diff --git a/HISTORY.md b/HISTORY.md index 1873bf803..4b023bd57 100644 --- a/HISTORY.md +++ b/HISTORY.md @@ -4,6 +4,12 @@ All notable changes to this project will be documented in this file. ## unreleased +* Added + * SBOM result might have `serialNumber` populated ([#375] via [#376]) + +[#375]: https://github.com/CycloneDX/cyclonedx-node-npm/issues/375 +[#376]: https://github.com/CycloneDX/cyclonedx-node-npm/pull/376 + ## 1.6.1 - 2022-11-19 Maintenance release diff --git a/demo/bundled-dependencies/example-results/bare/bom.1.2.json b/demo/bundled-dependencies/example-results/bare/bom.1.2.json index c4c9306f7..572d8b21d 100644 --- a/demo/bundled-dependencies/example-results/bare/bom.1.2.json +++ b/demo/bundled-dependencies/example-results/bare/bom.1.2.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0" + "version": "1.6.1" } ], "component": { diff --git a/demo/bundled-dependencies/example-results/bare/bom.1.2.xml b/demo/bundled-dependencies/example-results/bare/bom.1.2.xml index 4c612cdba..140d4122d 100644 --- a/demo/bundled-dependencies/example-results/bare/bom.1.2.xml +++ b/demo/bundled-dependencies/example-results/bare/bom.1.2.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 diff --git a/demo/bundled-dependencies/example-results/bare/bom.1.3.json b/demo/bundled-dependencies/example-results/bare/bom.1.3.json index 6147a92f2..c139b55fd 100644 --- a/demo/bundled-dependencies/example-results/bare/bom.1.3.json +++ b/demo/bundled-dependencies/example-results/bare/bom.1.3.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0" + "version": "1.6.1" } ], "component": { diff --git a/demo/bundled-dependencies/example-results/bare/bom.1.3.xml b/demo/bundled-dependencies/example-results/bare/bom.1.3.xml index fbe3490c2..aaaa5cf9d 100644 --- a/demo/bundled-dependencies/example-results/bare/bom.1.3.xml +++ b/demo/bundled-dependencies/example-results/bare/bom.1.3.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 diff --git a/demo/bundled-dependencies/example-results/bare/bom.1.4.json b/demo/bundled-dependencies/example-results/bare/bom.1.4.json index 4c74f3348..29d1832e9 100644 --- a/demo/bundled-dependencies/example-results/bare/bom.1.4.json +++ b/demo/bundled-dependencies/example-results/bare/bom.1.4.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0", + "version": "1.6.1", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/bundled-dependencies/example-results/bare/bom.1.4.xml b/demo/bundled-dependencies/example-results/bare/bom.1.4.xml index 6e4cc7f87..aa93ac5d8 100644 --- a/demo/bundled-dependencies/example-results/bare/bom.1.4.xml +++ b/demo/bundled-dependencies/example-results/bare/bom.1.4.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/bundled-dependencies/example-results/flat/bom.1.2.json b/demo/bundled-dependencies/example-results/flat/bom.1.2.json index 308b013e5..498464cb7 100644 --- a/demo/bundled-dependencies/example-results/flat/bom.1.2.json +++ b/demo/bundled-dependencies/example-results/flat/bom.1.2.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0" + "version": "1.6.1" } ], "component": { diff --git a/demo/bundled-dependencies/example-results/flat/bom.1.2.xml b/demo/bundled-dependencies/example-results/flat/bom.1.2.xml index a04be8c8b..248f059cc 100644 --- a/demo/bundled-dependencies/example-results/flat/bom.1.2.xml +++ b/demo/bundled-dependencies/example-results/flat/bom.1.2.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 diff --git a/demo/bundled-dependencies/example-results/flat/bom.1.3.json b/demo/bundled-dependencies/example-results/flat/bom.1.3.json index c2587be10..0e3868e89 100644 --- a/demo/bundled-dependencies/example-results/flat/bom.1.3.json +++ b/demo/bundled-dependencies/example-results/flat/bom.1.3.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0" + "version": "1.6.1" } ], "component": { diff --git a/demo/bundled-dependencies/example-results/flat/bom.1.3.xml b/demo/bundled-dependencies/example-results/flat/bom.1.3.xml index 3dd2c2904..1ff6ed73d 100644 --- a/demo/bundled-dependencies/example-results/flat/bom.1.3.xml +++ b/demo/bundled-dependencies/example-results/flat/bom.1.3.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 diff --git a/demo/bundled-dependencies/example-results/flat/bom.1.4.json b/demo/bundled-dependencies/example-results/flat/bom.1.4.json index 7eaf9631d..29a69b8e0 100644 --- a/demo/bundled-dependencies/example-results/flat/bom.1.4.json +++ b/demo/bundled-dependencies/example-results/flat/bom.1.4.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0", + "version": "1.6.1", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/bundled-dependencies/example-results/flat/bom.1.4.xml b/demo/bundled-dependencies/example-results/flat/bom.1.4.xml index 4ab589e02..a09392d6e 100644 --- a/demo/bundled-dependencies/example-results/flat/bom.1.4.xml +++ b/demo/bundled-dependencies/example-results/flat/bom.1.4.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/dev-dependencies/example-results/bare/bom.1.2.json b/demo/dev-dependencies/example-results/bare/bom.1.2.json index d540ed106..c80833e97 100644 --- a/demo/dev-dependencies/example-results/bare/bom.1.2.json +++ b/demo/dev-dependencies/example-results/bare/bom.1.2.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0" + "version": "1.6.1" } ], "component": { diff --git a/demo/dev-dependencies/example-results/bare/bom.1.2.xml b/demo/dev-dependencies/example-results/bare/bom.1.2.xml index 8bd69417f..ee1e6b0fd 100644 --- a/demo/dev-dependencies/example-results/bare/bom.1.2.xml +++ b/demo/dev-dependencies/example-results/bare/bom.1.2.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 diff --git a/demo/dev-dependencies/example-results/bare/bom.1.3.json b/demo/dev-dependencies/example-results/bare/bom.1.3.json index 9da6a8da0..aeb90de6f 100644 --- a/demo/dev-dependencies/example-results/bare/bom.1.3.json +++ b/demo/dev-dependencies/example-results/bare/bom.1.3.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0" + "version": "1.6.1" } ], "component": { diff --git a/demo/dev-dependencies/example-results/bare/bom.1.3.xml b/demo/dev-dependencies/example-results/bare/bom.1.3.xml index 9778384e3..3dd728101 100644 --- a/demo/dev-dependencies/example-results/bare/bom.1.3.xml +++ b/demo/dev-dependencies/example-results/bare/bom.1.3.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 diff --git a/demo/dev-dependencies/example-results/bare/bom.1.4.json b/demo/dev-dependencies/example-results/bare/bom.1.4.json index b4bf75690..9b00e5fec 100644 --- a/demo/dev-dependencies/example-results/bare/bom.1.4.json +++ b/demo/dev-dependencies/example-results/bare/bom.1.4.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0", + "version": "1.6.1", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/dev-dependencies/example-results/bare/bom.1.4.xml b/demo/dev-dependencies/example-results/bare/bom.1.4.xml index ea2d2bf48..5c909dab8 100644 --- a/demo/dev-dependencies/example-results/bare/bom.1.4.xml +++ b/demo/dev-dependencies/example-results/bare/bom.1.4.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/dev-dependencies/example-results/flat/bom.1.2.json b/demo/dev-dependencies/example-results/flat/bom.1.2.json index d540ed106..c80833e97 100644 --- a/demo/dev-dependencies/example-results/flat/bom.1.2.json +++ b/demo/dev-dependencies/example-results/flat/bom.1.2.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0" + "version": "1.6.1" } ], "component": { diff --git a/demo/dev-dependencies/example-results/flat/bom.1.2.xml b/demo/dev-dependencies/example-results/flat/bom.1.2.xml index 8bd69417f..ee1e6b0fd 100644 --- a/demo/dev-dependencies/example-results/flat/bom.1.2.xml +++ b/demo/dev-dependencies/example-results/flat/bom.1.2.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 diff --git a/demo/dev-dependencies/example-results/flat/bom.1.3.json b/demo/dev-dependencies/example-results/flat/bom.1.3.json index 9da6a8da0..aeb90de6f 100644 --- a/demo/dev-dependencies/example-results/flat/bom.1.3.json +++ b/demo/dev-dependencies/example-results/flat/bom.1.3.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0" + "version": "1.6.1" } ], "component": { diff --git a/demo/dev-dependencies/example-results/flat/bom.1.3.xml b/demo/dev-dependencies/example-results/flat/bom.1.3.xml index 9778384e3..3dd728101 100644 --- a/demo/dev-dependencies/example-results/flat/bom.1.3.xml +++ b/demo/dev-dependencies/example-results/flat/bom.1.3.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 diff --git a/demo/dev-dependencies/example-results/flat/bom.1.4.json b/demo/dev-dependencies/example-results/flat/bom.1.4.json index b4bf75690..9b00e5fec 100644 --- a/demo/dev-dependencies/example-results/flat/bom.1.4.json +++ b/demo/dev-dependencies/example-results/flat/bom.1.4.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0", + "version": "1.6.1", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/dev-dependencies/example-results/flat/bom.1.4.xml b/demo/dev-dependencies/example-results/flat/bom.1.4.xml index ea2d2bf48..5c909dab8 100644 --- a/demo/dev-dependencies/example-results/flat/bom.1.4.xml +++ b/demo/dev-dependencies/example-results/flat/bom.1.4.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/juice-shop/example-results/bare/bom.1.2.json b/demo/juice-shop/example-results/bare/bom.1.2.json index dfd8e7c75..58a7b6786 100644 --- a/demo/juice-shop/example-results/bare/bom.1.2.json +++ b/demo/juice-shop/example-results/bare/bom.1.2.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0" + "version": "1.6.1" } ], "component": { @@ -7256,40 +7256,6 @@ "comment": "as detected from PackageJson property \"repository\"" } ] - }, - { - "type": "library", - "name": "lowercase-keys", - "version": "1.0.0", - "bom-ref": "cacheable-request@2.1.4|lowercase-keys@1.0.0", - "author": "Sindre Sorhus", - "description": "Lowercase the keys of an object", - "hashes": [ - { - "alg": "SHA-512", - "content": "44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0" - } - ], - "licenses": [ - { - "license": { - "id": "MIT" - } - } - ], - "purl": "pkg:npm/lowercase-keys@1.0.0", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "sindresorhus/lowercase-keys", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository\"" - } - ] } ] }, @@ -9856,14 +9822,14 @@ { "type": "library", "name": "core-util-is", - "version": "1.0.3", - "bom-ref": "core-util-is@1.0.3", + "version": "1.0.2", + "bom-ref": "core-util-is@1.0.2", "author": "Isaac Z. Schlueter (http://blog.izs.me/)", "description": "The `util.is*` functions introduced in Node v0.12.", "hashes": [ { "alg": "SHA-512", - "content": "65006f8b50dca49e060ea6a78ee719d878f7c043b9a590d2f3d0566e472bbddc64b09a2bc140c365a997f65745929f5ac369660432e090e6c40380d6349f4561" + "content": "de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69" } ], "licenses": [ @@ -9873,10 +9839,10 @@ } } ], - "purl": "pkg:npm/core-util-is@1.0.3", + "purl": "pkg:npm/core-util-is@1.0.2", "externalReferences": [ { - "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz", + "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -16608,14 +16574,14 @@ { "type": "library", "name": "glob", - "version": "7.2.3", - "bom-ref": "glob@7.2.3", + "version": "7.1.7", + "bom-ref": "glob@7.1.7", "author": "Isaac Z. Schlueter (http://blog.izs.me/)", "description": "a little globber", "hashes": [ { "alg": "SHA-512", - "content": "9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5" + "content": "3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d" } ], "licenses": [ @@ -16625,10 +16591,10 @@ } } ], - "purl": "pkg:npm/glob@7.2.3", + "purl": "pkg:npm/glob@7.1.7", "externalReferences": [ { - "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "url": "https://registry.npmjs.org/glob/-/glob-7.1.7.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -16643,7 +16609,7 @@ "type": "library", "name": "brace-expansion", "version": "1.1.11", - "bom-ref": "glob@7.2.3|brace-expansion@1.1.11", + "bom-ref": "glob@7.1.7|brace-expansion@1.1.11", "author": "Julian Gruber", "description": "Brace expansion as known from sh/bash", "hashes": [ @@ -16682,7 +16648,7 @@ "type": "library", "name": "minimatch", "version": "3.1.2", - "bom-ref": "glob@7.2.3|minimatch@3.1.2", + "bom-ref": "glob@7.1.7|minimatch@3.1.2", "author": "Isaac Z. Schlueter (http://blog.izs.me)", "description": "a glob matcher in javascript", "hashes": [ @@ -17907,40 +17873,6 @@ } ] }, - { - "type": "library", - "name": "glob", - "version": "7.1.7", - "bom-ref": "grunt@1.5.3|glob@7.1.7", - "author": "Isaac Z. Schlueter (http://blog.izs.me/)", - "description": "a little globber", - "hashes": [ - { - "alg": "SHA-512", - "content": "3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d" - } - ], - "licenses": [ - { - "license": { - "id": "ISC" - } - } - ], - "purl": "pkg:npm/glob@7.1.7", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/glob/-/glob-7.1.7.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "git://github.com/isaacs/node-glob.git", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository.url\"" - } - ] - }, { "type": "library", "name": "minimatch", @@ -23374,41 +23306,6 @@ "type": "vcs", "comment": "as detected from PackageJson property \"repository.url\"" } - ], - "components": [ - { - "type": "library", - "name": "nan", - "version": "2.15.0", - "bom-ref": "libxmljs2@0.30.1|nan@2.15.0", - "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility", - "hashes": [ - { - "alg": "SHA-512", - "content": "f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665" - } - ], - "licenses": [ - { - "license": { - "id": "MIT" - } - } - ], - "purl": "pkg:npm/nan@2.15.0", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/nan/-/nan-2.15.0.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "git://github.com/nodejs/nan.git", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository.url\"" - } - ] - } ] }, { @@ -24214,14 +24111,14 @@ { "type": "library", "name": "lowercase-keys", - "version": "1.0.1", - "bom-ref": "lowercase-keys@1.0.1", + "version": "1.0.0", + "bom-ref": "lowercase-keys@1.0.0", "author": "Sindre Sorhus", "description": "Lowercase the keys of an object", "hashes": [ { "alg": "SHA-512", - "content": "1b62e3eb5b570e754514e8bc55976cf92a108ed402ddd82890a7431b69939b5b71e26e743541c1399481c10407cb2d15d760342531b889c7d9407fb13f287c54" + "content": "44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0" } ], "licenses": [ @@ -24231,10 +24128,10 @@ } } ], - "purl": "pkg:npm/lowercase-keys@1.0.1", + "purl": "pkg:npm/lowercase-keys@1.0.0", "externalReferences": [ { - "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.1.tgz", + "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -26063,13 +25960,13 @@ { "type": "library", "name": "nan", - "version": "2.17.0", - "bom-ref": "nan@2.17.0", - "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility", + "version": "2.15.0", + "bom-ref": "nan@2.15.0", + "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility", "hashes": [ { "alg": "SHA-512", - "content": "d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069" + "content": "f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665" } ], "licenses": [ @@ -26079,10 +25976,10 @@ } } ], - "purl": "pkg:npm/nan@2.17.0", + "purl": "pkg:npm/nan@2.15.0", "externalReferences": [ { - "url": "https://registry.npmjs.org/nan/-/nan-2.17.0.tgz", + "url": "https://registry.npmjs.org/nan/-/nan-2.15.0.