6e2cd9c29c47f2cc81a0fd2db1e751792 Mon Sep 17 00:00:00 2001 From: The0Danktor <94552546+The0Danktor@users.noreply.github.com> Date: Sat, 27 May 2023 15:20:17 +0200 Subject: [PATCH 08/91] Update 33.cyclonedx2.json --- backend/functions/sboms/33.cyclonedx2.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/functions/sboms/33.cyclonedx2.json b/backend/functions/sboms/33.cyclonedx2.json index f4ed336..8d31ed2 100644 --- a/backend/functions/sboms/33.cyclonedx2.json +++ b/backend/functions/sboms/33.cyclonedx2.json @@ -15,7 +15,7 @@ "component": { "bom-ref": "bda4f29ab64911b2", "type": "container", - "name": "project-d-circleci:latest", + "name": "Random_Web_React_Projects:latest", "version": "sha256:f3a9a1d21d1e0af79612fbf7f9c2cc966ad7d53655ba300943e67210394ab4ea" } }, From ee7431281f9bbd247f564f680700cb1af0398542 Mon Sep 17 00:00:00 2001 From: The0Danktor <94552546+The0Danktor@users.noreply.github.com> Date: Sat, 27 May 2023 15:34:39 +0200 Subject: [PATCH 09/91] test --- Dockerfile | 1 + version.txt | 1 + 2 files changed, 2 insertions(+) create mode 100644 version.txt diff --git a/Dockerfile b/Dockerfile index fa7758c..5e5be87 100644 --- a/Dockerfile +++ b/Dockerfile @@ -32,6 +32,7 @@ COPY ./backend . # Finally, combine the Next.js and Django stages FROM node + # Expose the required ports (e.g., 3000 for Next.js, 8000 for Django) EXPOSE 3000 EXPOSE 8000 diff --git a/version.txt b/version.txt new file mode 100644 index 0000000..446ba66 --- /dev/null +++ b/version.txt @@ -0,0 +1 @@ +0.1.4 \ No newline at end of file From ebc48c3010f70488ca59980229348d23235fc199 Mon Sep 17 00:00:00 2001 From: Lucas Prins Date: Sat, 27 May 2023 15:35:14 +0200 Subject: [PATCH 10/91] Front-end redesign --- ui/public/background.png | Bin 0 -> 58744 bytes .../{shared => _other}/EmptyState.tsx | 3 +- ui/src/components/_other/Header.tsx | 74 ++++ .../components/{shared => _other}/Icons.tsx | 95 ++++- ui/src/components/_other/Keybind.tsx | 16 + ui/src/components/_other/Layout.tsx | 73 ++++ ui/src/components/_other/Sidebar.tsx | 190 ++++++++++ .../search => _other/scan}/DataSourceRow.tsx | 2 +- ui/src/components/_other/scan/QueryList.tsx | 87 +++++ ui/src/components/_other/scan/ScanForm.tsx | 326 ++++++++++++++++++ .../components/_other/scan/VersionGuards.tsx | 166 +++++++++ .../{primitives => input}/Button.tsx | 23 +- ui/src/components/input/Checkbox.tsx | 78 +++++ .../{primitives => input}/SelectDropdown.tsx | 14 +- .../input/InputError.tsx | 0 .../input/InputField.tsx | 4 +- .../input/InputLabel.tsx | 0 ui/src/components/motion/ResizablePanel.tsx | 9 +- .../{shared => navigation}/cmdk/CMDK.tsx | 54 +-- .../{shared => navigation}/cmdk/CMDKItem.tsx | 0 .../{shared => navigation}/cmdk/Icons.tsx | 0 .../cmdk/pages/DataSources.tsx | 2 +- .../cmdk/pages/Home.tsx | 2 +- .../cmdk/pages/Theme.tsx | 2 +- .../components/other/search/SearchingIcon.tsx | 116 ------- ui/src/components/primitives/Dropdown.tsx | 29 -- ui/src/components/shared/Header.tsx | 44 --- ui/src/components/shared/Layout.tsx | 41 --- ui/src/components/shared/PageTitle.tsx | 21 -- ui/src/components/shared/Sidebar.tsx | 94 ----- ui/src/components/text/Body.tsx | 14 + ui/src/components/text/BodyBase.tsx | 14 + ui/src/components/text/BodyLarge.tsx | 17 + ui/src/components/text/BodyStrong.tsx | 14 + ui/src/components/text/Caption.tsx | 17 + ui/src/components/text/Display.tsx | 17 + ui/src/components/text/Subtitle.tsx | 17 + ui/src/components/text/Title.tsx | 19 + ui/src/components/text/TitleLarge.tsx | 14 + ui/src/pages/_app.tsx | 18 +- ui/src/pages/alerts.tsx | 2 +- ui/src/pages/data-sources.tsx | 15 +- ui/src/pages/index.tsx | 123 +++++-- ui/src/pages/login.tsx | 135 ++++---- ui/src/pages/scan.tsx | 92 +++++ ui/src/pages/search.tsx | 313 ----------------- ui/src/pages/setup.tsx | 6 +- ui/src/services/SearchService.ts | 4 +- ui/src/state/UI.ts | 41 +++ ui/src/styles/cmdk.css | 2 +- ui/src/styles/globals.css | 5 +- ui/src/types/api/search.d.ts | 16 + ui/src/types/api/search.ts | 12 - .../types/{dataSource.ts => dataSource.d.ts} | 0 .../types/{dependency.ts => dependency.d.ts} | 0 ui/src/types/scan.d.ts | 18 + ui/src/utils/fakeApi.ts | 37 ++ ui/src/utils/platform.ts | 17 + ui/src/utils/query.ts | 89 +++++ ui/tailwind.config.js | 10 +- 60 files changed, 1810 insertions(+), 853 deletions(-) create mode 100644 ui/public/background.png rename ui/src/components/{shared => _other}/EmptyState.tsx (93%) create mode 100644 ui/src/components/_other/Header.tsx rename ui/src/components/{shared => _other}/Icons.tsx (87%) create mode 100644 ui/src/components/_other/Keybind.tsx create mode 100644 ui/src/components/_other/Layout.tsx create mode 100644 ui/src/components/_other/Sidebar.tsx rename ui/src/components/{other/search => _other/scan}/DataSourceRow.tsx (97%) create mode 100644 ui/src/components/_other/scan/QueryList.tsx create mode 100644 ui/src/components/_other/scan/ScanForm.tsx create mode 100644 ui/src/components/_other/scan/VersionGuards.tsx rename ui/src/components/{primitives => input}/Button.tsx (73%) create mode 100644 ui/src/components/input/Checkbox.tsx rename ui/src/components/{primitives => input}/SelectDropdown.tsx (64%) rename ui/src/components/{primitives => input}/input/InputError.tsx (100%) rename ui/src/components/{primitives => input}/input/InputField.tsx (73%) rename ui/src/components/{primitives => input}/input/InputLabel.tsx (100%) rename ui/src/components/{shared => navigation}/cmdk/CMDK.tsx (71%) rename ui/src/components/{shared => navigation}/cmdk/CMDKItem.tsx (100%) rename ui/src/components/{shared => navigation}/cmdk/Icons.tsx (100%) rename ui/src/components/{shared => navigation}/cmdk/pages/DataSources.tsx (88%) rename ui/src/components/{shared => navigation}/cmdk/pages/Home.tsx (95%) rename ui/src/components/{shared => navigation}/cmdk/pages/Theme.tsx (90%) delete mode 100644 ui/src/components/other/search/SearchingIcon.tsx delete mode 100644 ui/src/components/primitives/Dropdown.tsx delete mode 100644 ui/src/components/shared/Header.tsx delete mode 100644 ui/src/components/shared/Layout.tsx delete mode 100644 ui/src/components/shared/PageTitle.tsx delete mode 100644 ui/src/components/shared/Sidebar.tsx create mode 100644 ui/src/components/text/Body.tsx create mode 100644 ui/src/components/text/BodyBase.tsx create mode 100644 ui/src/components/text/BodyLarge.tsx create mode 100644 ui/src/components/text/BodyStrong.tsx create mode 100644 ui/src/components/text/Caption.tsx create mode 100644 ui/src/components/text/Display.tsx create mode 100644 ui/src/components/text/Subtitle.tsx create mode 100644 ui/src/components/text/Title.tsx create mode 100644 ui/src/components/text/TitleLarge.tsx create mode 100644 ui/src/pages/scan.tsx delete mode 100644 ui/src/pages/search.tsx create mode 100644 ui/src/state/UI.ts create mode 100644 ui/src/types/api/search.d.ts delete mode 100644 ui/src/types/api/search.ts rename ui/src/types/{dataSource.ts => dataSource.d.ts} (100%) rename ui/src/types/{dependency.ts => dependency.d.ts} (100%) create mode 100644 ui/src/types/scan.d.ts create mode 100644 ui/src/utils/fakeApi.ts create mode 100644 ui/src/utils/platform.ts create mode 100644 ui/src/utils/query.ts diff --git a/ui/public/background.png b/ui/public/background.png new file mode 100644 index 0000000000000000000000000000000000000000..b399836c587ebba936a97150dc7f7e51482b160a GIT binary patch literal 58744 zcmYg%cT^MU8}2ugNvF5advA#%ML~)vs36#Yh)Bj>K!`mmkO^2;vAYT?Ag-&ff)XpJ zNWNg*6$LvglEH?ZK~MsOc*oy8_ni9|C!9>a^0w!F-e@*qwRen?YzQmJx4nFM%j5sIQT@F+555$Ev#HecnymaxDI#n zi{YBsm^%j8dW=NMZV+jv?y z1zI`@?L0>b+(x(ujot^x~@J#KD1a7YW(eA?WmYxwjGkbflNC)po zGaDa!uW&<4XSaYcPJYog9^t-0@kZ7jmL8+5-GbePsfm^V( zN4SOaFlXNwfm^80@Hls2oVlaO%-+w$&d1y?K;S&W+B3q%KZa-SXl&!*DIDh>7%T9K zFt_s;c#L!tPH+>(o7ws~{l2a!_rS4y3rCKzwZJvl#x2w(AkNxzl(YXBOQ+%1ZXvFL zanAl@J%nQoES%g$6V083mX0DLfh*6#$;Lgz+B4kH%Gt&%+)ET^?iT9g8)<6i?IDUY za}9R!A8Tyu?H3ep=@MjS=i}lRZRH%~>OV%{5^QAUZ0iwj;~wfgEZ)g4*4#eOK;Ulf z=x^&0VdfBE=NaKUJf3T2Z|O3^(lyw^dARTJI2O;u!hNKIRqOznMK1IG)TgSDeed?W3=!>!$ejqQAm?fo5oJ5`vetv8Ej zltC|5oTuRZQ>|2u=ccc3pI5f?&=@Kw{r6oj{#A&_HY>l#S= zPlTDH(9~sw1${KXF-CTN_MQ=@&OtVAVSGzhfy;0!_fQi@k)wAM%fQ0MeWad5zxj{el(%XE0%G%yij{FRxTfG8Wphq#A;E zr2VEk?^WSSM12$a7=7jW_>-HMMdRmI&v~_t6I9ID@<(jb>-#rf`_A1~=6Shr#82i2 zG-STX;^Pvr*VSbs4n}nj_UPBPchx7Cr(7B8j_6wBxkkUlc~8^JLl8arO~W!E%`O%ba&ZQ zt75O+Bi$$NJrMq6zz?C~Gk|J2;Xo=Fd7htY!eGfCVCN>5@{-Du5s`{$*V@9ad7xma zA(?v=G<-m`BW!U&=>v&5C?53lP};*4&cxv`NHAq(Z-q=~Y>&%`Vn1r-9sMm3v4Xga zJq6n0V32zn8YvlNQ-~<9C}bh3voVLyj6{=|6<1WNeMKhF40W?td}i03v?i0X6t^&K z6%Q1|GO2OKaE#qbCTh$g1>=FFF$JGN$d?fgxH`V&E%-GGBLb$ACkM0U6>a)nQixZ& zi45Swot1~SBA&fzB=!XuTaX_`L+_Z{Yyc!na$8=2u947k;O_b86{xNiSpZs@o4lcs z$VpA_FZ(h$A6eKwVEJ&`eN6{MN_%4QzuZJzxQV+!2*d1p`O$=McgTmfg)NsgE>D1T znh=&dLJKeanp2~#FJv|=|NDKU50=&sG-C=E`-wW%j9&tT_V}RwRD*gsA$jq#@-(k) z6#N8M@S4uXgu}7=QBa$!{0E6t0_82%Bp2%O(8l)4DM+A8owO(fq0Tb0UrE^3Y+UW8 ztb^0~1huI7K!TwZQNOlZ+2&WR0BzIxQg$kB!UDo+38OkwvDCC}A`($$NZw7bRyg2n z>vqX@a}fh-{`_@&*Ha`9HB_GEWpBZU$sO>x!n@e<^{nj()rf>lBgP>G6RB`}Bat7R zhbGeti?`tuiTHUM7efYlJe63*7yaUfbp_$_7LxVIv!i5Q*b%t{*#KINB1?>eGpGb&AIdRkex;p=CCS^7Hs?}vuA@#IJ8&=aP3zQX9*5jXM5 zqFXHO7DmPal_|5X6Z0Pkx6cDk2}pH@!iHI4^h6V(_=?)Q#=47UFs<@fOKr*Hqlg*0 zjTx0C8vI@U#<#!=7aPxb~0a^*^f>x6r!lzhlK2en*o} zq?lEItT_e$Vut;_X$*eBP5KUmUPRiS`#{>}mzs%Oy~PC-=90*JEAe%5anVZ(R#CT;sKI5lgMIOPsXPd$_M)v5AxZfVwH>V9U2Y`LFhiD&4#VL z4DG627}YLHpq@4|fBQg|A-T(GoWc@mUqO8BIrORKJ9_Oa9q!ksRci%K`pu$*`$*}^>7 zVYr`BKZ$&VDrPz;CYUz-*gW&P-WCnR<|*FzDH;B6g#bDnRV9LH7PuX7azS*V93`7vu#;ScXl*XBC#X?9knQIZ8J=NEywxR~+*d1;S)|+^2x4+wKED3q-b$=i-pEz23B{L zFJ0Iy*~GN%Fuh<%1o@jkbxg zx*$?