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -40590,47 +40487,6 @@ "type": "vcs", "comment": "as detected from PackageJson property \"repository.url\"" } - ], - "components": [ - { - "type": "library", - "name": "core-util-is", - "version": "1.0.2", - "bom-ref": "verror@1.10.0|core-util-is@1.0.2", - "author": "Isaac Z. Schlueter (http://blog.izs.me/)", - "description": "The `util.is*` functions introduced in Node v0.12.", - "hashes": [ - { - "alg": "SHA-512", - "content": "de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69" - } - ], - "licenses": [ - { - "license": { - "id": "MIT" - } - } - ], - "purl": "pkg:npm/core-util-is@1.0.2", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "https://github.com/isaacs/core-util-is/issues", - "type": "issue-tracker", - "comment": "as detected from PackageJson property \"bugs.url\"" - }, - { - "url": "git://github.com/isaacs/core-util-is", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository.url\"" - } - ] - } ] }, { @@ -43164,7 +43020,7 @@ { "ref": "archiver-utils@1.3.0", "dependsOn": [ - "glob@7.2.3", + "glob@7.1.7", "graceful-fs@4.2.10", "lazystream@1.0.1", "lodash@4.17.21", @@ -43178,7 +43034,7 @@ "archiver-utils@1.3.0", "async@2.6.4", "buffer-crc32@0.2.13", - "glob@7.2.3", + "glob@7.1.7", "lodash@4.17.21", "readable-stream@2.3.7", "tar-stream@1.6.2", @@ -43468,7 +43324,7 @@ "dependsOn": [ "busboy@0.2.14|isarray@0.0.1", "busboy@0.2.14|string_decoder@0.10.31", - "core-util-is@1.0.3", + "core-util-is@1.0.2", "inherits@2.0.4" ] }, @@ -43488,7 +43344,7 @@ "@npmcli/move-file@1.1.2", "chownr@2.0.0", "fs-minipass@2.1.0", - "glob@7.2.3", + "glob@7.1.7", "infer-owner@1.0.4", "lru-cache@6.0.0", "minipass-collect@1.0.2", @@ -43522,10 +43378,10 @@ "ref": "cacheable-request@2.1.4", "dependsOn": [ "cacheable-request@2.1.4|get-stream@3.0.0", - "cacheable-request@2.1.4|lowercase-keys@1.0.0", "clone-response@1.0.2", "http-cache-semantics@3.8.1", "keyv@3.0.0", + "lowercase-keys@1.0.0", "normalize-url@2.0.1", "responselike@1.0.2" ] @@ -43533,9 +43389,6 @@ { "ref": "cacheable-request@2.1.4|get-stream@3.0.0" }, - { - "ref": "cacheable-request@2.1.4|lowercase-keys@1.0.0" - }, { "ref": "call-bind@1.0.2", "dependsOn": [ @@ -43895,7 +43748,7 @@ "ref": "copy-descriptor@0.1.1" }, { - "ref": "core-util-is@1.0.3" + "ref": "core-util-is@1.0.2" }, { "ref": "cors@2.8.5", @@ -44109,7 +43962,7 @@ { "ref": "dicer@0.2.5|readable-stream@1.1.14", "dependsOn": [ - "core-util-is@1.0.3", + "core-util-is@1.0.2", "dicer@0.2.5|isarray@0.0.1", "dicer@0.2.5|string_decoder@0.10.31", "inherits@2.0.4" @@ -44799,7 +44652,7 @@ { "ref": "fstream@1.0.12|rimraf@2.7.1", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -44878,10 +44731,10 @@ ] }, { - "ref": "glob@7.2.3", + "ref": "glob@7.1.7", "dependsOn": [ "fs.realpath@1.0.0", - "glob@7.2.3|minimatch@3.1.2", + "glob@7.1.7|minimatch@3.1.2", "inflight@1.0.6", "inherits@2.0.4", "once@1.4.0", @@ -44889,16 +44742,16 @@ ] }, { - "ref": "glob@7.2.3|brace-expansion@1.1.11", + "ref": "glob@7.1.7|brace-expansion@1.1.11", "dependsOn": [ "balanced-match@1.0.2", "concat-map@0.0.1" ] }, { - "ref": "glob@7.2.3|minimatch@3.1.2", + "ref": "glob@7.1.7|minimatch@3.1.2", "dependsOn": [ - "glob@7.2.3|brace-expansion@1.1.11" + "glob@7.1.7|brace-expansion@1.1.11" ] }, { @@ -44943,7 +44796,7 @@ "into-stream@3.1.0", "is-retry-allowed@1.2.0", "isurl@1.0.0", - "lowercase-keys@1.0.1", + "lowercase-keys@1.0.0", "mimic-response@1.0.1", "p-cancelable@0.4.1", "p-timeout@2.0.1", @@ -45086,12 +44939,12 @@ "dateformat@3.0.3", "eventemitter2@0.4.14", "exit@0.1.2", + "glob@7.1.7", "grunt-cli@1.4.3", "grunt-known-options@2.0.0", "grunt-legacy-log@3.0.0", "grunt-legacy-util@2.0.1", "grunt@1.5.3|findup-sync@0.3.0", - "grunt@1.5.3|glob@7.1.7", "grunt@1.5.3|minimatch@3.0.8", "iconv-lite@0.4.24", "js-yaml@3.14.1", @@ -45123,17 +44976,6 @@ "path-is-absolute@1.0.1" ] }, - { - "ref": "grunt@1.5.3|glob@7.1.7", - "dependsOn": [ - "fs.realpath@1.0.0", - "grunt@1.5.3|minimatch@3.0.8", - "inflight@1.0.6", - "inherits@2.0.4", - "once@1.4.0", - "path-is-absolute@1.0.1" - ] - }, { "ref": "grunt@1.5.3|minimatch@3.0.8", "dependsOn": [ @@ -45281,7 +45123,7 @@ { "ref": "htmlparser2@3.3.0|readable-stream@1.0.34", "dependsOn": [ - "core-util-is@1.0.3", + "core-util-is@1.0.2", "htmlparser2@3.3.0|isarray@0.0.1", "htmlparser2@3.3.0|string_decoder@0.10.31", "inherits@2.0.4" @@ -45393,7 +45235,7 @@ "ref": "iltorb@2.4.5", "dependsOn": [ "detect-libc@1.0.3", - "nan@2.17.0", + "nan@2.15.0", "npmlog@4.1.2", "prebuild-install@5.3.6", "which-pm-runs@1.1.0" @@ -45791,7 +45633,7 @@ "finale-rest@1.2.0", "fs-extra@9.1.0", "fuzzball@1.4.0", - "glob@7.2.3", + "glob@7.1.7", "graceful-fs@4.2.10", "grunt-contrib-compress@1.6.0", "grunt-replace-json@0.1.0", @@ -45903,12 +45745,9 @@ "dependsOn": [ "@mapbox/node-pre-gyp@1.0.10", "bindings@1.5.0", - "libxmljs2@0.30.1|nan@2.15.0" + "nan@2.15.0" ] }, - { - "ref": "libxmljs2@0.30.1|nan@2.15.0" - }, { "ref": "liftup@3.0.1", "dependsOn": [ @@ -46020,7 +45859,7 @@ ] }, { - "ref": "lowercase-keys@1.0.1" + "ref": "lowercase-keys@1.0.0" }, { "ref": "lru-cache@6.0.0", @@ -46301,7 +46140,7 @@ "ref": "mustache@4.2.0" }, { - "ref": "nan@2.17.0" + "ref": "nan@2.15.0" }, { "ref": "nanomatch@1.2.13", @@ -46368,7 +46207,7 @@ "ref": "node-gyp@8.4.1", "dependsOn": [ "env-paths@2.2.1", - "glob@7.2.3", + "glob@7.1.7", "graceful-fs@4.2.10", "make-fetch-happen@9.1.0", "node-gyp@8.4.1|nopt@5.0.0", @@ -46495,7 +46334,7 @@ { "ref": "node-pre-gyp@0.15.0|rimraf@2.7.1", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -47123,7 +46962,7 @@ { "ref": "readable-stream@2.3.7", "dependsOn": [ - "core-util-is@1.0.3", + "core-util-is@1.0.2", "inherits@2.0.4", "process-nextick-args@2.0.1", "readable-stream@2.3.7|isarray@1.0.0", @@ -47357,7 +47196,7 @@ { "ref": "responselike@1.0.2", "dependsOn": [ - "lowercase-keys@1.0.1" + "lowercase-keys@1.0.0" ] }, { @@ -47375,7 +47214,7 @@ { "ref": "rimraf@3.0.2", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -48200,7 +48039,7 @@ { "ref": "ts-node-dev@1.1.8|rimraf@2.7.1", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -48452,13 +48291,10 @@ "ref": "verror@1.10.0", "dependsOn": [ "assert-plus@1.0.0", - "extsprintf@1.3.0", - "verror@1.10.0|core-util-is@1.0.2" + "core-util-is@1.0.2", + "extsprintf@1.3.0" ] }, - { - "ref": "verror@1.10.0|core-util-is@1.0.2" - }, { "ref": "vm2@3.9.11", "dependsOn": [ diff --git a/demo/juice-shop/example-results/bare/bom.1.2.xml b/demo/juice-shop/example-results/bare/bom.1.2.xml index 4a9c37561..6416e4ce7 100644 --- a/demo/juice-shop/example-results/bare/bom.1.2.xml +++ b/demo/juice-shop/example-results/bare/bom.1.2.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 @@ -5406,31 +5406,6 @@ - - Sindre Sorhus - lowercase-keys - 1.0.0 - Lowercase the keys of an object - - 44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0 - - - - MIT - - - pkg:npm/lowercase-keys@1.0.0 - - - https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz - as detected from npm-ls property "resolved" - - - sindresorhus/lowercase-keys - as detected from PackageJson property "repository" - - - @@ -7334,23 +7309,23 @@ - + Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) core-util-is - 1.0.3 + 1.0.2 The `util.is*` functions introduced in Node v0.12. - 65006f8b50dca49e060ea6a78ee719d878f7c043b9a590d2f3d0566e472bbddc64b09a2bc140c365a997f65745929f5ac369660432e090e6c40380d6349f4561 + de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69 MIT - pkg:npm/core-util-is@1.0.3 + pkg:npm/core-util-is@1.0.2 - https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz + https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz as detected from npm-ls property "resolved" @@ -12345,23 +12320,23 @@ - + Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) glob - 7.2.3 + 7.1.7 a little globber - 9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5 + 3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d ISC - pkg:npm/glob@7.2.3 + pkg:npm/glob@7.1.7 - https://registry.npmjs.org/glob/-/glob-7.2.3.tgz + https://registry.npmjs.org/glob/-/glob-7.1.7.tgz as detected from npm-ls property "resolved" @@ -12370,7 +12345,7 @@ - + Julian Gruber brace-expansion 1.1.11 @@ -12399,7 +12374,7 @@ - + Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me) minimatch 3.1.2 @@ -13311,31 +13286,6 @@ - - Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) - glob - 7.1.7 - a little globber - - 3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d - - - - ISC - - - pkg:npm/glob@7.1.7 - - - https://registry.npmjs.org/glob/-/glob-7.1.7.tgz - as detected from npm-ls property "resolved" - - - git://github.com/isaacs/node-glob.git - as detected from PackageJson property "repository.url" - - - Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me) minimatch @@ -17378,32 +17328,6 @@ as detected from PackageJson property "repository.url" - - - nan - 2.15.0 - Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility - - f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665 - - - - MIT - - - pkg:npm/nan@2.15.0 - - - https://registry.npmjs.org/nan/-/nan-2.15.0.tgz - as detected from npm-ls property "resolved" - - - git://github.com/nodejs/nan.git - as detected from PackageJson property "repository.url" - - - - Grunt Development Team (https://gruntjs.com/development-team) @@ -17998,23 +17922,23 @@ - + Sindre Sorhus lowercase-keys - 1.0.1 + 1.0.0 Lowercase the keys of an object - 1b62e3eb5b570e754514e8bc55976cf92a108ed402ddd82890a7431b69939b5b71e26e743541c1399481c10407cb2d15d760342531b889c7d9407fb13f287c54 + 44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0 MIT - pkg:npm/lowercase-keys@1.0.1 + pkg:npm/lowercase-keys@1.0.0 - https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.1.tgz + https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz as detected from npm-ls property "resolved" @@ -19363,22 +19287,22 @@ - + nan - 2.17.0 - Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility + 2.15.0 + Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility - d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069 + f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665 MIT - pkg:npm/nan@2.17.0 + pkg:npm/nan@2.15.0 - https://registry.npmjs.org/nan/-/nan-2.17.0.tgz + https://registry.npmjs.org/nan/-/nan-2.15.0.tgz as detected from npm-ls property "resolved" @@ -30134,37 +30058,6 @@ as detected from PackageJson property "repository.url" - - - Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) - core-util-is - 1.0.2 - The `util.is*` functions introduced in Node v0.12. - - de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69 - - - - MIT - - - pkg:npm/core-util-is@1.0.2 - - - https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz - as detected from npm-ls property "resolved" - - - https://github.com/isaacs/core-util-is/issues - as detected from PackageJson property "bugs.url" - - - git://github.com/isaacs/core-util-is - as detected from PackageJson property "repository.url" - - - - Patrik Simek @@ -31898,7 +31791,7 @@ - + @@ -31909,7 +31802,7 @@ - + @@ -32057,7 +31950,7 @@ - + @@ -32068,7 +31961,7 @@ - + @@ -32096,15 +31989,14 @@ - + - @@ -32294,7 +32186,7 @@ - + @@ -32408,7 +32300,7 @@ - + @@ -32793,7 +32685,7 @@ - + @@ -32835,20 +32727,20 @@ - + - + - + - - + + @@ -32878,7 +32770,7 @@ - + @@ -32962,12 +32854,12 @@ + - @@ -32989,14 +32881,6 @@ - - - - - - - - @@ -33068,7 +32952,7 @@ - + @@ -33131,7 +33015,7 @@ - + @@ -33334,7 +33218,7 @@ - + @@ -33418,9 +33302,8 @@ - + - @@ -33480,7 +33363,7 @@ - + @@ -33635,7 +33518,7 @@ - + @@ -33672,7 +33555,7 @@ - + @@ -33751,7 +33634,7 @@ - + @@ -34089,7 +33972,7 @@ - + @@ -34227,14 +34110,14 @@ - + - + @@ -34683,7 +34566,7 @@ - + @@ -34816,10 +34699,9 @@ + - - diff --git a/demo/juice-shop/example-results/bare/bom.1.3.json b/demo/juice-shop/example-results/bare/bom.1.3.json index c4d2beb8b..ad2bcb3a8 100644 --- a/demo/juice-shop/example-results/bare/bom.1.3.json +++ b/demo/juice-shop/example-results/bare/bom.1.3.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0" + "version": "1.6.1" } ], "component": { @@ -8382,46 +8382,6 @@ "value": "node_modules/cacheable-request/node_modules/get-stream" } ] - }, - { - "type": "library", - "name": "lowercase-keys", - "version": "1.0.0", - "bom-ref": "cacheable-request@2.1.4|lowercase-keys@1.0.0", - "author": "Sindre Sorhus", - "description": "Lowercase the keys of an object", - "hashes": [ - { - "alg": "SHA-512", - "content": "44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0" - } - ], - "licenses": [ - { - "license": { - "id": "MIT" - } - } - ], - "purl": "pkg:npm/lowercase-keys@1.0.0", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "sindresorhus/lowercase-keys", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository\"" - } - ], - "properties": [ - { - "name": "cdx:npm:package:path", - "value": "node_modules/cacheable-request/node_modules/lowercase-keys" - } - ] } ] }, @@ -11384,14 +11344,14 @@ { "type": "library", "name": "core-util-is", - "version": "1.0.3", - "bom-ref": "core-util-is@1.0.3", + "version": "1.0.2", + "bom-ref": "core-util-is@1.0.2", "author": "Isaac Z. Schlueter (http://blog.izs.me/)", "description": "The `util.is*` functions introduced in Node v0.12.", "hashes": [ { "alg": "SHA-512", - "content": "65006f8b50dca49e060ea6a78ee719d878f7c043b9a590d2f3d0566e472bbddc64b09a2bc140c365a997f65745929f5ac369660432e090e6c40380d6349f4561" + "content": "de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69" } ], "licenses": [ @@ -11401,10 +11361,10 @@ } } ], - "purl": "pkg:npm/core-util-is@1.0.3", + "purl": "pkg:npm/core-util-is@1.0.2", "externalReferences": [ { - "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz", + "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -19192,14 +19152,14 @@ { "type": "library", "name": "glob", - "version": "7.2.3", - "bom-ref": "glob@7.2.3", + "version": "7.1.7", + "bom-ref": "glob@7.1.7", "author": "Isaac Z. Schlueter (http://blog.izs.me/)", "description": "a little globber", "hashes": [ { "alg": "SHA-512", - "content": "9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5" + "content": "3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d" } ], "licenses": [ @@ -19209,10 +19169,10 @@ } } ], - "purl": "pkg:npm/glob@7.2.3", + "purl": "pkg:npm/glob@7.1.7", "externalReferences": [ { - "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "url": "https://registry.npmjs.org/glob/-/glob-7.1.7.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -19233,7 +19193,7 @@ "type": "library", "name": "brace-expansion", "version": "1.1.11", - "bom-ref": "glob@7.2.3|brace-expansion@1.1.11", + "bom-ref": "glob@7.1.7|brace-expansion@1.1.11", "author": "Julian Gruber", "description": "Brace expansion as known from sh/bash", "hashes": [ @@ -19278,7 +19238,7 @@ "type": "library", "name": "minimatch", "version": "3.1.2", - "bom-ref": "glob@7.2.3|minimatch@3.1.2", + "bom-ref": "glob@7.1.7|minimatch@3.1.2", "author": "Isaac Z. Schlueter (http://blog.izs.me)", "description": "a glob matcher in javascript", "hashes": [ @@ -20695,46 +20655,6 @@ } ] }, - { - "type": "library", - "name": "glob", - "version": "7.1.7", - "bom-ref": "grunt@1.5.3|glob@7.1.7", - "author": "Isaac Z. Schlueter (http://blog.izs.me/)", - "description": "a little globber", - "hashes": [ - { - "alg": "SHA-512", - "content": "3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d" - } - ], - "licenses": [ - { - "license": { - "id": "ISC" - } - } - ], - "purl": "pkg:npm/glob@7.1.7", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/glob/-/glob-7.1.7.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "git://github.com/isaacs/node-glob.git", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository.url\"" - } - ], - "properties": [ - { - "name": "cdx:npm:package:path", - "value": "node_modules/grunt/node_modules/glob" - } - ] - }, { "type": "library", "name": "minimatch", @@ -26990,47 +26910,6 @@ "name": "cdx:npm:package:path", "value": "node_modules/libxmljs2" } - ], - "components": [ - { - "type": "library", - "name": "nan", - "version": "2.15.0", - "bom-ref": "libxmljs2@0.30.1|nan@2.15.0", - "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility", - "hashes": [ - { - "alg": "SHA-512", - "content": "f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665" - } - ], - "licenses": [ - { - "license": { - "id": "MIT" - } - } - ], - "purl": "pkg:npm/nan@2.15.0", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/nan/-/nan-2.15.0.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "git://github.com/nodejs/nan.git", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository.url\"" - } - ], - "properties": [ - { - "name": "cdx:npm:package:path", - "value": "node_modules/libxmljs2/node_modules/nan" - } - ] - } ] }, { @@ -27956,14 +27835,14 @@ { "type": "library", "name": "lowercase-keys", - "version": "1.0.1", - "bom-ref": "lowercase-keys@1.0.1", + "version": "1.0.0", + "bom-ref": "lowercase-keys@1.0.0", "author": "Sindre Sorhus", "description": "Lowercase the keys of an object", "hashes": [ { "alg": "SHA-512", - "content": "1b62e3eb5b570e754514e8bc55976cf92a108ed402ddd82890a7431b69939b5b71e26e743541c1399481c10407cb2d15d760342531b889c7d9407fb13f287c54" + "content": "44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0" } ], "licenses": [ @@ -27973,10 +27852,10 @@ } } ], - "purl": "pkg:npm/lowercase-keys@1.0.1", + "purl": "pkg:npm/lowercase-keys@1.0.0", "externalReferences": [ { - "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.1.tgz", + "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -30105,13 +29984,13 @@ { "type": "library", "name": "nan", - "version": "2.17.0", - "bom-ref": "nan@2.17.0", - "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility", + "version": "2.15.0", + "bom-ref": "nan@2.15.0", + "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility", "hashes": [ { "alg": "SHA-512", - "content": "d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069" + "content": "f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665" } ], "licenses": [ @@ -30121,10 +30000,10 @@ } } ], - "purl": "pkg:npm/nan@2.17.0", + "purl": "pkg:npm/nan@2.15.0", "externalReferences": [ { - "url": "https://registry.npmjs.org/nan/-/nan-2.17.0.tgz", + "url": "https://registry.npmjs.org/nan/-/nan-2.15.0.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -46906,53 +46785,6 @@ "name": "cdx:npm:package:path", "value": "node_modules/verror" } - ], - "components": [ - { - "type": "library", - "name": "core-util-is", - "version": "1.0.2", - "bom-ref": "verror@1.10.0|core-util-is@1.0.2", - "author": "Isaac Z. Schlueter (http://blog.izs.me/)", - "description": "The `util.is*` functions introduced in Node v0.12.", - "hashes": [ - { - "alg": "SHA-512", - "content": "de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69" - } - ], - "licenses": [ - { - "license": { - "id": "MIT" - } - } - ], - "purl": "pkg:npm/core-util-is@1.0.2", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "https://github.com/isaacs/core-util-is/issues", - "type": "issue-tracker", - "comment": "as detected from PackageJson property \"bugs.url\"" - }, - { - "url": "git://github.com/isaacs/core-util-is", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository.url\"" - } - ], - "properties": [ - { - "name": "cdx:npm:package:path", - "value": "node_modules/verror/node_modules/core-util-is" - } - ] - } ] }, { @@ -49774,7 +49606,7 @@ { "ref": "archiver-utils@1.3.0", "dependsOn": [ - "glob@7.2.3", + "glob@7.1.7", "graceful-fs@4.2.10", "lazystream@1.0.1", "lodash@4.17.21", @@ -49788,7 +49620,7 @@ "archiver-utils@1.3.0", "async@2.6.4", "buffer-crc32@0.2.13", - "glob@7.2.3", + "glob@7.1.7", "lodash@4.17.21", "readable-stream@2.3.7", "tar-stream@1.6.2", @@ -50078,7 +49910,7 @@ "dependsOn": [ "busboy@0.2.14|isarray@0.0.1", "busboy@0.2.14|string_decoder@0.10.31", - "core-util-is@1.0.3", + "core-util-is@1.0.2", "inherits@2.0.4" ] }, @@ -50098,7 +49930,7 @@ "@npmcli/move-file@1.1.2", "chownr@2.0.0", "fs-minipass@2.1.0", - "glob@7.2.3", + "glob@7.1.7", "infer-owner@1.0.4", "lru-cache@6.0.0", "minipass-collect@1.0.2", @@ -50132,10 +49964,10 @@ "ref": "cacheable-request@2.1.4", "dependsOn": [ "cacheable-request@2.1.4|get-stream@3.0.0", - "cacheable-request@2.1.4|lowercase-keys@1.0.0", "clone-response@1.0.2", "http-cache-semantics@3.8.1", "keyv@3.0.0", + "lowercase-keys@1.0.0", "normalize-url@2.0.1", "responselike@1.0.2" ] @@ -50143,9 +49975,6 @@ { "ref": "cacheable-request@2.1.4|get-stream@3.0.0" }, - { - "ref": "cacheable-request@2.1.4|lowercase-keys@1.0.0" - }, { "ref": "call-bind@1.0.2", "dependsOn": [ @@ -50505,7 +50334,7 @@ "ref": "copy-descriptor@0.1.1" }, { - "ref": "core-util-is@1.0.3" + "ref": "core-util-is@1.0.2" }, { "ref": "cors@2.8.5", @@ -50719,7 +50548,7 @@ { "ref": "dicer@0.2.5|readable-stream@1.1.14", "dependsOn": [ - "core-util-is@1.0.3", + "core-util-is@1.0.2", "dicer@0.2.5|isarray@0.0.1", "dicer@0.2.5|string_decoder@0.10.31", "inherits@2.0.4" @@ -51409,7 +51238,7 @@ { "ref": "fstream@1.0.12|rimraf@2.7.1", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -51488,10 +51317,10 @@ ] }, { - "ref": "glob@7.2.3", + "ref": "glob@7.1.7", "dependsOn": [ "fs.realpath@1.0.0", - "glob@7.2.3|minimatch@3.1.2", + "glob@7.1.7|minimatch@3.1.2", "inflight@1.0.6", "inherits@2.0.4", "once@1.4.0", @@ -51499,16 +51328,16 @@ ] }, { - "ref": "glob@7.2.3|brace-expansion@1.1.11", + "ref": "glob@7.1.7|brace-expansion@1.1.11", "dependsOn": [ "balanced-match@1.0.2", "concat-map@0.0.1" ] }, { - "ref": "glob@7.2.3|minimatch@3.1.2", + "ref": "glob@7.1.7|minimatch@3.1.2", "dependsOn": [ - "glob@7.2.3|brace-expansion@1.1.11" + "glob@7.1.7|brace-expansion@1.1.11" ] }, { @@ -51553,7 +51382,7 @@ "into-stream@3.1.0", "is-retry-allowed@1.2.0", "isurl@1.0.0", - "lowercase-keys@1.0.1", + "lowercase-keys@1.0.0", "mimic-response@1.0.1", "p-cancelable@0.4.1", "p-timeout@2.0.1", @@ -51696,12 +51525,12 @@ "dateformat@3.0.3", "eventemitter2@0.4.14", "exit@0.1.2", + "glob@7.1.7", "grunt-cli@1.4.3", "grunt-known-options@2.0.0", "grunt-legacy-log@3.0.0", "grunt-legacy-util@2.0.1", "grunt@1.5.3|findup-sync@0.3.0", - "grunt@1.5.3|glob@7.1.7", "grunt@1.5.3|minimatch@3.0.8", "iconv-lite@0.4.24", "js-yaml@3.14.1", @@ -51733,17 +51562,6 @@ "path-is-absolute@1.0.1" ] }, - { - "ref": "grunt@1.5.3|glob@7.1.7", - "dependsOn": [ - "fs.realpath@1.0.0", - "grunt@1.5.3|minimatch@3.0.8", - "inflight@1.0.6", - "inherits@2.0.4", - "once@1.4.0", - "path-is-absolute@1.0.1" - ] - }, { "ref": "grunt@1.5.3|minimatch@3.0.8", "dependsOn": [ @@ -51891,7 +51709,7 @@ { "ref": "htmlparser2@3.3.0|readable-stream@1.0.34", "dependsOn": [ - "core-util-is@1.0.3", + "core-util-is@1.0.2", "htmlparser2@3.3.0|isarray@0.0.1", "htmlparser2@3.3.0|string_decoder@0.10.31", "inherits@2.0.4" @@ -52003,7 +51821,7 @@ "ref": "iltorb@2.4.5", "dependsOn": [ "detect-libc@1.0.3", - "nan@2.17.0", + "nan@2.15.0", "npmlog@4.1.2", "prebuild-install@5.3.6", "which-pm-runs@1.1.0" @@ -52401,7 +52219,7 @@ "finale-rest@1.2.0", "fs-extra@9.1.0", "fuzzball@1.4.0", - "glob@7.2.3", + "glob@7.1.7", "graceful-fs@4.2.10", "grunt-contrib-compress@1.6.0", "grunt-replace-json@0.1.0", @@ -52513,12 +52331,9 @@ "dependsOn": [ "@mapbox/node-pre-gyp@1.0.10", "bindings@1.5.0", - "libxmljs2@0.30.1|nan@2.15.0" + "nan@2.15.0" ] }, - { - "ref": "libxmljs2@0.30.1|nan@2.15.0" - }, { "ref": "liftup@3.0.1", "dependsOn": [ @@ -52630,7 +52445,7 @@ ] }, { - "ref": "lowercase-keys@1.0.1" + "ref": "lowercase-keys@1.0.0" }, { "ref": "lru-cache@6.0.0", @@ -52911,7 +52726,7 @@ "ref": "mustache@4.2.0" }, { - "ref": "nan@2.17.0" + "ref": "nan@2.15.0" }, { "ref": "nanomatch@1.2.13", @@ -52978,7 +52793,7 @@ "ref": "node-gyp@8.4.1", "dependsOn": [ "env-paths@2.2.1", - "glob@7.2.3", + "glob@7.1.7", "graceful-fs@4.2.10", "make-fetch-happen@9.1.0", "node-gyp@8.4.1|nopt@5.0.0", @@ -53105,7 +52920,7 @@ { "ref": "node-pre-gyp@0.15.0|rimraf@2.7.1", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -53733,7 +53548,7 @@ { "ref": "readable-stream@2.3.7", "dependsOn": [ - "core-util-is@1.0.3", + "core-util-is@1.0.2", "inherits@2.0.4", "process-nextick-args@2.0.1", "readable-stream@2.3.7|isarray@1.0.0", @@ -53967,7 +53782,7 @@ { "ref": "responselike@1.0.2", "dependsOn": [ - "lowercase-keys@1.0.1" + "lowercase-keys@1.0.0" ] }, { @@ -53985,7 +53800,7 @@ { "ref": "rimraf@3.0.2", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -54810,7 +54625,7 @@ { "ref": "ts-node-dev@1.1.8|rimraf@2.7.1", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -55062,13 +54877,10 @@ "ref": "verror@1.10.0", "dependsOn": [ "assert-plus@1.0.0", - "extsprintf@1.3.0", - "verror@1.10.0|core-util-is@1.0.2" + "core-util-is@1.0.2", + "extsprintf@1.3.0" ] }, - { - "ref": "verror@1.10.0|core-util-is@1.0.2" - }, { "ref": "vm2@3.9.11", "dependsOn": [ diff --git a/demo/juice-shop/example-results/bare/bom.1.3.xml b/demo/juice-shop/example-results/bare/bom.1.3.xml index 557859805..8a622abb3 100644 --- a/demo/juice-shop/example-results/bare/bom.1.3.xml +++ b/demo/juice-shop/example-results/bare/bom.1.3.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 @@ -5968,34 +5968,6 @@ node_modules/cacheable-request/node_modules/get-stream - - Sindre Sorhus - lowercase-keys - 1.0.0 - Lowercase the keys of an object - - 44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0 - - - - MIT - - - pkg:npm/lowercase-keys@1.0.0 - - - https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz - as detected from npm-ls property "resolved" - - - sindresorhus/lowercase-keys - as detected from PackageJson property "repository" - - - - node_modules/cacheable-request/node_modules/lowercase-keys - - @@ -8097,23 +8069,23 @@ node_modules/copy-descriptor - + Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) core-util-is - 1.0.3 + 1.0.2 The `util.is*` functions introduced in Node v0.12. - 65006f8b50dca49e060ea6a78ee719d878f7c043b9a590d2f3d0566e472bbddc64b09a2bc140c365a997f65745929f5ac369660432e090e6c40380d6349f4561 + de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69 MIT - pkg:npm/core-util-is@1.0.3 + pkg:npm/core-util-is@1.0.2 - https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz + https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz as detected from npm-ls property "resolved" @@ -13636,23 +13608,23 @@ - + Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) glob - 7.2.3 + 7.1.7 a little globber - 9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5 + 3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d ISC - pkg:npm/glob@7.2.3 + pkg:npm/glob@7.1.7 - https://registry.npmjs.org/glob/-/glob-7.2.3.tgz + https://registry.npmjs.org/glob/-/glob-7.1.7.tgz as detected from npm-ls property "resolved" @@ -13664,7 +13636,7 @@ node_modules/glob - + Julian Gruber brace-expansion 1.1.11 @@ -13696,7 +13668,7 @@ node_modules/glob/node_modules/brace-expansion - + Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me) minimatch 3.1.2 @@ -14704,34 +14676,6 @@ - - Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) - glob - 7.1.7 - a little globber - - 3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d - - - - ISC - - - pkg:npm/glob@7.1.7 - - - https://registry.npmjs.org/glob/-/glob-7.1.7.tgz - as detected from npm-ls property "resolved" - - - git://github.com/isaacs/node-glob.git - as detected from PackageJson property "repository.url" - - - - node_modules/grunt/node_modules/glob - - Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me) minimatch @@ -19185,35 +19129,6 @@ node_modules/libxmljs2 - - - nan - 2.15.0 - Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility - - f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665 - - - - MIT - - - pkg:npm/nan@2.15.0 - - - https://registry.npmjs.org/nan/-/nan-2.15.0.tgz - as detected from npm-ls property "resolved" - - - git://github.com/nodejs/nan.git - as detected from PackageJson property "repository.url" - - - - node_modules/libxmljs2/node_modules/nan - - - Grunt Development Team (https://gruntjs.com/development-team) @@ -19868,23 +19783,23 @@ node_modules/loose-envify - + Sindre Sorhus lowercase-keys - 1.0.1 + 1.0.0 Lowercase the keys of an object - 1b62e3eb5b570e754514e8bc55976cf92a108ed402ddd82890a7431b69939b5b71e26e743541c1399481c10407cb2d15d760342531b889c7d9407fb13f287c54 + 44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0 MIT - pkg:npm/lowercase-keys@1.0.1 + pkg:npm/lowercase-keys@1.0.0 - https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.1.tgz + https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz as detected from npm-ls property "resolved" @@ -21383,22 +21298,22 @@ node_modules/mustache - + nan - 2.17.0 - Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility + 2.15.0 + Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility - d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069 + f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665 MIT - pkg:npm/nan@2.17.0 + pkg:npm/nan@2.15.0 - https://registry.npmjs.org/nan/-/nan-2.17.0.tgz + https://registry.npmjs.org/nan/-/nan-2.15.0.tgz as detected from npm-ls property "resolved" @@ -33291,40 +33206,6 @@ node_modules/verror - - - Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) - core-util-is - 1.0.2 - The `util.is*` functions introduced in Node v0.12. - - de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69 - - - - MIT - - - pkg:npm/core-util-is@1.0.2 - - - https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz - as detected from npm-ls property "resolved" - - - https://github.com/isaacs/core-util-is/issues - as detected from PackageJson property "bugs.url" - - - git://github.com/isaacs/core-util-is - as detected from PackageJson property "repository.url" - - - - node_modules/verror/node_modules/core-util-is - - - Patrik Simek @@ -35202,7 +35083,7 @@ - + @@ -35213,7 +35094,7 @@ - + @@ -35361,7 +35242,7 @@ - + @@ -35372,7 +35253,7 @@ - + @@ -35400,15 +35281,14 @@ - + - @@ -35598,7 +35478,7 @@ - + @@ -35712,7 +35592,7 @@ - + @@ -36097,7 +35977,7 @@ - + @@ -36139,20 +36019,20 @@ - + - + - + - - + + @@ -36182,7 +36062,7 @@ - + @@ -36266,12 +36146,12 @@ + - @@ -36293,14 +36173,6 @@ - - - - - - - - @@ -36372,7 +36244,7 @@ - + @@ -36435,7 +36307,7 @@ - + @@ -36638,7 +36510,7 @@ - + @@ -36722,9 +36594,8 @@ - + - @@ -36784,7 +36655,7 @@ - + @@ -36939,7 +36810,7 @@ - + @@ -36976,7 +36847,7 @@ - + @@ -37055,7 +36926,7 @@ - + @@ -37393,7 +37264,7 @@ - + @@ -37531,14 +37402,14 @@ - + - + @@ -37987,7 +37858,7 @@ - + @@ -38120,10 +37991,9 @@ + - - diff --git a/demo/juice-shop/example-results/bare/bom.1.4.json b/demo/juice-shop/example-results/bare/bom.1.4.json index b3227979a..43f120b0d 100644 --- a/demo/juice-shop/example-results/bare/bom.1.4.json +++ b/demo/juice-shop/example-results/bare/bom.1.4.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0", + "version": "1.6.1", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", @@ -8399,46 +8399,6 @@ "value": "node_modules/cacheable-request/node_modules/get-stream" } ] - }, - { - "type": "library", - "name": "lowercase-keys", - "version": "1.0.0", - "bom-ref": "cacheable-request@2.1.4|lowercase-keys@1.0.0", - "author": "Sindre Sorhus", - "description": "Lowercase the keys of an object", - "hashes": [ - { - "alg": "SHA-512", - "content": "44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0" - } - ], - "licenses": [ - { - "license": { - "id": "MIT" - } - } - ], - "purl": "pkg:npm/lowercase-keys@1.0.0", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "sindresorhus/lowercase-keys", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository\"" - } - ], - "properties": [ - { - "name": "cdx:npm:package:path", - "value": "node_modules/cacheable-request/node_modules/lowercase-keys" - } - ] } ] }, @@ -11401,14 +11361,14 @@ { "type": "library", "name": "core-util-is", - "version": "1.0.3", - "bom-ref": "core-util-is@1.0.3", + "version": "1.0.2", + "bom-ref": "core-util-is@1.0.2", "author": "Isaac Z. Schlueter (http://blog.izs.me/)", "description": "The `util.is*` functions introduced in Node v0.12.", "hashes": [ { "alg": "SHA-512", - "content": "65006f8b50dca49e060ea6a78ee719d878f7c043b9a590d2f3d0566e472bbddc64b09a2bc140c365a997f65745929f5ac369660432e090e6c40380d6349f4561" + "content": "de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69" } ], "licenses": [ @@ -11418,10 +11378,10 @@ } } ], - "purl": "pkg:npm/core-util-is@1.0.3", + "purl": "pkg:npm/core-util-is@1.0.2", "externalReferences": [ { - "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz", + "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -19209,14 +19169,14 @@ { "type": "library", "name": "glob", - "version": "7.2.3", - "bom-ref": "glob@7.2.3", + "version": "7.1.7", + "bom-ref": "glob@7.1.7", "author": "Isaac Z. Schlueter (http://blog.izs.me/)", "description": "a little globber", "hashes": [ { "alg": "SHA-512", - "content": "9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5" + "content": "3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d" } ], "licenses": [ @@ -19226,10 +19186,10 @@ } } ], - "purl": "pkg:npm/glob@7.2.3", + "purl": "pkg:npm/glob@7.1.7", "externalReferences": [ { - "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "url": "https://registry.npmjs.org/glob/-/glob-7.1.7.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -19250,7 +19210,7 @@ "type": "library", "name": "brace-expansion", "version": "1.1.11", - "bom-ref": "glob@7.2.3|brace-expansion@1.1.11", + "bom-ref": "glob@7.1.7|brace-expansion@1.1.11", "author": "Julian Gruber", "description": "Brace expansion as known from sh/bash", "hashes": [ @@ -19295,7 +19255,7 @@ "type": "library", "name": "minimatch", "version": "3.1.2", - "bom-ref": "glob@7.2.3|minimatch@3.1.2", + "bom-ref": "glob@7.1.7|minimatch@3.1.2", "author": "Isaac Z. Schlueter (http://blog.izs.me)", "description": "a glob matcher in javascript", "hashes": [ @@ -20712,46 +20672,6 @@ } ] }, - { - "type": "library", - "name": "glob", - "version": "7.1.7", - "bom-ref": "grunt@1.5.3|glob@7.1.7", - "author": "Isaac Z. Schlueter (http://blog.izs.me/)", - "description": "a little globber", - "hashes": [ - { - "alg": "SHA-512", - "content": "3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d" - } - ], - "licenses": [ - { - "license": { - "id": "ISC" - } - } - ], - "purl": "pkg:npm/glob@7.1.7", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/glob/-/glob-7.1.7.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "git://github.com/isaacs/node-glob.git", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository.url\"" - } - ], - "properties": [ - { - "name": "cdx:npm:package:path", - "value": "node_modules/grunt/node_modules/glob" - } - ] - }, { "type": "library", "name": "minimatch", @@ -27007,47 +26927,6 @@ "name": "cdx:npm:package:path", "value": "node_modules/libxmljs2" } - ], - "components": [ - { - "type": "library", - "name": "nan", - "version": "2.15.0", - "bom-ref": "libxmljs2@0.30.1|nan@2.15.0", - "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility", - "hashes": [ - { - "alg": "SHA-512", - "content": "f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665" - } - ], - "licenses": [ - { - "license": { - "id": "MIT" - } - } - ], - "purl": "pkg:npm/nan@2.15.0", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/nan/-/nan-2.15.0.