`11;}oea`vTC6$7v_1HJ2*42ufs(6{+Kdwpz!RAU2(O{5&;qUr3_%B_C+6LzI zS1m{HGqlheehyhQMv=^C=43q3`AYbIemsrVA2GX=C+qjl3dLLW&^GY|eUy|9?*30X8-5p0;lR_AhIHh(22j@h27 zm>`+`1I-)9rVG}7nD#_dkCy#n6~8gPUUX70<0cR0fLH zF;mgfZo|~MD0$|3Pv}D8z8{2MxDm0l7!+JL7VU;ZSncudac5M!z-BxZPXJxvFid-{ zKY>dXsToZLn5R|gDeSIIo9p+xpM>_%1@bfMVxrDt$|m#`&S+cppUzdAg_2o8pfi>H z)AZm}ykNu2)r9UnBV)Vj0=joPU4~g?l6!`p7ub?qOII38vvBBYcVQ3AJv#dQyc(`t z4U9$|u|4v}SBk;TcR(@{T7B70)?Pw&Oa9da0F8qqe2X47<0qb$-nGdq=wU9P6M-FC zl0q)L44R*z5zUw^>VYJZup2>y|4a4He2z|HP^KK%Z>e?V;zo)I);X7hf;xmQ@ai%8 zn6t=#co}&Zi=}M|gXJ>OP(Vf{GYL*OjQD{jvBI3Wz%A@iN2+_Ab{w#Vn(2z?p^I{e zJ_X1z0pC^*fBG}+FObHdMk%_?)9@AO?HO&n+uKwN!}u$$x58%LPWS+HOZL?X|II)c;e}%a{p3fxl@;*B4OHcDq2Zw}kgE$fXRyMkRMLV- z*a6e7fvy$6;H@wW&drt&ONKv?`m^YHZbq;==%~ITV9;*9C>Xl5n%Ch)1wXg_uzdO? zMYCqSk@S^*xB$Pxyuu?s`iTz1C*N99`}3RCzVI4mK5(`8txy4n*{uwLD<%+Y9)ie~ z1h+q>x1134Jz38Bh@a`8=20a)-9}CHSXhDVw~^$OgDs0be)Y4_*fH z>wPRflPp{)et=5m@iGu~P=anp$U--0ju5f`Ou`EdU)V!j{~C!1`J5|9j;B|CMXP5h zdYB>lDSJE$;%A<>Aq_EOKAF&OIFMHk`mhl2R-=SI{9V=`U|*spkr2$kXjA9&#r@)+RwsN1fyCK~zH&k=vXs@cj9tN<_N z7TbvP*Sov}ULqB}Nd3%kxCLF|ME3!FuyZq++l&r{%~pgMiU=r}502XX@4F*MgXB_B zfEh@u;d8qYE^q~%%gq3*R{+RiXH;b%YQZQZ7t>ZQC&n>%1hqyqRO@yuf5@gb%vTg( zhEnn*To#Wf5q%DLSiX<;)d%53Bxw}lbxl2nC7z1&3Ofvb-`t;vA_=cVI`w3dlR&N@ zj7{!zL1?#5`0?s~O{wY&zqf?TUpX8;>jm+=yu-C)W{@vle z2~p7eySXR;MxEI?hZ*>s?m3FV&L7&~$;6B#xGY!Mgcvwe^5>W3R<-y24M;ue+c-wL zuknws2FniyoT%Rzvr#$Ugp>Ah)5|YrrL&z&tj*Nlwr^cIbED53@oK(H{vUb7fdawt zgc8@pWyKfGyIxd0xYpI*Q`S?l{@95XN0$XhRdm+d+BRNme6~$;3u_eLXrbk_r(Iw}JEM9HLOB5u~0uYR^wW8=PEWJhjpcK%{;IEL;j zLDvVan^JGH(w-=GgUj>w>Ru1cwv>Bpu}#veT(OOPQbJV94VKMp~Qc9 z^{MuXL1XIZ5l}zkt$?gqiX=s-KV?=1=PE0PImIL(1xBd#WW{ClnM8bp)lpMzK1;I( zJ-i#+F_l=eru7RojvdvwJ5o-?KI0?rP5_6D1TTzBP2#F7VjfFpp>!ff8S0&5ODeyr1>zhrtVL($o@POfQ~BlvGY1O$joIF8`L% zSlC)DL=fhyUh4kq=gyk89@Ve7fC*Ola`RG*dahZ)sE@@0lz7o`kQX_Y_}c#}+i~ng z!M)tgs%=R6bmG^*-q#5*LOu(mPRCLBs}T5`gc+;*-pu_r`1s-5j@nSr6@B&$ofR9F zGwOCBU!c%}^ax3b(mfI2*O}{#Vbop_xDDt-0UoY6YGSaduII$#gY#NSj4105xd*mO z9MztdVw9Q|4EMT2x0%Ff?M>QnlsMr0$(2g`F@1W1(3p~)~ zwlOqg#KnED*>7HES;xdbvhv%PVIfS}SWG;f=#11oL^9XiBqV>TO3^Y|;j#2eHmZE< zU=>F)TT_soJ-Ro35mQb7PWpoLO0Y8+l(-VX1D*y8c!>p@o?N8;H18cl>H=CH zYVMUsh<{F&7^y_^e4Z#*aUT=Cw%q@W6JR1!V#Z@MB&h2D>e~7bdSVAOBMx7oeG|ct zt5$@{kAe)tCzAQdH&b}SaNx!nw3b`#t!50bbL6S~iQD&qoA#@-^)$t0yOk`$%ZG>` zK`@!J95%JU+>G=!R()cK5KRPNzf4lT zW4$t@Mj=!`0e<#`M!}RPe0e!fI!Cbp)$PP!-_S*NX}V&!+l7PVz(2Xp1v9`-no{WP zON$k)EczAl91@ne9>x!RT&WgB9}7jW|FrTDG=-# zyCxSD8~{7>!6hoqSG1fJz72rIROed zEbD7AcH3IQ3S(U}oC+IUkV`#j9+X$9VLBbPOlZ!5Omp(GDLljhX(`qPm-X+xp(nrh zTBx`mNt#YNqc!O%qfGMVcHd>mvW=9-RIZ8xmURn3?LaYT-79e-{8p{|D9lsnQ!hpL zAc2J-(L~Euz{!Pf&Kb`(|6N1ZbvtqoQ+Zmoo_Q;kbU`yj$R!_ms2-&Kk+GqtZ~Yxm zo?aQ_g+~#GYeDrtFa#~)-v2{7%c-oP8(jLC<|;BF&#wVBEtT4q*w%taGY$gx^)7e^qavA&i6=NIC!8wp6csGi`+_suRy=T$PvVLCuxyrewjnivhfhb@VAEap)=`}sw5%Ta+V4s9Hd(biN zNeGt9?^^4Z$1mc-H(zLk3%Z7ErMtOg)+Nyi5B&XMf59`U_IC0 zO}6TBtq=%FaCOknL<4OVamVJa86!n zu$hF22N8Iv0Bz%FEuToTmvh-gnS$St;HqZ58sH5=qq|9)_z>KxjXSsC>x zu;o4Y#Wqq-#+?e&;`84y>P47rlwrE!t{WUH@8lJ1q=y`JXWyi~ujvCzmC<*T;5vH1 zkwWfmL7fWKHvKwnsP>oq@@=Hfe*)U|9YoAeC1a4hL##R+Y@^mxb%z4D-B0yXf6#)= zHD_9Lr5!*jQ?Qpx!RkJ4;%2b{)o4I2jwH;{lD`cHoRJC!c-nu+hCDv(-7}3O9nlwG z0h*bW0Z3ppVE8Iez^O&_Mi+m-#4Sq=!{B9}s1_}me;6bQTfPE6K9$kbwVntajne zkXjSDxqCHZzWc+O7gd+(etlqT|Mu5i*U&HLqS>HsCt7Tn$$Z>5EAPY5=o$;O*3O^m z6CrvxD>4`({bC9JD7Yd3_UXQ|;iNZeVXNdjC_e$tBL&`=Y#x{5GI6=$9joSbM^+B? z>hRxa-93CH z2;E-Qu)N@j{)H8O3mw`fMca*~2&1(cU3lQg6V`gayx3x&29cu6x*CzWbkoUenicfm zlgp+PxqHDQ+9XWM>Rru9c&|a$^Z9knT!ag8qgsmp-$bAYonV_X^AdO`!?B*vo>bxorts$*!Q1wITWYeDl0MjK!8gI817 zTIE)%{pd_YIg6Rp91aNbl}>nGITu7cKr-q;J#!$7A$??O5Pkgt zV~Qj|aPN&;K^|esz0&&3)$CE>f%M9HWy{YBN^J z;egZS*I&MuDQg8Udm?t7Du4C=v;aLrLlMo38sv&cZ*LCvY%@<#*nqTApynA5bpvP2 z*xF1EIn0nOp9&Jt>>V{gwO`LNBqxI)v(}0D=)!PZ>3p3B!nrJvF$XzgJM^lmpYLp~ zt(koUxnGSG^fPgtIaPU6W7?uwCX#Oi4Ms!_N9C&L8MKsvIEL;8O76$31YuJP!wae8 z-JZ$>vK3_3Ou~L@Urr!?1z;kzW)b~VQSSMMu!7P3{2wJ&P(DAe@R$L0as({HZgK4c z)DFY6CpKXBKcH?%>W|tK+?*)c1DY2D4UO1r;a2@}(9mGCvBp59){VnNOBH(43(*N6 zLdr0hNV?i8R&l?XrZQxUS<-P#*|n!;))!*dBL$|0F!u-II1RKf9!Owl2S&L!Ox11e zPq43yWlG&a7RNqVeN8b3~BZvq5-gQeom27e%i#*mW2`0K`0=hxGHE3r*es1}B zrT6Cd&v)rA?iS)-7d;m^&IY$Q861AZTTXQnwOhr>LdwP&QtM88QxA{`93*n_`Emu2 z+-=LY;;T%xG?@L|<#z`?%~GyI!?}(|maeS?IaeR@A`u@&cP*aEVE8!@iAY0a7%HP3 ztdpsA`VUBoUnRc3q4m&y9ssr@qUCS3#fGF9?4N*NfLxQjYE~6eHYKts$3kpR{z#vO z-*J=L0?9hiZ~|$fNu|{w6yycuoj-7HFFePf>d{P35c4DIi9kaZUt)n3&R$=xnWRQPVmHEpa=^bfh84@Zw8;8 z>jn3{LCJW+Zzb(;S&y((Ap3~POs(<9=;&LF`tu-c_1a_o$KDB>HJgxhf8t{@91e{A zfhVVor*?=Ai&F$GLF2hpI!gMYL}wBq91S#sh@%gZ-BBZgLEHB}E-6(d$x|5OwTd_- zqLHqAq;U+Ew3*zY>onX0U$@Jq2B_^mD-dQEchodL9xn?doZ7)vy6S zN7#*g5!88GW5(gJ(ia?d61i~6N&`FzUBe?cdEv)Ey9b~W`!5~WE$L5isI&p9q6mbK ze0f#*(p;QIx+LK1i!^I0$m9?-770v2GW!4xLF;d@sc3iNcFfQ*5OIFw;(Rx%#0=&T z67^xaiqi|WScHu%d^9dB0v@0(+zAREyv=>zTf(FwEZ}lI3z01-n7N|htp1ig6cM+r z0K?2WP#R-anjqyAnWu!6!Q>9W$T*Hrqs9<|kpErGbJYK1SBWHT_zXqm2f*krK&a47BFR2&z2TZ zS+9lRga^o(S@{xk+%O401+xodZFCLmu|u4)DdzN8dlex1lH_w)+C2uMP~tYi`fx9F z%^rh>mHAFu!}r3G#1p|HKVl;@GO}=QY?wbhFdS~a0~#i>$&pNQaD7*<%VLa53L-*x zcDWno*$iCj6#grDhot)uDPTcvi&LZp3$3-T-}-{QU{P@9+jYtPE9fI6a3>S*T-b7e zO&&8R#{t3=i9q|q zjvk32r30LdV}P2U2)Z7lvh!Pv$VzUod5*f|sOY^t`K+iFCv08q#eR9|<|kXr5z z>yF#<{xO`K`K2uBra^;&vv4$A0-Ak5ay{4yz|LhLtN-fahQ0rE&;P_H1wm28+A0U= z0``xmd8>YGbBH$o@po6|PoG3AY_7Wqkg>+f2$*{e@nlg+Omcfq(q9)#P7BFy!9JBn zJNW#DEfv_A1-+~4Oi<(Bf zV~B5R?s<9=wISN!J%W$I#Y707Tr)}Ekn=Om7@w`+?}w;Oo14F%bgz0k5tKq0e*_r_ zxSxpVUs;jM77?NP@GUzsZSq}oEJ|Pvt@sz*VUZQ#!p#m)j%D4(slig_Ewg%@(*)|i zAWzw{`)paIp|VbOXp%k1ozy+Q=W}mb2U6+?xrl+?k+Y~EQIXH8nL1pXzXmIqBO0j) z`U^S}#?HjE(U4@mK&W|R49VRGRkek>oPw||ahW6YV|2CycB2SGu*pNY5sC{pqnOjk zM!`WW-iV6KA^ZS5_J3_34pp15QZpF-9OOLf>qvUNE6qsKQkzy#Fr-JLpqUXFx((zM zpmB_d*TBI3$OE*;t#vMSDl}{x)L3U@(k%>a3xn>Ol7Q?rv(yRBEmYO+(JcY>uUHoZ zcZ31*aYOIe(saOxUsMlWvAfoJ7dU>L`pIT>>{2%6wT#GZM5+Z)l<$GGn+XMxfvQFF z4rADev~j4b(ZJXpc=9sFbH0p_U7Tpt(F)$1W;1>-x(kCTC5YoihP^ML)}2Gzmj{+a zaa5P|aV9VZBu&PL740;h?Vu3wz``-W=?W_Sh?HK8mW&uEMr7YH5-}r(vB+{U&5<2L z>fcGutjI2ySs_27FJv#82!2iTBqX7OFI_330(M3dMP?BeuG-du3E~Ol#!J`$-u8@(A3Pa?-m#5b$`9y;t)Z$<5p zjMpG?EUN7M#W?ejC2P#6jMWyu?HdVa-n$#zCD^XZ|I*cIt^2{0jwjfs=_bs7yfmn> zDrGA#-c3}FA2Lk0C#x(#;OPH3tr9fTAQTEdte1h!sP)}02Ap|x+Rf0KtVp^|9EB9P z*}yt4d>AncEds~685~~QHfqVfzZ$pj>y?Rk7~I^7oWa3SwA7I5T0oO_;I6i~^BISX z*r|}ztA4rkXPHA8A@O4vjK^0gHgX*&n%V!^;SHV&#PXs@XDkVj!!rr5_FUyyq_~GWGk#srru3yn5UMnm%pDa?#%&5W>&!#KtgmzV5#8l{|H1gy=XqigV8pGLq zswRT)vL{^hTUnyrG?rL#sOWpb9my2AnlU1bc%BRgz-DuC5qW}BbK^`bR>h6j$g>Az z{$!%hpSXJmSv?v_z$meZI7$0!S?8vKtrQJDPN;sl4%)?o@TkHCz+eJyr{EhZ4*S;c z8NDj+m)30qQ#=FrgdRp@>czr3OuzhM@1K@Aj+0vAc3o!ItCwCs7jF?TW$Mu ziJg502>{)+Zvh&U!^BMFk^#P7l})S|tn%m&?t2zNXo3grtmrd2*+e`JTUs>3Vo=_D z1FJ|zr#ASXjbB>~6r8aySi#qTay=O=oHcLjqwWU>GwL_0I%`PAZ`+`E2wc;vNHm}G;MI9y@OQMj?|zWBnqBFK^F2J1XP+2*V1r5d0= z2YwC~&#a6^vwf9JwZtZKW0>u=gIE?fg2`)Q)>TtzJX^|Si@(`bhqK{|F0|YL`sy2z z`>~RxcWeGstw!vba1Wb~(L5g6mIdKVw=$Z^FasgA%-nyz!c!JwfSn1C3hz411bH#_qyc z16OaeXtC;=5ridbZ9wg?gs3hADT`lo(Nbk1k1DvKL-)J|llZs@o^U3Xp@#>tI1kZb zvQdnuY?&{=@fK8UN+e^8XyK-0HaHUvN+OA%a^|`nJaS7A(cG%vv0LB%NjrFbf@9y4 zi#%0J|MM0}4!Dg<>(O6}DN*aqqBEXq7MdK41k$pIxrkQy2?*EGqN44#WO{;Tzixhi zmIu%`(zq)#I0Prw&k8k3%SE*VC2DK+@377&@m(Dputn(e#j33Nt0 ztU0DiM|Af)gqGyq8%+IS_2|o6QOQ`L(jT(FVz>NTEP42!sssrL2NiFSiV+~fgm!5l zZqkGyXR^i>nEyyyr`Q4TLO2`~j8^}L`O$&JtuBM?^@=0t!s*7zKdfaHCq6^a@y zIFn_oin>cxeGnE9IY#(_-ze9|oJ1_h6%lai@1Hn@#S5iA0ZLD}4rw!xZenZicboRM zF_kYhnlNy946*>Djvocjf>R`ps(bx+f0j7GQs%(=x9B8RogXR>t_w|@(7|_5oS0^! zM!-`GEf0}08FlVRlOZ{Bt)fBxwu{cvYkI-{-cVcO^TGRF%~N%r9l}7uja}-lv{#Qy zR$4WBa+^%*=5e;6+W$mEUyghjSSX_}5zyz>(-Za>P&{DAfUE93D7jnXCcimkXaR8| z*#miMCEi80;~pE9n#oS>haP75HEa``YM5$B9upFWkQ_el4H>hEkBI;0TrrXLYr?1E zCXH-p6{d87=eUU$;yvVFUSdYa9cJJ(TDW!)WDcOM7rX$Bm=fjsPiVHY(px<)_jH|F;KDRQsF;NtHVuB}{Q|EZgqC*=#T#mKQQh4#}neEypKO+S6*E@IkQivIzjB6 zdE7j5K!57RD$q9;*};!+<@rydK5Y}Vkvpf}P9i53?i`0R<^O_TbhRvD>m5f=}_~32xH+ zCbGHi%0E>-OXSOdV3qzaM?}MNLZWOzn=7h2=>s&o?oZYn)Lmor6#onz2a1p!KeXCk zIYPa#$oO4;q%kURR-_;yX4da&qKFa;qNa%Ey!Qd^3QIbn7muoo-%f9ON^^YRxI;fZH4e3*@;Nh$4w6 zy7Ft`zIj=_+usT26kO^RSU@g#Y9_m3A+8`p=`(Gi&vZU99d{voxJ|C&7n-#fY3iXq zg6a!^JGU{@1Bj@qfh=R?!D~Nsai2=wcSY^f?K2=3AWiuuv~_x;|K58f)RjuNzzx** zEVWzJxh;~3U@i!30m3&R4Wo|UW~M)o%p`)lH{Q;*R9(?;LgM-dE6gBVqr5cmkXe$?(xOI7{M z=~?JOLs2Su_9TqMLX$fze>@$)x`GVUW@zV0?95oL@46UT^wXJ&=uF?!f`Cx{aPZ9+ ziRdv@23|AGM|2@KG&t}BZF?Ek0hD+wZdiCCreeo|%nWJWd&jVE)<(2wn`5NlbEy+#50&N@7 z>e?7TPT8O2VuMp}j)n$O>0)vlB2|pX8H!L_eU4Ipily|0%Mk;hrCI7=Q=GqUWA9Ds z&{N5CW;&q9_ivUJa+2mr(>JH3p9rAz8{vU1@a5@9x?XMWKi&5%l2Cy*VtSIv&j)tex}*tc59IVwBPbSNulZpk{&{gM#?7Q4u!KhFUQnRRb32J52m3DS!nK3 zY=K?Ib>ULN3JK#grA{VrIq2&Jw8+s2_mjm8jOo9&_g@KL&PA#XX(gDOi(;=`bwc-l z)MMs-6I5WLU>`(tLqf1;ANV{nVxfNvbDe@N8S|kg4H%CD-&O~svi**D_?pE7joMYO zg^|SKoy67LA&>fv8$qdP4B!0A4SZN}+LoNt6RAVk4pV<;kv)D1t}Obj-S=b7{d zD_O*TkGeM-$&a5_=A52DwP%p0&%#ATSwAd)3Iy-~MQcmz*r@ioX8%0U?2laXN}D1% zt4sMVu!lF82NBUQ#YeQ*ta>5U>#y7fXRy4iU8OXI{hYHsq|Qq7kE(}INeTXw-+5xa zLvNZniP11n>%~sn|5`Wa`?Dey3ruTo9K(-r^x8?DSHD1OHk#M%ApbgoGE8@TsOqX2 z{=22D>J}JM?nYE1AP;9qW|;kWLZ4jzzO3ib*y`);)D3Oq7w@h*J!FvmNjb3 zbql>Q*?AOnu0!lWofE1J;ZU^b+=n6i>s!r2BEchHGH{iASF>NW9cdj)TC2?4^G}|rk;r|1XEgyw`jSWTZK0g!pR7Et zesmsAGL;?5#9!Z=3p!nqj73apzB64ekVICUB~#lXDFQ#)(i!J^pS(`HuaR`?eKDm4 zj6?m#DbM|Wx)5yUY~nFxs^Zy^4H_+2&@cb=C z#={+Fgj+RtbQzy%LdKJ+WE0)!uldzu>3q{h(rX7o8%Oe}g}7aU!B!9#*z!yb9G^0! zb|x@jEO7FJ9{sBg@(&Nq;=HXnsk#9cFxnVsSu{<~8=6#9?15Qp6+s7ShVYQ9=#?hp zmSiuub*=CT3zPCYx^6&80+I0at8Cye?e=%MbL1XqDN_`x7>UMnzOA&KO`Y|wcBdSD zq#a|(wMT~>Fx^eiRy(V5y_R{!!yKOXL^96h-hNW@pD;{*S^p3fbI1^LdvuI;^|SV!Kk)+uZrri6>%3}FLH>Z>x#%>cErcPC z!{-++HOL9Op5>sJ3-)3x^h+jrS)uY_Xh&JY>!akytUgSzClAad5+1zV@}c;3=t0#= zIjz1B@JZFG=b*?5J;b+nsdHQN=;MJ7PfmsfC_IAZ&f+(9q>UmJK*K@`#s;)tL=4il zh)CG?lG`!3PjhpOw|v#mO{VlblEYK)=Y;O=xX4ov{sRvv;mb{&?9aJVz6yPbll&3? zNvz;LeUd-j_+>27BpGRHXdHU5zv>fBY5uC>D%py|T*r^**~QZ9);YT%gQ4i$(Z8`l zkun*4V5T6{rmxLiCA z2hhffL@QttbHTtNPa=0QF#e2qGNpHCg68&pkvX;IxBIrxo6pIA`cq&7tC_Z#G}#Ux zrdY~JQb-xjdVR`zEAc)&P=z98TbPtbB+(7loCV3RLGum+@>LR3vbJEPUhnx%ID#+* zwI1L&uPv-_ug@3OYmZ(T+U0^S6f4+C61ErHfViGajEzG6yU+2uJ&52~8AC;O!UXCqLAQ|3l>gy4eB{22? z?=i}hp`$9ZyGmwqdOqKfNWri1XlsZ<#j8$`#&;b**&JHG*&qv4`zTLv-uL)*<}zV^ z5pdjthVi6Ovt^6w5{Qbp@%5T{oqS8r-2;bb>uuRIZTc2_&oA4CvpH20>i>*#Pz0So zoAbN*_Lar9M9@UA8KI@dyBuJ^YS4U;LtU>8QuY-$^vx?s`Ci*DSq=snVaK45>-gO4 zOWbUqKT5Vf>zW4kTUs+{0qSM1f@_%a4*F^@BWx+iLUq)4gSYut)-wyH_21=?P8Sg? ztGbU^_?S|o?uTSW!-*eQ;6qOJM5TcWlk=wR2J78`7!I3 zkQP?SciC0`K$7;+Z-J^@W%H7ip&Lz2gkQhCTyyaQ=d_O~sPF)*d85{{H_e?8O0>n2 zN<*|R21H@ay!PCIC6wJg$qrR7Sj`nB;7bd`Q$x!`?sOdM|1l^nQge0X_!$~2ti&F1 zD~h}MnDv{k22;eJPc_kRtL{2q)Hg#CULffoG(L~mnnDiovJiL)w8845W3j8#We3yS zV-;^$^xIYA@k+P~Ykv1*Tz3K`aD+n#fu1lRv*v(lf)AA{b36HGq`F;n0}eov3TM-KWv9}eV>acs&F@}c|QFLQi(OJWUli@qyjGGZVHX(EWGc0yX1rP^*w;tZZ)F*9>^4vqwXV%*$ zkh$0ii?Geqzvl$aLVseJ{+qFGA4B^moe7nrFI#@h`i;}|$Wt@zB5o2X)%D0s>xACY zBb4iYk-Ema;!R*JC2)fI8&oAO@|xrT;w;cyt{YsxsvxH4{51JEB+g4|PSZw?BVAgt zIc=Mlxk&Gj@402omO?@An&_WvjC(>c$}N)E4c5ef%|qqZ{p&eYdC$zYz5PR>C6Wnp z`9D8u^(tpBCN;r-vI3lyR%*9oEGs(km%VDeNu3iSP9>3avKQ;zGIXy{Ux%%Z#zbYS--FU4nbkAb740_>A0~HPO@QAL6snAMioq|KelPhJ?ab7A^v@it zo6n*opRE>+me1tKz2fxxHVZ<~*Joc~+ReYGNteqLJ_#{0(1K3#sy7UOcPUftrotE# zQU{i*?CjdQt{b$kH?xkBep5(h$af<;bsAU!QeXGc`oFwCgnk8!b&lFW`RZ?y+NFM5 z--Ibxu4q>r>*d{jX^Ocn(%02q($RYXvh=_JsOaTn{vVp&JD`c@`5(SilF)k<`eG5vNiyo?0EY5 zTVocT%>JhOId94{kXwmwwXNWj&*>lqp)k#mm#$Gfnsi|z;l}{8f3#c;-lhSEZw5+m zrFDWBu1|ai`m;5-LA9TN+Ln5ZEArtT_7!yW#e>U&Lr`?b3*Va~c(GlJY&J(bj)St3 zn>*JApb~*|QzaU#juXU+^HIA}<}31B=vUQ``asrXXIrU1Ybnn~LyML=f?CJ3Y~`+~ zrBv!S))oW!MW9~Al92%o`21{}$-_Y(cd{QTt9L4 z+fR0$TeehG=g(RV_npM5HDG7oU%LPObPgTDg%U$T4WV-X^~+?zbGVTa zH#(jJpswPi*%rDHSg3I7LDg;~CT?CCn!muA2|^#=;kAkg-tu1|KgEk$=n0srb+e%Z z`B-?ihj&*)o$(E7fjFAuLzc(J^Uh(MkEO*svQEMu;+O*H1W}D7vgNk<9^+|iDZY-$ zCjJx8Il{Hav*to6s?C_zi4Zc(*`93uaV6ag^yhq2>t6_LVSYm6WOTgD2Xo-It=RLY zVcZvSSQ8x!mE!=}lpi3s!$6Php?`hSGs|3sb5dfEb6@E(+-$;P>%_$sA#mSzMmc^q ztZH4yY1^!NjGABZpyUc$LMI@C}6adD_*5c z(f2rojdLn9PIZ3lzfb z+*lOhkEP!i9%AcHHEJ?eaChm4Mlf=GHk`0YbkmPpEj7RgMoXhDRP`A49W|O7+=7K$ zmq6C?)Cs$>#tB*d8`S+#O^%!JYJFvc#I0qKLR04h&j>{QI>V56fc&!wJzs;%;jnd#l(Zo6p-~fG%v(2woi0ZFI~?f?M*#|4PT1} zlt)VJyCi16sY*ao8)gCx$X86o!qGNMhSiBfay>a=I?1L-un_>&raghO#F@8Gm(Axr znPsbZwe#@7D=MZ_JP;K=ah94%FY{|3O1O_!WZczGJ@Ahv_tIs*wDRx|VJxj(MP2%f`C(FaWsvI5eTLy2DFj@z zk!|=;ov2IIb5c$zejHZ37|A2Diu_0g4=97zW_FDx;w?ulK{i_$Mk13_D+DhLM#`uA z3`ffQfXE3&{z9&C`%EuifzS()Pph}4Odz{v-&ldkN+kMeF{s#lo#g$}-9{dT(2AKG z(e%Q4RgV=r@7QLJ4B%*D6M33&3+h(m5t zRVr_bp4WksplRiK!Bb<8Px#%w(iS&xEegv0$-;T$ptcQexCX?zE5>m&gT$`v6vcoV zyopqh3p-dNO7jlfWKa2%yU>dD3<2Ixsy-%LbO*iA89p><+jslH`7* zex$<7EnNRXo(qi_ z?Z+cnx4&h~XPc@rEIHHKpPX)?u-H-}E1v?Z z+Y-}$7OkS`bTJ&I^GH$eN5UKAN-_(cu~mP&04{OnIvDr2)T6pU`$6kM`>DyX%#UI# z4z&)&_shey80zRV&6S&+9U5iDTR|L9cMg&+cp=nNI1LM;{mFZO;% zmm*+L;E5*uSZpP)(MPYaKg-JZ=tsQL56yt@a@cC4?!(Of5g8u-x*YKNPAD^lTrlvy z_kLf?zlek0j6LInXz1hx;9qXvVc&jdHye2kRYchQ^rFbgL{v*u>v4Pj=1VArNX>hS zgiWIXipF@3pE>6TwsYZ9dADK>XG$HB8?(6?YGt#aeS{)C5mAr1(B4YQ74>2>b*rAY z8NX-F>dWhA5!di)EsyWr+;Qm;)_grhWEV5K4!gJ~EIkL5kUS^^CZk5&N(PrmH1>up0{ zO1O3{#y*~#IT|nL`ljH>>c^KLCGnn4=q1L|n#Q|YAm=Hf`BY^_DAR?8NSK2=8$Ope zii2E{HH0!Ew3r-cB)VdWyeo7F_Um;y6j15p$TH*Ak%>#H?r1hkKL129b9BwAd>jt-Zne5W z*`x7sDe3ZEibicz0zbv>`Q|S@ZtCpFx+gk=Z?y`IPDLK~AlDR09X(7uyv71HKE@3X z0o*e>$o(B%lDY1x6M)G))?$0!2a@Y3$A&j3Ud9^>i1Bukr_AZXY^CqX)#KNt;Mg})lB zhf`U2S$I#?B46{1X$(msaB+M{->!mBce}u%YD`=tIa0e z)riv6e&)U|$y?y((8-CRF`|a1X%(jnQ?N>D zhl?okggoE8JbCP|A1pfs=H>mTR(1ljR*h!H0LfW4@*NR)<7d#k)Kz~;8G5A|tVeYM zcMk7=Qr!rSPX#2bj)OU)jguh@QPWoQ2mQqF_#jI3HXdkZ(c+8x{FW{fPROXJ;=VBz zz6Ob`LuPp_r#~Q;&4Y&SpbO(axNIcvrrb*Y3Xd&mvhVmx9r@`Mw2Rdq z?5|2?mQ-dmED#Z1FO;^aL7p`)OV^K16GYTzdIb7B(a`s3Y|e+V)!P~E$vVkzw(mV4 z2|^h$1y^xt!q^--J{O{KOo2RowM5^J++|DHyO1knhBc%jG-naeJAxi*Ks`dCV-ia% z>bh2Cb5=Y-16Om_tL^m%rh$rCvmu%1)JyA}ss22eDZ_=@a;FhAwE`MFF^Q+Q>w95N zYLXro=p^5vJg6BKOihiTLxyx?O35rwEv|&){G@8GYQco^y(EN7rOqOtzK%cm=2Al7 zN@=_9OPz`ZdWjd{n4$f?3&8LK_l2jv^>%a!*$cH9mXfBks zK;OG_pZeBHJq%y!wd;$>x~d8F?Tu664)SRepXEsuc=HeO;!5Kp>Jb~{XQ#)AtZ*+7 zgI5Lk!OngG(z?|o%j-2s61-p=DUd6@SV}#OUNcI*N-cu7U{)57^Gw)JG5He)+)76|PlilcX6do+rz`MOY^ny#3Lc~oq^@6&`+BdPMKG5qvX>l z5(%dPgMQkfVlfgmcPhygre4J&SJhDTRNj7k>o83K9U|uFXYG>LtRcxG5A0ADCIVI0 zr6J}}><&(*nn@}3r=EpDa+9bH5cul#olSpUj?sA%b6ua?%~egXcgbUCjXW& z3ws5ag11xyaR^%=_>J0VJtE-ssfBK-uSl)^tTT2VJeYMlMfG!;C)j}csb{&Mj`8&X zo5rn{69)Xcs1Jc>xY8AjxmK)HQG&%2z0#|&-yAhnkM!G3Rea$`9GudQ4Vw+chH)AR zCg&vc!Aq+Bn8Xc?z6~y-@8n?YNQ{=9M=GOKbn#VQS3-^0wN+e(O}+wC0ay)}XzlKv zn6eLfv{7Y=iSPvq9ziSZJbuES!#izR_I9D2aFPRi{mi7)&tl_%oSx}S@yom2GP7~Q zolZ=vRhe#SYgfY#zp^BMk}wvc^}0kVLIq4$qTA?PPI&hizp~i=`22e2X;>o?QYHaZBt#@&T5iFxKUmNn`nY{NhwogXZ<{)>JEs7>E6pa2OS|=O)VSGr6m=zS47OHTo>pp7AsuepQPh7c*Q@$( zs`s~GA!Lj{*jY-7%3Vd<8cpW)kfVO!YAI9YO^C;?uiU`d+T=Vcx3~pFa%v7~rKJ_8r8vps8~lrFj+%YaTr+YKjzP zCh8O9r{;av5H@~ZqfL4#ti}?FDQatcL_)hTnIm194+Vz7o5@1Yqx_vK%K}e^oJ6KtQI6=Lph4Bq z#X$KZEc-a(qQ*$UHtJV7XTd&_s(EQjgWS1^S1N@D6S7n=25?6$co4yaB&AWg;mr}< z#>hYFMgv#|v|R$IYcWMkverTm^`tIhkWt zuY%k7U<9fiqVDUrlZtQT)xhNRZ92~9rDv~+X&jjeXM|vamC|%5gS~OoCFlVxHe{p# zP6q7`Iv#Hs+vLKkcb2aA2KWZSE6XfuKI53&3HLg2J7FOJdlTTBaomnzfAM_wA0*v~ zVGA9_{yQ#muuXimb#Iwv66ZG*E4^Q{pVaH?5xsRD*rcj=y%B^No;E<`S%u-d%fid5 z;B}lu*yIex2kbMws-|@KU%@XH!(Collb>y!_R1hI|MS0Qxio1|;{8Ef-$A$Hp5kp~ zxci<+c~89!qDd<-jBKovgGfaj5VhqoC~0D+(k#Y~^qf=b6)v+Lf&VNg^6mg_b5)b; zRYnAslgaFq^~$@hP!X2?nNnq9*iM>U9GYGI6Z=Ic`D~eYs)I>}MtZO8tysyvK8`5` zIA1WsIT*{cK!xGCJmGUyGajx(L&D2I(SGT~T>g95oibo+Qb&v9b2~%pfFls6(MRKx}tjR9~mx_M3TR+RJX>wn&|7NQ3QOX&T!^52_-Cy z;ck39ZQO3MoHFVj%WWVmPQ~f8rZP#Q%fx@dq02;UlP!@sm&CP}{nTxk$3e)@7Uc(Z zICztg(C;_IB)CAYF|7_|U+kpMMPY-Qdi-4YI%&^p+L4vR(6iGZM!kP0H%SLtr3I9K z*DGc|1-JdymKvi#zC`Y4EVUk3%v+@syn{JM^dB+7B-Op1$p<}MImW2muq2+~MT!RN zyZoX!+mWw$X$6ED$7(hVY8vnh;Kv<&(a4lgYCb4&tq~WmPXsImnAtL8=Q5`)KN3;z z%2zE~6r4`hSP^=vT7>^%j-;N}wFqIy{H4B`k*#mA5#WR|PC7@EmG8Slx@)97bt)gA zg%iAuDn8qkg{3wawnj6{AZNUdPEn*{qE~ib)!W0QK(&xnnUh-Qvq|D#^Iwt>LzN!j zZzWxM7YY$t;J%h|BJKM16{L@=#i%<1HIGdPJp?DhIY}45<-Ex7Kw*kst@{u0LkiZUo4FVO z^*TezfoY-NBbE4%A7D*mG$=34=o1BlVy_OJ=o!=;lf_nnrhvaQD+YV7w=%^Vwx=|` zJVTrl@luFE;swa=UZ%2DY}rfoXM`A4ljWnO*S{g#$Wmr%zB4K6;oMMPEwx9B617MT zf6SYirC`8Q@C+c+1+=|I05TM};IeyqR3OKR!^r_2Zvl$(QSo;Vs=^y*v80=<<;xy} zr79IpTFxF|o*y^1k&+;*i@S_>P{mVANH9pj%Z)|$Wx7r4SZ7GS1Lkj-eT_^m7;pi_ zEho)`NU0d$%aWmy5W%MCvGN)thBfyA;oyJd!NUd~F{uhoS5j9%mGCoCqr6LBjsk&v z0WZAmZ0_e*8TR2EH@sX;6p-UfMuq=Yth!DFwkF>orB*(4PM$3--*?jZ)3G1u4<~mW z1n66Av&A|bO-41=Ty$iPM~`6Mffi{%m+^$${XaSzJr-LS?#x6hRq!?s^f}Rhd7J~- z8zn|#^L(XU7qUg)l#Jlc3m?fyd;_xkFI62{kFQ)(*+}PbaLBGnfa-mnlX4AR7;Vuj zB>w1l+(&;TqxAYJG@2su^oD4Feq=2~XJG7c{0KOG1FC)4yzQJq+k>);?T)b_R~nwwr}=r@w)eS`iHo%02IvT_NpbWTW`;CAL?g571DK*{DW(BGmb?F-JfHTm%4vrv2^*YmVA~tbgkG!QHV5cj8 z6BD`h08xR)T6jYAQ4HUY;UrpH7M6Bwf!F*)r{IKBze3)Kj{q`%Ajxbni;i;VQB1QX z164jo)*f#d%d~<%p84!vp<4V$Wy!&u(SVB@>D07BMdMra+T94WodKS0gU9fmHtnR~ zU1hd!*tNWIms;@{AWK#S+6*?)*K(Z3v9AGc0DOz=ZLwh?e@i!)xAZQuLE(vIef%rg zg?48CmU$L5tOASyDU;{Jht`-Se`2z*H9L*e&U3%Gw~L7qssps_8EC8%-%AZwrjU79CHzDHq?Ts?kW%4g)g!jr;Jbhhv+tzb zg(hcd^s=dpsg4VBKTRoFEI!>+FD30S^UDQABVI~Py(?Ghq8u?2{-}+`nTu%_V6WS>qxVdLM(YFC z`{VJIv+k=FFXssEBZYYRDN!oYtOW<%LK)3eJ>rd7SSP$Ho*28i!sbn0Dt#X(1yETo z;p`!n%>fq@_!tI{5*NGICe*a1TVrk@==VEewn$I`3V|>4tA3b47!})Yq7Bs^9~g5) zoy103f!ElVF9%PRfB~xp1tt()hpEZnf`)I!i++mtaR+vC*Wh0+8ZRY#e_nA#6sKiF zOgV9>7Y*?6;6`gP%ZV&5c=><*Wy70N6E^9tExd`N4x#!S}Ys3?3(^{Oy;FHU{(Q!NR)M04IPi%uAx>yOPco* zg$YN@MGtUZSZWG@#4&7Dnp7U3o2ZUv4-d5p^A4okSST+dBgb#AafJ{xJo!(0+c{kOp!s|d!kfZ;R!XhrR>=~Xl7V^_jB#EbJ*>z- z3{+y`x-r4L0gnuOTlqInb}G**zT)6g_W6c}=VR`9V8%Ofke!-|*-UE`U`LXkgvt-& zU3svlR>~jpx%noicC`5|yD*ZJ)teC7?Vb;2ToKMHM5&0xdF$3VFQX7R|(bjisLH<{Q}vS#3;LvWqNefcs~ zxHDL*2bwAu^{X!7vhLER5hW}@lO;fQ`pFG9n3U8U6N{1spS725M5oZxRwuRxL1KY; zHE?@QlMg2nbMOl`0>TILK9kwS{>7rJo@l$Kx6ELU=4pwU&d5>b5<$8JKWO>&ZN_0M%K|GnFjC>>q4jMA% zas7FQg75oO&k>YcK~K=WSO8{`X8$XiOE`gzD9(S*M(DSdD09B2VS9 zkn)2j%RY6Dq6A1n6ID=Hh7F(onIZ+%t6q@Qe)7$Q3-5i@LS7Kq&i@Y!F#5lrv{_oI zE06$hZVIqC9dP!C^~l1c-G5p41G-@I!*B9Vi>PyC=Pq&&nPDJ=Vq;Ys9m5q^&>*xc18^cSJl8nraX?dHmIi82Rv) zdL1No(id~}^#*$+`|C7WB|x65G+1G{i&j$eByV^xbrx8AOIR>7peZJBR~ec}0+Y3X z$0N8V;(ct6y}dv?@$ZYQU&j!vU4SZ1wApb?;0jt6Xi7vA5*1r;nTOB-Y}hG?mEeC% zwB5q~b>N<)oRN--vHV7Q+6Ss9G>*S5ojE*pIu`2=9?sHUvMOCxF7%bXMF~*snr!1v zH)_+Kh;FF7F>+4_md#OY3G_kPLytU%|6^=OS+AItJF&)tU946?HHSUYW}!T|95{#pa=m!WiDe4#)l5RekHezQ9 zGF6MCkp=SDC(0C@{E?o<+R-)w9Bhp;K)-I)vAt@MUrDpi1IW_q05m-KuK<0?&0;J+ znIo?ZbAaqH$?BT4vrzc?_yrF?!Bta%W1i=-=WvDuHD^eN+dq zr@xuX2aUdq9k{!!HGT^$xaNNVKf}aK-a%7jINr}_+bL?HuqUZYW#-Lsc@7={GFO?L zrK@qTBGo#f-p~%h&%-%R*Xcf&{)*iB;_XRyKZyS!FWw?igwPi8NfEM*dlfI#wUg%N zM7*0?`*y3adSOoja_zoiT0~bLlITHuNuHP{iNqRu6u~toc+3}dRDE43Af@+6T%yE> zthXcV@wS!I16bN+k@ch`gkuQb0WyvFufF%!?c(5vmZZg?!wXrXgW1zbX7qL z3So@fp(J>v3Dec&YZd8Fjo(K<^*r+_p(>Zg2Ia9l#RSHL(B-79D#Rqdz~WH0ip_`I z-&3uHRXRCQ?EAu=&8R?HE|0yaoWS#EcTNA6D_zVPklS92zDYKtE>CyIXsp&#S+b?C zBir1BO+_hI5rL){Y5pDAxhK<=01Gu#Z=s;O{8#<_p@*3o7i5o~tYcG^XuAwdfp%BI zT1iUxWC*5NOZo`lGB49NP3dt9RA;fjj(siH;kY~nyMVc?-pg zVI9Ml2nmKO1{ZEFx zxX2fyLU0l zk0_E1VIv}3?9AN;?-<`UBZNOLJZFk5;?A^t2gHZhd>dEVNhx^v-wJH!Wuo+v26qYR zC;3;1;bfi6OYC9vQBnmO<6&gO>cTJa=q`s|fKn&6rALl0qb_WPB!(Q9 zGVm9m#&OLI6^Eb+A-%ZaCfxi{AegsH)gb6mJ8no1O2kPg;PMqMvWK8iyVw9YWt}{v zUbIU7TR&07glGV|I10S+9p+ckbftNQAc8HJ8gO8tzGW4O>iugTM0e%w!K{^*Gf=g% zPdsihZg}=schcm3i=5Gpb=__1u#ie*Xs3gbE}e9H-U#NP0ep%4^GXRbKqKjyIZwb~ z8!KN_sO;6+Zw9nn01l!Mf3qc6F_DzKqm)mAgwh^D^@nFEy11KfXOor4&9sp6=62ibRN$@a`Fmn^!?DY`Fjx*Iqr@4Ry4 z0@f#h5}^ad5=>6QLDa3wK(5Ah{l$9!;T5qv6|vFE04!