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "git://github.com/nodejs/nan.git", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository.url\"" - } - ], - "properties": [ - { - "name": "cdx:npm:package:path", - "value": "node_modules/libxmljs2/node_modules/nan" - } - ] - } ] }, { @@ -27973,14 +27852,14 @@ { "type": "library", "name": "lowercase-keys", - "version": "1.0.1", - "bom-ref": "lowercase-keys@1.0.1", + "version": "1.0.0", + "bom-ref": "lowercase-keys@1.0.0", "author": "Sindre Sorhus", "description": "Lowercase the keys of an object", "hashes": [ { "alg": "SHA-512", - "content": "1b62e3eb5b570e754514e8bc55976cf92a108ed402ddd82890a7431b69939b5b71e26e743541c1399481c10407cb2d15d760342531b889c7d9407fb13f287c54" + "content": "44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0" } ], "licenses": [ @@ -27990,10 +27869,10 @@ } } ], - "purl": "pkg:npm/lowercase-keys@1.0.1", + "purl": "pkg:npm/lowercase-keys@1.0.0", "externalReferences": [ { - "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.1.tgz", + "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -30122,13 +30001,13 @@ { "type": "library", "name": "nan", - "version": "2.17.0", - "bom-ref": "nan@2.17.0", - "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility", + "version": "2.15.0", + "bom-ref": "nan@2.15.0", + "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility", "hashes": [ { "alg": "SHA-512", - "content": "d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069" + "content": "f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665" } ], "licenses": [ @@ -30138,10 +30017,10 @@ } } ], - "purl": "pkg:npm/nan@2.17.0", + "purl": "pkg:npm/nan@2.15.0", "externalReferences": [ { - "url": "https://registry.npmjs.org/nan/-/nan-2.17.0.tgz", + "url": "https://registry.npmjs.org/nan/-/nan-2.15.0.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -46923,53 +46802,6 @@ "name": "cdx:npm:package:path", "value": "node_modules/verror" } - ], - "components": [ - { - "type": "library", - "name": "core-util-is", - "version": "1.0.2", - "bom-ref": "verror@1.10.0|core-util-is@1.0.2", - "author": "Isaac Z. Schlueter (http://blog.izs.me/)", - "description": "The `util.is*` functions introduced in Node v0.12.", - "hashes": [ - { - "alg": "SHA-512", - "content": "de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69" - } - ], - "licenses": [ - { - "license": { - "id": "MIT" - } - } - ], - "purl": "pkg:npm/core-util-is@1.0.2", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "https://github.com/isaacs/core-util-is/issues", - "type": "issue-tracker", - "comment": "as detected from PackageJson property \"bugs.url\"" - }, - { - "url": "git://github.com/isaacs/core-util-is", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository.url\"" - } - ], - "properties": [ - { - "name": "cdx:npm:package:path", - "value": "node_modules/verror/node_modules/core-util-is" - } - ] - } ] }, { @@ -49791,7 +49623,7 @@ { "ref": "archiver-utils@1.3.0", "dependsOn": [ - "glob@7.2.3", + "glob@7.1.7", "graceful-fs@4.2.10", "lazystream@1.0.1", "lodash@4.17.21", @@ -49805,7 +49637,7 @@ "archiver-utils@1.3.0", "async@2.6.4", "buffer-crc32@0.2.13", - "glob@7.2.3", + "glob@7.1.7", "lodash@4.17.21", "readable-stream@2.3.7", "tar-stream@1.6.2", @@ -50095,7 +49927,7 @@ "dependsOn": [ "busboy@0.2.14|isarray@0.0.1", "busboy@0.2.14|string_decoder@0.10.31", - "core-util-is@1.0.3", + "core-util-is@1.0.2", "inherits@2.0.4" ] }, @@ -50115,7 +49947,7 @@ "@npmcli/move-file@1.1.2", "chownr@2.0.0", "fs-minipass@2.1.0", - "glob@7.2.3", + "glob@7.1.7", "infer-owner@1.0.4", "lru-cache@6.0.0", "minipass-collect@1.0.2", @@ -50149,10 +49981,10 @@ "ref": "cacheable-request@2.1.4", "dependsOn": [ "cacheable-request@2.1.4|get-stream@3.0.0", - "cacheable-request@2.1.4|lowercase-keys@1.0.0", "clone-response@1.0.2", "http-cache-semantics@3.8.1", "keyv@3.0.0", + "lowercase-keys@1.0.0", "normalize-url@2.0.1", "responselike@1.0.2" ] @@ -50160,9 +49992,6 @@ { "ref": "cacheable-request@2.1.4|get-stream@3.0.0" }, - { - "ref": "cacheable-request@2.1.4|lowercase-keys@1.0.0" - }, { "ref": "call-bind@1.0.2", "dependsOn": [ @@ -50522,7 +50351,7 @@ "ref": "copy-descriptor@0.1.1" }, { - "ref": "core-util-is@1.0.3" + "ref": "core-util-is@1.0.2" }, { "ref": "cors@2.8.5", @@ -50736,7 +50565,7 @@ { "ref": "dicer@0.2.5|readable-stream@1.1.14", "dependsOn": [ - "core-util-is@1.0.3", + "core-util-is@1.0.2", "dicer@0.2.5|isarray@0.0.1", "dicer@0.2.5|string_decoder@0.10.31", "inherits@2.0.4" @@ -51426,7 +51255,7 @@ { "ref": "fstream@1.0.12|rimraf@2.7.1", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -51505,10 +51334,10 @@ ] }, { - "ref": "glob@7.2.3", + "ref": "glob@7.1.7", "dependsOn": [ "fs.realpath@1.0.0", - "glob@7.2.3|minimatch@3.1.2", + "glob@7.1.7|minimatch@3.1.2", "inflight@1.0.6", "inherits@2.0.4", "once@1.4.0", @@ -51516,16 +51345,16 @@ ] }, { - "ref": "glob@7.2.3|brace-expansion@1.1.11", + "ref": "glob@7.1.7|brace-expansion@1.1.11", "dependsOn": [ "balanced-match@1.0.2", "concat-map@0.0.1" ] }, { - "ref": "glob@7.2.3|minimatch@3.1.2", + "ref": "glob@7.1.7|minimatch@3.1.2", "dependsOn": [ - "glob@7.2.3|brace-expansion@1.1.11" + "glob@7.1.7|brace-expansion@1.1.11" ] }, { @@ -51570,7 +51399,7 @@ "into-stream@3.1.0", "is-retry-allowed@1.2.0", "isurl@1.0.0", - "lowercase-keys@1.0.1", + "lowercase-keys@1.0.0", "mimic-response@1.0.1", "p-cancelable@0.4.1", "p-timeout@2.0.1", @@ -51713,12 +51542,12 @@ "dateformat@3.0.3", "eventemitter2@0.4.14", "exit@0.1.2", + "glob@7.1.7", "grunt-cli@1.4.3", "grunt-known-options@2.0.0", "grunt-legacy-log@3.0.0", "grunt-legacy-util@2.0.1", "grunt@1.5.3|findup-sync@0.3.0", - "grunt@1.5.3|glob@7.1.7", "grunt@1.5.3|minimatch@3.0.8", "iconv-lite@0.4.24", "js-yaml@3.14.1", @@ -51750,17 +51579,6 @@ "path-is-absolute@1.0.1" ] }, - { - "ref": "grunt@1.5.3|glob@7.1.7", - "dependsOn": [ - "fs.realpath@1.0.0", - "grunt@1.5.3|minimatch@3.0.8", - "inflight@1.0.6", - "inherits@2.0.4", - "once@1.4.0", - "path-is-absolute@1.0.1" - ] - }, { "ref": "grunt@1.5.3|minimatch@3.0.8", "dependsOn": [ @@ -51908,7 +51726,7 @@ { "ref": "htmlparser2@3.3.0|readable-stream@1.0.34", "dependsOn": [ - "core-util-is@1.0.3", + "core-util-is@1.0.2", "htmlparser2@3.3.0|isarray@0.0.1", "htmlparser2@3.3.0|string_decoder@0.10.31", "inherits@2.0.4" @@ -52020,7 +51838,7 @@ "ref": "iltorb@2.4.5", "dependsOn": [ "detect-libc@1.0.3", - "nan@2.17.0", + "nan@2.15.0", "npmlog@4.1.2", "prebuild-install@5.3.6", "which-pm-runs@1.1.0" @@ -52418,7 +52236,7 @@ "finale-rest@1.2.0", "fs-extra@9.1.0", "fuzzball@1.4.0", - "glob@7.2.3", + "glob@7.1.7", "graceful-fs@4.2.10", "grunt-contrib-compress@1.6.0", "grunt-replace-json@0.1.0", @@ -52530,12 +52348,9 @@ "dependsOn": [ "@mapbox/node-pre-gyp@1.0.10", "bindings@1.5.0", - "libxmljs2@0.30.1|nan@2.15.0" + "nan@2.15.0" ] }, - { - "ref": "libxmljs2@0.30.1|nan@2.15.0" - }, { "ref": "liftup@3.0.1", "dependsOn": [ @@ -52647,7 +52462,7 @@ ] }, { - "ref": "lowercase-keys@1.0.1" + "ref": "lowercase-keys@1.0.0" }, { "ref": "lru-cache@6.0.0", @@ -52928,7 +52743,7 @@ "ref": "mustache@4.2.0" }, { - "ref": "nan@2.17.0" + "ref": "nan@2.15.0" }, { "ref": "nanomatch@1.2.13", @@ -52995,7 +52810,7 @@ "ref": "node-gyp@8.4.1", "dependsOn": [ "env-paths@2.2.1", - "glob@7.2.3", + "glob@7.1.7", "graceful-fs@4.2.10", "make-fetch-happen@9.1.0", "node-gyp@8.4.1|nopt@5.0.0", @@ -53122,7 +52937,7 @@ { "ref": "node-pre-gyp@0.15.0|rimraf@2.7.1", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -53750,7 +53565,7 @@ { "ref": "readable-stream@2.3.7", "dependsOn": [ - "core-util-is@1.0.3", + "core-util-is@1.0.2", "inherits@2.0.4", "process-nextick-args@2.0.1", "readable-stream@2.3.7|isarray@1.0.0", @@ -53984,7 +53799,7 @@ { "ref": "responselike@1.0.2", "dependsOn": [ - "lowercase-keys@1.0.1" + "lowercase-keys@1.0.0" ] }, { @@ -54002,7 +53817,7 @@ { "ref": "rimraf@3.0.2", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -54827,7 +54642,7 @@ { "ref": "ts-node-dev@1.1.8|rimraf@2.7.1", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -55079,13 +54894,10 @@ "ref": "verror@1.10.0", "dependsOn": [ "assert-plus@1.0.0", - "extsprintf@1.3.0", - "verror@1.10.0|core-util-is@1.0.2" + "core-util-is@1.0.2", + "extsprintf@1.3.0" ] }, - { - "ref": "verror@1.10.0|core-util-is@1.0.2" - }, { "ref": "vm2@3.9.11", "dependsOn": [ diff --git a/demo/juice-shop/example-results/bare/bom.1.4.xml b/demo/juice-shop/example-results/bare/bom.1.4.xml index 14c890c76..e4b7b2bdd 100644 --- a/demo/juice-shop/example-results/bare/bom.1.4.xml +++ b/demo/juice-shop/example-results/bare/bom.1.4.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 https://github.com/CycloneDX/cyclonedx-node-npm/issues @@ -5982,34 +5982,6 @@ node_modules/cacheable-request/node_modules/get-stream - - Sindre Sorhus - lowercase-keys - 1.0.0 - Lowercase the keys of an object - - 44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0 - - - - MIT - - - pkg:npm/lowercase-keys@1.0.0 - - - https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz - as detected from npm-ls property "resolved" - - - sindresorhus/lowercase-keys - as detected from PackageJson property "repository" - - - - node_modules/cacheable-request/node_modules/lowercase-keys - - @@ -8111,23 +8083,23 @@ node_modules/copy-descriptor - + Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) core-util-is - 1.0.3 + 1.0.2 The `util.is*` functions introduced in Node v0.12. - 65006f8b50dca49e060ea6a78ee719d878f7c043b9a590d2f3d0566e472bbddc64b09a2bc140c365a997f65745929f5ac369660432e090e6c40380d6349f4561 + de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69 MIT - pkg:npm/core-util-is@1.0.3 + pkg:npm/core-util-is@1.0.2 - https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz + https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz as detected from npm-ls property "resolved" @@ -13650,23 +13622,23 @@ - + Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) glob - 7.2.3 + 7.1.7 a little globber - 9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5 + 3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d ISC - pkg:npm/glob@7.2.3 + pkg:npm/glob@7.1.7 - https://registry.npmjs.org/glob/-/glob-7.2.3.tgz + https://registry.npmjs.org/glob/-/glob-7.1.7.tgz as detected from npm-ls property "resolved" @@ -13678,7 +13650,7 @@ node_modules/glob - + Julian Gruber brace-expansion 1.1.11 @@ -13710,7 +13682,7 @@ node_modules/glob/node_modules/brace-expansion - + Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me) minimatch 3.1.2 @@ -14718,34 +14690,6 @@ - - Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) - glob - 7.1.7 - a little globber - - 3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d - - - - ISC - - - pkg:npm/glob@7.1.7 - - - https://registry.npmjs.org/glob/-/glob-7.1.7.tgz - as detected from npm-ls property "resolved" - - - git://github.com/isaacs/node-glob.git - as detected from PackageJson property "repository.url" - - - - node_modules/grunt/node_modules/glob - - Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me) minimatch @@ -19199,35 +19143,6 @@ node_modules/libxmljs2 - - - nan - 2.15.0 - Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility - - f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665 - - - - MIT - - - pkg:npm/nan@2.15.0 - - - https://registry.npmjs.org/nan/-/nan-2.15.0.tgz - as detected from npm-ls property "resolved" - - - git://github.com/nodejs/nan.git - as detected from PackageJson property "repository.url" - - - - node_modules/libxmljs2/node_modules/nan - - - Grunt Development Team (https://gruntjs.com/development-team) @@ -19882,23 +19797,23 @@ node_modules/loose-envify - + Sindre Sorhus lowercase-keys - 1.0.1 + 1.0.0 Lowercase the keys of an object - 1b62e3eb5b570e754514e8bc55976cf92a108ed402ddd82890a7431b69939b5b71e26e743541c1399481c10407cb2d15d760342531b889c7d9407fb13f287c54 + 44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0 MIT - pkg:npm/lowercase-keys@1.0.1 + pkg:npm/lowercase-keys@1.0.0 - https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.1.tgz + https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz as detected from npm-ls property "resolved" @@ -21397,22 +21312,22 @@ node_modules/mustache - + nan - 2.17.0 - Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility + 2.15.0 + Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility - d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069 + f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665 MIT - pkg:npm/nan@2.17.0 + pkg:npm/nan@2.15.0 - https://registry.npmjs.org/nan/-/nan-2.17.0.tgz + https://registry.npmjs.org/nan/-/nan-2.15.0.tgz as detected from npm-ls property "resolved" @@ -33305,40 +33220,6 @@ node_modules/verror - - - Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) - core-util-is - 1.0.2 - The `util.is*` functions introduced in Node v0.12. - - de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69 - - - - MIT - - - pkg:npm/core-util-is@1.0.2 - - - https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz - as detected from npm-ls property "resolved" - - - https://github.com/isaacs/core-util-is/issues - as detected from PackageJson property "bugs.url" - - - git://github.com/isaacs/core-util-is - as detected from PackageJson property "repository.url" - - - - node_modules/verror/node_modules/core-util-is - - - Patrik Simek @@ -35216,7 +35097,7 @@ - + @@ -35227,7 +35108,7 @@ - + @@ -35375,7 +35256,7 @@ - + @@ -35386,7 +35267,7 @@ - + @@ -35414,15 +35295,14 @@ - + - @@ -35612,7 +35492,7 @@ - + @@ -35726,7 +35606,7 @@ - + @@ -36111,7 +35991,7 @@ - + @@ -36153,20 +36033,20 @@ - + - + - + - - + + @@ -36196,7 +36076,7 @@ - + @@ -36280,12 +36160,12 @@ + - @@ -36307,14 +36187,6 @@ - - - - - - - - @@ -36386,7 +36258,7 @@ - + @@ -36449,7 +36321,7 @@ - + @@ -36652,7 +36524,7 @@ - + @@ -36736,9 +36608,8 @@ - + - @@ -36798,7 +36669,7 @@ - + @@ -36953,7 +36824,7 @@ - + @@ -36990,7 +36861,7 @@ - + @@ -37069,7 +36940,7 @@ - + @@ -37407,7 +37278,7 @@ - + @@ -37545,14 +37416,14 @@ - + - + @@ -38001,7 +37872,7 @@ - + @@ -38134,10 +38005,9 @@ + - - diff --git a/demo/juice-shop/example-results/flat/bom.1.2.json b/demo/juice-shop/example-results/flat/bom.1.2.json index df2dc48ac..8de707e56 100644 --- a/demo/juice-shop/example-results/flat/bom.1.2.json +++ b/demo/juice-shop/example-results/flat/bom.1.2.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0" + "version": "1.6.1" } ], "component": { @@ -7235,40 +7235,6 @@ } ] }, - { - "type": "library", - "name": "lowercase-keys", - "version": "1.0.0", - "bom-ref": "cacheable-request@2.1.4|lowercase-keys@1.0.0", - "author": "Sindre Sorhus", - "description": "Lowercase the keys of an object", - "hashes": [ - { - "alg": "SHA-512", - "content": "44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0" - } - ], - "licenses": [ - { - "license": { - "id": "MIT" - } - } - ], - "purl": "pkg:npm/lowercase-keys@1.0.0", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "sindresorhus/lowercase-keys", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository\"" - } - ] - }, { "type": "library", "name": "call-bind", @@ -9814,14 +9780,14 @@ { "type": "library", "name": "core-util-is", - "version": "1.0.3", - "bom-ref": "core-util-is@1.0.3", + "version": "1.0.2", + "bom-ref": "core-util-is@1.0.2", "author": "Isaac Z. Schlueter (http://blog.izs.me/)", "description": "The `util.is*` functions introduced in Node v0.12.", "hashes": [ { "alg": "SHA-512", - "content": "65006f8b50dca49e060ea6a78ee719d878f7c043b9a590d2f3d0566e472bbddc64b09a2bc140c365a997f65745929f5ac369660432e090e6c40380d6349f4561" + "content": "de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69" } ], "licenses": [ @@ -9831,10 +9797,10 @@ } } ], - "purl": "pkg:npm/core-util-is@1.0.3", + "purl": "pkg:npm/core-util-is@1.0.2", "externalReferences": [ { - "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz", + "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -16526,14 +16492,14 @@ { "type": "library", "name": "glob", - "version": "7.2.3", - "bom-ref": "glob@7.2.3", + "version": "7.1.7", + "bom-ref": "glob@7.1.7", "author": "Isaac Z. Schlueter (http://blog.izs.me/)", "description": "a little globber", "hashes": [ { "alg": "SHA-512", - "content": "9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5" + "content": "3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d" } ], "licenses": [ @@ -16543,10 +16509,10 @@ } } ], - "purl": "pkg:npm/glob@7.2.3", + "purl": "pkg:npm/glob@7.1.7", "externalReferences": [ { - "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "url": "https://registry.npmjs.org/glob/-/glob-7.1.7.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -16561,7 +16527,7 @@ "type": "library", "name": "brace-expansion", "version": "1.1.11", - "bom-ref": "glob@7.2.3|brace-expansion@1.1.11", + "bom-ref": "glob@7.1.7|brace-expansion@1.1.11", "author": "Julian Gruber", "description": "Brace expansion as known from sh/bash", "hashes": [ @@ -16600,7 +16566,7 @@ "type": "library", "name": "minimatch", "version": "3.1.2", - "bom-ref": "glob@7.2.3|minimatch@3.1.2", + "bom-ref": "glob@7.1.7|minimatch@3.1.2", "author": "Isaac Z. Schlueter (http://blog.izs.me)", "description": "a glob matcher in javascript", "hashes": [ @@ -17807,40 +17773,6 @@ } ] }, - { - "type": "library", - "name": "glob", - "version": "7.1.7", - "bom-ref": "grunt@1.5.3|glob@7.1.7", - "author": "Isaac Z. Schlueter (http://blog.izs.me/)", - "description": "a little globber", - "hashes": [ - { - "alg": "SHA-512", - "content": "3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d" - } - ], - "licenses": [ - { - "license": { - "id": "ISC" - } - } - ], - "purl": "pkg:npm/glob@7.1.7", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/glob/-/glob-7.1.7.