_pUJ>q^9C5o1no79CD zj>}HEp)8Iz&`i8voqQapSk$ek#IHtiZ~j(Ni<<{V&wMV#5X%!rUx|{jG1$(p1XR~Imc4I0e~>R^25C?;QDHkBMS=9B zb=M$$;Ced-CBuPWL|WX)|vjnLZ|-Wdb85>7T7 z(<9im%4(eoW1!4A`J&cM-T(EFQ=9(XlhR}^UZ7B7S>oF`=jNz+ynBH62)0ufQx(kp z8f}Ugop;g&wXZMOH5EHwS%?p{t!@UGPjShcxyRAtW;&-?dx-Vz{;NOJ(mCnkbsU#s z&=~N$(&h^X?B?kL!>55LC&+PrKA7g`D7Y=u)}D|~uYiTVgizN?7WOvg{|36!U5aQ$ zIaD1)y#05boorh89N1_DeIz&lz44$K89WhQ4{{o0nCH=$INDC1O;6?3;EDkqk9+lTV*l{zNs za3H32bHi%EU(a`vkAfiqiel-rl~3nlHI9%9gW$vHM&m*WMj{Cf1=>|tO&%#$uKbMH z-)+~s2c-GK0ruRWK_FrE%wA@9ilaBOadpa2e)S3@YAml{N4_+08Fi8@DECR+WUeNy za)uw@V5@S~QJx)=Y+MFXch-GUe^9^$nc% z%B0ShPZnkM#K+OErJiL_c*~bJVGrI7OdGhwy?Lx5^70uh8~IEWzLc*a zCv*NCJhK$qfRAzxC3}zO>BDwJ_&sJ4t31%rtxQRNp2mDFT#59OlmC4m`NB|3%)o*; zIW-nQ%dYexhreaky04-yVc#YQeOl!D+h@M_V45cqGSHF!Q@va>HoaGa{tPM7k*ki* z{dx8<_XVzM9`64iWcLTj?PbYF#tnNC$^IzdUdmxkSjFIYL&|*MIJ*t-n_Nl(V2)QKAFUY{yv8J@`)`>jb zxdJrnUnnv03^3EtCXQcE+tca=Q$K&XYs}*w;W%D6kD~TwLsy)o&Gyi?XmnwkndI5! zsRQB9DwD2>LwUMBZH-OC=3Jk>r4~E|CJGBYwqT$rh?lmUfR20t(`63xG>CHp+h;`p z&_bgIa@7q$PCbrRyP{qdznsGk_>%dl+=%ObT1?{ktk9>0E`!#c?g66q7C_E3`;<`s zmKn|$c06LI#FCG%QqEe9Tv^_(0qJBA@VkkLqnDpKI!CP*`@|BwOP(JPEouin5f;jh$T=n)g1I!Efzne zP&bRivVP*(_kiBto67vX(do)3UAy0^=1sZoUeX|99(qrNkVm$xHGgTVKrktdxXMKY&L*y64CNzYSI?8 zhSwpLS#SCA{51(dJxRu`y-7ao!cGGegpk{2{DHL(IAz*2k7mF)`G3?}t6l~x544Q` zaCBPJAsZbYsm#N$&yz||(fKt5ti=wNEtKiSjmG9+XGjtpVCRRj%N_l6Wv8opki#pz zH0JTXj$|?_{JBB;P4+Zns4;@;q}Hz7)m6UhbNQ3{;mF|pm~_?LyO+hwxL-%}`&bWv z>kIhACW_{`lSHiOb&%G1U(A0zu|YHZ(oPYyEz7XV^>R2TaEgyzIEtwaf|? z45260HfAU^F|Uqt?~#mjLr(zIY{dXDrsxP8E1&;{npvelZfRIDfV^7CllN+gsf=9X zCzmnFT|knr@$bP0_c|kQw>Rf+p@_MJgdD9%}K{_KHMJO64*)+=d9QoX zV2zDcLl5!~H1LI56MJ;bX(jcuJYYWmBt48**}M>n(Fr)=^&*pG)%g6^nZ4yvN=wDwPg ztc&tyuOeBJly`M2w&<9_TeN0h3FR}wcnM`>uSU!ufTHc+N!A2s2eS!((*Ky(NYAZjrDIA0fXH0{+-Oqf$P%-fgf zn@;RfEZafT2A8K+9?SsL<{|F)YT^Vd^>GnXKs?t0`F#Pcp0I(v>kr{?{(FhHC>hy- zA3j>AUgnto$`V&Xs9285DN}aCV@n4x`*4c8`G=`q>2wYwn2o_E6yi#Kqb+&b_9&pE zMR|euzPT4fwpk>a~T#T>=?+Iqvf!Tp6?nfgX zdt?p=+0RJBOVvVu80^;J>oH_#wLO{p_;?(o;q!ck=ajE6}ZYx4@qAm*d zM@g{na+kgTJkoJ`tnyIG3cT$26^Lm8WjQ`G_g9$6mowD(Xl*_Dx~x(A>DW~9hx%fn zGg7bDxhDhw0q#4m-o^Yth9fs~QifQN%RbUAPv|QT991}FQp4zr*)gPHtE+v++BAch zsI+&MxK#jA3)bs8#@*6KMJSg>I@XP#qdvjQ?q?17Y0zqRG$%a0kN-KOK8WM5{J9=w zcVeQxa$B>c{;3c_GITm^o_(O2Lre7B%=~T27H}IcqbU_%jV3iZGB1JIt{lRM%W82B zUe@nC)~L-gdlTpT+4lU*`B4W-Tf|4scA_|k?T;NyLCtcZdCwGO)N>6h=t4C6H*hYV zzmK?uxER0Q)g*pBFC|?u%cf%P`-j3&z;}Mrf;0!Mn|Cq6J(4BI z-Ox1ZcRRw*G{zoPdH;xdOkE~g7QI%n4a=g{I=gvCf85Tpm~ zaqN8Ak@RIK+BKRWKHvq0o=5Etw%uo6AGoghkaRdJ<59~yivA10P*SzzZ zkaO}k{uzLX^SnVn!v;Nk4?Y;ndLVBBS*1UswzH2-d&c`+xh1h9MeN8fg!gg96US|r zWL_l`y@^J6{ula^gjX10YpyM5s0nHoRwGF9=hvqx*{)&TKQ+%`Jl6HBzqnlobvT@* zz?Bi)MOuvY@k=nm;Pyw;=F#Y6_D@9KkxiBKaz6FB@eSeSnLbCB7X+5^(L@w(3a24g zb*ODa&hPTg4U#{VXL9Jo1P+wMUwJBp*oU>SADN%|PRHKHV=XKtN0>pBPQ&T`%VT~u z%vHN3`rvD+9XHQ>M>SqXz*&$+_E?|7X*Sy=67)Qhuq7zAzv?JJFBxuCX4m9hq^~>? z65{Y6x}BVXwdj}b@v2>c?^{NR=U!EO!0%f-=?ItK>MFN-DhuB*9*`?b3R&`CV?{z* z7ofJFN^O2C%e!?@E$zNtM(0kPr)jVrm+X& zQtH_Q#6CAxD>G$l$~!*E&HtJ8oN#%_6jq0(T%RhoH3e5tDn)mIBaZ%wT1rE2-YcMZ zG{iwT2R(-CISwiAzul^ zvw14LCh=wZf@s({L-IE9R@wx}yCW-qS-5cIXt@dmKXz)<&U*kQ`HLE=KEN(CbvK zOBLz;m0=@)k{0cTPdavK-3GR=?r`6JsRQ@HYOOUU0jzG4mJxq1*2x4Sj(@ zQqy%%i>T}T4?0D2JpP!NIZ7i-p{Ka^v%)_>{-+Q%(2xvjZWSA|+b9!}@A{LjytP>b zN(_gmw>uR5aEBZeumI?3w4vy z&2VKXFCBPU&(wq7D;_!esdiiXw9R3+`ATT!wYH zNAS&8(MotW$fA4bZ;u5=oY+EScYh^{;cH?0gb9}J0(|`nVp$fVrMdYQu*)DAoM@_iFt>Jg&MSbpxG}+h+ZhaG!<^6h;)NX zqQooZFIKazz25^?1-$9nnKni~m!e~Ff~3hIHKkw=To&);D(^ZS=M20K_TW&zC?X#v zBe%vEF{KZ*jHOgb_aTqtL|+{gP0zuiml{X#3E(td-eN`oHP_PRNVR`oNR+r+?(!Xe zVAKEaS;D`HY>Vv{4VksUn!9LvWkmbvj&H8e>N9HUV|wNkKF)-eh^N=^xFQSDnIi=K zI7h+;`;9eD^MarE%!f1Z0lMw3A>vz@q7Rf_ z<1R_x`DZKGo?f8Q_#?h}gC?t|xp}k7OGuholHw zGUD`@d4*^rP8GrzOj65iMJ(Pcy>?4z*O)pMZFxX3{kyj5gXC_hu&_aZVVAh^Cl}ei zuKhy{qTkXd+fxb>Pv!!l2zHs%4{;6fb9&3-9?97B$zu5s3GE$uI2xWOvJm5hbCwol zp&%eHY>Xa%N+)zFH?z+eTV|EqF(T{WOf2}t^o83pgnJJB3D>WQ^LcY{SFAVO+0^R|0HBLtKs6WQnr+*GRe3b+P!`FLx2F$KS28bEeepBdY6a=$dd&wqi^Y zc#nB>0E(BobkMVe8mg#KxnEaXkGnf~n`Erlr026{{YH;EhF0nld~o%O7$A47ZP-WW z>7WF@{*2AJeIHDniua$I8rps|XX@JB(82N>pDA-qnpU7juYG`D)D5SRws}wwr}?`w z`{FnHIb>*|V%ZV4VQ#TtepW3g^#9d%gL;7yWbS1pEi8ksU&8lRtx%`maO!e5WvoJi zhnZPK<noT3#>#CQu91RF{e`ROJ%oCDsXAAn0YqqnL`>0(0p?a|o8lNdvwo=|<8>WBY2g{h zYWyA@4l+LjbEOrct*H;NvDgB!xb7AO zeb(&b#4PM*q5=yvT#^@zWoW!Pty8a`oS?RB)m-%~f5xC@m_gYVK@Qj>%kV^8lLe%% zR#AwgWcRqQO;b6JiU8K@6D$COf4>+g8=E$T zIhM}nYv!bF!Z(t#madG!^m6bKv%ws|ysO-m6SH+PWciFquBG$4?qZ5`1g|5!FrRNE zvgNs8n@rHjwku~%x`&OI+f0`eF zIj29tmG+~RE-S77_!?LV5{OomLzOvQ2(o% zSAhMJ+1nClq4cyBH8mIFb#d}-C=S1{P?8Xaun$cQk@(Fxi%%-$^vtiyz zx8tCr92g6)sJ5mAt?c|S{1fxsT-+0`NKVStF}Vcs&7b4^;WjLkK5cHOSmxd+C=$lz zBwb3Vcp%;pI&3Gj8aw9Vp{9FtcJ_f_49v_gL zNzwdg&|m=RWSSc8whrCGzyTkZU>^I@WoTl)1rMk4li7=#m@niMM`Zlymu_lw^@^;A zXh7M*R4d&AN9jjBYz!cr0M?G?|D)3`4@z2!!N`VgfgQW;clH)>^%7|7>Ek*-)r|a5 z`}bA7P;+?y_y>t(AXORpeY}kZ4)r%akbZc#1hPG4su5^ol5ncoffdNj)P{A=Vk;up z{~t|P9uL*`{>K=MeP6PbJ^M(ELMlmRsZ=O2qeX>`l164>#+GcYD5-UepoVn*b=Q+=L&ih&3fBzPJnYOiL>80W>P`cGKaiF8| z2qLZ}bZafCev>D^ZvzKU`zr|n+KDA!1DZgOlyW!QEMf2XNI3(Tyl47^(4}IJ%sk?> zo+CoKtHM5gC6TdDfvfaozN+Q#Hb``L(F-18e&ldEtHaharjRNX*N+Uc#Y+S_I5ht_!kGwa1kG zjz5V=TJ2kL`MK4NxO>@S4DJSSQU=^;BLFbQ*#*UPV(<;p1R-Rr50PHq_GQh$ByCcbveE_3ovON+a@y2^cRn zb>15Sw{uS=@=T&S;t>Hwk^#%MCt>?VbOyh-Fl5;Elrru+*5RWxRRXB z(Ag}@mOw?n_yXRIP1sMpnF;m294UVav=P4O;w4kSw>mD1yEh*~J=B1-O);i4G3?lc zm;!ko;maqU>j8Zo5=@}rEv#|jdl@@vyhe)jx)yEDedLfzeq2%*vRabjnm8-^#jiTl ziW}`#U}f#lrTz-CNtswvJ zx#(@?7!g|Dn_IFOjx#>cl#Sll4Z?|jKf3AvM$FCE_zeh@KhPIn-x@Sdq^S%kH=d3@ z2Dc5C+p;q$s^e1P`H)9RD-o&S6kI$OzNXPY00lWB%bVaeEBH;IV5c1_$2q6mV#GL$ z+%HBB(qS7Mp5nDUVueAjnnP91jl6wyaBWh*A>aYf5RobFlpeZZA9|U7L?YEJ`j`AM zDemBM*8=fiK1-El@?guq-FeqWNT~GeQ~yk$86HCTMr)Ky@6(Jy|3 zM~{lamZ~~iaZ%I&vS_JzDgV65WKiOlfxL26zx-2}M7#rSOHRi+T=YJYea z&;0_kqW(d>>wi5-IZ{_{{#1b2re#~VG3ko5uLcwqhz~@9ll_m5B5dx%F3K-4ryaOV z7C9#Y`*Atq21q@X^Zo}Nh?o5foj&1>KDkqCU-UlIem8WOs*?e29id|wp-W$h$OP}N zMLC+x*BH+C=J38w-N$Jp<}?}Fm2*m!Ggadj?BK2p0m$eV_24E%zjfA1&DX_l4c6)( zeXo4`FVg(m4aOY?C~eR2MJ?vC^e z=w=lwOa6K#+ELYNa-zHI+C4>X@LSe3(S!B#HD8-?_M)Y0qA1q1!Km&rIO@7JbGz1k zP9$nbLQ=mdMI}&;dvV!eglEM9B)*T=KdULTmceAC?H)&;6>i@Ov}6 z$R=SL`6+3(rsY50Zp#E~ey`Vjjb4A!N^_~{&=|s9-E`f3U(8YNfYHLcNMsDc1uGF9 zoe;b1F#T`E^6 zX_F}GP{1uf#W(@;hF_M|g4p5R zdAsJNoLA)doH&E$+AcdWTj=MIe>pbMJCWju2SJGHeF^9F9ufDzRn@Q4LG>EI)e`WS zT`8K@6L&dn2PCV?NuI{+N9{+G1v~L<<$HQuJKD6E?ym)6t`AIu(Ef5QDpP35CbYNl zG`5ab$s{&y7*PmSVR{bXUg9K2x{Idxa)27N<=RBpa7hHe}d`;`62XE zwP+Yi`1If3&%KWwYe58jDOXP<)&!d`H@EYWSzY{^z8@{+y|NN|VpYd{+=MwGo$kO4lp1y3c48r(;LnWQ7`$(XH^+fa>$?I;{oD+)=7k>Y2! zl|N?bOp9J8g46z~AaN*$GLQV^cCS`WGDFE*8B#FDY@?Mwm(c&PqrC~HRP9+k@}qkr zi)XUD+NQvww2$y|VcHu}4Antw_ffgsao_P9IhAN%wVrrnFQPh(8l(S+So2myDKBJQ zfu?^#&$uf#&Bt*U5@|}}$`9J`Cs093fp7x^Gly0#kZ`=gUKUfxT5<0D(S2$S=xzgVF2C03U;Xg*6T-|+ZhM?@ z(l~sA*Y@9IdwY(_z@BaFV#;jI;h_L*LJWV!ZD}S1`^qW<$snj#+CEcxYdRizKYRGb zRZ}gyy>2_2Ty~TsnHnde7}s?VqiH7fvX3~4SqU@k z+s>3T+qbz*ibdbxpL>-I#WVlyQp0f_5Ls|gH^N|Ts{kD$wOVGtT%H7 zNlf#J8rz#*iG);fyIwqsa}gP{`z&6<@xuVwm)4GH{aT_i0UXl&HfdC@e{i5Z&Hi zf;(H-DTdzTkm)|?QXH*L?6~Ol_k}wptkmT~V>Ur!>ErmySGyJIR0Q8O?V0>#!~A1# zd!?G34jXkX8GfJychFW7FD_cE?F?Y!)T!p6%de670x2L*M7{lmdap>FoEAz*HkTwS zwOGJitkxMV)a;-Ic+(6J0lUS@Iv0u7O}xz^)EbdbDtPs-Yh-&OKRKnZ`bYTsVmSFw2Jd#-IB2nSX>!T)Amjh~N|Nb{{znM(SO)fxB$FtZp0(ol{E zX+HY2$z8J1bP>IKbnhN&)lbpxtGuH9GJpZ%xsjD`G=`RLRJl(=K`I)46JJ~_JH4#F zL|k`eRgX$)7{O|j6|a~JFCwV(BX-VeDNMO2GkDc-)y4su9zwq)vg0wbc$_eRJ+&&& zAsm~yHed756F`#fAHz46wLhk&cOcaRWw~2Ds41dgotLZ>oIKTsz0y=w&*4#Fjah!~7M3R02jEh1DZ3n9R0u*$2koc;B=a&uc zRiX}c5-;CzZ&jnrB3SW@6T@ETQb=;S8v=dsH07;JGMP%%zU^RbxfV;Ym0w~}ZUdjw z9f^ecywIl{CTeIOBaMB{sB(|Q54d_Oy0C_I$S&cHs5XbCsz~`sDBmu!_)#m~Cte zb*P?+oD`e#j4ph{niKh|a*2=I%P&xTdJ2kw^_SdHan}dLrIHO$E4R6PG^01|}UJC7r93e_2xUF!xS?#CsH`ko&RiH~2E2 zr9?4VF060h-2pNxXWzZ#;ii|B2#&tCNxSloCrhB0;;uPtWLiDIL~Fj<@vOCkT`i2LuK&|-uy0ab+Q#tRkX^NVOO!}%E50z>0&6$pbMk9p^7 z>9`nZ=K^KbJ|TVBU9>F8Z-;iYV0viy!_qSvkm{VA?ki+YtMqZtT7p)>>-ieBKSUKh zmaG+PiNE+q5PRktV1oc}^{gKdf6PJAubA}gzzfm>gU{ec&`cH8Y8iuQJsPl!YN;dg zjrl`VyADQBG*3XO--(kJc9tJl3hA^`C>>uamzXG%D0s9vR>)5*DO7B@W-gQUx1 z1jO*G|18i$P~s-Yhoas|(90@;3t}X@>jsIz>y|d>dou#08)dDw?JV}E@sy8yezyGv zep)Wv6WLxUiqaV*YIuXM*YG{9dqG+1Sp;~hM}0v29_KYG;|})`^5H>1F7gpFAbO;9 zE=ZH=yiB>ih2^#wyepljVW&kjSD{15v(iS!FbNDYG>d6s~z|l*}J}|T)J!$ zF3~&O0{6#GfhBH#gi>`Mc@Y~%A*?ZEnNH%OL!p{UihCpvNh=s&mJM=g%JIJ~qty@N zlfEtyk3m_fpu|<2HKmG-q+=B*Qq=D$7exqDi>Z*LH1v!WXC@6_%`P)qaBe|URJzc? zP*x)Nj5{8X3LbQ3wRG}Mh|LCwgVx}u-HmEMncJA*9xcQzrI|900_x;G*b(0U$(}(| z*7m2B)Y|?4f5ZAz%S+fH+BX^D9%4>C{lejdEs|@QoGy7QcT9{vZW6d3KdLOuwBc76 z&^#=okBB6MmQA+a@HdxS?z&{AfD&}@?o%N3PuDli`KFM383Z0#o9&RlJK9S++nY;M zK30m5lACYgF>r|{R4ZY`GP!C_H^<65lVxS`c{3@LR+4I)_4>T)`U3>i_Y zeRB1-zTmT`z#D!Ici!@Gxler3WWY*7zh>qsVz?g{Kw_%2=`k)inXLxH*tGW>#J3~%{f{$`TI0i3x4_@iL$xjJYG56 zPw(Y?^EYB%E1?FMuM8(#{_`N?xguVn4wdu))vE^Svq=I3)xv3~CM^bjE$4z#DKOcM zp0LfRoO#r`c~rPgvZr7mDk&Jfw2?zRbC$vGvB#WCR#1q(W5PO~P<(gRIdslhrh#X3 z3p|K^;EPD5CpJ0zB{Cod7my%7TQfB**fArr2^3wP zbk3>oUjPpl7PKlRmWu}j((y}j^6J$?a-TfaAiZ5&)eG?Mmy5FwZK1ALr%E*QkdMoy zSihE@ue>Xo&%daNH>_7m3X;CuS5&i)@rWHXgLGTe?D>FvC@1c+Bv$<;9ru8h3I&Jr z|4sASEpQuU)HH(-&oUlznY$$B9j%4&0M#Hw5ZwUzME}HcPRGtOTsetcF7ePV@TKo^ z@U>hJ4fUO#?JeQ`K0NC)8gRJKEKe*kO)IP$j@MJu@DJD>{{%uEvD=x$F}hTb3OKfi z)uwtZ9vRep#X~;l{YC?=rw6;R)Zm;ncVzX$&^_{|N-fqLU!=SKiM`n!9^4L5)V?w2 zuCG=68q4Rr;|e&9B85rk?xw2oYhnc6QRFA>P@M{-!x@4?<9NyEIUVh# z=;No`c+a(2ri=2;w(mtY(ZaUa+4I5^?4VAee!*vTcK3zYo_4N3eQz;$M&-9bv@Iu8 zLf=keB)ennpRzmx4qXRAo69dyiL1+ncFP_^y>h6N7PpQcf`_-dCc5e_ZK}S7A604D zit0o)y426DFEZ0Ny3~)X`I{mVIn=|wMt4In|7@QE$96Bc#UDqA{~!!0`0RjX08L+? z%5n=7NCw_^J-4_;>$X<29e1A%{iklate&|Ve?ryh<)Z>-P>m=REzViIWj+znVmu-`Bi0o@wC!)aLYYYVTq&W8v9t9CzmT0i#Q7 zhZh9nPgH$5Y5d#T8A*Yvw+)AeO5Ii;Z)U;|^ya?e7f_a4b8tJCQwDmS>J^xA6r(d5 zVwi&i9Vl7pmMd4^Nx6s*d7gd1J~AbYU$*q8&I-#;Ef%83NNKn-V4J8-OZ4~^p%Xn$ zGJbHWVKp<`h;5u4EWd5>R}s!hkG?9=&yk7b$+f6eUpod~S`IenTNd#)#w|aaaMmmV zvLaeKCff-bzjq=4za9?U&@WqZ#498eBBM>CAm|Ph7hfhF4aTs)@BY-8! zPKJ#|G4K9s+xq?xYEGqUQ_^tz$lKZ8TV`)1oxgJ(>59MiF`5l}j^dlr0tsFECypuy zc5yAls71rXXMR*O6=C)x;mp2Va7(4oQ9d6mEHqlJ=f681Gy|}{G!nW)jpSZ%L@JTn z@#1H=(a1@y7SYvgQR7pd#V4S2u10VF^6*6OX1MO^FU9W&-0fVATysUQO+Im1iKx?J z821PzXzvI^_3NlX-V+A7No*y$Wizz38@G31Mgy1*V=I8vWCw%Qr z2bGIOQC_z}314u_ZtyvWUsGX}&6{5%?*;n=GV72%`v+{2n9_g-l(^YF13k5M`yfDhLg%fhjl4WO*1K7WdU~3&E#Ee8uV0@)?CtER;E{T+ zQS}p;BC#b-CToj$vy97b*%m*oWrO>W-sls;r(t5iOHteM860dwv$cTsbUyV>10nOz zdvTGO{E0-)F8cl=`$~XKSA1ir)^jIRq^Q`=GcsnC9R6av9fzg5Hru-6teAo1hc%z! z+|j>Neb$7apKx8-mzSrOUuYjaZ4eWCG^d64V$(W5KR*dce+&MN^ij9N9%4pG;b)&2 z+&Ky*2Y%RC^;JH*h(Ro(8HJgF7P2!V#LYC zl_I9P$;Zj$Qv%!emx$`mp?LW)rQe%q>QZm?bH(pxvv<^e(;OlwQSu6b`*Y3Rf-GNL z+S0Y*JG0J~S*|tIMAxW2uIzU*li`?j?rW7#7c?>|&fuEwl_&U7xl5(X9g<(qrmU&b)hbv3pCUOk#wZe-~bvBVSyUBrVc1z??(t z9pqA*$^$5Q&xK*{g=_hAfG{{-FuI+xIQMO#@F4v(cFTEnM1Wh)XwgzGiAIT zzl0-NCGApTx1JfD^&SN0Dq*pk8hjxt@JqF@w# z0yV$bH@@J&A-?9-dV}IOfD~DZ802d`Rmd51@0)Mb^=#4Rs-&gMNg2kub8|91qFY1H zX0bK3XqtP`zj@I4L1N+%_9<{T3t;-c+*bQ4eGmkT-+?LOO2>ofli4Ry z)Z_kBi@Tr52BdSxYE+MaJG>UBgC}d)V_w7EEZ~DL?h(_z+39lkU8Zs3-6Q#@8K)E| zjau&Ax~U3QjH!*4AK2#&0-xHZg8mb|o#QppF9^y3;PGd+Eg{aA-GUol*VxQHLw?G_ z^x?N~&dEkzTxb4~tuLQDUNdwYd}aWcPm-=b04&JGTI8%ghi<{~f|KP%$WN}>&$U}j zs^6eMb;xKZH~ly_<0&dihqH-nAX31KY?3Alo)z)N`X@8qboU3lQ`!x-Ea@t+gV65b zeA!58Qyf|neSbx>=Mf60{Cj@@Sm=wx06P|3ua5=o`i|WM?D#D)N1`gEcIyGfCId)s z+gcfV!M^Aq6t&<5TR)tkhC{H#wOEC~`7W&Hq$~rg`zfB%efY#c)>)ppB{K1|q!HRQ zt7uY#vjauFU&+2mUwJuDGSD6JZ%udQ0cHfbcW32+qW{kYDB)oq0paAN+LEt=-b0aC_ed&su=A!^Tz{ojB9ofwPt$&uf(|^Hxsb{D_Y7#@1b#L?avUr`KjNq zc@rh|*y>M)ltTdmwFf$hCJMLW8Tt5pwwtjLzjhD)iHh!TydH3jDusa$cin`u+|zP3 z@TCIC=Wkl{x!ZSWC=$^Un;(>P1C=Kus_|_|XTsK*tB+L67G4N@6WQh>Y;U zT*nvIeUrK@-1&;96++<^0Eg}ZN~F>7D`wj%ofiZ#?Au81!#%gTnzeS94%2LrvYAIw zQU>`ZZ{`fFJFtf)d%gU?+SkAq9Q*)lQ(p1~nu==1pLmJqKV`(hG4N{DK%3}kt*thk z5#@0ba;QrEf2*WVI7i<4_Z{?=E}=d(D~9OSv|pT!N=|9U*IMKsqPH7s(w%9O628~* z$^eFv=jF-@r(A$83uUC*X|shT(}lNpiNlX`$IQEK-;)tA3-&R(fl1&+y}j1_Te~Ep z%sB@a^tcPHmBOXt{@`v(Mu$*g`V}FNJbH|5HvE;H(Sbd9*^M#JT|82W)=?JK267Wp zRiSfdX&+3g>D*g~(Yf4$QebyiKpAgiG9ZD%Ia7*NC?|h9zs!^jDFo6#tn7HGlXy-c z%`DIiX%6Qe z)||cYx4OVDQAce=`}lrL6$*@@HCfT@%h-2NHLp1;4xS=?*?{k{6h>Y<-1Q=wR;X9n3Uhuy&HFV(WA#%@f6R%{v~@79c<1XM%#xou5mU0c<_&!!J_U~ z(QU`C1C%II&EFUGN+jDaQe;`eksm_Idg9}^f&)r|IpJY}Bij}SP+xoGd-GS0(L+y; z`NG%fh^p>@cdio7Oc=J0Vh0^N3?8G%-UZxqgpx0Sn00`vJdpO*3E2PVcwY?y=XsiO zl^bxJej1q&`Han1vDyHA;d(xpZs69i)*r(iB5M}$7fZ_>fX)L@_>}AIrjx@ysePLg zKPViM4{I&@-#4k!HfGfvJSlm7`fTiD!tV)Z|8ZxTK#Hs!puf;3pHyBOBEd|{%LD%S zbo6EEF%Ar%QB}vdL8u_~Z}`h7aD(W-TTCqqYix-y>9f4k4RPs~e8L;1LKnxiHJ?v?Szp-T3_ltitP4@>nji4B?|lsm$(trQMq z^LsGk72xgw9HS74i%V^-*UImOyaq~a4>tG85Sw>*Jd=r$&sA!%l9@7;fbOsV^(w^W zIQjwNBNi=Y)k`j$_i!uzLymq$IU44l;7iu2Wvu_~w=^c^3sO>maetgSAhn4si|xX8 z`-8y_K+IL9s%m_Ss4U8J58)nPU%5hpfA6?{?N+*_7b8lJVvCwthc0!54fyd_`qK5- z2f#+MgwXVwZ3uX3w&5q~!@8_b5tJZV-VG;p1g^l+A#gwA5eg*HUYmd(-lDGHYEA|^5m_URXwV32@ zPMbkRDFtFu+m>Qc^K$+Ne~UgOU0O^z0={`JG|jL*4!(Q|#JmR#$wdp_7K4vGbKvVA z{llp^W2;lQJ#Yu(F-ldzJxIn%bYW*Y`;iCc26tCE7%m7do1J1^u6O~QC3Ed^xrSlTpf@q~wWjPB@a$ScxT6EZgk;r}a0H4eml;cAF zvk@hPn~=U5u-NLe2p|5m!HDgICqT*brxv_}aItpvjnG$|EL4RTBV5iW-flAvKXLl0 znFZ~fCjGQY{+?(iCnar&{zC~@|slmS#pQ^&V%KU3rAI>Y>f^v@``8OWZdetGg~p^%+-l;SBv7A!sO zB90XcNA{74ecT8Sf&|Ml-tW5LKd*2Y`G!+I{OGL`YYlm9(s3F*e_#H#&yL_+)KE}c zc{hC64&(Fy(v4Z4m%_Fy!nd>UDv3d$y5+>fA&H@tnZo^XFJS;&LnU(~N8pZM()x9k zOL=usf7rT?=yqVSl?%-+WYGzBa!&~}FNE>+umqm-uIW7cw1)yxGJ=Rl5r>qbHuRLC zR5dwgvL&K`>|MbqSuac)m!f|~zvne0;4$I(*KT{@$v(1xJk;Dp41dA9Uu>(13ySCQ zYgBf5+3o^~;E;0v-}5Oln1Kg3Z*qPA0h}r@T!FiWKX5^ZFaHcS8U0m z^7J(GE72s=w_kC49ILUYQhfknwK?A<4Xz(kpfz~DX&kbk6``7y74BanJftoL2M*Sl zH3?qYlINA+8Nmd>`|?^i(O=Hg)v z+;hL0yRn^P1*U)@<>5B@Bb4*At8OGg*74a_W%26wM9br~6`lE_BU!9hrW&7WM zO0skP-(xkeZolFgN&*Q6cRe2o+=O!<2Um`m2OvO?&-g_AucM`M68aYC-|=c0TT=ba zoQ@<1MLDTb_D53$Q21dmG?H96RoGrQ?m+8S2FpJ#OJi<@8quXq0tYac3fNL%xUlOo zr3dKpXkWR3AI`1%;GIVDwyEQw^!p3>v9Z33)9DNEjtbvT=!kHzqghhRF@H;1zpR{$?ly%irP5G_Og-C#!k_+m z1iWJnoG#`!jJCajs zBp|>47|r|JSKk98u-8tWeb4^edKCW@r7Ar$JxeJqUk6woA~*Lyz&8%jxB+_)P9l)i z1wTAss)rGbuiO%^62sfn9YY1>6xCQ_&d9yq8C`AAN?VOn#I?^J}5Vm zRCA4o@%rC9d-`SGbmRIzeW#%LZc%g#E0Z`|n5O!vis(K*l{3C!s&bauCfOx`+e{TU z5jUThT-kPGqPd=kr}M~dotjUp<{n{PHBJ-HFnq7Hx-WLUMQ`D@FG#EMvX-K$(TNH8E`@h`pzx`)b*REZxEI`XX zuo#sPZklhxcY;fgJ>T$EbPe;*F|f7S?*#hbYYiZj!kl%z+(^8w1IUU2Nj=cxCI55Z zdhO!G5#8pIUJM3GcD?6YwZKJ8Mi)kM_5lKaEd9Ymg@s1%^{}1YG1A3`&;2Aeqjv1(6{&nQ;otLOUWwqHZ|w0WZfqv zO3SIjE}fMsblwlinpMvarmt5mjpQq)mYV>d4wGN~hwLYj?I=zux&wxTjrwIyu%NvF(&>sUQ8dG!;49oMs$T z`R2pVc*yx`22brBmQDD!;7c{V_6fZ0Cmvl> zYn*hDF0aA43!8YYWB&9M6k*{JDgEi0do`f)*Su_=Or2n(Hb7Cr{nuZ&neQ6gRK=bx z1be-Pt6+2#!@T7=dq+?}y@!Z$&p&~=f&Z+ftpvGmLQZBC9g%j#I>8in4GW9)f;b{y z?+c&VtqCIrI-q$t>>24Vg#Sm%A>>Y|h(+z_$;Pif2{c7wf!uHV@y}GejjB(g3Hn0? zfs673LD~boQnPx)Sv>QLzwbUG?C934C0_g0%Pvo14t=cfi@ZXZZM_@3mEDSl@m7;+ zaio_9C)FgbNsfAr=P!UND;=i%`(P5bo!_TDP_v0sW!zhm$#bho=b3LN>c40$3?;*= zcc+FqbYb=2>Fpt2WLAT;GS@UY7X9NGDn`M**b=ijb;-!-P%?Hm^nN14iV{3Kodh3{ z39hr+AgP#F^P&ruFnM2h)hjLGuTJMO=T~yyB8tmhD?pt(gwrWZA-)<#41vXwsoa8z zyH(6o66)5Bq16(|E?$$$wVc zq!qdGNe<}C!Kh**{(*ydKj|=)`!$?`cyg5t^nP4N3JiD!nFf;Q>#Gjb6J>^iXiH_~ zhK#(&JmdS7eXBNT9qzFtagFi-{FiC(vB|I)S>Md zQ^rW>*%Xyh&uDm3mD7}Do_`cU9IzB8d-c7HSzk}AY|^Z)>iFN(#GtZnD@v2Y()&qg z15=YYRuBr6k4ut9#WZ#VYrv->7F}lNl*l*rh+p4ZLL+1VdhCF%es?|6Fl2**6uz;m zvcXq|^Rhp^zE}14Yf#KovEJ&(SnSs}#{oQjIZ$_V#f4(7dI=a)NN(nGi0xT(HFIV!4 zG5N@}4;oBS2ZX}++?8aUCP`fQ{@2QJSl|-ir9M~LU2-t-q{YdxMk)Hb^`3r8afz}n z-&Ctp@I83L+Fwdl!Dk}q@PYJ91bm?-J8~yO;9>)a6Ulppztq6RdquoBT{cmL*8lyt z>(Fj7?xGvs&c&Ks%=V1_$@Eo$~nzgQ5LPATyQ?B3N662^g z@31OB%2wde&|po7{epb&${w(OJj=UGg8d%VD=mUq5yxowTXvQ5oK|#&dX)R!zwK2U z0W%EX6-)NgBd;g{50;*1@(_(xh}majlWDxIcwY6L1D^3ib)@H7)`_Q4?kC5X>{1mg z)9Ro2H?=w@SI$8y)UMs+W#P=M{I3!k@3B3!#_ewJkEfaVcEvBJzed%d} zCE#_Q+`)lhDW{RE%8MhTkVPEr?f+o&Qdh9t*k%t1MQJR6gsP_e)0+L|$n)q6MBqk-L|c z;=lLb<}wj;x_J4NgY+AAm!wb%R&>R`mrUX4#`aLmwWaq%HQyVnZo@X5ul|elBC=c; zBz_nmUEcsiM3AS)eZ>1^&uJqxjJ%EWo&RaovUF)6T_=EJ027U`Y%Db=r~=I<2Vgw5 z7i$irg*6C{hr>WTO$%fh4wRhZ6#^%X$kP$LNDa+?+15&g)h^g)S&?zcmG!1<2qekr zJ>-^r`Y*X(>7Piv2;`Kda1HPn`R5X#{L7LJtCZ^=WpL4+)bz8*xyIKx&Nfp85qJvY zPygz{_!?nefLd~u(@VqG2IPGUw+K~c;ef-^GGw~>(vLU9obsE@ZjtstL?my@ zrhhIZ-%O5y2>qpd51Z<{9beFNL(VJOo)absI*A5TlxvheB@Z^g1WW?JlVt$qF>oQZ ztqGXjyQ^WkhMO z*us-%ksOoljPKlInR*>2y@!{1+5?42 z*&;D#qvbiZDpS_{2wR%NKFm%=38&4V$E#5w8-Oz*uY82`cS3&Ct~mrk_bf$E73W1d z(|*F7=Yb4G%B?HK(RDOA523W8F4Q)@5^Sg&P@}1shLBePZVbxJg7ixU3m!2?{Ydr= z0=6pHozEP4I$hY+aIHV%Qms^AI(M_g+9NB5@SxRE=_r%xAjw-(CPOPGDgecUtY|<^ zLjxJQv(`(H#m|)`>!$vnnHdC4?j1y?mX$5%GV*WhE_|T}#wj(*6oUQ!33TU_$;3)Z zFy&BFcWr;nxmk+Q`>MS-3i+k*vIOn{lPKIbb^g1c)NA1yVnnqxm|kPa@Rc@Iw!*~S z<+c2j1pU-Osw)uEfIUjG=38H63mi_Bn*o2%@YXK${&&+Un}5wcEmhN{;a=UYAo(;*ZQE`QHha>Pcb=C893vIjxg7l?2^UnU(roWbtd+Ca7tp>rn6wZTfS4fR z0>=b=s|HFcs~8MHMKRNboZ!lxj3OM7c!J#s@E&9-z=*_z!{&hvPGxM3h_h%;c#^7l z%M+s8tiu~Y#kY_>kZCP(@G8$cnfJS||2gMZL7lU)L{F5CH9L-8Cue@HMrypSY8q`qviM!}b;M!?*js@LAvQ96T11I4has}x8;a@9T=u9c{%2X_;Dn6T# z^aeX9Sh)8pLn_|`b4mWZC4=A4ahTQ>adtB&Fo`#kqc){7%d8!!@lGai{z>;tAv`*3 z_ReJQzNytzg3;S5yElT(wz2EQMRUW=2-N(Kj=d5;wq-vJbhljUNP;ok9|oen!J1I& zLEC^nGQTj4PKYPvTw3ZMvuq#^UL12a8h3u^zI;AN0?7K+-`T0lr<`%ELV#JeoG%Uw z_OxyePOep{$A-QRrKA0+?^NNtNOCz$(f$VVeK-hjA^I#2d9qv^OvqXXe(31WZRGir zswN5=Lo6xahgNa6R*DBIXE%4PxnnK~E`3&1_1@Hj3jK57AGF?r!U4>Oo}uMPFx?2S zHvnSn0PD_vPss5&Nyn13-~Muy6yCL#?XY>(!rz;=LyD7${-NS+4_OdNorBI@+#trR zs|I)SG`y7({|3L-1xH1u6@tygIKt>$7*#SbBl;Tpy$ZyQvKRHk#>Cx>@9lfY>RPy+0xy3z=aP}?7;1Zzs!EGfy8Nd8YDsX!7U@ za?lpQ2Tj_4@-s>LULnFu-tiiqBMxW&HF{!_@RubOb*Ae0mio-?^K#VM4RZ*}bA!GB7OqwnOC| zHn+KBM%jBqAe~=WhfaS9;-6M@%YfzzAo4unZhyZ~B6Hn9$v)gi;Jnu$3>H|kUQVlz z7bMjn6HO$~Y~T|v(O5fCKT3;cQL?aODry~A;oRuu**xs8&`XHk0)UJ1DFkyiao{AZ z5lq0^2d53lZy^tL6sUeOOq7s3`J+Pt8L*L7B*l4)ZdCpB`%AZaY)EJrpLoB4LzJnj zLZlJy{)X+#1i!F)(7AKKS#zjYW$MVFPNRHbYwG{!0`!ZxcaV`Dn28NeL>fog+bBPb ze>r(vCIj(nVPs zY3<{`-CtRkhQ>aoepC)Wd{Ft_kY zN%(i{+HSwC=$0J(8G4%1`_quOlUD?}*qfX|e^TxWsE~3#O|{B_ckB8;n2Z;Q0l-2? zY5_~MczH@*KZiY!MyeX+`(Wz0!@i5(YP_CkCh~04XZykkR~W>0{&^xdD1Ekd8_D)b zn=9Kdmh3NWn%+))DSm$G;D&j(jX;2mq1;bgmG`-<3M%2tN?=cD~nkFK{@08(s$ zuhR}3!E0+c0Yy&{*wRaCE7VWCD=FoIcGL)@uDeH7%FM*CY40M=M$l6v3!JTlyAb5!4KRcUoCcO2=eBJn zV>gk{q|Y)(tLWneCCpgu*Z_;TbBGwZr3~(UR2Z%SxeId-pTdbwZ+Ivc%B!^hnwLWO zT#x<8d^x-N_OlwOagA`RBgA9r$2-=?4Odigc#@kHFHk zXJ}G!a2|}IIRc)ZWO9N}IB!=)?AqI(SNVnOSVOO#jRg%X_@tGm_W$w$o0je;r6J)Q zAX{3%W#ld30pE2mzD0Yh496+iRZ0c8zhFHke8sos3`|Dy{^Q5`fQ}d-YUu|squtSr z%nxVmMVTpA@7stmglpT{WJ0eqGyjda$hW=%y{*G~lHNg47aOWxM+-wvRb5(Ja|6si z`7c})YgBQGqCE?E^GG>zSF{59$rO`QB|Z=o$Bn4Gq<;f8foH_{=jWRO&J(7k%B`8? z#B|A^*F{D$Eu;-`V;ch3b9CwNB==XmAzG||3q(P=GXohF0#sEjehtfhfCq~Ap^Ne&8vja93DM`aF}!#0)_`OI=dGe)z!cZHOO%4 zHRaD@MSvvcGv0{y_x2|>SqldDf^m(*=5vZZhSj&c9Ja!NpXu$8h6_1og>M}?VClq{ z$Mg2g9?=u}8#M{WD{S=Vw0lX+^TvoebhZhjYiQ3U8q-M2J=!nj%|icBFO6>vLAko* z|Lf@58L?dP85UpL+@j*b6sCy`n#6S-s_0!9w_V>nU@fVJ zi4mJc3wq}$32O;&2jaVSs5lwW4bYTx<&ll?M}V4(<~Pj6k<|nTM&n?7qUbiSULQR^ zG*})CU(7-L*P=buEXWy%^L%j7FyHPr^VhvUNa3gn)ud%LTSIeg6|T?o7!FZ|mg8Y; z8s(-F-LLny5&ThwqzfU~!P+Q`L7J|$F27c@dAr-<`cqg|rarDk*jejf9+K$Mq$gz! zkodNGz#ndvRyTS?&{jp!c!RZXj7bF$;3qFOMwBCO8wTQYyHqZ%NJ7*ORhEp<#`m#Z zb(saU?Gv9r-CbA)>!njv1l&{L;(QLIM%#`k+8ggts>9KqJn4UujX%pDCq$)Ejp{nE z!TRj^_#<0Ee57$x?+&CUdNF&3vG>O@yih+VUcB`axSJIYM2}f!A%CVf2{C;Mr5fhj z+{Ay~OZkuVh6QvPOtKzlJhMZ|Vld;k1JR5e*LPIbE3-pLkR6RT48{#hCu;Rrl!P6~ zTkQd}x^0-RA&I+LV{2Fm_L0GfRKD3i2nH(CBOOOCHx7)We|B^C4?FLKPvhzFL|R1i z4D^eRx+oSmMsOQl|8&3Z^bT>P?vf<1VKCb59e3qa)+<1A1l*7{^aHjEE%A+s+RLew z1b>1WDdn^-#)iY^m6<&EVE;}VkHzJ*i~bslw}sZuO^W-!WKzya8UIq&(BqwH5$ZD# zMqh{QCD3507+!KfZwmU&#nXwXDV`2I!