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "git://github.com/isaacs/node-glob.git", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository.url\"" - } - ] - }, { "type": "library", "name": "minimatch", @@ -23260,39 +23192,6 @@ } ] }, - { - "type": "library", - "name": "nan", - "version": "2.15.0", - "bom-ref": "libxmljs2@0.30.1|nan@2.15.0", - "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility", - "hashes": [ - { - "alg": "SHA-512", - "content": "f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665" - } - ], - "licenses": [ - { - "license": { - "id": "MIT" - } - } - ], - "purl": "pkg:npm/nan@2.15.0", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/nan/-/nan-2.15.0.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "git://github.com/nodejs/nan.git", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository.url\"" - } - ] - }, { "type": "library", "name": "liftup", @@ -24090,14 +23989,14 @@ { "type": "library", "name": "lowercase-keys", - "version": "1.0.1", - "bom-ref": "lowercase-keys@1.0.1", + "version": "1.0.0", + "bom-ref": "lowercase-keys@1.0.0", "author": "Sindre Sorhus", "description": "Lowercase the keys of an object", "hashes": [ { "alg": "SHA-512", - "content": "1b62e3eb5b570e754514e8bc55976cf92a108ed402ddd82890a7431b69939b5b71e26e743541c1399481c10407cb2d15d760342531b889c7d9407fb13f287c54" + "content": "44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0" } ], "licenses": [ @@ -24107,10 +24006,10 @@ } } ], - "purl": "pkg:npm/lowercase-keys@1.0.1", + "purl": "pkg:npm/lowercase-keys@1.0.0", "externalReferences": [ { - "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.1.tgz", + "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -25929,13 +25828,13 @@ { "type": "library", "name": "nan", - "version": "2.17.0", - "bom-ref": "nan@2.17.0", - "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility", + "version": "2.15.0", + "bom-ref": "nan@2.15.0", + "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility", "hashes": [ { "alg": "SHA-512", - "content": "d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069" + "content": "f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665" } ], "licenses": [ @@ -25945,10 +25844,10 @@ } } ], - "purl": "pkg:npm/nan@2.17.0", + "purl": "pkg:npm/nan@2.15.0", "externalReferences": [ { - "url": "https://registry.npmjs.org/nan/-/nan-2.17.0.tgz", + "url": "https://registry.npmjs.org/nan/-/nan-2.15.0.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -40374,45 +40273,6 @@ } ] }, - { - "type": "library", - "name": "core-util-is", - "version": "1.0.2", - "bom-ref": "verror@1.10.0|core-util-is@1.0.2", - "author": "Isaac Z. Schlueter (http://blog.izs.me/)", - "description": "The `util.is*` functions introduced in Node v0.12.", - "hashes": [ - { - "alg": "SHA-512", - "content": "de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69" - } - ], - "licenses": [ - { - "license": { - "id": "MIT" - } - } - ], - "purl": "pkg:npm/core-util-is@1.0.2", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "https://github.com/isaacs/core-util-is/issues", - "type": "issue-tracker", - "comment": "as detected from PackageJson property \"bugs.url\"" - }, - { - "url": "git://github.com/isaacs/core-util-is", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository.url\"" - } - ] - }, { "type": "library", "name": "vm2", @@ -42934,7 +42794,7 @@ { "ref": "archiver-utils@1.3.0", "dependsOn": [ - "glob@7.2.3", + "glob@7.1.7", "graceful-fs@4.2.10", "lazystream@1.0.1", "lodash@4.17.21", @@ -42948,7 +42808,7 @@ "archiver-utils@1.3.0", "async@2.6.4", "buffer-crc32@0.2.13", - "glob@7.2.3", + "glob@7.1.7", "lodash@4.17.21", "readable-stream@2.3.7", "tar-stream@1.6.2", @@ -43238,7 +43098,7 @@ "dependsOn": [ "busboy@0.2.14|isarray@0.0.1", "busboy@0.2.14|string_decoder@0.10.31", - "core-util-is@1.0.3", + "core-util-is@1.0.2", "inherits@2.0.4" ] }, @@ -43258,7 +43118,7 @@ "@npmcli/move-file@1.1.2", "chownr@2.0.0", "fs-minipass@2.1.0", - "glob@7.2.3", + "glob@7.1.7", "infer-owner@1.0.4", "lru-cache@6.0.0", "minipass-collect@1.0.2", @@ -43292,10 +43152,10 @@ "ref": "cacheable-request@2.1.4", "dependsOn": [ "cacheable-request@2.1.4|get-stream@3.0.0", - "cacheable-request@2.1.4|lowercase-keys@1.0.0", "clone-response@1.0.2", "http-cache-semantics@3.8.1", "keyv@3.0.0", + "lowercase-keys@1.0.0", "normalize-url@2.0.1", "responselike@1.0.2" ] @@ -43303,9 +43163,6 @@ { "ref": "cacheable-request@2.1.4|get-stream@3.0.0" }, - { - "ref": "cacheable-request@2.1.4|lowercase-keys@1.0.0" - }, { "ref": "call-bind@1.0.2", "dependsOn": [ @@ -43665,7 +43522,7 @@ "ref": "copy-descriptor@0.1.1" }, { - "ref": "core-util-is@1.0.3" + "ref": "core-util-is@1.0.2" }, { "ref": "cors@2.8.5", @@ -43879,7 +43736,7 @@ { "ref": "dicer@0.2.5|readable-stream@1.1.14", "dependsOn": [ - "core-util-is@1.0.3", + "core-util-is@1.0.2", "dicer@0.2.5|isarray@0.0.1", "dicer@0.2.5|string_decoder@0.10.31", "inherits@2.0.4" @@ -44569,7 +44426,7 @@ { "ref": "fstream@1.0.12|rimraf@2.7.1", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -44648,10 +44505,10 @@ ] }, { - "ref": "glob@7.2.3", + "ref": "glob@7.1.7", "dependsOn": [ "fs.realpath@1.0.0", - "glob@7.2.3|minimatch@3.1.2", + "glob@7.1.7|minimatch@3.1.2", "inflight@1.0.6", "inherits@2.0.4", "once@1.4.0", @@ -44659,16 +44516,16 @@ ] }, { - "ref": "glob@7.2.3|brace-expansion@1.1.11", + "ref": "glob@7.1.7|brace-expansion@1.1.11", "dependsOn": [ "balanced-match@1.0.2", "concat-map@0.0.1" ] }, { - "ref": "glob@7.2.3|minimatch@3.1.2", + "ref": "glob@7.1.7|minimatch@3.1.2", "dependsOn": [ - "glob@7.2.3|brace-expansion@1.1.11" + "glob@7.1.7|brace-expansion@1.1.11" ] }, { @@ -44713,7 +44570,7 @@ "into-stream@3.1.0", "is-retry-allowed@1.2.0", "isurl@1.0.0", - "lowercase-keys@1.0.1", + "lowercase-keys@1.0.0", "mimic-response@1.0.1", "p-cancelable@0.4.1", "p-timeout@2.0.1", @@ -44856,12 +44713,12 @@ "dateformat@3.0.3", "eventemitter2@0.4.14", "exit@0.1.2", + "glob@7.1.7", "grunt-cli@1.4.3", "grunt-known-options@2.0.0", "grunt-legacy-log@3.0.0", "grunt-legacy-util@2.0.1", "grunt@1.5.3|findup-sync@0.3.0", - "grunt@1.5.3|glob@7.1.7", "grunt@1.5.3|minimatch@3.0.8", "iconv-lite@0.4.24", "js-yaml@3.14.1", @@ -44893,17 +44750,6 @@ "path-is-absolute@1.0.1" ] }, - { - "ref": "grunt@1.5.3|glob@7.1.7", - "dependsOn": [ - "fs.realpath@1.0.0", - "grunt@1.5.3|minimatch@3.0.8", - "inflight@1.0.6", - "inherits@2.0.4", - "once@1.4.0", - "path-is-absolute@1.0.1" - ] - }, { "ref": "grunt@1.5.3|minimatch@3.0.8", "dependsOn": [ @@ -45051,7 +44897,7 @@ { "ref": "htmlparser2@3.3.0|readable-stream@1.0.34", "dependsOn": [ - "core-util-is@1.0.3", + "core-util-is@1.0.2", "htmlparser2@3.3.0|isarray@0.0.1", "htmlparser2@3.3.0|string_decoder@0.10.31", "inherits@2.0.4" @@ -45163,7 +45009,7 @@ "ref": "iltorb@2.4.5", "dependsOn": [ "detect-libc@1.0.3", - "nan@2.17.0", + "nan@2.15.0", "npmlog@4.1.2", "prebuild-install@5.3.6", "which-pm-runs@1.1.0" @@ -45561,7 +45407,7 @@ "finale-rest@1.2.0", "fs-extra@9.1.0", "fuzzball@1.4.0", - "glob@7.2.3", + "glob@7.1.7", "graceful-fs@4.2.10", "grunt-contrib-compress@1.6.0", "grunt-replace-json@0.1.0", @@ -45673,12 +45519,9 @@ "dependsOn": [ "@mapbox/node-pre-gyp@1.0.10", "bindings@1.5.0", - "libxmljs2@0.30.1|nan@2.15.0" + "nan@2.15.0" ] }, - { - "ref": "libxmljs2@0.30.1|nan@2.15.0" - }, { "ref": "liftup@3.0.1", "dependsOn": [ @@ -45790,7 +45633,7 @@ ] }, { - "ref": "lowercase-keys@1.0.1" + "ref": "lowercase-keys@1.0.0" }, { "ref": "lru-cache@6.0.0", @@ -46071,7 +45914,7 @@ "ref": "mustache@4.2.0" }, { - "ref": "nan@2.17.0" + "ref": "nan@2.15.0" }, { "ref": "nanomatch@1.2.13", @@ -46138,7 +45981,7 @@ "ref": "node-gyp@8.4.1", "dependsOn": [ "env-paths@2.2.1", - "glob@7.2.3", + "glob@7.1.7", "graceful-fs@4.2.10", "make-fetch-happen@9.1.0", "node-gyp@8.4.1|nopt@5.0.0", @@ -46265,7 +46108,7 @@ { "ref": "node-pre-gyp@0.15.0|rimraf@2.7.1", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -46893,7 +46736,7 @@ { "ref": "readable-stream@2.3.7", "dependsOn": [ - "core-util-is@1.0.3", + "core-util-is@1.0.2", "inherits@2.0.4", "process-nextick-args@2.0.1", "readable-stream@2.3.7|isarray@1.0.0", @@ -47127,7 +46970,7 @@ { "ref": "responselike@1.0.2", "dependsOn": [ - "lowercase-keys@1.0.1" + "lowercase-keys@1.0.0" ] }, { @@ -47145,7 +46988,7 @@ { "ref": "rimraf@3.0.2", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -47970,7 +47813,7 @@ { "ref": "ts-node-dev@1.1.8|rimraf@2.7.1", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -48222,13 +48065,10 @@ "ref": "verror@1.10.0", "dependsOn": [ "assert-plus@1.0.0", - "extsprintf@1.3.0", - "verror@1.10.0|core-util-is@1.0.2" + "core-util-is@1.0.2", + "extsprintf@1.3.0" ] }, - { - "ref": "verror@1.10.0|core-util-is@1.0.2" - }, { "ref": "vm2@3.9.11", "dependsOn": [ diff --git a/demo/juice-shop/example-results/flat/bom.1.2.xml b/demo/juice-shop/example-results/flat/bom.1.2.xml index f443eea6f..d137cdecb 100644 --- a/demo/juice-shop/example-results/flat/bom.1.2.xml +++ b/demo/juice-shop/example-results/flat/bom.1.2.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 @@ -5384,31 +5384,6 @@ - - Sindre Sorhus - lowercase-keys - 1.0.0 - Lowercase the keys of an object - - 44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0 - - - - MIT - - - pkg:npm/lowercase-keys@1.0.0 - - - https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz - as detected from npm-ls property "resolved" - - - sindresorhus/lowercase-keys - as detected from PackageJson property "repository" - - - Jordan Harband <ljharb@gmail.com> call-bind @@ -7292,23 +7267,23 @@ - + Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) core-util-is - 1.0.3 + 1.0.2 The `util.is*` functions introduced in Node v0.12. - 65006f8b50dca49e060ea6a78ee719d878f7c043b9a590d2f3d0566e472bbddc64b09a2bc140c365a997f65745929f5ac369660432e090e6c40380d6349f4561 + de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69 MIT - pkg:npm/core-util-is@1.0.3 + pkg:npm/core-util-is@1.0.2 - https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz + https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz as detected from npm-ls property "resolved" @@ -12263,23 +12238,23 @@ - + Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) glob - 7.2.3 + 7.1.7 a little globber - 9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5 + 3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d ISC - pkg:npm/glob@7.2.3 + pkg:npm/glob@7.1.7 - https://registry.npmjs.org/glob/-/glob-7.2.3.tgz + https://registry.npmjs.org/glob/-/glob-7.1.7.tgz as detected from npm-ls property "resolved" @@ -12288,7 +12263,7 @@ - + Julian Gruber brace-expansion 1.1.11 @@ -12317,7 +12292,7 @@ - + Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me) minimatch 3.1.2 @@ -13211,31 +13186,6 @@ - - Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) - glob - 7.1.7 - a little globber - - 3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d - - - - ISC - - - pkg:npm/glob@7.1.7 - - - https://registry.npmjs.org/glob/-/glob-7.1.7.tgz - as detected from npm-ls property "resolved" - - - git://github.com/isaacs/node-glob.git - as detected from PackageJson property "repository.url" - - - Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me) minimatch @@ -17263,30 +17213,6 @@ - - nan - 2.15.0 - Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility - - f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665 - - - - MIT - - - pkg:npm/nan@2.15.0 - - - https://registry.npmjs.org/nan/-/nan-2.15.0.tgz - as detected from npm-ls property "resolved" - - - git://github.com/nodejs/nan.git - as detected from PackageJson property "repository.url" - - - Grunt Development Team (https://gruntjs.com/development-team) liftup @@ -17874,23 +17800,23 @@ - + Sindre Sorhus lowercase-keys - 1.0.1 + 1.0.0 Lowercase the keys of an object - 1b62e3eb5b570e754514e8bc55976cf92a108ed402ddd82890a7431b69939b5b71e26e743541c1399481c10407cb2d15d760342531b889c7d9407fb13f287c54 + 44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0 MIT - pkg:npm/lowercase-keys@1.0.1 + pkg:npm/lowercase-keys@1.0.0 - https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.1.tgz + https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz as detected from npm-ls property "resolved" @@ -19229,22 +19155,22 @@ - + nan - 2.17.0 - Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility + 2.15.0 + Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility - d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069 + f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665 MIT - pkg:npm/nan@2.17.0 + pkg:npm/nan@2.15.0 - https://registry.npmjs.org/nan/-/nan-2.17.0.tgz + https://registry.npmjs.org/nan/-/nan-2.15.0.tgz as detected from npm-ls property "resolved" @@ -29917,35 +29843,6 @@ - - Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) - core-util-is - 1.0.2 - The `util.is*` functions introduced in Node v0.12. - - de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69 - - - - MIT - - - pkg:npm/core-util-is@1.0.2 - - - https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz - as detected from npm-ls property "resolved" - - - https://github.com/isaacs/core-util-is/issues - as detected from PackageJson property "bugs.url" - - - git://github.com/isaacs/core-util-is - as detected from PackageJson property "repository.url" - - - Patrik Simek vm2 @@ -31668,7 +31565,7 @@ - + @@ -31679,7 +31576,7 @@ - + @@ -31827,7 +31724,7 @@ - + @@ -31838,7 +31735,7 @@ - + @@ -31866,15 +31763,14 @@ - + - @@ -32064,7 +31960,7 @@ - + @@ -32178,7 +32074,7 @@ - + @@ -32563,7 +32459,7 @@ - + @@ -32605,20 +32501,20 @@ - + - + - + - - + + @@ -32648,7 +32544,7 @@ - + @@ -32732,12 +32628,12 @@ + - @@ -32759,14 +32655,6 @@ - - - - - - - - @@ -32838,7 +32726,7 @@ - + @@ -32901,7 +32789,7 @@ - + @@ -33104,7 +32992,7 @@ - + @@ -33188,9 +33076,8 @@ - + - @@ -33250,7 +33137,7 @@ - + @@ -33405,7 +33292,7 @@ - + @@ -33442,7 +33329,7 @@ - + @@ -33521,7 +33408,7 @@ - + @@ -33859,7 +33746,7 @@ - + @@ -33997,14 +33884,14 @@ - + - + @@ -34453,7 +34340,7 @@ - + @@ -34586,10 +34473,9 @@ + - - diff --git a/demo/juice-shop/example-results/flat/bom.1.3.json b/demo/juice-shop/example-results/flat/bom.1.3.json index 9f72a887a..480c733eb 100644 --- a/demo/juice-shop/example-results/flat/bom.1.3.json +++ b/demo/juice-shop/example-results/flat/bom.1.3.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0" + "version": "1.6.1" } ], "component": { @@ -8361,46 +8361,6 @@ } ] }, - { - "type": "library", - "name": "lowercase-keys", - "version": "1.0.0", - "bom-ref": "cacheable-request@2.1.4|lowercase-keys@1.0.0", - "author": "Sindre Sorhus", - "description": "Lowercase the keys of an object", - "hashes": [ - { - "alg": "SHA-512", - "content": "44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0" - } - ], - "licenses": [ - { - "license": { - "id": "MIT" - } - } - ], - "purl": "pkg:npm/lowercase-keys@1.0.0", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "sindresorhus/lowercase-keys", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository\"" - } - ], - "properties": [ - { - "name": "cdx:npm:package:path", - "value": "node_modules/cacheable-request/node_modules/lowercase-keys" - } - ] - }, { "type": "library", "name": "call-bind", @@ -11342,14 +11302,14 @@ { "type": "library", "name": "core-util-is", - "version": "1.0.3", - "bom-ref": "core-util-is@1.0.3", + "version": "1.0.2", + "bom-ref": "core-util-is@1.0.2", "author": "Isaac Z. Schlueter (http://blog.izs.me/)", "description": "The `util.is*` functions introduced in Node v0.12.", "hashes": [ { "alg": "SHA-512", - "content": "65006f8b50dca49e060ea6a78ee719d878f7c043b9a590d2f3d0566e472bbddc64b09a2bc140c365a997f65745929f5ac369660432e090e6c40380d6349f4561" + "content": "de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69" } ], "licenses": [ @@ -11359,10 +11319,10 @@ } } ], - "purl": "pkg:npm/core-util-is@1.0.3", + "purl": "pkg:npm/core-util-is@1.0.2", "externalReferences": [ { - "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz", + "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -19110,14 +19070,14 @@ { "type": "library", "name": "glob", - "version": "7.2.3", - "bom-ref": "glob@7.2.3", + "version": "7.1.7", + "bom-ref": "glob@7.1.7", "author": "Isaac Z. Schlueter (http://blog.izs.me/)", "description": "a little globber", "hashes": [ { "alg": "SHA-512", - "content": "9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5" + "content": "3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d" } ], "licenses": [ @@ -19127,10 +19087,10 @@ } } ], - "purl": "pkg:npm/glob@7.2.3", + "purl": "pkg:npm/glob@7.1.7", "externalReferences": [ { - "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "url": "https://registry.npmjs.org/glob/-/glob-7.1.7.