>i+zpXnbaqR*Bgx3U39xDPq&KyN;7R7uhh zq~dMrbPA)$0|$?^Zv(w5xyE%G>eQnWFPjFgw87(I{o68k9Q<)yTz_S-wp|DQpv9(` zC)r|_7N)naNFv}yD@yhmx;UaWg8qTwtRVP=0qnnp9*&|fJ}%(lZ2kZSRS$v#l}?S^ zXOF3BCGzyX&#IUFP`j#KK*s5S=F%I{T4x&ZZv9=UYdZR^tUgmB+X=sQWu%M)fS#rX zRcF?FDKb*!2Rf7(^Yp6AqILLVe;Kr1BI^n4(`sG5W?x1gtVS(A5?Ot>ouSnX!Y_(j zLs^|vHNMBqI@>q1%gFc!4c0?!w;r2XSz=*WVV9I8i2Wnkc#sxzvD@q%=j}kQ+uV$} za8Saq)g$>Um_lkBU+Bb$e;_`cFE2gDR5vGAJ>(Ot)dG0eO2f&37HU{$GPw5d`sJN* z>d-011nqDzz4B`z8H|NMM!w#JR|=C%4|P*AY{(A!#MHJ1%(sQ!wBmzR>yR z_dM8z5<_oc(#(hSz@{ zHg(%mH>$_mC$(Zz0A9TeqPSCO8U~vZpMUq*H=RBd9W@lc95VKXJZXVh96JVFFcp7+ zQrI)_573Ezw!++5T)aYUfMKFtmoc|0NuvRic|K)RUYr}`NJWlia0=^G2Wt&`<1Z5qA=bZ=qUrIuVi1KMXed#&zAUOY=%wp>Z5OX2{kMDO;zZMM^qi;` zpA8n7@IH=8KkxvA!;~+m5gJ;;d00O<(SO+*bpIBV8k^7l>?X5|G!X1y=Q!S5bk#o# z;`+T4!9LO(eKht{D!VHG0@6DAI{y+fb#5ZQ9MO0PRmYH8%1-V$`+b|04S#)_e78s* z!g?5gJDl~*V<2WZ--x{&2X(A)lWjIi(oF~z z$2j&!tdouUey(nyW`>a*q3s3BR#UdIZ_BH9 zCE+m!R)ZhU%~{JVNSTm0F8Q~_n6MTsrKhBy+vI1=4tPLGvN zZ&}Z?nQ-nF8jz?-@I-)`TR!mf%3rUsEX!Lm5&&4?F6ybWbD)#!VTHzTpIRDuO_GC-xG=B zM=(So7G5vw_ngXV7CO^sU(?LVHwA+ckJ)Mg-hq};e!2GMA>v*4V|P5+(1iELmOc`Q4thdKfNM7gUW!jvX`u2?9wbXRtr*xZ+t|$AkZggO)miH++Em8B zuyMm#{p=N8_X zUC|(RJs-Q7e~P_|C5U)jV0g(fX@%k1^14kZTXsX#mwyq-)gyICLn}FKxIpR(0!aR# zs?Mq;BXc|8&=L;04Gfkgn`R}OcHBpk&r{r>|C*j`2X#{8eLH2@d$*dILGEc+F<%|U zwL#>5OUp2^uNujv7DsPV9KWjgbdR!=UJT49p1x0EKkNa3$_7T|I}cO%=HLa4lW|NH zKlTKx6d!kYwbULA#rGoR66EDaGKGk5PM6>Q18wN`2!p|jKU>Mj5>OBM_@)YQR(Lwa zNvv_5pVo0TE)^8E#ksWH_77Fe=`d~ruGZ+Y-I!m0&AbuMP2?c=L$#&u2raiB%UlP_FhVH z(G2@Zyk@5;fZ#@CXXE4Er&9JR=1wurqTia+DNc;q|74Zw@ZMIsO5~r3LD*ozeiJ9R z!}^s@o*NsojxY#7B3EE`7~CQ`S(BubHGSZXyibV+{834vf4fKOK|IYG7pPr#UsGvq z@8-ci8Ypl{GxPuC-0ZO(jsqlpv2HhYc{znR5&g8DqLOERjF8w|oUX1-7q2m0%dVjv z0a|4S_Zj`m6h(a5!9m&{1BfpTEv0C@ldpRWos|?i-V|bHb&GI%rjZtcK>Vmh-Ri~x zA&8&bDhTmNYqPK^&W~O_aXSRww2PD`J>5jjJ35DH-IQeHS;%(-w^|xMg?vxecbw?c zmZ@Lz4E&-iUqe z!fQjfqrvZ1;^AZ&Bcz=2R$4f6Ck+Ei;Y`r688sW|V){i;+-8*4W^ssVu?}*au*yb^ z^t|mOSoN8VfBCNC#&Gl%Xa}9L zUy^`9N8fY1Ct5}$N)ay-d<<>BSg<1XF>cHl#q(3Y7p#aOf3rzWC6@{4SvPF&0V*(b zNqV|j?qN&^r#X(~&C7+Fh8A8y7U~6Ii7T*h7}goDZgI><|E)Az$fb69yy@8-u7EyJ zD|@(&;|r0`0j6})h`_qt1fr#RKAAELW$E=JtQ=CtvkPQz!Gp31+GH7$&Vh^}nxrxm zKJ$)iPX8{_(*?bWt2LE^Q1TNz;QL4Y1l^RWJ>U#An3%)OW~9T6T885IxZ;`k!>m_2 zJS24uidEt7W>1+W6_Nm^$EAf&MG?okxDgZacOXqk(>=t7Axvfvqm<8%ORVlvD$%zu z8BHselkNY%TE-5&7ew7r4b%|DC@@At(T||JXuX;QG`N}Q_jNXU)h=J#iqxQ2zuaMiVfXrCGn?!4RPa9IlHVt3D(|^wQ}MT;B)S!e?jW6>8?W6rwJ?4cS-i)& zHQ?MRc$gVeh-?{qXF0(Y`H$D2kiTL{zt|W^j{BTl_(fyj1 zZmz;##x6HX`t1@w&Cq3KQcIevPd(_%IKQ#eLj}?`B55;(ct*9P&nX*TrnrAsuC>`d zbrmbvpukKJ$<{Szrgkmpk{(0%CED*J3ZS*>zAcDaIu1x+EV_v$8D&-2GSIV-hd!QR1=cm%XF1hUWr@I_r?Z#1z?w} z_Gun71~LScrpd*L``2RY>p~crO2rfncwhA&2O<-SFHIwDQ+nrF^2#QyoH(XHgQ^5e zi+QOK-`NFrdF&T9Z<})X>kZRy-}F(eOl`)hlHkKAlmO$937bBl^-R!wCV;Pedw3ZJ z5UssHY9a~SE$p;pb01W#Gc~IqY+x=NP(c64LQ^TFP5BRzh4%{6*PK1@R2_Q1O0LZ> z_Ga9|Jqjg*ssQ{zk?F?1Q;NAwlBrxsmju`LO1JCNRQ8xx zm^^=!71$NtT=O7!A6%qfoi@k+K?X$WLlq_ zwUsy{a9|U*q1U9c9Mb2>8cW7w)aD&Ep^Wklb-hTU&^g#K3IKh5+A;6^U1m;_FY(|1 zIKLa%Tz^sdJ7EqfoRJ_-NJTRy%J+Ivk`!BJiBXK)p#^ndq4r_TPU={%bSn^nYm5eI zeJb$t!yf7XpT`SX`b)wM(kt}CB&{$UuABR&8u^EKWnvljH_d^(Lg117m1{V$dm-8B zuKX-cB&qg;y9cw6UOOg2moJAFR7?%-{36=@iod||wbE+c>-PlTeq3z&59b05|D^nT zNEicWaFBja*~TGx4+T_8Li5vJc(-B^TWybHRpWt`h5RC1phF$NZle)aycp)g^0BUo zg}4gD@-AUDGrG8c_Q-r&7Gh;3S8a9bjS^kU>jZ`*Lqu2SEt!tJ8RBv?;oZQ1z2ja& z6I$w$4xX8rx<@fR0n*2sJ(@A?@#NNZRV@C~H1aaRE1iMnp>kowGM*<>QhxY86na`= z*^FcWFEw2>Ee%aW98c@1wyu1>i?#0+|D&3XUBL~(aeT1E>psVVN7%tMo}hV5vUzt}t1@hi3T_H|w2*nvIw(V#QBgGOTGS>hL_=FB{))JZ zW1f5$_JafD+VajFtgASE%VT%N1L2!}^t0ePWthTpvIX`MHUnC(?o0VDq94Z0HSzPh zs!aZOO|v9hU;}^Eu~iJ4DzHOlt(3J40^UQAB#k?HE@rb(0s6mW$ow#y- zo!i)&4N>GF%j5!bjo`%joW-V-m!LDsYnPc_k`^Kg@Z`M3l4y0XvH`6RZKf#tPhNoX zJ6B*@?Rxi!DuR#X9uWEYyk;4ihXK-&ebaRx_PdCuH1Bpw&KKc&X8C*YrB*w3W}^fw z_GamNAVV+uBX}Io`krNmVgxa1r%&p2gHxH)|KuS=Et?`rqBVE}inu6UUGf%zqjm_% zH|;X3E20FnILCW;oF{~nUbdD0%-makSc6fVAl1!+Ghv z_vA4Qcz4js-J~5#)7Qx25meSKe|OXzlk+qAyyMgJ{M7QuKiPx$;=alFw@8*duM>W; z^B(g3Q*HF;=hs&2G!mb`-ZdVR9CV@0&o|lR*>&A>GOW{QyStftIYUFM`A>hQth#*d z>YX6#h{D-IcuTd)ZLehBzu&xXP6U4}LUwyoH|PWH=i|2y<3wMuw=Z=@VR?y$t*eq4 zP1{tHiQ;SlCk@U1nmwOqSy?#e%^gsX7bZCEcQ zdwye4QU64=(%#0K_Qk^+!lkNU19y^}3}47sn36;+ix>H#(=P)pPHRYAnTz97K1{D! z8qt68&+*#5g}l(f!1a39lNKf4W9W zpE&zuYa@nhSt4-QAhGN%g3O^78U|gR^EGls_4pG29A=r#(a$K7R3&pNj|9Z<)>a+z@8{ z2vB~zyq1|ZQ+^AKVhs~K2zC~CKf9Bl+%o9S3M7D@1-T~o7hU%;JDLd64<{wW1;y4C zJeSm)*j1sTC2C}zkWbKd2^C*xyyGJfaS18wlyizHHYu8+k6|p%5E)B5CAIV3)~UBg z@Y7DLE~M(zBT%rYiZ}JvVW@r~oFn;=s3TY4qqAHz8<*I!*;jjIRWCjiQV(+x2X5kB zS29*Jk1EbcXgk^{Qe`@6sl9=-l}~d_loMTQ;>mUV;4r4wC`IDj!Rb|ebxrZB=;$7A zQGad}Y0p{+Jn|E3*r@d#HwS+5=h9r<(j-t}MJtsuAgns#rgHoS{|+u7yYuOT&JJ9d zkpRQIF(Ws;&3lA;necA#nmBs=YuJu_{(6U}1^leT%zVe_C8uF|;@t(JA+JhVU$ioX z`^$OV#3xoI&a4`T4bh^5>zN&QmDvJhOsV`7x74H9x|z2I6M@y{H5wUtE)(FHj1kJ% z2t`uf%Hb&&mu*OqD343@Y(+cCEL@&>iLrL;7p{8>LC=a#j zW^0|gI==1?kuaZ^$mDIOB|COdMkx1{{cIbPRQXQwN1VFXOMC6Q5I)iryYz2mhpE!$ z#BAR%@?q;z`&)v#Xon_!WG!nSQWc^WXV3h$I$+6Wk<-z{fnRkLUxcMUw!a0Z9;f}4y{4U#8y5j?kVVzGtA-^b8C^NaluC4V6D1y!@^P?W8V3hH*tjeOnI8I z7_FRX?U!J}^Z8V^W`&P$DK2i;OnLI6_H0BZoD^Q1A_3(UOD~Fxb7%V`(VBLt(FvV- znx8#I`*Au<%ni2BXptw0+y|2OaIR)DtNs^H#UxVpCPMwm#pc z5hT*Vs!A8%0QvA`%$)XF4?EB^AbM$ZjB2}ib*eKfb|o<4?t$d9X(~#+)((lXvW3K* zC(h57E0y0$19d^Uy0Leo{Yvp;Z4vKMCkOxaJlUG}r;sO6X20R=TWS~`dkI4-t*|xf zt8#p^$B|}tmmJLs$ExcBJmdU~e5i#)n5S)-U-)$Rs?s&ZUm5xe3G+(EAl2KnSGk=y z2egF9Zr9)$4-20CeEB!z_j#+!aN)^B%&Q=gbIak#E3n!jr>Z=DmJdU=IGwyie~AXq z4~=z{E)|6t+LD6WJ4V3N9!fu`JvZw0!%}lPQw$1z77qo(OY;^zJdeqxu-BaL^JkBz zKlmizF71mq#ll3uc`E5tuWMaGk-uyS<2(xM5~L7m(SB;my)|8EJTcFx>0hg zl0~hMP397YmEoe-Bs#Sr1!;k2gqwN9NjsI})!S}6iBoL-+1Z^xvx?iPzDLFTrORdV zp*JvBPZ@fJH$sU_ai1*LO;q5%VI#lh?!ap5n4sqc9UY`P|6yVSB_<^cp5ZEWOOft* Y^)c682i>{{*D>G| diff --git a/ui/src/components/_other/Header.tsx b/ui/src/components/_other/Header.tsx new file mode 100644 index 0000000..b038934 --- /dev/null +++ b/ui/src/components/_other/Header.tsx @@ -0,0 +1,74 @@ +import { getOperatingSystem } from "@/utils/platform"; +import { IconSearch, IconUser } from "./Icons"; +import Keybind from "./Keybind"; +import { useUIContext } from "@/state/UI"; + +function Header() { + let userOs = undefined; + + if (typeof window !== "undefined") { + userOs = getOperatingSystem(); + } + + const { dispatch: UIDispatch } = useUIContext(); + + return ( +
+

Dependify

+ +
+ + +
+
+ ); +} + +export default Header; + +// import { getOperatingSystem } from "@/utils/platform"; +// import { IconSearch, IconUser } from "./Icons"; + +// function Header() { +// let userOs = undefined; + +// if (typeof window !== "undefined") { +// userOs = getOperatingSystem(); +// } + +// return ( +//
+//
+// +//
+ +//

Dependify

+ +//
+// {/* +// {userOs === "Mac" ? "⌘+K" : "CMD K"} +// */} +// +//
+//
+// ); +// } + +// export default Header; diff --git a/ui/src/components/shared/Icons.tsx b/ui/src/components/_other/Icons.tsx similarity index 87% rename from ui/src/components/shared/Icons.tsx rename to ui/src/components/_other/Icons.tsx index 9f94274..1dad94e 100644 --- a/ui/src/components/shared/Icons.tsx +++ b/ui/src/components/_other/Icons.tsx @@ -397,11 +397,7 @@ export function IconUser({ className }: IconProps) { export function IconSettings({ ...props }: IconProps) { return ( - + ; +} + +export function IconBracketsEllipses({ ...props }: IconProps) { + return ( + + + + + + + + ); +} + +export function IconMinusCircle({ ...props }: IconProps) { return ( -<> - - ) -} \ No newline at end of file + + + + ); +} + +export function IconEye({ ...props }: IconProps) { + return ( + + + + + ); +} + +export function IconPlusCircle({ ...props }: IconProps) { + return ( + + + + ); +} diff --git a/ui/src/components/_other/Keybind.tsx b/ui/src/components/_other/Keybind.tsx new file mode 100644 index 0000000..d408a21 --- /dev/null +++ b/ui/src/components/_other/Keybind.tsx @@ -0,0 +1,16 @@ +import React from "react"; + +interface Props extends React.ButtonHTMLAttributes {} + +function Keybind({ className, children, ...props }: Props) { + return ( + + {children} + + ); +} + +export default Keybind; diff --git a/ui/src/components/_other/Layout.tsx b/ui/src/components/_other/Layout.tsx new file mode 100644 index 0000000..2f72391 --- /dev/null +++ b/ui/src/components/_other/Layout.tsx @@ -0,0 +1,73 @@ +import React from "react"; +import Header from "./Header"; +import Sidebar from "./Sidebar"; +import { motion } from "framer-motion"; +import { CMDK } from "../navigation/cmdk/CMDK"; + +export interface LayoutProps + extends React.ButtonHTMLAttributes {} + +function Layout({ className, children, ...props }: LayoutProps) { + return ( +
+ + +
+ +
+ + + + {children} + +
+
+ ); +} + +export default Layout; + +// import React from "react"; +// import Header from "../shared/Header"; +// import Sidebar from "../shared/Sidebar"; +// import { motion } from "framer-motion"; +// import { CMDK } from "../navigation/cmdk/CMDK"; + +// export interface LayoutProps +// extends React.ButtonHTMLAttributes {} + +// function Layout({ className, children, ...props }: LayoutProps) { +// return ( +//
+// + +//
+ +//
+// + +//
+// {children} +//
+//
+//
+// ); +// } + +// export default Layout; diff --git a/ui/src/components/_other/Sidebar.tsx b/ui/src/components/_other/Sidebar.tsx new file mode 100644 index 0000000..d0290b9 --- /dev/null +++ b/ui/src/components/_other/Sidebar.tsx @@ -0,0 +1,190 @@ +import { useRouter } from "next/router"; +import React from "react"; +import { IconDatabase, IconGrid, IconNotification, IconSearch } from "./Icons"; +import Link from "next/link"; +import { motion } from "framer-motion"; + +function Sidebar() { + const path = useRouter().pathname; + + return ( + + ); +} + +export default Sidebar; + +function SidebarMenuItem({ + children, + href, +}: { + children: React.ReactNode; + href: string; +}) { + const isActive = useRouter().pathname === href; + + return ( + +