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -19151,7 +19111,7 @@ "type": "library", "name": "brace-expansion", "version": "1.1.11", - "bom-ref": "glob@7.2.3|brace-expansion@1.1.11", + "bom-ref": "glob@7.1.7|brace-expansion@1.1.11", "author": "Julian Gruber", "description": "Brace expansion as known from sh/bash", "hashes": [ @@ -19196,7 +19156,7 @@ "type": "library", "name": "minimatch", "version": "3.1.2", - "bom-ref": "glob@7.2.3|minimatch@3.1.2", + "bom-ref": "glob@7.1.7|minimatch@3.1.2", "author": "Isaac Z. Schlueter (http://blog.izs.me)", "description": "a glob matcher in javascript", "hashes": [ @@ -20595,46 +20555,6 @@ } ] }, - { - "type": "library", - "name": "glob", - "version": "7.1.7", - "bom-ref": "grunt@1.5.3|glob@7.1.7", - "author": "Isaac Z. Schlueter (http://blog.izs.me/)", - "description": "a little globber", - "hashes": [ - { - "alg": "SHA-512", - "content": "3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d" - } - ], - "licenses": [ - { - "license": { - "id": "ISC" - } - } - ], - "purl": "pkg:npm/glob@7.1.7", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/glob/-/glob-7.1.7.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "git://github.com/isaacs/node-glob.git", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository.url\"" - } - ], - "properties": [ - { - "name": "cdx:npm:package:path", - "value": "node_modules/grunt/node_modules/glob" - } - ] - }, { "type": "library", "name": "minimatch", @@ -26876,45 +26796,6 @@ } ] }, - { - "type": "library", - "name": "nan", - "version": "2.15.0", - "bom-ref": "libxmljs2@0.30.1|nan@2.15.0", - "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility", - "hashes": [ - { - "alg": "SHA-512", - "content": "f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665" - } - ], - "licenses": [ - { - "license": { - "id": "MIT" - } - } - ], - "purl": "pkg:npm/nan@2.15.0", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/nan/-/nan-2.15.0.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "git://github.com/nodejs/nan.git", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository.url\"" - } - ], - "properties": [ - { - "name": "cdx:npm:package:path", - "value": "node_modules/libxmljs2/node_modules/nan" - } - ] - }, { "type": "library", "name": "liftup", @@ -27832,14 +27713,14 @@ { "type": "library", "name": "lowercase-keys", - "version": "1.0.1", - "bom-ref": "lowercase-keys@1.0.1", + "version": "1.0.0", + "bom-ref": "lowercase-keys@1.0.0", "author": "Sindre Sorhus", "description": "Lowercase the keys of an object", "hashes": [ { "alg": "SHA-512", - "content": "1b62e3eb5b570e754514e8bc55976cf92a108ed402ddd82890a7431b69939b5b71e26e743541c1399481c10407cb2d15d760342531b889c7d9407fb13f287c54" + "content": "44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0" } ], "licenses": [ @@ -27849,10 +27730,10 @@ } } ], - "purl": "pkg:npm/lowercase-keys@1.0.1", + "purl": "pkg:npm/lowercase-keys@1.0.0", "externalReferences": [ { - "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.1.tgz", + "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -29971,13 +29852,13 @@ { "type": "library", "name": "nan", - "version": "2.17.0", - "bom-ref": "nan@2.17.0", - "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility", + "version": "2.15.0", + "bom-ref": "nan@2.15.0", + "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility", "hashes": [ { "alg": "SHA-512", - "content": "d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069" + "content": "f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665" } ], "licenses": [ @@ -29987,10 +29868,10 @@ } } ], - "purl": "pkg:npm/nan@2.17.0", + "purl": "pkg:npm/nan@2.15.0", "externalReferences": [ { - "url": "https://registry.npmjs.org/nan/-/nan-2.17.0.tgz", + "url": "https://registry.npmjs.org/nan/-/nan-2.15.0.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -46690,51 +46571,6 @@ } ] }, - { - "type": "library", - "name": "core-util-is", - "version": "1.0.2", - "bom-ref": "verror@1.10.0|core-util-is@1.0.2", - "author": "Isaac Z. Schlueter (http://blog.izs.me/)", - "description": "The `util.is*` functions introduced in Node v0.12.", - "hashes": [ - { - "alg": "SHA-512", - "content": "de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69" - } - ], - "licenses": [ - { - "license": { - "id": "MIT" - } - } - ], - "purl": "pkg:npm/core-util-is@1.0.2", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "https://github.com/isaacs/core-util-is/issues", - "type": "issue-tracker", - "comment": "as detected from PackageJson property \"bugs.url\"" - }, - { - "url": "git://github.com/isaacs/core-util-is", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository.url\"" - } - ], - "properties": [ - { - "name": "cdx:npm:package:path", - "value": "node_modules/verror/node_modules/core-util-is" - } - ] - }, { "type": "library", "name": "vm2", @@ -49544,7 +49380,7 @@ { "ref": "archiver-utils@1.3.0", "dependsOn": [ - "glob@7.2.3", + "glob@7.1.7", "graceful-fs@4.2.10", "lazystream@1.0.1", "lodash@4.17.21", @@ -49558,7 +49394,7 @@ "archiver-utils@1.3.0", "async@2.6.4", "buffer-crc32@0.2.13", - "glob@7.2.3", + "glob@7.1.7", "lodash@4.17.21", "readable-stream@2.3.7", "tar-stream@1.6.2", @@ -49848,7 +49684,7 @@ "dependsOn": [ "busboy@0.2.14|isarray@0.0.1", "busboy@0.2.14|string_decoder@0.10.31", - "core-util-is@1.0.3", + "core-util-is@1.0.2", "inherits@2.0.4" ] }, @@ -49868,7 +49704,7 @@ "@npmcli/move-file@1.1.2", "chownr@2.0.0", "fs-minipass@2.1.0", - "glob@7.2.3", + "glob@7.1.7", "infer-owner@1.0.4", "lru-cache@6.0.0", "minipass-collect@1.0.2", @@ -49902,10 +49738,10 @@ "ref": "cacheable-request@2.1.4", "dependsOn": [ "cacheable-request@2.1.4|get-stream@3.0.0", - "cacheable-request@2.1.4|lowercase-keys@1.0.0", "clone-response@1.0.2", "http-cache-semantics@3.8.1", "keyv@3.0.0", + "lowercase-keys@1.0.0", "normalize-url@2.0.1", "responselike@1.0.2" ] @@ -49913,9 +49749,6 @@ { "ref": "cacheable-request@2.1.4|get-stream@3.0.0" }, - { - "ref": "cacheable-request@2.1.4|lowercase-keys@1.0.0" - }, { "ref": "call-bind@1.0.2", "dependsOn": [ @@ -50275,7 +50108,7 @@ "ref": "copy-descriptor@0.1.1" }, { - "ref": "core-util-is@1.0.3" + "ref": "core-util-is@1.0.2" }, { "ref": "cors@2.8.5", @@ -50489,7 +50322,7 @@ { "ref": "dicer@0.2.5|readable-stream@1.1.14", "dependsOn": [ - "core-util-is@1.0.3", + "core-util-is@1.0.2", "dicer@0.2.5|isarray@0.0.1", "dicer@0.2.5|string_decoder@0.10.31", "inherits@2.0.4" @@ -51179,7 +51012,7 @@ { "ref": "fstream@1.0.12|rimraf@2.7.1", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -51258,10 +51091,10 @@ ] }, { - "ref": "glob@7.2.3", + "ref": "glob@7.1.7", "dependsOn": [ "fs.realpath@1.0.0", - "glob@7.2.3|minimatch@3.1.2", + "glob@7.1.7|minimatch@3.1.2", "inflight@1.0.6", "inherits@2.0.4", "once@1.4.0", @@ -51269,16 +51102,16 @@ ] }, { - "ref": "glob@7.2.3|brace-expansion@1.1.11", + "ref": "glob@7.1.7|brace-expansion@1.1.11", "dependsOn": [ "balanced-match@1.0.2", "concat-map@0.0.1" ] }, { - "ref": "glob@7.2.3|minimatch@3.1.2", + "ref": "glob@7.1.7|minimatch@3.1.2", "dependsOn": [ - "glob@7.2.3|brace-expansion@1.1.11" + "glob@7.1.7|brace-expansion@1.1.11" ] }, { @@ -51323,7 +51156,7 @@ "into-stream@3.1.0", "is-retry-allowed@1.2.0", "isurl@1.0.0", - "lowercase-keys@1.0.1", + "lowercase-keys@1.0.0", "mimic-response@1.0.1", "p-cancelable@0.4.1", "p-timeout@2.0.1", @@ -51466,12 +51299,12 @@ "dateformat@3.0.3", "eventemitter2@0.4.14", "exit@0.1.2", + "glob@7.1.7", "grunt-cli@1.4.3", "grunt-known-options@2.0.0", "grunt-legacy-log@3.0.0", "grunt-legacy-util@2.0.1", "grunt@1.5.3|findup-sync@0.3.0", - "grunt@1.5.3|glob@7.1.7", "grunt@1.5.3|minimatch@3.0.8", "iconv-lite@0.4.24", "js-yaml@3.14.1", @@ -51503,17 +51336,6 @@ "path-is-absolute@1.0.1" ] }, - { - "ref": "grunt@1.5.3|glob@7.1.7", - "dependsOn": [ - "fs.realpath@1.0.0", - "grunt@1.5.3|minimatch@3.0.8", - "inflight@1.0.6", - "inherits@2.0.4", - "once@1.4.0", - "path-is-absolute@1.0.1" - ] - }, { "ref": "grunt@1.5.3|minimatch@3.0.8", "dependsOn": [ @@ -51661,7 +51483,7 @@ { "ref": "htmlparser2@3.3.0|readable-stream@1.0.34", "dependsOn": [ - "core-util-is@1.0.3", + "core-util-is@1.0.2", "htmlparser2@3.3.0|isarray@0.0.1", "htmlparser2@3.3.0|string_decoder@0.10.31", "inherits@2.0.4" @@ -51773,7 +51595,7 @@ "ref": "iltorb@2.4.5", "dependsOn": [ "detect-libc@1.0.3", - "nan@2.17.0", + "nan@2.15.0", "npmlog@4.1.2", "prebuild-install@5.3.6", "which-pm-runs@1.1.0" @@ -52171,7 +51993,7 @@ "finale-rest@1.2.0", "fs-extra@9.1.0", "fuzzball@1.4.0", - "glob@7.2.3", + "glob@7.1.7", "graceful-fs@4.2.10", "grunt-contrib-compress@1.6.0", "grunt-replace-json@0.1.0", @@ -52283,12 +52105,9 @@ "dependsOn": [ "@mapbox/node-pre-gyp@1.0.10", "bindings@1.5.0", - "libxmljs2@0.30.1|nan@2.15.0" + "nan@2.15.0" ] }, - { - "ref": "libxmljs2@0.30.1|nan@2.15.0" - }, { "ref": "liftup@3.0.1", "dependsOn": [ @@ -52400,7 +52219,7 @@ ] }, { - "ref": "lowercase-keys@1.0.1" + "ref": "lowercase-keys@1.0.0" }, { "ref": "lru-cache@6.0.0", @@ -52681,7 +52500,7 @@ "ref": "mustache@4.2.0" }, { - "ref": "nan@2.17.0" + "ref": "nan@2.15.0" }, { "ref": "nanomatch@1.2.13", @@ -52748,7 +52567,7 @@ "ref": "node-gyp@8.4.1", "dependsOn": [ "env-paths@2.2.1", - "glob@7.2.3", + "glob@7.1.7", "graceful-fs@4.2.10", "make-fetch-happen@9.1.0", "node-gyp@8.4.1|nopt@5.0.0", @@ -52875,7 +52694,7 @@ { "ref": "node-pre-gyp@0.15.0|rimraf@2.7.1", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -53503,7 +53322,7 @@ { "ref": "readable-stream@2.3.7", "dependsOn": [ - "core-util-is@1.0.3", + "core-util-is@1.0.2", "inherits@2.0.4", "process-nextick-args@2.0.1", "readable-stream@2.3.7|isarray@1.0.0", @@ -53737,7 +53556,7 @@ { "ref": "responselike@1.0.2", "dependsOn": [ - "lowercase-keys@1.0.1" + "lowercase-keys@1.0.0" ] }, { @@ -53755,7 +53574,7 @@ { "ref": "rimraf@3.0.2", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -54580,7 +54399,7 @@ { "ref": "ts-node-dev@1.1.8|rimraf@2.7.1", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -54832,13 +54651,10 @@ "ref": "verror@1.10.0", "dependsOn": [ "assert-plus@1.0.0", - "extsprintf@1.3.0", - "verror@1.10.0|core-util-is@1.0.2" + "core-util-is@1.0.2", + "extsprintf@1.3.0" ] }, - { - "ref": "verror@1.10.0|core-util-is@1.0.2" - }, { "ref": "vm2@3.9.11", "dependsOn": [ diff --git a/demo/juice-shop/example-results/flat/bom.1.3.xml b/demo/juice-shop/example-results/flat/bom.1.3.xml index 53be8bf0e..8ce43f658 100644 --- a/demo/juice-shop/example-results/flat/bom.1.3.xml +++ b/demo/juice-shop/example-results/flat/bom.1.3.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 @@ -5946,34 +5946,6 @@ node_modules/cacheable-request/node_modules/get-stream - - Sindre Sorhus - lowercase-keys - 1.0.0 - Lowercase the keys of an object - - 44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0 - - - - MIT - - - pkg:npm/lowercase-keys@1.0.0 - - - https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz - as detected from npm-ls property "resolved" - - - sindresorhus/lowercase-keys - as detected from PackageJson property "repository" - - - - node_modules/cacheable-request/node_modules/lowercase-keys - - Jordan Harband <ljharb@gmail.com> call-bind @@ -8055,23 +8027,23 @@ node_modules/copy-descriptor - + Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) core-util-is - 1.0.3 + 1.0.2 The `util.is*` functions introduced in Node v0.12. - 65006f8b50dca49e060ea6a78ee719d878f7c043b9a590d2f3d0566e472bbddc64b09a2bc140c365a997f65745929f5ac369660432e090e6c40380d6349f4561 + de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69 MIT - pkg:npm/core-util-is@1.0.3 + pkg:npm/core-util-is@1.0.2 - https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz + https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz as detected from npm-ls property "resolved" @@ -13554,23 +13526,23 @@ node_modules/glob-parent/node_modules/is-glob - + Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) glob - 7.2.3 + 7.1.7 a little globber - 9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5 + 3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d ISC - pkg:npm/glob@7.2.3 + pkg:npm/glob@7.1.7 - https://registry.npmjs.org/glob/-/glob-7.2.3.tgz + https://registry.npmjs.org/glob/-/glob-7.1.7.tgz as detected from npm-ls property "resolved" @@ -13582,7 +13554,7 @@ node_modules/glob - + Julian Gruber brace-expansion 1.1.11 @@ -13614,7 +13586,7 @@ node_modules/glob/node_modules/brace-expansion - + Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me) minimatch 3.1.2 @@ -14604,34 +14576,6 @@ node_modules/grunt/node_modules/findup-sync/node_modules/glob - - Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) - glob - 7.1.7 - a little globber - - 3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d - - - - ISC - - - pkg:npm/glob@7.1.7 - - - https://registry.npmjs.org/glob/-/glob-7.1.7.tgz - as detected from npm-ls property "resolved" - - - git://github.com/isaacs/node-glob.git - as detected from PackageJson property "repository.url" - - - - node_modules/grunt/node_modules/glob - - Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me) minimatch @@ -19070,33 +19014,6 @@ node_modules/libxmljs2 - - nan - 2.15.0 - Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility - - f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665 - - - - MIT - - - pkg:npm/nan@2.15.0 - - - https://registry.npmjs.org/nan/-/nan-2.15.0.tgz - as detected from npm-ls property "resolved" - - - git://github.com/nodejs/nan.git - as detected from PackageJson property "repository.url" - - - - node_modules/libxmljs2/node_modules/nan - - Grunt Development Team (https://gruntjs.com/development-team) liftup @@ -19744,23 +19661,23 @@ node_modules/loose-envify - + Sindre Sorhus lowercase-keys - 1.0.1 + 1.0.0 Lowercase the keys of an object - 1b62e3eb5b570e754514e8bc55976cf92a108ed402ddd82890a7431b69939b5b71e26e743541c1399481c10407cb2d15d760342531b889c7d9407fb13f287c54 + 44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0 MIT - pkg:npm/lowercase-keys@1.0.1 + pkg:npm/lowercase-keys@1.0.0 - https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.1.tgz + https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz as detected from npm-ls property "resolved" @@ -21249,22 +21166,22 @@ node_modules/mustache - + nan - 2.17.0 - Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility + 2.15.0 + Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility - d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069 + f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665 MIT - pkg:npm/nan@2.17.0 + pkg:npm/nan@2.15.0 - https://registry.npmjs.org/nan/-/nan-2.17.0.tgz + https://registry.npmjs.org/nan/-/nan-2.15.0.tgz as detected from npm-ls property "resolved" @@ -33074,38 +32991,6 @@ node_modules/verror - - Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) - core-util-is - 1.0.2 - The `util.is*` functions introduced in Node v0.12. - - de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69 - - - - MIT - - - pkg:npm/core-util-is@1.0.2 - - - https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz - as detected from npm-ls property "resolved" - - - https://github.com/isaacs/core-util-is/issues - as detected from PackageJson property "bugs.url" - - - git://github.com/isaacs/core-util-is - as detected from PackageJson property "repository.url" - - - - node_modules/verror/node_modules/core-util-is - - Patrik Simek vm2 @@ -34972,7 +34857,7 @@ - + @@ -34983,7 +34868,7 @@ - + @@ -35131,7 +35016,7 @@ - + @@ -35142,7 +35027,7 @@ - + @@ -35170,15 +35055,14 @@ - + - @@ -35368,7 +35252,7 @@ - + @@ -35482,7 +35366,7 @@ - + @@ -35867,7 +35751,7 @@ - + @@ -35909,20 +35793,20 @@ - + - + - + - - + + @@ -35952,7 +35836,7 @@ - + @@ -36036,12 +35920,12 @@ + - @@ -36063,14 +35947,6 @@ - - - - - - - - @@ -36142,7 +36018,7 @@ - + @@ -36205,7 +36081,7 @@ - + @@ -36408,7 +36284,7 @@ - + @@ -36492,9 +36368,8 @@ - + - @@ -36554,7 +36429,7 @@ - + @@ -36709,7 +36584,7 @@ - + @@ -36746,7 +36621,7 @@ - + @@ -36825,7 +36700,7 @@ - + @@ -37163,7 +37038,7 @@ - + @@ -37301,14 +37176,14 @@ - + - + @@ -37757,7 +37632,7 @@ - + @@ -37890,10 +37765,9 @@ + - - diff --git a/demo/juice-shop/example-results/flat/bom.1.4.json b/demo/juice-shop/example-results/flat/bom.1.4.json index 30577d2ed..bc2b4f598 100644 --- a/demo/juice-shop/example-results/flat/bom.1.4.json +++ b/demo/juice-shop/example-results/flat/bom.1.4.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0", + "version": "1.6.1", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", @@ -8378,46 +8378,6 @@ } ] }, - { - "type": "library", - "name": "lowercase-keys", - "version": "1.0.0", - "bom-ref": "cacheable-request@2.1.4|lowercase-keys@1.0.0", - "author": "Sindre Sorhus", - "description": "Lowercase the keys of an object", - "hashes": [ - { - "alg": "SHA-512", - "content": "44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0" - } - ], - "licenses": [ - { - "license": { - "id": "MIT" - } - } - ], - "purl": "pkg:npm/lowercase-keys@1.0.0", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "sindresorhus/lowercase-keys", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository\"" - } - ], - "properties": [ - { - "name": "cdx:npm:package:path", - "value": "node_modules/cacheable-request/node_modules/lowercase-keys" - } - ] - }, { "type": "library", "name": "call-bind", @@ -11359,14 +11319,14 @@ { "type": "library", "name": "core-util-is", - "version": "1.0.3", - "bom-ref": "core-util-is@1.0.3", + "version": "1.0.2", + "bom-ref": "core-util-is@1.0.2", "author": "Isaac Z. Schlueter (http://blog.izs.me/)", "description": "The `util.is*` functions introduced in Node v0.12.", "hashes": [ { "alg": "SHA-512", - "content": "65006f8b50dca49e060ea6a78ee719d878f7c043b9a590d2f3d0566e472bbddc64b09a2bc140c365a997f65745929f5ac369660432e090e6c40380d6349f4561" + "content": "de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69" } ], "licenses": [ @@ -11376,10 +11336,10 @@ } } ], - "purl": "pkg:npm/core-util-is@1.0.3", + "purl": "pkg:npm/core-util-is@1.0.2", "externalReferences": [ { - "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz", + "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -19127,14 +19087,14 @@ { "type": "library", "name": "glob", - "version": "7.2.3", - "bom-ref": "glob@7.2.3", + "version": "7.1.7", + "bom-ref": "glob@7.1.7", "author": "Isaac Z. Schlueter (http://blog.izs.me/)", "description": "a little globber", "hashes": [ { "alg": "SHA-512", - "content": "9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5" + "content": "3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d" } ], "licenses": [ @@ -19144,10 +19104,10 @@ } } ], - "purl": "pkg:npm/glob@7.2.3", + "purl": "pkg:npm/glob@7.1.7", "externalReferences": [ { - "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "url": "https://registry.npmjs.org/glob/-/glob-7.1.7.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -19168,7 +19128,7 @@ "type": "library", "name": "brace-expansion", "version": "1.1.11", - "bom-ref": "glob@7.2.3|brace-expansion@1.1.11", + "bom-ref": "glob@7.1.7|brace-expansion@1.1.11", "author": "Julian Gruber", "description": "Brace expansion as known from sh/bash", "hashes": [ @@ -19213,7 +19173,7 @@ "type": "library", "name": "minimatch", "version": "3.1.2", - "bom-ref": "glob@7.2.3|minimatch@3.1.2", + "bom-ref": "glob@7.1.7|minimatch@3.1.2", "author": "Isaac Z. Schlueter (http://blog.izs.me)", "description": "a glob matcher in javascript", "hashes": [ @@ -20612,46 +20572,6 @@ } ] }, - { - "type": "library", - "name": "glob", - "version": "7.1.7", - "bom-ref": "grunt@1.5.3|glob@7.1.7", - "author": "Isaac Z. Schlueter (http://blog.izs.me/)", - "description": "a little globber", - "hashes": [ - { - "alg": "SHA-512", - "content": "3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d" - } - ], - "licenses": [ - { - "license": { - "id": "ISC" - } - } - ], - "purl": "pkg:npm/glob@7.1.7", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/glob/-/glob-7.1.7.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "git://github.com/isaacs/node-glob.git", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository.url\"" - } - ], - "properties": [ - { - "name": "cdx:npm:package:path", - "value": "node_modules/grunt/node_modules/glob" - } - ] - }, { "type": "library", "name": "minimatch", @@ -26893,45 +26813,6 @@ } ] }, - { - "type": "library", - "name": "nan", - "version": "2.15.0", - "bom-ref": "libxmljs2@0.30.1|nan@2.15.0", - "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility", - "hashes": [ - { - "alg": "SHA-512", - "content": "f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665" - } - ], - "licenses": [ - { - "license": { - "id": "MIT" - } - } - ], - "purl": "pkg:npm/nan@2.15.0", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/nan/-/nan-2.15.0.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "git://github.com/nodejs/nan.git", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository.url\"" - } - ], - "properties": [ - { - "name": "cdx:npm:package:path", - "value": "node_modules/libxmljs2/node_modules/nan" - } - ] - }, { "type": "library", "name": "liftup", @@ -27849,14 +27730,14 @@ { "type": "library", "name": "lowercase-keys", - "version": "1.0.1", - "bom-ref": "lowercase-keys@1.0.1", + "version": "1.0.0", + "bom-ref": "lowercase-keys@1.0.0", "author": "Sindre Sorhus", "description": "Lowercase the keys of an object", "hashes": [ { "alg": "SHA-512", - "content": "1b62e3eb5b570e754514e8bc55976cf92a108ed402ddd82890a7431b69939b5b71e26e743541c1399481c10407cb2d15d760342531b889c7d9407fb13f287c54" + "content": "44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0" } ], "licenses": [ @@ -27866,10 +27747,10 @@ } } ], - "purl": "pkg:npm/lowercase-keys@1.0.1", + "purl": "pkg:npm/lowercase-keys@1.0.0", "externalReferences": [ { - "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.1.tgz", + "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -29988,13 +29869,13 @@ { "type": "library", "name": "nan", - "version": "2.17.0", - "bom-ref": "nan@2.17.0", - "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility", + "version": "2.15.0", + "bom-ref": "nan@2.15.0", + "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility", "hashes": [ { "alg": "SHA-512", - "content": "d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069" + "content": "f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665" } ], "licenses": [ @@ -30004,10 +29885,10 @@ } } ], - "purl": "pkg:npm/nan@2.17.0", + "purl": "pkg:npm/nan@2.15.0", "externalReferences": [ { - "url": "https://registry.npmjs.org/nan/-/nan-2.17.0.tgz", + "url": "https://registry.npmjs.org/nan/-/nan-2.15.0.tgz", "type": "distribution", "comment": "as detected from npm-ls property \"resolved\"" }, @@ -46707,51 +46588,6 @@ } ] }, - { - "type": "library", - "name": "core-util-is", - "version": "1.0.2", - "bom-ref": "verror@1.10.0|core-util-is@1.0.2", - "author": "Isaac Z. Schlueter (http://blog.izs.me/)", - "description": "The `util.is*` functions introduced in Node v0.12.", - "hashes": [ - { - "alg": "SHA-512", - "content": "de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69" - } - ], - "licenses": [ - { - "license": { - "id": "MIT" - } - } - ], - "purl": "pkg:npm/core-util-is@1.0.2", - "externalReferences": [ - { - "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz", - "type": "distribution", - "comment": "as detected from npm-ls property \"resolved\"" - }, - { - "url": "https://github.com/isaacs/core-util-is/issues", - "type": "issue-tracker", - "comment": "as detected from PackageJson property \"bugs.url\"" - }, - { - "url": "git://github.com/isaacs/core-util-is", - "type": "vcs", - "comment": "as detected from PackageJson property \"repository.url\"" - } - ], - "properties": [ - { - "name": "cdx:npm:package:path", - "value": "node_modules/verror/node_modules/core-util-is" - } - ] - }, { "type": "library", "name": "vm2", @@ -49561,7 +49397,7 @@ { "ref": "archiver-utils@1.3.0", "dependsOn": [ - "glob@7.2.3", + "glob@7.1.7", "graceful-fs@4.2.10", "lazystream@1.0.1", "lodash@4.17.21", @@ -49575,7 +49411,7 @@ "archiver-utils@1.3.0", "async@2.6.4", "buffer-crc32@0.2.13", - "glob@7.2.3", + "glob@7.1.7", "lodash@4.17.21", "readable-stream@2.3.7", "tar-stream@1.6.2", @@ -49865,7 +49701,7 @@ "dependsOn": [ "busboy@0.2.14|isarray@0.0.1", "busboy@0.2.14|string_decoder@0.10.31", - "core-util-is@1.0.3", + "core-util-is@1.0.2", "inherits@2.0.4" ] }, @@ -49885,7 +49721,7 @@ "@npmcli/move-file@1.1.2", "chownr@2.0.0", "fs-minipass@2.1.0", - "glob@7.2.3", + "glob@7.1.7", "infer-owner@1.0.4", "lru-cache@6.0.0", "minipass-collect@1.0.2", @@ -49919,10 +49755,10 @@ "ref": "cacheable-request@2.1.4", "dependsOn": [ "cacheable-request@2.1.4|get-stream@3.0.0", - "cacheable-request@2.1.4|lowercase-keys@1.0.0", "clone-response@1.0.2", "http-cache-semantics@3.8.1", "keyv@3.0.0", + "lowercase-keys@1.0.0", "normalize-url@2.0.1", "responselike@1.0.2" ] @@ -49930,9 +49766,6 @@ { "ref": "cacheable-request@2.1.4|get-stream@3.0.0" }, - { - "ref": "cacheable-request@2.1.4|lowercase-keys@1.0.0" - }, { "ref": "call-bind@1.0.2", "dependsOn": [ @@ -50292,7 +50125,7 @@ "ref": "copy-descriptor@0.1.1" }, { - "ref": "core-util-is@1.0.3" + "ref": "core-util-is@1.0.2" }, { "ref": "cors@2.8.5", @@ -50506,7 +50339,7 @@ { "ref": "dicer@0.2.5|readable-stream@1.1.14", "dependsOn": [ - "core-util-is@1.0.3", + "core-util-is@1.0.2", "dicer@0.2.5|isarray@0.0.1", "dicer@0.2.5|string_decoder@0.10.31", "inherits@2.0.4" @@ -51196,7 +51029,7 @@ { "ref": "fstream@1.0.12|rimraf@2.7.1", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -51275,10 +51108,10 @@ ] }, { - "ref": "glob@7.2.3", + "ref": "glob@7.1.7", "dependsOn": [ "fs.realpath@1.0.0", - "glob@7.2.3|minimatch@3.1.2", + "glob@7.1.7|minimatch@3.1.2", "inflight@1.0.6", "inherits@2.0.4", "once@1.4.0", @@ -51286,16 +51119,16 @@ ] }, { - "ref": "glob@7.2.3|brace-expansion@1.1.11", + "ref": "glob@7.1.7|brace-expansion@1.1.11", "dependsOn": [ "balanced-match@1.0.2", "concat-map@0.0.1" ] }, { - "ref": "glob@7.2.3|minimatch@3.1.2", + "ref": "glob@7.1.7|minimatch@3.1.2", "dependsOn": [ - "glob@7.2.3|brace-expansion@1.1.11" + "glob@7.1.7|brace-expansion@1.1.11" ] }, { @@ -51340,7 +51173,7 @@ "into-stream@3.1.0", "is-retry-allowed@1.2.0", "isurl@1.0.0", - "lowercase-keys@1.0.1", + "lowercase-keys@1.0.0", "mimic-response@1.0.1", "p-cancelable@0.4.1", "p-timeout@2.0.1", @@ -51483,12 +51316,12 @@ "dateformat@3.0.3", "eventemitter2@0.4.14", "exit@0.1.2", + "glob@7.1.7", "grunt-cli@1.4.3", "grunt-known-options@2.0.0", "grunt-legacy-log@3.0.0", "grunt-legacy-util@2.0.1", "grunt@1.5.3|findup-sync@0.3.0", - "grunt@1.5.3|glob@7.1.7", "grunt@1.5.3|minimatch@3.0.8", "iconv-lite@0.4.24", "js-yaml@3.14.1", @@ -51520,17 +51353,6 @@ "path-is-absolute@1.0.1" ] }, - { - "ref": "grunt@1.5.3|glob@7.1.7", - "dependsOn": [ - "fs.realpath@1.0.0", - "grunt@1.5.3|minimatch@3.0.8", - "inflight@1.0.6", - "inherits@2.0.4", - "once@1.4.0", - "path-is-absolute@1.0.1" - ] - }, { "ref": "grunt@1.5.3|minimatch@3.0.8", "dependsOn": [ @@ -51678,7 +51500,7 @@ { "ref": "htmlparser2@3.3.0|readable-stream@1.0.34", "dependsOn": [ - "core-util-is@1.0.3", + "core-util-is@1.0.2", "htmlparser2@3.3.0|isarray@0.0.1", "htmlparser2@3.3.0|string_decoder@0.10.31", "inherits@2.0.4" @@ -51790,7 +51612,7 @@ "ref": "iltorb@2.4.5", "dependsOn": [ "detect-libc@1.0.3", - "nan@2.17.0", + "nan@2.15.0", "npmlog@4.1.2", "prebuild-install@5.3.6", "which-pm-runs@1.1.0" @@ -52188,7 +52010,7 @@ "finale-rest@1.2.0", "fs-extra@9.1.0", "fuzzball@1.4.0", - "glob@7.2.3", + "glob@7.1.7", "graceful-fs@4.2.10", "grunt-contrib-compress@1.6.0", "grunt-replace-json@0.1.0", @@ -52300,12 +52122,9 @@ "dependsOn": [ "@mapbox/node-pre-gyp@1.0.10", "bindings@1.5.0", - "libxmljs2@0.30.1|nan@2.15.0" + "nan@2.15.0" ] }, - { - "ref": "libxmljs2@0.30.1|nan@2.15.0" - }, { "ref": "liftup@3.0.1", "dependsOn": [ @@ -52417,7 +52236,7 @@ ] }, { - "ref": "lowercase-keys@1.0.1" + "ref": "lowercase-keys@1.0.0" }, { "ref": "lru-cache@6.0.0", @@ -52698,7 +52517,7 @@ "ref": "mustache@4.2.0" }, { - "ref": "nan@2.17.0" + "ref": "nan@2.15.0" }, { "ref": "nanomatch@1.2.13", @@ -52765,7 +52584,7 @@ "ref": "node-gyp@8.4.1", "dependsOn": [ "env-paths@2.2.1", - "glob@7.2.3", + "glob@7.1.7", "graceful-fs@4.2.10", "make-fetch-happen@9.1.0", "node-gyp@8.4.1|nopt@5.0.0", @@ -52892,7 +52711,7 @@ { "ref": "node-pre-gyp@0.15.0|rimraf@2.7.1", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -53520,7 +53339,7 @@ { "ref": "readable-stream@2.3.7", "dependsOn": [ - "core-util-is@1.0.3", + "core-util-is@1.0.2", "inherits@2.0.4", "process-nextick-args@2.0.1", "readable-stream@2.3.7|isarray@1.0.0", @@ -53754,7 +53573,7 @@ { "ref": "responselike@1.0.2", "dependsOn": [ - "lowercase-keys@1.0.1" + "lowercase-keys@1.0.0" ] }, { @@ -53772,7 +53591,7 @@ { "ref": "rimraf@3.0.2", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -54597,7 +54416,7 @@ { "ref": "ts-node-dev@1.1.8|rimraf@2.7.1", "dependsOn": [ - "glob@7.2.3" + "glob@7.1.7" ] }, { @@ -54849,13 +54668,10 @@ "ref": "verror@1.10.0", "dependsOn": [ "assert-plus@1.0.0", - "extsprintf@1.3.0", - "verror@1.10.0|core-util-is@1.0.2" + "core-util-is@1.0.2", + "extsprintf@1.3.0" ] }, - { - "ref": "verror@1.10.0|core-util-is@1.0.2" - }, { "ref": "vm2@3.9.11", "dependsOn": [ diff --git a/demo/juice-shop/example-results/flat/bom.1.4.xml b/demo/juice-shop/example-results/flat/bom.1.4.xml index 1836404b3..aeb5c0460 100644 --- a/demo/juice-shop/example-results/flat/bom.1.4.xml +++ b/demo/juice-shop/example-results/flat/bom.1.4.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 https://github.com/CycloneDX/cyclonedx-node-npm/issues @@ -5960,34 +5960,6 @@ node_modules/cacheable-request/node_modules/get-stream - - Sindre Sorhus - lowercase-keys - 1.0.0 - Lowercase the keys of an object - - 44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0 - - - - MIT - - - pkg:npm/lowercase-keys@1.0.0 - - - https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz - as detected from npm-ls property "resolved" - - - sindresorhus/lowercase-keys - as detected from PackageJson property "repository" - - - - node_modules/cacheable-request/node_modules/lowercase-keys - - Jordan Harband <ljharb@gmail.com> call-bind @@ -8069,23 +8041,23 @@ node_modules/copy-descriptor - + Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) core-util-is - 1.0.3 + 1.0.2 The `util.is*` functions introduced in Node v0.12. - 65006f8b50dca49e060ea6a78ee719d878f7c043b9a590d2f3d0566e472bbddc64b09a2bc140c365a997f65745929f5ac369660432e090e6c40380d6349f4561 + de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69 MIT - pkg:npm/core-util-is@1.0.3 + pkg:npm/core-util-is@1.0.2 - https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz + https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz as detected from npm-ls property "resolved" @@ -13568,23 +13540,23 @@ node_modules/glob-parent/node_modules/is-glob - + Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) glob - 7.2.3 + 7.1.7 a little globber - 9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5 + 3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d ISC - pkg:npm/glob@7.2.3 + pkg:npm/glob@7.1.7 - https://registry.npmjs.org/glob/-/glob-7.2.3.tgz + https://registry.npmjs.org/glob/-/glob-7.1.7.tgz as detected from npm-ls property "resolved" @@ -13596,7 +13568,7 @@ node_modules/glob - + Julian Gruber brace-expansion 1.1.11 @@ -13628,7 +13600,7 @@ node_modules/glob/node_modules/brace-expansion - + Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me) minimatch 3.1.2 @@ -14618,34 +14590,6 @@ node_modules/grunt/node_modules/findup-sync/node_modules/glob - - Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) - glob - 7.1.7 - a little globber - - 3af0fd10dccf2db7a010d9d83f95147c9222ad3838f97c0c5866907d04d8d097a7c4dbef20a3f7537fed01048f22efe51f15d84999a95e55077aa00874acc12d - - - - ISC - - - pkg:npm/glob@7.1.7 - - - https://registry.npmjs.org/glob/-/glob-7.1.7.tgz - as detected from npm-ls property "resolved" - - - git://github.com/isaacs/node-glob.git - as detected from PackageJson property "repository.url" - - - - node_modules/grunt/node_modules/glob - - Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me) minimatch @@ -19084,33 +19028,6 @@ node_modules/libxmljs2 - - nan - 2.15.0 - Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility - - f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665 - - - - MIT - - - pkg:npm/nan@2.15.0 - - - https://registry.npmjs.org/nan/-/nan-2.15.0.tgz - as detected from npm-ls property "resolved" - - - git://github.com/nodejs/nan.git - as detected from PackageJson property "repository.url" - - - - node_modules/libxmljs2/node_modules/nan - - Grunt Development Team (https://gruntjs.com/development-team) liftup @@ -19758,23 +19675,23 @@ node_modules/loose-envify - + Sindre Sorhus lowercase-keys - 1.0.1 + 1.0.0 Lowercase the keys of an object - 1b62e3eb5b570e754514e8bc55976cf92a108ed402ddd82890a7431b69939b5b71e26e743541c1399481c10407cb2d15d760342531b889c7d9407fb13f287c54 + 44f957d3e3c7bafc550d9ef15fe101540a7846c5713ff4dd0d237698961d8aad4b7381f3ec45128d423b459aca2a59ab2335617fa268dacb63efefa055aad2d0 MIT - pkg:npm/lowercase-keys@1.0.1 + pkg:npm/lowercase-keys@1.0.0 - https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.1.tgz + https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz as detected from npm-ls property "resolved" @@ -21263,22 +21180,22 @@ node_modules/mustache - + nan - 2.17.0 - Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility + 2.15.0 + Native Abstractions for Node.js: C++ header for Node 0.8 -> 14 compatibility - d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069 + f19b6f12703673969809961dd5cbe076753a72ac22c51a1883bd313cb594c2ce4e4536bf967c3ebb86a68b1452fc0739539990560a7da679525276cd58569665 MIT - pkg:npm/nan@2.17.0 + pkg:npm/nan@2.15.0 - https://registry.npmjs.org/nan/-/nan-2.17.0.tgz + https://registry.npmjs.org/nan/-/nan-2.15.0.tgz as detected from npm-ls property "resolved" @@ -33088,38 +33005,6 @@ node_modules/verror - - Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/) - core-util-is - 1.0.2 - The `util.is*` functions introduced in Node v0.12. - - de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69 - - - - MIT - - - pkg:npm/core-util-is@1.0.2 - - - https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz - as detected from npm-ls property "resolved" - - - https://github.com/isaacs/core-util-is/issues - as detected from PackageJson property "bugs.url" - - - git://github.com/isaacs/core-util-is - as detected from PackageJson property "repository.url" - - - - node_modules/verror/node_modules/core-util-is - - Patrik Simek vm2 @@ -34986,7 +34871,7 @@ - + @@ -34997,7 +34882,7 @@ - + @@ -35145,7 +35030,7 @@ - + @@ -35156,7 +35041,7 @@ - + @@ -35184,15 +35069,14 @@ - + - @@ -35382,7 +35266,7 @@ - + @@ -35496,7 +35380,7 @@ - + @@ -35881,7 +35765,7 @@ - + @@ -35923,20 +35807,20 @@ - + - + - + - - + + @@ -35966,7 +35850,7 @@ - + @@ -36050,12 +35934,12 @@ + - @@ -36077,14 +35961,6 @@ - - - - - - - - @@ -36156,7 +36032,7 @@ - + @@ -36219,7 +36095,7 @@ - + @@ -36422,7 +36298,7 @@ - + @@ -36506,9 +36382,8 @@ - + - @@ -36568,7 +36443,7 @@ - + @@ -36723,7 +36598,7 @@ - + @@ -36760,7 +36635,7 @@ - + @@ -36839,7 +36714,7 @@ - + @@ -37177,7 +37052,7 @@ - + @@ -37315,14 +37190,14 @@ - + - + @@ -37771,7 +37646,7 @@ - + @@ -37904,10 +37779,9 @@ + - - diff --git a/demo/local-dependencies/example-results/bare/bom.1.2.json b/demo/local-dependencies/example-results/bare/bom.1.2.json index 5db56aa37..861ac45e3 100644 --- a/demo/local-dependencies/example-results/bare/bom.1.2.json +++ b/demo/local-dependencies/example-results/bare/bom.1.2.