  • + + {children} + + {isActive && ( + + )} +
  • + + ); +} + +// import { useRouter } from "next/router"; +// import React from "react"; +// import Link from "next/link"; +// import { AnimatePresence, motion } from "framer-motion"; +// import { IconDependify, IconSearch, IconDatabase } from "../shared/Icons"; + +// function Sidebar() { +// const path = useRouter().pathname; + +// return ( +// +// ); +// } + +// export default Sidebar; + +// function SidebarMenuItem({ +// children, +// href, +// }: { +// children: React.ReactNode; +// href: string; +// }) { +// const isActive = useRouter().pathname === href; + +// let text = +// href === "/" ? "Dashboard" : href.replace("/", "").replace("-", " "); +// text = text.replace(/\b\w/g, (l) => l.toUpperCase()); + +// return ( +// +//
  • +// +// {children} +// {text} +// +// {isActive && ( +// +// +// )} +//
  • +// +// ); +// } diff --git a/ui/src/components/other/search/DataSourceRow.tsx b/ui/src/components/_other/scan/DataSourceRow.tsx similarity index 97% rename from ui/src/components/other/search/DataSourceRow.tsx rename to ui/src/components/_other/scan/DataSourceRow.tsx index 1c97515..aabeb4e 100644 --- a/ui/src/components/other/search/DataSourceRow.tsx +++ b/ui/src/components/_other/scan/DataSourceRow.tsx @@ -1,5 +1,5 @@ import ResizablePanel from "@/components/motion/ResizablePanel"; -import { IconChevron } from "@/components/shared/Icons"; +import { IconChevron } from "@/components/_other/Icons"; import { Dependency } from "@/types/dependency"; import { AnimatePresence } from "framer-motion"; import { useState } from "react"; diff --git a/ui/src/components/_other/scan/QueryList.tsx b/ui/src/components/_other/scan/QueryList.tsx new file mode 100644 index 0000000..f4cea46 --- /dev/null +++ b/ui/src/components/_other/scan/QueryList.tsx @@ -0,0 +1,87 @@ +import ResizablePanel from "@/components/motion/ResizablePanel"; +import { Button } from "@/components/input/Button"; +import { IconMinusCircle } from "@/components/_other/Icons"; +import BodyBase from "@/components/text/BodyBase"; +import BodyLarge from "@/components/text/BodyLarge"; +import { Query } from "@/types/scan"; +import { AnimatePresence, motion } from "framer-motion"; +import { importQuery } from "@/utils/query"; +import { useState } from "react"; +import { IconPlusCircle } from "@/components/_other/Icons"; + +function QueryList({ + queries, + onClear, + onRemove, + title, +}: { + queries: Query[] | undefined; + onClear: () => void; + onRemove: (query: Query) => void; + title: string; +}) { + const [isExpanded, setIsExpanded] = useState(false); + + return ( +
    +
    + {title} + +
    + {queries && queries.length > 0 ? ( + + +
      + {queries ? ( + queries.map((query, i) => ( + + + +
    + + + )) + ) : ( +
    + )} + + + + ) : ( +
    + )} + + ); +} + +export default QueryList; diff --git a/ui/src/components/_other/scan/ScanForm.tsx b/ui/src/components/_other/scan/ScanForm.tsx new file mode 100644 index 0000000..a4e111f --- /dev/null +++ b/ui/src/components/_other/scan/ScanForm.tsx @@ -0,0 +1,326 @@ +import { CheckboxLabel, Checkbox } from "@/components/input/Checkbox"; +import { InputField } from "@/components/input/input/InputField"; +import InputLabel from "@/components/input/input/InputLabel"; +import { + IconChevron, + IconDependify, + IconMinusCircle, + IconSpinner, +} from "@/components/_other/Icons"; +import BodyLarge from "@/components/text/BodyLarge"; +import { Formik, Form } from "formik"; +import React, { ChangeEvent, useEffect, useState } from "react"; +import { VersionType, getVersionPlaceholder } from "@/utils/version"; +import ResizablePanel from "@/components/motion/ResizablePanel"; +import { Button } from "@/components/input/Button"; +import SelectDropdown from "@/components/input/SelectDropdown"; +import InputError from "@/components/input/input/InputError"; +import { capitalize } from "@/utils/formatting"; +import { AnimatePresence } from "framer-motion"; +import { versions } from "process"; +import { ScanFormToQuery, addRecentQuery, saveQuery } from "@/utils/query"; +import { ScanResult } from "@/utils/fakeApi"; +import { VersionGuard, type ScanFormValues, Query } from "@/types/scan"; + +type Props = { + setSearchResults: React.Dispatch< + React.SetStateAction + >; +}; + +function ScanForm({ setSearchResults }: Props) { + const [versionGuards, setVersionGuards] = useState([]); + + const [isOpen, setIsOpen] = useState(true); + const [versionType, setVersionType] = useState("exact"); + + const [initialValues, setInitialValues] = useState({ + dependencyName: "", + exactMatch: false, + versionType: "exact", + version: "", + }); + + async function handleSearch(formValues: ScanFormValues) { + addRecentQuery(ScanFormToQuery(formValues, versionGuards)); + + setSearchResults(ScanResult); + await new Promise((r) => setTimeout(r, 1000)); // React doesn't have enough time to remove dom nodes? It glitches out with the emptystate + } + + function importQuery(query: Query) { + setVersionGuards(query.versions); + setInitialValues({ + dependencyName: query.dependencyName, + exactMatch: query.exactMatch, + versionType: "exact", + version: "", + }); + } + + useEffect(() => { + window.addEventListener("importQuery", (event: CustomEventInit) => { + importQuery(event.detail as Query); + }); + + return () => { + window.removeEventListener( + "importQuery", + (event: CustomEventInit) => { + importQuery(event.detail as Query); + } + ); + }; + }, []); + + return ( + { + await new Promise((r) => setTimeout(r, 4000)); + console.log(values); + handleSearch(values); + }} + validateOnMount={false} + validateOnBlur={false} + validateOnChange={true} + > + {({ isSubmitting, setFieldValue, values, setValues }) => ( +
    + {/* Query */} +
    +
    + Query +
    + +
    +
    + + Dependency Name + +
    + + } + type="text" + placeholder="Log4j" + /> + + ) => { + setFieldValue("exactMatch", e.target.checked); + }} + id="exactMatch" + name="exactMatch" + /> + Only exact match + +
    +
    +
    +
    + + {/* Version Guards */} +
    +
    setIsOpen((prev) => !prev)} + className="flex w-full cursor-pointer select-none items-center gap-2 px-8 text-white" + > + + Version Guards +
    + + + {isOpen && ( + +
    +
    + + Version Type + + { + setFieldValue("version", ""); + setFieldValue("versionType", value); + }} + options={["exact", "range", "below", "above"]} + /> +
    + +
    + + Version (Example: {getVersionPlaceholder(versionType)}) + + + + ) => { + if (e.key === "Enter") { + e.preventDefault(); + + if (values.version) { + setVersionGuards((prev) => [ + ...prev, + { + type: versionType, + version: values.version, + }, + ]); + setFieldValue("version", ""); + } + } + }} + /> + +
    + + +
    + {versions && versions && ( +
    + + + + + + + + + + + {versionGuards && + versionGuards.map((version, index) => ( + + + + + + ))} + +
    + Type + + Version +
    + {capitalize(version.type)} + + {version.version} + + +
    +
    + )} +
    + )} +
    +
    + +
    + + + +
    +
    + )} +
    + ); +} + +export default ScanForm; diff --git a/ui/src/components/_other/scan/VersionGuards.tsx b/ui/src/components/_other/scan/VersionGuards.tsx new file mode 100644 index 0000000..fdbf901 --- /dev/null +++ b/ui/src/components/_other/scan/VersionGuards.tsx @@ -0,0 +1,166 @@ +import ResizablePanel from "@/components/motion/ResizablePanel"; +import { Button } from "@/components/input/Button"; +import SelectDropdown from "@/components/input/SelectDropdown"; +import InputError from "@/components/input/input/InputError"; +import { InputField } from "@/components/input/input/InputField"; +import InputLabel from "@/components/input/input/InputLabel"; +import { IconChevron, IconSpinner } from "@/components/_other/Icons"; +import Body from "@/components/text/Body"; +import BodyLarge from "@/components/text/BodyLarge"; +import { VersionGuard } from "@/types/scan"; +import { capitalize } from "@/utils/formatting"; +import { VersionType, getVersionPlaceholder } from "@/utils/version"; +import { Formik, Form } from "formik"; +import { AnimatePresence } from "framer-motion"; +import { useState } from "react"; + +function VersionGuards({ + versions, + addVersionGuard, + removeVersionGuard, +}: { + versions: Array; + addVersionGuard: (value: VersionGuard) => void; + removeVersionGuard: (value: VersionGuard) => void; +}) { + const [isOpen, setIsOpen] = useState(true); + const [versionType, setVersionType] = useState("exact"); // exact, range, below, above + + return ( + <> +
    +
    setIsOpen((prev) => !prev)} + className="flex w-full cursor-pointer select-none items-center gap-2 px-8 text-white" + > + + Version Guards +
    + + + {isOpen && ( + +
    + { + if (values.version) { + addVersionGuard({ + type: versionType, + version: values.version, + }); + } + }} + validateOnMount={false} + validateOnBlur={false} + validateOnChange={true} + > + {({ isSubmitting, setFieldValue, values }) => ( +
    +
    + + Version Type + + { + setFieldValue("version", ""); + setVersionType(value as VersionType); + }} + options={["exact", "range", "below", "above"]} + /> +
    + +
    + + Version (Example: {getVersionPlaceholder(versionType)} + ) + + + + +
    + + +
    + )} +
    +