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0" + "version": "1.6.1" } ], "component": { @@ -52,9 +52,9 @@ }, { "type": "library", - "name": "my-local-b", + "name": "my-local-b-off", "version": "0.0.0", - "bom-ref": "my-local-b@0.0.0", + "bom-ref": "my-local-b-off@0.0.0", "description": "demo: my-local-b-off - a package with a different name than its dir", "licenses": [ { @@ -63,7 +63,7 @@ } } ], - "purl": "pkg:npm/my-local-b@0.0.0" + "purl": "pkg:npm/my-local-b-off@0.0.0" }, { "type": "library", @@ -92,11 +92,11 @@ { "ref": "my-local-a@0.0.0", "dependsOn": [ - "my-local-b@0.0.0" + "my-local-b-off@0.0.0" ] }, { - "ref": "my-local-b@0.0.0" + "ref": "my-local-b-off@0.0.0" }, { "ref": "my-noname@0.0.0" diff --git a/demo/local-dependencies/example-results/bare/bom.1.2.xml b/demo/local-dependencies/example-results/bare/bom.1.2.xml index b19a08c32..a4ae723db 100644 --- a/demo/local-dependencies/example-results/bare/bom.1.2.xml +++ b/demo/local-dependencies/example-results/bare/bom.1.2.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 @@ -38,8 +38,8 @@ - - my-local-b + + my-local-b-off 0.0.0 demo: my-local-b-off - a package with a different name than its dir @@ -47,7 +47,7 @@ Apache-2.0 - pkg:npm/my-local-b@0.0.0 + pkg:npm/my-local-b-off@0.0.0 my-noname @@ -67,9 +67,9 @@ - + - + \ No newline at end of file diff --git a/demo/local-dependencies/example-results/bare/bom.1.3.json b/demo/local-dependencies/example-results/bare/bom.1.3.json index 46c13c2e3..7d747d66a 100644 --- a/demo/local-dependencies/example-results/bare/bom.1.3.json +++ b/demo/local-dependencies/example-results/bare/bom.1.3.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0" + "version": "1.6.1" } ], "component": { @@ -72,9 +72,9 @@ }, { "type": "library", - "name": "my-local-b", + "name": "my-local-b-off", "version": "0.0.0", - "bom-ref": "my-local-b@0.0.0", + "bom-ref": "my-local-b-off@0.0.0", "description": "demo: my-local-b-off - a package with a different name than its dir", "licenses": [ { @@ -83,7 +83,7 @@ } } ], - "purl": "pkg:npm/my-local-b@0.0.0", + "purl": "pkg:npm/my-local-b-off@0.0.0", "properties": [ { "name": "cdx:npm:package:path", @@ -132,11 +132,11 @@ { "ref": "my-local-a@0.0.0", "dependsOn": [ - "my-local-b@0.0.0" + "my-local-b-off@0.0.0" ] }, { - "ref": "my-local-b@0.0.0" + "ref": "my-local-b-off@0.0.0" }, { "ref": "my-noname@0.0.0" diff --git a/demo/local-dependencies/example-results/bare/bom.1.3.xml b/demo/local-dependencies/example-results/bare/bom.1.3.xml index c5dc1c33b..356fb7f36 100644 --- a/demo/local-dependencies/example-results/bare/bom.1.3.xml +++ b/demo/local-dependencies/example-results/bare/bom.1.3.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 @@ -46,8 +46,8 @@ true - - my-local-b + + my-local-b-off 0.0.0 demo: my-local-b-off - a package with a different name than its dir @@ -55,7 +55,7 @@ Apache-2.0 - pkg:npm/my-local-b@0.0.0 + pkg:npm/my-local-b-off@0.0.0 node_modules/my-local-b-off true @@ -83,9 +83,9 @@ - + - + \ No newline at end of file diff --git a/demo/local-dependencies/example-results/bare/bom.1.4.json b/demo/local-dependencies/example-results/bare/bom.1.4.json index aa84b876b..a80e8fbae 100644 --- a/demo/local-dependencies/example-results/bare/bom.1.4.json +++ b/demo/local-dependencies/example-results/bare/bom.1.4.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0", + "version": "1.6.1", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", @@ -89,9 +89,9 @@ }, { "type": "library", - "name": "my-local-b", + "name": "my-local-b-off", "version": "0.0.0", - "bom-ref": "my-local-b@0.0.0", + "bom-ref": "my-local-b-off@0.0.0", "description": "demo: my-local-b-off - a package with a different name than its dir", "licenses": [ { @@ -100,7 +100,7 @@ } } ], - "purl": "pkg:npm/my-local-b@0.0.0", + "purl": "pkg:npm/my-local-b-off@0.0.0", "properties": [ { "name": "cdx:npm:package:path", @@ -149,11 +149,11 @@ { "ref": "my-local-a@0.0.0", "dependsOn": [ - "my-local-b@0.0.0" + "my-local-b-off@0.0.0" ] }, { - "ref": "my-local-b@0.0.0" + "ref": "my-local-b-off@0.0.0" }, { "ref": "my-noname@0.0.0" diff --git a/demo/local-dependencies/example-results/bare/bom.1.4.xml b/demo/local-dependencies/example-results/bare/bom.1.4.xml index 50ca740c7..c9a0d47e9 100644 --- a/demo/local-dependencies/example-results/bare/bom.1.4.xml +++ b/demo/local-dependencies/example-results/bare/bom.1.4.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 https://github.com/CycloneDX/cyclonedx-node-npm/issues @@ -60,8 +60,8 @@ true - - my-local-b + + my-local-b-off 0.0.0 demo: my-local-b-off - a package with a different name than its dir @@ -69,7 +69,7 @@ Apache-2.0 - pkg:npm/my-local-b@0.0.0 + pkg:npm/my-local-b-off@0.0.0 node_modules/my-local-b-off true @@ -97,9 +97,9 @@ - + - + \ No newline at end of file diff --git a/demo/local-dependencies/example-results/flat/bom.1.2.json b/demo/local-dependencies/example-results/flat/bom.1.2.json index 5db56aa37..861ac45e3 100644 --- a/demo/local-dependencies/example-results/flat/bom.1.2.json +++ b/demo/local-dependencies/example-results/flat/bom.1.2.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0" + "version": "1.6.1" } ], "component": { @@ -52,9 +52,9 @@ }, { "type": "library", - "name": "my-local-b", + "name": "my-local-b-off", "version": "0.0.0", - "bom-ref": "my-local-b@0.0.0", + "bom-ref": "my-local-b-off@0.0.0", "description": "demo: my-local-b-off - a package with a different name than its dir", "licenses": [ { @@ -63,7 +63,7 @@ } } ], - "purl": "pkg:npm/my-local-b@0.0.0" + "purl": "pkg:npm/my-local-b-off@0.0.0" }, { "type": "library", @@ -92,11 +92,11 @@ { "ref": "my-local-a@0.0.0", "dependsOn": [ - "my-local-b@0.0.0" + "my-local-b-off@0.0.0" ] }, { - "ref": "my-local-b@0.0.0" + "ref": "my-local-b-off@0.0.0" }, { "ref": "my-noname@0.0.0" diff --git a/demo/local-dependencies/example-results/flat/bom.1.2.xml b/demo/local-dependencies/example-results/flat/bom.1.2.xml index b19a08c32..a4ae723db 100644 --- a/demo/local-dependencies/example-results/flat/bom.1.2.xml +++ b/demo/local-dependencies/example-results/flat/bom.1.2.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 @@ -38,8 +38,8 @@ - - my-local-b + + my-local-b-off 0.0.0 demo: my-local-b-off - a package with a different name than its dir @@ -47,7 +47,7 @@ Apache-2.0 - pkg:npm/my-local-b@0.0.0 + pkg:npm/my-local-b-off@0.0.0 my-noname @@ -67,9 +67,9 @@ - + - + \ No newline at end of file diff --git a/demo/local-dependencies/example-results/flat/bom.1.3.json b/demo/local-dependencies/example-results/flat/bom.1.3.json index 46c13c2e3..7d747d66a 100644 --- a/demo/local-dependencies/example-results/flat/bom.1.3.json +++ b/demo/local-dependencies/example-results/flat/bom.1.3.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0" + "version": "1.6.1" } ], "component": { @@ -72,9 +72,9 @@ }, { "type": "library", - "name": "my-local-b", + "name": "my-local-b-off", "version": "0.0.0", - "bom-ref": "my-local-b@0.0.0", + "bom-ref": "my-local-b-off@0.0.0", "description": "demo: my-local-b-off - a package with a different name than its dir", "licenses": [ { @@ -83,7 +83,7 @@ } } ], - "purl": "pkg:npm/my-local-b@0.0.0", + "purl": "pkg:npm/my-local-b-off@0.0.0", "properties": [ { "name": "cdx:npm:package:path", @@ -132,11 +132,11 @@ { "ref": "my-local-a@0.0.0", "dependsOn": [ - "my-local-b@0.0.0" + "my-local-b-off@0.0.0" ] }, { - "ref": "my-local-b@0.0.0" + "ref": "my-local-b-off@0.0.0" }, { "ref": "my-noname@0.0.0" diff --git a/demo/local-dependencies/example-results/flat/bom.1.3.xml b/demo/local-dependencies/example-results/flat/bom.1.3.xml index c5dc1c33b..356fb7f36 100644 --- a/demo/local-dependencies/example-results/flat/bom.1.3.xml +++ b/demo/local-dependencies/example-results/flat/bom.1.3.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 @@ -46,8 +46,8 @@ true - - my-local-b + + my-local-b-off 0.0.0 demo: my-local-b-off - a package with a different name than its dir @@ -55,7 +55,7 @@ Apache-2.0 - pkg:npm/my-local-b@0.0.0 + pkg:npm/my-local-b-off@0.0.0 node_modules/my-local-b-off true @@ -83,9 +83,9 @@ - + - + \ No newline at end of file diff --git a/demo/local-dependencies/example-results/flat/bom.1.4.json b/demo/local-dependencies/example-results/flat/bom.1.4.json index aa84b876b..a80e8fbae 100644 --- a/demo/local-dependencies/example-results/flat/bom.1.4.json +++ b/demo/local-dependencies/example-results/flat/bom.1.4.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0", + "version": "1.6.1", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", @@ -89,9 +89,9 @@ }, { "type": "library", - "name": "my-local-b", + "name": "my-local-b-off", "version": "0.0.0", - "bom-ref": "my-local-b@0.0.0", + "bom-ref": "my-local-b-off@0.0.0", "description": "demo: my-local-b-off - a package with a different name than its dir", "licenses": [ { @@ -100,7 +100,7 @@ } } ], - "purl": "pkg:npm/my-local-b@0.0.0", + "purl": "pkg:npm/my-local-b-off@0.0.0", "properties": [ { "name": "cdx:npm:package:path", @@ -149,11 +149,11 @@ { "ref": "my-local-a@0.0.0", "dependsOn": [ - "my-local-b@0.0.0" + "my-local-b-off@0.0.0" ] }, { - "ref": "my-local-b@0.0.0" + "ref": "my-local-b-off@0.0.0" }, { "ref": "my-noname@0.0.0" diff --git a/demo/local-dependencies/example-results/flat/bom.1.4.xml b/demo/local-dependencies/example-results/flat/bom.1.4.xml index 50ca740c7..c9a0d47e9 100644 --- a/demo/local-dependencies/example-results/flat/bom.1.4.xml +++ b/demo/local-dependencies/example-results/flat/bom.1.4.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 https://github.com/CycloneDX/cyclonedx-node-npm/issues @@ -60,8 +60,8 @@ true - - my-local-b + + my-local-b-off 0.0.0 demo: my-local-b-off - a package with a different name than its dir @@ -69,7 +69,7 @@ Apache-2.0 - pkg:npm/my-local-b@0.0.0 + pkg:npm/my-local-b-off@0.0.0 node_modules/my-local-b-off true @@ -97,9 +97,9 @@ - + - + \ No newline at end of file diff --git a/demo/local-workspaces/example-results/bare/bom.1.2.json b/demo/local-workspaces/example-results/bare/bom.1.2.json index cb11b0fbd..8ee5954f2 100644 --- a/demo/local-workspaces/example-results/bare/bom.1.2.json +++ b/demo/local-workspaces/example-results/bare/bom.1.2.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0" + "version": "1.6.1" } ], "component": { diff --git a/demo/local-workspaces/example-results/bare/bom.1.2.xml b/demo/local-workspaces/example-results/bare/bom.1.2.xml index 4395b7967..8133b4dd0 100644 --- a/demo/local-workspaces/example-results/bare/bom.1.2.xml +++ b/demo/local-workspaces/example-results/bare/bom.1.2.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 diff --git a/demo/local-workspaces/example-results/bare/bom.1.3.json b/demo/local-workspaces/example-results/bare/bom.1.3.json index 777d64b00..372b0c81f 100644 --- a/demo/local-workspaces/example-results/bare/bom.1.3.json +++ b/demo/local-workspaces/example-results/bare/bom.1.3.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0" + "version": "1.6.1" } ], "component": { diff --git a/demo/local-workspaces/example-results/bare/bom.1.3.xml b/demo/local-workspaces/example-results/bare/bom.1.3.xml index ecb1a4be4..b9babb89d 100644 --- a/demo/local-workspaces/example-results/bare/bom.1.3.xml +++ b/demo/local-workspaces/example-results/bare/bom.1.3.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 diff --git a/demo/local-workspaces/example-results/bare/bom.1.4.json b/demo/local-workspaces/example-results/bare/bom.1.4.json index 506be344b..6e12b186d 100644 --- a/demo/local-workspaces/example-results/bare/bom.1.4.json +++ b/demo/local-workspaces/example-results/bare/bom.1.4.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0", + "version": "1.6.1", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/local-workspaces/example-results/bare/bom.1.4.xml b/demo/local-workspaces/example-results/bare/bom.1.4.xml index 9c402f317..a6db6301a 100644 --- a/demo/local-workspaces/example-results/bare/bom.1.4.xml +++ b/demo/local-workspaces/example-results/bare/bom.1.4.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/local-workspaces/example-results/flat/bom.1.2.json b/demo/local-workspaces/example-results/flat/bom.1.2.json index cb11b0fbd..8ee5954f2 100644 --- a/demo/local-workspaces/example-results/flat/bom.1.2.json +++ b/demo/local-workspaces/example-results/flat/bom.1.2.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0" + "version": "1.6.1" } ], "component": { diff --git a/demo/local-workspaces/example-results/flat/bom.1.2.xml b/demo/local-workspaces/example-results/flat/bom.1.2.xml index 4395b7967..8133b4dd0 100644 --- a/demo/local-workspaces/example-results/flat/bom.1.2.xml +++ b/demo/local-workspaces/example-results/flat/bom.1.2.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 diff --git a/demo/local-workspaces/example-results/flat/bom.1.3.json b/demo/local-workspaces/example-results/flat/bom.1.3.json index 777d64b00..372b0c81f 100644 --- a/demo/local-workspaces/example-results/flat/bom.1.3.json +++ b/demo/local-workspaces/example-results/flat/bom.1.3.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0" + "version": "1.6.1" } ], "component": { diff --git a/demo/local-workspaces/example-results/flat/bom.1.3.xml b/demo/local-workspaces/example-results/flat/bom.1.3.xml index ecb1a4be4..b9babb89d 100644 --- a/demo/local-workspaces/example-results/flat/bom.1.3.xml +++ b/demo/local-workspaces/example-results/flat/bom.1.3.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 diff --git a/demo/local-workspaces/example-results/flat/bom.1.4.json b/demo/local-workspaces/example-results/flat/bom.1.4.json index 506be344b..6e12b186d 100644 --- a/demo/local-workspaces/example-results/flat/bom.1.4.json +++ b/demo/local-workspaces/example-results/flat/bom.1.4.json @@ -8,7 +8,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.6.0", + "version": "1.6.1", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/local-workspaces/example-results/flat/bom.1.4.xml b/demo/local-workspaces/example-results/flat/bom.1.4.xml index 9c402f317..a6db6301a 100644 --- a/demo/local-workspaces/example-results/flat/bom.1.4.xml +++ b/demo/local-workspaces/example-results/flat/bom.1.4.xml @@ -5,7 +5,7 @@ @cyclonedx cyclonedx-npm - 1.6.0 + 1.6.1 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/src/builders.ts b/src/builders.ts index 4c06675e3..8fb1121d4 100644 --- a/src/builders.ts +++ b/src/builders.ts @@ -225,6 +225,7 @@ export class BomBuilder { } if (!this.reproducible) { + bom.serialNumber = this.makeRandomSerialNumber() bom.metadata.timestamp = new Date() } @@ -476,6 +477,13 @@ export class BomBuilder { } } } + + private makeRandomSerialNumber (): string { + const r = [0, 1, 2, 3, 4, 5, 6, 7].map( + () => Math.round(Math.random() * 65536).toString(16).padStart(4, '0') + ) + return `urn:uuid:${r[0]}${r[1]}-${r[2]}-${r[3]}-${r[4]}-${r[5]}${r[6]}${r[7]}` + } } class DummyComponent extends Models.Component {