    + {versions && versions && ( +
    + + + + + + + + + + + {versions.map((version, index) => ( + + + + + + ))} + +
    + Type + + Version +
    + {capitalize(version.type)} + + {version.version} + + +
    +
    + )} +
    + )} +
    +
    + + ); +} + +export default VersionGuards; diff --git a/ui/src/components/primitives/Button.tsx b/ui/src/components/input/Button.tsx similarity index 73% rename from ui/src/components/primitives/Button.tsx rename to ui/src/components/input/Button.tsx index 57967bf..121bf6d 100644 --- a/ui/src/components/primitives/Button.tsx +++ b/ui/src/components/input/Button.tsx @@ -1,22 +1,23 @@ import React from "react"; import { cva, type VariantProps } from "class-variance-authority"; +import Body from "../text/Body"; const button = cva( [ - "transition-all disabled:cursor-not-allowed flex items-center h-fit active:shadow-inner active:translate-y-0.5 duration-200 border border-b-0", + "transition-all border-t disabled:cursor-not-allowed justify-center flex items-center active:shadow-inner active:translate-y-0.5 duration-200", ], { variants: { intent: { mauve: ["bg-gray-4 hover:bg-gray-5", "text-white", "border-white-10"], primary: [ - "bg-primary-8 hover:bg-primary-9", + "bg-accent-8 hover:bg-accent-9", "text-white", - "border-primary-11 hover:border-primary-11", + "border-accent-11 hover:border-accent-11", ], white: [ "dark:bg-white bg-gray-4 hover:bg-gray-5 dark:hover:bg-white-80", - "dark:text-gray-DARK text-white", + "dark:text-gray-DARK font-medium text-white", "dark:border-white dark:hover:border-white-16 border-gray-4 hover:border-gray-5", ], lightGray: [ @@ -35,24 +36,24 @@ const button = cva( ], }, size: { - small: ["text-xs font-medium", "px-3 py-1.5", "gap-1.5"], - medium: ["text-sm font-medium", "px-3 py-1.5", "gap-2"], - large: ["text-sm font-medium", "px-3.5 py-2", "gap-2"], + standard: "px-4 py-1.5 min-w-[120px]", + compact: "px-2.5 py-1", + icon: "p-1.5", }, rounded: { full: "rounded-full", default: "rounded-lg", }, fullWidth: { - true: "w-full", + true: "w-full py-2", false: "w-fit", }, }, defaultVariants: { intent: "primary", - size: "medium", + size: "standard", fullWidth: false, - rounded: "full", + rounded: "default", }, } ); @@ -73,6 +74,6 @@ export const Button: React.FC = ({ className={button({ intent, size, rounded, className, fullWidth })} {...props} > - {props.children} + {props.children} ); diff --git a/ui/src/components/input/Checkbox.tsx b/ui/src/components/input/Checkbox.tsx new file mode 100644 index 0000000..b0a8bf5 --- /dev/null +++ b/ui/src/components/input/Checkbox.tsx @@ -0,0 +1,78 @@ +import { Field, FieldAttributes } from "formik"; +import { AnimatePresence, motion } from "framer-motion"; +import React, { ChangeEvent } from "react"; + +interface CheckboxProps extends FieldAttributes { + onClick?: (e: ChangeEvent) => void; + children?: React.ReactNode; +} + +export function Checkbox({ children, onClick, ...props }: CheckboxProps) { + const [checked, setChecked] = React.useState(false); + + return ( +
    + + + {checked && } + + + { + setChecked(!checked); + }} + onClick={onClick} + checked={checked} + type="checkbox" + className="h-5 w-5 disabled:cursor-not-allowed appearance-none rounded-md border border-white-16 p-2 transition-colors duration-300 + checked:border-accent-8 checked:bg-accent-8 checked:active:bg-accent-7 enabled:hover:bg-white-5 enabled:checked:hover:bg-accent-8 + enabled:focus:outline-2 enabled:focus:outline-offset-1 enabled:active:border-white-8 enabled:active:bg-white-5 + disabled:border-white-8 checked:disabled:opacity-60" + {...props} + /> +
    + ); +} + +export function CheckboxLabel({ + children, + className, +}: { + children: React.ReactNode; + className?: string; +}) { + return ( + + ); +} + +function CheckIcon(props: React.SVGProps) { + return ( + + + + ); +} diff --git a/ui/src/components/primitives/SelectDropdown.tsx b/ui/src/components/input/SelectDropdown.tsx similarity index 64% rename from ui/src/components/primitives/SelectDropdown.tsx rename to ui/src/components/input/SelectDropdown.tsx index 361bcef..a8feb7b 100644 --- a/ui/src/components/primitives/SelectDropdown.tsx +++ b/ui/src/components/input/SelectDropdown.tsx @@ -1,10 +1,11 @@ import React from "react"; import * as Select from "@radix-ui/react-select"; -import { IconCheck, IconChevron } from "../shared/Icons"; +import { IconCheck, IconChevron } from "../_other/Icons"; import { capitalize } from "@/utils/formatting"; type SelectDropdownProps = { options: string[]; + disabled?: boolean; onChange: (value: string) => void; defaultValue: string; icon?: React.ReactNode; @@ -13,6 +14,7 @@ type SelectDropdownProps = { function SelectDropdown({ options, defaultValue, + disabled, onChange, icon, }: SelectDropdownProps) { @@ -21,7 +23,10 @@ function SelectDropdown({ defaultValue={defaultValue} onValueChange={(value) => onChange(value)} > - +
    {icon} @@ -34,7 +39,7 @@ function SelectDropdown({ @@ -44,7 +49,6 @@ function SelectDropdown({ ))} - @@ -63,7 +67,7 @@ function SelectItem({ children, value }: SelectItemProps) { return ( {children} diff --git a/ui/src/components/primitives/input/InputError.tsx b/ui/src/components/input/input/InputError.tsx similarity index 100% rename from ui/src/components/primitives/input/InputError.tsx rename to ui/src/components/input/input/InputError.tsx diff --git a/ui/src/components/primitives/input/InputField.tsx b/ui/src/components/input/input/InputField.tsx similarity index 73% rename from ui/src/components/primitives/input/InputField.tsx rename to ui/src/components/input/input/InputField.tsx index 2594817..015b899 100644 --- a/ui/src/components/primitives/input/InputField.tsx +++ b/ui/src/components/input/input/InputField.tsx @@ -24,8 +24,8 @@ export function InputField({ {...props} className={` ${style === "icon" && "pl-11"} - w-full rounded-xl border border-black-10 bg-white px-4 py-2 font-normal placeholder:text-gray-10 - focus:outline-none disabled:cursor-not-allowed dark:border-white-10 dark:bg-gray-2 dark:text-white`} + w-full border disabled:opacity-60 rounded-lg border-black-10 bg-white px-4 py-2 font-normal placeholder:text-white-48 + focus:outline-none disabled:cursor-not-allowed dark:border-white-8 dark:bg-gray-1 focus:outline focus:outline-1 focus:outline-offset-0 focus:outline-white-16 dark:text-white`} />
    ); diff --git a/ui/src/components/primitives/input/InputLabel.tsx b/ui/src/components/input/input/InputLabel.tsx similarity index 100% rename from ui/src/components/primitives/input/InputLabel.tsx rename to ui/src/components/input/input/InputLabel.tsx diff --git a/ui/src/components/motion/ResizablePanel.tsx b/ui/src/components/motion/ResizablePanel.tsx index c7be779..0287f9c 100644 --- a/ui/src/components/motion/ResizablePanel.tsx +++ b/ui/src/components/motion/ResizablePanel.tsx @@ -1,14 +1,17 @@ import { HTMLMotionProps, motion } from "framer-motion"; import React from "react"; -interface Props extends HTMLMotionProps<"div"> {} +interface Props extends HTMLMotionProps<"div"> { + transitionDuration?: number; +} -function ResizablePanel({ ...props }: Props) { +function ResizablePanel({ transitionDuration, ...props }: Props) { return ( diff --git a/ui/src/components/shared/cmdk/CMDK.tsx b/ui/src/components/navigation/cmdk/CMDK.tsx similarity index 71% rename from ui/src/components/shared/cmdk/CMDK.tsx rename to ui/src/components/navigation/cmdk/CMDK.tsx index 54cdc63..f2d57e7 100644 --- a/ui/src/components/shared/cmdk/CMDK.tsx +++ b/ui/src/components/navigation/cmdk/CMDK.tsx @@ -4,6 +4,7 @@ import Home from "./pages/Home"; import DataSources from "./pages/DataSources"; import { AnimatePresence, motion } from "framer-motion"; import Theme from "./pages/Theme"; +import { useUIContext } from "@/state/UI"; export function CMDK() { const ref = React.useRef(null); @@ -13,7 +14,10 @@ export function CMDK() { const activePage = pages[pages.length - 1]; const isHome = activePage === "home"; - const [open, setOpen] = React.useState(false); + + const { state: UIState, dispatch: UIDispatch } = useUIContext(); + + const open = UIState.commandMenu const popPage = React.useCallback(() => { setPages((pages) => { @@ -25,14 +29,14 @@ export function CMDK() { function onClose() { setInputValue(""); - setOpen(false); + UIDispatch({ type: "TOGGLE_COMMAND_MENU" }); setPages(["home"]); } function onKeyDown(e: React.KeyboardEvent) { if (e.key === "Escape") { setInputValue(""); - setOpen(false); + UIDispatch({ type: "TOGGLE_COMMAND_MENU" }); setPages(["home"]); } @@ -69,7 +73,7 @@ export function CMDK() { if (e.key === "k" && (e.metaKey || e.ctrlKey)) { e.preventDefault(); setInputValue(""); - setOpen((open) => !open); + UIDispatch({ type: "TOGGLE_COMMAND_MENU" }); setPages(["home"]); } }; @@ -82,7 +86,7 @@ export function CMDK() { const down = (e: MouseEvent) => { if (ref.current && !ref.current.contains(e.target as any)) { setInputValue(""); - setOpen(false); + UIDispatch({ type: "TOGGLE_COMMAND_MENU" }); setPages(["home"]); } }; @@ -95,7 +99,7 @@ export function CMDK() { {open && ( - +
    {pages.map((p) => ( -
    +
    {p}
    ))} @@ -120,7 +128,7 @@ export function CMDK() { { setInputValue(value); }} @@ -129,7 +137,9 @@ export function CMDK() { No results found. {activePage === "home" && ( setPages([...pages, "data sources"])} + searchDataSources={() => + setPages([...pages, "data sources"]) + } searchThemes={() => setPages([...pages, "themes"])} /> )} @@ -137,24 +147,24 @@ export function CMDK() { {activePage === "themes" && } -